last executing test programs: 3m0.329618805s ago: executing program 32 (id=494): syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000180), 0xffffffffffffffff) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket(0x1e, 0x0, 0x9) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000100), r0) sendmsg$auto_ETHTOOL_MSG_PSE_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)={0x34, r1, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@ETHTOOL_A_PSE_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_PHY_INDEX={0x8, 0x4, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x400c0c4) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) mount$auto(0x0, &(0x7f00000000c0)='.\x00', 0x0, 0x144000, 0x0) r2 = gettid() open(&(0x7f0000000080)='./file0\x00', 0x581000, 0x0) kill$auto(r2, 0x11) prctl$auto(0x3e, 0x1, r2, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x48a22, 0x0) sendto$auto(0xffffffffffffffff, 0x0, 0x4, 0xfffffffe, &(0x7f0000000000)=@generic={0xa, "e208004002de00"}, 0x1c) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x163340, 0x6a) socket(0x2, 0x80802, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) connect$auto(0x3, &(0x7f0000000140)=@in={0x2, 0x4e32, @rand_addr=0x64010101}, 0x51) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_LISTENER_SET(r3, &(0x7f0000005380)={0x0, 0x0, &(0x7f0000005340)={&(0x7f0000000180)={0x14, r4, 0x1, 0x870bd2b, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0xc000}, 0x20000000) mmap$auto(0x0, 0x202000c, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) 2m40.849843834s ago: executing program 1 (id=681): r0 = socket(0x2, 0x1, 0x0) setsockopt$auto_SO_RCVBUFFORCE(r0, 0x6, 0x21, 0x0, 0x9) bind$auto(r0, 0x0, 0xa) connect$auto(0x3, 0x0, 0x54) (async) connect$auto(0x3, &(0x7f0000000240)=@rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x8}, 0x50) (async) close_range$auto(0x2, 0x8, 0x0) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/fs/ext4/sda1/last_trim_minblks\x00', 0x2400, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) connect$auto(0x3, 0x0, 0x51) (async, rerun: 64) r1 = socket(0xf, 0x3, 0x2) open(&(0x7f0000000180)='./bus\x00', 0x14d27e, 0x70) (async) socket(0x2, 0x1, 0x0) r2 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000240)='/dev/video37\x00', 0x8a240, 0x0) ioctl$auto(r2, 0x5646, r2) read$auto_v4l2_fops_v4l2_dev(r2, &(0x7f0000000280)=""/40, 0x28) (async) socket(0x1e, 0x1, 0x0) socket(0x11, 0x2, 0x300) (async) mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000) r3 = socket(0x11, 0x2, 0x40000e) (async, rerun: 64) capset$auto(0x0, &(0x7f0000000000)={0xfffffffe, 0x41, 0x4a}) (rerun: 64) sendmmsg$auto(r3, &(0x7f00000001c0)={{&(0x7f0000000000), 0x5aa, 0x0, 0x30, 0x0, 0x9, 0x8}, 0x5}, 0x20000002, 0x100) fallocate$auto(0x8000000000000003, 0x0, 0xd, 0x9) (async) r4 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000040), r1) sendmsg$auto_L2TP_CMD_NOOP(r1, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="7400f7ff", @ANYRES16=r4, @ANYBLOB="000327bd7000fedbdf250000000014001f000000000000000000000000000000000105000600100000000800110002000000060001000800000006001d00fdff000006000e0004000000060001000600000014002000fc0100000000000000000000000000010800090001000000"], 0x74}, 0x1, 0x0, 0x0, 0x20008000}, 0x4000000) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20000010}, 0xc0) (async) socket(0x2, 0x80002, 0x73) mmap$auto(0x0, 0x10, 0x7f, 0xeb1, 0x401, 0x8000) (async, rerun: 64) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @local}, 0x6a) (async, rerun: 64) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) (async, rerun: 64) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x33a00, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x6, 0x0) (rerun: 64) 2m40.405919133s ago: executing program 1 (id=686): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000e40)='/sys/devices/pci0000:00/0000:00:01.3/config\x00', 0x0, 0x0) pread64$auto(r1, &(0x7f0000000380)='/dev/tty0\x00W\xdb\xf8n\x90Q\x9a,\xfe\xe7y.\xd6\xbb\xcb\xeda\x92\x96\xa9\xda\b\xbd\xc2\x12\xe7\x91-\xe4\xfb\xfdh\xee\t\x00\x00\x00\x00\x00\x00\x00\xa5\xf3v\xfb\\\xd0\x97I\xa6;\xb8\xc8\x19\xaa\xfc-\xad\xce\xeayj\xc2\x94\x181I\xd2!\xb1,0\xe8[\x84\xd2\x9b\xe7\xb6\xcf\x7fLn\xbb;=q^\xcc\x93\x17J\xf2v\xcd#\xd5\x98F\xcb\xf6&y]\xea\xfa\xb9\xaf', 0x4000000000000003, 0x9) syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000240), r0) mmap$auto(0x0, 0xe983, 0xa4, 0xeb1, 0xffffffffffffffff, 0x800007ffd) syslog$auto(0x3, &(0x7f0000000080)='..\x00k\xac\x8c\x1d\x0e\x98\x80\xd2\xaf\xa1\xf2\x1e\xe1R1\xa2\x8e\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\xa6\xf4#+\xfa\xd7\x01\xb9j<\v\xf47\n\xa7\xd2\x8b\x11e1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\x84q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa24X@\xadD\xf8\x9d\xf3 \xd2]\xc4\x13G\x1d\x04!\xc1\xeb.e$\xfb\xa3KU\xcf\xc1\x7fFD\x99\xf5v\v\x9dS\xc11P\xa3\xe9\xb0SqL\x85\xea\xb2\x9cY\x83.I\xca\x92\x1c\xc4\x13CV=\x92\x17c\x87iOt\x14On\x15=\v\xf0 \xc5\x8b~\xd6\xd4\xc7\xa3a\x1c\x06\x17\xb3\x88\x8c\xf1L\xba\x89a\xfd\xa5\xc6\x7fU\x00\xe5\x9b', 0x5) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)) fchdir$auto(r2) shmat$auto(0x0, &(0x7f0000000000)='\x9a\x1e2\x8e\xe3\xb95\x98F\xf8Q\x01\x00\x93^', 0xfff) mkdir$auto(&(0x7f0000000040)='./file1\x00', 0x2) socketpair$auto(0x5, 0x8003, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0xfffd, 0x8000, 0x0) r3 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snd/controlC0\x00', 0x414000, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r3, 0xc0045516, &(0x7f00000001c0)=0x6) unshare$auto(0x40000080) socket(0x1e, 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000001d00), 0xffffffffffffffff) sendmsg$auto_NBD_CMD_CONNECT(r4, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f0000000300)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010025bd7000fddbdf25010000000c00078008000180040001800c000200060000000000000040a38d42b9ed897ff9d6a9c4494db8164147e89073d74a7e31a2e00bd56d8c35a1b4b2933c78d0f4532fc11c8b22cacb11cf8c69400a"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x8880) lsm_set_self_attr$auto(0x1, &(0x7f0000000280)={0x68, 0x8, 0x80, 0x3f, "9d2e70ee926d5d0e7ce68122b59d02a18fe6a8b63d9e3a6ae222f831a71336590edd51b4b032e82e05f312be860cfde00364064ef3f35f68406e8a29c76765"}, 0x80, 0x0) r6 = openat$auto_cpuid_fops_cpuid(0xffffffffffffff9c, &(0x7f0000000500)='/dev/cpu/0/cpuid\x00', 0x101500, 0x0) readv$auto(r6, &(0x7f00000000c0)={0x0, 0x200}, 0x6) r7 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x101001, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r7, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x2020009, 0x8000000003, 0xeb1, 0xfffffffffffffffa, 0x8000) r8 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv6/conf/bond_slave_1/disable_policy\x00', 0x6000, 0x0) sendfile$auto(r8, 0xffffffffffffffff, 0x0, 0x48) getdents$auto(0xffffffffffffffff, 0x0, 0xfff) 2m39.449536317s ago: executing program 1 (id=689): mmap$auto(0x0, 0x2020009, 0x7, 0xeb1, 0xfffffffffffffffa, 0x8000) writev$auto(0x1, &(0x7f0000000100)={0x0, 0x400000000000fdef}, 0x1) pread64$auto(0xffffffffffffffff, 0x0, 0x7fc, 0x400) openat$auto_tracing_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/tracing/trace\x00', 0x600, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x74c) unshare$auto(0x40000080) mmap$auto(0x0, 0x400008, 0xe4, 0x9b72, 0x2, 0x400) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) madvise$auto(0x0, 0xffffffffffff0001, 0x15) socket(0xa, 0x2, 0x88) capset$auto(0x0, 0x0) sendmmsg$auto(0xffffffffffffffff, 0x0, 0x800, 0x100) unshare$auto(0x40000080) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$auto_MACSEC_CMD_UPD_RXSC(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x1024, r1, 0x201, 0x70bd2c, 0x25dfdbfd, {}, [@MACSEC_ATTR_SA_CONFIG={0x1008, 0x3, 0x0, 0x1, [@nested={0x1004, 0x10d, 0x0, 0x1, [@generic="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"]}]}, @MACSEC_ATTR_IFINDEX={0x8}]}, 0x1037}, 0x1, 0x1000000, 0x0, 0x20004054}, 0x480b0) 2m38.247539013s ago: executing program 1 (id=695): r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0xaa102, 0x0) (async, rerun: 64) r1 = openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, 0x0, 0xc0000, 0x0) (async, rerun: 64) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000) (async) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (async) r3 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f00000022c0)='/dev/mtd0\x00', 0x80000, 0x0) ioctl$auto_MEMREADOOB64(r3, 0xc0184d16, &(0x7f0000002300)={0xffffffffffffff5c, 0x0, 0x309, 0x7}) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async, rerun: 64) select$auto(0x7, 0x0, 0x0, 0x0, 0x0) (rerun: 64) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) (async) select$auto(0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async, rerun: 64) madvise$auto(0x0, 0x200007, 0x19) (rerun: 64) openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, 0x0, 0x50b41, 0x0) (async) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r4 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/015/001\x00', 0xa901, 0x0) ioctl$auto(r4, 0x4004550c, r4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) (async) mlock$auto(0xfbea, 0x7fffffffffffffff) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) madvise$auto(0x0, 0x22, 0xa) (async, rerun: 32) move_pages$auto(0x0, 0x1002, 0x0, 0x0, 0x0, 0x2) (async, rerun: 32) madvise$auto(0x0, 0x2003f0, 0x11) madvise$auto(0x1, 0x1000, 0x10000) personality$auto(0xfffffffc) (async) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) (async) statx$auto(r0, 0x0, 0x9, 0x5, &(0x7f0000000540)={0x5, 0x101, 0x0, 0x8b, 0xee00, 0x0, 0x4, 0xbd49, 0x8, 0x2, 0x100, 0x4, {0xffffffffffffffb1, 0xfffffffc}, {0x80000001, 0x2}, {0x100000000, 0x3}, {0xe}, 0x9, 0x4, 0xbf, 0x0, 0x9, 0x3, 0x2, 0x3, 0x481000, 0xfffffffe, 0x3, 0x6, [0x0, 0x2, 0x91, 0xb, 0x3, 0x2, 0xcd1, 0x3d7d, 0x2]}) (async) close_range$auto(r1, r2, 0x4) (async) bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0x5, 0xb8, 0x10, 0x404, 0x4, 0xffffffffffffffff, 0xa, "2af051b26b658a20d8dc6b36c83ce63f", 0x0, 0xffffffffffffffff, 0x5, 0x7, 0x7, 0x280, r2}, 0x400f) 2m37.25413319s ago: executing program 1 (id=698): r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r1 = socket(0x2, 0xa, 0x1) r2 = bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_4={0x1f, r1, 0x10000}, 0x10) mmap$auto(0x0, 0x2009, 0xfffffffffffffff9, 0x8000200008011, r2, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_rfkill_fops_core(0xffffffffffffff9c, &(0x7f0000000000), 0xa480, 0x0) readv$auto(0x3, &(0x7f0000000280)={0x0, 0xf7}, 0x87) mmap$auto(0x0, 0x10, 0xdf, 0xeb2, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/bus/netdevsim/new_device\x00', 0x149b01, 0x0) r4 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000300)='nfsd\x00~T\x93Q\x92-|\x1ei=\'8&\x13~\xd9t\xec\v\xc3\xfd\x8b\x1a\xd0wWXf\x01\x00\x00\x00\x9e:\x88\x9ej\x1aYAW\xa5a\x13\x9c\xae\x17\x7fob\xde\xb3\\\x94\xfal\xf2Y\xfd+\xf2\xf8\x88\xc4\xb8fI\xde6#mP\xe7\x85\'\x1b\x04\xcd\x1fW\x88T\xe9\x1e\xb7\xa20\t\x17\xc16\f\x05?-\xb2\x91\x1f\x8b}\n\xd7~\xdd\xb6\xee\xf1 \x9d\xd8\xd2kt}\xe3\xe4Q\xc4\x81\x11\xc0,\x89\xa5)\xf0y4\xb6\x9e\xf0h\x7f\x04\x91\x92|b\xe9\xcd\x10\x92\xe2\x03Op\x14Fe\xb6\x11\x9c\xeb\xbe\x10\x8e\x10J\xe5\xe4X+\x94\xe4rJ\xf1\xa6\x86\xb7QX\xae\xf5\x8e3\x80\xc3E\xc13\xc9#t*\xfeD\xf6\xff\xfel\x0e\xf2p8\xaf\xd6\x1b\xbf\xe1\xe9\xf7\xf6U\x80\t`\xd6U\xda\x10!\x10\x05\xacq\xec<\x1c\xdeOL\x89\x94\xb2,Z \x13\xb1\x86\xbb\x1c\xe3,P\xbb\x9e\x91)\x96~\xc1\x12\x06\x16\x99\xcc\x84\xe3\xde\xbb^H\xb2\xff\x9ag\xc0 \xd0e`\xecJ', 0x800, 0x0) r5 = openat$auto_virtual_ncidev_fops_virtual_ncidev(0xffffffffffffff9c, &(0x7f0000000040), 0x200000, 0x0) fcntl$auto_F_GETSIG(r5, 0xb, 0x8) mount$auto(0x0, &(0x7f0000000000)='}[,&*}\x00', 0x0, 0x3375, 0x0) r6 = socket(0xa, 0x3, 0x5) setsockopt$auto(0x3, 0x29, 0x46, 0x0, 0x808) sendmmsg$auto(r6, &(0x7f0000000180)={{&(0x7f0000000040), 0xc8b, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x8000005}, 0x3b8b, 0xa) read$auto(r4, 0x0, 0x1f40) writev$auto(r3, &(0x7f0000000200)={0x0, 0x9}, 0x7) 2m36.927224733s ago: executing program 1 (id=700): sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x4002000}, 0x40010) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x1d, 0x2, 0x7) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'xfrm0\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_RINGS_GET(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000140)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2], 0x20}, 0x1, 0x0, 0x0, 0x8004805}, 0x20004804) 2m32.070323509s ago: executing program 4 (id=720): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/sound/ctl-led/speaker/mode\x00', 0x2a001, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/scsi/scsi\x00', 0x20400, 0x0) write$auto(r0, &(0x7f0000000040)='tKRr\xec\xea\x000\x00\\\xa0\x04|\x03', 0x81) (async) write$auto(r0, &(0x7f0000000040)='tKRr\xec\xea\x000\x00\\\xa0\x04|\x03', 0x81) 2m31.980370444s ago: executing program 4 (id=721): r0 = openat$auto_proc_pid_attr_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/apparmor/current\x00', 0x400, 0x0) r1 = userfaultfd$auto(0x1) statx$auto(r1, 0x0, 0x1000, 0x8, 0x0) ioctl$auto_TIOCGDEV2(r1, 0x80045432, &(0x7f0000000000)=0x1) read$auto_ctl_device_fops_user(r0, 0x0, 0x0) 2m31.947807505s ago: executing program 4 (id=722): openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$auto(0x3, 0x541b, 0xfffffffffffff4e0) write$auto(0xffffffffffffffff, 0x0, 0x81) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000080)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x4000000000007, 0xa505}, 0x800}, 0x4, 0x4008) socket(0x29, 0x2, 0x0) r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB="5de1"], 0x1ac}}, 0x40000) recvmmsg$auto(r0, &(0x7f0000000040)={{0x0, 0x5, 0x0, 0x5, 0x0, 0x200002, 0x13}, 0x803}, 0xfffffff9, 0x10, 0x0) setresuid$auto(0xf5, 0x8000, 0x67) r1 = openat$auto_safesetid_uid_file_fops_securityfs(0xffffffffffffff9c, 0x0, 0x2c4800, 0x0) bpf$auto(0x5, &(0x7f0000000300)=@bpf_attr_3={0x6, 0x24, 0xf, 0x63, 0x400, 0x80, 0x9, 0x80f0c8, 0x20, "38c1d5cbcb9f6b5e511f0cd8ed068f65", 0x0, 0x113e33f2, 0xffffffffffffffff, 0xe4, 0x6, 0x5, 0x6, 0x5, 0x0, 0x3, @attach_btf_obj_fd=r1, 0x6, 0xffff, 0x8, 0x0, 0xfffffffe}, 0x47) mmap$auto(0x0, 0x2000d, 0x7, 0xeb1, 0x404, 0x10008000) r2 = semctl$auto_GETPID(0x9483, 0x0, 0xb, 0x0) r3 = clone$auto(0x0, 0x5, &(0x7f00000000c0)=0x8, &(0x7f00000001c0)=0x3, 0x3ff) r4 = openat$auto_sync_info_debugfs_fops_(0xffffffffffffff9c, &(0x7f0000000200), 0xc880, 0x0) kcmp$auto_KCMP_EPOLL_TFD(r2, r3, 0x7, r4, 0x6) socket(0x2, 0x3, 0xa) mmap$auto(0xf000, 0x8, 0x1000000003, 0x9b72, 0x2, 0x8000) r5 = openat$auto_proc_mountstats_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) pread64$auto(r5, &(0x7f0000000040)='\x8d]\x00', 0x80000000, 0x5) read$auto(0xffffffffffffffff, 0x0, 0x2) ioctl$auto_NS_GET_TGID_IN_PIDNS(0xffffffffffffffff, 0x8004b709, 0x0) migrate_pages$auto(0x0, 0xa, &(0x7f0000000100)=0x5, &(0x7f0000000140)=0x2) syz_clone(0x280, &(0x7f0000000240), 0x0, 0x0, 0x0, 0x0) move_pages$auto(0x0, 0x1002, 0x0, &(0x7f0000001140), 0x0, 0x2) 2m31.676011059s ago: executing program 4 (id=723): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) unlink$auto(0x0) getgroups$auto(0xc5f1, 0x0) socket(0x2, 0x3, 0xa) mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000) r0 = socket(0xa, 0x800, 0xf3) getsockopt$auto(r0, 0x3a, 0x1, 0x0, 0x0) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @loopback}, 0x54) socket(0x2b, 0x1, 0x1) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r1 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f000000c340)='/proc/thread-self/pagemap\x00', 0x8000, 0x0) ioctl$auto_PAGEMAP_SCAN(r1, 0xc0606610, &(0x7f000000c380)={0x60, 0x0, 0x100000, 0x7fffffffefff, 0xfffffffffffffffe, 0x1, 0x6, 0x50b301a, 0x2c, 0x2c, 0x0, 0x2}) epoll_create$auto(0x3e) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/bdi/43:480/min_ratio_fine\x00', 0x2062, 0x0) write$auto(r2, &(0x7f0000000440)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb', 0x98c7) syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_tcp_metrics(&(0x7f0000000c00), r3) sendmsg$auto_TCP_METRICS_CMD_DEL(r3, 0x0, 0x40) prctl$auto(0x16, 0x2, 0x2, 0x4000000d, 0x300) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r4 = socket(0x2, 0x1, 0x0) setsockopt$auto(0x3, 0x6, 0x15, 0x0, 0xfb3) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), r4) socket(0x2, 0x5, 0x0) 2m30.769744865s ago: executing program 4 (id=730): r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r1 = socket(0x2, 0xa, 0x1) r2 = bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_4={0x1f, r1, 0x10000}, 0x10) mmap$auto(0x0, 0x2009, 0xfffffffffffffff9, 0x8000200008011, r2, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_rfkill_fops_core(0xffffffffffffff9c, &(0x7f0000000000), 0xa480, 0x0) readv$auto(0x3, &(0x7f0000000280)={0x0, 0xf7}, 0x87) mmap$auto(0x0, 0x10, 0xdf, 0xeb2, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/bus/netdevsim/new_device\x00', 0x149b01, 0x0) r4 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000300)='nfsd\x00~T\x93Q\x92-|\x1ei=\'8&\x13~\xd9t\xec\v\xc3\xfd\x8b\x1a\xd0wWXf\x01\x00\x00\x00\x9e:\x88\x9ej\x1aYAW\xa5a\x13\x9c\xae\x17\x7fob\xde\xb3\\\x94\xfal\xf2Y\xfd+\xf2\xf8\x88\xc4\xb8fI\xde6#mP\xe7\x85\'\x1b\x04\xcd\x1fW\x88T\xe9\x1e\xb7\xa20\t\x17\xc16\f\x05?-\xb2\x91\x1f\x8b}\n\xd7~\xdd\xb6\xee\xf1 \x9d\xd8\xd2kt}\xe3\xe4Q\xc4\x81\x11\xc0,\x89\xa5)\xf0y4\xb6\x9e\xf0h\x7f\x04\x91\x92|b\xe9\xcd\x10\x92\xe2\x03Op\x14Fe\xb6\x11\x9c\xeb\xbe\x10\x8e\x10J\xe5\xe4X+\x94\xe4rJ\xf1\xa6\x86\xb7QX\xae\xf5\x8e3\x80\xc3E\xc13\xc9#t*\xfeD\xf6\xff\xfel\x0e\xf2p8\xaf\xd6\x1b\xbf\xe1\xe9\xf7\xf6U\x80\t`\xd6U\xda\x10!\x10\x05\xacq\xec<\x1c\xdeOL\x89\x94\xb2,Z \x13\xb1\x86\xbb\x1c\xe3,P\xbb\x9e\x91)\x96~\xc1\x12\x06\x16\x99\xcc\x84\xe3\xde\xbb^H\xb2\xff\x9ag\xc0 \xd0e`\xecJ', 0x800, 0x0) r5 = openat$auto_virtual_ncidev_fops_virtual_ncidev(0xffffffffffffff9c, &(0x7f0000000040), 0x200000, 0x0) fcntl$auto_F_GETSIG(r5, 0xb, 0x8) mount$auto(0x0, &(0x7f0000000000)='}[,&*}\x00', 0x0, 0x3375, 0x0) r6 = socket(0xa, 0x3, 0x5) setsockopt$auto(0x3, 0x29, 0x46, 0x0, 0x808) sendmmsg$auto(r6, &(0x7f0000000180)={{&(0x7f0000000040), 0xc8b, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x8000005}, 0x3b8b, 0xa) read$auto(r4, 0x0, 0x1f40) writev$auto(r3, &(0x7f0000000200)={0x0, 0x9}, 0x7) 2m30.569320758s ago: executing program 4 (id=732): mmap$auto(0x0, 0x8, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_PHY_GET(r0, &(0x7f0000003200)={0x0, 0x0, &(0x7f00000031c0)={&(0x7f0000000000)={0x14, r1, 0x301, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x1000000, 0x0, 0x2404c012}, 0x80) unshare$auto(0x40000080) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) setresuid$auto(0x0, 0x0, 0x0) write$auto(r2, 0x0, 0x100000a3d9) mmap$auto(0xfffffffffffffffd, 0x2020009, 0x9, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) socket(0x11, 0x80003, 0x300) open(0x0, 0x200001, 0xb5d1af1605322dff) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/virtual/block/ram9/diskseq\x00', 0x0, 0x0) read$auto(r4, 0x0, 0x20) writev$auto(r3, &(0x7f0000000200)={0x0, 0x7}, 0x3) openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/config/nvmet/discovery_nqn\x00', 0x189002, 0x0) 2m30.38049494s ago: executing program 2 (id=736): move_pages$auto(0xffffffffffffffff, 0x3, &(0x7f00000000c0)=&(0x7f0000000000)="e186cc626dd516e466e9a199e7d28e3ccf33bc66a003259c3e600795370051b67abd03b0be9fd29ebb404fb5188492dce1461294b38d75ea8ce441e221bd89c288ca0b23331f0a18ba64a338a0500e4073fa18244fb1accf2ec39e87b6348b2e9ca93df24e3c509c1f4b3431efd0bfc965850f85644407a04f08893596a1d712244bf0d8b2c6b444daae43a0c3546d9846fd8cd875f4a127395bd83e7a9efeda367e4cdf6796b6a1fcf8f7df06f16633898d6805", &(0x7f0000000100)=0x8000, &(0x7f0000000140)=0x3803, 0x3e) r0 = openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fuse\x00', 0x2000, 0x0) fcntl$auto_F_SETFL(r0, 0x4, 0x401) prctl$auto(0x23, 0x4000000000000001, 0x2009, 0x0, 0x0) r1 = gettid() epoll_create$auto(0x8001) ptrace$auto_ARCH_SHSTK_STATUS(0x8, r1, 0x2, 0x5005) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card1\x00', 0x123042, 0x0) r2 = openat$auto_ima_measurements_ops_ima_fs(0xffffffffffffff9c, &(0x7f0000001480), 0x400, 0x0) pread64$auto(r2, 0x0, 0x101, 0x800005c2b) waitid$auto_P_ALL(0x0, 0xb62, &(0x7f0000000180)={@siginfo_0_0={0xfffffffb, 0x80, 0x80000000, @_timer={r1, 0xb, @sival_int=0xd, 0x80}}}, 0x8, &(0x7f0000000200)={{0x6, 0x8}, {0x2, 0xa164}, 0xc318, 0x1ff, 0x0, 0x6, 0x100, 0x3, 0x4fc8b604, 0x5, 0x77c68ca3, 0x3e9, 0x7fff, 0x5207, 0xf9d, 0x2}) 2m30.349088851s ago: executing program 2 (id=737): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2b, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) (async) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) connect$auto(r0, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x3c}}, 0x54) (async) connect$auto(r0, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x3c}}, 0x54) madvise$auto(0x0, 0xffffffffffff0001, 0x15) (async) madvise$auto(0x0, 0xffffffffffff0001, 0x15) syz_genetlink_get_family_id$auto_mac80211_hwsim(0x0, 0xffffffffffffffff) unshare$auto(0x40000080) (async) unshare$auto(0x40000080) setsockopt$auto(0x3, 0x1, 0x21, 0x0, 0x9) write$auto(0x3, 0x0, 0xfffffdef) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) connect$auto(0x3, 0x0, 0x55) openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fb0\x00', 0x9b35a5b878ef4cd9, 0x0) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) (async) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) select$auto(0x8, 0x0, 0x0, &(0x7f00000002c0)={[0x2, 0x7, 0xd, 0x2, 0x948b, 0x3, 0x15f4da0a, 0x1, 0x3, 0x62, 0x7fffffff, 0x7, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) getpid() (async) r1 = getpid() r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x60801, 0x0) ioctl$auto_TIOCCONS2(r2, 0x541d, 0x0) process_vm_readv$auto(r1, &(0x7f0000000000)={0x0, 0xfff}, 0x40000000001, &(0x7f0000000180)={&(0x7f0000000280), 0x40000000001243}, 0xa, 0x0) ioctl$auto(0x3, 0x400454ca, 0x38) write$auto(0x3, 0x0, 0xffd8) mmap$auto(0x0, 0x40009, 0xdd, 0x9b72, 0x7, 0x28000) 2m29.421741802s ago: executing program 2 (id=738): openat$auto_proc_pid_attr_operations_base(0xffffffffffffff9c, &(0x7f00000018c0)='/proc/self/attr/apparmor/current\x00', 0x400, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x948f, 0x803, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x7, 0x1, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r2 = openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/usb/usbmon/9t\x00', 0xa00, 0x0) close_range$auto(0x2, 0x8, 0x0) r3 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000004400)='/dev/dsp1\x00', 0x1, 0x0) ioctl$auto_SNDCTL_DSP_GETTRIGGER(r3, 0x80045010, &(0x7f0000004440)) mmap$auto(0x0, 0x9, 0xdf, 0x9b75, r1, 0x8000) r4 = open_by_handle_at$auto(r1, &(0x7f00000002c0)={0x1a, 0x136a, "8f42b1077e737d4629d7867bca48102625b1c2c21fa15504a19b"}, 0x7d) setsockopt$auto(r4, 0x1, 0x1021, 0x0, 0xd) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) geteuid() sendmsg$auto_OVS_CT_LIMIT_CMD_GET(r1, &(0x7f0000001ac0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001a80)={&(0x7f0000000300)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4040840}, 0x200000c0) mmap$auto(0x100000000, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0xa, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mremap$auto(0x1ff000, 0x5, 0x843, 0x7, 0xfffff000) msgctl$auto(0x7, 0xa3, &(0x7f0000000240)={{0x8, 0xee00, 0xee01, 0x5, 0xa, 0x6, 0xfe01}, 0x0, 0x0, 0x1, 0xa, 0x400000000006, 0x31f4, 0x51c, 0x3, 0xfffd, 0x3, @inferred=0xffffffffffffffff, @raw=0x8}) r5 = getpid() process_vm_readv$auto(r5, &(0x7f0000000000)={0x0, 0x1002}, 0x1, &(0x7f0000000280)={0x0, 0x401}, 0x6, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/devices/platform/vhci_hcd.0/usbip_debug\x00', 0x8002, 0x0) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0) r6 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/mm/transparent_hugepage/hugepages-2048kB/enabled\x00', 0x22b42, 0x0) sendfile$auto(r8, r8, 0x0, 0x6) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000001b00)=ANY=[@ANYBLOB="20010000", @ANYRES16=r6, @ANYBLOB="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"], 0x120}, 0x1, 0x68, 0x0, 0x24000000}, 0x140) write$auto(r2, &(0x7f00000001c0)='[\x00', 0x9) 2m29.290700101s ago: executing program 2 (id=739): r0 = openat$auto_proc_pid_attr_operations_base(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/attr/current\x00', 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) ioctl$auto(0x4000000000000c8, 0x800454cf, 0x3) r1 = socket(0x11, 0x80003, 0x300) setsockopt$auto(r1, 0x107, 0x12, 0x0, 0x4) r2 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000000000), 0xffffffffffffffff) r3 = socket(0x10, 0x2, 0x0) sendmsg$auto_NBD_CMD_DISCONNECT(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000013c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="36d23ffe84d433c62969a70700000075aab1ec82b87684667bc8034009109f4dc000"/45, @ANYRES16=r2, @ANYBLOB="010027bd7000fedbdf25020000000c000500010000000000000005000a00ef000000"], 0x28}, 0x1, 0x0, 0x0, 0x4c0d4}, 0xc800) socket(0x11, 0x80003, 0x300) openat$auto_evm_xattr_ops_evm_secfs(0xffffffffffffff9c, 0x0, 0x2, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) io_uring_setup$auto(0x406, 0x0) mmap$auto(0x0, 0x9, 0xffb, 0x8000000008011, 0x3, 0x0) getrandom$auto(0x0, 0x6000000, 0x3) kexec_load$auto(0x5, 0x2, &(0x7f0000000040)={@kbuf=0x0, 0x2aa7, 0x6c0000c000, 0xc000}, 0x4) io_uring_enter$auto(0x3, 0xa84, 0x80000001, 0xa, 0x0, 0x46) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) sysfs$auto(0x2, 0x2, 0x9) close_range$auto(0x2, 0x8000, 0x0) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0xe, 0x2, 0x6, 0x5, 0x8, 0xffffffffffffffff, [], {0xd74c, 0x6, 0x2, 0x29f, 0x100, 0x7f, 0x101, 0x6, 0x2}, {0xff, 0x1, 0x10001, 0x7, 0x1, 0x40, 0x76c5, 0x400008, 0x100000005}}) io_uring_enter$auto(0xffffffffffffffff, 0x9, 0x820e, 0x9, 0x0, 0x18) pwritev$auto(0x3, &(0x7f0000001000)={0x0, 0x8}, 0x5, 0x3, 0x9) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video48\x00', 0x18a041, 0x0) read$auto_ctl_device_fops_user(r0, 0x0, 0x0) r4 = ioctl$auto_TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000000)=0x1) r5 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop12\x00', 0x8200, 0x0) fadvise64$auto(r5, 0xffffffffffffff80, 0x400000000000006, 0x5) getsockopt$auto_SO_COOKIE(r4, 0x3c5, 0x39, &(0x7f00000000c0)='/\xc8\x80procAs\x81\x00\x00\x00\x00\x00\x00\x00/apparmt\xa9', &(0x7f0000000040)=0xd4) 2m29.153734707s ago: executing program 2 (id=740): rseq$auto(0x0, 0xffffff80, 0x0, 0x5) r0 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/radio6\x00', 0x8a240, 0x0) ioctl$auto(r0, 0x5646, r0) r1 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, 0x0, 0x169000, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x40005, 0xe2, 0x9b7f, 0x7, 0x28000) r2 = socketpair$auto(0x80000000, 0x1, 0x8000000000000000, 0x0) newfstatat$auto(r2, 0x0, 0x0, 0xfffffffe) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x8) ioctl$auto(r1, 0xc040564a, r1) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_REMOVE(0xffffffffffffffff, 0xc0405519, 0x0) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nbd0\x00', 0x0, 0x0) ioctl$auto(r3, 0xab04, 0xffffffffffffffff) 2m29.056764475s ago: executing program 2 (id=741): r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r1 = socket(0x2, 0xa, 0x1) r2 = bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_4={0x1f, r1, 0x10000}, 0x10) mmap$auto(0x0, 0x2009, 0xfffffffffffffff9, 0x8000200008011, r2, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_rfkill_fops_core(0xffffffffffffff9c, &(0x7f0000000000), 0xa480, 0x0) readv$auto(0x3, &(0x7f0000000280)={0x0, 0xf7}, 0x87) mmap$auto(0x0, 0x10, 0xdf, 0xeb2, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/bus/netdevsim/new_device\x00', 0x149b01, 0x0) r4 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000300)='nfsd\x00~T\x93Q\x92-|\x1ei=\'8&\x13~\xd9t\xec\v\xc3\xfd\x8b\x1a\xd0wWXf\x01\x00\x00\x00\x9e:\x88\x9ej\x1aYAW\xa5a\x13\x9c\xae\x17\x7fob\xde\xb3\\\x94\xfal\xf2Y\xfd+\xf2\xf8\x88\xc4\xb8fI\xde6#mP\xe7\x85\'\x1b\x04\xcd\x1fW\x88T\xe9\x1e\xb7\xa20\t\x17\xc16\f\x05?-\xb2\x91\x1f\x8b}\n\xd7~\xdd\xb6\xee\xf1 \x9d\xd8\xd2kt}\xe3\xe4Q\xc4\x81\x11\xc0,\x89\xa5)\xf0y4\xb6\x9e\xf0h\x7f\x04\x91\x92|b\xe9\xcd\x10\x92\xe2\x03Op\x14Fe\xb6\x11\x9c\xeb\xbe\x10\x8e\x10J\xe5\xe4X+\x94\xe4rJ\xf1\xa6\x86\xb7QX\xae\xf5\x8e3\x80\xc3E\xc13\xc9#t*\xfeD\xf6\xff\xfel\x0e\xf2p8\xaf\xd6\x1b\xbf\xe1\xe9\xf7\xf6U\x80\t`\xd6U\xda\x10!