last executing test programs: 6m36.245654683s ago: executing program 1 (id=2581): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) unshare$auto(0x40000080) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = socket(0x5, 0x4, 0x7) close_range$auto(0x2, 0x8, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000640), r1) sendmsg$auto_NL802154_CMD_SET_PAN_ID(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000011c0)=ANY=[], 0x1058}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r3 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000280)={0xe8, r2, 0x805, 0x70bd2d, 0x25dfdbfb, {}, [@NL80211_ATTR_NETNS_FD={0x8, 0xdb, r3}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0xca, 0xcd, "091e8e70a7ddd874f2907d2504596904abfba25decdc635a30ad8d89fba9394b0416c89f97edc0c3366c6d421e22621c855925ef7659c8a0088ec3a9da955b139d4c60dce874040c4e29a47c0aec430cc126c47c0f44f969c5dd914215caf0bf2f56db5ce39dc77c676fa476634fc1548d683974a38c0feadd7d9762ff49d5821530e01796a998ef5b4a708e2e8885a31a35028016e40888343891b2687861badd50d1f8b30ff59c12767e28e7275b3f07e7052d3402419e6d2efbf3293fb2016c052a80ed1f"}]}, 0xe8}, 0x1, 0x0, 0x0, 0x4004044}, 0x8000) sendmsg$auto_NL80211_CMD_GET_WIPHY(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000140)=ANY=[@ANYBLOB="18000000", @ANYRES16=r2, @ANYBLOB="810b25bd7080fbdbdf250100000004"], 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0xc004) sendmsg$auto_NL80211_CMD_GET_MPP(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, r2, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@NL80211_ATTR_WIPHY_ANTENNA_TX={0x8, 0x69, 0x7}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x3}, @NL80211_ATTR_HIDDEN_SSID={0x8, 0x7e, 0x7ff}, @NL80211_ATTR_WPA_VERSIONS={0x8, 0x4b, 0x1000}]}, 0x34}, 0x1, 0x0, 0x0, 0x200400c5}, 0x2400c010) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_rng_chrdev_ops_core(0xffffffffffffff9c, &(0x7f0000000000), 0x42800, 0x0) read$auto_proc_mem_operations_base(0xffffffffffffffff, &(0x7f0000000200)=""/81, 0x51) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) socket(0x2, 0x5, 0x0) io_uring_setup$auto(0x406, 0x0) mmap$auto(0x0, 0x9, 0xffb, 0x8000000008011, 0x3, 0x0) sendmsg$auto_NL80211_CMD_SET_WIPHY(0xffffffffffffffff, 0x0, 0x80) getrandom$auto(0x0, 0x6000000, 0x3) io_uring_enter$auto(0x3, 0xa84, 0x80000001, 0xa, 0x0, 0x46) 6m33.251468749s ago: executing program 1 (id=2598): setrlimit$auto(0x7, &(0x7f0000000080)={0x0, 0x6}) setrlimit$auto(0x5, &(0x7f0000000100)={0x8, 0x6}) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttya5\x00', 0x4000, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x200, 0x0) r0 = timerfd_create$auto(0x7, 0x0) getrlimit$auto(0x9, &(0x7f0000000000)={0x25, 0x3ff}) connect$auto(r0, &(0x7f0000000140)=@isdn={0x22, 0xa2, 0x4, 0x7, 0x8}, 0x5) 6m33.004403995s ago: executing program 1 (id=2599): ioctl$auto_USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, 0x0) mmap$auto(0x2, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sysfs$auto(0x2, 0x23, 0x0) r0 = fsopen$auto(0x0, 0xae) close_range$auto(0x2, 0x8, 0x0) syz_genetlink_get_family_id$auto_tipcv2(0x0, 0xffffffffffffffff) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0xff1, 0x8000) r1 = pipe$auto(0x0) close_range$auto(0x0, 0xffffffffffffffff, 0x2) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) fstatfs$auto(r1, 0x0) sendmsg$auto_TIPC_NL_LINK_GET(0xffffffffffffffff, 0x0, 0x4) r2 = openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f0000003b80)='/dev/snd/pcmC0D0c\x00', 0x8100, 0x0) write$auto_cpu_latency_qos_fops_qos(0xffffffffffffffff, &(0x7f00000000c0)="4d46f158ba101c8c2d9356700b866489eff04b4760b3539b045b1af49ea855e368af3d1e6e1f4357d9e208a8ed480f4eff72480ed222ec48dbb1c4c6d0fd8e8a7b798aa8066160cb78be83de9b691f6907f58b4f87e18d4d420de6c18f156d749715ddbf8127891d08247d8c919da0fbb26ace2399e1c632f1e2b0c8ffe8ce7dc7b80b98438f066bd662d0d89bd610fc61883c13fe44afc3e67b91241c5cf586c524a26879", 0xa5) mmap$auto(0x1000, 0x400006, 0x5f05, 0x16, 0xffffffffffffffff, 0x8000) r3 = getpid() sendmsg$auto_ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f0000001c80)={&(0x7f00000010c0)=ANY=[@ANYRESDEC=r0, @ANYRES16=0x0, @ANYBLOB="01002fbd7000fcdbdf2512000000"], 0x14}, 0x1, 0x0, 0x0, 0x4000020}, 0x800) process_vm_readv$auto(r3, &(0x7f0000000080)={0x0, 0xfff}, 0x40000000001, &(0x7f0000000180)={&(0x7f0000000140), 0x40000000001243}, 0xa, 0x0) ioctl$auto_SNDRV_PCM_IOCTL_HW_REFINE2(r2, 0xc2604110, 0x0) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/mac80211_hwsim/hwsim0/net/wlan0/operstate\x00', 0x8ad00, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r4, &(0x7f00000000c0)=""/4096, 0x1000) mmap$auto(0xf5, 0x1, 0xdf, 0x100000000000eb1, r0, 0x8003) r5 = getpid() process_vm_readv$auto(r5, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000100)="58e7a2329fbdfb4986a26faf4182257497e4856e4a66e5177fa5d4eb558a61b740471c000000007e973d778cb0026ab17c9fe9252ff86e659e", 0xffffffff}, 0x6, 0x0) bpf$auto(0x5, &(0x7f0000000000)=@iter_create={0x15, 0x8}, 0x7) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/zswap/parameters/compressor\x00', 0xc0002, 0x0) write$auto_ocfs2_control_fops_stack_user(r6, &(0x7f0000003900)='\t', 0x1) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/memory_hotplug/parameters/online_policy\x00', 0x2, 0x0) read$auto(0xffffffffffffffff, 0x0, 0xeff) 6m32.335910056s ago: executing program 1 (id=2602): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000cc0), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_MPATH(r0, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000000)={0x14, r1, 0x301, 0x70bd2d, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0xfff0, 0x20000000}, 0x4048090) 6m32.074655229s ago: executing program 1 (id=2604): pwrite64$auto(0xc8, &(0x7f0000000000)='\vX5n\x91p\xe6\x1eRN8\x99\x88\xa2\x06\x00J\x99\x00:\x00!\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02l@\x18*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\x01\x0e\xa4\xdf\xdav\x1cC\x8a\v\x00\x00\x00\x00\x00\x00\x00X\xb9_\xdd*\xd1\x14^\xbe\xa2\x00'/97, 0x10, 0x3) (async) mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) (async) lgetxattr$auto(0x0, 0x0, 0x0, 0x100) (async) sendmsg$auto_NL80211_CMD_SET_WIPHY(0xffffffffffffffff, 0x0, 0x20040894) setreuid$auto(0x3, 0x7) r0 = waitid$auto_P_PIDFD(0x3, 0xffffffffffffffff, &(0x7f0000000080)={@_si_pad}, 0x3, &(0x7f0000000100)={{0x5}, {0xffffffff7fffffff}, 0x3, 0x4, 0x100, 0xa, 0xa1, 0x9, 0x6f1, 0xfffffffffffffffe, 0x0, 0x0, 0x8, 0x5, 0x2, 0xfffffffffffffffc}) kill$auto(r0, 0x12) 6m31.807386745s ago: executing program 1 (id=2606): open(&(0x7f0000000800)='./file0\x00', 0x62240, 0x154) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_gtp(&(0x7f0000002f80), 0xffffffffffffffff) sendmsg$auto_GTP_CMD_NEWPDP(r0, &(0x7f0000003080)={0x0, 0x0, &(0x7f0000003040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="d555e772f6c7ee7bd43b85a0ee4e3d", @ANYBLOB], 0x2c}, 0x1, 0x0, 0x0, 0x4c000}, 0x80) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/power/resume\x00', 0x189002, 0x0) mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb2, 0x8000000401, 0x8000) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) write$auto(0x3, 0x0, 0x7fffffff) r1 = socket(0x2, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_handshake(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$auto_HANDSHAKE_CMD_DONE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r3, 0x1, 0x70bd22, 0x25dfdbff, {}, [@HANDSHAKE_A_DONE_SOCKFD={0x8, 0x2, r1}]}, 0x1c}}, 0xd4) socket(0x10, 0x2, 0x0) userfaultfd$auto(0x1) socket(0x8, 0x0, 0x2400) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1, 0x1, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x801, 0x84) socket(0x2, 0x801, 0x106) socket(0xa, 0x2, 0x0) socket(0xa, 0x2, 0x3a) r4 = socket(0xa, 0x2, 0x88) bpf$auto(0x0, &(0x7f0000000000)=@link_update={r4, @new_prog_fd=0x4, 0x4, @old_prog_fd=r4}, 0xa3) mmap$auto(0x0, 0x2000009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/irq/2/name\x00', 0x800, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x9, 0x20, 0x940, 0x1ffde, 0x9, 0x6, 0x8000003, 0x9, 0x5, 0x0, 0x4, 0xb0, 0x7, 0x200, 0x3, 0x205, 0x7, 0x4000, 0x3ffff, 0x0, 0x7, 0x7169, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3, [0x0, 0x6, 0x3, 0x8, 0x5, 0x8000004, 0x0, 0x100000000000000, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x100000000, 0x7, 0x8000000000000001, 0xc2, 0x4, 0x0, 0x0, 0xffe, 0x4, 0x0, 0x0, 0x1fffffffffffffff]}, 0x203, 0x7d) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) socket(0x10, 0x2, 0x0) 6m16.42012368s ago: executing program 32 (id=2606): open(&(0x7f0000000800)='./file0\x00', 0x62240, 0x154) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_gtp(&(0x7f0000002f80), 0xffffffffffffffff) sendmsg$auto_GTP_CMD_NEWPDP(r0, &(0x7f0000003080)={0x0, 0x0, &(0x7f0000003040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="d555e772f6c7ee7bd43b85a0ee4e3d", @ANYBLOB], 0x2c}, 0x1, 0x0, 0x0, 0x4c000}, 0x80) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/power/resume\x00', 0x189002, 0x0) mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb2, 0x8000000401, 0x8000) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) write$auto(0x3, 0x0, 0x7fffffff) r1 = socket(0x2, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_handshake(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$auto_HANDSHAKE_CMD_DONE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r3, 0x1, 0x70bd22, 0x25dfdbff, {}, [@HANDSHAKE_A_DONE_SOCKFD={0x8, 0x2, r1}]}, 0x1c}}, 0xd4) socket(0x10, 0x2, 0x0) userfaultfd$auto(0x1) socket(0x8, 0x0, 0x2400) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1, 0x1, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x801, 0x84) socket(0x2, 0x801, 0x106) socket(0xa, 0x2, 0x0) socket(0xa, 0x2, 0x3a) r4 = socket(0xa, 0x2, 0x88) bpf$auto(0x0, &(0x7f0000000000)=@link_update={r4, @new_prog_fd=0x4, 0x4, @old_prog_fd=r4}, 0xa3) mmap$auto(0x0, 0x2000009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/irq/2/name\x00', 0x800, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x9, 0x20, 0x940, 0x1ffde, 0x9, 0x6, 0x8000003, 0x9, 0x5, 0x0, 0x4, 0xb0, 0x7, 0x200, 0x3, 0x205, 0x7, 0x4000, 0x3ffff, 0x0, 0x7, 0x7169, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3, [0x0, 0x6, 0x3, 0x8, 0x5, 0x8000004, 0x0, 0x100000000000000, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x100000000, 0x7, 0x8000000000000001, 0xc2, 0x4, 0x0, 0x0, 0xffe, 0x4, 0x0, 0x0, 0x1fffffffffffffff]}, 0x203, 0x7d) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) socket(0x10, 0x2, 0x0) 4m37.912861868s ago: executing program 3 (id=2970): r0 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/003/001\x00', 0x8001, 0x0) ioctl$auto_USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000040)={0x754, 0x5e}) (fail_nth: 1) 4m36.891400708s ago: executing program 3 (id=2973): close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffff7, 0x8000) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000880)='/dev/input/event0\x00', 0x40100, 0x0) r0 = socket(0x2b, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @remote}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000000)={{&(0x7f0000000080), 0x12, 0x0, 0xc, 0x0, 0x3ff, 0xfffffffd}, 0x10001}, 0x5, 0x20000000) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) setsockopt$auto(0x3, 0x1, 0x21, 0x0, 0x9) write$auto(0x3, 0x0, 0xfffffdef) madvise$auto(0x0, 0xff7fffffffff0001, 0x15) sendmmsg$auto(0x3, 0x0, 0x3, 0x0) openat$auto_vga_arb_device_fops_vgaarb(0xffffffffffffff9c, 0x0, 0x80, 0x0) readv$auto(0x3, 0x0, 0x7) connect$auto(0x3, 0x0, 0x55) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000) write$auto(0xffffffffffffffff, 0x0, 0x100000a3d9) connect$auto(0xffffffffffffffff, 0x0, 0x4c85) 4m36.243662206s ago: executing program 3 (id=2975): write$auto(0xffffffffffffffff, &(0x7f0000000040)='//\xf2\x00', 0x80000000) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) r0 = prctl$auto(0x3e, 0x5, 0x0, 0x1, 0x4d) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x4000000008000) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r1, 0x0, 0x20) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/pci0000:00/0000:00:04.0/remove\x00', 0x2801, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f0000000040)="f917", 0x2) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'virt_wifi0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'wg0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'ipvlan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bond_slave_1\x00', 0x0}) r7 = socket(0x11, 0x80000, 0x800088) r8 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x100000000000000, 0x400008, 0x4, 0x9b72, 0x2, 0x8000) socketpair$auto(0x3, 0x4, 0x8000000000000000, 0x0) close_range$auto(0x2, 0xffffffffffffffff, 0x0) open(0x0, 0x22240, 0x55) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r9 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$auto(0x3, 0x80026f48, r9) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000280)={'vcan0\x00', 0x0}) bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_5={@target_ifindex=r10, r8, 0x4, 0x1ff, r7, @relative_id=0x13, 0xe600}, 0xf) sendmsg$auto_NETDEV_CMD_DEV_GET(r0, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x409140}, 0xc, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="44000000bb689d8eb386e87f22e9efe8e36f06b5af52871ed69ce34ea68dc18bfe15f54fff1df8786bd0e6e019356a03", @ANYRES16=0x0, @ANYBLOB="000226bd7000fbdbdf250100000008000100", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r5, @ANYBLOB="08000100", @ANYRES32=r6, @ANYBLOB="08000100", @ANYRES32=r10, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x4) r11 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r11, &(0x7f0000000200)={0x0, 0x7}, 0x400000003) socket$nl_generic(0x10, 0x3, 0x10) r12 = getegid() setregid$auto(r12, r12) shmctl$auto_IPC_STAT(0xe6, 0x2, &(0x7f0000000600)={{0xa63, 0xee01, r12, 0xe, 0x401, 0x0, 0x1}, 0xf14, 0x5, 0x9, 0x2, @raw=0x80000000, @raw=0x1000, 0x5, 0x0, &(0x7f00000004c0)="562ff8b19e93ad497dc7a83120148c66c7e5b39d3d863643c8b8e5c24c24c59e5a98c13d3eebf9f38d6d7098b83d0d6f2acea7e9929bb3fcc434e01d949e16159769fd30036a66b69b37372de75d94611f7c489c7123bda7df6944075c25d13de099cb472eb4d96febbb8ac6f45a21216b72d031ed470497fdec5e4760c38ab0af0b8611af9645ad09e2acc5d004963e6649c7b137c5a019ecb6c0e51470", &(0x7f0000000580)="16b0782044ec277782acb67e756a5387a8dda063c2fbcd21b8830e9364d045b883edf4716376f8389f05c8d2085cd1aeb53819214ce4ef36bcd1e60ac066ed7ad3fcea2f0c4e16f4bb75e287"}) 4m35.89550358s ago: executing program 3 (id=2977): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) unshare$auto(0x40000080) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = socket(0x5, 0x4, 0x7) close_range$auto(0x2, 0x8, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000640), r1) sendmsg$auto_NL802154_CMD_SET_PAN_ID(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000011c0)=ANY=[], 0x1058}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r3 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000280)={0xe8, r2, 0x805, 0x70bd2d, 0x25dfdbfb, {}, [@NL80211_ATTR_NETNS_FD={0x8, 0xdb, r3}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0xca, 0xcd, "091e8e70a7ddd874f2907d2504596904abfba25decdc635a30ad8d89fba9394b0416c89f97edc0c3366c6d421e22621c855925ef7659c8a0088ec3a9da955b139d4c60dce874040c4e29a47c0aec430cc126c47c0f44f969c5dd914215caf0bf2f56db5ce39dc77c676fa476634fc1548d683974a38c0feadd7d9762ff49d5821530e01796a998ef5b4a708e2e8885a31a35028016e40888343891b2687861badd50d1f8b30ff59c12767e28e7275b3f07e7052d3402419e6d2efbf3293fb2016c052a80ed1f"}]}, 0xe8}, 0x1, 0x0, 0x0, 0x4004044}, 0x8000) sendmsg$auto_NL80211_CMD_GET_WIPHY(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000140)=ANY=[@ANYBLOB="18000000", @ANYRES16=r2, @ANYBLOB="810b25bd7080fbdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0xc004) sendmsg$auto_NL80211_CMD_GET_MPP(r0, 0x0, 0x2400c010) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_rng_chrdev_ops_core(0xffffffffffffff9c, &(0x7f0000000000), 0x42800, 0x0) read$auto_proc_mem_operations_base(0xffffffffffffffff, &(0x7f0000000200)=""/81, 0x51) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) socket(0x2, 0x5, 0x0) io_uring_setup$auto(0x406, 0x0) mmap$auto(0x0, 0x9, 0xffb, 0x8000000008011, 0x3, 0x0) sendmsg$auto_NL80211_CMD_SET_WIPHY(0xffffffffffffffff, 0x0, 0x80) getrandom$auto(0x0, 0x6000000, 0x3) io_uring_enter$auto(0x3, 0xa84, 0x80000001, 0xa, 0x0, 0x46) 4m32.845041961s ago: executing program 3 (id=2983): r0 = open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x130) setpriority$auto_PRIO_PROCESS(0x0, 0xffffffffffffffff, 0x4) r1 = timerfd_create$auto(0x9, 0x0) fallocate$auto(0x8000000000000003, 0x0, 0x9, 0x4cbd5d) fallocate$auto(r0, 0x1, 0x1002, 0x7fff) sendmsg$auto_NLBL_MGMT_C_LISTDEF(r0, &(0x7f0000001d40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4011}, 0x8000) mmap$auto(0x2000, 0x4, 0x4000000000df, 0x15, 0x401, 0x40) mmap$auto(0x0, 0x810008, 0x400000000ffb, 0xffff, 0x3, 0x8000) openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(0xffffffffffffffff, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) syz_genetlink_get_family_id$auto_net_dm(&(0x7f0000000040), r0) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) r2 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) ppoll$auto(&(0x7f0000000000)={r2, 0x40}, 0x2, 0x0, 0x0, 0x8) socketpair$auto(0x0, 0xc, 0x4, &(0x7f0000000040)=0x47aa) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/tty12\x00', 0x101840, 0x0) sendmsg$auto_NL80211_CMD_SET_CHANNEL(r1, &(0x7f0000001e40)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="88170000", @ANYRES16=0x0, @ANYBLOB="02002cbd7000fedbdf254100000008005200", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB="64176e800400e90084122880010115001b5c1ed6d116b6a60c2faa3d8f3b06450d62a02045b35d746e00b2cc59dee844324dcdd5d96f57a76bc4c50ca63ea9da47d2ca6502d5813f89826e49cf1f49bf5396638d1fb9df7fab180cd425fef91e0303128b3d2f8bafb61de7ee52e30de36c64689d81a0ff8c6f0ef6ce9b475d8bee35b1e5714293909b997d5ffe3d688bffa7ef001b3d7a9820e6817a08b56984d11f0dc38824ff8c5e7e92131f1c7e87d4c391f0cc37aa0be271e9198c434d4ccf1ff14e788f2265000a16be289ffa47fce7e4affb68f5295b1594d6a1a6784e89c6e3aea80ef43df85113e7f99032859a05dacbfb12176b4bd5dc5de8dd47c0356d0675e7dc1a27f1eba97bfa00000004001e800400428008000800", @ANYRESHEX, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="7816b955cca32ec96276f58fb0db8b85fa1099dd179279d7922f900cd7b8c108e47ba99801bd57b4cb6272ad089e3c8e47b84e2947af1f19561325b7353c894fc7acfb735c59a4f0996d14389b2fb8f033ea73bcad12221bc678c892d1abcebb1e1ebdfe2a01e1a0d2ea38703144089ffb9b5d9d772a97c1fcab8c81094e3b3e8de3a7107796e83dc4d4ed8044e2ef1d980229f5a2b0f08016d7cf51478e542c8a1fc86dd542cd59bafd96bd9eb40eb8cc1aed987a02eb9f8fa5df29dfe5f1b643efb7df7b91e42bb37111ea26998cf5a767eb76921a5ad66362560a835e"], 0x1788}, 0x1, 0x0, 0x0, 0x48001}, 0x4008041) read$auto_nsim_dev_trap_fa_cookie_fops_dev(r3, &(0x7f0000000300)=""/247, 0xf7) ioctl$auto_SNDCTL_DSP_SYNC(r2, 0x5001, 0xfffffffffffffffc) 4m32.118897364s ago: executing program 3 (id=2986): openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv6/fib_multipath_hash_policy\x00', 0x202, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x7, 0x800008000) bind$auto(0x3, 0x0, 0x6a) close_range$auto(0x0, 0xffffffffffffffff, 0x4000000000002) socket(0x2, 0x801, 0x106) r0 = socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x155) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video1\x00', 0xc0400, 0x0) ioctl$auto(0x3, 0xc058565d, r0) r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp1\x00', 0x2, 0x0) write$auto(0x3, 0x0, 0x57b9) mmap$auto(0x10, 0x9, 0xff8, 0x4008000000008011, 0xffffffffffffffff, 0x8000000000000) ioctl$auto_SNDCTL_DSP_RESET(r1, 0x5000, 0x0) ioctl$auto_SNDCTL_DSP_SYNC(r1, 0x5001, 0xfffffffffffffffc) r2 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000240)='/dev/usbmon32\x00', 0x80440, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/class/firmware/timeout\x00', 0x1a1942, 0x0) write$auto(r3, &(0x7f0000000140)='7\x00\\\xa0\xa5$sj\x9a%Y\xbd\xb8 )\x03\xcb\x12\xfa\b\x1c\tk', 0x5b33734d) shmctl$auto_SHM_STAT(0x0, 0xd, &(0x7f0000000340)={{0x6, 0x0, 0xee00, 0x3, 0x0, 0xffff, 0x6b3}, 0x80000001, 0x5, 0x2, 0x9, @inferred=0xffffffffffffffff, @inferred, 0x7, 0x0, &(0x7f0000000180)="a91ffb13eb4deffd3ba7e4a7e210a6fca6563b91e5a8921599885fa1dbab40dca8ed82e4b19f22fc0f50ca0307fb106915b06153919d8061a23b09aab7472246fb774c6480294985d8f4f69a2e4b6567bc1b540ac68cd7edb8e1b97e00ee4c5d0bcbafe6efa3a23b1ad35bf79b106ab90653ce4a2d25f39822a681928a1293918d3c67f971ad4e770abd", &(0x7f0000000280)="19181ae3adb66df68da563510f13b0f0414e3b05418a5381002c8618c2811dcbbfefad31f36dbd8939343148eb7e0a7e343299c11821fe190ab6b4d09a7bae84300e0e255834d8127cf4608496d80610a13d3fda8dba5f3b05378ab7c8c709e46f5080ef53e98f406ebd1fbb3cc34869f8b357f82a7bc844d38747587e2a1cdb7405202b587910ee176a8433f1485ee303f4bd5d"}) statx$auto(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x10, 0x2afe, &(0x7f00000003c0)={0xb4, 0x100, 0x5, 0x27, r4, 0xee00, 0x47b8, 0x3, 0x40, 0xf, 0x3, 0x8fd9, {0x8, 0xca1c}, {0x7, 0x3}, {0xb, 0x6}, {0x6, 0xed1}, 0x101, 0x0, 0x10001, 0x6, 0x3, 0x3, 0x4, 0x80000000, 0x6, 0x67, 0x6, 0x1, [0xb15d, 0x200, 0x1, 0x8000000000000001, 0x9, 0x0, 0x7585, 0x8001, 0xb1ca]}) read$auto(r2, 0x0, 0x20) write$auto(0xca, &(0x7f0000000000)='\x04#\x01\n2\x7f\x88\x83\xa9\xd7\xbea\xcd\x00\x00\x00\xef\xabJY\xee,\xf6\x80\xecP\x9f\x00\x00\x00\x00\x00\x00\x00\x80\xe0Z\x1bsZ\xac\xff\x92+\xc9\x9fs\xbf\xd8\f\xf5\xa7jUA\x11\xf9\xb4U\xc5\x92\xf1', 0x82) r5 = socket(0x2, 0x2, 0x88) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) connect$auto(r5, &(0x7f0000000080)=@l2tp={0x2, 0x0, @private=0xa010100, 0x1}, 0x54) connect$auto(0x3, &(0x7f00000018c0)=@l2tp={0x2, 0x0, @multicast1}, 0x55) modify_ldt$auto(0x2fe, &(0x7f0000000500)="dff6aacf41331065eb674104a0f299a8cea8b4cbc04a5346ff0328671ad7ba12fd51e1bf0aee1fbd122caea581e924c9c9ca6f3d4343ddbc15d8acb4d95fb1438c35181e0714bf1e85cbcc4cf76a41415a5594c86c87eeb16b556634cef26e40c7562b642082689fac150c17411945dcbee610200d7479ad98eddec851e4e8930727260568", 0x69a) sendmmsg$auto(r5, 0x0, 0x9a6, 0xe000) 4m16.951736563s ago: executing program 33 (id=2986): openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv6/fib_multipath_hash_policy\x00', 0x202, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x7, 0x800008000) bind$auto(0x3, 0x0, 0x6a) close_range$auto(0x0, 0xffffffffffffffff, 0x4000000000002) socket(0x2, 0x801, 0x106) r0 = socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x155) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video1\x00', 0xc0400, 0x0) ioctl$auto(0x3, 0xc058565d, r0) r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp1\x00', 0x2, 0x0) write$auto(0x3, 0x0, 0x57b9) mmap$auto(0x10, 0x9, 0xff8, 0x4008000000008011, 0xffffffffffffffff, 0x8000000000000) ioctl$auto_SNDCTL_DSP_RESET(r1, 0x5000, 0x0) ioctl$auto_SNDCTL_DSP_SYNC(r1, 0x5001, 0xfffffffffffffffc) r2 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000240)='/dev/usbmon32\x00', 0x80440, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/class/firmware/timeout\x00', 0x1a1942, 0x0) write$auto(r3, &(0x7f0000000140)='7\x00\\\xa0\xa5$sj\x9a%Y\xbd\xb8 )\x03\xcb\x12\xfa\b\x1c\tk', 0x5b33734d) shmctl$auto_SHM_STAT(0x0, 0xd, &(0x7f0000000340)={{0x6, 0x0, 0xee00, 0x3, 0x0, 0xffff, 0x6b3}, 0x80000001, 0x5, 0x2, 0x9, @inferred=0xffffffffffffffff, @inferred, 0x7, 0x0, &(0x7f0000000180)="a91ffb13eb4deffd3ba7e4a7e210a6fca6563b91e5a8921599885fa1dbab40dca8ed82e4b19f22fc0f50ca0307fb106915b06153919d8061a23b09aab7472246fb774c6480294985d8f4f69a2e4b6567bc1b540ac68cd7edb8e1b97e00ee4c5d0bcbafe6efa3a23b1ad35bf79b106ab90653ce4a2d25f39822a681928a1293918d3c67f971ad4e770abd", &(0x7f0000000280)="19181ae3adb66df68da563510f13b0f0414e3b05418a5381002c8618c2811dcbbfefad31f36dbd8939343148eb7e0a7e343299c11821fe190ab6b4d09a7bae84300e0e255834d8127cf4608496d80610a13d3fda8dba5f3b05378ab7c8c709e46f5080ef53e98f406ebd1fbb3cc34869f8b357f82a7bc844d38747587e2a1cdb7405202b587910ee176a8433f1485ee303f4bd5d"}) statx$auto(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x10, 0x2afe, &(0x7f00000003c0)={0xb4, 0x100, 0x5, 0x27, r4, 0xee00, 0x47b8, 0x3, 0x40, 0xf, 0x3, 0x8fd9, {0x8, 0xca1c}, {0x7, 0x3}, {0xb, 0x6}, {0x6, 0xed1}, 0x101, 0x0, 0x10001, 0x6, 0x3, 0x3, 0x4, 0x80000000, 0x6, 0x67, 0x6, 0x1, [0xb15d, 0x200, 0x1, 0x8000000000000001, 0x9, 0x0, 0x7585, 0x8001, 0xb1ca]}) read$auto(r2, 0x0, 0x20) write$auto(0xca, &(0x7f0000000000)='\x04#\x01\n2\x7f\x88\x83\xa9\xd7\xbea\xcd\x00\x00\x00\xef\xabJY\xee,\xf6\x80\xecP\x9f\x00\x00\x00\x00\x00\x00\x00\x80\xe0Z\x1bsZ\xac\xff\x92+\xc9\x9fs\xbf\xd8\f\xf5\xa7jUA\x11\xf9\xb4U\xc5\x92\xf1', 0x82) r5 = socket(0x2, 0x2, 0x88) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) connect$auto(r5, &(0x7f0000000080)=@l2tp={0x2, 0x0, @private=0xa010100, 0x1}, 0x54) connect$auto(0x3, &(0x7f00000018c0)=@l2tp={0x2, 0x0, @multicast1}, 0x55) modify_ldt$auto(0x2fe, &(0x7f0000000500)="dff6aacf41331065eb674104a0f299a8cea8b4cbc04a5346ff0328671ad7ba12fd51e1bf0aee1fbd122caea581e924c9c9ca6f3d4343ddbc15d8acb4d95fb1438c35181e0714bf1e85cbcc4cf76a41415a5594c86c87eeb16b556634cef26e40c7562b642082689fac150c17411945dcbee610200d7479ad98eddec851e4e8930727260568", 0x69a) sendmmsg$auto(r5, 0x0, 0x9a6, 0xe000) 2m14.240787866s ago: executing program 0 (id=3468): openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0x802, 0x0) io_getevents$auto(0x24, 0xffffffff, 0x4, 0x0, 0xfffffffffffffffd) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000300)={0x14, r1, 0xf25, 0x70bd26, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x3000000, 0x8000}, 0x4044054) 2m13.898665412s ago: executing program 0 (id=3469): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x47, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x4201, 0x0) capset$auto(&(0x7f0000000000)={0x6, 0x0}, &(0x7f0000000180)={0x8, 0x9, 0x8}) r2 = fcntl$auto(0x8000000000000001, 0x10000, r1) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x4) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) dup2$auto(r2, r0) r3 = socket(0x2, 0x5, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0x2, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) shutdown$auto(0x200000003, 0x2) sendmmsg$auto(r3, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x19ffc}, 0x7, 0x0, 0x2, 0xb}, 0xfff}, 0x5, 0x311) openat$auto_mISDN_fops_timerdev(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/block/loop9/queue/nr_requests\x00', 0x189202, 0x0) sendfile$auto(r4, r4, 0x0, 0x3) write$auto(0x3, 0x0, 0xffd8) write$auto(r3, 0x0, 0xffd8) close_range$auto(0x2, 0x8, 0x0) 2m13.440744746s ago: executing program 0 (id=3473): mmap$auto(0x0, 0x6, 0x2, 0x40eb2, 0xffffffffffffffff, 0x308000000000) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/rds/tcp/rds_tcp_rcvbuf\x00', 0x141241, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x40342, 0x149) openat$auto_ftrace_event_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/tracing/events/vmalloc/alloc_vmap_area/filter\x00', 0x2, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0xf, 0x3, 0x2) write$auto(r2, &(0x7f0000000140)='9\fd1L\xff\x15\xba\xa17\rR\x16\xb66\xdbY^\xa1/Z\x9b\x8ef\x15P\x96\xc6\xe5|dIny\x93\xaa\xdeH\xb1\x1e\x86\xedQ\x17\xdd~\xb0\x889\x05\x9aF\xd0\xf8\xbf\xa9\x8a\x1czI\xf8\x8cr\xf6\x0fT\xe0<\x15\xdaAXN\xae\x1dii\x9e\xe6\xb6D&\xbf>w\xed}\xe1\x8c-\xf6@\xdf\xb0#\xec\xa1\x91\x9b\xa2\xa5O\\\x9e\xd9\xa2\xf0]\x14\xdejyd\xbcS\xefE\xbc\x900\xc8r\xa3\x95\x83\xf4q\xd3\xddR)U\x1dU\x8b\x12`t0\xc6@\x8bs\xb4', 0x9) open(&(0x7f0000000100)='.\x00', 0x0, 0x408) socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r3 = socket(0x10, 0x2, 0xf) r4 = bpf$auto(0x0, &(0x7f0000000080)=@bpf_attr_4={0x1e, r3, 0xffffffff}, 0xd) bpf$auto(0x2, &(0x7f0000000080)=@iter_create={r4, 0x98}, 0x5) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x5, 0x0) getsockopt$auto(0x6, 0x40000000029, 0x1a, 0xfffffffffffffffe, 0x0) r5 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/virtual/block/ram9/diskseq\x00', 0x0, 0x0) read$auto(r6, 0x0, 0x20) fallocate$auto(r1, 0x3, 0x1, 0x100000001) writev$auto(r5, &(0x7f0000000200)={0x0, 0xb}, 0x200000003) write$auto(0x3, 0x0, 0x5c8) pwrite64$auto(r0, 0x0, 0x6bc, 0x5) remap_file_pages$auto(0x9, 0x7, 0xba00000, 0xd, 0x0) 2m12.453352258s ago: executing program 0 (id=3475): openat$auto_tracing_mark_fops_trace(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/tracing/trace_marker\x00', 0x43, 0x0) memfd_secret$auto(0x0) openat$auto_tap_fops_tap(0xffffffffffffff9c, 0x0, 0x1, 0x0) socket(0x1a, 0x1, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x40001, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3) listmount$auto(&(0x7f0000000100)={0x1f, @raw, 0x80000002, 0xfffffffffffffff7, 0x2}, 0x0, 0xf4240, 0x1) socket(0x2b, 0x1, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) mlock$auto(0x112, 0x80006) mlockall$auto(0x800000000000005) madvise$auto(0x0, 0x200007, 0x19) msgrcv$auto(0x0, 0x0, 0xff9, 0xfffffffffffffffc, 0xb4) r3 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) write$auto_console_fops_tty_io(r3, &(0x7f0000000000)="4c91f2c388274610e12c861bb2bfd9800e9b394b", 0x14) msgsnd$auto(0x0, &(0x7f0000000000)={0x40, 0x5}, 0x8, 0x9) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) r4 = socket(0xa, 0x1, 0x84) bind$auto(0x3, 0x0, 0x6a) connect$auto(r4, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) 2m12.035626926s ago: executing program 2 (id=3477): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/netdevsim3/sriov_numvfs\x00', 0x10b142, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nfc(&(0x7f0000000080), r0) r2 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f00000002c0), r1) r3 = setfsuid$auto(0xee00) r4 = setfsuid$auto(0xee01) setresuid$auto(r3, r4, r3) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0xc) r5 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(r5, 0x8, 0x0) r6 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r6) mmap$auto(0x0, 0x101, 0x4000000000df, 0xeb1, 0x200000401, 0x8000) capset$auto(&(0x7f0000000100)={0x20080522}, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r7 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) r8 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) ioctl$auto(r7, 0x4b72, r8) ioctl$auto_KVM_GET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f00000000c0)={0xdd, 0x0, [{0x1c5, 0x400, 0x2}]}) clock_settime$auto(0x0, &(0x7f0000000000)={0x100000000, 0x3b9ac9ff}) adjtimex$auto(&(0x7f0000000640)={0x7fffffff, 0x0, 0x3, 0x6, 0x6, 0x0, 0x6, 0x0, 0xa4, 0x453, 0x3, {0x6, 0x2}, 0x7, 0x7f, 0x6, 0x1, 0x0, 0x5f6, 0xffffffffffffff57, 0x400000000000, 0x80000000, 0x346, 0x401}) sendmsg$auto_IPVS_CMD_DEL_DAEMON(r1, &(0x7f00000006c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000880)=ANY=[@ANYRES16, @ANYRES16=r2, @ANYBLOB="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", @ANYRES32, @ANYBLOB="0400ac8000000008000400520000000000000800050003000000"], 0x328}, 0x1, 0x0, 0x0, 0x8840}, 0x40) mmap$auto(0x0, 0xa020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r9 = timerfd_create$auto(0x1, 0x0) timerfd_settime$auto(r9, 0x3, &(0x7f0000000000)={{0x10, 0x1}, {0x10, 0x9}}, 0x0) read$auto(r9, 0x0, 0x20) r10 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r10, 0xae01, 0x0) 2m11.717308756s ago: executing program 2 (id=3478): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/netdevsim3/sriov_numvfs\x00', 0x10b142, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000080), 0xffffffffffffffff) fstat$auto(r0, &(0x7f0000000180)={0x1, 0x3, 0x2, 0x3, 0x0, 0x0, 0x0, 0x1000, 0x430b, 0x4, 0x6, 0x1000000000, 0xff, 0xffffffffe06d5172, 0x2, 0x1, 0xd43}) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) socket(0x2, 0x2, 0x0) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x50) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x40009, 0x36, 0x9b72, 0x7, 0x28000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) mlockall$auto(0x7) mmap$auto(0x0, 0x6, 0x2, 0x40eb2, 0xffffffffffffffff, 0x308000000000) remap_file_pages$auto(0x6, 0x19, 0x2fe, 0x5, 0x1) r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/dummy0/addr_gen_mode\x00', 0x1, 0x0) pwrite64$auto(r1, 0x0, 0x0, 0x2000000000040007) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) move_pages$auto(0x0, 0x1002, 0x0, 0x0, 0x0, 0x2) tgkill$auto(0x0, 0x0, 0x11) readv$auto(0x3, 0x0, 0x7) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'veth0_to_hsr\x00'}) lstat$auto(&(0x7f0000000100)='./file0\x00', &(0x7f0000000300)={0xe, 0xd, 0x9, 0x8, 0xee00, 0xee00, 0x0, 0x7, 0x4, 0x0, 0x7, 0x6, 0x34e5, 0x7c, 0x100000000, 0x0, 0x3}) r2 = socket(0x2, 0x1, 0x106) getsockopt$auto_SO_DEBUG(r2, 0x6, 0x1, &(0x7f0000000000)='/%\x00', 0x0) getpgid$auto(0x0) 2m11.159374874s ago: executing program 0 (id=3481): r0 = socket(0x11, 0x3, 0x2) sendmsg$auto_ETHTOOL_MSG_MODULE_FW_FLASH_ACT(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x24000000}, 0x4002) r1 = openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000140), 0x8c0, 0x0) r2 = ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000180)={0x2, "a76894e9f624aa2065d5d10e005045ddf02833a10f9fc4ffe7e28b7a498c5423", @raw=0x2}) openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000080), 0x400100, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r4 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000280), r0) r5 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/cec19\x00', 0x28080, 0x0) ioctl$auto_XFS_IOC_FREESP64(r2, 0x40305825, &(0x7f0000000300)={0x5, 0x3, 0x9, 0x4, 0x400, 0xffffffffffffffff}) shmctl$auto_SHM_STAT_ANY(0x63, 0xf, &(0x7f0000000480)={{0x3, 0xee01, 0xffffffffffffffff, 0x2, 0x0, 0x8, 0xc9}, 0x2, 0x7f, 0x8, 0x6, @raw=0x2b42c, @raw=0xfffffffa, 0x0, 0x0, &(0x7f0000000340)="4c7320eb1cfcdfd2645dbd03933dd23f65c4840f9c229261018e70a31cc773b7477a321c4bc4b5164b11db9145276f92af9a948f67e91f2700b149", &(0x7f0000000380)="53ef069b09b193c9a16922d895b6b91740480931b80c2fd49dca50be0b96984e9f1911f6abb33541201d0ae6752f59b3f2b6d381569ccd3a48bcd8f33944e647fad448f26a05c1146f2f1a655b9c02047ca222edc1578b8f8b6de233bbd14c5905d331c1823aa395b6ff502b1442ff56cdacd2e4e127a37e2b0e6177958690d4343d7e3175200381c3f12f982d948764bf216298d64958a8cbe2d25f02b389e420ad6d91e7a501e2bff7459074305cae56f74777351eec980f5c5e0938f7efe2dbabc49b2234b0f648"}) sendmsg$auto_NL802154_CMD_SET_BACKOFF_EXPONENT(r2, &(0x7f0000001a00)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000019c0)={&(0x7f0000000500)={0x14a8, r4, 0x400, 0x70bd27, 0x25dfdbff, {}, [@NL802154_ATTR_PAN_ID={0x6, 0x9, 0x3}, @NL802154_ATTR_SEC_DEVICE={0x18, 0x2e, 0x0, 0x1, [@typed={0xc, 0xeb, 0x0, 0x0, @u64=0x7}, @nested={0x8, 0x127, 0x0, 0x1, [@nested={0x4, 0x104}]}]}, @NL802154_ATTR_SUPPORTED_COMMANDS={0x1004, 0x19, 0x0, 0x1, [@generic="1387282608765b42e60a6cee66c96c84e7beecc5c26c28622889ec175dacf9b4b2f4c7e92e03c3b095bc0dbe755ccdfa23481290372d42044ca91cb172bc8c4fec1ee9f5607cd30324c2ad18d40f0eeda3bee751cde7983d6cd5abd842e498af3d5039385b0691d29983e7004f7feeb7c81a06bf5b2c9aab7161c6eda9ed0db4ba187ae814bf7ce0137107148118d9b13ba0d09420995e5af955c256af1e206c7b1a602890b9a4d0c0566e35a1774e324dd93e9a87dbbe6027880b668084cb20809915b711f9a1bebeb66ddfd86ed2ac3ca26cce0f7192bf5ee045fb3829b8c15553f7937e6dae1ef419f2c813059dc3ba27483afe91ef3b4db8fe42d53bc1a88a7e683f5f4f238626b82d2ec7962a8d5d6c8b90314c597fa43777bbd5d5c0af6bde23b51b55ebde653331c61aaae2ea4ffdfdae3aae0168c01f452d8b85c0d24d4f256437ae5022eb2a5c9433b113a33aea44333ca1bcf92459e214721d2ab3c0908b71f3edf8ac7fc159ee2e538d59dbf9d882855ccfc869e6cb7e4169786a3bb64c56db3c2e75e2676dcaecb1b52548d48ad73f8e58e59213848e18039b17d6b2062ac352b03f4ed068cc1921ef2bb1fdfe53d91090788e1ec7deaa5aca7d8ea8679242b60c66c8bc71018a2aa531f552a8160756d691e7f2587c7f9d6db98fc71cb65a63958b01b6db35c4d3a57af8c1217f3ee8b82736040318cf0f538343ed7a7e48ff34047e44593707075f9c21bb7e8ec4279fb1307fad019a8ceb8ae7f42ea6fc1f703b1e9e88a4431f55e8f90855a63f8a0d61eee52e8e5d1e6b472e5310206c400dcc59c8f40de9fad436611b77c38f5b0ed6e57490ef604996272b62114ca998e3a304904848dddea11172ac554dde1b5020356cd8b69b27083f4ea3e20685490c648576a541db0f639cb34d4783841d407b1eff19df877800a24331c9eb5312917ca7402b589e26f13fd6be03d3115c901c14faa9aab1b2d12c7ceb365a5a6ae22afc751e165e991293979567c3bfdd617dc78fa91bef98df6049703abcd58437ea03ee07d995584ea95a5f5c3c4fb9be8ee1c30c8a54e540219558eab238e2b9797da53aa48f1d42a15d8288025906605c8c8aaadabbd327df3537728f8866e65e679d5f86706c39282c54c23d188edfcf1c639ac0cdfbe0aa3bf09bd314eda8017ae0ad4193fbe2256e768d0eb15b7c5a85570ac948aba25eb5ca5ad613b3e2348f13a358858ad6f394b6f34299021787db7b4b1d1e9d8e0df0966171a2c9f9b5546633f2607e12573c4c511db587b2cd84cba430c69ce1b1ebd9b17e32d5402ca67b934c919b1b3b8d8864068c100cb5d689549e76c8dab1cf612ff6c00a0810dd6de9d7fe3f0cad26546dbcb629334c10c7f45f7fd7044e49e3ec42ffee5344e5355995cca5be2734d4477a4b2e6acafd887c1fdd3170255b608a208f00f80d5e499026ac4310f21f94abc3c2c85b47974583e5ff5a9bd14ac415cbb8666d2818fe8c350461041d32de4d7ae65ff7cd50bf1ade23dd25c8f0490a1da1ad1ae085f7995e947376d96c5d6fdabccc15de067ef97c51e77e2613e9f4d60ee660fb9fdf8e12d0a847c41a34581ffeb26413b43d153de57015bee7c25def62093e352663208f3c73868715453da0fbb02be89b82f59111ccc540ab4d6cbe5ec2530b9578d88d2a9bd243cc629d41da40ac26a0366af49528c2479d9ed50e9e6fb311461ed2327c18da4c5d25af0d12102b3e7cb62384ff067f5b50095bf306c38db9c3b508d06ee373b79b91677160406a7243ff15e10ecd470259febf9b8ddcab110a29e11b45ce7046e35e339c7c1f1d0c0808f442d87d708ddd55ee052ea5f357bdb55be27f12ed3367b287d4a81ae435b7c2197ccde3c14e8d6c9b23ff1d49fbbc5799af36728780284c855ad6603cfba49282ed44d4940b31560fa7bc754593834123889a9489dba89beb4edd6e42ec864ab94ae5f7887dfc8dc3e185e410ccb014c385a91e994213aa00757e41d85a99c123ed8b1d1ec277b119518ea4b2a5c949c4898cf4f234b7395c1d19db1dd9629f412138cdfa880d2639b0f5bd753b39438eef7e6c1c56fe91e16e11b6f78e8c923bf0d00b25cae3bf9752d70cc67fa5afa88403115dbca7a227107ab890128467e6cf6c50945f904d109946a16c10edd74ba67d2a08d58abe044cab9a92819b5fc757e31f7f40a81355f4a68530fb7af1dff282e52b96e14b12a52f61f1041fb115dbba8460371754f587c3fc5eca6a1157e5218b0bf622d5e7e65169e84683397776e0a697e3e0b26d145bcf6d9b4535b82e3054c6b4a0dd1ad17018bddcd8072722e23565d3a0bd67a3b44a975aeb137fbeacea15ba5b4a07aa407db1618ccaf2e763cfe7898b1dc8a12399225e523320b86101f68b20e78bd61ea382b923c2c515710a1a051dac0f6a0379d6bdb8f1b211c9809114bc664637635ad02a784f81735f942b03185b81437750ec1ef2ac21786456923a102060920202f462019b40ba51c8510909136085d3cec3268a5df5106a3f9460c22d8feadaf2c70d4757cbe1ce4071a6745fcca3bc5fabd8a06e91446fbe6cdd6658216705d1c4acb19e76def801407ca03c3e1869bd1bb5ba278184be2d3bfcc87ec555c72d6ea1c97ff366b2688d64f4e27074c2fc7af2706454bc4551ed7a42144fe93478dc76a3397891aca1e1a40a8fe34876646f7a9234eaa735d068cd85289210bd997f4e1c058f4da26d38a326f66d06c889786db9257a2959eb4f0fd611789f026094c7f0d420648df60d28e22f8f484b633706fa464b60a9fbe6c3a109faecd945665d07723c980951fd8da18047cc1b7326813e3cd52a92f9d73eae18d1ff8450ab85df159aac9583190aeb2a72ee36b4a8bdabc625ccae43fd084265317a60f1a726c6cb7e2ddd64c7a287fbde84a8502e0150d6464a4dea966f3755cede59b4ed386adc5f614f9589509cfdaaf873cb51695c5a2379ef56bde71ec74db9d0facfa01ca0f7edd5528dcc4ad8170bf7333e5c7814257090bb3e1822f82f1c0e557e165237bc38dcc492968e9708f66e64735667822cfa76d738c3ef1c3412aa68688e2ca70fa42b960880217baf550c1c63e95f74ebb0d8ad635b780dddbf70b0d0fba6309b5bd0f1ce30c24326d36e70fbd9fda90351b954aaad05fd01006009400f0e22692e960fce878108acaf3770a052708631e8821e0b59d7a92a8849ccd5b34b312339fa7982635b76baf498a6affeb8ffcefcad8c0f39f277009092b96dcb8071db96d7c8491ab551d034f437ae601778dc47ad6e798308cd3241df787aa750d24aa6de78eeafcbb898462e45d2dfe48b55c3b8e2d09a71fc90acfb682d53059c147442415fc7fb7f4d2187942059fd11b0622c69b24ff9dac3f2febe4185b343f5f4b00161b278ef9beb7bb92d1f84e37b2bf649a2f8eeafff0dc7331125f4dd6125fcb753d8002e349ecfc51d22b6ad2cced26693d0fee6d076837bbe2c6952da9e196612573ee982a0bceba34060fbede1adbe6c1044122d5b4b4ae69f13753aaff29bf8b43de9457864cf84d343f8c99ffeffdc54af13186a48b6bebd57ffd3d355bac1325045b0f211c23a8ed8c65b7d244a895874d415bd552d6ea0d3d9645bf2bbb4f16981bf4cf4c9c06812cbd18591be8bea24b03eaa7a5b95b5d35410e599abfc1a03509a4eb506f9b9e326fddca0b6b69dc89cb81d97dacbb1f57f37ea47d2ecbbc4e3ebc661a326d9192a69c2b73f4aa22c2cfaae122fbae6247c3f8dc7f40b3a4ad85f6b422dbf925bfa8e43df4771990746cdf59f69f297fbe345cbc180993ff598a773d9199d6d7f1856507bb99f72a04ee705999e663ac2ad9b01205f33dea916f2c7aac1d736418ec36b59577f35506d0590f53a01f5771c33c9a63f54faa84c089cc0bfa04d214070b1872a5ee8d172fbf0e0cc5eb07b539cf435067ffed05e692587aba01e3242b0ac81b9153a3f2d0420a3e1bee1bf74222b6ef37a4c9c9ba7842d50076b49d62a1daf9d69baef6a811f5535d9ce8b7cf9679560450df3d15f751a1aad053c043c9204a404d4c42ed8e31b8ab945eb075ff75622191214839151c446d884b1c47be577560bdf33c4747e80cf6fa64af5c1418a015afff3fd61eee5c18fd25f01c4edfc407814077d193ee4bdd41064a5a16cbbcef73c52a08cfc3a7149d72350a7fdad911a0a3b8545a3db076ca20a938c9992db809bf1ed6f6e99b9f8634c7210c86ad3ae2db86d08f186eb468b7a3783736cbb0af725ec58814a225a86d9f3482913483743a9a85acfcfd1e4952b82656d68db035f160610cbb6feee145ea7216e5bc9d77de4a0d5eca045d809710ce0c91394115324c2cdc00b46221edcac55cfeada04be5ec9f6f3ce13ef1be183861db8a851a6a334e2e6efda091dc6541bf86671b5f4200c3ba82bd9d8050510d8924dc6d654197420eaa65519910c46848342df7b8de62a40e67e32e6ab5d151f6ea12c487560f2116948403882721b7a53ff16ec7eaf32a7db4a7b76632670e65d98f95b7c65a1ccce44de77b73661824122726bc0d90abd23d706233e565b3befcf9a4ddeee274ca64702e085cd745544d8dc7dadc7ec9b819d54a01ce08b00d7bc760df90517d94a1e467ea285087a62bbde54113df3e1f8ea3cba556a1ebf09a9ad872ddb511b33e96c3f64ad82d3e126084da3adfd0ba96a1c39b0c2f9a841ce8fa78193d76880ae777c199834783a2192c961c02952c2fb0d3c9a3a0f76fb0e3ed4ac0b6665b6b36f61115b51340e47169022189f25c3b24d8a8470634951ffe66f85538a31c354ccf70a48b5bc594b620016821d95c4cc6437d9062e72f376bc2c18298eae6e37869d30828832cf0b0ae737dfe212679f210ec3fe6c830fb44523df4f0fa7c1f6f780b3676202eb029dcd1faa3e85e759fd2362be9559d8643c857f436b5c816ab08ad503d241b345db7980a363a5cc76b6a92a7b8eb5e04532db71ab28db81432d26001ea479fd17348a15771e55bd08f256e24827753631b21ba6b2caf01c6a3313dda6111b6c9bc3b7c3b220f4f73a550e4af73a1b65bda7a33f901c6ba56362808523d2c213157cbc5fef9cc8ef6cf503f7501ba8e4f52b8aef4d19aa9de55593158d82398a4446817e556536358798058d94c1bf9de94a75a629286adcc2a162e82b91d2a51ad76354262976d1082dd56917297fd0ed5db624d850dea00bee8213855cfe5cce7b7b8ae11f817c8226a17eb308a6ea785db08b6cc2c80141a83fd5171a65ea816a3a44eb8bb8d39bcefd86c33ff54fb1d8f2e694cb282b3d738f2fa943199bb8dfca6ba98451dbb4515be8ea2240e2df8e50d973b5ccee0dae391b46f5e2b4f731b18ba3520425fcb9904c70040112f672b1f0b743ed9a9b7faa8d43ca6898a89c72f5b16feec7228e726a39e200eb07e8a2a6ebffc73bf91adbdbbe4d7ef3423b556b2b2c9e09f9047f601124a97f892376c176c8e7e635ea978900cb7e63c3493dc8e22f1295d99fabfd334d8ce237cb735dcf70991fa1c7fcb20f67a3e5a636ee22a335d2d5f8fb5224e2d3d3a034c259f72c8fa9254984466d9e8f63a162b7be774e2b12daae4788bd23fc570d9ba32786f047d534ebe338fdd0e816ee010880c82a92867a4fcb2caf39616b64d0f1f08dce1d4e0d9f92d9453c7f9940b2b1ef7404298ff590744c955e1b379057e4f7f3fa58f288615281dd711df24cecc6c62fbc851c6c0f1c713788ca0596fa1b1100"]}, @NL802154_ATTR_SEC_KEY={0x431, 0x30, 0x0, 0x1, [@generic="af73f004afc4915b2e3d2b4798bfe169239ca2cdd42d1cb6600df15877ac63753c7a9546c68069460990cc3df2a345566a732dc4261eac009406ade1361f049d048a21c0b41438ede0cc86efd98cccdfb07501af16def0ef92d24b7cc8ed7d520f4fb927a6ef8e267ec368d374b011f3ec2acd608d49767e3f0fda3537798075f6a5e7e91df0214893f47e151a4c7b9789477458cceda60c91f9c8f82f415d163f5c869b531d217dec267c5dccf171ccbf8f86ff3977afa9f1956e481cb1b457410b06863c344616b645ef563a75fcf06ebb50869e69d6c8c4e2ca9ae31288d2f25c78050bd36ed9127cd474af03d035e617086ba99d5132", @nested={0xb0, 0x157, 0x0, 0x1, [@generic="fc8b531fafca1a033037a4c3a1dda2aa2526576968ba27ef8bad3d385bac9e99c63ab1e9a5a9d3954e987d5c75d5165adcfbd67fd9eb2bbf8b4c4c2825f5d7a95053982caa9bc76c75a2069c18336504f031ce67216e841a10a9190eaa4c88d4", @typed={0x8, 0x8e, 0x0, 0x0, @pid=0xffffffffffffffff}, @typed={0xa, 0xd3, 0x0, 0x0, @str='wlan1\x00'}, @typed={0xc, 0x2d, 0x0, 0x0, @u64=0x8}, @typed={0x8, 0xda, 0x0, 0x0, @u32=0x5dd}, @nested={0x4, 0x52}, @typed={0x8, 0x147, 0x0, 0x0, @fd=r5}, @typed={0x4, 0xa5}, @typed={0x14, 0x36, 0x0, 0x0, @ipv6=@local}]}, @typed={0x8, 0x0, 0x0, 