\x10\x05\xacq\xec<\x1c\xdeOL\x89\x94\xb2,Z \x13\xb1\x86\xbb\x1c\xe3,P\xbb\x9e\x91)\x96~\xc1\x12\x06\x16\x99\xcc\x84\xe3\xde\xbb^H\xb2\xff\x9ag\xc0 \xd0e`\xecJ', 0x800, 0x0) r5 = openat$auto_virtual_ncidev_fops_virtual_ncidev(0xffffffffffffff9c, &(0x7f0000000040), 0x200000, 0x0) fcntl$auto_F_GETSIG(r5, 0xb, 0x8) mount$auto(0x0, &(0x7f0000000000)='}[,&*}\x00', 0x0, 0x3375, 0x0) r6 = socket(0xa, 0x3, 0x5) setsockopt$auto(0x3, 0x29, 0x46, 0x0, 0x808) sendmmsg$auto(r6, &(0x7f0000000180)={{&(0x7f0000000040), 0xc8b, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x8000005}, 0x3b8b, 0xa) read$auto(r4, 0x0, 0x1f40) writev$auto(r3, &(0x7f0000000200)={0x0, 0x9}, 0x7) 2m24.847510358s ago: executing program 33 (id=687): socket(0xa, 0x801, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) mknod$auto(&(0x7f0000000180)=':,\x00', 0xcb, 0x9) execve$auto(&(0x7f0000000000)=':,\x00', 0x0, 0x0) socket(0x10, 0x2, 0x4) mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000) r0 = socket(0x1e, 0x4, 0x0) get_robust_list$auto(0x0, 0x0, 0x0) setsockopt$auto(r0, 0x10f, 0x87, 0x0, 0x14) read$auto(0x4, 0x0, 0xfdef) r1 = socket(0x1e, 0x4, 0x0) get_robust_list$auto(0x0, 0x0, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/virtual/bdi/7:8/read_ahead_kb\x00', 0x82942, 0x0) sendfile$auto(r2, r2, 0x0, 0x200) read$auto(0xffffffffffffffff, 0x0, 0x9) setsockopt$auto(r1, 0x10f, 0x87, 0x0, 0x14) syz_genetlink_get_family_id$auto_tipcv2(&(0x7f000000c180), 0xffffffffffffffff) ioctl$auto_posix_clock_file_operations_posix_clock(0xffffffffffffffff, 0x40103d0b, 0x0) shmctl$auto_IPC_RMID(0x5, 0x0, &(0x7f0000000200)={{0x6, 0x0, 0x0, 0x6, 0x9, 0xf0, 0x1}, 0xbb1, 0x9, 0xa53, 0x3ff, @raw=0x4, @inferred, 0xfffe, 0x0, &(0x7f0000000000)="12b1e86936717f9a59c2080fb32e676a04", 0x0}) mknod$auto(&(0x7f0000000180)=':,\x00', 0xcb, 0xfffffffa) execve$auto(&(0x7f0000000000)=':,\x00', 0x0, 0x0) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) r3 = memfd_create$auto(0x0, 0x12) fcntl$auto(0xff80000000000000, 0x409, 0x13) fallocate$auto(r3, 0x3, 0x2, 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000002040)={'bond_slave_1\x00'}) 2m21.850087282s ago: executing program 34 (id=700): sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x4002000}, 0x40010) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x1d, 0x2, 0x7) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'xfrm0\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_RINGS_GET(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000140)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2], 0x20}, 0x1, 0x0, 0x0, 0x8004805}, 0x20004804) 2m15.479090878s ago: executing program 35 (id=732): mmap$auto(0x0, 0x8, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_PHY_GET(r0, &(0x7f0000003200)={0x0, 0x0, &(0x7f00000031c0)={&(0x7f0000000000)={0x14, r1, 0x301, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x1000000, 0x0, 0x2404c012}, 0x80) unshare$auto(0x40000080) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) setresuid$auto(0x0, 0x0, 0x0) write$auto(r2, 0x0, 0x100000a3d9) mmap$auto(0xfffffffffffffffd, 0x2020009, 0x9, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) socket(0x11, 0x80003, 0x300) open(0x0, 0x200001, 0xb5d1af1605322dff) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/virtual/block/ram9/diskseq\x00', 0x0, 0x0) read$auto(r4, 0x0, 0x20) writev$auto(r3, &(0x7f0000000200)={0x0, 0x7}, 0x3) openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/config/nvmet/discovery_nqn\x00', 0x189002, 0x0) 2m13.825072157s ago: executing program 36 (id=741): r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r1 = socket(0x2, 0xa, 0x1) r2 = bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_4={0x1f, r1, 0x10000}, 0x10) mmap$auto(0x0, 0x2009, 0xfffffffffffffff9, 0x8000200008011, r2, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_rfkill_fops_core(0xffffffffffffff9c, &(0x7f0000000000), 0xa480, 0x0) readv$auto(0x3, &(0x7f0000000280)={0x0, 0xf7}, 0x87) mmap$auto(0x0, 0x10, 0xdf, 0xeb2, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/bus/netdevsim/new_device\x00', 0x149b01, 0x0) r4 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000300)='nfsd\x00~T\x93Q\x92-|\x1ei=\'8&\x13~\xd9t\xec\v\xc3\xfd\x8b\x1a\xd0wWXf\x01\x00\x00\x00\x9e:\x88\x9ej\x1aYAW\xa5a\x13\x9c\xae\x17\x7fob\xde\xb3\\\x94\xfal\xf2Y\xfd+\xf2\xf8\x88\xc4\xb8fI\xde6#mP\xe7\x85\'\x1b\x04\xcd\x1fW\x88T\xe9\x1e\xb7\xa20\t\x17\xc16\f\x05?-\xb2\x91\x1f\x8b}\n\xd7~\xdd\xb6\xee\xf1 \x9d\xd8\xd2kt}\xe3\xe4Q\xc4\x81\x11\xc0,\x89\xa5)\xf0y4\xb6\x9e\xf0h\x7f\x04\x91\x92|b\xe9\xcd\x10\x92\xe2\x03Op\x14Fe\xb6\x11\x9c\xeb\xbe\x10\x8e\x10J\xe5\xe4X+\x94\xe4rJ\xf1\xa6\x86\xb7QX\xae\xf5\x8e3\x80\xc3E\xc13\xc9#t*\xfeD\xf6\xff\xfel\x0e\xf2p8\xaf\xd6\x1b\xbf\xe1\xe9\xf7\xf6U\x80\t`\xd6U\xda\x10!\x10\x05\xacq\xec<\x1c\xdeOL\x89\x94\xb2,Z \x13\xb1\x86\xbb\x1c\xe3,P\xbb\x9e\x91)\x96~\xc1\x12\x06\x16\x99\xcc\x84\xe3\xde\xbb^H\xb2\xff\x9ag\xc0 \xd0e`\xecJ', 0x800, 0x0) r5 = openat$auto_virtual_ncidev_fops_virtual_ncidev(0xffffffffffffff9c, &(0x7f0000000040), 0x200000, 0x0) fcntl$auto_F_GETSIG(r5, 0xb, 0x8) mount$auto(0x0, &(0x7f0000000000)='}[,&*}\x00', 0x0, 0x3375, 0x0) r6 = socket(0xa, 0x3, 0x5) setsockopt$auto(0x3, 0x29, 0x46, 0x0, 0x808) sendmmsg$auto(r6, &(0x7f0000000180)={{&(0x7f0000000040), 0xc8b, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x8000005}, 0x3b8b, 0xa) read$auto(r4, 0x0, 0x1f40) writev$auto(r3, &(0x7f0000000200)={0x0, 0x9}, 0x7) 2m7.972674933s ago: executing program 7 (id=786): close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0x2, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000001d00), 0xffffffffffffffff) sendmsg$auto_NBD_CMD_CONNECT(r0, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100253d7000fddbdf2501000000180007800c00018008000180000000009c8d9708", @ANYRES32=0x0, @ANYBLOB="0c0002"], 0x38}, 0x1, 0xffffffffffff3f00, 0x0, 0x4}, 0x8880) 2m7.242557346s ago: executing program 7 (id=791): rseq$auto(0x0, 0xffffff80, 0x0, 0x5) r0 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/radio6\x00', 0x8a240, 0x0) ioctl$auto(r0, 0x5646, r0) r1 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, 0x0, 0x169000, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x40005, 0xe2, 0x9b7f, 0x7, 0x28000) r2 = socketpair$auto(0x80000000, 0x1, 0x8000000000000000, 0x0) newfstatat$auto(r2, 0x0, 0x0, 0xfffffffe) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x8) ioctl$auto(r1, 0xc040564a, r1) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_REMOVE(0xffffffffffffffff, 0xc0405519, 0x0) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nbd0\x00', 0x0, 0x0) ioctl$auto(r3, 0xab04, 0xffffffffffffffff) 2m6.383388451s ago: executing program 7 (id=794): openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$auto(0x3, 0x541b, 0xfffffffffffff4e0) write$auto(0xffffffffffffffff, 0x0, 0x81) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000080)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x4000000000007, 0xa505}, 0x800}, 0x4, 0x4008) socket(0x29, 0x2, 0x0) r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB="5de1"], 0x1ac}}, 0x40000) recvmmsg$auto(r0, &(0x7f0000000040)={{0x0, 0x5, 0x0, 0x5, 0x0, 0x200002, 0x13}, 0x803}, 0xfffffff9, 0x10, 0x0) setresuid$auto(0xf5, 0x8000, 0x67) r1 = openat$auto_safesetid_uid_file_fops_securityfs(0xffffffffffffff9c, 0x0, 0x2c4800, 0x0) r2 = bpf$auto(0x5, &(0x7f0000000300)=@bpf_attr_3={0x6, 0x24, 0xf, 0x63, 0x400, 0x80, 0x9, 0x80f0c8, 0x20, "38c1d5cbcb9f6b5e511f0cd8ed068f65", 0x0, 0x113e33f2, 0xffffffffffffffff, 0xe4, 0x6, 0x5, 0x6, 0x5, 0x0, 0x3, @attach_btf_obj_fd=r1, 0x6, 0xffff, 0x8, 0x0, 0xfffffffe}, 0x47) mmap$auto(0x0, 0x2000d, 0x7, 0xeb1, 0x404, 0x10008000) r3 = semctl$auto_GETPID(0x9483, 0x0, 0xb, 0x0) r4 = clone$auto(0x0, 0x5, &(0x7f00000000c0)=0x8, &(0x7f00000001c0)=0x3, 0x3ff) r5 = openat$auto_sync_info_debugfs_fops_(0xffffffffffffff9c, &(0x7f0000000200), 0xc880, 0x0) kcmp$auto_KCMP_EPOLL_TFD(r3, r4, 0x7, r5, 0x6) socket(0x2, 0x3, 0xa) mmap$auto(0xf000, 0x8, 0x1000000003, 0x9b72, 0x2, 0x8000) pread64$auto(0xffffffffffffffff, &(0x7f0000000040)='\x8d]\x00', 0x80000000, 0x5) read$auto(0xffffffffffffffff, 0x0, 0x2) read$auto_clk_summary_fops_(r2, &(0x7f00000003c0)=""/198, 0xc6) ioctl$auto_NS_GET_TGID_IN_PIDNS(0xffffffffffffffff, 0x8004b709, 0x0) migrate_pages$auto(0x0, 0xa, &(0x7f0000000100)=0x5, &(0x7f0000000140)=0x2) syz_clone(0x280, &(0x7f0000000240), 0x0, 0x0, 0x0, 0x0) move_pages$auto(0x0, 0x1002, 0x0, &(0x7f0000001140), 0x0, 0x2) 2m4.916872078s ago: executing program 7 (id=798): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x18, r1, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@HWSIM_ATTR_MULTI_RADIO={0x4}]}, 0x18}, 0x1, 0x0, 0x12, 0x8000}, 0x8000) 2m4.345270348s ago: executing program 7 (id=803): openat$auto_proc_pid_attr_operations_base(0xffffffffffffff9c, &(0x7f00000018c0)='/proc/self/attr/apparmor/current\x00', 0x400, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="99214c0403de0c620230b80dc512e45c7e3d6ec461e14673de7092b23d124d3a72c7bbb78203648e9374f4060262c0ac667629b872ffb67192fa7c8df0664124b319a8f2edd5bba49fef94995ed02c81c83d09981ca3e164a086fe2effc2949ab1d17edf92ce0a3ece4c", @ANYRES16=r0, @ANYRES64=0x0], 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) r1 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/driver/nvram\x00', 0x20000, 0x0) pread64$auto(r1, 0x0, 0xb, 0xcfc) r2 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x20881, 0x0) r3 = socket(0xa, 0x1, 0x84) r4 = getsockopt$auto(r3, 0x84, 0x7c, 0x0, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x80502, 0x0) syz_open_procfs$namespace(0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/rpc/nfsd.fh/channel\x00', 0x8f3b7a51b80ebd01, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x130) fallocate$auto(0x8000000000000003, 0x0, 0x9, 0x4cbd5d) chmod$auto(&(0x7f0000000140)='./file0\x00', 0x3ff) write$auto(r2, 0x0, 0x10001) pipe$auto(&(0x7f0000001480)=0xffffffffffffffff) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) getsockopt$auto(0x3, 0x200000000001, 0x2c, 0x0, 0x0) vmsplice$auto(r5, &(0x7f0000000040)={0x0, 0x7ff}, 0xfa, 0x7) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="10002cbd7000fddbdfb203"], 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x10004010) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a0027"], 0x1ac}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) epoll_create$auto(0x21) get_robust_list$auto(0x0, 0x0, 0x0) ioctl$auto(0x3, 0xffffffff40088a01, 0x1) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x0) 2m3.659099738s ago: executing program 7 (id=807): rseq$auto(0x0, 0xffffff80, 0x0, 0x5) r0 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/radio6\x00', 0x8a240, 0x0) ioctl$auto(r0, 0x5646, r0) r1 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, 0x0, 0x169000, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0xfffffffffffffff9, 0x40005, 0xe2, 0x9b7f, 0x7, 0x28000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_VERSION_GET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r3, 0x1, 0x70bd27, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x2000c014}, 0x20008040) r4 = socketpair$auto(0x80000000, 0x1, 0x8000000000000000, 0x0) newfstatat$auto(r4, 0x0, 0x0, 0xfffffffe) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x8) ioctl$auto(r1, 0xc040564a, r1) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_REMOVE(0xffffffffffffffff, 0xc0405519, 0x0) r5 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nbd0\x00', 0x0, 0x0) ioctl$auto(r5, 0xab04, 0xffffffffffffffff) 1m48.466876339s ago: executing program 37 (id=807): rseq$auto(0x0, 0xffffff80, 0x0, 0x5) r0 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/radio6\x00', 0x8a240, 0x0) ioctl$auto(r0, 0x5646, r0) r1 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, 0x0, 0x169000, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0xfffffffffffffff9, 0x40005, 0xe2, 0x9b7f, 0x7, 0x28000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_VERSION_GET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r3, 0x1, 0x70bd27, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x2000c014}, 0x20008040) r4 = socketpair$auto(0x80000000, 0x1, 0x8000000000000000, 0x0) newfstatat$auto(r4, 0x0, 0x0, 0xfffffffe) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x8) ioctl$auto(r1, 0xc040564a, r1) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_REMOVE(0xffffffffffffffff, 0xc0405519, 0x0) r5 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nbd0\x00', 0x0, 0x0) ioctl$auto(r5, 0xab04, 0xffffffffffffffff) 1m23.702111097s ago: executing program 9 (id=990): unshare$auto(0x40000080) symlink$auto(&(0x7f0000000140)='./file0/file0\x00', 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000001c0), 0x28b82, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000001180), 0x185000, 0x0) close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/module/zswap/parameters/compressor\x00', 0x80002, 0x0) write$auto_ocfs2_control_fops_stack_user(r0, &(0x7f0000000140)='\t', 0x1) epoll_ctl$auto(0xffffffffffffffff, 0x1, 0x8000000000000000, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop6\x00', 0x18dd01, 0x0) openat$auto_tracing_saved_cmdlines_size_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/saved_cmdlines_size\x00', 0x2, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/mm/transparent_hugepage/khugepaged/max_ptes_none\x00', 0x183042, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/module/pcie_aspm/parameters/policy\x00', 0xc0800, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f00000004c0)=""/206, 0xce) 1m22.508090664s ago: executing program 9 (id=994): r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x100000001, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x480004, 0xdf, 0x9b70, 0xffffffffffffffff, 0x8000) setsockopt$auto_SO_PASSCRED(r1, 0x1, 0x10, &(0x7f00000001c0)='/dev/dsp1\x00', 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000640), r2) r4 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sda\x00', 0x8001, 0x0) ioctl$auto_HDIO_GETGEO(r4, 0x301, &(0x7f00000001c0)) sendmsg$auto_NL80211_CMD_GET_WIPHY(r2, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)=ANY=[@ANYRESOCT=r2, @ANYRES16=r3, @ANYBLOB="810b25bd7080fbdbdf250100"], 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0xc004) recvmmsg$auto(r2, &(0x7f0000000180)={{0x0, 0x5, 0x0, 0x0, 0x0, 0x5, 0x6}, 0x803}, 0x10a, 0x6, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) r5 = openat$auto_ecryptfs_miscdev_fops_miscdev(0xffffffffffffff9c, &(0x7f000000e680), 0x68182, 0x0) writev$auto(r5, &(0x7f0000000280)={0x0, 0x45}, 0xb) r6 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/pagemap\x00', 0x201, 0x0) ioctl$auto_PAGEMAP_SCAN(r6, 0xc0606610, &(0x7f000000c380)={0x60, 0x0, 0x100000, 0x7fffffffefff, 0xfffffffffffffffe, 0x1, 0x8, 0xbff, 0x2c, 0x2c, 0x3, 0x2}) r7 = openat$auto_aoe_fops_aoechr(0xffffffffffffff9c, 0x0, 0x1, 0x0) openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/netdevsim/netdevsim2/health/break_health\x00', 0x101000, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) syz_genetlink_get_family_id$auto_macsec(0x0, 0xffffffffffffffff) epoll_create$auto(0x7fffffff) epoll_pwait$auto(r8, 0x0, 0x3, 0x7, &(0x7f00000000c0)={0x800}, 0x8) bpf$auto_BPF_PROG_BIND_MAP(0x23, &(0x7f0000000200)=@bpf_attr_1={r7, 0x2416, @value=0x8000000000000001, 0xb58}, 0x9) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0x3, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0x1000000000000d, 0x8fd6, 0x9, 0x3, 0x15f4da07, 0x3, 0x3, 0x62, 0x80000005, 0x7, 0x5, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0) r9 = socket(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'vcan0\x00'}) write$auto(0xffffffffffffffff, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) openat$auto_sg_fops_sg(0xffffffffffffff9c, 0x0, 0x40200, 0x0) 1m20.954588874s ago: executing program 9 (id=1003): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x1, 0x0) r0 = socket(0xa, 0x5, 0x0) setsockopt$auto(r0, 0x10000000084, 0x12, 0x0, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r3 = io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(r3, 0x1, 0x0, 0x5) r4 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_MM_SET(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="01f0ffffe375eeed3ea37dccde522a784c7d9c784508040468c42fb92e858e24381422dd0e735a0f37f4c6120b45438292aba80dbc5664319f9321c0174b7b581762c01a914b85244eba7c226039fe20d66bb67fc90ad0b689ebbd5b9ba5165183406b77f0d9ae3b8a99d413df78f07a8201f013d0309a6997b7c6d95a980cb4dfc4e1e258ecf70409625f4f36da035ae2d05694571c1bac5f3a307690ec6716507893e4", @ANYRES16=r4, @ANYBLOB="01002cbd7000fedbdf252b000000180001801400020076657468315f746f5f626f6e64000000"], 0x2c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040010) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.cpu/memory.kmem.tcp.limit_in_bytes\x00', 0xc2481, 0x0) sendmsg$auto_NFC_CMD_GET_SE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYRESHEX=r5, @ANYRESDEC], 0x3c}}, 0x0) writev$auto(r5, &(0x7f0000000080)={&(0x7f0000000640)="e47665d872d13a79409006d5dfec90052141eadb996515b3b0043aa7a4bebc5583f1c0f35484f9a9c381224f28521bde6e04ed554e3d562b3585180dfad0bb503d220a75e717b4e37704f23cf065bed3bdb8ab2bef01bfc6b3", 0x6}, 0x10000003) sendmsg$auto_NL80211_CMD_GET_INTERFACE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYRES32=r5, @ANYRES16=r5, @ANYRES16=r2], 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x24040085) close_range$auto(0x2, 0x8, 0x0) r6 = socket(0x2, 0x3, 0xa) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) pipe2$auto(0x0, 0x80) keyctl$auto(0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x3) keyctl$auto(0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0) r7 = socket(0xa, 0x801, 0x84) getsockopt$auto(r7, 0x84, 0x6f, 0x0, &(0x7f0000000000)=0x9000c) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYRES32=0x0, @ANYRES8=r7, @ANYRES8=r7, @ANYBLOB="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"], 0x68}, 0x1, 0x0, 0x0, 0x40080}, 0x40008d0) socket(0x2, 0x3, 0x100) socket(0x28, 0xa, 0x7020f3ac) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="a076375f", @ANYBLOB="13", @ANYRESDEC=r4, @ANYRES32, @ANYRES16=r6], 0x1ac}}, 0x4) 1m20.497541688s ago: executing program 9 (id=1005): move_pages$auto(0xffffffffffffffff, 0x3, &(0x7f00000000c0)=&(0x7f0000000000)="e186cc626dd516e466e9a199e7d28e3ccf33bc66a003259c3e600795370051b67abd03b0be9fd29ebb404fb5188492dce1461294b38d75ea8ce441e221bd89c288ca0b23331f0a18ba64a338a0500e4073fa18244fb1accf2ec39e87b6348b2e9ca93df24e3c509c1f4b3431efd0bfc965850f85644407a04f08893596a1d712244bf0d8b2c6b444daae43a0c3546d9846fd8cd875f4a127395bd83e7a9efeda367e4cdf6796b6a1fc", &(0x7f0000000100)=0x8000, &(0x7f0000000140)=0x3803, 0x3e) r0 = openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fuse\x00', 0x2000, 0x0) fcntl$auto_F_SETFL(r0, 0x4, 0x401) prctl$auto(0x23, 0x4000000000000001, 0x2009, 0x0, 0x0) r1 = gettid() epoll_create$auto(0x8001) ptrace$auto_ARCH_SHSTK_STATUS(0x8, r1, 0x2, 0x5005) r2 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card1\x00', 0x123042, 0x0) ioctl$auto(r2, 0x921064b1, 0x8) r3 = openat$auto_ima_measurements_ops_ima_fs(0xffffffffffffff9c, &(0x7f0000001480), 0x400, 0x0) pread64$auto(r3, 0x0, 0x101, 0x800005c2b) waitid$auto_P_ALL(0x0, 0xb62, &(0x7f0000000180)={@siginfo_0_0={0xfffffffb, 0x80, 0x80000000, @_timer={r1, 0xb, @sival_int=0xd, 0x80}}}, 0x8, &(0x7f0000000200)={{0x6, 0x8}, {0x2, 0xa164}, 0xc318, 0x1ff, 0x0, 0x6, 0x100, 0x3, 0x4fc8b604, 0x5, 0x77c68ca3, 0x3e9, 0x7fff, 0x5207, 0xf9d, 0x2}) 1m20.078849679s ago: executing program 9 (id=1008): r0 = socket(0x1b, 0x3, 0x1) madvise$auto(0x0, 0x2000040080000004, 0x4ba7) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) write$auto(r1, &(0x7f0000000180)='//\xf2\x00', 0x7ffffffd) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000200), r0) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x1, 0x0) accept$auto(0x3, 0x0, 0x0) listen$auto(0x3, 0x0) shutdown$auto(0x200000003, 0x2) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x1000, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mknod$auto(&(0x7f0000000180)=':,\x00', 0xcb, 0xfffffffa) execve$auto(&(0x7f00000001c0)=':,\x00', 0x0, 0x0) mkdir$auto(&(0x7f0000000240)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0) madvise$auto(0x0, 0x8000000000000000, 0x15) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) move_mount$auto(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x91e4) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) msgsnd$auto(0x0, &(0x7f0000000040)={0x5}, 0x1000, 0x4) 1m15.379785377s ago: executing program 9 (id=1031): socket(0x1d, 0x2, 0x6) r0 = socket(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$auto(0x3, &(0x7f0000000040)=@can={0x1d, r1, 0xfd}, 0x6a) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0xa, 0x3, 0xe, 0x940, 0xfffffff8, 0x3, 0x1004, 0x1, 0x9, 0x5, 0x6, 0x7, 0x1001000, 0x8, 0x2, 0x3, 0x5, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xfffffffffffffffe, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}, 0x4, 0x40000081) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r2 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r2, &(0x7f0000000240)={0x0, 0x52, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x8044) mmap$auto(0x0, 0xeb80, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x5, 0x0) socket(0x18, 0xa, 0x1) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty28\x00', 0x80003, 0x0) socket(0x25, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x202, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r3, 0x0, 0x20) write$auto(0x3, 0x0, 0x100082) r4 = socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) close_range$auto(r4, r4, 0x0) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video62\x00', 0x80a01, 0x0) r5 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) ioctl$auto(r4, 0xc0585611, r5) 1m7.030107382s ago: executing program 5 (id=1056): mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) socket(0x2, 0x2, 0x0) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/mac80211_hwsim/hwsim1/net/wlan1/statistics/rx_crc_errors\x00', 0x0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000100)=""/4096, 0x1000) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) r1 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/007/001\x00', 0x482301, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x801, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x8, 0x2, 0x1d30, 0x100, 0x400000004, 0x15f4da0e, 0x6, 0x9, 0x100000000000000c, 0x9, 0x4, 0x1000000fca, 0x9, 0x4, 0x4000000000000d]}, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) socket(0x2c, 0x1, 0x3) r3 = openat$auto_force_suspend_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/bluetooth/hci1/force_suspend\x00', 0x121401, 0x0) write$auto_force_suspend_fops_hci_vhci(r3, 0x0, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x10009b7f, 0x2, 0xfffffffffffffffa) mlockall$auto(0x7) mremap$auto(0x0, 0x4, 0x4, 0x7, 0x100000000) r4 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000001180)={0x80040, 0x40, 0xe}, 0x18) fremovexattr$auto(r4, &(0x7f0000001140)='system.poscx_acl_access\x00\f\xd4\x85\xc9\xe7N)}u\x11}\xda\xcb\xb2\xf7b{') futimesat$auto(r4, &(0x7f0000000040)='./file0\x00', &(0x7f0000001100)={0x7fffffffffffffff, 0x3}) madvise$auto(0x0, 0x2003f0, 0x15) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, r1, 0x8000) prctl$auto(0x400, 0x7fff, 0x0, 0xfffd, 0x100000000000007) mmap$auto(0x0, 0xfffffffffffffff7, 0x5, 0x19, r2, 0x7) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x7f, 0x0) close_range$auto(0x2, 0xa, 0x0) 1m5.960167589s ago: executing program 5 (id=1061): r0 = socket(0x2a, 0x3, 0x3e) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_TREAD_OLD(r1, 0x40045402, &(0x7f0000000a00)=0x101) mmap$auto(0x0, 0xe981, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x40009, 0xdf, 0x4000009b73, 0x7, 0x9) socketpair$auto(0x2, 0x1, 0x70de, 0x0) recvmmsg$auto(r0, 0x0, 0x10000, 0x4000002, 0x0) mbind$auto(0x9, 0x84, 0x4, 0x0, 0x80000000, 0x7f) mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x6, 0x0) shutdown$auto(0x200000003, 0x2) mlockall$auto(0x7) modify_ldt$auto(0x1, 0x0, 0x10) getrandom$auto(0x0, 0x6000000, 0x3) mmap$auto(0x6, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) r2 = socket(0x10, 0x2, 0x0) syz_genetlink_get_family_id$auto_gtp(0x0, r2) sendmsg$auto_NL80211_CMD_GET_REG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYBLOB='&\x00', @ANYBLOB="5de1"], 0x1ac}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) read$auto(r2, 0x0, 0x3) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0xfffffffffffffffe) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) nanosleep$auto(&(0x7f0000000180)={0x0, 0x44d4}, 0x0) getpid() clock_nanosleep$auto(0x9, 0x2, 0x0, 0x0) mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x2a01, 0x0) 1m4.883474341s ago: executing program 5 (id=1064): mmap$auto(0x0, 0x20000000400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_TIPC_NL_PUBL_GET(r0, &(0x7f0000001200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000011c0)={&(0x7f0000000040)={0x1144, 0x0, 0x8, 0x70bd29, 0x25dfdbfc, {}, [@TIPC_NLA_PUBL={0x112e, 0x3, 0x0, 0x1, [@typed={0x14, 0xe8, 0x0, 0x0, @ipv6=@private0}, @generic="10d1e920d9a271e4ae84caf73c3ecec1f45016526ffb5cdcd6475fad853211714d285f89caff343485039b4b1b1ccfdfbed781e8f07ea3cbd5dcecf620b5fe5fdf43b99cbdbca24c1cf36b9451b53dd2df15953d2e01b55c54621cdab325d8d21dc7d24ffcd294c9e8f621a01d1f11dbdc116774bad8c0cdd15038050d", @generic="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", @typed={0x11, 0x58, 0x0, 0x0, @str='8\\((+^*-^-&$\x00'}, @generic="148ff6b601990014682f4364f5a1362d19f68bb13a29b426840eceed20f50f499a04f714d4265cc4e92938d573c6bf6e984cf2877d6f5d310543cfa113264ec75d7baa1993dc109e76f794c8d3ce4504194c91ba52d4480c1e25a2b42bd3eac77c7348e7cbce566195258132cb6ea845f05412c3e8bd4277c7da28fff2fe7c7d8bf5e276f0"]}]}, 0x1144}, 0x1, 0x0, 0x0, 0x4008000}, 0x4) r1 = openat$auto_mgts_fops_(0xffffffffffffff9c, &(0x7f0000001240), 0x2041, 0x0) pwrite64$auto(r1, &(0x7f0000001280)='\'^+%%),\r%\x00', 0x8, 0xd) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/netdevsim2/new_port\x00', 0x183841, 0x0) mremap$auto(0x200000000000, 0x40000000004, 0x4, 0x3, 0x100000000) mmap$auto(0x1000, 0x4020008, 0xdf, 0xeb1, 0xffffffffffffffff, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nbd(0x0, 0xffffffffffffffff) shmctl$auto_IPC_RMID(0x7, 0x0, 0x0) mmap$auto(0x0, 0x400004, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) sendmsg$auto_NL80211_CMD_GET_WIPHY(0xffffffffffffffff, 0x0, 0xc004) r2 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, 0x0, 0x201, 0x0) ioctl$auto_PAGEMAP_SCAN(r2, 0xc0606610, &(0x7f000000c380)={0x60, 0x0, 0x100000, 0x7fffffffefff, 0xfffffffffffffffe, 0x1, 0x8, 0xbff, 0x2c, 0x2c, 0x3, 0x2}) mknod$auto(&(0x7f0000000180)=':,\x00', 0xc9, 0xfffffffa) connect$auto(0x3, 0x0, 0x81) r3 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/interrupts\x00', 0x18b202, 0x0) pread64$auto(r3, 0x0, 0x100000001, 0x100) r4 = socket(0xa, 0x2, 0x0) setsockopt$auto_SO_WIFI_STATUS(r4, 0x0, 0x29, 0x0, 0xbff) write$auto(0x3, 0x0, 0x5c8) mmap$auto(0xf000, 0x8, 0x1000000003, 0x9b72, 0x2, 0x8000) 1m4.63180823s ago: executing program 5 (id=1066): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0xb2) mmap$auto(0x0, 0x9, 0x3, 0x8012, 0x3, 0x8000) fallocate$auto(0x8000000000000003, 0x0, 0xd, 0xcbd5d) socket(0xa, 0x3, 0x3b) bpf$auto(0xfffff011, &(0x7f0000000000)=@test={0xffffffffffffffff, 0x4, 0xfab2, 0x468, 0x9, 0x1000000000002, 0x4, 0x2, 0x4, 0x200, 0x1fd, 0xb6, 0x4, 0x6, 0x3}, 0xa3) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e12b7ac1ff0100"}, 0x58) mlock$auto(0x81, 0xffff) madvise$auto(0x0, 0x2000040080000004, 0xe) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snd/controlC0\x00', 0x0, 0x0) r1 = syz_genetlink_get_family_id$auto_smbd_genl(&(0x7f0000000200), r0) sendmsg$auto_KSMBD_EVENT_LOGOUT_REQUEST(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000280)={&(0x7f0000000340)={0x14, r1, 0x0, 0x70bd31, 0x25dfdbfb, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8800}, 0x20008411) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x10, 0x2, 0x15) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_SMC_NETLINK_GET_DEV_SMCD(r3, &(0x7f0000004380)={0x0, 0x0, &(0x7f0000004340)={&(0x7f0000004300)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB='\v'], 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x810) syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000300), r3) read$auto(r3, &(0x7f0000000100)='nl80211\x00', 0xbe62) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="72010000", @ANYBLOB="12"], 0x1ac}}, 0x40000) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000380)='/dev/vbi16\x00', 0x2ca002, 0x0) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) madvise$auto(0x0, 