0x0, @ipv4=@local}, @generic="5f40b0d0e57553cc16af4fb64cf9dd07bd4ea6e4cd8f3fa492941e2d3a4af72ab1066c8bca493c9b46166118438ef65d63475551e3224006d8449c6893492708bf1be8920a4cdcc5c0332d5c16ffe150ed3dad4ce6e3d8683e34af51d8121b6eb09431ca57014179909f0af283f10533a6f6436e2f442d48e349a858bf50f33f54de1cbb60d88545819365966ab540cc9186f165b7c11692fa475b87205790152d4fe0", @generic="adf6eef9b35659bace36bc90ab00c30376aca5da63b8f9a1e0c4e3cc3b13fec92c69ddc0662575858556186be1f32a299fe568711fbbd0ecba3f830f0955e5bd31cab046859e457eb1c9b3c031a4fd3e8123d2561133c01b88dc993f37f2438ebabf07787409309a343f93cdfb005783de2a94db921951300c66d9afaa1fead963ae7ea410f3a2e94ec85f981d74f673e68ece399be87557dde8e7b4350ad9e356a1036498bb185d632b38f7bfab33e8ee87ebe78a96c5d026d0db9a7be5a79382722f79e598f782e5b0bc48128e402c179b558c768acc6f1dc4bff2436c93251cd79936e1d5", @typed={0x23, 0xe1, 0x0, 0x0, @str='/sys/kernel/debug/sync/sw_sync\x00'}, @typed={0x8, 0xe2, 0x0, 0x0, @ipv4=@loopback}, @generic="f5f52b92e8cc625f1ade03304270143eb2b8470a5b05fdfcc9105fe52b4f50b77c8d3358ba557e6c60840b5cde02ee3b42d976365bd27b738c2bcd33556ea415ae5e68c8f9d0e6db49124d85acba9ecccbbc6947554ae722a7d134651c76b11a7c9a048a5e73c554e32d8b23e731add8df410b1b16d9139f58b396dfbf4f88b34f91339ddc12a7f91433930cbd0d9f8cc1b3fad14f6a7d95237f6a9d4c0b93b29bbf9d99dc14d271879052d418d01e3ef87a5a01c26be8c7a42187b405373a9ed68fa2d7e41e827f"]}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x7}, @NL802154_ATTR_SUPPORTED_CHANNEL={0x8, 0x16, 0x1}, @NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x2a, 0x4}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_SEC_DEVICE={0x14, 0x2e, 0x0, 0x1, [@typed={0x8, 0xcf, 0x0, 0x0, @pid=r6}, @typed={0x8, 0x12c, 0x0, 0x0, @uid=r7}]}, @NL802154_ATTR_CCA_ED_LEVEL={0x8, 0xe, 0x9}]}, 0x14a8}, 0x1, 0x0, 0x0, 0x40}, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/mm/ksm/stable_node_chains_prune_millisecs\x00', 0x82942, 0x0) openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000001940), 0x101000, 0x0) r8 = socket(0xa, 0x80803, 0x6) close_range$auto(0x2, 0x8, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$auto_nlbl_unlbl(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$auto_NLBL_UNLABEL_C_STATICLISTDEF(r9, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x70, r10, 0x200, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private2}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast2}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @empty}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @rand_addr=' \x01\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x2}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast1}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}]}, 0x70}, 0x1, 0x0, 0x0, 0x40000}, 0x884) sendmsg$auto_NLBL_UNLABEL_C_STATICLIST(r8, &(0x7f0000001b80)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001b40)={&(0x7f0000001a80)={0xa4, r10, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private1}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'gretap0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast2}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'wlan1\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x2b}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'pim6reg\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @empty}]}, 0xa4}}, 0x8044) r11 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x8001, 0x0) ioctl$auto_KVM_CREATE_VM(r11, 0xae01, 0x0) socket(0x15, 0x5, 0x0) bind$auto(r8, &(0x7f0000000040)=@generic={0xa, "2c551d000000fe8000"}, 0x66) sendmmsg$auto(r0, &(0x7f00000001c0)={{&(0x7f0000000000), 0x5aa, &(0x7f0000000100)={&(0x7f0000000040), 0x10}, 0x2, &(0x7f0000000140), 0x8, 0x1}, 0x5}, 0x2, 0x101) kcmp$auto(r6, r6, 0xb, r1, r0) 2m10.703497709s ago: executing program 0 (id=3482): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000) socketpair$auto(0xf, 0x7, 0x8, 0x0) close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_proc_pid_smaps_operations_internal(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/smaps\x00', 0x42000, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) prctl$auto_PR_SET_VMA(0x53564d41, 0x2, 0x0, 0x8002, 0x2000000002) read$auto_proc_pid_smaps_operations_internal(r0, &(0x7f00000002c0)=""/190, 0xfffffe39) r1 = socket(0x10, 0x2, 0x4) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) r2 = openat$auto_tracing_pipe_fops_trace(0xffffffffffffff9c, 0x0, 0x8802, 0x0) write$auto(r2, 0x0, 0x80000000) r3 = socketpair$auto(0x3, 0x5, 0x7, 0x0) unshare$auto(0x427d4d91) r4 = socket(0xa, 0x801, 0x84) r5 = openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x180b01, 0x0) ioctl$auto_SNAPSHOT_PREF_IMAGE_SIZE(r5, 0x3312, 0x0) r6 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000000), 0x80101, 0x0) ioctl$auto_VHOST_SET_OWNER(r6, 0xaf01, 0x0) ioctl$auto_VHOST_SET_VRING_NUM(r6, 0x4008af10, &(0x7f0000000140)={0x7ffffffc, 0x32}) ioctl$auto_KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04, 0x0) setsockopt$auto(r4, 0x84, 0x8, 0x0, 0x3) write$auto(0xca, 0x0, 0x2d9) close_range$auto(0x2, 0x8, 0x0) r7 = socket(0x10, 0x2, 0xc) adjtimex$auto(&(0x7f0000000000)={0xffff92b5, 0x0, 0x9, 0x3, 0x0, 0x80000000000000, 0x2e, 0x0, 0x4513, 0x9, 0xffffffffffffffff, {0x7, 0x5}, 0x7, 0xbfa, 0x9, 0xc, 0x0, 0x2, 0x8, 0xff, 0x10000, 0x100000001, 0x4}) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000b43a27316b20fbc91b3e1770cf2ca8018773d6106c6a4a3c79b4f0c51ccd57a803f48d4fb9c17ce5f82a92e1be244698cd36edbe3ddcaa6d5ad4d40e6e8f2289a4a67f1db9305da12fe9dca32fcf5dc32775d87c618c75c2099d7aac4798f6682380324ccd189819e2d2943d6989bba3121de5ba70efd30872e43ec41abb9bfb1296b48a0ee1e05769c74e8703402324e4d254", @ANYRES16=0x0, @ANYBLOB="b5e3492bd200fcdbdf252100000008"], 0x1c}}, 0x4004051) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="18000000", @ANYRES8=r2, @ANYRES16=r3], 0x18}, 0x1, 0x0, 0x0, 0x6000c000}, 0x80) write$auto(r1, &(0x7f0000000000)='-\x00', 0xfdef) r8 = socket(0x2000000000000021, 0x2, 0x10000000000002) setsockopt$auto(r8, 0x110, 0x7, 0x0, 0x4) 2m10.570537282s ago: executing program 2 (id=3483): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) preadv2$auto(r0, &(0x7f0000000080)={0x0, 0x80000000}, 0x6, 0xffffffffffffffff, 0x4, 0x2e) r1 = socket(0x10, 0x2, 0x14) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000140), r1) sendmsg$auto_NL80211_CMD_SET_MCAST_RATE(r2, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000180)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="70060000", @ANYRES16=r3, @ANYBLOB="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"], 0x670}, 0x1, 0x0, 0x0, 0x24000001}, 0x814) r4 = openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000200)='/dev/cuse\x00', 0x268681, 0x0) read$auto(r4, 0x0, 0x7fff) writev$auto(r1, &(0x7f00000000c0)={0x0, 0x710f}, 0x5) rseq$auto(&(0x7f0000000ac0)={0x800, 0x9, 0x8, 0x40, 0xfffffffb, 0x9, "a9eed30cbb2c0849b3157ba08888c3532e0dbf956402dc8dd9dccd220b1fb1fcb36ff6173cf33067700dc3eb1080682265a526d30fad7da27dce3d089fa1355feb736ff7172207c37add21d90a42dbb6fe006b5d23f9d4719b20b59183bbdccee121f275b50ac4fad3b3291bdf5db06cb73d067f728bc6c12ecbdac81b36b3a18535f8e20ae47a2ef6e39524926d9568641fd03ae1cf8d48fcdf548bc1f604483e814816caa1ce02c623d7a71370d4590f24ea09e950b3b35f3b16e62df49292e9067b62a9603825f3f0"}, 0x9, 0x2, 0x2af2) mmap$auto(0x0, 0x202000a, 0x5, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mkdir$auto(&(0x7f0000000040)='./cgroup/../file0\x00', 0x1) prctl$auto_PR_SET_MM_ENV_END(0xfffffffa, 0xb, 0xffffffffffffffff, 0x79, 0x5) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x15, 0x5, 0x0) get_robust_list$auto(0x1, 0x0, 0x0) r5 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000040), 0x8006, 0x0) ioctl$auto_PPPIOCSMRU(r5, 0xc004743e, 0x0) ioctl$auto_PPPIOCSFLAGS(r5, 0x40047459, 0x0) write$auto(0x3, 0x0, 0xfdef) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) 2m7.393015461s ago: executing program 2 (id=3492): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/block/loop13/queue/iostats\x00', 0x8101, 0x0) r1 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_FLOW_CMD_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x38, r1, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@OVS_FLOW_ATTR_PROBE={0x4}, @OVS_FLOW_ATTR_KEY={0x20, 0x1, 0x0, 0x1, [@typed={0x8, 0xf, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}, @typed={0x14, 0xf, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x40010}, 0x448c0) write$auto(r0, &(0x7f0000000000)='0\x81=\xa2\xad\xff\x8d\xf9\xac\xa6\xad\xfbi\xa3^}\x91\xa3}\x85\xfaP\x18\xa4\xb0\xb4\xd9\x82=\xe1P\x05\x00\xfb\x05\x00\xbf\x901\a2\xa2X`\a\xf1y\xb3\"=', 0x7fff) r3 = socket$nl_generic(0x10, 0x3, 0x10) mq_timedreceive$auto(r0, &(0x7f0000000380)='&\'(\x00', 0xcc, &(0x7f0000000400)=0x5, &(0x7f0000000480)={0x6, 0x2}) r4 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000980), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_ACT(r3, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000a40)={0x14, r4, 0x1, 0x70bd2d, 0x25dfdbff}, 0x14}}, 0x40000) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'wg2\x00', 0x0}) r6 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000440), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_FEATURES_GET(0xffffffffffffffff, &(0x7f0000003080)={0x0, 0xfffffffffffffdb2, &(0x7f0000003040)={&(0x7f0000002fc0)={0x20, r6, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@ETHTOOL_A_FEATURES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x20004800}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'veth0_to_team\x00', 0x0}) r9 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'virt_wifi0\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x24, r9, 0x13, 0x70bd29, 0x25dfdbfd, {}, [@NL80211_ATTR_TXQ_MEMORY_LIMIT={0x8, 0x10b, 0x2}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r11}]}, 0x24}, 0x1, 0x0, 0x0, 0x4004080}, 0x48050) sendmsg$auto_ETHTOOL_MSG_MODULE_FW_FLASH_ACT(r2, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)={0xc4, r4, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@ETHTOOL_A_MODULE_FW_FLASH_HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_MODULE_FW_FLASH_HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @ETHTOOL_A_MODULE_FW_FLASH_FILE_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_MODULE_FW_FLASH_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x40}, 0x0) 2m6.835074527s ago: executing program 2 (id=3494): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) capset$auto(&(0x7f0000000100)={0x20080522}, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000440)='/sys/devices/platform/dummy_hcd.0/usb1/bConfigurationValue\x00', 0x63102, 0x0) sendfile$auto(r0, r0, 0x0, 0x2) rt_sigqueueinfo$auto(0x0, 0x7e, &(0x7f0000000000)={@siginfo_0_0={0xf9, 0x41, 0x7e73, @_sigfault={0x0, @_perf={0xc, 0x40009, 0x9}}}}) r1 = socket(0x11, 0x3, 0x9) sendmmsg$auto(r1, &(0x7f00000001c0)={{&(0x7f0000000000), 0x5ac, &(0x7f0000000100)={&(0x7f0000000200), 0x49}, 0x5, &(0x7f0000000180), 0x5, 0xe}, 0x5}, 0x2, 0x100) openat$auto_ftrace_event_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/tracing/events/vmalloc/alloc_vmap_area/filter\x00', 0x2, 0x0) 2m6.032037948s ago: executing program 2 (id=3497): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000) socketpair$auto(0xf, 0x7, 0x8, 0x0) close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_proc_pid_smaps_operations_internal(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/smaps\x00', 0x42000, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) prctl$auto_PR_SET_VMA(0x53564d41, 0x2, 0x0, 0x8002, 0x2000000002) read$auto_proc_pid_smaps_operations_internal(r0, &(0x7f00000002c0)=""/190, 0xfffffe39) r1 = socket(0x10, 0x2, 0x4) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) r2 = openat$auto_tracing_pipe_fops_trace(0xffffffffffffff9c, 0x0, 0x8802, 0x0) write$auto(r2, 0x0, 0x80000000) r3 = socketpair$auto(0x3, 0x5, 0x7, 0x0) unshare$auto(0x427d4d91) r4 = socket(0xa, 0x801, 0x84) r5 = openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x180b01, 0x0) ioctl$auto_SNAPSHOT_PREF_IMAGE_SIZE(r5, 0x3312, 0x0) r6 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000000), 0x80101, 0x0) ioctl$auto_VHOST_SET_OWNER(r6, 0xaf01, 0x0) ioctl$auto_VHOST_SET_VRING_NUM(r6, 0x4008af10, &(0x7f0000000140)={0x7ffffffc, 0x32}) ioctl$auto_KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04, 0x0) setsockopt$auto(r4, 0x84, 0x8, 0x0, 0x3) write$auto(0xca, 0x0, 0x2d9) close_range$auto(0x2, 0x8, 0x0) r7 = socket(0x10, 0x2, 0xc) adjtimex$auto(&(0x7f0000000000)={0xffff92b5, 0x0, 0x9, 0x3, 0x0, 0x80000000000000, 0x2e, 0x0, 0x4513, 0x9, 0xffffffffffffffff, {0x7, 0x5}, 0x7, 0xbfa, 0x9, 0xc, 0x0, 0x2, 0x8, 0xff, 0x10000, 0x100000001, 0x4}) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000b43a27316b20fbc91b3e1770cf2ca8018773d6106c6a4a3c79b4f0c51ccd57a803f48d4fb9c17ce5f82a92e1be244698cd36edbe3ddcaa6d5ad4d40e6e8f2289a4a67f1db9305da12fe9dca32fcf5dc32775d87c618c75c2099d7aac4798f6682380324ccd189819e2d2943d6989bba3121de5ba70efd30872e43ec41abb9bfb1296b48a0ee1e05769c74e8703402324e4d254", @ANYRES16=0x0, @ANYBLOB="b5e3492bd200fcdbdf252100000008"], 0x1c}}, 0x4004051) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="18000000", @ANYRES8=r2, @ANYRES16=r3], 0x18}, 0x1, 0x0, 0x0, 0x6000c000}, 0x80) write$auto(r1, &(0x7f0000000000)='-\x00', 0xfdef) r8 = socket(0x2000000000000021, 0x2, 0x10000000000002) setsockopt$auto(r8, 0x110, 0x7, 0x0, 0x4) 1m55.601005603s ago: executing program 34 (id=3482): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000) socketpair$auto(0xf, 0x7, 0x8, 0x0) close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_proc_pid_smaps_operations_internal(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/smaps\x00', 0x42000, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) prctl$auto_PR_SET_VMA(0x53564d41, 0x2, 0x0, 0x8002, 0x2000000002) read$auto_proc_pid_smaps_operations_internal(r0, &(0x7f00000002c0)=""/190, 0xfffffe39) r1 = socket(0x10, 0x2, 0x4) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) r2 = openat$auto_tracing_pipe_fops_trace(0xffffffffffffff9c, 0x0, 0x8802, 0x0) write$auto(r2, 0x0, 0x80000000) r3 = socketpair$auto(0x3, 0x5, 0x7, 0x0) unshare$auto(0x427d4d91) r4 = socket(0xa, 0x801, 0x84) r5 = openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x180b01, 0x0) ioctl$auto_SNAPSHOT_PREF_IMAGE_SIZE(r5, 0x3312, 0x0) r6 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000000), 0x80101, 0x0) ioctl$auto_VHOST_SET_OWNER(r6, 0xaf01, 0x0) ioctl$auto_VHOST_SET_VRING_NUM(r6, 0x4008af10, &(0x7f0000000140)={0x7ffffffc, 0x32}) ioctl$auto_KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04, 0x0) setsockopt$auto(r4, 0x84, 0x8, 0x0, 0x3) write$auto(0xca, 0x0, 0x2d9) close_range$auto(0x2, 0x8, 0x0) r7 = socket(0x10, 0x2, 0xc) adjtimex$auto(&(0x7f0000000000)={0xffff92b5, 0x0, 0x9, 0x3, 0x0, 0x80000000000000, 0x2e, 0x0, 0x4513, 0x9, 0xffffffffffffffff, {0x7, 0x5}, 0x7, 0xbfa, 0x9, 0xc, 0x0, 0x2, 0x8, 0xff, 0x10000, 0x100000001, 0x4}) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000b43a27316b20fbc91b3e1770cf2ca8018773d6106c6a4a3c79b4f0c51ccd57a803f48d4fb9c17ce5f82a92e1be244698cd36edbe3ddcaa6d5ad4d40e6e8f2289a4a67f1db9305da12fe9dca32fcf5dc32775d87c618c75c2099d7aac4798f6682380324ccd189819e2d2943d6989bba3121de5ba70efd30872e43ec41abb9bfb1296b48a0ee1e05769c74e8703402324e4d254", @ANYRES16=0x0, @ANYBLOB="b5e3492bd200fcdbdf252100000008"], 0x1c}}, 0x4004051) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="18000000", @ANYRES8=r2, @ANYRES16=r3], 0x18}, 0x1, 0x0, 0x0, 0x6000c000}, 0x80) write$auto(r1, &(0x7f0000000000)='-\x00', 0xfdef) r8 = socket(0x2000000000000021, 0x2, 0x10000000000002) setsockopt$auto(r8, 0x110, 0x7, 0x0, 0x4) 1m50.920027861s ago: executing program 35 (id=3497): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000) socketpair$auto(0xf, 0x7, 0x8, 0x0) close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_proc_pid_smaps_operations_internal(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/smaps\x00', 0x42000, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) prctl$auto_PR_SET_VMA(0x53564d41, 0x2, 0x0, 0x8002, 0x2000000002) read$auto_proc_pid_smaps_operations_internal(r0, &(0x7f00000002c0)=""/190, 0xfffffe39) r1 = socket(0x10, 0x2, 0x4) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) r2 = openat$auto_tracing_pipe_fops_trace(0xffffffffffffff9c, 0x0, 0x8802, 0x0) write$auto(r2, 0x0, 0x80000000) r3 = socketpair$auto(0x3, 0x5, 0x7, 0x0) unshare$auto(0x427d4d91) r4 = socket(0xa, 0x801, 0x84) r5 = openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x180b01, 0x0) ioctl$auto_SNAPSHOT_PREF_IMAGE_SIZE(r5, 0x3312, 0x0) r6 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000000), 0x80101, 0x0) ioctl$auto_VHOST_SET_OWNER(r6, 0xaf01, 0x0) ioctl$auto_VHOST_SET_VRING_NUM(r6, 0x4008af10, &(0x7f0000000140)={0x7ffffffc, 0x32}) ioctl$auto_KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04, 0x0) setsockopt$auto(r4, 0x84, 0x8, 0x0, 0x3) write$auto(0xca, 0x0, 0x2d9) close_range$auto(0x2, 0x8, 0x0) r7 = socket(0x10, 0x2, 0xc) adjtimex$auto(&(0x7f0000000000)={0xffff92b5, 0x0, 0x9, 0x3, 0x0, 0x80000000000000, 0x2e, 0x0, 0x4513, 0x9, 0xffffffffffffffff, {0x7, 0x5}, 0x7, 0xbfa, 0x9, 0xc, 0x0, 0x2, 0x8, 0xff, 0x10000, 0x100000001, 0x4}) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000b43a27316b20fbc91b3e1770cf2ca8018773d6106c6a4a3c79b4f0c51ccd57a803f48d4fb9c17ce5f82a92e1be244698cd36edbe3ddcaa6d5ad4d40e6e8f2289a4a67f1db9305da12fe9dca32fcf5dc32775d87c618c75c2099d7aac4798f6682380324ccd189819e2d2943d6989bba3121de5ba70efd30872e43ec41abb9bfb1296b48a0ee1e05769c74e8703402324e4d254", @ANYRES16=0x0, @ANYBLOB="b5e3492bd200fcdbdf252100000008"], 0x1c}}, 0x4004051) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="18000000", @ANYRES8=r2, @ANYRES16=r3], 0x18}, 0x1, 0x0, 0x0, 0x6000c000}, 0x80) write$auto(r1, &(0x7f0000000000)='-\x00', 0xfdef) r8 = socket(0x2000000000000021, 0x2, 0x10000000000002) setsockopt$auto(r8, 0x110, 0x7, 0x0, 0x4) 1m38.253029558s ago: executing program 7 (id=3581): r0 = socket(0xa, 0x5, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty20\x00', 0x109401, 0x0) unlink$auto(0x0) close_range$auto(0x2, 0xa, 0x0) r2 = open$auto(&(0x7f0000000000)='./file0\x00', 0x34, 0x1) fsetxattr$auto(r2, 0x0, &(0x7f0000000080), 0x7, 0xd) mmap$auto(0x2, 0x2020009, 0x8, 0xeb3, 0xfffffffffffffffa, 0x8000) r3 = openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000140), 0x8040, 0x0) io_uring_setup$auto(0x2008, 0x0) ioctl$auto_dvb_demux_fops_dmxdev(r3, 0x403c6f2b, 0x0) mmap$auto(0xfffffffffffffffc, 0x2020009, 0x5, 0x13, r1, 0x1000000008000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) open(&(0x7f0000000100)='./file0\x00', 0x161342, 0x100) socket(0xa, 0x3, 0x3a) setsockopt$auto(0x400000000000003, 0x4, 0xce, 0x0, 0x567) fanotify_init$auto(0x65, 0x2) pipe$auto(0x0) fcntl$auto_F_OFD_GETLK(r0, 0x24, 0x6) dup2$auto(0x5, 0x4) splice$auto(0x4, 0x0, 0x2, 0x0, 0x80000001, 0x9) write$auto(0x6, 0x0, 0x100000001) mmap$auto(0x0, 0x2000a, 0xdf, 0xeb1, 0x401, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/neigh/vlan1/base_reachable_time\x00', 0x40400, 0x0) sendmsg$auto_ETHTOOL_MSG_TUNNEL_INFO_GET(0xffffffffffffffff, 0x0, 0x4000000) read$auto(r4, 0x0, 0x1ff) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/nvme_core/parameters/shutdown_timeout\x00', 0x23a940, 0x0) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x8002, 0x0) 1m37.73711908s ago: executing program 7 (id=3582): openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x1000, 0x0) mmap$auto(0x0, 0x6, 0x10000000000, 0x11, 0x3, 0x2000000) 1m37.564338584s ago: executing program 7 (id=3583): mmap$auto(0x0, 0x101, 0x4000000000df, 0xeb1, 0x401, 0x8000) sysfs$auto(0x2, 0x4a, 0x0) r0 = fsopen$auto(0x0, 0x1) fsconfig$auto_EROFS_MOUNT_DAX_NEVER(r0, 0x4, &(0x7f0000000040)='-%\xe0\x00', &(0x7f0000000080), 0x80) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv6/conf/veth1_to_hsr/proxy_ndp\x00', 0x82002, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = getpid() mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000) socket(0xa, 0x801, 0x84) r2 = syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f00000165c0)={0x0, 0x0, &(0x7f0000016580)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c349813d3eed18775d2c317601df5cca4a9e05e2fde000000", @ANYRES16=r2, @ANYBLOB="79a327bd7000fbdbdf252000000005000f0050000000"], 0x1c}, 0x1, 0x0, 0x0, 0x2404c000}, 0x0) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) inotify_add_watch$auto(0xffffffffffffffff, 0x0, 0x1000e6e) prctl$auto(0x6, 0x87, r1, 0x9, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/scsi/sg/debug\x00', 0x400e42, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000826bd7000fedbdf250300000008000400b70a0000060007000080000008000200", @ANYRES32=r4, @ANYBLOB="0a0005000180c200000e00000a0001000180c200000e00000a000100000000000000000008000200", @ANYRES32=r4, @ANYBLOB="060006ff05000000080003009b"], 0x68}, 0x1, 0x0, 0x0, 0x40080}, 0x40) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x100) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) r5 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r5, 0x0, 0x100000a3d9) mmap$auto(0x0, 0x6, 0x3, 0xeb1, 0x7, 0x8000) futex$auto(0x0, 0x85, 0x38, 0x0, 0x0, 0x80000000) openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000400)='/dev/mtd0\x00', 0x68082, 0x0) 1m36.501884717s ago: executing program 7 (id=3589): close_range$auto(0x2, 0xa, 0x0) madvise$auto(0x100000000002, 0x2000040080000004, 0xe) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snd/controlC0\x00', 0x0, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) socket(0x26, 0x3, 0x100) clone$auto(0x2, 0x8, &(0x7f00000001c0)=0x401, &(0x7f0000000200)=0x9, 0x77) r0 = socket(0x2, 0x3, 0xa) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) close_range$auto(0x2, 0x8, 0x0) pipe$auto(&(0x7f0000000500)) fcntl$auto(0x3, 0x4, 0xa553) select$auto(0x5, &(0x7f0000000180)={[0x400020000008, 0xfffffffffffffffc, 0x3, 0x6, 0xc, 0x3, 0x3, 0x1ffe000, 0x7, 0x2, 0x9, 0x2, 0xa657, 0x10000, 0xd3, 0xfdfe]}, 0x0, 0x0, 0x0) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000140)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x400, 0x0, 0x4000000000007, 0xa505}, 0x800}, 0x4, 0xc4428) r1 = socket(0x10, 0x800, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="12", @ANYBLOB="5de1"], 0x1ac}}, 0x40000) recvmmsg$auto(r1, &(0x7f0000000040)={{0x0, 0x5, 0x0, 0x5, 0x0, 