0x200007, 0x19) 1m3.49175949s ago: executing program 5 (id=1078): close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x2, 0x0) r0 = prctl$auto_PR_SCHED_CORE_GET(0x1, 0x0, 0xffffffffffffffff, 0x7, 0x2172) readahead$auto(r0, 0xe, 0x1) r1 = openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/snd/pcmC0D0p\x00', 0x80000, 0x0) ioctl$auto_SNDRV_PCM_IOCTL_PVERSION(r1, 0x80044100, &(0x7f0000000240)) socket(0xa, 0x3, 0xff) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/controlC1\x00', 0x0, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_INFO(r2, 0xc1105511, &(0x7f0000000080)={{@raw=0x6, 0x5, 0xfffff7bb, 0x2f, "984e784f697ebcc30053822c357eb55df43e9e037b650dfc7a3df9aa20e32749384f515111de5da4403cab68", @raw=0x7}, 0x200000, 0x1, 0x4, @raw=0x3, @integer64={0x9, 0xec, 0x340}, "b210e8ae72f3052d09004297cc39fbd4fe51f972eb62ed41cec2ea5c1e45264907d818e9711e2b57cd159b796ab9e6c81a2f47680e3d2a7f677dccfd260d82fe"}) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) r3 = socket(0xa, 0x2, 0x73) sendto$auto(r3, 0x0, 0x402, 0x0, &(0x7f0000000000)=@generic={0xa, "e2e18340cba8fe8000"}, 0x1c) close_range$auto(0x2, 0x8, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x2c, r4, 0x13, 0x70bd2c, 0x25dfdbdd, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r6}, @NL80211_ATTR_WIPHY_TX_POWER_SETTING={0x8, 0x61, 0x1}, @NL80211_ATTR_WIPHY_TX_POWER_LEVEL={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24004080}, 0x20040894) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "0000c11effffff00"}, 0x55) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0xfff4) 1m3.345702667s ago: executing program 5 (id=1080): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000640)='/dev/snd/controlC0\x00', 0x80, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_WRITE(r1, 0xc4c85513, &(0x7f0000000700)={{@raw=0x6, 0x4, 0x2, 0x5, "26cb83211f616e898ccdda7ca056a2a31e5d7e27000000000000b8bc2a8200000000000000000011a100"}, 0x0, @integer=@value_ptr=0x0, "1cd4f43065c34bdcb5fa6160f24c5f3eb5328361438ff4cd82ad2e9771421debdad4d39a52e370b9012aff448a8b4a75e7c5126dc116dd8f5751e93614151d5a4f55a63e9ba1ad1e6542796d2a1cd644b0d756001b66abab0c0fd3b4287befd247e5410bef4c186120b5bed4ab64ffeb4b7c5a69166021a8814332515a657e93"}) r2 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_LISTENER_SET(r0, &(0x7f0000005380)={0x0, 0x0, &(0x7f0000005340)={&(0x7f0000000000)={0x38, r2, 0x1, 0x870bd2b, 0x25dfdbfc, {}, [@NFSD_A_SERVER_SOCK_ADDR={0x24, 0x1, 0x0, 0x1, [@NFSD_A_SOCK_TRANSPORT_NAME={0x19, 0x2, '/dev/cpu_dma_latency\x00'}, @NFSD_A_SOCK_ADDR={0x4}]}]}, 0x38}, 0x1, 0x0, 0x0, 0xc000}, 0x20000000) 1m0.322724263s ago: executing program 38 (id=1031): socket(0x1d, 0x2, 0x6) r0 = socket(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$auto(0x3, &(0x7f0000000040)=@can={0x1d, r1, 0xfd}, 0x6a) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0xa, 0x3, 0xe, 0x940, 0xfffffff8, 0x3, 0x1004, 0x1, 0x9, 0x5, 0x6, 0x7, 0x1001000, 0x8, 0x2, 0x3, 0x5, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xfffffffffffffffe, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}, 0x4, 0x40000081) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r2 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r2, &(0x7f0000000240)={0x0, 0x52, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x8044) mmap$auto(0x0, 0xeb80, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x5, 0x0) socket(0x18, 0xa, 0x1) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty28\x00', 0x80003, 0x0) socket(0x25, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x202, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r3, 0x0, 0x20) write$auto(0x3, 0x0, 0x100082) r4 = socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) close_range$auto(r4, r4, 0x0) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video62\x00', 0x80a01, 0x0) r5 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) ioctl$auto(r4, 0xc0585611, r5) 48.191428678s ago: executing program 39 (id=1080): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000640)='/dev/snd/controlC0\x00', 0x80, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_WRITE(r1, 0xc4c85513, &(0x7f0000000700)={{@raw=0x6, 0x4, 0x2, 0x5, "26cb83211f616e898ccdda7ca056a2a31e5d7e27000000000000b8bc2a8200000000000000000011a100"}, 0x0, @integer=@value_ptr=0x0, "1cd4f43065c34bdcb5fa6160f24c5f3eb5328361438ff4cd82ad2e9771421debdad4d39a52e370b9012aff448a8b4a75e7c5126dc116dd8f5751e93614151d5a4f55a63e9ba1ad1e6542796d2a1cd644b0d756001b66abab0c0fd3b4287befd247e5410bef4c186120b5bed4ab64ffeb4b7c5a69166021a8814332515a657e93"}) r2 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_LISTENER_SET(r0, &(0x7f0000005380)={0x0, 0x0, &(0x7f0000005340)={&(0x7f0000000000)={0x38, r2, 0x1, 0x870bd2b, 0x25dfdbfc, {}, [@NFSD_A_SERVER_SOCK_ADDR={0x24, 0x1, 0x0, 0x1, [@NFSD_A_SOCK_TRANSPORT_NAME={0x19, 0x2, '/dev/cpu_dma_latency\x00'}, @NFSD_A_SOCK_ADDR={0x4}]}]}, 0x38}, 0x1, 0x0, 0x0, 0xc000}, 0x20000000) 6.117352695s ago: executing program 0 (id=1350): unshare$auto(0x40000080) close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x80002, 0x0) write$auto_ocfs2_control_fops_stack_user(r0, &(0x7f0000000140)='\t', 0x1) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/mm/transparent_hugepage/khugepaged/max_ptes_none\x00', 0x183042, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/module/pcie_aspm/parameters/policy\x00', 0xc0800, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f00000004c0)=""/206, 0xce) 5.672262394s ago: executing program 3 (id=1351): bpf$auto(0x0, &(0x7f00000001c0)=@test={0xffffffffffffffff, 0xffff, 0xfffff0b6, 0xffff, 0x84, 0xac1, 0x2, 0x36242398, 0xfffff5b2, 0x3bb, 0x7, 0xffff, 0x6, 0x81, 0x68198}, 0x6f3) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/net/nr14/flags\x00', 0xa001, 0x0) write$auto(r0, &(0x7f0000000180)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0xfdef) mmap$auto(0x2, 0x5, 0x8000, 0x12, r0, 0x8000) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/block/zram0/reset\x00', 0xa001, 0x0) write$auto(r1, &(0x7f0000001580)='LnAY\xef\x1c\xcb\x1c\xae)\x13\xf7J1\xa8\x90<\xb9x\xae\x0e\xbe\x158\x81\xd4\xd0\x81KO./p\xc1\x81\x1d^\b\xb7do\xb0\xc1/\xdct\xd6@\x84\xcfJ\xd6\x90\xb4\xf6\x03\x94@\x1f\xbc\xe9\xf6\x10Pm\xabt\xdcP\xbb}F\x9e\x8f\x9b\r\xe2A\xa73\xccp\xbf\f\xd9\x0e\x10>\xfe\x86\xb9\xa3\xb6\ad\xab\x18\xffc\rD+J^\xea\x01^\xc2\x96{\x81\x7f@\xb8\x0e\x80\x85\x93\x93\x85Y\x06\xf7t\xe1\x02<\xce@\xda=.\xf8S\xd5\xd8[GF\x93\xc7\xaa/#\xe0%*C\x1a_\x85\xe1*\xdf\xc2\xc6\"\xda \xa7\x1e\xae\x96YH\x87j\xa8\xf1\xed\x0f\xb5)N\xa9\xe8\x8f\xb0vN\x8f\xffv\xa5bTmx\xb1\xf7\xae\xb9\xcc\xcd\n\xf6\x90\x93\x19$F\xa5\xa3\xcf\'\xf3\x9c\xcd\xe3\xc5\xff\x8a\xe6\xd9\x95\x05>\xfc\x87\xf6\x8a\xb5\a\r\xde\x11\x8ay\xfe\x83\xec\xf2I\x13>\xf2\xf5^\x88C\xe5\x12\xea\xdfYi*Q0lN\f\xd9i\xb6\x0f\x13\xb14r\x1e\x98+\x04\xce\x85q\xaa\xec\xb9\xefTv\x1fr2\xff\xaa\xaf\x84\xdb', 0x200081) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/usbcore/parameters/quirks\x00', 0xc0202, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f0000000040)="bdcda609d0dd307ad1695e8740fefb7f2c", 0x11) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/loop1/integrity/device_is_integrity_capable\x00', 0x109080, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f0000001100)=""/167, 0xa7) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/net/ipv6/conf/bridge_slave_1/mldv2_unsolicited_report_interval\x00', 0x163381, 0x0) socket(0x2, 0x1, 0x0) sysfs$auto(0x2, 0x0, 0x0) epoll_create$auto(0x4) epoll_ctl$auto(0x5, 0x1, 0x8000000000000000, 0x0) r4 = openat$auto_wakeup_sources_stats_fops_wakeup(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv6/conf/batadv_slave_0/forwarding\x00', 0x200, 0x0) sysfs$auto(0x3, 0x8, 0x2) pread64$auto(r4, 0x0, 0x8001, 0x1964) close_range$auto(0x2, 0x8, 0x0) r5 = socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) r6 = socket(0x10, 0x2, 0x4) mmap$auto(0x0, 0xc, 0x4000000000df, 0x44eb2, 0x10006, 0x300000000000) syz_genetlink_get_family_id$auto_psample(&(0x7f0000000000), 0xffffffffffffffff) getsockopt$auto_SO_PEERPIDFD(r5, 0x3, 0x4d, &(0x7f00000000c0)='\x00', &(0x7f0000000100)=0x89f339) sendmsg$auto_ETHTOOL_MSG_WOL_SET(0xffffffffffffffff, &(0x7f0000002cc0)={0x0, 0x0, &(0x7f0000002c80)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYBLOB="010027bd"], 0x2c}, 0x1, 0x0, 0x0, 0x4801}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="12"], 0x1ac}}, 0x40000) 5.521608881s ago: executing program 3 (id=1352): socket(0xf, 0x3, 0x2) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket(0x2, 0x0, 0x0) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8010) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000005280), 0x50b880, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x4, 0x3, 0x15f4da0a, 0xffffffff, 0x3, 0xfffffffffffffff9, 0x208000001f, 0x2, 0x6d3c, 0x9, 0x2, 0x6]}, 0x0) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) bpf$auto(0x0, &(0x7f0000000100)=@task_fd_query={0x2, 0x4, 0x0, 0x2, 0x8, 0xc, 0x66b, 0x4, 0x1}, 0x6f4) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/bus/most/drivers/most_core/components\x00', 0x100, 0x0) socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@xdp={0x2c, 0x8, 0x0, 0xd}, 0x58) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) io_uring_setup$auto(0x6, 0x0) read$auto_nsim_dev_trap_fa_cookie_fops_dev(r2, &(0x7f0000000080)=""/99, 0x63) setsockopt$auto(0x3, 0x1, 0x23, 0x0, 0xa) mmap$auto(0x0, 0x202000d, 0x3, 0xeb2, r1, 0x2) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) close_range$auto(0x2, 0x8, 0x0) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0x6, 0x4) read$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f00000010c0)=""/4096, 0x1000) mmap$auto(0x0, 0x8, 0xdc, 0xeb1, 0x0, 0x8002) 5.476816296s ago: executing program 0 (id=1353): openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x81) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000080)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x4000000000007, 0xa505}, 0x800}, 0x4, 0x4008) socket(0x29, 0x2, 0x0) r0 = socket(0x10, 0x2, 0x0) recvmmsg$auto(r0, &(0x7f0000000040)={{0x0, 0x5, 0x0, 0x5, 0x0, 0x200002, 0x13}, 0x803}, 0xfffffff9, 0x10, 0x0) setresuid$auto(0xf5, 0x8000, 0x67) r1 = openat$auto_safesetid_uid_file_fops_securityfs(0xffffffffffffff9c, 0x0, 0x2c4800, 0x0) r2 = bpf$auto(0x5, &(0x7f0000000300)=@bpf_attr_3={0x6, 0x24, 0xf, 0x63, 0x400, 0x80, 0x9, 0x80f0c8, 0x20, "38c1d5cbcb9f6b5e511f0cd8ed068f65", 0x0, 0x113e33f2, 0xffffffffffffffff, 0xe4, 0x6, 0x5, 0x6, 0x5, 0x0, 0x3, @attach_btf_obj_fd=r1, 0x6, 0xffff, 0x8, 0x0, 0xfffffffe}, 0x47) mmap$auto(0x0, 0x2000d, 0x7, 0xeb1, 0x404, 0x10008000) r3 = semctl$auto_GETPID(0x9483, 0x0, 0xb, 0x0) r4 = openat$auto_sync_info_debugfs_fops_(0xffffffffffffff9c, &(0x7f0000000200), 0xc880, 0x0) kcmp$auto_KCMP_EPOLL_TFD(r3, 0x0, 0x7, r4, 0x6) socket(0x2, 0x3, 0xa) mmap$auto(0xf000, 0x8, 0x1000000003, 0x9b72, 0x2, 0x8000) r5 = openat$auto_proc_mountstats_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) pread64$auto(r5, &(0x7f0000000040)='\x8d]\x00', 0x80000000, 0x5) read$auto(0xffffffffffffffff, 0x0, 0x2) read$auto_clk_summary_fops_(r2, &(0x7f00000003c0)=""/198, 0xc6) ioctl$auto_NS_GET_TGID_IN_PIDNS(0xffffffffffffffff, 0x8004b709, 0x0) migrate_pages$auto(0x0, 0xa, &(0x7f0000000100)=0x5, &(0x7f0000000140)=0x2) syz_clone(0x280, &(0x7f0000000240), 0x0, 0x0, 0x0, 0x0) move_pages$auto(0x0, 0x1002, 0x0, &(0x7f0000001140), 0x0, 0x2) 5.09171612s ago: executing program 6 (id=1355): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nbd(&(0x7f0000001d00), 0xffffffffffffffff) sendmsg$auto_NBD_CMD_CONNECT(r0, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f0000001280)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x8880) 4.579990523s ago: executing program 0 (id=1357): socket(0xf, 0x3, 0x2) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket(0x2, 0x0, 0x0) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8010) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000005280), 0x50b880, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x4, 0x3, 0x15f4da0a, 0xffffffff, 0x3, 0xfffffffffffffff9, 0x208000001f, 0x2, 0x6d3c, 0x9, 0x2, 0x6]}, 0x0) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) bpf$auto(0x0, &(0x7f0000000100)=@task_fd_query={0x2, 0x4, 0x0, 0x2, 0x8, 0xc, 0x66b, 0x4, 0x1}, 0x6f4) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/bus/most/drivers/most_core/components\x00', 0x100, 0x0) socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@xdp={0x2c, 0x8, 0x0, 0xd}, 0x58) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) io_uring_setup$auto(0x6, 0x0) read$auto_nsim_dev_trap_fa_cookie_fops_dev(r2, &(0x7f0000000080)=""/99, 0x63) setsockopt$auto(0x3, 0x1, 0x23, 0x0, 0xa) mmap$auto(0x0, 0x202000d, 0x3, 0xeb2, r1, 0x2) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) close_range$auto(0x2, 0x8, 0x0) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0x6, 0x4) read$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f00000010c0)=""/4096, 0x1000) mmap$auto(0x0, 0x8, 0xdc, 0xeb1, 0x0, 0x8002) close_range$auto(0x2, 0x8, 0x0) 4.579756263s ago: executing program 6 (id=1358): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/dummy_hcd.2/usb3/uevent\x00', 0x40000, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/net/eql/ifalias\x00', 0xb02, 0x0) mmap$auto(0x0, 0x240009, 0xdf, 0x9b72, 0x7, 0x28000) execve$auto(0x0, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f00000006c0)='/sys/kernel/debug/tracing/events/vmalloc/filter\x00', 0x103641, 0x0) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/sys/net/ipv6/conf/bridge_slave_0/mldv2_unsolicited_report_interval\x00', 0x10001, 0x0) ftruncate$auto(0x3, 0x400180200000) mmap$auto(0xa, 0x40009, 0xfffffffffffff226, 0x50, 0xffffffffffffffff, 0x28000) write$auto(0xffffffffffffffff, &(0x7f0000000300)='.o\xd3\xa49\xaf\xa9\xe4\xe17\x12\xb3Z\x17I\x82\xdc\xbeiw\xc1\xd1\x8d\x9b\r\x9aR\xe7\x9f\xd8\xab\x16`f\nT\xaa\xfap \xe6\xdaV\xdeD\x8dR5\xd2\xe58\n\xff\x19+\xeb\xb3+\xf6\xc6\a\x00\x00\x00\xf1A\xa5\x95\x1fk\x1f\xff\x99gP\x9e\x88\x97]\x93\xf4\xdd<\xe7p\x0e\xd4C\xdc\x84\v\xafz\xfd\x81\xa3\xb2\xbb\xa4\xd9\xf2P\xa8\xe9\x8f\x13\xa7\x98\x85\xf8\v\aB\xfc\xfa\x14E\xb8y\x884<\xa7\xffyb\x8a\b\xbb\x1b\x13W\xe3\xf7\xd8\x83\xc9\xd7\x8c', 0x6) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x2deb43, 0x0) faccessat2$auto(0xffffffffffffffff, 0x0, 0x0, 0x7) read$auto(r1, 0x0, 0x20) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0x802, 0x0) writev$auto(r2, &(0x7f0000000200)={0x0, 0x7}, 0x3) mmap$auto(0x2, 0x401, 0x1000, 0x8000000000000011, 0xffffffffffffffff, 0x5) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0xc40, 0x0) syz_genetlink_get_family_id$auto_seg6(&(0x7f0000000100), 0xffffffffffffffff) r3 = openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim2/health/break_health\x00', 0x48081, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYRES64, @ANYRES64=r0, @ANYRES64=r2, @ANYBLOB="894f844e1c00a904ebea190000001200016484872fddd39d0043005af77d2e758f8b2ccab7ca15637a27cbd6ed1fdf81911a51e3ffa236fc86639386c3384a1def253dd5fc53a343983433c8326d0aa691dd0df2397e978c4152489bbeff0aa411032e893b34882519124cbdf9fe16214a71c626678c18e6ed595138d27cdeb3f65168b3f5d6e8894c29bef424d531078892ffb98f2a"], 0x4c}, 0x1, 0x0, 0x0, 0x4004040}, 0x4844) write$auto(r3, 0x0, 0x1ff) prctl$auto_PR_SCHED_CORE_GET(0x9, 0x0, 0x0, 0x0, 0x0) r5 = openat$auto_loop_ctl_fops_loop(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) ioctl$auto_LOOP_CTL_ADD(r5, 0x4c80, 0xfffffffffffffffd) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/fib_triestat\x00', 0x0, 0x0) 4.38558704s ago: executing program 3 (id=1360): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_seg6(&(0x7f0000000040), r0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, 0x0, 0x1c1041, 0x0) adjtimex$auto(&(0x7f0000000080)={0xe, 0x0, 0x2000006, 0x4, 0x80, 0x4, 0x4bfd, 0x0, 0xfffbffffffff0001, 0xf6, 0x3, {0x1a78, 0x3}, 0x5, 0x10, 0x6, 0x8, 0x0, 0x7ff, 0x1b2b, 0x5, 0x6, 0x80000000, 0x100006}) mmap$auto(0x9, 0x8, 0x2, 0x10, 0x5, 0x8) r1 = socket(0x1f, 0x80000, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_IPVS_CMD_NEW_DAEMON(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="00000000fe1a634e4a2ede13619c15ad5968f960beac79d8a48006604fc20f716f9367fd8f9d5add2f011a04ac8c6885116dd51c5205c3d9a9cd97599a17d751b6de455c31825fd9b8fccb677e5db3e9e5381a932dedbc563096a1a5237fdea94c5c46934236f2e67798f6fb0947b422921774b60c38809254e507410633ed03e12edbb61029a432ba80", @ANYRES16=0x0, @ANYBLOB="010026bd7000fddbdf25090000000800038004000180"], 0x1c}, 0x1, 0x0, 0x0, 0x20000001}, 0x240c0) r3 = gettid() r4 = getpid() statx$auto(0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', 0x4, 0x7fff, 0x0) sendmsg$auto_WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f00000028c0)={0x0, 0x0, &(0x7f0000002880)={&(0x7f0000000300)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="210027bd700000dcdf2501000000040008801400020077673000000000000000000000000000ebd8cedafe4499a752782b66f351d01195f814122b5b8ba6"], 0x2c}}, 0x80) sendmsg$auto_WG_CMD_GET_DEVICE(r2, &(0x7f0000001780)={&(0x7f00000016c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001740)={&(0x7f00000003c0)=ANY=[@ANYRES64=r4, @ANYRESDEC, @ANYRESDEC=r4], 0x14}}, 0x8800) openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/block/nbd11/sched/queued\x00', 0xa000, 0x0) close_range$auto(0x2, 0x8, 0x0) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/system/memory/memory15/online\x00', 0xa001, 0x0) write$auto(r5, &(0x7f0000000100)='0[.[\x00', 0xcd02) sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xe00000000) sendfile$auto(0x1, 0x3, 0x0, 0x7ff) r6 = eventfd2$auto(0x6af3, 0x800) shmctl$auto_SHM_INFO(0x7, 0xe, &(0x7f0000001640)={{0x4, 0x0, 0xee01, 0x8, 0x401, 0x431bf174}, 0x3, 0xffffffffffff8001, 0x2e73, 0x8000000000000001, @inferred, @inferred=r3, 0x4, 0x0, &(0x7f0000000600), 0x0}) sendmsg$auto_IPVS_CMD_DEL_DAEMON(r6, &(0x7f0000003000)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000002fc0)={&(0x7f00000062c0)=ANY=[], 0x1908}, 0x1, 0x0, 0x0, 0x4024004}, 0x8094) getsockopt$auto(r1, 0x114, 0x271f, 0xfffffffffffffffc, 0x0) unshare$auto(0x40000080) unshare$auto(0x17d0) semctl$auto_SETVAL(0x328, 0xd77, 0x10, 0x9) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x2, 0x0) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f00000011c0), 0xa2741, 0x0) 4.253709213s ago: executing program 8 (id=1361): close_range$auto(0x2, 0x8, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x4242, 0x0) prctl$auto(0x1000000001c, 0x4, 0x100000000, 0x400000000009, 0x3ffffffffb) setreuid$auto(0x0, 0x5) fcntl$auto(r0, 0x400, 0x1) setresuid$auto(0x2, 0xee01, 0x8080) close_range$auto(0xffffffffffffffff, 0xa, 0x0) socket(0xa, 0x2, 0x0) socket(0xa, 0x3, 0xff) close_range$auto(0x0, 0xfffffffffffff000, 0x2) open(&(0x7f0000000800)='./file0\x00', 0x6041, 0x80) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) bpf$auto(0x0, &(0x7f00000001c0)=@test={0xffffffffffffffff, 0xffff, 0x9, 0xffff, 0x84, 0xac1, 0x2, 0x36242398, 0xfffff5b2, 0x3bc, 0x20000000000009, 0x800, 0x7, 0x0, 0xfffffffd}, 0x6f7) sendmsg$auto_ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="d4000000", @ANYRES16=0x0, @ANYBLOB="100027bd7000fbdbdf2518000000200001800247eea41fac000014000200766574683100000000000000000000000800070063fbffff0500060001000000840002803d00488013b37090badc49d6dc93876646d25a4d297d01cd3b7da38d12889cc50d505f353dc42d0a3c0a14c7b46428910708003600", @ANYRES32=0x0, @ANYBLOB="0400b3800000003d003b800400a4800c009a00008000000000000004008680c16ab1b1b39dcaa14b6af7dcc011b43cf706e562811c62b28a702b72e0a87126700201000000000000000180080003"], 0xd4}, 0x1, 0x0, 0x0, 0x20000010}, 0x20008000) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) sendmsg$auto_ETHTOOL_MSG_WOL_SET(0xffffffffffffffff, &(0x7f0000002cc0)={0x0, 0x0, &(0x7f0000002c80)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYBLOB="010027bd"], 0x2c}, 0x1, 0x0, 0x0, 0x4801}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="12"], 0x1ac}}, 0x40000) socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) memfd_secret$auto(0x0) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) preadv2$auto(r1, &(0x7f0000000080)={0x0, 0x80000000}, 0x6, 0xffffffffffffffff, 0x4, 0x2e) ioctl$auto_BLKFLSBUF(r1, 0x1261, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, 0x0, 0x40, 0x0) mmap$auto(0x0, 0x202000a, 0x5, 0xeb1, 0xfffffffffffffffa, 0x8000) 4.068119727s ago: executing program 6 (id=1362): move_pages$auto(0x0, 0x6, &(0x7f00000000c0)=&(0x7f0000000000)="e186cc626dd516e466e9a199e7d28e3ccf33bc66a003259c3e600795370051b67abd03b0be9fd29ebb404fb5188492dce1461294b38d75ea8ce441e221bd89c288ca0b23331f0a18ba64a338a0500e4073fa18244fb1accf2ec39e87b6348b2e9ca93df24e3c509c1f4b3431efd0bfc965850f85644407a04f08893596a1d712244bf0d8b2c6b444daae43a0c3546d9846fd8cd875f4a127395bd83e7a9efeda367e4cdf6796b6a1fcf8f7df06f16633898d6805", &(0x7f0000000100)=0x8000, &(0x7f0000000140)=0x3803, 0x3e) r0 = openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fuse\x00', 0x2000, 0x0) r1 = socket(0x25, 0x3, 0xefa) mmap$auto(0x4000000000000, 0x2020009, 0x3, 0xe7f, 0xffffffffffffffff, 0x1) mmap$auto(0x0, 0xf, 0x400000000000006, 0xeb1, 0xffffffffffffffff, 0x10000000008000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual/block/ram12/queue/read_ahead_kb\x00', 0x80000, 0x0) madvise$auto(0x0, 0x2000040080000003, 0xe) getsockopt$auto_SO_RCVPRIORITY(r0, 0x5, 0x52, 0x0, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f0000000280)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc\xc4\xe2q;KzH\n\xc4\x9b\xf0\xa0p\xa7fFn\xf8\xd18|\x1b\xb1cO\xaa\x14\xbf_5a\xcb\x97\x01)V\xa5\x1b\xa6Ug\x0e\x16\x1e\xd9\xa1\xa3\x1bi\x9a\x8a4\xf3\xfeX/$\xf5\x9c\xf8vp\x9b\xbe\xccE\x1d\x8e\xcc\xacJ\x7fQ3\xd2', 0x100000a3d9) socket(0x2, 0x3, 0xa) mmap$auto(0x1, 0x20009, 0x2df, 0xeb1, r1, 0x8000) pipe2$auto(0x0, 0x80) keyctl$auto(0x200000000000020, 0xffffffffffffffff, 0x5, 0x5, 0x8) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(r0, 0x8, 0x8007) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video1\x00', 0xc0400, 0x0) madvise$auto(0x0, 0x2000040080000004, 0xe) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) write$auto(r3, &(0x7f0000000040)='//\xf2\x00', 0x80000000) fcntl$auto_F_SETFL(r0, 0x4, 0x401) prctl$auto(0x23, 0x4000000000000001, 0x2009, 0x0, 0x0) r4 = gettid() epoll_create$auto(0x8001) ptrace$auto_ARCH_SHSTK_STATUS(0xd, r4, 0x2, 0x5005) r5 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card1\x00', 0x123042, 0x0) ioctl$auto(r5, 0x921064b1, 0x8) r6 = openat$auto_ima_measurements_ops_ima_fs(0xffffffffffffff9c, &(0x7f0000001480), 0x400, 0x0) pread64$auto(r6, 0x0, 0x101, 0x800005c2b) 3.331282121s ago: executing program 8 (id=1363): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x80000000000000a, 0x2, 0x0) socket(0xa, 0x801, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}, 0x54) 3.282600409s ago: executing program 0 (id=1364): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0xb2) mmap$auto(0x0, 0x9, 0x3, 0x8012, 0x3, 0x8000) fallocate$auto(0x8000000000000003, 0x0, 0xd, 0xcbd5d) socket(0xa, 0x3, 0x3b) bpf$auto(0xfffff011, &(0x7f0000000000)=@test={0xffffffffffffffff, 0x4, 0xfab2, 0x468, 0x9, 0x1000000000002, 0x4, 0x2, 0x4, 0x200, 0x1fd, 0xb6, 0x4, 0x6, 0x3}, 0xa3) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e12b7ac1ff0100"}, 0x58) mlock$auto(0x81, 0xffff) madvise$auto(0x0, 0x2000040080000004, 0xe) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snd/controlC0\x00', 0x0, 0x0) r1 = syz_genetlink_get_family_id$auto_smbd_genl(&(0x7f0000000200), r0) sendmsg$auto_KSMBD_EVENT_LOGOUT_REQUEST(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000280)={&(0x7f0000000340)={0x14, r1, 0x0, 0x70bd31, 0x25dfdbfb, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8800}, 0x20008411) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_SMC_NETLINK_GET_DEV_SMCD(r3, &(0x7f0000004380)={0x0, 0x0, &(0x7f0000004340)={&(0x7f0000004300)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB='\v'], 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x810) syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000300), r3) read$auto(r3, &(0x7f0000000100)='nl80211\x00', 0xbe62) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="72010000", @ANYBLOB="12"], 0x1ac}}, 0x40000) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000380)='/dev/vbi16\x00', 0x2ca002, 0x0) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) madvise$auto(0x0, 0x200007, 0x19) 2.720028958s ago: executing program 8 (id=1365): mmap$auto(0x0, 0x20009, 0x5, 0xeb2, 0x8, 0x1008000) r0 = socket(0x10, 0x2, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/pid_for_children\x00') sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a00"], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) recvmmsg$auto(r0, &(0x7f0000000100)={{0x0, 0x4, &(0x7f0000000080)={&(0x7f0000000040), 0xcb}, 0x3, 0x0, 0x80000000, 0x6}, 0x9}, 0x7, 0x6, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_SMC_NETLINK_GET_DEV_SMCD(r1, &(0x7f0000004380)={0x0, 0x0, &(0x7f0000004340)={&(0x7f0000004300)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB='\v'], 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x8810) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), r1) read$auto(r1, &(0x7f0000000100)='nl80211\x00', 0xbe62) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1800"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc8}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x1f00) 2.254883042s ago: executing program 8 (id=1366): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nbd(&(0x7f0000001d00), 0xffffffffffffffff) sendmsg$auto_NBD_CMD_CONNECT(r0, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f0000001280)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x8880) 1.906094903s ago: executing program 0 (id=1367): mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtdblock0\x00', 0x14f602, 0x0) mmap$auto(0x0, 0x9, 0xffb, 0x8000000008011, 0x3, 0x0) write$auto(0x3, 0x0, 0x100082) chdir$auto(&(0x7f0000000000)='./file0\x00') r0 = openat$auto_bdi_debug_stats_fops_(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/bdi/7:2/stats\x00', 0x20002, 0x0) read$auto_bdi_debug_stats_fops_(r0, &(0x7f0000000040)=""/69, 0x45) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/platform/dummy_hcd.4/usb5/version\x00', 0x0, 0x0) madvise$auto(0x0, 0x2000040080000004, 0xe) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) madvise$auto_MADV_DODUMP(0x8, 0x5, 0x11) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) recvmmsg$auto(0xffffffffffffffff, &(0x7f0000000040)={{0x0, 0x5, 0x0, 0x5, 0x0, 0x200002, 0x13}, 0x803}, 0xfffffff9, 0x10, 0x0) semctl$auto_GETPID(0x9483, 0x0, 0xb, 0x0) openat$auto_sync_info_debugfs_fops_(0xffffffffffffff9c, 0x0, 0xc880, 0x0) migrate_pages$auto(0x0, 0xa, &(0x7f0000000100)=0x5, 0x0) syz_clone(0x280, 0x0, 0x0, 0x0, 0x0, 0x0) move_pages$auto(0x0, 0x1002, 0x0, &(0x7f0000001140), 0x0, 0x6f52f15a) write$auto(r1, &(0x7f00000005c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4mn\x05w\xb2\xbf\x05%\'\xa2W\xf5\x93\xa9u\xde\xbf\xc7\x15\xbe\x01\x98\xd7lD\x05)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fQ\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) getsockopt$auto_SO_NETNS_COOKIE(r1, 0x9, 0x47, &(0x7f0000000540)='nl80211\x00', &(0x7f0000000580)) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x203a, 0x0, 0x0, 0xff, 0x4) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/net/igmp\x00', 0x100, 0x0) pread64$auto(r2, 0x0, 0x40000000f42c, 0x80002) r3 = io_uring_setup$auto(0x7, 0x0) epoll_ctl$auto(0x5, 0x1, r3, 0x0) sendmmsg$auto(r3, &(0x7f0000000500)={{&(0x7f00000001c0)="2627efef9a08d2afc78b379e019bc12bcab3047168ec06888ece20fdb330f6d1e117652281a84d9b9d1ca87535304c2a1468842f04ae3e2bee80609e62be2fec3c3230c946ccc7e0099d12eb9930f46cc49d019eb289c86d0d9a727d92507c11814873d0227dca745c1d4e0badad3f3cd8", 0x6cd1, &(0x7f00000002c0)={&(0x7f0000000380)="cfd1cd519653a074f63519f5b9daf4eb0e820b8885fe8df0dda60b761a99605e14347207d2d8bb8d1bb0b1f2a9a01f77620f41f76214078a0495e7befd7bb4e5331cca898cea750fb71442", 0x4}, 0x13f1, &(0x7f0000000400)="3b9a22c8859f1ed29b3562643fb676719585c0bf6b23b491943ae086e4f8f0043678df4695673136da204287204f836029ee56edd969d7b24db35ccf66101f6d8623a7c10e1ac79a95b4c489d367e97f6d4581b8e471c18a87e015fb8b775b2f020b7106c89837697b509f0a10f3ff249a1caf224ff07e82b6111e29074a6421507628e31631fcef425df5b8ff04a34982db37b86a6757850787ee922a535d6128adf75fb986c03e247b72d4acaa550fefef1cf9dbc28d60cc90d34c5079ad78d5944cbf38900d037658f7efb69d9387910a03b878df1b5024b1c697e2284668d29e", 0xd, 0x7}, 0x10}, 0x5, 0xfff) madvise$auto(0x0, 0xffffffffffff0005, 0x19) 1.90590765s ago: executing program 8 (id=1368): openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x81) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000080)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x4000000000007, 0xa505}, 0x800}, 0x4, 0x4008) socket(0x29, 0x2, 0x0) r0 = socket(0x10, 0x2, 0x0) recvmmsg$auto(r0, &(0x7f0000000040)={{0x0, 0x5, 0x0, 0x5, 0x0, 0x200002, 0x13}, 0x803}, 0xfffffff9, 0x10, 0x0) setresuid$auto(0xf5, 0x8000, 0x67) r1 = openat$auto_safesetid_uid_file_fops_securityfs(0xffffffffffffff9c, 0x0, 0x2c4800, 0x0) r2 = bpf$auto(0x5, &(0x7f0000000300)=@bpf_attr_3={0x6, 0x24, 0xf, 0x63, 0x400, 0x80, 0x9, 0x80f0c8, 0x20, "38c1d5cbcb9f6b5e511f0cd8ed068f65", 0x0, 0x113e33f2, 0xffffffffffffffff, 0xe4, 0x6, 0x5, 0x6, 0x5, 0x0, 0x3, @attach_btf_obj_fd=r1, 0x6, 0xffff, 0x8, 0x0, 0xfffffffe}, 0x47) mmap$auto(0x0, 0x2000d, 0x7, 0xeb1, 0x404, 0x10008000) r3 = semctl$auto_GETPID(0x9483, 0x0, 0xb, 0x0) r4 = openat$auto_sync_info_debugfs_fops_(0xffffffffffffff9c, &(0x7f0000000200), 0xc880, 0x0) kcmp$auto_KCMP_EPOLL_TFD(r3, 0x0, 0x7, r4, 0x6) socket(0x2, 0x3, 0xa) mmap$auto(0xf000, 0x8, 0x1000000003, 0x9b72, 0x2, 0x8000) r5 = openat$auto_proc_mountstats_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) pread64$auto(r5, &(0x7f0000000040)='\x8d]\x00', 0x80000000, 0x5) read$auto(0xffffffffffffffff, 0x0, 0x2) read$auto_clk_summary_fops_(r2, &(0x7f00000003c0)=""/198, 0xc6) ioctl$auto_NS_GET_TGID_IN_PIDNS(0xffffffffffffffff, 0x8004b709, 0x0) migrate_pages$auto(0x0, 0xa, &(0x7f0000000100)=0x5, &(0x7f0000000140)=0x2) syz_clone(0x280, &(0x7f0000000240), 0x0, 0x0, 0x0, 0x0) move_pages$auto(0x0, 0x1002, 0x0, &(0x7f0000001140), 0x0, 0x2) 1.220925852s ago: executing program 6 (id=1369): socket(0xf, 0x3, 0x2) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket(0x2, 0x0, 0x0) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8010) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000005280), 0x50b880, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x4, 0x3, 0x15f4da0a, 0xffffffff, 0x3, 0xfffffffffffffff9, 0x208000001f, 0x2, 0x6d3c, 0x9, 0x2, 0x6]}, 0x0) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) bpf$auto(0x0, &(0x7f0000000100)=@task_fd_query={0x2, 0x4, 0x0, 0x2, 0x8, 0xc, 0x66b, 0x4, 0x1}, 0x6f4) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/bus/most/drivers/most_core/components\x00', 0x100, 0x0) socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@xdp={0x2c, 0x8, 0x0, 0xd}, 0x58) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) io_uring_setup$auto(0x6, 0x0) read$auto_nsim_dev_trap_fa_cookie_fops_dev(r2, &(0x7f0000000080)=""/99, 0x63) setsockopt$auto(0x3, 0x1, 0x23, 0x0, 0xa) mmap$auto(0x0, 0x202000d, 0x3, 0xeb2, r1, 0x2) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) close_range$auto(0x2, 0x8, 0x0) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0x6, 0x4) read$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f00000010c0)=""/4096, 0x1000) mmap$auto(0x0, 0x8, 0xdc, 0xeb1, 0x0, 0x8002) 1.220677894s ago: executing program 3 (id=1370): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) r0 = socket(0x2, 0x5, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x18, 0xa, 0x1) socket(0xa, 0x2, 0x88) bind$auto(0x3, &(0x7f0000000000)=@generic={0xa, "dfffffffffffffff00"}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000080)={{&(0x7f0000000040), 0x1c, &(0x7f00000000c0)={0x0, 0x1a004}, 0x7, 0x0, 0x0, 0xb}, 0xfff}, 0x5, 0x8) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = socket(0xa, 0x1, 0x84) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0xa, 0x100073) r2 = socket(0x2, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) sendmmsg$auto(r2, &(0x7f0000000200)={{&(0x7f0000000040), 0x10, &(0x7f0000000140)={0x0, 0x1a000}, 0x7, 0x0, 0x2, 0xb}, 0xfff}, 0x3, 0x0) io_uring_setup$auto(0x200, 0x0) getsockopt$auto(r1, 0x84, 0x6, 0x0, 0x0) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000480)='/dev/sda1\x00', 0x8800, 0x0) cachestat$auto(r3, &(0x7f0000000640)={0x8, 0x4000000000008}, &(0x7f0000000680)={0x5, 0x100009, 0x384, 0x400, 0x1}, 0x0) 1.111095393s ago: executing program 3 (id=1371): socket(0xf, 0x3, 0x2) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket(0x2, 0x0, 0x0) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8010) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000005280), 0x50b880, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x4, 0x3, 0x15f4da0a, 0xffffffff, 0x3, 0xfffffffffffffff9, 0x208000001f, 0x2, 0x6d3c, 0x9, 0x2, 0x6]}, 0x0) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) bpf$auto(0x0, &(0x7f0000000100)=@task_fd_query={0x2, 0x4, 0x0, 0x2, 0x8, 0xc, 0x66b, 0x4, 0x1}, 0x6f4) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/bus/most/drivers/most_core/components\x00', 0x100, 0x0) socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@xdp={0x2c, 0x8, 0x0, 0xd}, 0x58) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) io_uring_setup$auto(0x6, 0x0) read$auto_nsim_dev_trap_fa_cookie_fops_dev(r2, &(0x7f0000000080)=""/99, 0x63) setsockopt$auto(0x3, 0x1, 0x23, 0x0, 0xa) mmap$auto(0x0, 0x202000d, 0x3, 0xeb2, r1, 0x2) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) 702.765914ms ago: executing program 0 (id=1372): close_range$auto(0x2, 0x8, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x4242, 0x0) prctl$auto(0x1000000001c, 0x4, 0x100000000, 0x400000000009, 0x3ffffffffb) setreuid$auto(0x0, 0x5) fcntl$auto(r0, 0x400, 0x1) setresuid$auto(0x2, 0xee01, 0x8080) close_range$auto(0xffffffffffffffff, 0xa, 0x0) socket(0xa, 0x2, 0x0) socket(0xa, 0x3, 0xff) close_range$auto(0x0, 0xfffffffffffff000, 0x2) open(&(0x7f0000000800)='./file0\x00', 0x6041, 0x80) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) bpf$auto(0x0, &(0x7f00000001c0)=@test={0xffffffffffffffff, 0xffff, 0x9, 0xffff, 0x84, 0xac1, 0x2, 0x36242398, 0xfffff5b2, 0x3bc, 0x20000000000009, 0x800, 0x7, 0x0, 0xfffffffd}, 0x6f7) sendmsg$auto_ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="d4000000", @ANYRES16=0x0, @ANYBLOB="100027bd7000fbdbdf2518000000200001800247eea41fac000014000200766574683100000000000000000000000800070063fbffff0500060001000000840002803d00488013b37090badc49d6dc93876646d25a4d297d01cd3b7da38d12889cc50d505f353dc42d0a3c0a14c7b46428910708003600", @ANYRES32=0x0, @ANYBLOB="0400b3800000003d003b800400a4800c009a00008000000000000004008680c16ab1b1b39dcaa14b6af7dcc011b43cf706e562811c62b28a702b72e0a87126700201000000000000000180080003"], 0xd4}, 0x1, 0x0, 0x0, 0x20000010}, 0x20008000) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) sendmsg$auto_ETHTOOL_MSG_WOL_SET(0xffffffffffffffff, &(0x7f0000002cc0)={0x0, 0x0, &(0x7f0000002c80)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYBLOB="010027bd"], 0x2c}, 0x1, 0x0, 0x0, 0x4801}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="12"], 0x1ac}}, 0x40000) socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) memfd_secret$auto(0x0) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) preadv2$auto(r1, &(0x7f0000000080)={0x0, 0x80000000}, 0x6, 0xffffffffffffffff, 0x4, 0x2e) ioctl$auto_BLKFLSBUF(r1, 0x1261, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, 0x0, 0x40, 0x0) mmap$auto(0x0, 0x202000a, 0x5, 0xeb1, 0xfffffffffffffffa, 0x8000) 702.443901ms ago: executing program 8 (id=1373): mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8003) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) r0 = prctl$auto(0x1000000003b, 0x3, 0x4, 0x5, 0x7) (async) r1 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/controlC1\x00', 0x60800, 0x0) (async) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/037/001\x00', 0x802, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_WRITE(r1, 0xc4c85513, &(0x7f0000000840)={{@raw=0x8, 0x7, 0xba28, 0x0, "708c58271a7985a7f5ed0dd58af8d149fc53d81fd4a7553c2f008b48a8a57689adcc1ca6d2cbfa93b50590c9", @inferred=0x0}, 0x0, @bytes=@data="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", "fa491e08108961dd5708680f1134935851612a52d629535f54f3832490fc4e7f79daef312b3df3307044713a4801d409aefe3f932f78fc311771094e769c0095f94ee6d74f2517f34a0bbbf502bf3392ac4d93bde5f733ba936c0890312cf035bc44117db9b683eedc5e02a703fc82750d8d6ebac0c3019ef8e6c1eecea33a59"}) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) madvise$auto(0x0, 0x200007, 0x19) (async) mmap$auto(0x0, 0x40009, 0x3, 0x9b72, 0xffffffffffffffff, 0x28000) (async) mmap$auto(0x0, 0x400, 0xdf, 0xeb1, 0x1272, 0x8000) (async) r3 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x80480, 0x0) ioctl$auto_PPPIOCSMRU(r3, 0xc004743e, 0x0) (async) sysfs$auto(0x2, 0x0, 0x0) (async) ioctl$auto_PPPIOCSMAXCID(r3, 0x40047451, 0x0) (async) madvise$auto(0x0, 0x2003f0, 0x15) syz_genetlink_get_family_id$auto_gtp(&(0x7f00000000c0), r0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) (async) mlock$auto(0xfbe8, 0x4) (async) mlock$auto(0x1a81, 0x2) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) r4 = open(&(0x7f0000000000)='./cgroup\x00', 0x80000, 0x61) fchdir$auto(r4) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup/cgroup.type\x00', 0x103042, 0x0) (async) rmdir$auto(&(0x7f0000000300)='./cgroup\x00') (async) ioctl$auto_PPPIOCGFLAGS(r3, 0x8004745a, &(0x7f0000000200)=0x7f) (async) close_range$auto(0x2, 0x8, 0x0) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) (async) syz_clone3(&(0x7f0000000340)={0x8020000, 0x0, 0x0, 0x0, {0x868}, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[r2, 0x0, 0x0], 0x3}, 0x58) 139.671701ms ago: executing program 3 (id=1374): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0xb2) mmap$auto(0x0, 0x9, 0x3, 0x8012, 0x3, 0x8000) fallocate$auto(0x8000000000000003, 0x0, 0xd, 0xcbd5d) socket(0xa, 0x3, 0x3b) bpf$auto(0xfffff011, &(0x7f0000000000)=@test={0xffffffffffffffff, 0x4, 0xfab2, 0x468, 0x9, 0x1000000000002, 0x4, 0x2, 0x4, 0x200, 0x1fd, 0xb6, 0x4, 0x6, 0x3}, 0xa3) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e12b7ac1ff0100"}, 0x58) mlock$auto(0x81, 0xffff) madvise$auto(0x0, 0x2000040080000004, 0xe) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snd/controlC0\x00', 0x0, 0x0) r1 = syz_genetlink_get_family_id$auto_smbd_genl(&(0x7f0000000200), r0) sendmsg$auto_KSMBD_EVENT_LOGOUT_REQUEST(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000280)={&(0x7f0000000340)={0x14, r1, 0x0, 0x70bd31, 0x25dfdbfb, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8800}, 0x20008411) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x10, 0x2, 0x15) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_SMC_NETLINK_GET_DEV_SMCD(0xffffffffffffffff, &(0x7f0000004380)={0x0, 0x0, &(0x7f0000004340)={&(0x7f0000004300)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB='\v'], 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x810) syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000300), 0xffffffffffffffff) read$auto(0xffffffffffffffff, &(0x7f0000000100)='nl80211\x00', 0xbe62) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="72010000", @ANYBLOB="12"], 0x1ac}}, 0x40000) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000380)='/dev/vbi16\x00', 0x2ca002, 0x0) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x200007, 0x19) 96.492506ms ago: executing program 6 (id=1375): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nbd(&(0x7f0000001d00), 0xffffffffffffffff) sendmsg$auto_NBD_CMD_CONNECT(r0, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f0000001280)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x8880) 0s ago: executing program 6 (id=1376): r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) mmap$auto(0x8000000000000, 0x128009, 0x6, 0xeb1, r0, 0x20000008000) (async) pwrite64$auto(0xc8, &(0x7f0000000340)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x86\xdds\x1cJ\x99\x00:<\x14\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\xadCl\x9e\xeb\xcd\vp\x99\x00\xc8\x06\xa5\xdc3\x02l@\x18*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0A\x94\xa3\xaef\x87\xd8\x95I\xfd\xa8\t\xac\x87\xb7\x1d\xd5\x83\xdcyu]\xde\xbe\xbf$<.}\x8b`\x04\xfc\xa2\xab\xb5]\x80\x00\xb9D\xc5\xbc\xf2a\xd66\xa5\xd3\xc1r\x96\x1e\x8db\x05=`\x01\x11\x04Tz\x87A$\x115\x95PUf\xa7\xfe\x19\x00\x82go}@W\xd5\xaej\x01\xbf>5n\x17S\xc0\x8a\xaf%O\xd1W\xa3ua+sUJ\xea\xf9\xb7p-\x128\x9d\xbaM_\xff\x1c\xc3sG\x04\xf2\xd3\xf3{;\xd4\xd7\x1c\x1dZ\xe9\xe9\xc9\x9cu5\xe9\xa2\xb3N\xd2\xc1\xc8\xa5\xadt\xd5BKD\x86\xeb%\a*\x06\xbb\x1e\xfb\x11U\f&\xcbP\xf1\xcf\xccb\xe8Wb\xc5ae\xe3\xf9l\xa9vK\xed\x8cL\xfb%g\x83;\xe1\xe2w\xd6\xaa6\x16\x8fx\x1a\xd7\xc8\xf4[\xbc\b\xe1Z\x92\x14Q\xde [ 231.906078][ T8736] dump_stack_lvl+0x16c/0x1f0 [ 231.906112][ T8736] should_fail_ex+0x512/0x640 [ 231.906144][ T8736] ? __kmalloc_noprof+0xca/0x880 [ 231.906170][ T8736] should_failslab+0xc2/0x120 [ 231.906203][ T8736] __kmalloc_noprof+0xdd/0x880 [ 231.906228][ T8736] ? aa_getprocattr+0x3d4/0x1110 [ 231.906261][ T8736] ? aa_getprocattr+0x3d4/0x1110 [ 231.906286][ T8736] aa_getprocattr+0x3d4/0x1110 [ 231.906318][ T8736] ? __pfx_aa_getprocattr+0x10/0x10 [ 231.906357][ T8736] apparmor_getprocattr+0x13c/0x330 [ 231.906386][ T8736] security_getprocattr+0x14a/0x1a0 [ 231.906424][ T8736] proc_pid_attr_read+0x15f/0x2b0 [ 231.906455][ T8736] ? __pfx_proc_pid_attr_read+0x10/0x10 [ 231.906487][ T8736] ? rw_verify_area+0xcf/0x6c0 [ 231.906511][ T8736] ? __pfx_proc_pid_attr_read+0x10/0x10 [ 231.906539][ T8736] vfs_read+0x1e1/0xcf0 [ 231.906571][ T8736] ? __pfx___mutex_lock+0x10/0x10 [ 231.906610][ T8736] ? __pfx_vfs_read+0x10/0x10 [ 231.906647][ T8736] ? __fget_files+0x20e/0x3c0 [ 231.906685][ T8736] ksys_read+0x12a/0x250 [ 231.906711][ T8736] ? __pfx_ksys_read+0x10/0x10 [ 231.906749][ T8736] do_syscall_64+0xcd/0x4b0 [ 231.906781][ T8736] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 231.906805][ T8736] RIP: 0033:0x7f8d7df8eec9 [ 231.906826][ T8736] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 231.906848][ T8736] RSP: 002b:00007f8d7edab038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 231.906870][ T8736] RAX: ffffffffffffffda RBX: 00007f8d7e1e5fa0 RCX: 00007f8d7df8eec9 [ 231.906887][ T8736] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 231.906901][ T8736] RBP: 00007f8d7edab090 R08: 0000000000000000 R09: 0000000000000000 [ 231.906915][ T8736] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 231.906930][ T8736] R13: 00007f8d7e1e6038 R14: 00007f8d7e1e5fa0 R15: 00007fff94ddb998 [ 231.906965][ T8736] [ 231.909803][ T8682] debugfs: 'hsr0' already exists in 'hsr' [ 232.149473][ T8682] Cannot create hsr debugfs directory [ 232.491508][ T8747] netlink: 8 bytes leftover after parsing attributes in process `syz.0.591'. [ 232.787698][ T8682] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 232.807851][ T8682] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 232.859954][ T8682] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 232.883588][ T52] Bluetooth: hci4: command tx timeout [ 232.905691][ T8682] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 232.961727][ T8756] netlink: 268 bytes leftover after parsing attributes in process `syz.1.594'. [ 233.418888][ T8682] 8021q: adding VLAN 0 to HW filter on device bond0 [ 233.504330][ T8682] 8021q: adding VLAN 0 to HW filter on device team0 [ 233.570306][ T7880] bridge0: port 1(bridge_slave_0) entered blocking state [ 233.577478][ T7880] bridge0: port 1(bridge_slave_0) entered forwarding state [ 233.688867][ T7882] bridge0: port 2(bridge_slave_1) entered blocking state [ 233.695984][ T7882] bridge0: port 2(bridge_slave_1) entered forwarding state [ 233.918434][ T8747] kexec: Could not allocate control_code_buffer [ 234.078036][ T8769] netlink: 268 bytes leftover after parsing attributes in process `syz.2.596'. [ 234.364982][ T8682] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 234.386081][ T8782] FAULT_INJECTION: forcing a failure. [ 234.386081][ T8782] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 234.419648][ T8782] CPU: 0 UID: 0 PID: 8782 Comm: syz.0.606 Not tainted syzkaller #0 PREEMPT(full) [ 234.419671][ T8782] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 234.419680][ T8782] Call Trace: [ 234.419685][ T8782] [ 234.419691][ T8782] dump_stack_lvl+0x16c/0x1f0 [ 234.419714][ T8782] should_fail_ex+0x512/0x640 [ 234.419737][ T8782] strncpy_from_user+0x3b/0x2e0 [ 234.419758][ T8782] getname_flags.part.0+0x8f/0x550 [ 234.419782][ T8782] getname_flags+0x93/0xf0 [ 234.419797][ T8782] do_sys_openat2+0xb8/0x1d0 [ 234.419818][ T8782] ? __pfx_do_sys_openat2+0x10/0x10 [ 234.419837][ T8782] ? fput+0x9b/0xd0 [ 234.419856][ T8782] ? __sys_sendmsg+0x18c/0x220 [ 234.419880][ T8782] __x64_sys_openat+0x174/0x210 [ 234.419901][ T8782] ? __pfx___x64_sys_openat+0x10/0x10 [ 234.419930][ T8782] do_syscall_64+0xcd/0x4b0 [ 234.419948][ T8782] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 234.419962][ T8782] RIP: 0033:0x7f8d7df8eec9 [ 234.419974][ T8782] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 234.419988][ T8782] RSP: 002b:00007f8d7edab038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 234.420002][ T8782] RAX: ffffffffffffffda RBX: 00007f8d7e1e5fa0 RCX: 00007f8d7df8eec9 [ 234.420012][ T8782] RDX: 0000000000000001 RSI: 0000000000000000 RDI: ffffffffffffff9c [ 234.420021][ T8782] RBP: 00007f8d7e011f91 R08: 0000000000000000 R09: 0000000000000000 [ 234.420029][ T8782] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 234.420037][ T8782] R13: 00007f8d7e1e6038 R14: 00007f8d7e1e5fa0 R15: 00007fff94ddb998 [ 234.420055][ T8782] [ 234.963663][ T52] Bluetooth: hci4: command tx timeout [ 235.240110][ T8682] veth0_vlan: entered promiscuous mode [ 235.240339][ T8798] netlink: 268 bytes leftover after parsing attributes in process `syz.2.602'. [ 235.449780][ T8682] veth1_vlan: entered promiscuous mode [ 235.500309][ T8787] kexec: Could not allocate control_code_buffer [ 235.551223][ T8682] veth0_macvtap: entered promiscuous mode [ 235.576589][ T8682] veth1_macvtap: entered promiscuous mode [ 235.646346][ T8682] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 235.657276][ T8803] netlink: 32 bytes leftover after parsing attributes in process `syz.0.603'. [ 235.679241][ T8682] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 235.713065][ T7880] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.734570][ T7880] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.754936][ T8803] netlink: 28 bytes leftover after parsing attributes in process `syz.0.603'. [ 235.764887][ T7880] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.801319][ T8803] bridge_slave_1: left allmulticast mode [ 235.807929][ T8803] bridge_slave_1: left promiscuous mode [ 235.814344][ T8803] bridge0: port 2(bridge_slave_1) entered disabled state [ 235.847196][ T8803] bridge_slave_0: left allmulticast mode [ 235.852947][ T8803] bridge_slave_0: left promiscuous mode [ 235.866178][ T8803] bridge0: port 1(bridge_slave_0) entered disabled state [ 235.956412][ T7880] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.185851][ T7588] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 236.239399][ T7588] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 236.357890][ T7875] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 236.386762][ T7875] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 237.044218][ T52] Bluetooth: hci4: command tx timeout [ 237.489782][ T8827] kexec: Could not allocate control_code_buffer [ 237.894628][ T8870] netlink: 24 bytes leftover after parsing attributes in process `syz.0.620'. [ 237.904333][ T8867] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 238.276320][ T8876] vivid-003: ================= START STATUS ================= [ 238.318244][ T8876] vivid-003: Radio HW Seek Mode: Bounded [ 238.325458][ T8876] vivid-003: Radio Programmable HW Seek: false [ 238.373576][ T8876] vivid-003: RDS Rx I/O Mode: Block I/O [ 238.379230][ T8876] vivid-003: Generate RBDS Instead of RDS: false [ 238.422429][ T8876] vivid-003: RDS Reception: true [ 238.483954][ T8876] vivid-003: RDS Program Type: 0 inactive [ 238.513691][ T8876] vivid-003: RDS PS Name: inactive [ 238.540845][ T8876] vivid-003: RDS Radio Text: inactive [ 238.570857][ T8876] vivid-003: RDS Traffic Announcement: false inactive [ 238.614601][ T8876] vivid-003: RDS Traffic Program: false inactive [ 238.637461][ T8876] vivid-003: RDS Music: false inactive [ 238.656597][ T8876] vivid-003: ================== END STATUS ================== [ 240.162214][ T8921] netlink: 'syz.2.634': attribute type 4 has an invalid length. [ 240.170114][ T8921] netlink: 'syz.2.634': attribute type 5 has an invalid length. [ 240.178244][ T8921] netlink: 10 bytes leftover after parsing attributes in process `syz.2.634'. [ 240.813751][ T8929] random: crng reseeded on system resumption [ 241.276509][ T8945] netlink: 28 bytes leftover after parsing attributes in process `syz.4.640'. [ 242.422906][ T8984] netlink: 'syz.1.650': attribute type 4 has an invalid length. [ 242.450180][ T8984] netlink: 'syz.1.650': attribute type 5 has an invalid length. [ 242.480039][ T8995] sock: sock_set_timeout: `syz.0.654' (pid 8995) tries to set negative timeout [ 242.586944][ T8984] netlink: 10 bytes leftover after parsing attributes in process `syz.1.650'. [ 244.246936][ T9025] kexec: Could not allocate control_code_buffer [ 244.349939][ T9059] netlink: 20 bytes leftover after parsing attributes in process `syz.4.665'. [ 244.413362][ T9059] netlink: 32 bytes leftover after parsing attributes in process `syz.4.665'. [ 245.496230][ T9092] FAULT_INJECTION: forcing a failure. [ 245.496230][ T9092] name failslab, interval 1, probability 0, space 0, times 0 [ 245.508975][ T9092] CPU: 1 UID: 0 PID: 9092 Comm: syz.4.672 Not tainted syzkaller #0 PREEMPT(full) [ 245.509011][ T9092] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 245.509032][ T9092] Call Trace: [ 245.509041][ T9092] [ 245.509055][ T9092] dump_stack_lvl+0x16c/0x1f0 [ 245.509094][ T9092] should_fail_ex+0x512/0x640 [ 245.509131][ T9092] ? kmem_cache_alloc_lru_noprof+0x66/0x6e0 [ 245.509165][ T9092] should_failslab+0xc2/0x120 [ 245.509200][ T9092] kmem_cache_alloc_lru_noprof+0x79/0x6e0 [ 245.509228][ T9092] ? __lock_acquire+0xb97/0x1ce0 [ 245.509266][ T9092] ? alloc_inode+0xc3/0x240 [ 245.509313][ T9092] ? alloc_inode+0xc3/0x240 [ 245.509348][ T9092] alloc_inode+0xc3/0x240 [ 245.509401][ T9092] new_inode+0x22/0x1c0 [ 245.509467][ T9092] configfs_new_inode+0x24/0x4a0 [ 245.509509][ T9092] configfs_create+0xd9/0x3a0 [ 245.509552][ T9092] configfs_lookup+0x38f/0x780 [ 245.509581][ T9092] ? __pfx_configfs_lookup+0x10/0x10 [ 245.509606][ T9092] lookup_open.isra.0+0x4d7/0x1580 [ 245.509642][ T9092] ? __pfx_lookup_open.isra.0+0x10/0x10 [ 245.509689][ T9092] ? mnt_get_write_access+0x1e9/0x2f0 [ 245.509733][ T9092] path_openat+0x893/0x2cb0 [ 245.509775][ T9092] ? __pfx_path_openat+0x10/0x10 [ 245.509816][ T9092] do_filp_open+0x20b/0x470 [ 245.509847][ T9092] ? __pfx_do_filp_open+0x10/0x10 [ 245.509906][ T9092] ? alloc_fd+0x471/0x7d0 [ 245.509944][ T9092] do_sys_openat2+0x11b/0x1d0 [ 245.509982][ T9092] ? __pfx_do_sys_openat2+0x10/0x10 [ 245.510035][ T9092] __x64_sys_openat+0x174/0x210 [ 245.510075][ T9092] ? __pfx___x64_sys_openat+0x10/0x10 [ 245.510129][ T9092] do_syscall_64+0xcd/0x4b0 [ 245.510164][ T9092] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 245.510191][ T9092] RIP: 0033:0x7fc832d8eec9 [ 245.510212][ T9092] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 245.510237][ T9092] RSP: 002b:00007fc833b6e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 245.510261][ T9092] RAX: ffffffffffffffda RBX: 00007fc832fe6180 RCX: 00007fc832d8eec9 [ 245.510278][ T9092] RDX: 0000000000189002 RSI: 0000200000000100 RDI: ffffffffffffff9c [ 245.510294][ T9092] RBP: 00007fc832e11f91 R08: 0000000000000000 R09: 0000000000000000 [ 245.510308][ T9092] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 245.510323][ T9092] R13: 00007fc832fe6218 R14: 00007fc832fe6180 R15: 00007fffd9c36438 [ 245.510358][ T9092] [ 245.918642][ T9075] kexec: Could not allocate control_code_buffer [ 246.276964][ T9114] random: crng reseeded on system resumption [ 246.488405][ T30] audit: type=1804 audit(4294967308.450:18): pid=9126 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.675" name="/newroot/15/file0" dev="tmpfs" ino=97 res=1 errno=0 [ 247.255093][ T9146] vivid-007: ================= START STATUS ================= [ 247.264063][ T9146] vivid-007: Generate PTS: true [ 247.269121][ T9146] vivid-007: Generate SCR: true [ 247.274840][ T9146] tpg source WxH: 320x240 (Y'CbCr) [ 247.279942][ T9146] tpg field: 1 [ 247.283289][ T9146] tpg crop: (0,0)/320x240 [ 247.293087][ T9146] tpg compose: (0,0)/320x240 [ 247.303305][ T9146] tpg colorspace: 8 [ 247.344382][ T9146] tpg transfer function: 0/0 [ 247.348978][ T9146] tpg Y'CbCr encoding: 0/0 [ 247.356919][ T9146] tpg quantization: 0/0 [ 247.373823][ T9146] tpg RGB range: 0/2 [ 247.378416][ T9146] vivid-007: ================== END STATUS ================== [ 247.469707][ T9152] netlink: 268 bytes leftover after parsing attributes in process `syz.0.683'. [ 247.904988][ T9172] netlink: 'syz.1.686': attribute type 1 has an invalid length. [ 247.930602][ T9172] nbd: error processing sock list [ 248.511516][ T52] block nbd0: Receive control failed (result -107) [ 249.150982][ T9233] netlink: 338 bytes leftover after parsing attributes in process `syz.2.692'. [ 250.776732][ T9266] random: crng reseeded on system resumption [ 250.807286][ T9268] ======================================================= [ 250.807286][ T9268] WARNING: The mand mount option has been deprecated and [ 250.807286][ T9268] and is ignored by this kernel. Remove the mand [ 250.807286][ T9268] option from the mount to silence this warning. [ 250.807286][ T9268] ======================================================= [ 250.917222][ T60] netdevsim netdevsim15 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.164960][ T9271] kexec: Could not allocate control_code_buffer [ 252.726641][ T52] block nbd9: Receive control failed (result -107) [ 252.829650][ T9299] nbd: must specify a size in bytes for the device [ 253.200783][ T9310] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !PjE ùrõ£Ò„yù*›"¤l-ý¤ôy–ú„ [ 253.475972][ T9317] FAULT_INJECTION: forcing a failure. [ 253.475972][ T9317] name failslab, interval 1, probability 0, space 0, times 0 [ 253.489118][ T9317] CPU: 0 UID: 0 PID: 9317 Comm: syz.4.711 Not tainted syzkaller #0 PREEMPT(full) [ 253.489151][ T9317] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 253.489167][ T9317] Call Trace: [ 253.489175][ T9317] [ 253.489184][ T9317] dump_stack_lvl+0x16c/0x1f0 [ 253.489221][ T9317] should_fail_ex+0x512/0x640 [ 253.489254][ T9317] ? fs_reclaim_acquire+0xae/0x150 [ 253.489291][ T9317] should_failslab+0xc2/0x120 [ 253.489326][ T9317] kmem_cache_alloc_noprof+0x75/0x6e0 [ 253.489353][ T9317] ? __pfx_map_id_range_down+0x10/0x10 [ 253.489378][ T9317] ? security_inode_alloc+0x3b/0x2b0 [ 253.489420][ T9317] ? security_inode_alloc+0x3b/0x2b0 [ 253.489454][ T9317] security_inode_alloc+0x3b/0x2b0 [ 253.489492][ T9317] inode_init_always_gfp+0xce4/0x1030 [ 253.489526][ T9317] alloc_inode+0x86/0x240 [ 253.489562][ T9317] new_inode+0x22/0x1c0 [ 253.489598][ T9317] configfs_new_inode+0x24/0x4a0 [ 253.489637][ T9317] configfs_create+0xd9/0x3a0 [ 253.489677][ T9317] configfs_lookup+0x38f/0x780 [ 253.489706][ T9317] ? __pfx_configfs_lookup+0x10/0x10 [ 253.489729][ T9317] lookup_open.isra.0+0x4d7/0x1580 [ 253.489764][ T9317] ? __pfx_lookup_open.isra.0+0x10/0x10 [ 253.489811][ T9317] ? mnt_get_write_access+0x1e9/0x2f0 [ 253.489850][ T9317] path_openat+0x893/0x2cb0 [ 253.489891][ T9317] ? __pfx_path_openat+0x10/0x10 [ 253.489931][ T9317] do_filp_open+0x20b/0x470 [ 253.489961][ T9317] ? __pfx_do_filp_open+0x10/0x10 [ 253.490026][ T9317] ? alloc_fd+0x471/0x7d0 [ 253.490064][ T9317] do_sys_openat2+0x11b/0x1d0 [ 253.490107][ T9317] ? __pfx_do_sys_openat2+0x10/0x10 [ 253.490160][ T9317] __x64_sys_openat+0x174/0x210 [ 253.490195][ T9317] ? __pfx___x64_sys_openat+0x10/0x10 [ 253.490249][ T9317] do_syscall_64+0xcd/0x4b0 [ 253.490282][ T9317] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 253.490308][ T9317] RIP: 0033:0x7fc832d8eec9 [ 253.490328][ T9317] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 253.490353][ T9317] RSP: 002b:00007fc833b8f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 253.490378][ T9317] RAX: ffffffffffffffda RBX: 00007fc832fe6090 RCX: 00007fc832d8eec9 [ 253.490396][ T9317] RDX: 0000000000189002 RSI: 0000200000000100 RDI: ffffffffffffff9c [ 253.490413][ T9317] RBP: 00007fc832e11f91 R08: 0000000000000000 R09: 0000000000000000 [ 253.490428][ T9317] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 253.490443][ T9317] R13: 00007fc832fe6128 R14: 00007fc832fe6090 R15: 00007fffd9c36438 [ 253.490479][ T9317] [ 254.315999][ T9322] netlink: 28 bytes leftover after parsing attributes in process `syz.4.713'. [ 255.508915][ T9314] kexec: Could not allocate control_code_buffer [ 