0x200002, 0x13}, 0x6}, 0xffffbff9, 0x10, 0x0) close_range$auto(0x2, 0xa, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, r0, 0x8000) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/module/vxlan/parameters/udp_port\x00', 0x2400, 0x0) socket$nl_generic(0x10, 0x3, 0x10) io_uring_setup$auto(0xa, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/pcmC0D0c\x00', 0x28002, 0x0) socket(0x10, 0x800, 0x0) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_rfkill_fops_core(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) readv$auto(0x3, &(0x7f0000000280)={0x0, 0xf7}, 0x87) openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x220840, 0x0) 1m35.927775517s ago: executing program 7 (id=3591): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/virtual/graphics/fbcon/rotate_all\x00', 0xa001, 0x0) write$auto(r0, &(0x7f0000000000)='3\xc7\xff\xff\xff\xdd\x00\b(Ks\x0f\x87|P\x11\xd1li0\x89\x85\x90QM\xd6wfF\xf1x\xb3;c\tP\x03\x84\x97\x99\x83\x97\x81:\xf3\xa3o5\xc5\x86\xed\xa4\x18]\xa3\xc9\x0f\xff\xdak\xb0m\xe1U\xb3\xa2\xee\xdcTJQO\x98\xc8w\x8c\xe7\x00\x00\x00\x1dj\x1e\xebQT\xdd\x9b\x00\x00\x00\x00\x00\x00\x00\x03\x00\x00\x00\x00\x00', 0x9) r1 = socket(0x11, 0x80003, 0x304) setsockopt$auto(r1, 0x107, 0x5, 0x0, 0x24) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_PROBE_CLIENT(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x114, r2, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@NL80211_ATTR_MNTR_FLAGS={0xe8, 0x17, "7c39ac51e6a13b4d1a6f57d44a392e8fcb6b54ea9abec6683f2edc46b006c3b34d519f48a9d25dc1660b5248d53f755d7c5e194cc92ce77296b23d9a98e0eac9939dcce2c5e05fb96f750f79a8fe9e55ec2b799c34b21b6cc37623bc374d14e17954f71c298ee9df69623727d9f76d915e74cac33410ae78cb974cc17551c03895725c53dbd16a545c01fa78aed354fb5c637201f93a72b88205bffe1f607fbf3d96ad41837207f2b804ad6bcc7e825436b4b38403ccb290d5f1e8424bbde0552e5370d92ec8f46a630b167e9ed35719f21d0f6233ac3ce2086a7ca90decb0f4867ddcb3"}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x3}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x3}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x8}]}, 0x114}, 0x1, 0x0, 0x0, 0x10}, 0x8000) 1m35.310494272s ago: executing program 7 (id=3592): unshare$auto(0x40000080) get_mempolicy$auto(0x0, 0x0, 0x2, 0x400000000000085, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) process_vm_readv$auto(0x0, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={0x0, 0xffffffff}, 0x6, 0x0) recvmmsg$auto(0xffffffffffffffff, &(0x7f0000000340)={{&(0x7f00000000c0), 0x3, &(0x7f0000000240)={&(0x7f0000000180), 0x3c5f}, 0x100, &(0x7f00000002c0)="1471e32386ba814ce4b3f5a34449dc7ee4e733905367ec926577decf2d38727966d803b78acb3341a7f1dc3c7c71999f833d265ac4b7037805ea7ca104f62b68", 0x0, 0x4}, 0x9}, 0x1000, 0x6, &(0x7f0000000380)={0x6, 0x2}) bpf$auto(0x5, &(0x7f0000000000)=@bpf_attr_0={0x5, 0x105, 0xc, 0xb, 0x800, 0xffffffffffffffff, 0x5, "d81ddef9d4e6d312212bab98f4060bd8", 0x0, 0xffffffffffffffff, 0x7fffffff, 0xa991, 0x7, 0x8001}, 0x7) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) set_mempolicy$auto(0x1, &(0x7f0000000180)=0x2, 0x6) read$auto(r0, 0x0, 0x20) r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/neigh/veth1_macvtap/locktime\x00', 0x103142, 0x0) r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv6/conf/virt_wifi0/forwarding\x00', 0x202, 0x0) sendfile$auto(r2, r1, 0x0, 0x6) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) r4 = openat$auto_vcs_fops_vc_screen(0xffffffffffffff9c, &(0x7f0000001a80)='/dev/vcsa\x00', 0x80800, 0x0) read$auto(r4, &(0x7f0000001ac0)='#\x00', 0x1) fcntl$getown(r4, 0x9) writev$auto(r3, &(0x7f0000000200)={0x0, 0x7}, 0x3) r5 = socket(0x25, 0x3, 0x5) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/fs/nfs/net/nfs_client/identifier\x00', 0x983942, 0x0) sendfile$auto(r6, r6, 0x0, 0x200) recvfrom$auto(r5, 0x0, 0x0, 0x40, 0x0, 0x0) prctl$auto(0x59616d61, 0xdaffffffffffffff, 0x1, 0x4, 0xfffffffffffffffb) r7 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/card1\x00', 0x0, 0x0) ioctl$auto(r7, 0x64c4, 0xffffffffffffffff) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x2, 0x0) r8 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/dummy_hcd.1/usb2/product\x00', 0x181040, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r8, &(0x7f0000000640)=""/224, 0xe0) openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) 1m20.156863237s ago: executing program 36 (id=3592): unshare$auto(0x40000080) get_mempolicy$auto(0x0, 0x0, 0x2, 0x400000000000085, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) process_vm_readv$auto(0x0, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={0x0, 0xffffffff}, 0x6, 0x0) recvmmsg$auto(0xffffffffffffffff, &(0x7f0000000340)={{&(0x7f00000000c0), 0x3, &(0x7f0000000240)={&(0x7f0000000180), 0x3c5f}, 0x100, &(0x7f00000002c0)="1471e32386ba814ce4b3f5a34449dc7ee4e733905367ec926577decf2d38727966d803b78acb3341a7f1dc3c7c71999f833d265ac4b7037805ea7ca104f62b68", 0x0, 0x4}, 0x9}, 0x1000, 0x6, &(0x7f0000000380)={0x6, 0x2}) bpf$auto(0x5, &(0x7f0000000000)=@bpf_attr_0={0x5, 0x105, 0xc, 0xb, 0x800, 0xffffffffffffffff, 0x5, "d81ddef9d4e6d312212bab98f4060bd8", 0x0, 0xffffffffffffffff, 0x7fffffff, 0xa991, 0x7, 0x8001}, 0x7) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) set_mempolicy$auto(0x1, &(0x7f0000000180)=0x2, 0x6) read$auto(r0, 0x0, 0x20) r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/neigh/veth1_macvtap/locktime\x00', 0x103142, 0x0) r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv6/conf/virt_wifi0/forwarding\x00', 0x202, 0x0) sendfile$auto(r2, r1, 0x0, 0x6) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) r4 = openat$auto_vcs_fops_vc_screen(0xffffffffffffff9c, &(0x7f0000001a80)='/dev/vcsa\x00', 0x80800, 0x0) read$auto(r4, &(0x7f0000001ac0)='#\x00', 0x1) fcntl$getown(r4, 0x9) writev$auto(r3, &(0x7f0000000200)={0x0, 0x7}, 0x3) r5 = socket(0x25, 0x3, 0x5) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/fs/nfs/net/nfs_client/identifier\x00', 0x983942, 0x0) sendfile$auto(r6, r6, 0x0, 0x200) recvfrom$auto(r5, 0x0, 0x0, 0x40, 0x0, 0x0) prctl$auto(0x59616d61, 0xdaffffffffffffff, 0x1, 0x4, 0xfffffffffffffffb) r7 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/card1\x00', 0x0, 0x0) ioctl$auto(r7, 0x64c4, 0xffffffffffffffff) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x2, 0x0) r8 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/dummy_hcd.1/usb2/product\x00', 0x181040, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r8, &(0x7f0000000640)=""/224, 0xe0) openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) 1m10.073974332s ago: executing program 8 (id=3612): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/system/cpu/cpuidle/current_governor\x00', 0xa42, 0x0) sendfile$auto(r0, r0, 0x0, 0x4000000000001) unshare$auto(0x40000080) keyctl$auto(0x18, 0xfffffffffffffffd, 0x0, 0x0, 0x2) 1m9.462651678s ago: executing program 8 (id=3637): close_range$auto(0x2, 0xa, 0x0) mmap$auto(0x0, 0xb9f, 0xdf, 0x9b75, 0xffffffffffffffff, 0x8007) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/nfs/parameters/nfs_idmap_cache_timeout\x00', 0xc2902, 0x0) read$auto(r0, 0x0, 0x20) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000080), 0xffffffffffffffff) unshare$auto(0x40000080) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/amidi2\x00', 0x1, 0x0) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) socket(0x2c, 0x1, 0x0) socket(0x1a, 0x2, 0x5) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000140), 0x8f00, 0x0) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) mremap$auto(0x6, 0x100005, 0x843, 0x2, 0x2) mremap$auto(0xffffeffd, 0x4, 0x4, 0x18a, 0x1001fefff) fsopen$auto(0x0, 0xffffffff) madvise$auto(0xfffffffffffffffa, 0x9, 0x19) setregid$auto(0xffffffffffffffff, 0xfffe) madvise$auto(0x9, 0x2003f2, 0x9) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(0x0, r2) mmap$auto(0x7, 0xfffffffffffffffb, 0x4000000000de, 0x78, r2, 0x300000000004) r4 = socket(0x1d, 0x3, 0x1) mlockall$auto(0x9) getsockopt$auto(r4, 0x65, 0x6, 0xffffffffffffffff, 0x0) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/virtual/tty/ptyy1/power/runtime_suspended_time\x00', 0x182b02, 0x0) sendfile$auto(r2, r5, 0x0, 0x80000001) fadvise64$auto_POSIX_FADV_NORMAL(r2, 0x1, 0xb, 0x0) close_range$auto(0x2, 0x8, 0x0) 1m8.186031537s ago: executing program 8 (id=3642): mmap$auto(0x0, 0x2020009, 0x3, 0x9000000eb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) write$auto(r0, &(0x7f0000000040)='//\xf2\x00', 0x80000000) write$auto(r0, 0x0, 0x2) getrlimit$auto(0x3, 0x0) fdatasync$auto(r0) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) ioctl$auto_BLKZEROOUT(r1, 0x127f, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/035/001\x00', 0x1102, 0x0) write$auto(0xffffffffffffffff, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xc8d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\xc6\x00\x89\te\x8d\a\xfb\\n\x89C:\x84D\x10u\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k', 0x100000a3d9) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x8ea182, 0x0) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x1000, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) init_module$auto(0x0, 0xffff9, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mmap$auto(0x0, 0x4000b, 0x7, 0x9b72, 0x7, 0x28000) close_range$auto(0x2, 0x8, 0x0) r3 = socket(0xa, 0x80002, 0x73) socket(0x2b, 0x1, 0x0) listen$auto(0x3, 0x81) setsockopt$auto(0x3, 0x0, 0x1, 0x0, 0x10001) madvise$auto(0x0, 0x8000000000000000, 0x15) madvise$auto(0x0, 0x2000000080000001, 0x3) close_range$auto(0x2, 0x8, 0x0) setsockopt$auto_SO_SNDTIMEO_NEW(r2, 0x4, 0x43, &(0x7f0000000180)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xc8d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\xc6\x00\x89\te\x8d\a\xfb\\n\x89C:\x84D\x10u\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k', 0x0) r4 = openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$auto_dma_heap_fops_dma_heap(r4, 0xffffffffffdffe00, &(0x7f0000000140)=';') mmap$auto(0x0, 0xf, 0x3, 0xeb1, r3, 0x8000) 1m4.406195864s ago: executing program 8 (id=3651): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x47, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x10b142, 0x0) sendmsg$auto_NFC_CMD_VENDOR(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x24000095}, 0x4044000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0xffffffffffffffff, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0x10, 0x2, 0xc) socket(0xa, 0x801, 0x84) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8002) setsockopt$auto(0x3, 0x10000000084, 0x11, 0x0, 0x8) socket(0x2000000000000021, 0x2, 0x10000000000002) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x1d, &(0x7f00000003c0), 0x0) fcntl$auto(0x8000000000000001, 0x26, 0x8) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x4) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) r0 = socket(0x2, 0x5, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0x2, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) shutdown$auto(0x200000003, 0x2) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x19ffc}, 0x7, 0x0, 0x2, 0xb}, 0xfff}, 0x5, 0x311) openat$auto_mISDN_fops_timerdev(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$auto(0x3, 0x0, 0xffd8) write$auto(r0, 0x0, 0xffd8) close_range$auto(0x2, 0x8, 0x0) 49.105687051s ago: executing program 37 (id=3651): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x47, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x10b142, 0x0) sendmsg$auto_NFC_CMD_VENDOR(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x24000095}, 0x4044000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0xffffffffffffffff, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0x10, 0x2, 0xc) socket(0xa, 0x801, 0x84) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8002) setsockopt$auto(0x3, 0x10000000084, 0x11, 0x0, 0x8) socket(0x2000000000000021, 0x2, 0x10000000000002) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x1d, &(0x7f00000003c0), 0x0) fcntl$auto(0x8000000000000001, 0x26, 0x8) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x4) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) r0 = socket(0x2, 0x5, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0x2, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) shutdown$auto(0x200000003, 0x2) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x19ffc}, 0x7, 0x0, 0x2, 0xb}, 0xfff}, 0x5, 0x311) openat$auto_mISDN_fops_timerdev(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$auto(0x3, 0x0, 0xffd8) write$auto(r0, 0x0, 0xffd8) close_range$auto(0x2, 0x8, 0x0) 17.652710707s ago: executing program 5 (id=3775): r0 = syz_genetlink_get_family_id$auto_smc_gen_netlink(&(0x7f0000000680), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_SMC_NETLINK_REMOVE_UEID(r1, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000840)={0x3c, r0, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@SMC_NLA_EID_TABLE_ENTRY={0x25, 0x1, '/sys/kernel/debug/wakeup_sources\x00'}]}, 0x3c}, 0x1, 0x500, 0x0, 0x24008040}, 0x4040) 17.413732563s ago: executing program 5 (id=3776): openat$auto_tracing_mark_fops_trace(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/tracing/trace_marker\x00', 0x43, 0x0) memfd_secret$auto(0x0) openat$auto_tap_fops_tap(0xffffffffffffff9c, 0x0, 0x1, 0x0) socket(0x1a, 0x1, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x40001, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r2, &(0x7f0000000200)={0x0, 0x7}, 0x3) listmount$auto(&(0x7f0000000100)={0x1f, @raw, 0x80000002, 0xfffffffffffffff7, 0x2}, 0x0, 0xf4240, 0x1) socket(0x2b, 0x1, 0x0) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, r0, 0x8000) mlock$auto(0x112, 0x80006) mlockall$auto(0x800000000000005) madvise$auto(0x0, 0x200007, 0x19) msgrcv$auto(0x0, 0x0, 0xff9, 0xfffffffffffffffc, 0xb4) r4 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) write$auto_console_fops_tty_io(r4, &(0x7f0000000000)="4c91f2c388274610e12c861bb2bfd9800e9b394b", 0x14) kcmp$auto(0x0, 0x0, 0x80000001, r2, r1) msgsnd$auto(0x0, &(0x7f0000000000)={0x40, 0x5}, 0x8, 0x9) close_range$auto(0xffffffffffffffff, 0x8, 0x0) socket(0x2, 0x80002, 0x73) r5 = socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(r5, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) 16.089577835s ago: executing program 9 (id=3782): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x0, 0x5, 0x0) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) r0 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0xc0482, 0x0) readv$auto(0x3, &(0x7f00000001c0)={0x0, 0x7fffffffefff}, 0x7) write$auto_sg_fops_sg(r0, &(0x7f0000001380)="4a0200000000040000899edb615550fd8c44924d87f0010047eb02eff5d2adc245a4e1eded0e91b86c61b6b42ed6", 0x2e) 15.090190022s ago: executing program 9 (id=3784): r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/fs/cifs/Stats\x00', 0x28102, 0x0) write$auto(r0, &(0x7f00000001c0)='N\x00\x1c\x84\x04Y\x03\b\xc7k\x00\x00\x00\x00|x\xc8\v\xa3\"\xd7kp\\\xb8\xe1\x81\xdaR\xbc\xd0\xa0\xa1;l\x7f\x85D\r\x893_\xd4\xdf\xa5\xe6Vg\x8c\xce\f\xfa\xf3;\xed\xbd\xf8y\xb8\x92\xac\x97\xcb#\xd0R\x9a{\x02wCJ\r8\x11\v7\r\x82#\xd1\xc1\x9djK\x7f\xd7y\v#\xfc)\x06\x9a\x81\x7fIz\x825\v \xdd\xb2<\xa9\xd1\x7f\xbfw\xfeq\x04\x80\n\x9c\x8e2\xb0\x91\xeb\xc3\r\xd7\x9a\xa4\xcd\xbb\xd3\x99\xeb\x16\x0e\xde>\x10\x01{\xb1\xc4\xe0\x97\x92\xabd \xfdGsxA\x84\xfco\a\x1a\x94u\xe5\xe0%>\a\xaa\xf9kwwdb\xd0\xa0\xab\xad=\x85\x05\x96\xf8\x93\x94\x0f\xc6\x06\x88M\xcep\r\x00\xdb\xa861\xfaf\x8a\xa2\xdb\x8f~\"dT\xa4\x13\xbf\x8839\xc0\x04t\x1a|\x86LPZ\x03,\xeb\x1b?\xe05W\xc0\x84=[p\xd0\x13\xc8\x00'/245, 0x90000000000) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, 0x0, 0x1000, 0x0) socket(0xa, 0x1, 0x84) syslog$auto(0x3, &(0x7f0000000080)='..\x00k\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\x00\x80\x00\x00\x00\x00\x00\x00j<\v\xf47\n\xa7\xd2\x8b\x11e1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\xa1q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa2', 0x5) r2 = syz_open_procfs$namespace(0x0, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x2000000000000000, 0xffffffffffff0001, 0x15) r3 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x103602, 0x0) getdents$auto(r2, 0x0, 0x18) mmap$auto(0x4, 0x6, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) r4 = socket(0x10, 0x2, 0x0) openat$auto_stat_fops_(0xffffffffffffff9c, &(0x7f00000001c0), 0x4000, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYBLOB='&\x00', @ANYBLOB="5de1"], 0x1ac}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) r5 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000d80), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_ETHTOOL_MSG_PLCA_SET_CFG(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000280)=ANY=[@ANYRESOCT=r1, @ANYRES16=r5, @ANYBLOB="01002cbd7000fddbdf25280000001800018014741e0064756d6d793000"/38, @ANYRES8=r3], 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x20008804) read$auto(r4, &(0x7f0000000080)='MJC802154_HWSIM\x00\xcb\x0fX\xc7\xfdx!\xf7\xb5T\x04\xad\x96\xf4\xbc\xca\xa52UWT1\a\x00\x00\x00\x00\x00\x007\xc9\xa6\x8a', 0x1060) r7 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x101001, 0x0) ioctl$auto_UI_DEV_SETUP(r7, 0x405c5503, &(0x7f00000000c0)={{0x9, 0xf2cf, 0x8, 0x80}, "6a034a07c7b82d90b69a39e32576f893fba86c9dd051a0094a3836d61c9100fefbbabea6ef9368c7996e841f3f1561d4992f726b0a6c36b0b2fd1678e816201cf562367fe6596824588a2e3d84ba165f", 0xa}) ioctl$auto_UI_DEV_CREATE(r7, 0x5501, 0x0) writev$auto(r7, &(0x7f0000000340)={&(0x7f0000000200), 0x18}, 0x8) socket(0x28, 0xc, 0x80000088) exit$auto(0x4) exit$auto(0x7) socket(0x2, 0x2, 0x0) close_range$auto(0x2, 0x8, 0x0) 14.012069844s ago: executing program 5 (id=3785): mmap$auto(0x0, 0x40009, 0x7, 0x9b72, 0x7, 0x28000) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) io_uring_setup$auto(0x7, 0x0) r0 = open(&(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x80400, 0xb5d1af1605322dfc) open_by_handle_at$auto(r0, &(0x7f0000001280)={0x8, 0x2, "0200000000000000"}, 0x6) openat$auto_loop_ctl_fops_loop(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x3, 0xd, 0x8dc2, 0x0) close_range$auto(0x2, 0x8000, 0x0) socket(0x2, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000140), 0xe0182, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r2) ioctl$auto_KVM_CREATE_VM(r1, 0xc048aeca, 0x0) 13.599156967s ago: executing program 5 (id=3786): mmap$auto(0x0, 0x40009, 0x7, 0x9b72, 0x7, 0x28000) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) io_uring_setup$auto(0x7, 0x0) r0 = open(&(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x80400, 0xb5d1af1605322dfc) open_by_handle_at$auto(r0, &(0x7f0000001280)={0x8, 0x2, "0200000000000000"}, 0x6) openat$auto_loop_ctl_fops_loop(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x3, 0xd, 0x8dc2, 0x0) close_range$auto(0x2, 0x8000, 0x0) socket(0x2, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000140), 0xe0182, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r2) ioctl$auto_KVM_CREATE_VM(r1, 0xc048aeca, 0x0) 13.033427688s ago: executing program 5 (id=3788): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) bpf$auto(0x0, 0x0, 0x6f4) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mlockall$auto(0x7) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket(0x23, 0x2, 0x0) pipe2$auto(0x0, 0x80) keyctl$auto(0x200000000000020, 0xffffffffffffffff, 0x5, 0x5, 0x8) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0x1e, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) bind$auto(0x3, 0x0, 0x6a) openat$auto_nvram_misc_fops_nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x202, 0x0) writev$auto(0x3, 0x0, 0x8) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mq_timedsend$auto(0xffffffffffffffff, 0x0, 0x7d, 0x9, 0x0) close_range$auto(0x0, 0xffffffffffffffff, 0x2) socket(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x18, 0x5, 0x1) connect$auto(r0, 0x0, 0x3a) mmap$auto(0x0, 0x2000d, 0x7fff, 0x10, 0x401, 0x8000) sysinfo$auto(0x0) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/v4l-subdev3\x00', 0x169000, 0x0) madvise$auto(0x0, 0x2003f0, 0x18) arch_prctl$auto_ARCH_REQ_XCOMP_GUEST_PERM(0x1025, 0xfffffffffffffff7) sendmmsg$auto(0xffffffffffffffff, 0x0, 0x8, 0xe4) close_range$auto(0x2, 0x8, 0x0) 12.55566282s ago: executing program 9 (id=3789): keyctl$auto(0x200000000000020, 0xffffffffffffffff, 0x5, 0x5, 0x8) r0 = setfsuid$auto(0xee00) setfsuid$auto(0xee01) keyctl$auto(0xb, 0xffffffffffffffff, r0, 0x4, 0x7a) mmap$auto(0x0, 0x20006, 0xdf, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x15, 0x5, 0x7) bind$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xfd}}, 0x6b) madvise$auto(0x110c230000, 0x1, 0x9) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xc0002, 0x0) getrandom$auto(0x0, 0x3, 0x80000001) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sysfs$auto(0x2, 0x12, 0x0) r1 = fsopen$auto(0x0, 0x3) fsconfig$auto_SHMEM_HUGE_ADVISE(r1, 0x2, &(0x7f0000000040)=',%!