255.768191][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.774844][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.854683][ T9336] nbd: must specify a size in bytes for the device [ 256.102089][ T30] audit: type=1804 audit(4294967318.060:19): pid=9342 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.719" name="file0" dev="tmpfs" ino=1076 res=1 errno=0 [ 256.944369][ T9368] netlink: 12 bytes leftover after parsing attributes in process `syz.2.727'. [ 256.953269][ T9368] nbd: must specify a size in bytes for the device [ 257.592953][ T9392] netlink: 12 bytes leftover after parsing attributes in process `syz.2.735'. [ 257.604931][ T9392] netlink: 12 bytes leftover after parsing attributes in process `syz.2.735'. [ 258.604404][ T9406] netlink: 268 bytes leftover after parsing attributes in process `syz.2.738'. [ 263.331621][ T5842] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 263.341303][ T5842] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 263.349454][ T5842] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 263.358109][ T5842] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 263.366485][ T5842] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 263.514709][ T9416] chnl_net:caif_netlink_parms(): no params data found [ 263.581685][ T9416] bridge0: port 1(bridge_slave_0) entered blocking state [ 263.589628][ T9416] bridge0: port 1(bridge_slave_0) entered disabled state [ 263.597022][ T9416] bridge_slave_0: entered allmulticast mode [ 263.604485][ T9416] bridge_slave_0: entered promiscuous mode [ 263.612723][ T9416] bridge0: port 2(bridge_slave_1) entered blocking state [ 263.620070][ T9416] bridge0: port 2(bridge_slave_1) entered disabled state [ 263.627633][ T9416] bridge_slave_1: entered allmulticast mode [ 263.634786][ T9416] bridge_slave_1: entered promiscuous mode [ 263.662350][ T9416] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 263.675361][ T9416] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 263.709413][ T9416] team0: Port device team_slave_0 added [ 263.716935][ T9416] team0: Port device team_slave_1 added [ 263.744415][ T9416] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 263.751374][ T9416] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 263.777502][ T9416] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 263.789564][ T9416] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 263.798123][ T9416] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 263.824405][ T9416] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 263.864361][ T9416] hsr_slave_0: entered promiscuous mode [ 263.870592][ T9416] hsr_slave_1: entered promiscuous mode [ 263.876999][ T9416] debugfs: 'hsr0' already exists in 'hsr' [ 263.882719][ T9416] Cannot create hsr debugfs directory [ 264.010728][ T9416] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 264.021723][ T9416] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 264.031609][ T9416] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 264.042433][ T9416] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 264.071690][ T9416] bridge0: port 2(bridge_slave_1) entered blocking state [ 264.078805][ T9416] bridge0: port 2(bridge_slave_1) entered forwarding state [ 264.086343][ T9416] bridge0: port 1(bridge_slave_0) entered blocking state [ 264.093515][ T9416] bridge0: port 1(bridge_slave_0) entered forwarding state [ 264.147692][ T9416] 8021q: adding VLAN 0 to HW filter on device bond0 [ 264.166795][ T7873] bridge0: port 1(bridge_slave_0) entered disabled state [ 264.175536][ T7873] bridge0: port 2(bridge_slave_1) entered disabled state [ 264.191132][ T9416] 8021q: adding VLAN 0 to HW filter on device team0 [ 264.210953][ T7880] bridge0: port 1(bridge_slave_0) entered blocking state [ 264.218079][ T7880] bridge0: port 1(bridge_slave_0) entered forwarding state [ 264.226795][ T7880] bridge0: port 2(bridge_slave_1) entered blocking state [ 264.233913][ T7880] bridge0: port 2(bridge_slave_1) entered forwarding state [ 264.404988][ T9416] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 264.599700][ T9416] veth0_vlan: entered promiscuous mode [ 264.617343][ T9416] veth1_vlan: entered promiscuous mode [ 264.645452][ T9416] veth0_macvtap: entered promiscuous mode [ 264.654371][ T9416] veth1_macvtap: entered promiscuous mode [ 264.672068][ T9416] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 264.688346][ T9416] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 264.703051][ T7880] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.713605][ T7880] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.722795][ T7880] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.736536][ T7881] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.828258][ T7593] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 264.842180][ T7593] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 264.867755][ T7881] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 264.876685][ T7881] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 264.940959][ T9442] netlink: 28 bytes leftover after parsing attributes in process `syz.5.742'. [ 265.443870][ T52] Bluetooth: hci5: command tx timeout [ 266.330108][ T5842] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 266.339269][ T5842] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 266.347315][ T5842] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 266.357011][ T5842] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 266.365261][ T5842] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 266.521984][ T9445] chnl_net:caif_netlink_parms(): no params data found [ 266.638064][ T9445] bridge0: port 1(bridge_slave_0) entered blocking state [ 266.652659][ T9445] bridge0: port 1(bridge_slave_0) entered disabled state [ 266.662036][ T9445] bridge_slave_0: entered allmulticast mode [ 266.670696][ T9445] bridge_slave_0: entered promiscuous mode [ 266.681929][ T9445] bridge0: port 2(bridge_slave_1) entered blocking state [ 266.690871][ T9445] bridge0: port 2(bridge_slave_1) entered disabled state [ 266.698404][ T9445] bridge_slave_1: entered allmulticast mode [ 266.706695][ T9445] bridge_slave_1: entered promiscuous mode [ 266.813167][ T9445] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 266.842663][ T9445] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 266.868235][ T9454] usb usb8: usbfs: interface 0 claimed by hub while 'syz.5.744' sets config #0 [ 266.937044][ T9445] team0: Port device team_slave_0 added [ 266.947993][ T9445] team0: Port device team_slave_1 added [ 266.995460][ T9445] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 267.002457][ T9445] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 267.032665][ T9445] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 267.052986][ T9445] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 267.061207][ T9445] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 267.118120][ T9445] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 267.205673][ T9445] hsr_slave_0: entered promiscuous mode [ 267.221759][ T9445] hsr_slave_1: entered promiscuous mode [ 267.231069][ T9445] debugfs: 'hsr0' already exists in 'hsr' [ 267.237191][ T9445] Cannot create hsr debugfs directory [ 267.259451][ T9454] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 267.334672][ T9459] FAULT_INJECTION: forcing a failure. [ 267.334672][ T9459] name failslab, interval 1, probability 0, space 0, times 0 [ 267.347458][ T9459] CPU: 1 UID: 0 PID: 9459 Comm: syz.5.745 Not tainted syzkaller #0 PREEMPT(full) [ 267.347491][ T9459] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 267.347506][ T9459] Call Trace: [ 267.347520][ T9459] [ 267.347547][ T9459] dump_stack_lvl+0x16c/0x1f0 [ 267.347583][ T9459] should_fail_ex+0x512/0x640 [ 267.347618][ T9459] ? __kmalloc_noprof+0xca/0x880 [ 267.347647][ T9459] should_failslab+0xc2/0x120 [ 267.347679][ T9459] __kmalloc_noprof+0xdd/0x880 [ 267.347703][ T9459] ? string_escape_mem+0x6c8/0xde0 [ 267.347726][ T9459] ? kstrdup_quotable+0xc2/0x190 [ 267.347757][ T9459] ? kstrdup_quotable+0xc2/0x190 [ 267.347780][ T9459] kstrdup_quotable+0xc2/0x190 [ 267.347805][ T9459] ? __pfx_kstrdup_quotable+0x10/0x10 [ 267.347833][ T9459] ? get_cmdline+0x86/0x380 [ 267.347872][ T9459] kstrdup_quotable_cmdline+0x127/0x210 [ 267.347903][ T9459] __report_access+0x77/0x370 [ 267.347930][ T9459] ? _raw_spin_unlock_irq+0x23/0x50 [ 267.347961][ T9459] task_work_run+0x14d/0x240 [ 267.347990][ T9459] ? __pfx_task_work_run+0x10/0x10 [ 267.348029][ T9459] exit_to_user_mode_loop+0xec/0x130 [ 267.348056][ T9459] do_syscall_64+0x419/0x4b0 [ 267.348090][ T9459] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 267.348115][ T9459] RIP: 0033:0x7fb16198eec9 [ 267.348145][ T9459] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 267.348175][ T9459] RSP: 002b:00007fb162905038 EFLAGS: 00000246 ORIG_RAX: 0000000000000065 [ 267.348200][ T9459] RAX: ffffffffffffffff RBX: 00007fb161be5fa0 RCX: 00007fb16198eec9 [ 267.348218][ T9459] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000004206 [ 267.348235][ T9459] RBP: 00007fb161a11f91 R08: 0000000000000000 R09: 0000000000000000 [ 267.348251][ T9459] R10: 0000000000200005 R11: 0000000000000246 R12: 0000000000000000 [ 267.348266][ T9459] R13: 00007fb161be6038 R14: 00007fb161be5fa0 R15: 00007ffe09aade28 [ 267.348298][ T9459] [ 267.348336][ T9459] ptrace attach of "./syz-executor exec"[9416] was attempted by "(null)"[9459] [ 267.528388][ T5842] Bluetooth: hci5: command tx timeout [ 267.747176][ T9445] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 267.779685][ T9445] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 267.794996][ T9445] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 267.805645][ T9445] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 267.910598][ T9472] FAULT_INJECTION: forcing a failure. [ 267.910598][ T9472] name failslab, interval 1, probability 0, space 0, times 0 [ 267.936380][ T9472] CPU: 1 UID: 0 PID: 9472 Comm: syz.5.747 Not tainted syzkaller #0 PREEMPT(full) [ 267.936414][ T9472] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 267.936429][ T9472] Call Trace: [ 267.936437][ T9472] [ 267.936448][ T9472] dump_stack_lvl+0x16c/0x1f0 [ 267.936485][ T9472] should_fail_ex+0x512/0x640 [ 267.936520][ T9472] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 267.936553][ T9472] should_failslab+0xc2/0x120 [ 267.936591][ T9472] kmem_cache_alloc_noprof+0x75/0x6e0 [ 267.936619][ T9472] ? alloc_empty_file+0x55/0x1e0 [ 267.936664][ T9472] ? alloc_empty_file+0x55/0x1e0 [ 267.936697][ T9472] ? _raw_spin_unlock+0x28/0x50 [ 267.936721][ T9472] alloc_empty_file+0x55/0x1e0 [ 267.936759][ T9472] alloc_file_pseudo+0x13a/0x230 [ 267.936808][ T9472] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 267.936859][ T9472] __shmem_file_setup+0x1a3/0x330 [ 267.936905][ T9472] shmem_zero_setup+0x93/0x1a0 [ 267.936935][ T9472] __mmap_region+0x2076/0x27a0 [ 267.936968][ T9472] ? __pfx___mmap_region+0x10/0x10 [ 267.936992][ T9472] ? finish_task_switch.isra.0+0x21c/0xc10 [ 267.937026][ T9472] ? rcu_is_watching+0x12/0xc0 [ 267.937056][ T9472] ? finish_task_switch.isra.0+0x221/0xc10 [ 267.937089][ T9472] ? finish_task_switch.isra.0+0x2fa/0xc10 [ 267.937149][ T9472] ? __pfx___schedule+0x10/0x10 [ 267.937217][ T9445] 8021q: adding VLAN 0 to HW filter on device bond0 [ 267.937219][ T9472] ? trace_cap_capable+0x18d/0x200 [ 267.937261][ T9472] mmap_region+0x1ab/0x3f0 [ 267.937286][ T9472] ? __get_unmapped_area+0x267/0x440 [ 267.937325][ T9472] do_mmap+0xa3e/0x1210 [ 267.937365][ T9472] ? __pfx_do_mmap+0x10/0x10 [ 267.937397][ T9472] ? __pfx_down_write_killable+0x10/0x10 [ 267.937438][ T9472] vm_mmap_pgoff+0x29e/0x470 [ 267.937477][ T9472] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 267.937517][ T9472] ? rcu_is_watching+0x12/0xc0 [ 267.937546][ T9472] ? irqentry_exit+0x3b/0x90 [ 267.937579][ T9472] ksys_mmap_pgoff+0x7d/0x5c0 [ 267.937618][ T9472] __x64_sys_mmap+0x125/0x190 [ 267.937647][ T9472] do_syscall_64+0xcd/0x4b0 [ 267.937679][ T9472] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 267.937705][ T9472] RIP: 0033:0x7fb16198eec9 [ 267.937726][ T9472] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 267.937749][ T9472] RSP: 002b:00007fb1628e4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 267.937773][ T9472] RAX: ffffffffffffffda RBX: 00007fb161be6090 RCX: 00007fb16198eec9 [ 267.937797][ T9472] RDX: 0000000000000003 RSI: 0000000002020009 RDI: 0000000000000000 [ 267.937813][ T9472] RBP: 00007fb161a11f91 R08: 0000000000000c18 R09: 0000000000008000 [ 267.937830][ T9472] R10: 0000000000000eb1 R11: 0000000000000246 R12: 0000000000000000 [ 267.937846][ T9472] R13: 00007fb161be6128 R14: 00007fb161be6090 R15: 00007ffe09aade28 [ 267.937882][ T9472] [ 268.250998][ T9445] 8021q: adding VLAN 0 to HW filter on device team0 [ 268.265790][ T7881] bridge0: port 1(bridge_slave_0) entered blocking state [ 268.272919][ T7881] bridge0: port 1(bridge_slave_0) entered forwarding state [ 268.301369][ T7881] bridge0: port 2(bridge_slave_1) entered blocking state [ 268.308496][ T7881] bridge0: port 2(bridge_slave_1) entered forwarding state [ 268.403554][ T5842] Bluetooth: hci6: command tx timeout [ 268.514632][ T9445] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 268.889950][ T9445] veth0_vlan: entered promiscuous mode [ 268.920245][ T9445] veth1_vlan: entered promiscuous mode [ 268.997715][ T9445] veth0_macvtap: entered promiscuous mode [ 269.008901][ T9445] veth1_macvtap: entered promiscuous mode [ 269.055393][ T9445] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 269.078998][ T9445] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 269.104670][ T7880] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.114455][ T7880] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.186086][ T7880] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.201539][ T7880] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.260283][ T9491] vivid-003: ================= START STATUS ================= [ 269.274349][ T9491] vivid-003: Radio HW Seek Mode: Bounded [ 269.281904][ T9491] vivid-003: Radio Programmable HW Seek: false [ 269.299686][ T9491] vivid-003: RDS Rx I/O Mode: Block I/O [ 269.307315][ T9491] vivid-003: Generate RBDS Instead of RDS: false [ 269.326079][ T9491] vivid-003: RDS Reception: true [ 269.331069][ T9491] vivid-003: RDS Program Type: 0 inactive [ 269.339860][ T9492] block nbd0: shutting down sockets [ 269.345503][ T9491] vivid-003: RDS PS Name: inactive [ 269.355260][ T9491] vivid-003: RDS Radio Text: inactive [ 269.360777][ T9491] vivid-003: RDS Traffic Announcement: false inactive [ 269.369536][ T7880] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 269.378255][ T7880] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 269.387765][ T9491] vivid-003: RDS Traffic Program: false inactive [ 269.395450][ T9491] vivid-003: RDS Music: false inactive [ 269.401076][ T9491] vivid-003: ================== END STATUS ================== [ 269.431116][ T7873] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 269.440292][ T7873] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 269.614519][ T5842] Bluetooth: hci5: command tx timeout [ 269.639180][ T9498] FAULT_INJECTION: forcing a failure. [ 269.639180][ T9498] name failslab, interval 1, probability 0, space 0, times 0 [ 269.652643][ T9498] CPU: 1 UID: 0 PID: 9498 Comm: syz.6.743 Not tainted syzkaller #0 PREEMPT(full) [ 269.652696][ T9498] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 269.652707][ T9498] Call Trace: [ 269.652714][ T9498] [ 269.652720][ T9498] dump_stack_lvl+0x16c/0x1f0 [ 269.652745][ T9498] should_fail_ex+0x512/0x640 [ 269.652766][ T9498] ? __kmalloc_noprof+0xca/0x880 [ 269.652783][ T9498] should_failslab+0xc2/0x120 [ 269.652804][ T9498] __kmalloc_noprof+0xdd/0x880 [ 269.652818][ T9498] ? sk_prot_alloc+0x1a8/0x2a0 [ 269.652836][ T9498] ? sk_prot_alloc+0x1a8/0x2a0 [ 269.652849][ T9498] sk_prot_alloc+0x1a8/0x2a0 [ 269.652870][ T9498] sk_alloc+0x36/0xc20 [ 269.652890][ T9498] mctp_pf_create+0xe8/0x360 [ 269.652912][ T9498] __sock_create+0x335/0x8d0 [ 269.652935][ T9498] __sys_socket+0x14d/0x260 [ 269.652952][ T9498] ? __pfx___sys_socket+0x10/0x10 [ 269.652967][ T9498] ? xfd_validate_state+0x61/0x180 [ 269.652986][ T9498] __x64_sys_socket+0x72/0xb0 [ 269.653002][ T9498] ? lockdep_hardirqs_on+0x7c/0x110 [ 269.653018][ T9498] do_syscall_64+0xcd/0x4b0 [ 269.653037][ T9498] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 269.653051][ T9498] RIP: 0033:0x7f0a6238eec9 [ 269.653063][ T9498] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 269.653078][ T9498] RSP: 002b:00007f0a6323f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 269.653092][ T9498] RAX: ffffffffffffffda RBX: 00007f0a625e6090 RCX: 00007f0a6238eec9 [ 269.653102][ T9498] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 000000000000002d [ 269.653110][ T9498] RBP: 00007f0a62411f91 R08: 0000000000000000 R09: 0000000000000000 [ 269.653118][ T9498] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 269.653126][ T9498] R13: 00007f0a625e6128 R14: 00007f0a625e6090 R15: 00007ffeb03e0de8 [ 269.653144][ T9498] [ 270.480782][ T9508] netlink: 'syz.6.753': attribute type 11 has an invalid length. [ 270.489037][ T5842] Bluetooth: hci6: command tx timeout [ 270.614558][ T5842] block nbd0: Receive control failed (result -107) [ 270.664846][ T9513] netlink: 8 bytes leftover after parsing attributes in process `syz.5.754'. [ 271.700512][ T5842] Bluetooth: hci5: command tx timeout [ 272.258472][ T9521] netlink: 342 bytes leftover after parsing attributes in process `syz.5.758'. [ 272.466838][ T9531] netlink: 28 bytes leftover after parsing attributes in process `syz.5.761'. [ 272.563545][ T5842] Bluetooth: hci6: command tx timeout [ 272.626289][ T5842] block nbd10: Receive control failed (result -107) [ 272.792682][ T9538] netlink: 'syz.5.764': attribute type 11 has an invalid length. [ 272.799251][ T9540] netlink: 28 bytes leftover after parsing attributes in process `syz.6.765'. [ 272.944184][ T9545] netlink: 28 bytes leftover after parsing attributes in process `syz.5.766'. [ 272.978323][ T52] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 272.989113][ T52] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 272.998203][ T52] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 273.011166][ T52] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 273.022208][ T52] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 273.202295][ T9552] netlink: 50 bytes leftover after parsing attributes in process `syz.5.768'. [ 273.431297][ T9546] chnl_net:caif_netlink_parms(): no params data found [ 273.728623][ T9546] bridge0: port 1(bridge_slave_0) entered blocking state [ 273.738317][ T9546] bridge0: port 1(bridge_slave_0) entered disabled state [ 273.748826][ T9546] bridge_slave_0: entered allmulticast mode [ 273.759599][ T9546] bridge_slave_0: entered promiscuous mode [ 273.768368][ T9546] bridge0: port 2(bridge_slave_1) entered blocking state [ 273.789854][ T9546] bridge0: port 2(bridge_slave_1) entered disabled state [ 273.808609][ T9546] bridge_slave_1: entered allmulticast mode [ 273.826171][ T9546] bridge_slave_1: entered promiscuous mode [ 273.879076][ T9546] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 273.896183][ T9546] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 273.956077][ T9546] team0: Port device team_slave_0 added [ 273.977588][ T9546] team0: Port device team_slave_1 added [ 274.019020][ T9546] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 274.026092][ T9546] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 274.082864][ T9546] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 274.106520][ T9546] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 274.113842][ T9546] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 274.141538][ T9546] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 274.254747][ T9546] hsr_slave_0: entered promiscuous mode [ 274.282026][ T9546] hsr_slave_1: entered promiscuous mode [ 274.315785][ T9546] debugfs: 'hsr0' already exists in 'hsr' [ 274.321555][ T9546] Cannot create hsr debugfs directory [ 274.645015][ T5842] Bluetooth: hci6: command tx timeout [ 274.807050][ T52] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 274.816472][ T52] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 274.825759][ T52] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 274.835114][ T52] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 274.845144][ T52] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 274.932216][ T9572] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 275.118081][ T52] block nbd11: Receive control failed (result -107) [ 275.126152][ T5842] Bluetooth: hci7: command tx timeout [ 275.174260][ T9546] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 275.187997][ T9546] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 275.247002][ T9546] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 275.298131][ T9546] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 275.752625][ T9575] chnl_net:caif_netlink_parms(): no params data found [ 276.155256][ T9575] bridge0: port 1(bridge_slave_0) entered blocking state [ 276.162361][ T9575] bridge0: port 1(bridge_slave_0) entered disabled state [ 276.237421][ T9575] bridge_slave_0: entered allmulticast mode [ 276.249529][ T9575] bridge_slave_0: entered promiscuous mode [ 276.286240][ T9575] bridge0: port 2(bridge_slave_1) entered blocking state [ 276.293552][ T9575] bridge0: port 2(bridge_slave_1) entered disabled state [ 276.300806][ T9575] bridge_slave_1: entered allmulticast mode [ 276.345337][ T9575] bridge_slave_1: entered promiscuous mode [ 276.383730][ T9603] FAULT_INJECTION: forcing a failure. [ 276.383730][ T9603] name fail_futex, interval 1, probability 0, space 0, times 0 [ 276.421810][ T9546] 8021q: adding VLAN 0 to HW filter on device bond0 [ 276.439592][ T9603] CPU: 0 UID: 0 PID: 9603 Comm: syz.6.776 Not tainted syzkaller #0 PREEMPT(full) [ 276.439626][ T9603] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 276.439639][ T9603] Call Trace: [ 276.439647][ T9603] [ 276.439657][ T9603] dump_stack_lvl+0x16c/0x1f0 [ 276.439696][ T9603] should_fail_ex+0x512/0x640 [ 276.439734][ T9603] get_futex_key+0x1d0/0x1560 [ 276.439771][ T9603] ? __pfx_get_futex_key+0x10/0x10 [ 276.439815][ T9603] ? __pfx___schedule+0x10/0x10 [ 276.439840][ T9603] ? __pfx___resched_curr+0x10/0x10 [ 276.439871][ T9603] ? __cgroup_account_cputime+0xcc/0x120 [ 276.439908][ T9603] futex_wait_setup+0x9d/0x550 [ 276.439942][ T9603] __futex_wait+0x193/0x2f0 [ 276.439970][ T9603] ? __pfx___futex_wait+0x10/0x10 [ 276.439996][ T9603] ? __pfx_futex_wake_mark+0x10/0x10 [ 276.440028][ T9603] ? futex_private_hash_put+0x176/0x300 [ 276.440065][ T9603] ? futex_private_hash_put+0x18a/0x300 [ 276.440102][ T9603] futex_wait+0xe8/0x380 [ 276.440126][ T9603] ? __pfx_futex_wait+0x10/0x10 [ 276.440171][ T9603] do_futex+0x229/0x350 [ 276.440207][ T9603] ? __pfx_do_futex+0x10/0x10 [ 276.440241][ T9603] ? fput+0x9b/0xd0 [ 276.440275][ T9603] ? __sys_sendmsg+0x18c/0x220 [ 276.440313][ T9603] __x64_sys_futex+0x1e0/0x4c0 [ 276.440358][ T9603] ? __pfx___x64_sys_futex+0x10/0x10 [ 276.440394][ T9603] ? xfd_validate_state+0x61/0x180 [ 276.440428][ T9603] do_syscall_64+0xcd/0x4b0 [ 276.440457][ T9603] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 276.440482][ T9603] RIP: 0033:0x7f0a6238eec9 [ 276.440503][ T9603] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 276.440527][ T9603] RSP: 002b:00007f0a632600e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 276.440552][ T9603] RAX: ffffffffffffffda RBX: 00007f0a625e5fa8 RCX: 00007f0a6238eec9 [ 276.440569][ T9603] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f0a625e5fa8 [ 276.440585][ T9603] RBP: 00007f0a625e5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 276.440601][ T9603] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 276.440616][ T9603] R13: 00007f0a625e6038 R14: 00007ffeb03e0d00 R15: 00007ffeb03e0de8 [ 276.440651][ T9603] [ 276.718201][ T9575] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 276.746616][ T9575] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 276.783028][ T9575] team0: Port device team_slave_0 added [ 276.794326][ T9575] team0: Port device team_slave_1 added [ 276.834889][ T9575] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 276.842054][ T9575] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 276.871341][ T9575] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 276.884542][ T52] Bluetooth: hci3: command tx timeout [ 276.885284][ T9575] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 276.898052][ T9575] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 276.942195][ T9575] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 276.979702][ T9546] 8021q: adding VLAN 0 to HW filter on device team0 [ 277.087605][ T7880] bridge0: port 1(bridge_slave_0) entered blocking state [ 277.094726][ T7880] bridge0: port 1(bridge_slave_0) entered forwarding state [ 277.112790][ T9575] hsr_slave_0: entered promiscuous mode [ 277.120265][ T9575] hsr_slave_1: entered promiscuous mode [ 277.127589][ T9575] debugfs: 'hsr0' already exists in 'hsr' [ 277.144813][ T9575] Cannot create hsr debugfs directory [ 277.161319][ T7880] bridge0: port 2(bridge_slave_1) entered blocking state [ 277.168642][ T7880] bridge0: port 2(bridge_slave_1) entered forwarding state [ 277.215264][ T5842] Bluetooth: hci7: command tx timeout [ 277.354451][ T9606] kexec: Could not allocate control_code_buffer [ 277.981262][ T9575] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 278.005053][ T9575] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 278.075415][ T9575] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 278.085852][ T9613] netlink: 268 bytes leftover after parsing attributes in process `syz.6.780'. [ 278.102858][ T9575] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 278.155125][ T9546] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 278.506502][ T9575] 8021q: adding VLAN 0 to HW filter on device bond0 [ 278.626044][ T9575] 8021q: adding VLAN 0 to HW filter on device team0 [ 278.654579][ T7873] bridge0: port 1(bridge_slave_0) entered blocking state [ 278.661671][ T7873] bridge0: port 1(bridge_slave_0) entered forwarding state [ 278.735067][ T7873] bridge0: port 2(bridge_slave_1) entered blocking state [ 278.742180][ T7873] bridge0: port 2(bridge_slave_1) entered forwarding state [ 278.929273][ T5842] block nbd12: Receive control failed (result -107) [ 278.955874][ T9546] veth0_vlan: entered promiscuous mode [ 278.975358][ T5842] Bluetooth: hci3: command tx timeout [ 278.991942][ T9546] veth1_vlan: entered promiscuous mode [ 279.028796][ T9546] veth0_macvtap: entered promiscuous mode [ 279.044780][ T9546] veth1_macvtap: entered promiscuous mode [ 279.071735][ T9546] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 279.088233][ T9546] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 279.103590][ T7874] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.149481][ T7874] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.181738][ T7874] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.192286][ T9643] netlink: 12 bytes leftover after parsing attributes in process `syz.5.783'. [ 279.205354][ T7874] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.216069][ T9643] nbd: must specify a size in bytes for the device [ 279.285030][ T5842] Bluetooth: hci7: command tx timeout [ 279.451190][ T7593] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 279.500075][ T7593] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 279.556137][ T7874] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 279.583960][ T7874] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 279.586165][ T9575] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 280.504396][ T9575] veth0_vlan: entered promiscuous mode [ 280.528590][ T9575] veth1_vlan: entered promiscuous mode [ 280.577581][ T5842] block nbd13: Receive control failed (result -107) [ 280.676993][ T9575] veth0_macvtap: entered promiscuous mode [ 280.706654][ T9575] veth1_macvtap: entered promiscuous mode [ 280.796105][ T9575] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 280.902322][ T9682] vivid-003: ================= START STATUS ================= [ 280.912349][ T9575] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 280.945684][ T7593] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.946553][ T9682] vivid-003: Radio HW Seek Mode: Bounded [ 280.960437][ T9682] vivid-003: Radio Programmable HW Seek: false [ 281.014360][ T9686] netlink: 12 bytes leftover after parsing attributes in process `syz.5.792'. [ 