/-%,\x00', &(0x7f0000000080), 0x3) statmount$auto(0x0, &(0x7f0000000180)={0xd, 0xfffffffe, 0x44f, 0xa, 0x10, 0x1007181, 0x0, 0x62, 0x7, 0x100000800, 0x0, 0x2a, 0x4, 0x200003fffffe, 0xfffffffffffffff4, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x862, 0xf, 0x22002, 0x1ff, 0x0, 0x62f, 0x81, 0x0, 0x0, 0x0, 0xb626, [0xfffffffffffffffe, 0xffffffffffff04ef, 0x0, 0x7, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x9e, 0x0, 0xa7, 0xfffffffffffffffd, 0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffd, 0x3c, 0x81, 0x8a0, 0xb, 0x81, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x1000, 0x80, 0x0, 0x0, 0x0, 0x6, 0x0, 0x100002, 0x0, 0x3ff, 0x6, 0x0, 0x0, 0x0, 0x0, 0x4000000000000]}, 0x800000000000b, 0xbc) r2 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000000000), 0x180d01, 0x0) ioctl$auto__ctl_fops_dm_ioctl(r2, 0xfffffff7effffd0c, &(0x7f00000001c0)) remap_file_pages$auto(0xf67a, 0x3, 0xffffffffffffffff, 0x40, 0x66a) mmap$auto(0x0, 0x200002020009, 0x73, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) shmctl$auto(0x3, 0x7f, &(0x7f0000000600)={{0x7, 0x0, 0x0, 0x9, 0x3ff, 0xfffffffa, 0x7ff}, 0xc, 0x8000000000000000, 0x0, 0x4, @inferred, @inferred, 0x8, 0x0, &(0x7f0000000480)="137e7224a9d9fb412feb934a925d889fcc7c2872de330b0e191a9c095a56044baa12bca92c2e24d8c6c6e885450bbe503a3da1b64b7c755cf9f177a8b4cb7d74905fc1309e6719f53d8401a8cb1d163ac6c4ed72140fceb9e738b4573c55989457e4f1f3f3c56bdb67c5bd8a36b1e47c87216bd50c377540f140c8489c96c12320844c199f09f2171c0581d54f2ce055bb7fc481e753f4", &(0x7f0000000540)="374285854126966664f1696c538850a79f00c65328f4e11d7f59a0c00beadafac58a8d49e3e828ac1c6deb07b49443dd039a46049b0cc1e5212f5eb70afd401582550c02aa9df81ef9350403a9eea1326d7944c76580c5a964b86caecea0b19c1ff1f16b2d8612f79be153269b901dd531323059f1306247943b945eb8b778484493b937"}) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @loopback}, 0x54) setsockopt$auto(0x3, 0x0, 0x4, 0x0, 0x28) madvise$auto(0x0, 0xffffffffffff0001, 0x15) 12.199731783s ago: executing program 5 (id=3790): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) unshare$auto(0x40000080) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = socket(0x5, 0x4, 0x7) getsockopt$auto_SO_DONTROUTE(r0, 0x5, 0x5, &(0x7f0000000180)='\x00', &(0x7f0000000380)=0x8a41) close_range$auto(0x2, 0x8, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000640), r1) sendmsg$auto_NL802154_CMD_SET_PAN_ID(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000011c0)=ANY=[], 0x1058}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r3 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000280)={0xe8, r2, 0x805, 0x70bd2d, 0x25dfdbfb, {}, [@NL80211_ATTR_NETNS_FD={0x8, 0xdb, r3}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0xca, 0xcd, "091e8e70a7ddd874f2907d2504596904abfba25decdc635a30ad8d89fba9394b0416c89f97edc0c3366c6d421e22621c855925ef7659c8a0088ec3a9da955b139d4c60dce874040c4e29a47c0aec430cc126c47c0f44f969c5dd914215caf0bf2f56db5ce39dc77c676fa476634fc1548d683974a38c0feadd7d9762ff49d5821530e01796a998ef5b4a708e2e8885a31a35028016e40888343891b2687861badd50d1f8b30ff59c12767e28e7275b3f07e7052d3402419e6d2efbf3293fb2016c052a80ed1f"}]}, 0xe8}, 0x1, 0x0, 0x0, 0x4004044}, 0x8000) sendmsg$auto_NL80211_CMD_GET_WIPHY(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000140)=ANY=[@ANYBLOB="18000000", @ANYRES16=r2, @ANYBLOB="810b25bd7080fbdadf254a1a0400ae0000"], 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0xc004) sendmsg$auto_NL80211_CMD_GET_MPP(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1afa0000", @ANYRES16=r2, @ANYBLOB="100025bd7000fedbdf256b000000"], 0x14}, 0x1, 0x0, 0x0, 0x200400c5}, 0x2400c014) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_rng_chrdev_ops_core(0xffffffffffffff9c, &(0x7f0000000000), 0x42800, 0x0) read$auto_proc_mem_operations_base(0xffffffffffffffff, &(0x7f0000000200)=""/81, 0x51) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r4 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x80, 0x0) ioctl$auto_SNDCTL_TMR_CONTINUE(r4, 0x5404, &(0x7f0000000ac0)="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") socket(0x2, 0x5, 0x0) io_uring_setup$auto(0x406, 0x0) mmap$auto(0x0, 0x9, 0xffb, 0x8000000008011, 0x3, 0x0) sendmsg$auto_NL80211_CMD_SET_WIPHY(0xffffffffffffffff, 0x0, 0x80) getrandom$auto(0x0, 0x6000000, 0x3) mprotect$auto(0x200000000000, 0x806121, 0x4) pselect6$auto(0x3, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x10000, 0x9}, 0x0) io_uring_enter$auto(0x3, 0xa84, 0x80000001, 0xa, 0x0, 0x46) 10.2084311s ago: executing program 9 (id=3791): mmap$auto(0x0, 0x2020009, 0x3, 0x9000000eb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000001a80)='/dev/bus/usb/031/001\x00', 0x208000, 0x0) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/security/tomoyo/profile\x00', 0xc0802, 0x0) read$auto(0x3, 0x0, 0x8080) socket(0x10, 0x2, 0x0) memfd_secret$auto(0x0) socket$nl_generic(0x10, 0x3, 0x10) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) r0 = open(0x0, 0x261c2, 0x84) r1 = open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x84) close_range$auto(0x2, 0x8000, 0x0) r2 = socket(0xa, 0x2, 0x88) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_5={@target_fd=r0, r3, 0x4, 0x409, r2, @relative_id=0x14, 0xe600}, 0xd) bpf$auto(0x2, &(0x7f00000001c0)=@raw_tracepoint={0x5, r1, 0x0, 0x3}, 0xc) 9.944401863s ago: executing program 9 (id=3793): r0 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/console\x00', 0x20400, 0x0) (async) r1 = mq_open$auto(&(0x7f0000000000)='&(!@\x00', 0x401, 0x3, &(0x7f0000000040)={0x6506, 0x1ff, 0x0, 0x4}) accept$auto(r1, &(0x7f0000000080)=@phonet={0x23, 0x0, 0x1e, 0xff}, &(0x7f00000000c0)=0x1000) (async) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/platform/vivid.0/cec6/power/runtime_suspended_time\x00', 0x125101, 0x0) socket(0x22, 0x6, 0x2) (async) write$auto(r2, &(0x7f0000000140)='$+%\x00', 0xf40) (async) bpf$auto_BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000180)=@info={r2, 0x4, 0x3}, 0x7f) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000240)='/dev/sequencer2\x00', 0x2000, 0x0) (async, rerun: 32) ioctl$auto_BLKZEROOUT(r3, 0x127f, 0x0) (async, rerun: 32) adjtimex$auto(&(0x7f0000000280)={0x1, 0x0, 0x7f, 0x947, 0x7, 0x9, 0x1, 0x0, 0x3, 0x7, 0x1, {0x7fff}, 0x7, 0x2, 0x2, 0x5, 0x0, 0x80000000, 0x100000000, 0x3, 0x8000, 0x359e80000000000, 0x9}) r4 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000380)='/dev/sequencer\x00', 0x2, 0x0) getdents64$auto(r4, &(0x7f00000003c0)={0x20000000000000, 0x6, 0x6, 0x1, "fc4a6052486f4d9b94b85191c49e78982c483872b15032f9ac579e8b0c741f07d417429ad807d730001fb4a16f6eb39e186d58fb7107205a17706892c0a37dbb31b0a438b845119df04e22d1c75cfc19e693bb713db31e0e4d1ffcc18ead74e503476b0ae3e16ed8beeed56df57b9596e755399e25e169e107c80e7e7b79dd9d6abc45668db789634992d2b2349988d286e259e973043e88b7912434de01a0b1b9d2001c9cff1a2b7b864f79aa238bc2c5"}, 0x6) (async) setsockopt$auto_SO_TIMESTAMP_OLD(r3, 0x605ca898, 0x1d, &(0x7f0000000600)='.[\\\xa5/\x00', 0x10) (async) syz_genetlink_get_family_id$auto_nlbl_calipso(&(0x7f00000004c0), 0xffffffffffffffff) adjtimex$auto(&(0x7f0000000500)={0x563, 0x0, 0x3, 0x2a3b, 0x2, 0x10001, 0x101, 0x0, 0x6, 0xfffffffffffffff8, 0x7, {0x1ff, 0x800}, 0x7, 0x80, 0x2, 0x6, 0x0, 0x7, 0x7, 0x3, 0x1, 0x12a8000, 0x80000000}) (async) ioctl$auto_TIOCCONS(r0, 0x541d, 0x0) 9.335449743s ago: executing program 9 (id=3796): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x1adac3, 0x0) write$auto_ocfs2_control_fops_stack_user(r0, &(0x7f0000003900)='\t', 0x1) madvise$auto(0x0, 0xffffffffffff0005, 0x17) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, 0x0, 0xc0400, 0x0) socketpair$auto(0x1, 0x2, 0xfffffffd, 0x0) r1 = open(0x0, 0x64842, 0x0) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f00000011c0)='/dev/ptyb0\x00', 0x5e1001, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001d80)='/sys/devices/virtual/sound/ctl-led/speaker/card0/attach\x00', 0x1, 0x0) unshare$auto(0x40000080) r3 = socket(0xa, 0x3, 0x3a) r4 = syz_genetlink_get_family_id$auto_batadv(0x0, r3) sendmsg$auto_BATADV_CMD_TP_METER(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r4, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_TT_TTVN={0x5, 0x11, 0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2000c001}, 0x40001) writev$auto(r2, &(0x7f0000000040)={&(0x7f0000000140)="b893d47e98d1297d83d7f5b1f60eeb1a55427bdcad878a7949b89fdef49c59b4e9084ac9213e4367a845f38bfb2f326e5a9e8961bc89f914444312a918c0fa946efdbab133395e6b450c44572ea7d14b7bff8cb8f03c5b97f2da85fc4b3d68f7d77b5957cf5e922c1d717792", 0x7}, 0x8) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) ioctl$auto(r3, 0x8982, 0x1) flock$auto(0xffffffffffffffff, 0xffff) 5.553311291s ago: executing program 6 (id=3800): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/virtual/block/nbd6/queue/iosched/writes_starved\x00', 0xa001, 0x0) write$auto(r0, &(0x7f0000000100)='%\x00', 0x38f) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) move_pages$auto(0x0, 0x5, 0x0, &(0x7f00000003c0)=0x1, 0x0, 0x2) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) madvise$auto(0x0, 0xffffffffffff0001, 0x15) unshare$auto(0x7) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) unshare$auto(0x20000080) syz_clone3(&(0x7f0000000300)={0x2c022000, 0x0, 0x0, 0x0, {0x1f}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptyw1\x00', 0x80500, 0x0) r2 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/security/tomoyo/stat\x00', 0x40802, 0x0) read$auto(r2, 0x0, 0x2ea99) ioctl$auto(r1, 0x5457, 0x38) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nbd3\x00', 0x2000, 0x0) r4 = getpid() mkdir$auto(&(0x7f0000000040)='./file0\x00', 0x2) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x8000, 0x70) mknodat$auto(r5, &(0x7f00000003c0)='./file0\x00', 0xfff, 0xfffffff8) renameat2$auto(r5, &(0x7f0000000200)='./file0\x00', r5, &(0x7f0000000240)='./file1\x00', 0x1) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x8000, 0x70) mkdir$auto(&(0x7f0000000000)='./file0/file0\x00', 0x3) renameat2$auto(r6, &(0x7f0000000200)='./file0\x00', r6, &(0x7f0000000240)='./file1\x00', 0x2) ioctl$auto_BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000080)={"3bc861d565c73f297c591a7fecc0bd3d69aff9cf6c589141f4c6d5d4b1634e06", 0x5, 0x9, 0x8951, 0xffffffffffff57fe, 0x0, r4}) ioctl$auto(0x3, 0x402c542b, 0x38) 4.495242701s ago: executing program 6 (id=3802): mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x2, 0x1, 0x0) socket(0x2, 0x5, 0x0) mmap$auto(0x5, 0x400008, 0xe1, 0x5e, 0xffffffffffffffff, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/zswap/parameters/compressor\x00', 0xc0002, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x10442, 0x0) mmap$auto(0x4, 0x2, 0x10, 0x10, 0xffffffffffffffff, 0x80) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x80502, 0x0) sendmsg$auto_OVS_VPORT_CMD_GET(0xffffffffffffffff, &(0x7f0000001a00)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000540)={&(0x7f00000006c0)=ANY=[@ANYBLOB="98010000", @ANYRES16=0x0, @ANYBLOB="010029bd7000fedbdf25030000000101048039b420545b5d3b354d0e28e4cc7409509d75e1aaa7135eee4b67be2c70435d4bc9001e92c7e7ae693c43339ce8b20e29d44b783c2e4b11a7eadfdfad3e6ef3413ace72d6d686b24fdd2bf0b89e6dfd0c196af7b5c0b5a09acd4fb6397dda4f2741ec960f74c809e7880399c99a9dc3af128d4f1c9cb3107c2cd72517824ffa0135171c8d311fcc17e2845ebf10704ce1e02245f75706d044b672c973df5198992e1aaf296ea46bfec9b924c3b598e665a53c95a2a681379ba509412e21846b8554ec1f954a53a63cfc282259e86353cce14a15a13978a52f79913dc362f6ee08002600000000000000000000000000008f891e258e8e54b45e6aad60938763ff8081d6433177138d8663dc9dd3ac0dfdfb5edcde3a2034cea89eecdd831da20f405f1d9861138ec02581afd7bac3ff2bcd5beced7e84f6df1261a69c45472f8e089eb831b0d99943dafd59e407ad673be70f40caea4b38bed2bc29e06662975016", @ANYRES32=0x0, @ANYRES32=r0, @ANYRES32=0x0, @ANYBLOB], 0x198}, 0x1, 0x0, 0x0, 0x810}, 0x0) mmap$auto(0x0, 0x101, 0xdf, 0x9bf2, 0x2, 0x4) move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) ioctl$auto(0x3, 0x402c542b, 0x38) getrlimit$auto(0x3, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) mmap$auto(0x0, 0xe983, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000) openat$auto_ubi_ctrl_cdev_operations_ubi(0xffffffffffffff9c, 0x0, 0x80000, 0x0) ioctl$auto_SIOCGIFHWADDR2(0xffffffffffffffff, 0x8927, &(0x7f0000000080)="83f72950c4a15930c2601a4a9bc630bc64855986ae86b0e5edcb4ff873f9ac90f6362e3c28d6bded6152cae220b4b23cff0bd19118c132f0908bba3bb4fa2cc8a9da3c288fa1061077e1548f206de75fb69de8718758268f4a59cb52f79b1dd32c31fedbb3b9899a46c0721ac716a3ac49bc") syz_genetlink_get_family_id$auto_ioam6(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_SMC_NETLINK_GET_DEV_SMCD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYRES8, @ANYRES16, @ANYRES64=0x0], 0x100}, 0x1, 0x0, 0x0, 0x844}, 0x4010) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/net/igmp\x00', 0x0, 0x0) pread64$auto(r1, 0x0, 0x2e0423d, 0x588) 3.997142757s ago: executing program 6 (id=3804): r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/fs/cifs/Stats\x00', 0x28102, 0x0) write$auto(r0, &(0x7f00000001c0)='N\x00\x1c\x84\x04Y\x03\b\xc7k\x00\x00\x00\x00|x\xc8\v\xa3\"\xd7kp\\\xb8\xe1\x81\xdaR\xbc\xd0\xa0\xa1;l\x7f\x85D\r\x893_\xd4\xdf\xa5\xe6Vg\x8c\xce\f\xfa\xf3;\xed\xbd\xf8y\xb8\x92\xac\x97\xcb#\xd0R\x9a{\x02wCJ\r8\x11\v7\r\x82#\xd1\xc1\x9djK\x7f\xd7y\v#\xfc)\x06\x9a\x81\x7fIz\x825\v \xdd\xb2<\xa9\xd1\x7f\xbfw\xfeq\x04\x80\n\x9c\x8e2\xb0\x91\xeb\xc3\r\xd7\x9a\xa4\xcd\xbb\xd3\x99\xeb\x16\x0e\xde>\x10\x01{\xb1\xc4\xe0\x97\x92\xabd \xfdGsxA\x84\xfco\a\x1a\x94u\xe5\xe0%>\a\xaa\xf9kwwdb\xd0\xa0\xab\xad=\x85\x05\x96\xf8\x93\x94\x0f\xc6\x06\x88M\xcep\r\x00\xdb\xa861\xfaf\x8a\xa2\xdb\x8f~\"dT\xa4\x13\xbf\x8839\xc0\x04t\x1a|\x86LPZ\x03,\xeb\x1b?\xe05W\xc0\x84=[p\xd0\x13\xc8\x00'/245, 0x90000000000) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, 0x0, 0x1000, 0x0) socket(0xa, 0x1, 0x84) syslog$auto(0x3, &(0x7f0000000080)='..\x00k\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\x00\x80\x00\x00\x00\x00\x00\x00j<\v\xf47\n\xa7\xd2\x8b\x11e1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\xa1q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa2', 0x5) r2 = syz_open_procfs$namespace(0x0, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x2000000000000000, 0xffffffffffff0001, 0x15) r3 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x103602, 0x0) getdents$auto(r2, 0x0, 0x18) mmap$auto(0x4, 0x6, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) r4 = socket(0x10, 0x2, 0x0) openat$auto_stat_fops_(0xffffffffffffff9c, &(0x7f00000001c0), 0x4000, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYBLOB='&\x00', @ANYBLOB="5de1"], 0x1ac}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) r5 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000d80), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_ETHTOOL_MSG_PLCA_SET_CFG(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000280)=ANY=[@ANYRESOCT=r1, @ANYRES16=r5, @ANYBLOB="01002cbd7000fddbdf25280000001800018014741e0064756d6d793000"/38, @ANYRES8=r3], 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x20008804) read$auto(r4, &(0x7f0000000080)='MJC802154_HWSIM\x00\xcb\x0fX\xc7\xfdx!\xf7\xb5T\x04\xad\x96\xf4\xbc\xca\xa52UWT1\a\x00\x00\x00\x00\x00\x007\xc9\xa6\x8a', 0x1060) r7 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x101001, 0x0) ioctl$auto_UI_DEV_SETUP(r7, 0x405c5503, &(0x7f00000000c0)={{0x9, 0xf2cf, 0x8, 0x80}, "6a034a07c7b82d90b69a39e32576f893fba86c9dd051a0094a3836d61c9100fefbbabea6ef9368c7996e841f3f1561d4992f726b0a6c36b0b2fd1678e816201cf562367fe6596824588a2e3d84ba165f", 0xa}) ioctl$auto_UI_DEV_CREATE(r7, 0x5501, 0x0) writev$auto(r7, &(0x7f0000000340)={&(0x7f0000000200), 0x18}, 0x8) socket(0x28, 0xc, 0x80000088) exit$auto(0x4) exit$auto(0x7) socket(0x2, 0x2, 0x0) close_range$auto(0x2, 0x8, 0x0) 2.752504358s ago: executing program 6 (id=3806): close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) socket(0x11, 0xa, 0x300) sendmmsg$auto(0x3, 0x0, 0x9a6, 0xa00) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x14}, 0x1, 0x0, 0x0, 0xfff0}, 0x24048084) 2.717971881s ago: executing program 4 (id=3807): socket(0x10, 0x2, 0xc) mmap$auto(0x0, 0x2020007, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x0, 0x5, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/devices/platform/vivid.0/video4linux/video62/name\x00', 0x100, 0x0) socket(0x2, 0x801, 0x106) open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x8c00, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$auto(0x3, 0x4048aec9, r0) r2 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) r3 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/controlC1\x00', 0x40000, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/afs/sysname\x00', 0xaa102, 0x0) write$auto(r5, &(0x7f0000000040)='.G+*@sys\x00', 0x9) close_range$auto(0x2, r3, 0x0) r6 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/security/tomoyo/manager\x00', 0x2, 0x0) write$auto_tomoyo_operations_securityfs_if(r6, &(0x7f00000000c0)="f21a9a3c5c5903f3492d006e163bb154d7886d87a5c2574c58e9867ecec3371cadbc48770dc8f745d1c77eed1672bb713aca464b9bbc23b50000000000000004c635fc08000000152ad1f7fa092703e98f867fefbe1470283d09f6e868f537ce22547d21bd301d757a77633ba27c09072f5127f2f9c0780c6ace813067c43272c56e84c6db276391b2cc83f52156ec61fab5bcd3ca74c584441d7e66b26f24c273716f0b2cce71b2a376dfb4031a386233914d8f5ed727e5f783953de50a", 0xbe) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) sendmsg$auto_NET_SHAPER_CMD_DELETE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16, @ANYBLOB="090027bd7000fbdbdf250200000008000800", @ANYRES32=r7, @ANYBLOB="140001800800020006000000080001"], 0x30}, 0x1, 0x0, 0x0, 0x44000}, 0xc050) sendmsg$auto_ETHTOOL_MSG_RSS_GET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f0000000440)=ANY=[@ANYBLOB="b8000000", @ANYRESOCT=r2, @ANYBLOB="6333b34909fcf78f9ebbba23608edb3f1390244ee698bb08b80b3804f8d2737fa6c31457daac7b2c57e9a5d5aabd9adb467fe5c53956ee65a593facb308913f3f8cd818af2104cea4f0c87c3af387fa9c4e240d29a7cd366c71fea366715545caca27ca6bce39782a975d485ef1af780be08af3f211b33dd4c2a9f67bb4c7daba375e56b1961fc133200ec1a9226302fa7", @ANYRESHEX, @ANYBLOB="1400020077673200000000000000000000000000080003000500000008000100", @ANYRES32=r7, @ANYBLOB="0800030009000000080003000000000008000200fc03000008000200030000003c0001801400422df03702006d61637365633000000000000000000014000200636169663000000000000000000000000800030005000000", @ANYRESDEC, @ANYRES8], 0xb8}, 0x1, 0x0, 0x0, 0x860}, 0x4000810) sendmsg$auto_WG_CMD_SET_DEVICE(r4, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f0000001200)=ANY=[@ANYBLOB, @ANYRES8, @ANYRES32=r6, @ANYBLOB="0c00a3000c00000000000000aa778e0d30e1a3b715cd0b77c8e8cc4a3e0bb9306ef475f35b016954f19b89ed88166d705eb45095672823836f26b89f7e8c4c94c67e92be1d6cea1ebac54999345a8131fb964b67100d8c99ee83a24b1d0281d7b45d5afb2b2b70e9d87cb91fb13a7f96d5ac9b3e0469c48da86e06689ff5dec2c1", @ANYBLOB, @ANYBLOB, @ANYRES32=r7, @ANYBLOB="080007000200000030000400bbc52ea49b18f37b7c5652684e8a39672a7c36562eab63a8cf3db5ce0ea25af1213ad4fee1ca9d3bcda9aed9"], 0x1adc}, 0x1, 0x0, 0x0, 0x4048084}, 0x0) socket(0x10, 0x2, 0x4) r8 = openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/usb/usbmon/9t\x00', 0x0, 0x0) pread64$auto(r8, 0x0, 0x101, 0x103) read$auto_mon_fops_text_t_mon_text(r8, 0x0, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/009/001\x00', 0xa101, 0x0) 1.987821015s ago: executing program 4 (id=3808): mmap$auto(0x0, 0x6, 0x2, 0x40eb2, 0xffffffffffffffff, 0x308000000000) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/rds/tcp/rds_tcp_rcvbuf\x00', 0x141241, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) r1 = socket(0x2, 0x1, 0x0) r2 = getpgrp(0xffffffffffffffff) fcntl$auto_F_SETOWN(r1, 0x8, r2) close_range$auto(0x2, 0x8, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x40342, 0x149) openat$auto_ftrace_event_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/tracing/events/vmalloc/alloc_vmap_area/filter\x00', 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$auto_IPVS_CMD_SET_CONFIG(r3, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={0x1c, r4, 0x1, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040804) r5 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/virtual/block/ram9/diskseq\x00', 0x0, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mlockall$auto(0x7) mmap$auto(0x0, 0x40000b, 0xde, 0x9b72, 0xffffffffffffffff, 0x8000) mlock$auto(0xfbe8, 0x4) read$auto(r6, 0x0, 0x20) writev$auto(r5, &(0x7f0000000200)={0x0, 0xb}, 0x200000003) write$auto(0x3, 0x0, 0x5c8) pwrite64$auto(r0, 0x0, 0x6bc, 0x5) remap_file_pages$auto(0x9, 0x7, 0xba00000, 0xd, 0x0) 1.669322575s ago: executing program 6 (id=3809): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_taskstats(&(0x7f0000000140), r0) sendmsg$auto_TASKSTATS_CMD_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x80, r1, 0xa01, 0x70bd2b, 0x25dfdbfb, {}, [@TASKSTATS_CMD_ATTR_DEREGISTER_CPUMASK={0x69, 0x4, 'N\x10SKSPUATS\x90l\xad#6\xcak\x00g\xea\xa10\xcc\x17S\x8cf\x1d\b\xa6i\xe6\x15\x15\xaff\xd7\xfb|\x18\xb3\xa5\x9bA\xb7D[\'\xda\xd1\xa1h\xa4\x12\x84\x97#\xba\x98i\x06\x9a\xac_\xd8\x91\xeaM\xb3K9\n\xc4R\xf2x\x9dwF$\t\xd6\x82\xa7\xd5\xf2\x16\xf0\\#\x14\xcd&\xa6\xdc\xedr\xa8Bdy'}]}, 0x80}, 0x1, 0x0, 0x100000000000000, 0x4001}, 0x20000000) 1.464040571s ago: executing program 6 (id=3810): socket(0xa, 0x5, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0xa, 0x2, 0x88) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0xa, 0x0) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) fanotify_init$auto(0x65, 0x2) r0 = pipe$auto(0x0) dup2$auto(0x5, 0x4) splice$auto(0x4, 0x0, 0x2, 0x0, 0x80000001, 0x9) socket(0x2000000000000021, 0x2, 0x10000000000002) unlink$auto(0x0) close_range$auto(0x2, 0xa, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x100) socket(0xa, 0x3, 0x3a) setsockopt$auto(0x400000000000003, 0x29, 0xd2, 0x0, 0x567) fanotify_init$auto(0x65, 0x2) pipe$auto(0x0) dup2$auto(0x5, 0x4) splice$auto(r0, 0x0, r0, 0x0, 0x80000001, 0x9) write$auto(0x6, 0x0, 0x100000001) kexec_load$auto(0x2, 0x2, 0x0, 0x80000005) ioctl$auto(0xffffffffffffffff, 0x5646, 0xffffffffffffffff) ioctl$auto(0xffffffffffffffff, 0x2400000, 0xffffffffffffffff) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) openat$auto_iommufd_fops_main(0xffffffffffffff9c, 0x0, 0x80001, 0x0) ppoll$auto(0x0, 0x1c, 0x0, 0x0, 0x8) 1.239443916s ago: executing program 4 (id=3811): openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x1000, 0x0) mmap$auto(0x0, 0x6, 0x10000000000, 0x11, 0x3, 0xfffff000) (fail_nth: 1) 1.004201574s ago: executing program 4 (id=3812): close_range$auto(0x2, 0x8, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000040), 0x101080, 0x0) (async) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000040), 0x101080, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000280), 0x101200, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r1) ioctl$auto_KVM_GET_MSRS(r0, 0x4008ae90, &(0x7f0000000440)={0x3, 0x0, [{0x1, 0x7ff, 0x8}, {0x10002, 0x30, 0x5}]}) (async) ioctl$auto_KVM_GET_MSRS(r0, 0x4008ae90, &(0x7f0000000440)={0x3, 0x0, [{0x1, 0x7ff, 0x8}, {0x10002, 0x30, 0x5}]}) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/bus/pci/drivers/amd5536udc-pci/remove_id\x00', 0x18b941, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/block/loop11/rqos/wbt/min_lat_nsec\x00', 0x200, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) socket(0x23, 0x80805, 0x0) (async) socket(0x23, 0x80805, 0x0) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000080), 0x240001, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/tty12\x00', 0x101840, 0x0) (async) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/tty12\x00', 0x101840, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0) (async) openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/virtual/block/ram9/diskseq\x00', 0x2440, 0x0) r3 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) ioctl$auto(r2, 0x541c, r3) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x5, 0x0) (async) socket(0x1e, 0x5, 0x0) sendto$auto(0x3, 0x0, 0x7b, 0x2, &(0x7f0000000440)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}, 0x1}}, 0x1c) recvmmsg$auto(0x3, &(0x7f0000000100)={{0x0, 0x9, &(0x7f0000000080)={0x0, 0x9}, 0x7, 0x0, 0x1, 0x4}, 0x4}, 0x10000, 0x300, 0x0) (async) recvmmsg$auto(0x3, &(0x7f0000000100)={{0x0, 0x9, &(0x7f0000000080)={0x0, 0x9}, 0x7, 0x0, 0x1, 0x4}, 0x4}, 0x10000, 0x300, 0x0) 424.99232ms ago: executing program 4 (id=3813): mmap$auto(0x0, 0x40009, 0x7, 0x9b72, 0x7, 0x28000) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) io_uring_setup$auto(0x7, 0x0) r0 = open(&(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x80400, 0xb5d1af1605322dfc) open_by_handle_at$auto(r0, &(0x7f0000001280)={0x8, 0x2, "0200000000000000"}, 0x6) openat$auto_loop_ctl_fops_loop(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x3, 0xd, 0x8dc2, 0x0) close_range$auto(0x2, 0x8000, 0x0) socket(0x2, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000140), 0xe0182, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r2) ioctl$auto_KVM_CREATE_VM(r1, 0xc048aeca, 0x0) 0s ago: executing program 4 (id=3814): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) write$auto(r0, &(0x7f0000000040)='//\xf2\x00', 0x80000000) write$auto(r0, 0x0, 0x2) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0xa, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mtrr\x00', 0xc0000, 0x0) ioctl$auto(r1, 0x2, 0x9) ioctl$auto(0x3, 0x400c4d05, r1) ioctl$auto(0x3, 0x400c4d09, r1) getrlimit$auto(0x3, 0x0) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) ioctl$auto_BLKZEROOUT(r2, 0x127f, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000380)='/dev/snd/controlC2\x00', 0x400, 0x0) r3 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f0000001c80)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xc8d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\xc6\x00\x89\te\x8d\a\xfb\\n\x89C:\x84D\x10u\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xff\xf7\x17\xbb\x7f\xea4F\x98\x11\xa6>\x9eh\xad\xd1\x05^E)\xc03P*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k\xee\x1c-){\x04\x00@\xad\x0fa`J?U\x0eb\"\xc7q\xd8\xa9\'\xd9\th\xeb\x03sHO:\xc5\x80\xda\x9aPer^\"\xb0\x85\xdcH\xf7\x06>\x15\xcbn)FU\xd7\xb6\t\x82Va\x19\xa7\xf9-m\x8b<\xee%\xfa$vm9\xd6\x12\x15b\xf5\xad\x8a\xf0K\xaa\xff\xff\xeb\xbf\xd8K\x17\x14\x1ah\xde\xce\xd2\x82\xfd\x11L6\x03\xbe\xcb\xba\xfaN\x96t\xcc\xaa!