281.023745][ T9682] vivid-003: RDS Rx I/O Mode: Block I/O [ 281.033443][ T9682] vivid-003: Generate RBDS Instead of RDS: false [ 281.039840][ T9682] vivid-003: RDS Reception: true [ 281.050725][ T9686] nbd: must specify a size in bytes for the device [ 281.053056][ T5842] Bluetooth: hci3: command tx timeout [ 281.103007][ T7593] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.120832][ T7593] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.174537][ T9688] block nbd0: shutting down sockets [ 281.179875][ T9682] vivid-003: RDS Program Type: 0 inactive [ 281.193848][ T9682] vivid-003: RDS PS Name: inactive [ 281.199105][ T9682] vivid-003: RDS Radio Text: inactive [ 281.223970][ T9682] vivid-003: RDS Traffic Announcement: false inactive [ 281.251033][ T9682] vivid-003: RDS Traffic Program: false inactive [ 281.260348][ T7593] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.309267][ T9682] vivid-003: RDS Music: false inactive [ 281.364957][ T5842] Bluetooth: hci7: command tx timeout [ 281.450971][ T9682] vivid-003: ================== END STATUS ================== [ 281.786034][ T7593] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 281.837424][ T7593] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 281.997953][ T7881] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 282.066175][ T7881] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 282.234745][ T9702] netlink: 268 bytes leftover after parsing attributes in process `syz.6.795'. [ 282.936860][ T9717] netlink: 268 bytes leftover after parsing attributes in process `syz.5.797'. [ 283.124187][ T5842] Bluetooth: hci3: command tx timeout [ 283.833486][ T9736] netlink: 50 bytes leftover after parsing attributes in process `syz.8.804'. [ 284.467381][ T9745] zswap: compressor not available [ 284.762492][ T9758] vivid-003: ================= START STATUS ================= [ 284.770686][ T9746] zswap: compressor not available [ 284.861032][ T9758] vivid-003: Radio HW Seek Mode: Bounded [ 284.893562][ T9758] vivid-003: Radio Programmable HW Seek: false [ 284.902566][ T9758] vivid-003: RDS Rx I/O Mode: Block I/O [ 284.977869][ T9758] vivid-003: Generate RBDS Instead of RDS: false [ 285.063471][ T9758] vivid-003: RDS Reception: true [ 285.101284][ T9758] vivid-003: RDS Program Type: 0 inactive [ 285.108194][ T9761] netlink: 268 bytes leftover after parsing attributes in process `syz.8.809'. [ 285.124042][ T9758] vivid-003: RDS PS Name: inactive [ 285.176024][ T9758] vivid-003: RDS Radio Text: inactive [ 285.239303][ T9758] vivid-003: RDS Traffic Announcement: false inactive [ 285.283552][ T9758] vivid-003: RDS Traffic Program: false inactive [ 285.367930][ T9758] vivid-003: RDS Music: false inactive [ 285.383606][ T9758] vivid-003: ================== END STATUS ================== [ 285.729712][ T9768] FAULT_INJECTION: forcing a failure. [ 285.729712][ T9768] name failslab, interval 1, probability 0, space 0, times 0 [ 285.893482][ T9768] CPU: 0 UID: 0 PID: 9768 Comm: syz.6.810 Not tainted syzkaller #0 PREEMPT(full) [ 285.893519][ T9768] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 285.893536][ T9768] Call Trace: [ 285.893546][ T9768] [ 285.893555][ T9768] dump_stack_lvl+0x16c/0x1f0 [ 285.893593][ T9768] should_fail_ex+0x512/0x640 [ 285.893629][ T9768] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 285.893663][ T9768] should_failslab+0xc2/0x120 [ 285.893701][ T9768] kmem_cache_alloc_noprof+0x75/0x6e0 [ 285.893734][ T9768] ? __proc_create+0x2ce/0x8e0 [ 285.893785][ T9768] ? __proc_create+0x2ce/0x8e0 [ 285.893821][ T9768] __proc_create+0x2ce/0x8e0 [ 285.893865][ T9768] ? __pfx___proc_create+0x10/0x10 [ 285.893905][ T9768] ? insert_header+0xf8d/0x1480 [ 285.893945][ T9768] ? __register_sysctl_table+0x736/0x1900 [ 285.893989][ T9768] proc_create_reg+0x7d/0x180 [ 285.894023][ T9768] proc_create_net_data+0x8e/0x1c0 [ 285.894065][ T9768] ? __pfx_proc_create_net_data+0x10/0x10 [ 285.894108][ T9768] ? __pfx___register_sysctl_table+0x10/0x10 [ 285.894147][ T9768] ? is_module_address+0x69/0xf0 [ 285.894170][ T9768] ? register_net_sysctl_sz+0x228/0x3e0 [ 285.894209][ T9768] ? __pfx_nf_log_net_init+0x10/0x10 [ 285.894251][ T9768] nf_log_net_init+0x69/0x450 [ 285.894292][ T9768] ? __pfx_nf_log_net_init+0x10/0x10 [ 285.894330][ T9768] ops_init+0x1e2/0x5f0 [ 285.894372][ T9768] setup_net+0x100/0x390 [ 285.894411][ T9768] ? __pfx_setup_net+0x10/0x10 [ 285.894445][ T9768] ? debug_mutex_init+0x37/0x70 [ 285.894481][ T9768] copy_net_ns+0x2f8/0x690 [ 285.894511][ T9768] create_new_namespaces+0x3ea/0xa90 [ 285.894554][ T9768] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 285.894592][ T9768] ksys_unshare+0x45b/0xa40 [ 285.894630][ T9768] ? __pfx_ksys_unshare+0x10/0x10 [ 285.894669][ T9768] ? xfd_validate_state+0x61/0x180 [ 285.894705][ T9768] __x64_sys_unshare+0x31/0x40 [ 285.894741][ T9768] do_syscall_64+0xcd/0x4b0 [ 285.894775][ T9768] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 285.894802][ T9768] RIP: 0033:0x7f0a6238eec9 [ 285.894823][ T9768] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 285.894848][ T9768] RSP: 002b:00007f0a63260038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 285.894874][ T9768] RAX: ffffffffffffffda RBX: 00007f0a625e5fa0 RCX: 00007f0a6238eec9 [ 285.894892][ T9768] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 285.894908][ T9768] RBP: 00007f0a62411f91 R08: 0000000000000000 R09: 0000000000000000 [ 285.894925][ T9768] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 285.894940][ T9768] R13: 00007f0a625e6038 R14: 00007f0a625e5fa0 R15: 00007ffeb03e0de8 [ 285.894976][ T9768] [ 287.693360][ T9801] netlink: 50 bytes leftover after parsing attributes in process `syz.8.819'. [ 287.747409][ T9803] netlink: 12 bytes leftover after parsing attributes in process `syz.6.818'. [ 287.775257][ T9803] nbd: must specify a size in bytes for the device [ 288.358854][ T9808] netlink: 268 bytes leftover after parsing attributes in process `syz.8.820'. [ 289.498595][ T9822] FAULT_INJECTION: forcing a failure. [ 289.498595][ T9822] name fail_futex, interval 1, probability 0, space 0, times 0 [ 289.533483][ T9822] CPU: 0 UID: 0 PID: 9822 Comm: syz.5.824 Not tainted syzkaller #0 PREEMPT(full) [ 289.533520][ T9822] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 289.533535][ T9822] Call Trace: [ 289.533544][ T9822] [ 289.533554][ T9822] dump_stack_lvl+0x16c/0x1f0 [ 289.533592][ T9822] should_fail_ex+0x512/0x640 [ 289.533632][ T9822] get_futex_key+0x1d0/0x1560 [ 289.533680][ T9822] ? __pfx_get_futex_key+0x10/0x10 [ 289.533719][ T9822] ? __pfx____sys_sendmsg+0x10/0x10 [ 289.533762][ T9822] futex_wake+0xea/0x530 [ 289.533789][ T9822] ? __pfx_futex_wake+0x10/0x10 [ 289.533816][ T9822] do_futex+0x1e3/0x350 [ 289.533837][ T9822] ? __pfx_do_futex+0x10/0x10 [ 289.533857][ T9822] ? fput+0x9b/0xd0 [ 289.533876][ T9822] ? __sys_sendmsg+0x18c/0x220 [ 289.533898][ T9822] __x64_sys_futex+0x1e0/0x4c0 [ 289.533920][ T9822] ? __pfx___x64_sys_futex+0x10/0x10 [ 289.533950][ T9822] do_syscall_64+0xcd/0x4b0 [ 289.533968][ T9822] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 289.533982][ T9822] RIP: 0033:0x7fb16198eec9 [ 289.533994][ T9822] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 289.534008][ T9822] RSP: 002b:00007fb1629050e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 289.534022][ T9822] RAX: ffffffffffffffda RBX: 00007fb161be5fa8 RCX: 00007fb16198eec9 [ 289.534031][ T9822] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fb161be5fac [ 289.534040][ T9822] RBP: 00007fb161be5fa0 R08: 00007fb162906000 R09: 0000000000000000 [ 289.534048][ T9822] R10: 000000000000003c R11: 0000000000000246 R12: 0000000000000000 [ 289.534057][ T9822] R13: 00007fb161be6038 R14: 00007ffe09aadd40 R15: 00007ffe09aade28 [ 289.534076][ T9822] [ 290.257047][ T9822] kexec: Could not allocate control_code_buffer [ 290.585784][ T9832] binder: 9831:9832 ioctl c018620c 0 returned -1 [ 290.604107][ T9832] binder: 9831:9832 ioctl c018620c 0 returned -1 [ 290.635001][ T9832] binder: 9831:9832 ioctl c018620c 0 returned -1 [ 290.644811][ T9833] netlink: 28 bytes leftover after parsing attributes in process `syz.5.828'. [ 290.673731][ T9832] binder: 9831:9832 ioctl c018620c 0 returned -1 [ 290.694123][ T9832] binder: 9831:9832 ioctl c018620c 0 returned -1 [ 290.747592][ T9832] binder: 9831:9832 ioctl c018620c 0 returned -1 [ 290.783846][ T9832] binder: 9831:9832 ioctl c018620c 0 returned -1 [ 290.791264][ T9830] netlink: 268 bytes leftover after parsing attributes in process `syz.8.826'. [ 290.823642][ T9832] binder: 9831:9832 ioctl c018620c 0 returned -1 [ 290.843116][ T9832] binder: 9831:9832 ioctl c018620c 0 returned -1 [ 290.869468][ T9832] binder: 9831:9832 ioctl c018620c 0 returned -1 [ 290.905872][ T9832] binder: 9831:9832 ioctl c018620c 0 returned -1 [ 290.934889][ T9832] binder: 9831:9832 ioctl c018620c 0 returned -1 [ 291.026876][ T9832] binder: 9831:9832 ioctl c018620c 0 returned -1 [ 291.068265][ T9832] binder: 9831:9832 ioctl c018620c 0 returned -1 [ 291.074828][ T9832] binder: 9831:9832 ioctl c018620c 0 returned -1 [ 291.081932][ T9832] binder: 9831:9832 ioctl c018620c 0 returned -1 [ 291.119530][ T9832] binder: 9831:9832 ioctl c018620c 0 returned -1 [ 291.214629][ T9832] binder: 9831:9832 ioctl c018620c 0 returned -1 [ 291.223905][ T9832] binder: 9831:9832 ioctl c018620c 0 returned -1 [ 293.401427][ T9884] netlink: 12 bytes leftover after parsing attributes in process `syz.8.836'. [ 293.417943][ T9884] nbd: must specify a size in bytes for the device [ 293.983228][ T9897] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 294.404788][ T9905] sctp: [Deprecated]: syz.5.842 (pid 9905) Use of struct sctp_assoc_value in delayed_ack socket option. [ 294.404788][ T9905] Use struct sctp_sack_info instead [ 294.523796][ T9903] netlink: 268 bytes leftover after parsing attributes in process `syz.8.841'. [ 295.026702][ T9913] netlink: 268 bytes leftover after parsing attributes in process `syz.6.844'. [ 295.752388][ T9930] netlink: 28 bytes leftover after parsing attributes in process `syz.6.848'. [ 296.684997][ T9944] FAULT_INJECTION: forcing a failure. [ 296.684997][ T9944] name fail_futex, interval 1, probability 0, space 0, times 0 [ 296.740369][ T9944] CPU: 0 UID: 0 PID: 9944 Comm: syz.5.851 Not tainted syzkaller #0 PREEMPT(full) [ 296.740404][ T9944] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 296.740419][ T9944] Call Trace: [ 296.740427][ T9944] [ 296.740437][ T9944] dump_stack_lvl+0x16c/0x1f0 [ 296.740470][ T9944] should_fail_ex+0x512/0x640 [ 296.740494][ T9944] get_futex_key+0x1d0/0x1560 [ 296.740518][ T9944] ? __pfx_get_futex_key+0x10/0x10 [ 296.740536][ T9944] ? futex_private_hash_put+0x176/0x300 [ 296.740560][ T9944] futex_wake+0xea/0x530 [ 296.740572][ T9944] ? futex_wait+0x120/0x380 [ 296.740585][ T9944] ? __pfx_futex_wait+0x10/0x10 [ 296.740599][ T9944] ? __pfx_futex_wake+0x10/0x10 [ 296.740621][ T9944] do_futex+0x1e3/0x350 [ 296.740641][ T9944] ? __pfx_do_futex+0x10/0x10 [ 296.740660][ T9944] ? find_held_lock+0x2b/0x80 [ 296.740675][ T9944] ? __might_fault+0xe3/0x190 [ 296.740690][ T9944] ? __might_fault+0xe3/0x190 [ 296.740703][ T9944] ? __might_fault+0x13b/0x190 [ 296.740719][ T9944] __x64_sys_futex+0x1e0/0x4c0 [ 296.740741][ T9944] ? __pfx___x64_sys_futex+0x10/0x10 [ 296.740762][ T9944] ? __pfx___do_sys_prctl+0x10/0x10 [ 296.740782][ T9944] do_syscall_64+0xcd/0x4b0 [ 296.740800][ T9944] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 296.740814][ T9944] RIP: 0033:0x7fb16198eec9 [ 296.740826][ T9944] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 296.740839][ T9944] RSP: 002b:00007fb1629050e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 296.740853][ T9944] RAX: ffffffffffffffda RBX: 00007fb161be5fa8 RCX: 00007fb16198eec9 [ 296.740863][ T9944] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fb161be5fac [ 296.740871][ T9944] RBP: 00007fb161be5fa0 R08: 00007fb162906000 R09: 0000000000000000 [ 296.740880][ T9944] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 296.740888][ T9944] R13: 00007fb161be6038 R14: 00007ffe09aadd40 R15: 00007ffe09aade28 [ 296.740921][ T9944] [ 297.558882][ T9955] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 297.974216][ T9948] zswap: compressor not available [ 298.640609][ T9944] kexec: Could not allocate control_code_buffer [ 300.257266][T10005] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 300.565852][ T52] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 300.583888][ T52] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 300.594516][ T52] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 300.607724][ T52] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 300.628055][ T52] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 300.932099][T10028] netlink: 28 bytes leftover after parsing attributes in process `syz.6.870'. [ 302.137262][T10019] chnl_net:caif_netlink_parms(): no params data found [ 302.728222][T10019] bridge0: port 1(bridge_slave_0) entered blocking state [ 302.733466][ T5842] Bluetooth: hci8: command tx timeout [ 302.738404][T10019] bridge0: port 1(bridge_slave_0) entered disabled state [ 302.788265][T10019] bridge_slave_0: entered allmulticast mode [ 302.805790][T10019] bridge_slave_0: entered promiscuous mode [ 302.845728][T10019] bridge0: port 2(bridge_slave_1) entered blocking state [ 302.857256][T10019] bridge0: port 2(bridge_slave_1) entered disabled state [ 302.878513][T10019] bridge_slave_1: entered allmulticast mode [ 302.915246][T10019] bridge_slave_1: entered promiscuous mode [ 303.089936][T10019] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 303.126813][T10019] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 303.310354][T10019] team0: Port device team_slave_0 added [ 303.340742][T10019] team0: Port device team_slave_1 added [ 303.527240][T10019] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 303.549415][T10019] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 303.594239][T10019] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 303.608695][T10019] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 303.617342][T10019] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 303.700681][T10019] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 303.920732][T10019] hsr_slave_0: entered promiscuous mode [ 303.948616][T10019] hsr_slave_1: entered promiscuous mode [ 303.969625][T10019] debugfs: 'hsr0' already exists in 'hsr' [ 303.985534][T10019] Cannot create hsr debugfs directory [ 304.245504][T10101] FAULT_INJECTION: forcing a failure. [ 304.245504][T10101] name failslab, interval 1, probability 0, space 0, times 0 [ 304.263031][T10098] netlink: 'syz.8.885': attribute type 4 has an invalid length. [ 304.283511][T10101] CPU: 0 UID: 0 PID: 10101 Comm: syz.5.886 Not tainted syzkaller #0 PREEMPT(full) [ 304.283543][T10101] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 304.283556][T10101] Call Trace: [ 304.283563][T10101] [ 304.283570][T10101] dump_stack_lvl+0x16c/0x1f0 [ 304.283604][T10101] should_fail_ex+0x512/0x640 [ 304.283635][T10101] ? __kvmalloc_node_noprof+0x12e/0x9c0 [ 304.283669][T10101] should_failslab+0xc2/0x120 [ 304.283700][T10101] __kvmalloc_node_noprof+0x141/0x9c0 [ 304.283733][T10101] ? traverse.part.0.constprop.0+0x397/0x650 [ 304.283766][T10101] ? traverse.part.0.constprop.0+0x397/0x650 [ 304.283790][T10101] traverse.part.0.constprop.0+0x397/0x650 [ 304.283826][T10101] seq_read_iter+0x93c/0x12d0 [ 304.283866][T10101] proc_reg_read_iter+0x220/0x310 [ 304.283901][T10101] vfs_read+0x8bc/0xcf0 [ 304.283937][T10101] ? __pfx_vfs_read+0x10/0x10 [ 304.283961][T10101] ? find_held_lock+0x2b/0x80 [ 304.284014][T10101] __x64_sys_pread64+0x1eb/0x250 [ 304.284044][T10101] ? __pfx___x64_sys_pread64+0x10/0x10 [ 304.284085][T10101] do_syscall_64+0xcd/0x4b0 [ 304.284116][T10101] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 304.284140][T10101] RIP: 0033:0x7fb16198eec9 [ 304.284160][T10101] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 304.284182][T10101] RSP: 002b:00007fb162905038 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 304.284204][T10101] RAX: ffffffffffffffda RBX: 00007fb161be5fa0 RCX: 00007fb16198eec9 [ 304.284219][T10101] RDX: 000000000000000b RSI: 0000000000000000 RDI: 0000000000000003 [ 304.284232][T10101] RBP: 00007fb162905090 R08: 0000000000000000 R09: 0000000000000000 [ 304.284246][T10101] R10: 0000000000000cfc R11: 0000000000000246 R12: 0000000000000001 [ 304.284260][T10101] R13: 00007fb161be6038 R14: 00007fb161be5fa0 R15: 00007ffe09aade28 [ 304.284293][T10101] [ 304.298885][T10098] netlink: 314 bytes leftover after parsing attributes in process `syz.8.885'. [ 304.434156][ C1] vkms_vblank_simulate: vblank timer overrun [ 304.803936][ T5842] Bluetooth: hci8: command tx timeout [ 305.012000][T10019] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 305.154095][T10019] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 305.254481][T10019] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 305.282796][T10019] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 305.669158][T10019] 8021q: adding VLAN 0 to HW filter on device bond0 [ 305.700875][T10131] FAULT_INJECTION: forcing a failure. [ 305.700875][T10131] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 305.715510][T10131] CPU: 0 UID: 0 PID: 10131 Comm: syz.8.894 Not tainted syzkaller #0 PREEMPT(full) [ 305.715541][T10131] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 305.715554][T10131] Call Trace: [ 305.715561][T10131] [ 305.715570][T10131] dump_stack_lvl+0x16c/0x1f0 [ 305.715603][T10131] should_fail_ex+0x512/0x640 [ 305.715640][T10131] _copy_to_user+0x32/0xd0 [ 305.715676][T10131] simple_read_from_buffer+0xcb/0x170 [ 305.715717][T10131] proc_fail_nth_read+0x197/0x240 [ 305.715745][T10131] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 305.715774][T10131] ? rw_verify_area+0xcf/0x6c0 [ 305.715798][T10131] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 305.715825][T10131] vfs_read+0x1e1/0xcf0 [ 305.715856][T10131] ? __pfx___mutex_lock+0x10/0x10 [ 305.715885][T10131] ? __pfx_vfs_read+0x10/0x10 [ 305.715921][T10131] ? __fget_files+0x20e/0x3c0 [ 305.715957][T10131] ksys_read+0x12a/0x250 [ 305.715979][T10131] ? __pfx_ksys_read+0x10/0x10 [ 305.716010][T10131] do_syscall_64+0xcd/0x4b0 [ 305.716036][T10131] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 305.716055][T10131] RIP: 0033:0x7f40f238d8dc [ 305.716068][T10131] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 305.716085][T10131] RSP: 002b:00007f40f3151030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 305.716103][T10131] RAX: ffffffffffffffda RBX: 00007f40f25e5fa0 RCX: 00007f40f238d8dc [ 305.716119][T10131] RDX: 000000000000000f RSI: 00007f40f31510a0 RDI: 0000000000000004 [ 305.716133][T10131] RBP: 00007f40f3151090 R08: 0000000000000000 R09: 0000000000000000 [ 305.716147][T10131] R10: 0000000000000cfc R11: 0000000000000246 R12: 0000000000000001 [ 305.716160][T10131] R13: 00007f40f25e6038 R14: 00007f40f25e5fa0 R15: 00007ffce582b4f8 [ 305.716191][T10131] [ 305.955988][T10019] 8021q: adding VLAN 0 to HW filter on device team0 [ 306.226491][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 306.233651][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 306.267334][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 306.274538][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 306.885843][ T5842] Bluetooth: hci8: command tx timeout [ 307.192446][T10019] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 307.788344][T10170] netlink: 268 bytes leftover after parsing attributes in process `syz.5.901'. [ 308.598226][T10019] veth0_vlan: entered promiscuous mode [ 308.654500][T10019] veth1_vlan: entered promiscuous mode [ 308.981092][ T5842] Bluetooth: hci8: command tx timeout [ 309.077082][T10019] veth0_macvtap: entered promiscuous mode [ 309.184163][T10019] veth1_macvtap: entered promiscuous mode [ 309.223605][T10205] FAULT_INJECTION: forcing a failure. [ 309.223605][T10205] name fail_futex, interval 1, probability 0, space 0, times 0 [ 309.269201][T10205] CPU: 1 UID: 0 PID: 10205 Comm: syz.6.908 Not tainted syzkaller #0 PREEMPT(full) [ 309.269229][T10205] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 309.269239][T10205] Call Trace: [ 309.269244][T10205] [ 309.269249][T10205] dump_stack_lvl+0x16c/0x1f0 [ 309.269279][T10205] should_fail_ex+0x512/0x640 [ 309.269304][T10205] get_futex_key+0x1d0/0x1560 [ 309.269328][T10205] ? __pfx_get_futex_key+0x10/0x10 [ 309.269346][T10205] ? futex_private_hash_put+0x176/0x300 [ 309.269370][T10205] futex_wake+0xea/0x530 [ 309.269385][T10205] ? __pfx_futex_wake+0x10/0x10 [ 309.269407][T10205] do_futex+0x1e3/0x350 [ 309.269427][T10205] ? __pfx_do_futex+0x10/0x10 [ 309.269452][T10205] __x64_sys_futex+0x1e0/0x4c0 [ 309.269473][T10205] ? fdget_pos+0x2b8/0x370 [ 309.269489][T10205] ? __pfx___x64_sys_futex+0x10/0x10 [ 309.269511][T10205] ? ksys_write+0x1ac/0x250 [ 309.269526][T10205] ? __pfx_ksys_write+0x10/0x10 [ 309.269548][T10205] do_syscall_64+0xcd/0x4b0 [ 309.269565][T10205] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 309.269580][T10205] RIP: 0033:0x7f0a6238eec9 [ 309.269591][T10205] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 309.269605][T10205] RSP: 002b:00007f0a632600e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 309.269619][T10205] RAX: ffffffffffffffda RBX: 00007f0a625e5fa8 RCX: 00007f0a6238eec9 [ 309.269628][T10205] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f0a625e5fac [ 309.269637][T10205] RBP: 00007f0a625e5fa0 R08: 00007f0a63261000 R09: 0000000000000000 [ 309.269645][T10205] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 309.269654][T10205] R13: 00007f0a625e6038 R14: 00007ffeb03e0d00 R15: 00007ffeb03e0de8 [ 309.269673][T10205] [ 309.453310][ C1] vkms_vblank_simulate: vblank timer overrun [ 309.521490][T10019] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 309.546699][T10019] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 309.569899][T10197] zswap: compressor not available [ 309.686446][ T7874] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.750115][ T7874] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.867947][ T7874] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.943750][ T7874] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.032620][ T7873] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 310.057456][ T7873] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 310.189781][ T7881] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 310.239704][ T7881] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 310.404066][T10207] kexec: Could not allocate control_code_buffer [ 311.440908][T10244] netlink: 268 bytes leftover after parsing attributes in process `syz.8.913'. [ 312.967636][T10274] random: crng reseeded on system resumption [ 315.075460][T10328] FAULT_INJECTION: forcing a failure. [ 315.075460][T10328] name fail_futex, interval 1, probability 0, space 0, times 0 [ 315.123601][T10328] CPU: 1 UID: 0 PID: 10328 Comm: syz.8.933 Not tainted syzkaller #0 PREEMPT(full) [ 315.123638][T10328] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 315.123654][T10328] Call Trace: [ 315.123662][T10328] [ 315.123671][T10328] dump_stack_lvl+0x16c/0x1f0 [ 315.123707][T10328] should_fail_ex+0x512/0x640 [ 315.123747][T10328] get_futex_key+0x1d0/0x1560 [ 315.123786][T10328] ? __pfx_get_futex_key+0x10/0x10 [ 315.123834][T10328] futex_wait_setup+0x9d/0x550 [ 315.123872][T10328] __futex_wait+0x193/0x2f0 [ 315.123900][T10328] ? __pfx___futex_wait+0x10/0x10 [ 315.123932][T10328] ? __pfx_futex_wake_mark+0x10/0x10 [ 315.123965][T10328] ? futex_private_hash_put+0x176/0x300 [ 315.124004][T10328] ? futex_private_hash_put+0x18a/0x300 [ 315.124042][T10328] futex_wait+0xe8/0x380 [ 315.124068][T10328] ? __pfx_futex_wait+0x10/0x10 [ 315.124116][T10328] do_futex+0x229/0x350 [ 315.124152][T10328] ? __pfx_do_futex+0x10/0x10 [ 315.124186][T10328] ? find_held_lock+0x2b/0x80 [ 315.124215][T10328] ? __might_fault+0xe3/0x190 [ 315.124242][T10328] ? __might_fault+0xe3/0x190 [ 315.124267][T10328] ? __might_fault+0x13b/0x190 [ 315.124298][T10328] __x64_sys_futex+0x1e0/0x4c0 [ 315.124339][T10328] ? __pfx___x64_sys_futex+0x10/0x10 [ 315.124377][T10328] ? __pfx___do_sys_prctl+0x10/0x10 [ 315.124416][T10328] do_syscall_64+0xcd/0x4b0 [ 315.124455][T10328] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 315.124482][T10328] RIP: 0033:0x7f40f238eec9 [ 315.124503][T10328] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 315.124538][T10328] RSP: 002b:00007f40f31510e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 315.124561][T10328] RAX: ffffffffffffffda RBX: 00007f40f25e5fa8 RCX: 00007f40f238eec9 [ 315.124577][T10328] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f40f25e5fa8 [ 315.124592][T10328] RBP: 00007f40f25e5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 315.124607][T10328] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 315.124622][T10328] R13: 00007f40f25e6038 R14: 00007ffce582b410 R15: 00007ffce582b4f8 [ 315.124653][T10328] [ 315.785871][T10333] Setting dangerous option i915.mitigations - tainting kernel [ 316.780935][T10328] kexec: Could not allocate control_code_buffer [ 317.225595][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.232586][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.706868][T10360] netlink: 268 bytes leftover after parsing attributes in process `syz.8.941'. [ 318.088980][T10374] netlink: 28 bytes leftover after parsing attributes in process `syz.6.945'. [ 320.124085][T10390] kexec: Could not allocate control_code_buffer [ 320.216864][T10434] netlink: 'syz.5.960': attribute type 11 has an invalid length. [ 320.284829][T10434] netlink: 'syz.5.960': attribute type 11 has an invalid length. [ 320.332784][T10434] netlink: 200 bytes leftover after parsing attributes in process `syz.5.960'. [ 320.462177][T10443] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 320.684034][T10441] zswap: compressor not available [ 322.925531][T10499] zswap: compressor not available [ 323.150316][T10511] 0x000200000001-0xa29656a63616329 : "" [ 323.220828][T10511] mtd: partition "" is out of reach -- disabled [ 323.315716][T10511] ftl_cs: FTL header not found. [ 324.139057][T10533] nvme_fabrics: missing parameter 'transport=%s' [ 324.183559][T10533] nvme_fabrics: missing parameter 'nqn=%s' [ 324.350140][T10542] program syz.5.989 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 324.383824][T10542] program syz.5.989 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 324.796952][T10547] zswap: compressor not available [ 325.930141][T10569] ecryptfs_miscdev_write: Invalid packet size [0] [ 326.107039][T10576] netlink: 28 bytes leftover after parsing attributes in process `syz.6.996'. [ 328.254451][T10622] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1010'. [ 328.257747][T10622] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1010'. [ 328.617612][T10629] 0x000200000001-0xa29656a63616329 : "" [ 328.623185][T10629] mtd: partition "" is out of reach -- disabled [ 328.781542][T10629] ftl_cs: FTL header not found. [ 330.463473][T10660] zswap: compressor not available [ 330.780313][T10676] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1021'. [ 331.266188][T10686] zram: Removed device: zram0 [ 331.719856][T10688] device-mapper: ioctl: Invalid data size in the ioctl structure: 1 [ 331.720300][T10688] openvswitch: netlink: VXLAN extension message has 8 unknown bytes. [ 332.153499][T10697] FAULT_INJECTION: forcing a failure. [ 332.153499][T10697] name failslab, interval 1, probability 0, space 0, times 0 [ 332.166338][T10697] CPU: 0 UID: 0 PID: 10697 Comm: syz.5.1028 Tainted: G U syzkaller #0 PREEMPT(full) [ 332.166362][T10697] Tainted: [U]=USER [ 332.166367][T10697] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 332.166376][T10697] Call Trace: [ 332.166382][T10697] [ 332.166388][T10697] dump_stack_lvl+0x16c/0x1f0 [ 332.166409][T10697] should_fail_ex+0x512/0x640 [ 332.166430][T10697] ? __kmalloc_noprof+0xca/0x880 [ 332.166446][T10697] should_failslab+0xc2/0x120 [ 332.166466][T10697] __kmalloc_noprof+0xdd/0x880 [ 332.166479][T10697] ? __init_waitqueue_head+0xca/0x150 [ 332.166495][T10697] ? __netlink_kernel_create+0x17f/0x750 [ 332.166520][T10697] ? __netlink_kernel_create+0x17f/0x750 [ 332.166540][T10697] __netlink_kernel_create+0x17f/0x750 [ 332.166562][T10697] ? __pfx___netlink_kernel_create+0x10/0x10 [ 332.166589][T10697] fib_net_init+0x26d/0x3f0 [ 332.166602][T10697] ? __pfx___register_sysctl_table+0x10/0x10 [ 332.166624][T10697] ? __pfx_fib_net_init+0x10/0x10 [ 332.166637][T10697] ? lockdep_init_map_type+0x5c/0x280 [ 332.166658][T10697] ? __pfx_nl_fib_input+0x10/0x10 [ 