\x15XHt\x9fe;q\xb9 \x8d\xce8\xd6\xf3\xe8\xb8-\x89s\xb7\xb0?8~\x8d\x81\x00\xccf\x12B\xa9yp%\xe1\xb7\x92\xae\xb3\xcca\xe9\xddD\x02\t`P\xccEI\x17\tB\xf3\x05hc\xe5\xfcaQ\xf5T\xdb^#R~\xb5|\xb3\xf0`\xa4\x1f\xd5\xe8\x04H\x99\x18\'>\xa5|\xc7\x16gb~\xa00G\xaft\xfe\xfd\xc7\x03G,\xcb\xda\x97\xa2D\xf0\xcf\xcai\x90c\x95\x03\xfcE\xa0\xb8/C\xae\xf7:\r\xc74A\xff\x7f\x944\xeb\xb5\xef\x80*\xa3\xd5\xc7f\xda:\x8ae6L\xe55@\xb4\xe4(\x18^\xa90;\b\xa5CmbH\x03\xc8\xd5{\x8ft\x9d.\xae\x0e\x84mp\xcd\xe7v\xc2\"\x9b\xe1\xe1\xee\xf8M\xa3\xef\xf9}\xa1LJ\xb5\xd5\xd2\xd7l\xb1\xb5a\x8c\xf0\xe9\x91\x87K\xa8,\xba&\xa2\x18\xa2y\x7f\xcc\xdf*uK\xa0\xdck\x95z\xbf\x88\x16 \xfe\xa5\xcc)\x87\x91\x81\x13\x1fM\xbd\n\xff\xea\x1c\xbaD/\x81\x10\xa8\xbe\xc1\xae\x0e%\xaf\x9d=\x00\t\xd9\xc4\xe2\x7f\x87o0\xe1\x13\xc49\x9c?G\x18\xf2\xe2:\x88\f\x93l\t\x12\"\"\xa4RK\xdbW\xd3T\xde\x153Q\x062\xc92\x84\x89=o\"H\xf5L\x01\xce\x991z\xbfL\b\x04\xc9\x0f\\\xfa/\x8bK\xae\xb4*tR\x1e\xcc\xc8s\xc1\xd7B\xe6\tQ\x86M\xdb\x90\t\xbfC\x9c\\^\fU\xef\x84\x9c\xd9\x91\xeb$5\x13\xfa\xdb\x9d_r\xc8\xbd\x85&p\xa8\x13\x1dlH\x9f\xaa\x15fm\xbbM2I*\x8a:\x01\x98\xf5m\x12^\xd4|9bh\xa6\xb3\"\xd9\xf5V\xae\xa2\xe7\xd6\xe3cs\xaag\xb0\x16\x99Q\xa0\xb4W\xc4\x00T\x94\xb5\x82\xd3\xd6Y\xb1\xa8\xe8\x03h\xca>R\xdb\x8b\xe8\xdc\xc1i.\xb0\xdf\xd1\xa9\x86m\xf8\xdf\xec\x8c\xe0\x02^e\n\x7f\xf5\x01\xebC\x0f&!mG`\"\x1aH\x01\xe0\x02\xf8K\xf6\x99\n^\xc5bB\x1f\x96\xa91\x9a\xdbg\xf6\x98', 0x100000a3d9) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x8ea182, 0x0) sendfile$auto(0xffffffffffffffff, 0x3, 0x0, 0x400000000004) syz_genetlink_get_family_id$auto_ipvs(&(0x7f00000001c0), r3) shmctl$auto_IPC_STAT(0x5, 0x2, &(0x7f0000000280)={{0xfffffff8, 0x0, 0x0, 0x6, 0x3ff, 0x6, 0x1d25}, 0x9d98, 0x6, 0x1f, 0x100000000, @inferred=0xffffffffffffffff, @raw=0x3, 0x5, 0x0, &(0x7f00000003c0)="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", &(0x7f0000000200)="a0947ad2d13d4aa2be1f31d1b4c13d1466d7d085ae03d98af938c38e2d5a3fb6db4af195279edc48200fae21c8b3983b000b9c542723057afbbc471e9357c57d0913d5a9014a5ef3a2eb875c5753ec86d4ba7948dd372bc65a2798006fecab9875550af5daa44424a75979c3"}) r5 = syz_clone(0x510a2080, 0x0, 0x1f, 0x0, 0x0, 0x0) ptrace$auto(0x10, r5, 0x1, 0x7ff) ptrace$auto(0x18, r5, 0x90, 0x2) sendmsg$auto_IPVS_CMD_SET_SERVICE(r3, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000300)={&(0x7f0000001fc0)=ANY=[@ANYBLOB="68050000", @ANYRES16=r5, @ANYBLOB="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", @ANYRES32=r4, @ANYBLOB="030707e54671bd14333184d62292c2f308457d9cf17d6912dab297585b56a7882557fae09fb1bca9894a14c60c5f1c1b186f906f595696dee5bafbaf27adf5890bf6d6141b585b8bfd9d26df2c1422afa1eb359778f833a7e672f3c12019c83084cab26eca9eae81ede7bed284d88a7c7b379ebe295cb0817f83c9052f8c20e829221ed1110925402e35ab83fe4b939e6bcb30801aff10216daf2cf759c46d85001c4737c281a1e87a160fe775b97f35e824243a7a0c713034e8dee676cd3db80d694255e3c25a25d2c66f2cf1e7c3096f15cea149757c5bd26e12c8f76c0800e8aba2f4ec368b5f57b5f7ed6095bdfa8fc383b922d6db162c9406fcd6b53957f58b59de4b629a8e71c757e364ed30d7e4210c60180c4d1234d8c79a089406e390244fd8bd6dd4fa23661bf31b141ca5d241050e7f290b53a65a2fd4afe415c0b2de9deded7c114a4d3424833cb8b4f1c7871f6345c22212aca5e7aea1df0800480046d5cf3136a717a3b52e9ad70174e3b9e1627b290d526bb9c01d5f604d080efb62ce0c43862589ae8c7f4e712003be799b0f4a6dee4d3b0034fb2b6afd3d46e114daaf608a984e68b84d919d00c8745b20b0ddfe4c638ed2d591b8cd4aac8dc60dd0227d9d453d4222cad107dbc16ff2bb682fcda298f1948eb2efb7551d1e7c00f43b5c39f9ef351e5d7a7d6492dc676d01e90f554c8f50a473016d8a685cf12d907cd98000b25535cbd3c3afc0dc83fa3749b4a293a90dbd1eed0f3c84dd91416d94e14a", @ANYRES32=r5, @ANYBLOB="9502cb104b5e18bdd5b78ac540f5feda3a62f891cb3aa74d280a6c8c87ebb93f53fffa663362ba89e2fb92681cabbd1f505dbeffd2e509a48873fc2bd3946abad6609235d443ce0e3430b3f1870cbc1b3f7bd88851259d8c96703db8f99968c3e9f743dfabcf6826c70e93413add47b0c3f69157b4f22e09bb86b833e6b84fcfec9ddb89aa0d7d000000bd2aa6fbb7b60e93af69838989df5001bff3ae1a76991f50c685a2b08ebb7792560ac219a2a0242ecce41b695bd073e0d9dbf57c64ddd9e04d27d27bba8da4139b908ed3148ce7dba766ae9166bc51ab69a59432cbca228c7cc8c90c5d5c86a18f1ae7c98ffe28becf3bca9bbc0b6b005b5f8415d09e1c08dad244a7f2efe8850b1419d09186890000000800040002000000"], 0x568}, 0x1, 0x0, 0x0, 0x4000}, 0x4048000) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x1000, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) init_module$auto(0x0, 0xffff9, 0x0) madvise$auto(0x0, 0x8000000000000000, 0x15) madvise$auto(0x91, 0x401, 0x9) close_range$auto(0x2, 0x8, 0x0) kernel console output (not intermixed with test programs): _pages_noprof+0x131/0x390 [ 1018.617188][T18503] anon_pipe_write+0xabf/0x1d40 [ 1018.617235][T18503] ? __pfx_anon_pipe_write+0x10/0x10 [ 1018.617269][T18503] ? common_file_perm+0x1ab/0x4f0 [ 1018.617309][T18503] ? bpf_lsm_file_permission+0x9/0x10 [ 1018.617344][T18503] ? security_file_permission+0x76/0x210 [ 1018.617382][T18503] ? rw_verify_area+0xce/0x6d0 [ 1018.617416][T18503] vfs_write+0x6ac/0x1070 [ 1018.617451][T18503] ? __pfx_anon_pipe_write+0x10/0x10 [ 1018.617489][T18503] ? __pfx_vfs_write+0x10/0x10 [ 1018.617521][T18503] ? find_held_lock+0x2b/0x80 [ 1018.617575][T18503] ksys_write+0x1f8/0x250 [ 1018.617609][T18503] ? __pfx_ksys_write+0x10/0x10 [ 1018.617652][T18503] do_syscall_64+0x106/0xf80 [ 1018.617682][T18503] ? clear_bhb_loop+0x40/0x90 [ 1018.617712][T18503] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1018.617736][T18503] RIP: 0033:0x7fe5fc19c629 [ 1018.617756][T18503] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1018.617780][T18503] RSP: 002b:00007fe5fcfc4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1018.617803][T18503] RAX: ffffffffffffffda RBX: 00007fe5fc416180 RCX: 00007fe5fc19c629 [ 1018.617819][T18503] RDX: 0000000100000001 RSI: 0000000000000000 RDI: 0000000000000006 [ 1018.617834][T18503] RBP: 00007fe5fcfc4090 R08: 0000000000000000 R09: 0000000000000000 [ 1018.617849][T18503] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1018.617863][T18503] R13: 00007fe5fc416218 R14: 00007fe5fc416180 R15: 00007ffe574092e8 [ 1018.617894][T18503] [ 1020.726829][T18513] misc userio: Invalid payload size [ 1021.859968][T18524] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2920'. [ 1021.926914][T18524] veth0_macvtap: left promiscuous mode [ 1021.993499][T18524] macvtap0: entered promiscuous mode [ 1022.019982][T18524] macvtap0: entered allmulticast mode [ 1022.051479][ T29] audit: type=1326 audit(4294967849.597:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18528 comm="syz.3.2923" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3c74b9c629 code=0x0 [ 1022.210922][T18532] random: crng reseeded on system resumption [ 1022.288136][ T5826] Bluetooth: hci4: ISO packet for unknown connection handle 0 [ 1023.473826][T18556] FAULT_INJECTION: forcing a failure. [ 1023.473826][T18556] name failslab, interval 1, probability 0, space 0, times 0 [ 1023.586436][T18556] CPU: 0 UID: 0 PID: 18556 Comm: syz.0.2929 Tainted: G L syzkaller #0 PREEMPT(full) [ 1023.586474][T18556] Tainted: [L]=SOFTLOCKUP [ 1023.586482][T18556] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1023.586497][T18556] Call Trace: [ 1023.586505][T18556] [ 1023.586515][T18556] dump_stack_lvl+0x100/0x190 [ 1023.586554][T18556] should_fail_ex.cold+0x5/0xa [ 1023.586581][T18556] should_failslab+0xc2/0x120 [ 1023.586619][T18556] __kmalloc_cache_noprof+0x7a/0x6f0 [ 1023.586647][T18556] ? proc_thread_self_get_link+0x1a6/0x210 [ 1023.586685][T18556] proc_thread_self_get_link+0x1a6/0x210 [ 1023.586719][T18556] pick_link+0xac2/0x13c0 [ 1023.586749][T18556] ? __pfx_proc_thread_self_get_link+0x10/0x10 [ 1023.586785][T18556] step_into_slowpath+0x9ba/0xf90 [ 1023.586823][T18556] ? __pfx_step_into_slowpath+0x10/0x10 [ 1023.586859][T18556] ? lookup_fast+0x2da/0x600 [ 1023.586888][T18556] ? inode_permission+0x374/0x620 [ 1023.586919][T18556] link_path_walk+0xf28/0x1cc0 [ 1023.586961][T18556] path_openat+0x1be/0x31a0 [ 1023.586996][T18556] ? kasan_save_stack+0x3f/0x50 [ 1023.587028][T18556] ? kasan_save_stack+0x30/0x50 [ 1023.587059][T18556] ? kasan_save_track+0x14/0x30 [ 1023.587092][T18556] ? kmem_cache_alloc_noprof+0x241/0x6e0 [ 1023.587131][T18556] ? __pfx_path_openat+0x10/0x10 [ 1023.587179][T18556] do_file_open+0x20e/0x430 [ 1023.587227][T18556] ? __pfx_do_file_open+0x10/0x10 [ 1023.587286][T18556] ? alloc_fd+0x476/0x790 [ 1023.587326][T18556] ? do_getname+0x191/0x390 [ 1023.587354][T18556] do_sys_openat2+0x10d/0x1e0 [ 1023.587383][T18556] ? __pfx_do_sys_openat2+0x10/0x10 [ 1023.587422][T18556] __x64_sys_openat+0x12d/0x210 [ 1023.587451][T18556] ? __pfx___x64_sys_openat+0x10/0x10 [ 1023.587496][T18556] do_syscall_64+0x106/0xf80 [ 1023.587520][T18556] ? clear_bhb_loop+0x40/0x90 [ 1023.587549][T18556] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1023.587573][T18556] RIP: 0033:0x7f0b3cf5cece [ 1023.587592][T18556] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1023.587616][T18556] RSP: 002b:00007f0b3b1d4f98 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1023.587638][T18556] RAX: ffffffffffffffda RBX: 00007f0b3b1d56c0 RCX: 00007f0b3cf5cece [ 1023.587654][T18556] RDX: 0000000000000002 RSI: 00007f0b3d032440 RDI: ffffffffffffff9c [ 1023.587669][T18556] RBP: 00007f0b3d032b39 R08: 0000000000000000 R09: 0000000000000000 [ 1023.587684][T18556] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 1023.587698][T18556] R13: 00007f0b3d216128 R14: 00007f0b3d216090 R15: 00007ffc44dd0308 [ 1023.587728][T18556] [ 1024.588733][T18568] random: crng reseeded on system resumption [ 1024.670564][ T5826] Bluetooth: hci0: ISO packet for unknown connection handle 0 [ 1025.263801][T18579] FAULT_INJECTION: forcing a failure. [ 1025.263801][T18579] name failslab, interval 1, probability 0, space 0, times 0 [ 1025.333468][T18579] CPU: 0 UID: 0 PID: 18579 Comm: syz.2.2937 Tainted: G L syzkaller #0 PREEMPT(full) [ 1025.333508][T18579] Tainted: [L]=SOFTLOCKUP [ 1025.333517][T18579] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1025.333533][T18579] Call Trace: [ 1025.333541][T18579] [ 1025.333551][T18579] dump_stack_lvl+0x100/0x190 [ 1025.333590][T18579] should_fail_ex.cold+0x5/0xa [ 1025.333619][T18579] should_failslab+0xc2/0x120 [ 1025.333658][T18579] __kmalloc_node_track_caller_noprof+0xe3/0x850 [ 1025.333696][T18579] ? parse_pred+0x2d4/0x3070 [ 1025.333736][T18579] kmemdup_nul+0x49/0xd0 [ 1025.333773][T18579] parse_pred+0x2d4/0x3070 [ 1025.333821][T18579] ? __pfx_parse_pred+0x10/0x10 [ 1025.333867][T18579] ? rcu_is_watching+0x12/0xc0 [ 1025.333903][T18579] ? trace_kmalloc+0x101/0x130 [ 1025.333927][T18579] ? __kmalloc_noprof+0x320/0x850 [ 1025.333967][T18579] process_preds+0x6a0/0x1e10 [ 1025.334008][T18579] ? create_filter_start.constprop.0+0x134/0x310 [ 1025.334049][T18579] create_filter+0x140/0x210 [ 1025.334099][T18579] ? __pfx_create_filter+0x10/0x10 [ 1025.334139][T18579] ? find_held_lock+0x2b/0x80 [ 1025.334181][T18579] apply_event_filter+0x220/0x500 [ 1025.334220][T18579] ? __pfx_apply_event_filter+0x10/0x10 [ 1025.334266][T18579] event_filter_write+0x16d/0x290 [ 1025.334295][T18579] vfs_write+0x2aa/0x1070 [ 1025.334332][T18579] ? __pfx_event_filter_write+0x10/0x10 [ 1025.334361][T18579] ? __pfx_vfs_write+0x10/0x10 [ 1025.334397][T18579] ? __fget_files+0x215/0x3d0 [ 1025.334440][T18579] ? __fget_files+0x21f/0x3d0 [ 1025.334484][T18579] ksys_write+0x12a/0x250 [ 1025.334519][T18579] ? __pfx_ksys_write+0x10/0x10 [ 1025.334564][T18579] do_syscall_64+0x106/0xf80 [ 1025.334591][T18579] ? clear_bhb_loop+0x40/0x90 [ 1025.334622][T18579] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1025.334646][T18579] RIP: 0033:0x7fe86fb9c629 [ 1025.334668][T18579] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1025.334693][T18579] RSP: 002b:00007fe870aa6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1025.334717][T18579] RAX: ffffffffffffffda RBX: 00007fe86fe15fa0 RCX: 00007fe86fb9c629 [ 1025.334734][T18579] RDX: 00000000000005c8 RSI: 0000000000000000 RDI: 0000000000000003 [ 1025.334749][T18579] RBP: 00007fe86fc32b39 R08: 0000000000000000 R09: 0000000000000000 [ 1025.334764][T18579] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1025.334779][T18579] R13: 00007fe86fe16038 R14: 00007fe86fe15fa0 R15: 00007ffc7d3118f8 [ 1025.334810][T18579] [ 1026.249751][T18582] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2935'. [ 1027.570303][T18605] FAULT_INJECTION: forcing a failure. [ 1027.570303][T18605] name failslab, interval 1, probability 0, space 0, times 0 [ 1027.712183][T18605] CPU: 0 UID: 0 PID: 18605 Comm: syz.0.2942 Tainted: G L syzkaller #0 PREEMPT(full) [ 1027.712223][T18605] Tainted: [L]=SOFTLOCKUP [ 1027.712232][T18605] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1027.712247][T18605] Call Trace: [ 1027.712257][T18605] [ 1027.712267][T18605] dump_stack_lvl+0x100/0x190 [ 1027.712307][T18605] should_fail_ex.cold+0x5/0xa [ 1027.712335][T18605] should_failslab+0xc2/0x120 [ 1027.712375][T18605] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1027.712409][T18605] ? __anon_vma_prepare+0xae/0x5e0 [ 1027.712445][T18605] __anon_vma_prepare+0xae/0x5e0 [ 1027.712474][T18605] ? do_raw_spin_lock+0x128/0x260 [ 1027.712512][T18605] __vmf_anon_prepare+0x11f/0x250 [ 1027.712540][T18605] do_huge_pmd_anonymous_page+0x15c/0x1a60 [ 1027.712577][T18605] ? __pmd_alloc+0x6aa/0x9c0 [ 1027.712604][T18605] __handle_mm_fault+0x1e9e/0x2b60 [ 1027.712639][T18605] ? mt_find+0x45e/0x8e0 [ 1027.712669][T18605] ? __pfx___handle_mm_fault+0x10/0x10 [ 1027.712698][T18605] ? __pfx_mt_find+0x10/0x10 [ 1027.712750][T18605] handle_mm_fault+0x36d/0xa20 [ 1027.712786][T18605] __get_user_pages+0xf9c/0x34d0 [ 1027.712832][T18605] ? __pfx___get_user_pages+0x10/0x10 [ 1027.712866][T18605] populate_vma_page_range+0x267/0x3f0 [ 1027.712895][T18605] ? __pfx_populate_vma_page_range+0x10/0x10 [ 1027.712921][T18605] ? __pfx_find_vma_intersection+0x10/0x10 [ 1027.712963][T18605] ? do_mmap+0x93f/0x12f0 [ 1027.712990][T18605] __mm_populate+0x107/0x3a0 [ 1027.713018][T18605] ? __pfx___mm_populate+0x10/0x10 [ 1027.713047][T18605] ? up_write+0x290/0x4f0 [ 1027.713083][T18605] vm_mmap_pgoff+0x37f/0x470 [ 1027.713111][T18605] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 1027.713144][T18605] ? do_futex+0x192/0x350 [ 1027.713175][T18605] ? __pfx_do_futex+0x10/0x10 [ 1027.713211][T18605] ksys_mmap_pgoff+0xe1/0x650 [ 1027.713267][T18605] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 1027.713306][T18605] ? xfd_validate_state+0x129/0x190 [ 1027.713344][T18605] __x64_sys_mmap+0x125/0x190 [ 1027.713381][T18605] do_syscall_64+0x106/0xf80 [ 1027.713405][T18605] ? clear_bhb_loop+0x40/0x90 [ 1027.713434][T18605] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1027.713458][T18605] RIP: 0033:0x7f0b3cf9c629 [ 1027.713478][T18605] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1027.713502][T18605] RSP: 002b:00007f0b3b1f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1027.713526][T18605] RAX: ffffffffffffffda RBX: 00007f0b3d215fa0 RCX: 00007f0b3cf9c629 [ 1027.713543][T18605] RDX: 00000000000000df RSI: 0000000000400008 RDI: 0000000000000000 [ 1027.713558][T18605] RBP: 00007f0b3d032b39 R08: 0000000000000002 R09: 0000000000008000 [ 1027.713573][T18605] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 1027.713588][T18605] R13: 00007f0b3d216038 R14: 00007f0b3d215fa0 R15: 00007ffc44dd0308 [ 1027.713618][T18605] [ 1028.770158][T18612] FAULT_INJECTION: forcing a failure. [ 1028.770158][T18612] name failslab, interval 1, probability 0, space 0, times 0 [ 1028.820891][T18614] random: crng reseeded on system resumption [ 1028.857360][T18612] CPU: 0 UID: 0 PID: 18612 Comm: syz.4.2944 Tainted: G L syzkaller #0 PREEMPT(full) [ 1028.857400][T18612] Tainted: [L]=SOFTLOCKUP [ 1028.857409][T18612] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1028.857424][T18612] Call Trace: [ 1028.857433][T18612] [ 1028.857443][T18612] dump_stack_lvl+0x100/0x190 [ 1028.857482][T18612] should_fail_ex.cold+0x5/0xa [ 1028.857509][T18612] should_failslab+0xc2/0x120 [ 1028.857549][T18612] __kmalloc_cache_noprof+0x7a/0x6f0 [ 1028.857579][T18612] ? call_usermodehelper_setup+0xaf/0x360 [ 1028.857620][T18612] ? __pfx_free_modprobe_argv+0x10/0x10 [ 1028.857653][T18612] call_usermodehelper_setup+0xaf/0x360 [ 1028.857696][T18612] __request_module+0x3c7/0x6c0 [ 1028.857729][T18612] ? __pfx___request_module+0x10/0x10 [ 1028.857821][T18612] ? find_held_lock+0x2b/0x80 [ 1028.857859][T18612] ? inet6_create+0xba3/0x12b0 [ 1028.857892][T18612] inet6_create+0xd69/0x12b0 [ 1028.857919][T18612] ? inet6_create+0x7f/0x12b0 [ 1028.857948][T18612] __sock_create+0x339/0x860 [ 1028.857988][T18612] __sys_socket+0x14d/0x260 [ 1028.858024][T18612] ? __pfx___sys_socket+0x10/0x10 [ 1028.858067][T18612] __x64_sys_socket+0x72/0xb0 [ 1028.858102][T18612] ? lockdep_hardirqs_on+0x78/0x100 [ 1028.858128][T18612] do_syscall_64+0x106/0xf80 [ 1028.858154][T18612] ? clear_bhb_loop+0x40/0x90 [ 1028.858184][T18612] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1028.858209][T18612] RIP: 0033:0x7fe5fc19c629 [ 1028.858230][T18612] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1028.858255][T18612] RSP: 002b:00007fe5fd006028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1028.858278][T18612] RAX: ffffffffffffffda RBX: 00007fe5fc415fa0 RCX: 00007fe5fc19c629 [ 1028.858295][T18612] RDX: 0000000000000011 RSI: 0000000000000001 RDI: 000000000000000a [ 1028.858310][T18612] RBP: 00007fe5fc232b39 R08: 0000000000000000 R09: 0000000000000000 [ 1028.858326][T18612] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1028.858341][T18612] R13: 00007fe5fc416038 R14: 00007fe5fc415fa0 R15: 00007ffe574092e8 [ 1028.858372][T18612] [ 1029.395158][ T5826] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 1030.450840][T18635] FAULT_INJECTION: forcing a failure. [ 1030.450840][T18635] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1030.560179][T18635] CPU: 0 UID: 0 PID: 18635 Comm: syz.4.2949 Tainted: G L syzkaller #0 PREEMPT(full) [ 1030.560218][T18635] Tainted: [L]=SOFTLOCKUP [ 1030.560226][T18635] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1030.560241][T18635] Call Trace: [ 1030.560250][T18635] [ 1030.560259][T18635] dump_stack_lvl+0x100/0x190 [ 1030.560298][T18635] should_fail_ex.cold+0x5/0xa [ 1030.560324][T18635] _copy_to_user+0x32/0xd0 [ 1030.560362][T18635] simple_read_from_buffer+0xcb/0x170 [ 1030.560399][T18635] proc_fail_nth_read+0x1af/0x230 [ 1030.560425][T18635] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1030.560453][T18635] ? rw_verify_area+0xce/0x6d0 [ 1030.560483][T18635] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1030.560508][T18635] vfs_read+0x1e4/0xb30 [ 1030.560545][T18635] ? __pfx_vfs_read+0x10/0x10 [ 1030.560587][T18635] ? __fget_files+0x215/0x3d0 [ 1030.560629][T18635] ? __fget_files+0x21f/0x3d0 [ 1030.560672][T18635] ksys_read+0x12a/0x250 [ 1030.560705][T18635] ? __pfx_ksys_read+0x10/0x10 [ 1030.560738][T18635] ? arch_syscall_is_vdso_sigreturn+0xb6/0x200 [ 1030.560769][T18635] ? syscall_user_dispatch+0x76/0x130 [ 1030.560805][T18635] do_syscall_64+0x106/0xf80 [ 1030.560831][T18635] ? clear_bhb_loop+0x40/0x90 [ 1030.560859][T18635] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1030.560883][T18635] RIP: 0033:0x7fe5fc15cece [ 