332.166674][T10697] ? devinet_init_net+0x5c2/0x910 [ 332.166691][T10697] ? __pfx_fib_net_init+0x10/0x10 [ 332.166703][T10697] ops_init+0x1e2/0x5f0 [ 332.166726][T10697] setup_net+0x100/0x390 [ 332.166747][T10697] ? __pfx_setup_net+0x10/0x10 [ 332.166769][T10697] ? debug_mutex_init+0x37/0x70 [ 332.166787][T10697] copy_net_ns+0x2f8/0x690 [ 332.166804][T10697] create_new_namespaces+0x3ea/0xa90 [ 332.166826][T10697] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 332.166846][T10697] ksys_unshare+0x45b/0xa40 [ 332.166867][T10697] ? __pfx_ksys_unshare+0x10/0x10 [ 332.166888][T10697] ? xfd_validate_state+0x61/0x180 [ 332.166907][T10697] __x64_sys_unshare+0x31/0x40 [ 332.166926][T10697] do_syscall_64+0xcd/0x4b0 [ 332.166945][T10697] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 332.166959][T10697] RIP: 0033:0x7fb16198eec9 [ 332.166971][T10697] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 332.166985][T10697] RSP: 002b:00007fb1628e4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 332.166999][T10697] RAX: ffffffffffffffda RBX: 00007fb161be6090 RCX: 00007fb16198eec9 [ 332.167008][T10697] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 332.167016][T10697] RBP: 00007fb161a11f91 R08: 0000000000000000 R09: 0000000000000000 [ 332.167024][T10697] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 332.167033][T10697] R13: 00007fb161be6128 R14: 00007fb161be6090 R15: 00007ffe09aade28 [ 332.167052][T10697] [ 332.423947][ C0] vkms_vblank_simulate: vblank timer overrun [ 332.454410][T10701] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1030'. [ 333.028396][T10701] bond0: (slave bond_slave_0): Releasing backup interface [ 336.172683][T10762] zswap: compressor not available [ 336.930397][T10775] ecryptfs_miscdev_write: Invalid packet size [0] [ 338.827934][T10797] zswap: compressor not available [ 340.114972][T10827] netlink: 268 bytes leftover after parsing attributes in process `syz.5.1053'. [ 340.392367][T10824] netlink: 268 bytes leftover after parsing attributes in process `syz.6.1052'. [ 341.114805][T10841] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1058'. [ 341.195523][ T5842] block nbd0: Receive control failed (result -107) [ 342.000902][T10853] zswap: compressor not available [ 342.114187][T10856] RDS: rds_bind could not find a transport for ::ffff:172.30.1.7, load rds_tcp or rds_rdma? [ 342.234660][T10860] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1061'. [ 343.177457][T10872] __vm_enough_memory: pid: 10872, comm: syz.5.1064, bytes: 4398046511104 not enough memory for the allocation [ 343.271965][T10875] nvme_fcloop: unknown parameter or missing value 'Ù›ª' [ 343.651606][T10885] netlink: 268 bytes leftover after parsing attributes in process `syz.8.1070'. [ 344.870138][T10921] zswap: compressor not available [ 345.620637][T10949] netlink: 268 bytes leftover after parsing attributes in process `syz.8.1087'. [ 347.028643][T10977] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1096'. [ 347.077451][ T5842] block nbd14: Receive control failed (result -107) [ 347.877339][T10986] vhci_hcd: invalid port number 16 [ 347.882488][T10986] vhci_hcd: invalid port number 16 [ 347.907389][T10987] vhci_hcd: invalid port number 16 [ 347.925479][T10987] vhci_hcd: invalid port number 16 [ 348.247583][ T52] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 348.257329][ T52] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 348.266240][ T52] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 348.274327][ T52] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 348.282453][ T52] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 348.817636][T11004] chnl_net:caif_netlink_parms(): no params data found [ 349.352525][T11004] bridge0: port 1(bridge_slave_0) entered blocking state [ 349.474644][T11004] bridge0: port 1(bridge_slave_0) entered disabled state [ 349.486773][T11004] bridge_slave_0: entered allmulticast mode [ 349.495844][T11004] bridge_slave_0: entered promiscuous mode [ 349.507690][T11004] bridge0: port 2(bridge_slave_1) entered blocking state [ 349.515000][T11004] bridge0: port 2(bridge_slave_1) entered disabled state [ 349.522400][T11004] bridge_slave_1: entered allmulticast mode [ 349.545832][T11004] bridge_slave_1: entered promiscuous mode [ 349.658699][T11004] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 349.690032][T11004] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 349.741449][T11004] team0: Port device team_slave_0 added [ 349.750685][T11004] team0: Port device team_slave_1 added [ 349.807303][T11004] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 349.814279][T11004] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 349.844888][T11004] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 349.859715][T11004] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 349.871284][T11004] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 349.897890][T11004] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 349.965629][T11004] hsr_slave_0: entered promiscuous mode [ 349.972462][T11004] hsr_slave_1: entered promiscuous mode [ 349.989250][T11004] debugfs: 'hsr0' already exists in 'hsr' [ 349.995004][T11004] Cannot create hsr debugfs directory [ 350.188888][T11004] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.310516][T11004] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.347155][ T52] Bluetooth: hci9: command tx timeout [ 350.381260][T11004] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.459852][T11004] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.587164][T11004] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 350.597373][T11004] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 350.609038][T11004] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 350.619171][T11004] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 350.698400][T11004] 8021q: adding VLAN 0 to HW filter on device bond0 [ 350.717810][T11004] 8021q: adding VLAN 0 to HW filter on device team0 [ 350.730547][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 350.737728][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 350.759230][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 350.766331][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 350.941133][T11004] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 350.986480][T11004] veth0_vlan: entered promiscuous mode [ 351.001260][T11004] veth1_vlan: entered promiscuous mode [ 351.030403][T11004] veth0_macvtap: entered promiscuous mode [ 351.039759][T11004] veth1_macvtap: entered promiscuous mode [ 351.056338][T11004] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 351.074320][T11004] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 351.092499][ T7589] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.102164][ T7589] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.114501][ T7874] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.124556][ T7882] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.206218][ T7589] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 351.214637][ T7589] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 351.258795][ T7882] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 351.268259][ T7882] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 351.347239][ T30] audit: type=1800 audit(4294976236.277:20): pid=11028 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1099" name="members" dev="configfs" ino=36983 res=0 errno=0 [ 352.432174][ T5842] Bluetooth: hci9: command tx timeout [ 352.441801][T11045] netlink: 268 bytes leftover after parsing attributes in process `syz.8.1105'. [ 353.483203][T11073] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 354.512648][ T5842] Bluetooth: hci9: command tx timeout [ 355.160318][ T5842] Bluetooth: hci4: command 0x0406 tx timeout [ 355.956513][T11115] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1130'. [ 355.991905][T11115] hsr_slave_0: left promiscuous mode [ 355.999410][T11115] hsr_slave_1: left promiscuous mode [ 356.590503][ T52] Bluetooth: hci9: command tx timeout [ 357.489178][T11131] netlink: 268 bytes leftover after parsing attributes in process `syz.3.1133'. [ 358.605473][T11139] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1136'. [ 360.005600][T11167] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1145'. [ 360.073368][ T52] block nbd15: Receive control failed (result -107) [ 360.428501][ T5842] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 360.458732][ T5842] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 360.469295][ T5842] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 360.489941][ T5842] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 360.503213][ T5842] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 360.923485][T11178] netlink: 268 bytes leftover after parsing attributes in process `syz.6.1147'. [ 361.657395][T11187] FAULT_INJECTION: forcing a failure. [ 361.657395][T11187] name failslab, interval 1, probability 0, space 0, times 0 [ 361.672319][T11187] CPU: 0 UID: 0 PID: 11187 Comm: syz.3.1149 Tainted: G U syzkaller #0 PREEMPT(full) [ 361.672360][T11187] Tainted: [U]=USER [ 361.672369][T11187] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 361.672384][T11187] Call Trace: [ 361.672393][T11187] [ 361.672403][T11187] dump_stack_lvl+0x16c/0x1f0 [ 361.672440][T11187] should_fail_ex+0x512/0x640 [ 361.672474][T11187] ? kmem_cache_alloc_lru_noprof+0x66/0x6e0 [ 361.672505][T11187] should_failslab+0xc2/0x120 [ 361.672538][T11187] kmem_cache_alloc_lru_noprof+0x79/0x6e0 [ 361.672565][T11187] ? proc_alloc_inode+0x25/0x200 [ 361.672603][T11187] ? __pfx_proc_alloc_inode+0x10/0x10 [ 361.672642][T11187] ? proc_alloc_inode+0x25/0x200 [ 361.672672][T11187] proc_alloc_inode+0x25/0x200 [ 361.672702][T11187] alloc_inode+0x61/0x240 [ 361.672735][T11187] new_inode+0x22/0x1c0 [ 361.672772][T11187] proc_pid_make_inode+0x22/0x160 [ 361.672805][T11187] proc_pident_instantiate+0x85/0x310 [ 361.672842][T11187] proc_pident_lookup+0x1f5/0x270 [ 361.672879][T11187] __lookup_slow+0x251/0x460 [ 361.672916][T11187] ? __pfx___lookup_slow+0x10/0x10 [ 361.672975][T11187] ? lookup_fast+0x156/0x610 [ 361.673004][T11187] walk_component+0x353/0x5b0 [ 361.673031][T11187] link_path_walk+0x627/0xe20 [ 361.673071][T11187] path_openat+0x1b0/0x2cb0 [ 361.673112][T11187] ? __pfx_path_openat+0x10/0x10 [ 361.673152][T11187] do_filp_open+0x20b/0x470 [ 361.673183][T11187] ? __pfx_do_filp_open+0x10/0x10 [ 361.673227][T11187] ? __pfx_kfree_link+0x10/0x10 [ 361.673274][T11187] ? alloc_fd+0x471/0x7d0 [ 361.673312][T11187] do_sys_openat2+0x11b/0x1d0 [ 361.673349][T11187] ? __pfx_do_sys_openat2+0x10/0x10 [ 361.673401][T11187] __x64_sys_openat+0x174/0x210 [ 361.673440][T11187] ? __pfx___x64_sys_openat+0x10/0x10 [ 361.673493][T11187] do_syscall_64+0xcd/0x4b0 [ 361.673527][T11187] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 361.673553][T11187] RIP: 0033:0x7fd34458d710 [ 361.673575][T11187] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 69 95 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 bc 95 02 00 8b 44 [ 361.673599][T11187] RSP: 002b:00007fd34536bf10 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 361.673630][T11187] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007fd34458d710 [ 361.673648][T11187] RDX: 0000000000000002 RSI: 00007fd34536bfa0 RDI: 00000000ffffff9c [ 361.673664][T11187] RBP: 00007fd34536bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 361.673680][T11187] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 361.673696][T11187] R13: 00007fd3447e6128 R14: 00007fd3447e6090 R15: 00007ffff15ed318 [ 361.673727][T11187] [ 362.063422][T11187] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(424206980.290643515.64131978), cmd(3) [ 362.100078][T11173] chnl_net:caif_netlink_parms(): no params data found [ 362.157529][ T915] Process accounting resumed [ 362.593234][ T5842] Bluetooth: hci10: command tx timeout [ 362.723882][T11173] bridge0: port 1(bridge_slave_0) entered blocking state [ 362.731050][T11173] bridge0: port 1(bridge_slave_0) entered disabled state [ 362.755035][T11173] bridge_slave_0: entered allmulticast mode [ 362.763506][T11173] bridge_slave_0: entered promiscuous mode [ 362.774280][T11173] bridge0: port 2(bridge_slave_1) entered blocking state [ 362.781869][T11173] bridge0: port 2(bridge_slave_1) entered disabled state [ 362.789687][T11173] bridge_slave_1: entered allmulticast mode [ 362.800857][T11173] bridge_slave_1: entered promiscuous mode [ 362.862093][T11173] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 362.880409][T11173] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 362.994619][T11173] team0: Port device team_slave_0 added [ 363.006906][T11173] team0: Port device team_slave_1 added [ 363.108288][T11173] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 363.149176][T11173] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 363.184747][T11173] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 363.198512][T11173] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 363.206276][T11173] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 363.239416][T11211] netlink: 268 bytes leftover after parsing attributes in process `syz.6.1158'. [ 363.259439][T11173] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 363.307155][T11216] netlink: 268 bytes leftover after parsing attributes in process `syz.8.1160'. [ 363.736533][T11173] hsr_slave_0: entered promiscuous mode [ 363.745286][T11173] hsr_slave_1: entered promiscuous mode [ 363.758514][T11173] debugfs: 'hsr0' already exists in 'hsr' [ 363.774468][T11173] Cannot create hsr debugfs directory [ 364.220118][T11226] Invalid ELF header magic: != ELF [ 364.232784][T11225] delete_channel: no stack [ 364.258335][T11232] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1165'. [ 364.332613][T11236] FAULT_INJECTION: forcing a failure. [ 364.332613][T11236] name failslab, interval 1, probability 0, space 0, times 0 [ 364.357268][T11173] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.360962][T11236] CPU: 0 UID: 0 PID: 11236 Comm: syz.3.1164 Tainted: G U syzkaller #0 PREEMPT(full) [ 364.361003][T11236] Tainted: [U]=USER [ 364.361013][T11236] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 364.361027][T11236] Call Trace: [ 364.361036][T11236] [ 364.361045][T11236] dump_stack_lvl+0x16c/0x1f0 [ 364.361081][T11236] should_fail_ex+0x512/0x640 [ 364.361114][T11236] ? fs_reclaim_acquire+0xae/0x150 [ 364.361154][T11236] should_failslab+0xc2/0x120 [ 364.361188][T11236] __kmalloc_noprof+0xdd/0x880 [ 364.361213][T11236] ? kfree+0x252/0x6d0 [ 364.361234][T11236] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 364.361269][T11236] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 364.361297][T11236] tomoyo_realpath_from_path+0xc2/0x6e0 [ 364.361336][T11236] tomoyo_check_open_permission+0x2ab/0x3c0 [ 364.361373][T11236] ? _raw_spin_unlock+0x28/0x50 [ 364.361397][T11236] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 364.361472][T11236] ? do_raw_spin_lock+0x12c/0x2b0 [ 364.361508][T11236] tomoyo_file_open+0x6b/0x90 [ 364.361541][T11236] security_file_open+0x84/0x1e0 [ 364.361568][T11236] do_dentry_open+0x596/0x1530 [ 364.361609][T11236] vfs_open+0x82/0x3f0 [ 364.361656][T11236] path_openat+0x1de4/0x2cb0 [ 364.361699][T11236] ? __pfx_path_openat+0x10/0x10 [ 364.361738][T11236] do_filp_open+0x20b/0x470 [ 364.361768][T11236] ? __pfx_do_filp_open+0x10/0x10 [ 364.361824][T11236] ? alloc_fd+0x471/0x7d0 [ 364.361861][T11236] do_sys_openat2+0x11b/0x1d0 [ 364.361897][T11236] ? __pfx_do_sys_openat2+0x10/0x10 [ 364.361948][T11236] __x64_sys_openat+0x174/0x210 [ 364.361986][T11236] ? __pfx___x64_sys_openat+0x10/0x10 [ 364.362038][T11236] do_syscall_64+0xcd/0x4b0 [ 364.362071][T11236] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 364.362096][T11236] RIP: 0033:0x7fd34458eec9 [ 364.362116][T11236] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 364.362140][T11236] RSP: 002b:00007fd34538d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 364.362164][T11236] RAX: ffffffffffffffda RBX: 00007fd3447e5fa0 RCX: 00007fd34458eec9 [ 364.362181][T11236] RDX: 0000000000101000 RSI: 0000200000000300 RDI: ffffffffffffff9c [ 364.362198][T11236] RBP: 00007fd344611f91 R08: 0000000000000000 R09: 0000000000000000 [ 364.362213][T11236] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 364.362228][T11236] R13: 00007fd3447e6038 R14: 00007fd3447e5fa0 R15: 00007ffff15ed318 [ 364.362262][T11236] [ 364.362364][T11236] ERROR: Out of memory at tomoyo_realpath_from_path. [ 364.674275][ T5842] Bluetooth: hci10: command tx timeout [ 364.752039][T11173] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.837585][T11236] vhci_hcd: invalid port number 23 [ 364.843379][T11236] vhci_hcd: Wrong hub descriptor type for USB 3.0 roothub. [ 364.918355][T11173] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.457597][T11173] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 365.511646][T11173] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 365.533770][T11173] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 365.566136][T11173] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 365.824473][T11266] FAULT_INJECTION: forcing a failure. [ 365.824473][T11266] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 365.911866][T11266] CPU: 0 UID: 0 PID: 11266 Comm: syz.3.1171 Tainted: G U syzkaller #0 PREEMPT(full) [ 365.911904][T11266] Tainted: [U]=USER [ 365.911912][T11266] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 365.911926][T11266] Call Trace: [ 365.911934][T11266] [ 365.911943][T11266] dump_stack_lvl+0x16c/0x1f0 [ 365.911976][T11266] should_fail_ex+0x512/0x640 [ 365.912015][T11266] strncpy_from_user+0x3b/0x2e0 [ 365.912046][T11266] getname_flags.part.0+0x8f/0x550 [ 365.912087][T11266] getname_flags+0x93/0xf0 [ 365.912113][T11266] do_sys_openat2+0xb8/0x1d0 [ 365.912147][T11266] ? __pfx_do_sys_openat2+0x10/0x10 [ 365.912195][T11266] __x64_sys_openat+0x174/0x210 [ 365.912225][T11266] ? __pfx___x64_sys_openat+0x10/0x10 [ 365.912270][T11266] do_syscall_64+0xcd/0x4b0 [ 365.912298][T11266] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 365.912320][T11266] RIP: 0033:0x7fd34458eec9 [ 365.912339][T11266] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 365.912362][T11266] RSP: 002b:00007fd34538d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 365.912384][T11266] RAX: ffffffffffffffda RBX: 00007fd3447e5fa0 RCX: 00007fd34458eec9 [ 365.912399][T11266] RDX: 0000000000000802 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 365.912414][T11266] RBP: 00007fd344611f91 R08: 0000000000000000 R09: 0000000000000000 [ 365.912430][T11266] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 365.912444][T11266] R13: 00007fd3447e6038 R14: 00007fd3447e5fa0 R15: 00007ffff15ed318 [ 365.912490][T11266] [ 366.756865][ T5842] Bluetooth: hci10: command tx timeout [ 366.835546][T11173] 8021q: adding VLAN 0 to HW filter on device bond0 [ 366.967159][T11330] FAULT_INJECTION: forcing a failure. [ 366.967159][T11330] name failslab, interval 1, probability 0, space 0, times 0 [ 367.004219][T11330] CPU: 0 UID: 0 PID: 11330 Comm: syz.6.1175 Tainted: G U syzkaller #0 PREEMPT(full) [ 367.004264][T11330] Tainted: [U]=USER [ 367.004274][T11330] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 367.004290][T11330] Call Trace: [ 367.004299][T11330] [ 367.004311][T11330] dump_stack_lvl+0x16c/0x1f0 [ 367.004348][T11330] should_fail_ex+0x512/0x640 [ 367.004384][T11330] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 367.004417][T11330] should_failslab+0xc2/0x120 [ 367.004454][T11330] kmem_cache_alloc_noprof+0x75/0x6e0 [ 367.004482][T11330] ? security_file_alloc+0x34/0x2b0 [ 367.004516][T11330] ? security_file_alloc+0x34/0x2b0 [ 367.004541][T11330] security_file_alloc+0x34/0x2b0 [ 367.004568][T11330] init_file+0x93/0x4c0 [ 367.004606][T11330] alloc_empty_file+0x73/0x1e0 [ 367.004647][T11330] path_openat+0xda/0x2cb0 [ 367.004690][T11330] ? __pfx_path_openat+0x10/0x10 [ 367.004735][T11330] do_filp_open+0x20b/0x470 [ 367.004769][T11330] ? __pfx_do_filp_open+0x10/0x10 [ 367.004827][T11330] ? alloc_fd+0x471/0x7d0 [ 367.004865][T11330] do_sys_openat2+0x11b/0x1d0 [ 367.004907][T11330] ? __pfx_do_sys_openat2+0x10/0x10 [ 367.004943][T11330] ? find_held_lock+0x2b/0x80 [ 367.004976][T11330] ? handle_mm_fault+0x2ab/0xd10 [ 367.005011][T11330] __x64_sys_openat+0x174/0x210 [ 367.005052][T11330] ? __pfx___x64_sys_openat+0x10/0x10 [ 367.005097][T11330] ? do_user_addr_fault+0x843/0x1370 [ 367.005143][T11330] do_syscall_64+0xcd/0x4b0 [ 367.005179][T11330] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 367.005208][T11330] RIP: 0033:0x7f0a6238d710 [ 367.005229][T11330] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 69 95 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 bc 95 02 00 8b 44 [ 367.005259][T11330] RSP: 002b:00007f0a6325ff10 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 367.005285][T11330] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f0a6238d710 [ 367.005303][T11330] RDX: 0000000000000000 RSI: 00007f0a6325ffa0 RDI: 00000000ffffff9c [ 367.005320][T11330] RBP: 00007f0a6325ffa0 R08: 0000000000000000 R09: 0000000000000000 [ 367.005338][T11330] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 367.005355][T11330] R13: 00007f0a625e6038 R14: 00007f0a625e5fa0 R15: 00007ffeb03e0de8 [ 367.005391][T11330] [ 367.398286][T11173] 8021q: adding VLAN 0 to HW filter on device team0 [ 367.472059][ T7880] bridge0: port 1(bridge_slave_0) entered blocking state [ 367.479264][ T7880] bridge0: port 1(bridge_slave_0) entered forwarding state [ 367.546170][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 367.553345][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state syzkaller syzkaller login: [ 368.758433][T11173] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 368.838033][ T5842] Bluetooth: hci10: command tx timeout [ 368.938242][T11173] veth0_vlan: entered promiscuous mode [ 368.970726][T11173] veth1_vlan: entered promiscuous mode [ 369.062627][T11173] veth0_macvtap: entered promiscuous mode [ 369.129314][T11173] veth1_macvtap: entered promiscuous mode [ 369.230491][T11173] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 369.258612][T11173] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 369.309586][ T7873] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.396408][ T7873] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.466197][ T7873] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.474992][ T7873] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.578755][ T7589] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 369.625582][ T7589] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 369.750758][ T7589] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 369.776496][ T7589] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 369.890295][T11381] netlink: 268 bytes leftover after parsing attributes in process `syz.8.1190'. [ 370.115625][T11386] FAULT_INJECTION: forcing a failure. [ 370.115625][T11386] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 370.143684][T11386] CPU: 1 UID: 0 PID: 11386 Comm: syz.3.1191 Tainted: G U syzkaller #0 PREEMPT(full) [ 370.143729][T11386] Tainted: [U]=USER [ 370.143744][T11386] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 370.143759][T11386] Call Trace: [ 370.143768][T11386] [ 370.143778][T11386] dump_stack_lvl+0x16c/0x1f0 [ 370.143816][T11386] should_fail_ex+0x512/0x640 [ 370.143857][T11386] _copy_from_user+0x2e/0xd0 [ 370.143898][T11386] memdup_user_nul+0x6c/0x120 [ 370.143931][T11386] ima_write_policy+0x121/0x4f0 [ 370.143964][T11386] ? __pfx_ima_write_policy+0x10/0x10 [ 370.144012][T11386] ? __pfx_ima_write_policy+0x10/0x10 [ 370.144041][T11386] vfs_write+0x2a0/0x11d0 [ 370.144076][T11386] ? __pfx___mutex_lock+0x10/0x10 [ 370.144103][T11386] ? __pfx_vfs_write+0x10/0x10 [ 370.144139][T11386] ? __fget_files+0x20e/0x3c0 [ 370.144173][T11386] ksys_write+0x12a/0x250 [ 370.144200][T11386] ? __pfx_ksys_write+0x10/0x10 [ 370.144239][T11386] do_syscall_64+0xcd/0x4b0 [ 370.144269][T11386] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 370.144295][T11386] RIP: 0033:0x7fd34458eec9 [ 370.144313][T11386] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 370.144338][T11386] RSP: 002b:00007fd34538d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 370.144361][T11386] RAX: ffffffffffffffda RBX: 00007fd3447e5fa0 RCX: 00007fd34458eec9 [ 370.144377][T11386] RDX: 0000000000000009 RSI: 0000000000000000 RDI: 0000000000000003 [ 370.144390][T11386] RBP: 00007fd344611f91 R08: 0000000000000000 R09: 0000000000000000 [ 370.144405][T11386] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 370.144420][T11386] R13: 00007fd3447e6038 R14: 00007fd3447e5fa0 R15: 00007ffff15ed318 [ 370.144457][T11386] [ 370.349889][T11385] ima: policy update failed [ 370.367941][ T30] audit: type=1802 audit(4294976255.287:21): pid=11385 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.3.1191" res=0 errno=0 [ 370.435111][T11388] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1192'. [ 370.466270][ T5842] block nbd16: Receive control failed (result -107) [ 370.856039][T11400] netlink: 268 bytes leftover after parsing attributes in process `syz.8.1196'. [ 371.117796][T11413] can: request_module (can-proto-5) failed. [ 372.180748][T11438] netlink: 268 bytes leftover after parsing attributes in process `syz.3.1204'. [ 373.529530][T11461] netlink: 268 bytes leftover after parsing attributes in process `syz.0.1211'. [ 373.832955][T11474] binder: 11473:11474 ioctl c018620c 0 returned -14 [ 373.849698][T11474] binder: 11473:11474 ioctl c00c620f 200000000380 returned -22 [ 373.952936][T11474] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1213'. [ 374.836708][T11488] FAULT_INJECTION: forcing a failure. [ 374.836708][T11488] name failslab, interval 1, probability 0, space 0, times 0 [ 374.898853][T11488] CPU: 0 UID: 0 PID: 11488 Comm: syz.3.1216 Tainted: G U syzkaller #0 PREEMPT(full) [ 374.898896][T11488] Tainted: [U]=USER [ 374.898905][T11488] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 374.898920][T11488] Call Trace: [ 374.898928][T11488] [ 374.898939][T11488] dump_stack_lvl+0x16c/0x1f0 [ 374.898976][T11488] should_fail_ex+0x512/0x640 [ 374.899008][T11488] ? __kmalloc_cache_noprof+0x5f/0x780 [ 374.899036][T11488] should_failslab+0xc2/0x120 [ 374.899073][T11488] __kmalloc_cache_noprof+0x72/0x780 [ 374.899099][T11488] ? trace_pid_list_alloc+0x1b0/0x3f0 [ 374.899136][T11488] ? lockdep_init_map_type+0x5c/0x280 [ 374.899177][T11488] ? trace_pid_list_alloc+0x1b0/0x3f0 [ 374.899211][T11488] trace_pid_list_alloc+0x1b0/0x3f0 [ 374.899251][T11488] trace_pid_write+0x10c/0x4b0 [ 374.899279][T11488] ? __mutex_unlock_slowpath+0x161/0x7b0 [ 374.899311][T11488] ? __pfx_trace_pid_write+0x10/0x10 [ 374.899333][T11488] ? __pfx___mutex_lock+0x10/0x10 [ 374.899357][T11488] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 374.899390][T11488] ? update_last_data+0xb3/0x510 [ 374.899438][T11488] event_pid_write.isra.0+0x3f7/0x7f0 [ 374.899478][T11488] ? __pfx_event_pid_write.isra.0+0x10/0x10 [ 374.899517][T11488] ? __pfx_ftrace_event_pid_write+0x10/0x10 [ 374.899540][T11488] vfs_writev+0x5dc/0xde0 [ 374.899579][T11488] ? __pfx_vfs_writev+0x10/0x10 [ 374.899603][T11488] ? __mutex_lock+0x1c5/0x1060 [ 374.899643][T11488] ? __pfx___mutex_lock+0x10/0x10 [ 374.899684][T11488] ? __fget_files+0x20e/0x3c0 [ 374.899720][T11488] ? do_writev+0x132/0x340 [ 374.899744][T11488] do_writev+0x132/0x340 [ 374.899770][T11488] ? __pfx_do_writev+0x10/0x10 [ 374.899807][T11488] do_syscall_64+0xcd/0x4b0 [ 374.899839][T11488] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 374.899864][T11488] RIP: 0033:0x7fd34458eec9 [ 374.899885][T11488] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 374.899910][T11488] RSP: 002b:00007fd34538d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 374.899934][T11488] RAX: ffffffffffffffda RBX: 00007fd3447e5fa0 RCX: 00007fd34458eec9 [ 374.899950][T11488] RDX: 0000000000000008 RSI: 0000200000000100 RDI: 0000000000000003 [ 374.899965][T11488] RBP: 00007fd344611f91 R08: 0000000000000000 R09: 0000000000000000 [ 374.899979][T11488] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 374.899993][T11488] R13: 00007fd3447e6038 R14: 00007fd3447e5fa0 R15: 00007ffff15ed318 [ 374.900028][T11488] [ 375.156367][ C0] vkms_vblank_simulate: vblank timer overrun [ 375.538152][T11498] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1219'. [ 375.622276][ T5842] block nbd17: Receive control failed (result -107) [ 375.675453][T11508] netlink: 186 bytes leftover after parsing attributes in process `syz.0.1220'. [ 375.696805][T11504] zswap: compressor not available [ 377.038499][T11543] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(2) [ 377.838398][T11555] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1229'. [ 377.844721][T11560] binder: 11559:11560 ioctl c018620c 0 returned -14 [ 377.858508][T11560] binder: 11559:11560 ioctl c00c620f 200000000380 returned -22 [ 377.879292][T11560] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1230'. [ 377.916976][ T5842] block nbd18: Receive control failed (result -107) [ 378.693509][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.700361][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.212261][T11608] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 380.196379][T11624] zswap: compressor not available [ 380.520635][T11641] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1244'. [ 380.586203][ T5842] block nbd19: Receive control failed (result -107) [ 382.459276][T11670] netlink: 268 bytes leftover after parsing attributes in process `syz.0.1259'. [ 382.588558][T11680] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1254'. [ 382.636900][ T5842] block nbd20: Receive control failed (result -107) [ 384.738717][T11721] zswap: compressor not available [ 384.953818][T11729] netlink: 186 bytes leftover after parsing attributes in process `syz.8.1267'. [ 385.607214][T11759] netlink: 268 bytes leftover after parsing attributes in process `syz.8.1277'. [ 385.884445][ T52] Bluetooth: hci5: command 0x0406 tx timeout [ 388.836734][T11837] netlink: 268 bytes leftover after parsing attributes in process `syz.3.1291'. [ 388.854315][T11829] zswap: compressor not available [ 389.594751][T11849] zswap: compressor not available [ 391.007244][ T52] Bluetooth: hci6: command 0x0406 tx timeout [ 391.510955][T11876] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1301'. [ 391.609065][ T5842] block nbd21: Receive control failed (result -107) [ 391.638965][T11881] FAULT_INJECTION: forcing a failure. [ 391.638965][T11881] name failslab, interval 1, probability 0, space 0, times 0 [ 391.675462][T11881] CPU: 0 UID: 0 PID: 11881 Comm: syz.6.1297 Tainted: G U syzkaller #0 PREEMPT(full) [ 391.675494][T11881] Tainted: [U]=USER [ 391.675499][T11881] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 391.675509][T11881] Call Trace: [ 391.675514][T11881] [ 391.675521][T11881] dump_stack_lvl+0x16c/0x1f0 [ 391.675544][T11881] should_fail_ex+0x512/0x640 [ 391.675564][T11881] ? __kmalloc_node_noprof+0xcd/0x8a0 [ 391.675584][T11881] should_failslab+0xc2/0x120 [ 391.675604][T11881] __kmalloc_node_noprof+0xe0/0x8a0 [ 391.675620][T11881] ? lockdep_init_map_type+0x5c/0x280 [ 391.675641][T11881] ? blk_mq_alloc_tag_set+0x46f/0x12e0 [ 391.675661][T11881] ? blk_mq_alloc_tag_set+0x46f/0x12e0 [ 391.675675][T11881] blk_mq_alloc_tag_set+0x46f/0x12e0 [ 391.675691][T11881] ? __pfx_idr_alloc+0x10/0x10 [ 391.675712][T11881] loop_add+0x3b2/0xb70 [ 391.675732][T11881] ? __pfx_loop_add+0x10/0x10 [ 391.675762][T11881] ? find_held_lock+0x2b/0x80 [ 391.675780][T11881] loop_control_ioctl+0x13e/0x630 [ 391.675800][T11881] ? __pfx_loop_control_ioctl+0x10/0x10 [ 391.675821][T11881] ? __pfx_loop_control_ioctl+0x10/0x10 [ 391.675840][T11881] __x64_sys_ioctl+0x18b/0x210 [ 391.675863][T11881] do_syscall_64+0xcd/0x4b0 [ 391.675881][T11881] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 391.675895][T11881] RIP: 0033:0x7f0a6238eec9 [ 391.675908][T11881] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 391.675922][T11881] RSP: 002b:00007f0a6321e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 391.675935][T11881] RAX: ffffffffffffffda RBX: 00007f0a625e6180 RCX: 00007f0a6238eec9 [ 391.675945][T11881] RDX: fffffffffffffffd RSI: 0000000000004c80 RDI: 0000000000000009 [ 391.675953][T11881] RBP: 00007f0a62411f91 R08: 0000000000000000 R09: 0000000000000000 [ 391.675962][T11881] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 391.675970][T11881] R13: 00007f0a625e6218 R14: 00007f0a625e6180 R15: 00007ffeb03e0de8 [ 391.675989][T11881] [ 392.356923][T11888] netlink: 268 bytes leftover after parsing attributes in process `syz.8.1302'. [ 393.719633][T11921] netlink: 268 bytes leftover after parsing attributes in process `syz.0.1309'. [ 394.548592][T11931] zswap: compressor not available [ 395.394992][T11947] netlink: 268 bytes leftover after parsing attributes in process `syz.6.1314'. [ 396.129368][ T52] Bluetooth: hci7: command 0x0406 tx timeout [ 396.577381][T11962] netlink: 268 bytes leftover after parsing attributes in process `syz.3.1321'. [ 398.106840][T11990] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1328'. [ 398.198810][ T5842] block nbd22: Receive control failed (result -107) [ 398.878024][T12017] netlink: 268 bytes leftover after parsing attributes in process `syz.6.1334'. [ 398.967008][T12014] netlink: 268 bytes leftover after parsing attributes in process `syz.3.1333'. [ 399.934282][ T5842] Bluetooth: hci10: Malformed LE Event: 0x1d [ 401.252294][ T5842] Bluetooth: hci3: command 0x0406 tx timeout [ 401.342687][T12063] FAULT_INJECTION: forcing a failure. [ 401.342687][T12063] name failslab, interval 1, probability 0, space 0, times 0 [ 401.372116][T12063] CPU: 1 UID: 0 PID: 12063 Comm: syz.3.1346 Tainted: G U syzkaller #0 PREEMPT(full) [ 401.372143][T12063] Tainted: [U]=USER [ 401.372148][T12063] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 401.372157][T12063] Call Trace: [ 401.372163][T12063] [ 401.372169][T12063] dump_stack_lvl+0x16c/0x1f0 [ 401.372191][T12063] should_fail_ex+0x512/0x640 [ 401.372216][T12063] ? __kmalloc_node_noprof+0xcd/0x8a0 [ 401.372249][T12063] should_failslab+0xc2/0x120 [ 401.372270][T12063] __kmalloc_node_noprof+0xe0/0x8a0 [ 401.372288][T12063] ? lockdep_init_map_type+0x5c/0x280 [ 401.372310][T12063] ? blk_mq_alloc_tag_set+0x46f/0x12e0 [ 401.372330][T12063] ? blk_mq_alloc_tag_set+0x46f/0x12e0 [ 401.372345][T12063] blk_mq_alloc_tag_set+0x46f/0x12e0 [ 401.372361][T12063] ? __pfx_idr_alloc+0x10/0x10 [ 401.372382][T12063] loop_add+0x3b2/0xb70 [ 401.372402][T12063] ? __pfx_loop_add+0x10/0x10 [ 401.372433][T12063] ? find_held_lock+0x2b/0x80 [ 401.372460][T12063] loop_control_ioctl+0x13e/0x630 [ 401.372481][T12063] ? __pfx_loop_control_ioctl+0x10/0x10 [ 401.372503][T12063] ? __pfx_loop_control_ioctl+0x10/0x10 [ 401.372524][T12063] __x64_sys_ioctl+0x18b/0x210 [ 401.372549][T12063] do_syscall_64+0xcd/0x4b0 [ 401.372567][T12063] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 401.372581][T12063] RIP: 0033:0x7fd34458eec9 [ 401.372593][T12063] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 401.372607][T12063] RSP: 002b:00007fd34538d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 401.372621][T12063] RAX: ffffffffffffffda RBX: 00007fd3447e5fa0 RCX: 00007fd34458eec9 [ 401.372630][T12063] RDX: fffffffffffffffd RSI: 0000000000004c80 RDI: 0000000000000007 [ 401.372638][T12063] RBP: 00007fd344611f91 R08: 0000000000000000 R09: 0000000000000000 [ 401.372647][T12063] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 401.372656][T12063] R13: 00007fd3447e6038 R14: 00007fd3447e5fa0 R15: 00007ffff15ed318 [ 401.372674][T12063] [ 402.019842][T12072] FAULT_INJECTION: forcing a failure. [ 402.019842][T12072] name failslab, interval 1, probability 0, space 0, times 0 [ 402.034441][T12072] CPU: 1 UID: 0 PID: 12072 Comm: syz.3.1349 Tainted: G U syzkaller #0 PREEMPT(full) [ 402.034483][T12072] Tainted: [U]=USER [ 402.034492][T12072] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 402.034507][T12072] Call Trace: [ 402.034516][T12072] [ 402.034526][T12072] dump_stack_lvl+0x16c/0x1f0 [ 402.034563][T12072] should_fail_ex+0x512/0x640 [ 402.034600][T12072] ? __kmalloc_node_noprof+0xcd/0x8a0 [ 402.034636][T12072] should_failslab+0xc2/0x120 [ 402.034672][T12072] __kmalloc_node_noprof+0xe0/0x8a0 [ 402.034703][T12072] ? lockdep_init_map_type+0x5c/0x280 [ 402.034740][T12072] ? blk_mq_alloc_tag_set+0x46f/0x12e0 [ 402.034776][T12072] ? blk_mq_alloc_tag_set+0x46f/0x12e0 [ 402.034803][T12072] blk_mq_alloc_tag_set+0x46f/0x12e0 [ 402.034832][T12072] ? __pfx_idr_alloc+0x10/0x10 [ 402.034867][T12072] loop_add+0x3b2/0xb70 [ 402.034903][T12072] ? __pfx_loop_add+0x10/0x10 [ 402.034958][T12072] ? find_held_lock+0x2b/0x80 [ 402.034989][T12072] loop_control_ioctl+0x13e/0x630 [ 402.035019][T12072] ? __pfx_loop_control_ioctl+0x10/0x10 [ 402.035053][T12072] ? __pfx_loop_control_ioctl+0x10/0x10 [ 402.035083][T12072] __x64_sys_ioctl+0x18b/0x210 [ 402.035118][T12072] do_syscall_64+0xcd/0x4b0 [ 402.035146][T12072] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 402.035168][T12072] RIP: 0033:0x7fd34458eec9 [ 402.035185][T12072] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 402.035205][T12072] RSP: 002b:00007fd34538d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 402.035226][T12072] RAX: ffffffffffffffda RBX: 00007fd3447e5fa0 RCX: 00007fd34458eec9 [ 402.035241][T12072] RDX: fffffffffffffffd RSI: 0000000000004c80 RDI: 0000000000000007 [ 402.035256][T12072] RBP: 00007fd344611f91 R08: 0000000000000000 R09: 0000000000000000 [ 402.035277][T12072] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 402.035290][T12072] R13: 00007fd3447e6038 R14: 00007fd3447e5fa0 R15: 00007ffff15ed318 [ 402.035320][T12072] [ 403.569493][T12105] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1359'. [ 403.616595][ T52] block nbd23: Receive control failed (result -107) [ 403.825408][T12114] page: refcount:22 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x78000 [ 403.838448][T12114] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 403.851471][T12114] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 403.859496][T12114] raw: 00fff00000000040 0000000000000000 dead000000000122 0000000000000000 [ 403.879215][T12114] raw: 0000000000000000 0000000000000000 00000016ffffffff 0000000000000000 [ 403.888605][T12114] head: 00fff00000000040 0000000000000000 dead000000000122 0000000000000000 [ 403.900631][T12114] head: 0000000000000000 0000000000000000 00000016ffffffff 0000000000000000 [ 403.910293][T12114] head: 00fff00000000003 ffffea0001e00001 00000000ffffffff 00000000ffffffff [ 403.968766][T12114] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 403.992059][T12114] page dumped because: unmovable page [ 404.008260][T12114] page_owner tracks the page as allocated [ 404.252754][T12114] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x528c0(GFP_NOWAIT|__GFP_IO|__GFP_FS|__GFP_NORETRY|__GFP_COMP), pid 5508, tgid 5508 (dhcpcd), ts 55261507133, free_ts 28424688504 [ 404.329759][T12114] post_alloc_hook+0x1c0/0x230 [ 404.402678][T12114] get_page_from_freelist+0x10a3/0x3a30 [ 404.425198][T12114] __alloc_frozen_pages_noprof+0x25f/0x2470 [ 404.431370][T12114] alloc_pages_mpol+0x1fb/0x550 [ 404.436465][T12114] alloc_pages_noprof+0x131/0x390 [ 404.443578][T12114] skb_page_frag_refill+0x186/0x5c0 [ 404.448880][T12114] try_fill_recv+0x7e4/0x2930 [ 404.454618][T12114] virtnet_open+0x3a9/0xc20 [ 404.460259][T12114] __dev_open+0x2e7/0x7c0 [ 404.466117][T12114] __dev_change_flags+0x55d/0x720 [ 404.471257][T12114] netif_change_flags+0x8d/0x160 [ 404.476279][T12114] dev_change_flags+0xba/0x250 [ 404.481063][T12114] devinet_ioctl+0x11d5/0x1f50 [ 404.543566][T12114] inet_ioctl+0x3a7/0x3f0 [ 404.547954][T12114] sock_do_ioctl+0x118/0x280 [ 404.552575][T12114] sock_ioctl+0x227/0x6b0 [ 404.576155][T12114] page last free pid 1 tgid 1 stack trace: [ 404.872155][T12114] __free_frozen_pages+0x7df/0x1160 [ 405.124032][T12114] free_contig_range+0x183/0x4b0 [ 405.129034][T12114] destroy_args+0xb69/0x12e0 [ 405.243337][T12114] debug_vm_pgtable+0x1a32/0x3640 [ 405.248414][T12114] do_one_initcall+0x120/0x6e0 [ 405.343508][T12114] kernel_init_freeable+0x5c2/0x910 [ 405.458556][T12114] kernel_init+0x1c/0x2b0 [ 405.490608][T12114] ret_from_fork+0x56a/0x730 [ 405.644341][T12114] ret_from_fork_asm+0x1a/0x30 [ 408.133348][ T31] INFO: task syz-executor:5847 blocked for more than 143 seconds. [ 408.142042][ T31] Tainted: G U syzkaller #0 [ 408.152761][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 408.174964][ T31] task:syz-executor state:D stack:23512 pid:5847 tgid:5847 ppid:1 task_flags:0x400140 flags:0x00080002 [ 408.196135][ T31] Call Trace: [ 408.199679][ T31] [ 408.202700][ T31] __schedule+0x1190/0x5de0 [ 408.207430][ T31] ? __pfx___schedule+0x10/0x10 [ 408.212535][ T31] ? find_held_lock+0x2b/0x80 [ 408.217400][ T31] ? schedule+0x2d7/0x3a0 [ 408.221803][ T31] ? nfsd_shutdown_threads+0x5b/0xf0 [ 408.244417][ T31] schedule+0xe7/0x3a0 [ 408.255639][ T31] schedule_preempt_disabled+0x13/0x30 [ 408.267744][ T31] __mutex_lock+0x818/0x1060 [ 408.310110][ T31] ? __lock_acquire+0x62e/0x1ce0 [ 408.340791][ T31] ? nfsd_shutdown_threads+0x5b/0xf0 [ 408.371143][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 408.378003][ T31] ? net_generic+0xea/0x2a0 [ 408.413865][ T31] ? nfsd_shutdown_threads+0x5b/0xf0 [ 408.443569][ T31] nfsd_shutdown_threads+0x5b/0xf0 [ 408.463348][ T31] nfsd_umount+0x48/0xe0 [ 408.467959][ T31] deactivate_locked_super+0xc1/0x1a0 [ 408.476152][ T31] deactivate_super+0xde/0x100 [ 408.481113][ T31] cleanup_mnt+0x225/0x450 [ 408.489618][ T31] task_work_run+0x14d/0x240 [ 408.496977][ T31] ? __pfx_task_work_run+0x10/0x10 [ 408.502290][ T31] ? __pfx___x64_sys_umount+0x10/0x10 [ 408.509520][ T31] exit_to_user_mode_loop+0xec/0x130 [ 408.515920][ T31] do_syscall_64+0x419/0x4b0 [ 408.520657][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 408.532384][ T31] RIP: 0033:0x7f86ce7901f7 [ 408.553222][ T31] RSP: 002b:00007ffc0964ad88 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 408.562438][ T31] RAX: 0000000000000000 RBX: 00007f86ce811d7d RCX: 00007f86ce7901f7 [ 408.570814][ T31] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc0964ae40 [ 408.579382][ T31] RBP: 00007ffc0964ae40 R08: 0000000000000000 R09: 0000000000000000 [ 408.588376][ T31] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffc0964bed0 [ 408.597968][ T31] R13: 00007f86ce811d7d R14: 000000000003d417 R15: 00007ffc0964bf10 [ 408.608512][ T31] [ 408.611697][ T31] INFO: task syz-executor:8682 blocked for more than 143 seconds. [ 408.627069][ T31] Tainted: G U syzkaller #0 [ 408.646371][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 408.663614][ T31] task:syz-executor state:D stack:23880 pid:8682 tgid:8682 ppid:1 task_flags:0x400140 flags:0x00080002 [ 408.676002][ T31] Call Trace: [ 408.679434][ T31] [ 408.682589][ T31] __schedule+0x1190/0x5de0 [ 408.687770][ T31] ? __lock_acquire+0x62e/0x1ce0 [ 408.693564][ T31] ? __pfx___schedule+0x10/0x10 [ 408.698561][ T31] ? find_held_lock+0x2b/0x80 [ 408.705583][ T31] ? schedule+0x2d7/0x3a0 [ 408.710410][ T31] ? nfsd_shutdown_threads+0x5b/0xf0 [ 408.716201][ T31] schedule+0xe7/0x3a0 [ 408.720410][ T31] schedule_preempt_disabled+0x13/0x30 [ 408.873633][ T31] __mutex_lock+0x818/0x1060 [ 408.881700][ T31] ? __lock_acquire+0x62e/0x1ce0 [ 408.888756][ T31] ? nfsd_shutdown_threads+0x5b/0xf0 [ 408.894762][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 408.899864][ T31] ? net_generic+0xea/0x2a0 [ 408.904712][ T31] ? nfsd_shutdown_threads+0x5b/0xf0 [ 408.911450][ T31] nfsd_shutdown_threads+0x5b/0xf0 [ 408.916961][ T31] nfsd_umount+0x48/0xe0 [ 408.921236][ T31] deactivate_locked_super+0xc1/0x1a0 [ 408.926879][ T31] deactivate_super+0xde/0x100 [ 408.931754][ T31] cleanup_mnt+0x225/0x450 [ 408.936590][ T31] task_work_run+0x14d/0x240 [ 408.941206][ T31] ? __pfx_task_work_run+0x10/0x10 [ 408.947545][ T31] ? __pfx___x64_sys_umount+0x10/0x10 [ 408.952976][ T31] exit_to_user_mode_loop+0xec/0x130 [ 408.958381][ T31] do_syscall_64+0x419/0x4b0 [ 408.963000][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 408.969770][ T31] RIP: 0033:0x7fc832d901f7 [ 408.974244][ T31] RSP: 002b:00007fffd9c356c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 408.983158][ T31] RAX: 0000000000000000 RBX: 00007fc832e11d7d RCX: 00007fc832d901f7 [ 408.991152][ T31] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fffd9c35780 [ 409.004143][ T31] RBP: 00007fffd9c35780 R08: 0000000000000000 R09: 0000000000000000 [ 409.012215][ T31] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fffd9c36810 [ 409.027098][ T31] R13: 00007fc832e11d7d R14: 000000000003ed01 R15: 00007fffd9c36850 [ 409.035171][ T31] [ 409.038290][ T31] INFO: task syz.0.687:9186 blocked for more than 144 seconds. [ 409.048813][ T31] Tainted: G U syzkaller #0 [ 409.057302][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 409.081366][ T31] task:syz.0.687 state:D stack:27976 pid:9186 tgid:9168 ppid:5840 task_flags:0x400140 flags:0x00080002 [ 409.093409][ T31] Call Trace: [ 409.096695][ T31] [ 409.100620][ T31] __schedule+0x1190/0x5de0 [ 409.105229][ T31] ? __pfx___schedule+0x10/0x10 [ 409.110109][ T31] ? find_held_lock+0x2b/0x80 [ 409.114923][ T31] ? schedule+0x2d7/0x3a0 [ 409.119268][ T31] ? nfsd_shutdown_threads+0x5b/0xf0 [ 409.126571][ T31] schedule+0xe7/0x3a0 [ 409.130664][ T31] schedule_preempt_disabled+0x13/0x30 [ 409.137487][ T31] __mutex_lock+0x818/0x1060 [ 409.142099][ T31] ? __lock_acquire+0x62e/0x1ce0 [ 409.147063][ T31] ? nfsd_shutdown_threads+0x5b/0xf0 [ 409.153445][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 409.158491][ T31] ? net_generic+0xea/0x2a0 [ 409.162993][ T31] ? nfsd_shutdown_threads+0x5b/0xf0 [ 409.168379][ T31] nfsd_shutdown_threads+0x5b/0xf0 [ 409.174832][ T31] nfsd_umount+0x48/0xe0 [ 409.179110][ T31] deactivate_locked_super+0xc1/0x1a0 [ 409.184656][ T31] deactivate_super+0xde/0x100 [ 409.189462][ T31] cleanup_mnt+0x225/0x450 [ 409.194005][ T31] task_work_run+0x14d/0x240 [ 409.198628][ T31] ? __pfx_task_work_run+0x10/0x10 [ 409.203827][ T31] ? __pfx___x64_sys_mount+0x10/0x10 [ 409.209159][ T31] exit_to_user_mode_loop+0xec/0x130 [ 409.214502][ T31] do_syscall_64+0x419/0x4b0 [ 409.219108][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 409.225096][ T31] RIP: 0033:0x7f8d7df8eec9 [ 409.229518][ T31] RSP: 002b:00007f8d7ed69038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 409.238040][ T31] RAX: fffffffffffffffe RBX: 00007f8d7e1e6180 RCX: 00007f8d7df8eec9 [ 409.246127][ T31] RDX: 0000200000000140 RSI: 00002000000000c0 RDI: 0000000000000000 [ 409.255597][ T31] RBP: 00007f8d7e011f91 R08: 0000000000000000 R09: 0000000000000000 [ 409.264650][ T31] R10: 000000000000000f R11: 0000000000000246 R12: 0000000000000000 [ 409.272635][ T31] R13: 00007f8d7e1e6218 R14: 00007f8d7e1e6180 R15: 00007fff94ddb998 [ 409.282183][ T31] [ 409.285708][ T31] INFO: task syz.2.741:9413 blocked for more than 144 seconds. [ 409.300308][ T31] Tainted: G U syzkaller #0 [ 409.307412][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 409.316321][ T31] task:syz.2.741 state:D stack:25928 pid:9413 tgid:9412 ppid:5850 task_flags:0x400140 flags:0x00080002 [ 409.328511][ T31] Call Trace: [ 409.331797][ T31] [ 409.334818][ T31] __schedule+0x1190/0x5de0 [ 409.339346][ T31] ? __lock_acquire+0x62e/0x1ce0 [ 409.344422][ T31] ? __pfx___schedule+0x10/0x10 [ 409.349299][ T31] ? find_held_lock+0x2b/0x80 [ 409.355734][ T31] ? schedule+0x2d7/0x3a0 [ 409.360100][ T31] ? nfsd_shutdown_threads+0x5b/0xf0 [ 409.365483][ T31] schedule+0xe7/0x3a0 [ 409.370434][ T31] schedule_preempt_disabled+0x13/0x30 [ 409.375993][ T31] __mutex_lock+0x818/0x1060 [ 409.381636][ T31] ? __lock_acquire+0x62e/0x1ce0 [ 409.386705][ T31] ? nfsd_shutdown_threads+0x5b/0xf0 [ 409.392029][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 409.397121][ T31] ? net_generic+0xea/0x2a0 [ 409.401644][ T31] ? nfsd_shutdown_threads+0x5b/0xf0 [ 409.407164][ T31] nfsd_shutdown_threads+0x5b/0xf0 [ 409.412287][ T31] nfsd_umount+0x48/0xe0 [ 409.424659][ T31] deactivate_locked_super+0xc1/0x1a0 [ 409.430061][ T31] deactivate_super+0xde/0x100 [ 409.434909][ T31] cleanup_mnt+0x225/0x450 [ 409.439336][ T31] task_work_run+0x14d/0x240 [ 409.444040][ T31] ? __pfx_task_work_run+0x10/0x10 [ 409.449188][ T31] ? __pfx___x64_sys_mount+0x10/0x10 [ 409.454528][ T31] exit_to_user_mode_loop+0xec/0x130 [ 409.461085][ T31] do_syscall_64+0x419/0x4b0 [ 409.466040][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 409.472812][ T31] RIP: 0033:0x7f990bb8eec9 [ 409.477359][ T31] RSP: 002b:00007f990ca16038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 409.486454][ T31] RAX: fffffffffffffffe RBX: 00007f990bde5fa0 RCX: 00007f990bb8eec9 [ 409.495782][ T31] RDX: 0000200000000300 RSI: 00002000000000c0 RDI: 0000000000000000 [ 409.503893][ T31] RBP: 00007f990bc11f91 R08: 0000000000000000 R09: 0000000000000000 [ 409.511914][ T31] R10: 0000000000000800 R11: 0000000000000246 R12: 0000000000000000 [ 409.520027][ T31] R13: 00007f990bde6038 R14: 00007f990bde5fa0 R15: 00007ffdda700da8 [ 409.528109][ T31] [ 409.531174][ T31] [ 409.531174][ T31] Showing all locks held in the system: [ 409.539586][ T31] 3 locks held by kworker/0:1/10: [ 409.546097][ T31] #0: ffff8880b863a498 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x7e/0x130 [ 409.556393][ T31] #1: ffff8880b8624088 (psi_seq){-.-.}-{0:0}, at: __schedule+0x1861/0x5de0 [ 409.566419][ T31] #2: ffffffff8e1c2220 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0xbd/0x20a0 [ 409.576363][ T31] 1 lock held by khungtaskd/31: [ 409.581223][ T31] #0: ffffffff8e1c2220 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0 [ 409.592312][ T31] 5 locks held by kworker/u8:4/60: [ 409.597466][ T31] #0: ffff8880b863a498 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x7e/0x130 [ 409.607442][ T31] #1: ffff8880b8624088 (psi_seq){-.-.}-{0:0}, at: __schedule+0x1861/0x5de0 [ 409.616681][ T31] #2: ffff888025758788 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0x99/0x580 [ 409.626810][ T31] #3: ffffffff8e1c2220 (rcu_read_lock){....}-{1:3}, at: ieee80211_sta_active_ibss+0xdc/0x420 [ 409.637181][ T31] #4: ffffffff8e1c2220 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0xbd/0x20a0 [ 409.646910][ T31] 2 locks held by syz-executor/5847: [ 409.652189][ T31] #0: ffff88807b7060e0 (&type->s_umount_key#55){++++}-{4:4}, at: deactivate_super+0xd6/0x100 [ 409.663989][ T31] #1: ffffffff8e5e9848 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 409.673696][ T31] 2 locks held by syz.3.494/8355: [ 409.678721][ T31] #0: ffffffff8ff8c190 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 409.687859][ T31] #1: ffffffff8e5e9848 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0xd5/0x1b10 [ 409.698177][ T31] 2 locks held by syz-executor/8682: [ 409.703518][ T31] #0: ffff888029e020e0 (&type->s_umount_key#55){++++}-{4:4}, at: deactivate_super+0xd6/0x100 [ 409.714493][ T31] #1: ffffffff8e5e9848 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 409.724195][ T31] 2 locks held by syz.0.687/9186: [ 409.729219][ T31] #0: ffff88803183e0e0 (&type->s_umount_key#55){++++}-{4:4}, at: deactivate_super+0xd6/0x100 [ 409.739930][ T31] #1: ffffffff8e5e9848 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 409.749962][ T31] 2 locks held by syz.2.741/9413: [ 409.755104][ T31] #0: ffff88804264a0e0 (&type->s_umount_key#55){++++}-{4:4}, at: deactivate_super+0xd6/0x100 [ 409.766438][ T31] #1: ffffffff8e5e9848 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 409.776295][ T31] 2 locks held by syz.7.807/9763: [ 409.781329][ T31] #0: ffffffff8ff8c190 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 409.790592][ T31] #1: ffffffff8e5e9848 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_version_get_doit+0x18a/0x800 [ 409.800839][ T31] 2 locks held by syz-executor/10019: [ 409.806789][ T31] #0: ffff8880217d00e0 (&type->s_umount_key#55){++++}-{4:4}, at: deactivate_super+0xd6/0x100 [ 409.817648][ T31] #1: ffffffff8e5e9848 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 409.827405][ T31] 2 locks held by syz.5.1080/10918: [ 409.832619][ T31] #0: ffffffff8ff8c190 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 409.840881][ T31] #1: ffffffff8e5e9848 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0xd5/0x1b10 [ 409.851036][ T31] 2 locks held by getty/11351: [ 409.855894][ T31] #0: ffff88814cf6d0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 409.866838][ T31] #1: ffffc9000360b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x14f0 [ 409.877030][ T31] 2 locks held by syz.8.1373/12163: [ 409.882229][ T31] #0: ffff888092ebe0e0 (&type->s_umount_key#55){++++}-{4:4}, at: deactivate_super+0xd6/0x100 [ 409.893402][ T31] #1: ffffffff8e5e9848 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 409.903041][ T31] [ 409.906215][ T31] ============================================= [ 409.906215][ T31] [ 409.916097][ T31] NMI backtrace for cpu 0 [ 409.916118][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G U syzkaller #0 PREEMPT(full) [ 409.916151][ T31] Tainted: [U]=USER [ 409.916160][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 409.916174][ T31] Call Trace: [ 409.916182][ T31] [ 409.916190][ T31] dump_stack_lvl+0x116/0x1f0 [ 409.916224][ T31] nmi_cpu_backtrace+0x27b/0x390 [ 409.916261][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 409.916299][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 409.916337][ T31] watchdog+0xf3f/0x1170 [ 409.916368][ T31] ? rcu_is_watching+0x12/0xc0 [ 409.916398][ T31] ? __pfx_watchdog+0x10/0x10 [ 409.916420][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 409.916450][ T31] ? __kthread_parkme+0x19e/0x250 [ 409.916485][ T31] ? __pfx_watchdog+0x10/0x10 [ 409.916510][ T31] kthread+0x3c5/0x780 [ 409.916533][ T31] ? __pfx_kthread+0x10/0x10 [ 409.916559][ T31] ? rcu_is_watching+0x12/0xc0 [ 409.916586][ T31] ? __pfx_kthread+0x10/0x10 [ 409.916611][ T31] ret_from_fork+0x56a/0x730 [ 409.916633][ T31] ? __pfx_kthread+0x10/0x10 [ 409.916656][ T31] ret_from_fork_asm+0x1a/0x30 [ 409.916703][ T31] [ 409.916711][ T31] Sending NMI from CPU 0 to CPUs 1: [ 410.046707][ C1] NMI backtrace for cpu 1 [ 410.046728][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G U syzkaller #0 PREEMPT(full) [ 410.046763][ C1] Tainted: [U]=USER [ 410.046771][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 410.046785][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 410.046816][ C1] Code: 6e 5e 02 e9 c3 09 03 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 03 de 1b 00 fb f4 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 410.046840][ C1] RSP: 0018:ffffc90000197df8 EFLAGS: 000002c2 [ 410.046859][ C1] RAX: 00000000003e304b RBX: 0000000000000001 RCX: ffffffff8b4e2a59 [ 410.046875][ C1] RDX: 0000000000000000 RSI: ffffffff8d8245c1 RDI: ffffffff8bd04640 [ 410.046891][ C1] RBP: ffffed1003bd4b58 R08: 0000000000000001 R09: ffffed10170e6655 [ 410.046906][ C1] R10: ffff8880b87332ab R11: 0000000000000000 R12: 0000000000000001 [ 410.046921][ C1] R13: ffff88801dea5ac0 R14: ffffffff905ff090 R15: 0000000000000000 [ 410.046937][ C1] FS: 0000000000000000(0000) GS:ffff888124f6f000(0000) knlGS:0000000000000000 [ 410.046960][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 410.046976][ C1] CR2: 0000200001000000 CR3: 0000000063214000 CR4: 00000000003526f0 [ 410.046992][ C1] Call Trace: [ 410.046999][ C1] [ 410.047006][ C1] default_idle+0x13/0x20 [ 410.047036][ C1] default_idle_call+0x6c/0xb0 [ 410.047067][ C1] do_idle+0x38d/0x500 [ 410.047097][ C1] ? __pfx_do_idle+0x10/0x10 [ 410.047124][ C1] ? trace_sched_exit_tp+0x2f/0x120 [ 410.047153][ C1] cpu_startup_entry+0x4f/0x60 [ 410.047181][ C1] start_secondary+0x21d/0x2b0 [ 410.047217][ C1] ? __pfx_start_secondary+0x10/0x10 [ 410.047256][ C1] common_startup_64+0x13e/0x148 [ 410.047293][ C1] [ 410.047727][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 410.228987][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G U syzkaller #0 PREEMPT(full) [ 410.239644][ T31] Tainted: [U]=USER [ 410.243424][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 410.253462][ T31] Call Trace: [ 410.256723][ T31] [ 410.259638][ T31] dump_stack_lvl+0x3d/0x1f0 [ 410.264220][ T31] vpanic+0x640/0x6f0 [ 410.268186][ T31] panic+0xca/0xd0 [ 410.271885][ T31] ? __pfx_panic+0x10/0x10 [ 410.276289][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 410.281680][ T31] ? nmi_trigger_cpumask_backtrace+0x1b1/0x300 [ 410.287836][ T31] ? watchdog+0xe48/0x1170 [ 410.292257][ T31] ? watchdog+0xe3b/0x1170 [ 410.296661][ T31] watchdog+0xe59/0x1170 [ 410.300892][ T31] ? rcu_is_watching+0x12/0xc0 [ 410.305646][ T31] ? __pfx_watchdog+0x10/0x10 [ 410.310304][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 410.315488][ T31] ? __kthread_parkme+0x19e/0x250 [ 410.320504][ T31] ? __pfx_watchdog+0x10/0x10 [ 410.325166][ T31] kthread+0x3c5/0x780 [ 410.329215][ T31] ? __pfx_kthread+0x10/0x10 [ 410.333785][ T31] ? rcu_is_watching+0x12/0xc0 [ 410.338539][ T31] ? __pfx_kthread+0x10/0x10 [ 410.343118][ T31] ret_from_fork+0x56a/0x730 [ 410.347710][ T31] ? __pfx_kthread+0x10/0x10 [ 410.352279][ T31] ret_from_fork_asm+0x1a/0x30 [ 410.357041][ T31] [ 410.360293][ T31] Kernel Offset: disabled [ 410.364606][ T31] Rebooting in 86400 seconds..