1030.560903][T18635] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1030.560926][T18635] RSP: 002b:00007fe5fd005fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1030.560949][T18635] RAX: ffffffffffffffda RBX: 00007fe5fd0066c0 RCX: 00007fe5fc15cece [ 1030.560970][T18635] RDX: 000000000000000f RSI: 00007fe5fd0060a0 RDI: 0000000000000007 [ 1030.560984][T18635] RBP: 00007fe5fd006090 R08: 0000000000000000 R09: 0000000000000000 [ 1030.560998][T18635] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1030.561012][T18635] R13: 00007fe5fc416038 R14: 00007fe5fc415fa0 R15: 00007ffe574092e8 [ 1030.561043][T18635] [ 1031.644568][T18658] FAULT_INJECTION: forcing a failure. [ 1031.644568][T18658] name failslab, interval 1, probability 0, space 0, times 0 [ 1031.736544][T18658] CPU: 0 UID: 0 PID: 18658 Comm: syz.0.2952 Tainted: G L syzkaller #0 PREEMPT(full) [ 1031.736584][T18658] Tainted: [L]=SOFTLOCKUP [ 1031.736593][T18658] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1031.736608][T18658] Call Trace: [ 1031.736617][T18658] [ 1031.736627][T18658] dump_stack_lvl+0x100/0x190 [ 1031.736669][T18658] should_fail_ex.cold+0x5/0xa [ 1031.736697][T18658] should_failslab+0xc2/0x120 [ 1031.736744][T18658] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1031.736778][T18658] ? alloc_empty_file+0x55/0x1c0 [ 1031.736812][T18658] alloc_empty_file+0x55/0x1c0 [ 1031.736841][T18658] alloc_file_pseudo+0x13a/0x230 [ 1031.736871][T18658] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 1031.736908][T18658] __shmem_file_setup+0x221/0x490 [ 1031.736941][T18658] ? __pfx___shmem_file_setup+0x10/0x10 [ 1031.736977][T18658] ? vm_area_alloc+0x1f/0x160 [ 1031.737010][T18658] shmem_zero_setup+0x96/0x1b0 [ 1031.737048][T18658] __mmap_region+0x2198/0x29e0 [ 1031.737086][T18658] ? __pfx___mmap_region+0x10/0x10 [ 1031.737119][T18658] ? update_cfs_rq_load_avg+0x51/0x550 [ 1031.737174][T18658] ? sched_clock+0x38/0x60 [ 1031.737218][T18658] ? lockdep_hardirqs_on+0x78/0x100 [ 1031.737245][T18658] ? finish_task_switch.isra.0+0x205/0xb80 [ 1031.737272][T18658] ? rcu_is_watching+0x12/0xc0 [ 1031.737343][T18658] ? rcu_is_watching+0x12/0xc0 [ 1031.737379][T18658] ? cap_capable+0x107/0x460 [ 1031.737414][T18658] mmap_region+0x180/0x3e0 [ 1031.737454][T18658] do_mmap+0xc63/0x12f0 [ 1031.737483][T18658] ? __pfx_do_mmap+0x10/0x10 [ 1031.737507][T18658] ? __pfx_down_write_killable+0x10/0x10 [ 1031.737545][T18658] vm_mmap_pgoff+0x29e/0x470 [ 1031.737575][T18658] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 1031.737602][T18658] ? do_futex+0x192/0x350 [ 1031.737632][T18658] ? __pfx_do_futex+0x10/0x10 [ 1031.737668][T18658] ksys_mmap_pgoff+0xe1/0x650 [ 1031.737708][T18658] ? __x64_sys_futex+0x34f/0x4d0 [ 1031.737744][T18658] ? __x64_sys_futex+0x358/0x4d0 [ 1031.737776][T18658] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 1031.737816][T18658] ? xfd_validate_state+0x129/0x190 [ 1031.737857][T18658] __x64_sys_mmap+0x125/0x190 [ 1031.737895][T18658] do_syscall_64+0x106/0xf80 [ 1031.737921][T18658] ? clear_bhb_loop+0x40/0x90 [ 1031.737951][T18658] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1031.737977][T18658] RIP: 0033:0x7f0b3cf9c629 [ 1031.737998][T18658] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1031.738023][T18658] RSP: 002b:00007f0b3b1f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1031.738045][T18658] RAX: ffffffffffffffda RBX: 00007f0b3d215fa0 RCX: 00007f0b3cf9c629 [ 1031.738062][T18658] RDX: 00000000000000df RSI: 000000000000e983 RDI: 0000000000000000 [ 1031.738077][T18658] RBP: 00007f0b3d032b39 R08: 0000000000000401 R09: 0000000000008000 [ 1031.738093][T18658] R10: 0000000000000eb1 R11: 0000000000000246 R12: 0000000000000000 [ 1031.738108][T18658] R13: 00007f0b3d216038 R14: 00007f0b3d215fa0 R15: 00007ffc44dd0308 [ 1031.738140][T18658] [ 1032.392151][T18663] random: crng reseeded on system resumption [ 1032.497049][ T5826] Bluetooth: hci2: Received unexpected HCI Event 0x00 [ 1033.620251][T18688] tipc: Started in network mode [ 1033.646333][T18688] tipc: Node identity ee00, cluster identity 4711 [ 1033.734175][T18688] tipc: Node number set to 60928 [ 1033.803692][T18688] FAULT_INJECTION: forcing a failure. [ 1033.803692][T18688] name failslab, interval 1, probability 0, space 0, times 0 [ 1033.884462][T18688] CPU: 0 UID: 0 PID: 18688 Comm: syz.3.2960 Tainted: G L syzkaller #0 PREEMPT(full) [ 1033.884502][T18688] Tainted: [L]=SOFTLOCKUP [ 1033.884512][T18688] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1033.884527][T18688] Call Trace: [ 1033.884535][T18688] [ 1033.884546][T18688] dump_stack_lvl+0x100/0x190 [ 1033.884586][T18688] should_fail_ex.cold+0x5/0xa [ 1033.884614][T18688] should_failslab+0xc2/0x120 [ 1033.884656][T18688] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1033.884690][T18688] ? security_inode_alloc+0x3b/0x2c0 [ 1033.884724][T18688] ? lockdep_init_map_type+0x5c/0x250 [ 1033.884760][T18688] security_inode_alloc+0x3b/0x2c0 [ 1033.884795][T18688] inode_init_always_gfp+0xced/0x1040 [ 1033.884839][T18688] alloc_inode+0x8e/0x250 [ 1033.884868][T18688] new_inode+0x22/0x1c0 [ 1033.884900][T18688] shmem_get_inode+0x212/0x1040 [ 1033.884934][T18688] ? __pfx_shmem_get_inode+0x10/0x10 [ 1033.884962][T18688] ? rcu_is_watching+0x12/0xc0 [ 1033.884997][T18688] ? percpu_counter_add_batch+0xb9/0x230 [ 1033.885043][T18688] __shmem_file_setup+0x3ac/0x490 [ 1033.885074][T18688] ? __pfx___shmem_file_setup+0x10/0x10 [ 1033.885110][T18688] ? vm_area_alloc+0x1f/0x160 [ 1033.885143][T18688] shmem_zero_setup+0x96/0x1b0 [ 1033.885181][T18688] __mmap_region+0x2198/0x29e0 [ 1033.885218][T18688] ? __pfx___mmap_region+0x10/0x10 [ 1033.885288][T18688] ? sched_clock+0x38/0x60 [ 1033.885333][T18688] ? lockdep_hardirqs_on+0x78/0x100 [ 1033.885360][T18688] ? finish_task_switch.isra.0+0x205/0xb80 [ 1033.885386][T18688] ? rcu_is_watching+0x12/0xc0 [ 1033.885457][T18688] ? rcu_is_watching+0x12/0xc0 [ 1033.885492][T18688] ? cap_capable+0x107/0x460 [ 1033.885527][T18688] mmap_region+0x180/0x3e0 [ 1033.885566][T18688] do_mmap+0xc63/0x12f0 [ 1033.885595][T18688] ? __pfx_do_mmap+0x10/0x10 [ 1033.885622][T18688] ? __pfx_down_write_killable+0x10/0x10 [ 1033.885660][T18688] vm_mmap_pgoff+0x29e/0x470 [ 1033.885689][T18688] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 1033.885716][T18688] ? do_futex+0x192/0x350 [ 1033.885746][T18688] ? __pfx_do_futex+0x10/0x10 [ 1033.885782][T18688] ksys_mmap_pgoff+0xe1/0x650 [ 1033.885822][T18688] ? __x64_sys_futex+0x34f/0x4d0 [ 1033.885851][T18688] ? __x64_sys_futex+0x358/0x4d0 [ 1033.885882][T18688] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 1033.885922][T18688] ? xfd_validate_state+0x129/0x190 [ 1033.885962][T18688] __x64_sys_mmap+0x125/0x190 [ 1033.886000][T18688] do_syscall_64+0x106/0xf80 [ 1033.886025][T18688] ? clear_bhb_loop+0x40/0x90 [ 1033.886056][T18688] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1033.886081][T18688] RIP: 0033:0x7f3c74b9c629 [ 1033.886101][T18688] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1033.886126][T18688] RSP: 002b:00007f3c72db4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1033.886150][T18688] RAX: ffffffffffffffda RBX: 00007f3c74e16180 RCX: 00007f3c74b9c629 [ 1033.886167][T18688] RDX: 00000000000000df RSI: 000000000000e983 RDI: 0000000000000000 [ 1033.886182][T18688] RBP: 00007f3c74c32b39 R08: 0000000000000401 R09: 0000000000008000 [ 1033.886198][T18688] R10: 0000000000000eb1 R11: 0000000000000246 R12: 0000000000000000 [ 1033.886213][T18688] R13: 00007f3c74e16218 R14: 00007f3c74e16180 R15: 00007fff2e2e5e48 [ 1033.886246][T18688] [ 1035.414639][T18719] FAULT_INJECTION: forcing a failure. [ 1035.414639][T18719] name failslab, interval 1, probability 0, space 0, times 0 [ 1035.462802][T18719] CPU: 0 UID: 0 PID: 18719 Comm: syz.3.2970 Tainted: G L syzkaller #0 PREEMPT(full) [ 1035.462841][T18719] Tainted: [L]=SOFTLOCKUP [ 1035.462849][T18719] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1035.462863][T18719] Call Trace: [ 1035.462871][T18719] [ 1035.462880][T18719] dump_stack_lvl+0x100/0x190 [ 1035.462920][T18719] should_fail_ex.cold+0x5/0xa [ 1035.462946][T18719] ? tomoyo_realpath_from_path+0xb6/0x690 [ 1035.462970][T18719] should_failslab+0xc2/0x120 [ 1035.463008][T18719] __kmalloc_noprof+0xe0/0x850 [ 1035.463047][T18719] tomoyo_realpath_from_path+0xb6/0x690 [ 1035.463078][T18719] tomoyo_path_number_perm+0x23c/0x580 [ 1035.463127][T18719] ? tomoyo_path_number_perm+0x22e/0x580 [ 1035.463168][T18719] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1035.463231][T18719] ? find_held_lock+0x2b/0x80 [ 1035.463268][T18719] ? __fget_files+0x215/0x3d0 [ 1035.463301][T18719] ? hook_file_ioctl_common+0x146/0x410 [ 1035.463342][T18719] ? __fget_files+0x21f/0x3d0 [ 1035.463381][T18719] security_file_ioctl+0xd3/0x230 [ 1035.463424][T18719] __x64_sys_ioctl+0xb7/0x210 [ 1035.463457][T18719] do_syscall_64+0x106/0xf80 [ 1035.463482][T18719] ? clear_bhb_loop+0x40/0x90 [ 1035.463511][T18719] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1035.463537][T18719] RIP: 0033:0x7f3c74b9c629 [ 1035.463557][T18719] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1035.463581][T18719] RSP: 002b:00007f3c72df6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1035.463603][T18719] RAX: ffffffffffffffda RBX: 00007f3c74e15fa0 RCX: 00007f3c74b9c629 [ 1035.463619][T18719] RDX: 0000200000000040 RSI: 0000000080085504 RDI: 0000000000000003 [ 1035.463634][T18719] RBP: 00007f3c72df6090 R08: 0000000000000000 R09: 0000000000000000 [ 1035.463648][T18719] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1035.463662][T18719] R13: 00007f3c74e16038 R14: 00007f3c74e15fa0 R15: 00007fff2e2e5e48 [ 1035.463693][T18719] [ 1035.466151][T18719] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1035.967742][T18723] netlink: 'syz.0.2971': attribute type 1 has an invalid length. [ 1036.627994][ T29] audit: type=1804 audit(4294968375.181:16): pid=18729 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.2972" name="/newroot/134/file0" dev="tmpfs" ino=715 res=1 errno=0 [ 1036.752487][ T29] audit: type=1804 audit(4294968375.241:17): pid=18730 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.2972" name="/newroot/134/file0" dev="tmpfs" ino=715 res=1 errno=0 [ 1037.252478][T18739] FAULT_INJECTION: forcing a failure. [ 1037.252478][T18739] name failslab, interval 1, probability 0, space 0, times 0 [ 1037.351001][T18739] CPU: 0 UID: 0 PID: 18739 Comm: syz.2.2976 Tainted: G L syzkaller #0 PREEMPT(full) [ 1037.351041][T18739] Tainted: [L]=SOFTLOCKUP [ 1037.351050][T18739] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1037.351064][T18739] Call Trace: [ 1037.351073][T18739] [ 1037.351083][T18739] dump_stack_lvl+0x100/0x190 [ 1037.351125][T18739] should_fail_ex.cold+0x5/0xa [ 1037.351152][T18739] ? process_preds+0x4bc/0x1e10 [ 1037.351187][T18739] should_failslab+0xc2/0x120 [ 1037.351227][T18739] __kmalloc_noprof+0xe0/0x850 [ 1037.351267][T18739] process_preds+0x4bc/0x1e10 [ 1037.351310][T18739] ? create_filter_start.constprop.0+0x134/0x310 [ 1037.351351][T18739] create_filter+0x140/0x210 [ 1037.351387][T18739] ? __pfx_create_filter+0x10/0x10 [ 1037.351426][T18739] ? find_held_lock+0x2b/0x80 [ 1037.351468][T18739] apply_event_filter+0x220/0x500 [ 1037.351506][T18739] ? __pfx_apply_event_filter+0x10/0x10 [ 1037.351552][T18739] event_filter_write+0x16d/0x290 [ 1037.351581][T18739] vfs_write+0x2aa/0x1070 [ 1037.351618][T18739] ? __pfx_event_filter_write+0x10/0x10 [ 1037.351648][T18739] ? __pfx_vfs_write+0x10/0x10 [ 1037.351683][T18739] ? __fget_files+0x215/0x3d0 [ 1037.351726][T18739] ? __fget_files+0x21f/0x3d0 [ 1037.351771][T18739] ksys_write+0x12a/0x250 [ 1037.351811][T18739] ? __pfx_ksys_write+0x10/0x10 [ 1037.351856][T18739] do_syscall_64+0x106/0xf80 [ 1037.351882][T18739] ? clear_bhb_loop+0x40/0x90 [ 1037.351912][T18739] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1037.351947][T18739] RIP: 0033:0x7fe86fb9c629 [ 1037.351968][T18739] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1037.351993][T18739] RSP: 002b:00007fe870aa6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1037.352017][T18739] RAX: ffffffffffffffda RBX: 00007fe86fe15fa0 RCX: 00007fe86fb9c629 [ 1037.352034][T18739] RDX: 00000000000005c8 RSI: 0000000000000000 RDI: 0000000000000003 [ 1037.352049][T18739] RBP: 00007fe86fc32b39 R08: 0000000000000000 R09: 0000000000000000 [ 1037.352065][T18739] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1037.352080][T18739] R13: 00007fe86fe16038 R14: 00007fe86fe15fa0 R15: 00007ffc7d3118f8 [ 1037.352112][T18739] [ 1041.295332][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802fbc3400: rx timeout, send abort [ 1041.305600][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88802fbc3400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 1041.637090][ T5826] Bluetooth: hci0: unexpected event 0x23 length: 127 > 13 [ 1042.846032][T18815] snd_aloop snd_aloop.0: control 7:265:7::2463 is already present [ 1043.808539][T18829] FAULT_INJECTION: forcing a failure. [ 1043.808539][T18829] name failslab, interval 1, probability 0, space 0, times 0 [ 1043.869618][T18829] CPU: 0 UID: 0 PID: 18829 Comm: syz.0.2997 Tainted: G L syzkaller #0 PREEMPT(full) [ 1043.869658][T18829] Tainted: [L]=SOFTLOCKUP [ 1043.869667][T18829] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1043.869683][T18829] Call Trace: [ 1043.869692][T18829] [ 1043.869702][T18829] dump_stack_lvl+0x100/0x190 [ 1043.869744][T18829] should_fail_ex.cold+0x5/0xa [ 1043.869771][T18829] should_failslab+0xc2/0x120 [ 1043.869812][T18829] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 1043.869848][T18829] ? alloc_inode+0x183/0x250 [ 1043.869884][T18829] alloc_inode+0x183/0x250 [ 1043.869913][T18829] new_inode+0x22/0x1c0 [ 1043.869940][T18829] ? dput.part.0+0xdd/0x570 [ 1043.869971][T18829] simple_fill_super+0x2d9/0x680 [ 1043.870014][T18829] ? __pfx_nfsd_fill_super+0x10/0x10 [ 1043.870052][T18829] nfsd_fill_super+0x98/0x560 [ 1043.870088][T18829] ? __pfx_set_anon_super_fc+0x10/0x10 [ 1043.870122][T18829] ? __pfx_nfsd_fill_super+0x10/0x10 [ 1043.870158][T18829] get_tree_keyed+0x10e/0x1d0 [ 1043.870195][T18829] vfs_get_tree+0x92/0x320 [ 1043.870226][T18829] path_mount+0x7d0/0x23d0 [ 1043.870256][T18829] ? __pfx_path_mount+0x10/0x10 [ 1043.870279][T18829] ? lockdep_hardirqs_on+0x78/0x100 [ 1043.870309][T18829] ? putname+0xb1/0x110 [ 1043.870330][T18829] ? kmem_cache_free+0x124/0x6a0 [ 1043.870378][T18829] ? __x64_sys_mount+0x293/0x310 [ 1043.870403][T18829] __x64_sys_mount+0x293/0x310 [ 1043.870430][T18829] ? __pfx___x64_sys_mount+0x10/0x10 [ 1043.870464][T18829] do_syscall_64+0x106/0xf80 [ 1043.870490][T18829] ? clear_bhb_loop+0x40/0x90 [ 1043.870520][T18829] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1043.870546][T18829] RIP: 0033:0x7f0b3cf9c629 [ 1043.870566][T18829] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1043.870596][T18829] RSP: 002b:00007f0b3b1f6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1043.870626][T18829] RAX: ffffffffffffffda RBX: 00007f0b3d215fa0 RCX: 00007f0b3cf9c629 [ 1043.870644][T18829] RDX: 00002000000002c0 RSI: 0000200000000240 RDI: 0000000000000000 [ 1043.870659][T18829] RBP: 00007f0b3d032b39 R08: 0000000000000000 R09: 0000000000000000 [ 1043.870674][T18829] R10: 000000000000000f R11: 0000000000000246 R12: 0000000000000000 [ 1043.870689][T18829] R13: 00007f0b3d216038 R14: 00007f0b3d215fa0 R15: 00007ffc44dd0308 [ 1043.870721][T18829] [ 1044.384618][T18846] rnbd_client L213: map_device: Parameters missing [ 1044.474124][T18851] FAULT_INJECTION: forcing a failure. [ 1044.474124][T18851] name failslab, interval 1, probability 0, space 0, times 0 [ 1044.500736][T18851] CPU: 0 UID: 0 PID: 18851 Comm: syz.0.3001 Tainted: G L syzkaller #0 PREEMPT(full) [ 1044.500776][T18851] Tainted: [L]=SOFTLOCKUP [ 1044.500785][T18851] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1044.500800][T18851] Call Trace: [ 1044.500809][T18851] [ 1044.500818][T18851] dump_stack_lvl+0x100/0x190 [ 1044.500859][T18851] should_fail_ex.cold+0x5/0xa [ 1044.500888][T18851] should_failslab+0xc2/0x120 [ 1044.500928][T18851] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 1044.500964][T18851] ? shmem_alloc_inode+0x25/0x50 [ 1044.500990][T18851] ? __lock_acquire+0x4a5/0x2630 [ 1044.501020][T18851] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 1044.501047][T18851] shmem_alloc_inode+0x25/0x50 [ 1044.501070][T18851] alloc_inode+0x68/0x250 [ 1044.501100][T18851] new_inode+0x22/0x1c0 [ 1044.501131][T18851] shmem_get_inode+0x212/0x1040 [ 1044.501164][T18851] ? __pfx_shmem_get_inode+0x10/0x10 [ 1044.501192][T18851] ? rcu_is_watching+0x12/0xc0 [ 1044.501227][T18851] ? percpu_counter_add_batch+0xb9/0x230 [ 1044.501273][T18851] __shmem_file_setup+0x3ac/0x490 [ 1044.501304][T18851] ? __pfx___shmem_file_setup+0x10/0x10 [ 1044.501346][T18851] ? vm_area_alloc+0x1f/0x160 [ 1044.501380][T18851] shmem_zero_setup+0x96/0x1b0 [ 1044.501419][T18851] __mmap_region+0x2198/0x29e0 [ 1044.501457][T18851] ? __pfx___mmap_region+0x10/0x10 [ 1044.501497][T18851] ? set_next_entity+0x11b/0x9c0 [ 1044.501537][T18851] ? __lock_acquire+0x4a5/0x2630 [ 1044.501566][T18851] ? update_cfs_rq_load_avg+0x51/0x550 [ 1044.501603][T18851] ? find_held_lock+0x2b/0x80 [ 1044.501641][T18851] ? finish_task_switch.isra.0+0x200/0xb80 [ 1044.501666][T18851] ? finish_task_switch.isra.0+0x200/0xb80 [ 1044.501703][T18851] ? trace_sched_exit_tp+0x13a/0x180 [ 1044.501735][T18851] ? __schedule+0x1000/0x60e0 [ 1044.501795][T18851] ? rcu_is_watching+0x12/0xc0 [ 1044.501831][T18851] ? cap_capable+0x107/0x460 [ 1044.501867][T18851] mmap_region+0x180/0x3e0 [ 1044.501907][T18851] do_mmap+0xc63/0x12f0 [ 1044.501936][T18851] ? __pfx_do_mmap+0x10/0x10 [ 1044.501960][T18851] ? __pfx_down_write_killable+0x10/0x10 [ 1044.501998][T18851] vm_mmap_pgoff+0x29e/0x470 [ 1044.502028][T18851] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 1044.502055][T18851] ? do_futex+0x192/0x350 [ 1044.502085][T18851] ? __pfx_do_futex+0x10/0x10 [ 1044.502121][T18851] ksys_mmap_pgoff+0xe1/0x650 [ 1044.502161][T18851] ? __x64_sys_futex+0x34f/0x4d0 [ 1044.502190][T18851] ? __x64_sys_futex+0x358/0x4d0 [ 1044.502221][T18851] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 1044.502261][T18851] ? xfd_validate_state+0x129/0x190 [ 1044.502315][T18851] __x64_sys_mmap+0x125/0x190 [ 1044.502359][T18851] do_syscall_64+0x106/0xf80 [ 1044.502385][T18851] ? clear_bhb_loop+0x40/0x90 [ 1044.502416][T18851] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1044.502441][T18851] RIP: 0033:0x7f0b3cf9c629 [ 1044.502462][T18851] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1044.502486][T18851] RSP: 002b:00007f0b3b1b4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1044.502509][T18851] RAX: ffffffffffffffda RBX: 00007f0b3d216180 RCX: 00007f0b3cf9c629 [ 1044.502527][T18851] RDX: 00000000000000df RSI: 000000000000e983 RDI: 0000000000000000 [ 1044.502542][T18851] RBP: 00007f0b3d032b39 R08: 0000000000000401 R09: 0000000000008000 [ 1044.502558][T18851] R10: 0000000000000eb1 R11: 0000000000000246 R12: 0000000000000000 [ 1044.502578][T18851] R13: 00007f0b3d216218 R14: 00007f0b3d216180 R15: 00007ffc44dd0308 [ 1044.502610][T18851] [ 1045.911497][T18871] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3009'. [ 1046.283940][T18882] hub 1-0:1.0: USB hub found [ 1046.316581][T18882] hub 1-0:1.0: 1 port detected [ 1046.636698][T18890] openvswitch: netlink: IPv4 tunnel dst address is zero [ 1047.111875][T18898] FAULT_INJECTION: forcing a failure. [ 1047.111875][T18898] name failslab, interval 1, probability 0, space 0, times 0 [ 1047.211957][T18898] CPU: 0 UID: 0 PID: 18898 Comm: syz.4.3018 Tainted: G L syzkaller #0 PREEMPT(full) [ 1047.211998][T18898] Tainted: [L]=SOFTLOCKUP [ 1047.212008][T18898] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1047.212036][T18898] Call Trace: [ 1047.212045][T18898] [ 1047.212055][T18898] dump_stack_lvl+0x100/0x190 [ 1047.212096][T18898] should_fail_ex.cold+0x5/0xa [ 1047.212124][T18898] should_failslab+0xc2/0x120 [ 1047.212164][T18898] __kmalloc_cache_noprof+0x7a/0x6f0 [ 1047.212194][T18898] ? refill_pi_state_cache+0x91/0x260 [ 1047.212235][T18898] refill_pi_state_cache+0x91/0x260 [ 1047.212271][T18898] futex_lock_pi+0x177/0x7b0 [ 1047.212310][T18898] ? __pfx_futex_lock_pi+0x10/0x10 [ 1047.212359][T18898] ? __pfx___futex_wait+0x10/0x10 [ 1047.212419][T18898] ? __pfx_futex_wake_mark+0x10/0x10 [ 1047.212460][T18898] ? __get_user_nocheck_8+0x20/0x20 [ 1047.212497][T18898] ? do_vfs_ioctl+0x226/0x13e0 [ 1047.212531][T18898] do_futex+0x18a/0x350 [ 1047.212561][T18898] ? __pfx_do_futex+0x10/0x10 [ 1047.212598][T18898] ? find_held_lock+0x2b/0x80 [ 1047.212640][T18898] __x64_sys_futex+0x34f/0x4d0 [ 1047.212674][T18898] ? __pfx___x64_sys_futex+0x10/0x10 [ 1047.212715][T18898] do_syscall_64+0x106/0xf80 [ 1047.212740][T18898] ? clear_bhb_loop+0x40/0x90 [ 1047.212788][T18898] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1047.212814][T18898] RIP: 0033:0x7fe5fc19c629 [ 1047.212834][T18898] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1047.212858][T18898] RSP: 002b:00007fe5fcfe5028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1047.212881][T18898] RAX: ffffffffffffffda RBX: 00007fe5fc416090 RCX: 00007fe5fc19c629 [ 1047.212898][T18898] RDX: 0000000000000008 RSI: 0000000000000006 RDI: 0000000000000000 [ 1047.212913][T18898] RBP: 00007fe5fc232b39 R08: 0000000000000000 R09: 000000008000fff5 [ 1047.212929][T18898] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1047.212944][T18898] R13: 00007fe5fc416128 R14: 00007fe5fc416090 R15: 00007ffe574092e8 [ 1047.212975][T18898] [ 1047.994982][T18908] FAULT_INJECTION: forcing a failure. [ 1047.994982][T18908] name failslab, interval 1, probability 0, space 0, times 0 [ 1048.045070][T18908] CPU: 0 UID: 0 PID: 18908 Comm: syz.4.3021 Tainted: G L syzkaller #0 PREEMPT(full) [ 1048.045113][T18908] Tainted: [L]=SOFTLOCKUP [ 1048.045121][T18908] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1048.045136][T18908] Call Trace: [ 1048.045145][T18908] [ 1048.045154][T18908] dump_stack_lvl+0x100/0x190 [ 1048.045193][T18908] should_fail_ex.cold+0x5/0xa [ 1048.045220][T18908] should_failslab+0xc2/0x120 [ 1048.045260][T18908] __kmalloc_node_track_caller_noprof+0xe3/0x850 [ 1048.045296][T18908] ? parse_pred+0x2d4/0x3070 [ 1048.045336][T18908] kmemdup_nul+0x49/0xd0 [ 1048.045373][T18908] parse_pred+0x2d4/0x3070 [ 1048.045413][T18908] ? __pfx_parse_pred+0x10/0x10 [ 1048.045457][T18908] ? rcu_is_watching+0x12/0xc0 [ 1048.045492][T18908] ? trace_kmalloc+0x101/0x130 [ 1048.045516][T18908] ? __kmalloc_noprof+0x320/0x850 [ 1048.045554][T18908] process_preds+0x6a0/0x1e10 [ 1048.045594][T18908] ? create_filter_start.constprop.0+0x134/0x310 [ 1048.045633][T18908] create_filter+0x140/0x210 [ 1048.045669][T18908] ? __pfx_create_filter+0x10/0x10 [ 1048.045706][T18908] ? find_held_lock+0x2b/0x80 [ 1048.045747][T18908] apply_event_filter+0x220/0x500 [ 1048.045784][T18908] ? __pfx_apply_event_filter+0x10/0x10 [ 1048.045828][T18908] event_filter_write+0x16d/0x290 [ 1048.045856][T18908] vfs_write+0x2aa/0x1070 [ 1048.045892][T18908] ? __pfx_event_filter_write+0x10/0x10 [ 1048.045921][T18908] ? __pfx_vfs_write+0x10/0x10 [ 1048.045955][T18908] ? __fget_files+0x215/0x3d0 [ 1048.046002][T18908] ? __fget_files+0x21f/0x3d0 [ 1048.046046][T18908] ksys_write+0x12a/0x250 [ 1048.046080][T18908] ? __pfx_ksys_write+0x10/0x10 [ 1048.046124][T18908] do_syscall_64+0x106/0xf80 [ 1048.046149][T18908] ? clear_bhb_loop+0x40/0x90 [ 1048.046179][T18908] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1048.046203][T18908] RIP: 0033:0x7fe5fc19c629 [ 1048.046223][T18908] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1048.046246][T18908] RSP: 002b:00007fe5fd006028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1048.046269][T18908] RAX: ffffffffffffffda RBX: 00007fe5fc415fa0 RCX: 00007fe5fc19c629 [ 1048.046284][T18908] RDX: 00000000000005c8 RSI: 0000000000000000 RDI: 0000000000000003 [ 1048.046299][T18908] RBP: 00007fe5fc232b39 R08: 0000000000000000 R09: 0000000000000000 [ 1048.046314][T18908] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1048.046328][T18908] R13: 00007fe5fc416038 R14: 00007fe5fc415fa0 R15: 00007ffe574092e8 [ 1048.046359][T18908] [ 1048.047649][T18909] FAULT_INJECTION: forcing a failure. [ 1048.047649][T18909] name failslab, interval 1, probability 0, space 0, times 0 [ 1048.696134][T18909] CPU: 0 UID: 0 PID: 18909 Comm: syz.4.3021 Tainted: G L syzkaller #0 PREEMPT(full) [ 1048.696172][T18909] Tainted: [L]=SOFTLOCKUP [ 1048.696181][T18909] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1048.696196][T18909] Call Trace: [ 1048.696204][T18909] [ 1048.696213][T18909] dump_stack_lvl+0x100/0x190 [ 1048.696252][T18909] should_fail_ex.cold+0x5/0xa [ 1048.696279][T18909] should_failslab+0xc2/0x120 [ 1048.696319][T18909] __kmalloc_node_track_caller_noprof+0xe3/0x850 [ 1048.696355][T18909] ? create_filter_start.constprop.0+0x15b/0x310 [ 1048.696399][T18909] kstrdup+0x51/0xe0 [ 1048.696435][T18909] create_filter_start.constprop.0+0x15b/0x310 [ 1048.696475][T18909] create_filter+0xb5/0x210 [ 1048.696511][T18909] ? __pfx_create_filter+0x10/0x10 [ 1048.696546][T18909] ? __pfx___mutex_lock+0x10/0x10 [ 1048.696575][T18909] ? find_held_lock+0x2b/0x80 [ 1048.696616][T18909] apply_event_filter+0x220/0x500 [ 1048.696654][T18909] ? __pfx_apply_event_filter+0x10/0x10 [ 1048.696698][T18909] event_filter_write+0x16d/0x290 [ 1048.696726][T18909] vfs_write+0x2aa/0x1070 [ 1048.696762][T18909] ? __pfx_event_filter_write+0x10/0x10 [ 1048.696792][T18909] ? __pfx_vfs_write+0x10/0x10 [ 1048.696825][T18909] ? find_held_lock+0x2b/0x80 [ 1048.696861][T18909] ? __fget_files+0x215/0x3d0 [ 1048.696896][T18909] ? __fget_files+0x215/0x3d0 [ 1048.696943][T18909] ? __fget_files+0x21f/0x3d0 [ 1048.696986][T18909] __x64_sys_pwrite64+0x1eb/0x250 [ 1048.697024][T18909] ? __pfx___x64_sys_pwrite64+0x10/0x10 [ 1048.697070][T18909] do_syscall_64+0x106/0xf80 [ 1048.697095][T18909] ? clear_bhb_loop+0x40/0x90 [ 1048.697124][T18909] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1048.697148][T18909] RIP: 0033:0x7fe5fc19c629 [ 1048.697170][T18909] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1048.697194][T18909] RSP: 002b:00007fe5fcfe5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000012 [ 1048.697217][T18909] RAX: ffffffffffffffda RBX: 00007fe5fc416090 RCX: 00007fe5fc19c629 [ 1048.697232][T18909] RDX: 00000000000006bc RSI: 0000000000000000 RDI: 0000000000000003 [ 1048.697246][T18909] RBP: 00007fe5fcfe5090 R08: 0000000000000000 R09: 0000000000000000 [ 1048.697260][T18909] R10: 0000000000000005 R11: 0000000000000246 R12: 0000000000000001 [ 1048.697274][T18909] R13: 00007fe5fc416128 R14: 00007fe5fc416090 R15: 00007ffe574092e8 [ 1048.697305][T18909] [ 1048.997833][T18923] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3026'. [ 1049.460580][T18932] netlink: 'syz.2.3030': attribute type 1 has an invalid length. [ 1050.056862][T18950] tipc: Started in network mode [ 1050.082823][T18950] tipc: Node identity ee00, cluster identity 4711 [ 1050.114322][T18950] tipc: Node number set to 60928 [ 1050.184166][T18950] FAULT_INJECTION: forcing a failure. [ 1050.184166][T18950] name failslab, interval 1, probability 0, space 0, times 0 [ 1050.249337][T18950] CPU: 0 UID: 0 PID: 18950 Comm: syz.4.3033 Tainted: G L syzkaller #0 PREEMPT(full) [ 1050.249377][T18950] Tainted: [L]=SOFTLOCKUP [ 1050.249387][T18950] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1050.249403][T18950] Call Trace: [ 1050.249411][T18950] [ 1050.249421][T18950] dump_stack_lvl+0x100/0x190 [ 1050.249461][T18950] should_fail_ex.cold+0x5/0xa [ 1050.249489][T18950] should_failslab+0xc2/0x120 [ 1050.249528][T18950] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1050.249562][T18950] ? security_inode_alloc+0x3b/0x2c0 [ 1050.249596][T18950] ? lockdep_init_map_type+0x5c/0x250 [ 1050.249632][T18950] security_inode_alloc+0x3b/0x2c0 [ 1050.249666][T18950] inode_init_always_gfp+0xced/0x1040 [ 1050.249742][T18950] alloc_inode+0x8e/0x250 [ 1050.249772][T18950] new_inode+0x22/0x1c0 [ 1050.249804][T18950] shmem_get_inode+0x212/0x1040 [ 1050.249837][T18950] ? __pfx_shmem_get_inode+0x10/0x10 [ 1050.249871][T18950] ? rcu_is_watching+0x12/0xc0 [ 1050.249906][T18950] ? percpu_counter_add_batch+0xb9/0x230 [ 1050.249952][T18950] __shmem_file_setup+0x3ac/0x490 [ 1050.249984][T18950] ? __pfx___shmem_file_setup+0x10/0x10 [ 1050.250019][T18950] ? vm_area_alloc+0x1f/0x160 [ 1050.250052][T18950] shmem_zero_setup+0x96/0x1b0 [ 1050.250090][T18950] __mmap_region+0x2198/0x29e0 [ 1050.250128][T18950] ? __pfx___mmap_region+0x10/0x10 [ 1050.250192][T18950] ? sched_clock+0x38/0x60 [ 1050.250236][T18950] ? lockdep_hardirqs_on+0x78/0x100 [ 1050.250263][T18950] ? finish_task_switch.isra.0+0x205/0xb80 [ 1050.250290][T18950] ? rcu_is_watching+0x12/0xc0 [ 1050.250364][T18950] ? rcu_is_watching+0x12/0xc0 [ 1050.250400][T18950] ? cap_capable+0x107/0x460 [ 1050.250435][T18950] mmap_region+0x180/0x3e0 [ 1050.250474][T18950] do_mmap+0xc63/0x12f0 [ 1050.250503][T18950] ? __pfx_do_mmap+0x10/0x10 [ 1050.250527][T18950] ? __pfx_down_write_killable+0x10/0x10 [ 1050.250564][T18950] vm_mmap_pgoff+0x29e/0x470 [ 1050.250594][T18950] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 1050.250621][T18950] ? do_futex+0x192/0x350 [ 1050.250651][T18950] ? __pfx_do_futex+0x10/0x10 [ 1050.250687][T18950] ksys_mmap_pgoff+0xe1/0x650 [ 1050.250727][T18950] ? __x64_sys_futex+0x34f/0x4d0 [ 1050.250756][T18950] ? __x64_sys_futex+0x358/0x4d0 [ 1050.250787][T18950] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 1050.250827][T18950] ? xfd_validate_state+0x129/0x190 [ 1050.250872][T18950] __x64_sys_mmap+0x125/0x190 [ 1050.250911][T18950] do_syscall_64+0x106/0xf80 [ 1050.250937][T18950] ? clear_bhb_loop+0x40/0x90 [ 1050.250967][T18950] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1050.250992][T18950] RIP: 0033:0x7fe5fc19c629 [ 1050.251012][T18950] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1050.251037][T18950] RSP: 002b:00007fe5fcfa3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1050.251061][T18950] RAX: ffffffffffffffda RBX: 00007fe5fc416270 RCX: 00007fe5fc19c629 [ 1050.251078][T18950] RDX: 00000000000000df RSI: 000000000000e983 RDI: 0000000000000000 [ 1050.251093][T18950] RBP: 00007fe5fc232b39 R08: 0000000000000401 R09: 0000000000008000 [ 1050.251109][T18950] R10: 0000000000000eb1 R11: 0000000000000246 R12: 0000000000000000 [ 1050.251124][T18950] R13: 00007fe5fc416308 R14: 00007fe5fc416270 R15: 00007ffe574092e8 [ 1050.251155][T18950] [ 1050.689130][T18958] random: crng reseeded on system resumption [ 1050.768628][ T5826] Bluetooth: hci4: SCO packet for unknown connection handle 0 [ 1051.697394][T18989] tipc: Started in network mode [ 1051.705141][T18989] tipc: Node identity ee00, cluster identity 4711 [ 1051.730678][T18989] tipc: Node number set to 60928 [ 1051.781465][T18989] FAULT_INJECTION: forcing a failure. [ 1051.781465][T18989] name failslab, interval 1, probability 0, space 0, times 0 [ 1051.837550][T18989] CPU: 0 UID: 0 PID: 18989 Comm: syz.2.3041 Tainted: G L syzkaller #0 PREEMPT(full) [ 1051.837591][T18989] Tainted: [L]=SOFTLOCKUP [ 1051.837599][T18989] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1051.837615][T18989] Call Trace: [ 1051.837632][T18989] [ 1051.837646][T18989] dump_stack_lvl+0x100/0x190 [ 1051.837688][T18989] should_fail_ex.cold+0x5/0xa [ 1051.837716][T18989] should_failslab+0xc2/0x120 [ 1051.837756][T18989] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 1051.837792][T18989] ? shmem_alloc_inode+0x25/0x50 [ 1051.837844][T18989] ? __lock_acquire+0x4a5/0x2630 [ 1051.837885][T18989] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 1051.837919][T18989] shmem_alloc_inode+0x25/0x50 [ 1051.837943][T18989] alloc_inode+0x68/0x250 [ 1051.837979][T18989] new_inode+0x22/0x1c0 [ 1051.838015][T18989] shmem_get_inode+0x212/0x1040 [ 1051.838048][T18989] ? __pfx_shmem_get_inode+0x10/0x10 [ 1051.838077][T18989] ? rcu_is_watching+0x12/0xc0 [ 1051.838111][T18989] ? percpu_counter_add_batch+0xb9/0x230 [ 1051.838158][T18989] __shmem_file_setup+0x3ac/0x490 [ 1051.838190][T18989] ? __pfx___shmem_file_setup+0x10/0x10 [ 1051.838226][T18989] ? vm_area_alloc+0x1f/0x160 [ 1051.838259][T18989] shmem_zero_setup+0x96/0x1b0 [ 1051.838303][T18989] __mmap_region+0x2198/0x29e0 [ 1051.838341][T18989] ? __pfx___mmap_region+0x10/0x10 [ 1051.838381][T18989] ? set_next_entity+0x11b/0x9c0 [ 1051.838421][T18989] ? __lock_acquire+0x4a5/0x2630 [ 1051.838464][T18989] ? update_cfs_rq_load_avg+0x51/0x550 [ 1051.838502][T18989] ? find_held_lock+0x2b/0x80 [ 1051.838544][T18989] ? finish_task_switch.isra.0+0x200/0xb80 [ 1051.838569][T18989] ? finish_task_switch.isra.0+0x200/0xb80 [ 1051.838606][T18989] ? trace_sched_exit_tp+0x13a/0x180 [ 1051.838677][T18989] ? __schedule+0x1000/0x60e0 [ 1051.838739][T18989] ? rcu_is_watching+0x12/0xc0 [ 1051.838775][T18989] ? cap_capable+0x107/0x460 [ 1051.838811][T18989] mmap_region+0x180/0x3e0 [ 1051.838850][T18989] do_mmap+0xc63/0x12f0 [ 1051.838881][T18989] ? __pfx_do_mmap+0x10/0x10 [ 1051.838905][T18989] ? __pfx_down_write_killable+0x10/0x10 [ 1051.838948][T18989] vm_mmap_pgoff+0x29e/0x470 [ 1051.838978][T18989] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 1051.839005][T18989] ? do_futex+0x192/0x350 [ 1051.839041][T18989] ? __pfx_do_futex+0x10/0x10 [ 1051.839082][T18989] ksys_mmap_pgoff+0xe1/0x650 [ 1051.839122][T18989] ? __x64_sys_futex+0x34f/0x4d0 [ 1051.839152][T18989] ? __x64_sys_futex+0x358/0x4d0 [ 1051.839183][T18989] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 1051.839231][T18989] ? xfd_validate_state+0x129/0x190 [ 1051.839272][T18989] __x64_sys_mmap+0x125/0x190 [ 1051.839311][T18989] do_syscall_64+0x106/0xf80 [ 1051.839337][T18989] ? clear_bhb_loop+0x40/0x90 [ 1051.839366][T18989] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1051.839391][T18989] RIP: 0033:0x7fe86fb9c629 [ 1051.839413][T18989] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1051.839437][T18989] RSP: 002b:00007fe870a64028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1051.839462][T18989] RAX: ffffffffffffffda RBX: 00007fe86fe16180 RCX: 00007fe86fb9c629 [ 1051.839479][T18989] RDX: 00000000000000df RSI: 000000000000e983 RDI: 0000000000000000 [ 1051.839494][T18989] RBP: 00007fe86fc32b39 R08: 0000000000000401 R09: 0000000000008000 [ 1051.839510][T18989] R10: 0000000000000eb1 R11: 0000000000000246 R12: 0000000000000000 [ 1051.839525][T18989] R13: 00007fe86fe16218 R14: 00007fe86fe16180 R15: 00007ffc7d3118f8 [ 1051.839557][T18989] [ 1053.494834][T19029] FAULT_INJECTION: forcing a failure. [ 1053.494834][T19029] name failslab, interval 1, probability 0, space 0, times 0 [ 1053.566083][T19029] CPU: 0 UID: 0 PID: 19029 Comm: syz.4.3052 Tainted: G L syzkaller #0 PREEMPT(full) [ 1053.566123][T19029] Tainted: [L]=SOFTLOCKUP [ 1053.566132][T19029] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1053.566147][T19029] Call Trace: [ 1053.566155][T19029] [ 1053.566165][T19029] dump_stack_lvl+0x100/0x190 [ 1053.566206][T19029] should_fail_ex.cold+0x5/0xa [ 1053.566234][T19029] should_failslab+0xc2/0x120 [ 1053.566274][T19029] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1053.566309][T19029] ? security_inode_alloc+0x3b/0x2c0 [ 1053.566343][T19029] ? lockdep_init_map_type+0x5c/0x250 [ 1053.566380][T19029] security_inode_alloc+0x3b/0x2c0 [ 1053.566414][T19029] inode_init_always_gfp+0xced/0x1040 [ 1053.566458][T19029] alloc_inode+0x8e/0x250 [ 1053.566496][T19029] new_inode+0x22/0x1c0 [ 1053.566528][T19029] shmem_get_inode+0x212/0x1040 [ 1053.566567][T19029] ? __pfx_shmem_get_inode+0x10/0x10 [ 1053.566595][T19029] ? rcu_is_watching+0x12/0xc0 [ 1053.566629][T19029] ? percpu_counter_add_batch+0xb9/0x230 [ 1053.566677][T19029] __shmem_file_setup+0x3ac/0x490 [ 1053.566709][T19029] ? __pfx___shmem_file_setup+0x10/0x10 [ 1053.566745][T19029] ? vm_area_alloc+0x1f/0x160 [ 1053.566778][T19029] shmem_zero_setup+0x96/0x1b0 [ 1053.566816][T19029] __mmap_region+0x2198/0x29e0 [ 1053.566854][T19029] ? __pfx___mmap_region+0x10/0x10 [ 1053.566918][T19029] ? sched_clock+0x38/0x60 [ 1053.566963][T19029] ? lockdep_hardirqs_on+0x78/0x100 [ 1053.566997][T19029] ? finish_task_switch.isra.0+0x205/0xb80 [ 1053.567023][T19029] ? rcu_is_watching+0x12/0xc0 [ 1053.567094][T19029] ? rcu_is_watching+0x12/0xc0 [ 1053.567129][T19029] ? cap_capable+0x107/0x460 [ 1053.567164][T19029] mmap_region+0x180/0x3e0 [ 1053.567203][T19029] do_mmap+0xc63/0x12f0 [ 1053.567231][T19029] ? __pfx_do_mmap+0x10/0x10 [ 1053.567255][T19029] ? __pfx_down_write_killable+0x10/0x10 [ 1053.567292][T19029] vm_mmap_pgoff+0x29e/0x470 [ 1053.567322][T19029] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 1053.567348][T19029] ? do_futex+0x192/0x350 [ 1053.567384][T19029] ? __pfx_do_futex+0x10/0x10 [ 1053.567420][T19029] ksys_mmap_pgoff+0xe1/0x650 [ 1053.567461][T19029] ? __x64_sys_futex+0x34f/0x4d0 [ 1053.567495][T19029] ? __x64_sys_futex+0x358/0x4d0 [ 1053.567526][T19029] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 1053.567567][T19029] ? xfd_validate_state+0x129/0x190 [ 1053.567607][T19029] __x64_sys_mmap+0x125/0x190 [ 1053.567645][T19029] do_syscall_64+0x106/0xf80 [ 1053.567671][T19029] ? clear_bhb_loop+0x40/0x90 [ 1053.567701][T19029] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1053.567726][T19029] RIP: 0033:0x7fe5fc19c629 [ 1053.567747][T19029] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1053.567771][T19029] RSP: 002b:00007fe5fcfa3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1053.567795][T19029] RAX: ffffffffffffffda RBX: 00007fe5fc416270 RCX: 00007fe5fc19c629 [ 1053.567811][T19029] RDX: 00000000000000df RSI: 000000000000e983 RDI: 0000000000000000 [ 1053.567826][T19029] RBP: 00007fe5fc232b39 R08: 0000000000000401 R09: 0000000000008000 [ 1053.567842][T19029] R10: 0000000000000eb1 R11: 0000000000000246 R12: 0000000000000000 [ 1053.567856][T19029] R13: 00007fe5fc416308 R14: 00007fe5fc416270 R15: 00007ffe574092e8 [ 1053.567888][T19029] [ 1054.525764][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.534083][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1056.740490][T19080] random: crng reseeded on system resumption [ 1056.861707][ T5826] Bluetooth: hci2: SCO packet for unknown connection handle 0 [ 1057.088893][T13453] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1057.100598][T13453] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1057.108952][T13453] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1057.126032][T13453] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1057.133711][T13453] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1057.653592][T19095] random: crng reseeded on system resumption [ 1057.737061][ T5826] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 1058.089887][T19107] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3073'. [ 1058.200688][T19090] chnl_net:caif_netlink_parms(): no params data found [ 1058.453367][T19117] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3074'. [ 1059.147766][T19090] bridge0: port 1(bridge_slave_0) entered blocking state [ 1059.170957][ T5826] Bluetooth: hci3: command tx timeout [ 1059.198929][T19090] bridge0: port 1(bridge_slave_0) entered disabled state [ 1059.262241][T19090] bridge_slave_0: entered allmulticast mode [ 1059.298721][T19090] bridge_slave_0: entered promiscuous mode [ 1059.301061][T19090] bridge0: port 2(bridge_slave_1) entered blocking state [ 1059.309605][T19090] bridge0: port 2(bridge_slave_1) entered disabled state [ 1059.309770][T19090] bridge_slave_1: entered allmulticast mode [ 1059.312642][T19090] bridge_slave_1: entered promiscuous mode [ 1059.458705][T19136] netlink: 334 bytes leftover after parsing attributes in process `syz.4.3078'. [ 1059.495808][T19135] misc userio: Invalid payload size [ 1059.645442][T19090] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1059.648110][T19090] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1060.240904][T19090] team0: Port device team_slave_0 added [ 1060.303174][T19090] team0: Port device team_slave_1 added [ 1060.914386][T19090] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1060.921362][T19090] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1061.076502][T19090] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1061.147190][T19090] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1061.192450][T19090] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1061.248160][ T5826] Bluetooth: hci3: command tx timeout [ 1061.374506][T19090] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1061.506078][ T5826] Bluetooth: hci2: Received unexpected HCI Event 0x00 [ 1061.644460][T19090] hsr_slave_0: entered promiscuous mode [ 1061.690463][T19090] hsr_slave_1: entered promiscuous mode [ 1062.847911][T19180] random: crng reseeded on system resumption [ 1062.922226][ T5826] Bluetooth: hci2: SCO packet for unknown connection handle 0 [ 1063.330065][ T5826] Bluetooth: hci3: command tx timeout [ 1063.348282][T19090] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1063.524008][T19090] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1063.838601][T19090] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1064.184307][T19090] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1064.522531][T19090] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1064.616676][T19090] 8021q: adding VLAN 0 to HW filter on device team0 [ 1064.656625][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 1064.663839][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1064.736019][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 1064.743208][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1065.402582][ T5826] Bluetooth: hci3: command tx timeout [ 1065.774058][T19090] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1066.134471][T19233] FAULT_INJECTION: forcing a failure. [ 1066.134471][T19233] name failslab, interval 1, probability 0, space 0, times 0 [ 1066.222622][T19233] CPU: 0 UID: 0 PID: 19233 Comm: syz.0.3102 Tainted: G L syzkaller #0 PREEMPT(full) [ 1066.222660][T19233] Tainted: [L]=SOFTLOCKUP [ 1066.222669][T19233] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1066.222683][T19233] Call Trace: [ 1066.222692][T19233] [ 1066.222701][T19233] dump_stack_lvl+0x100/0x190 [ 1066.222740][T19233] should_fail_ex.cold+0x5/0xa [ 1066.222766][T19233] ? tomoyo_encode2+0xfb/0x3c0 [ 1066.222789][T19233] should_failslab+0xc2/0x120 [ 1066.222829][T19233] __kmalloc_noprof+0xe0/0x850 [ 1066.222861][T19233] ? d_absolute_path+0x136/0x1b0 [ 1066.222896][T19233] tomoyo_encode2+0xfb/0x3c0 [ 1066.222923][T19233] tomoyo_encode+0x29/0x50 [ 1066.222945][T19233] tomoyo_realpath_from_path+0x18c/0x690 [ 1066.222976][T19233] tomoyo_path_number_perm+0x23c/0x580 [ 1066.223011][T19233] ? tomoyo_path_number_perm+0x22e/0x580 [ 1066.223048][T19233] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1066.223093][T19233] ? do_raw_spin_lock+0x128/0x260 [ 1066.223126][T19233] ? find_held_lock+0x2b/0x80 [ 1066.223177][T19233] ? __pfx_d_add+0x10/0x10 [ 1066.223202][T19233] ? d_alloc+0x176/0x1e0 [ 1066.223224][T19233] ? current_check_access_path+0x281/0x460 [ 1066.223265][T19233] ? __pfx_current_check_access_path+0x10/0x10 [ 1066.223306][T19233] ? simple_lookup+0x105/0x1d0 [ 1066.223349][T19233] ? lookup_one_qstr_excl+0xb3/0x250 [ 1066.223381][T19233] tomoyo_path_mkdir+0x9b/0xe0 [ 1066.223408][T19233] ? __pfx_tomoyo_path_mkdir+0x10/0x10 [ 1066.223445][T19233] security_path_mkdir+0x154/0x2e0 [ 1066.223472][T19233] filename_mkdirat+0x168/0x5e0 [ 1066.223498][T19233] ? __pfx_filename_mkdirat+0x10/0x10 [ 1066.223522][T19233] ? strncpy_from_user+0x19d/0x2d0 [ 1066.223559][T19233] ? do_getname+0x191/0x390 [ 1066.223588][T19233] __x64_sys_mkdir+0x6b/0x90 [ 1066.223611][T19233] do_syscall_64+0x106/0xf80 [ 1066.223636][T19233] ? clear_bhb_loop+0x40/0x90 [ 1066.223666][T19233] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1066.223690][T19233] RIP: 0033:0x7f0b3cf9c629 [ 1066.223709][T19233] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1066.223733][T19233] RSP: 002b:00007f0b3b1d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 1066.223756][T19233] RAX: ffffffffffffffda RBX: 00007f0b3d216090 RCX: 00007f0b3cf9c629 [ 1066.223772][T19233] RDX: 0000000000000000 RSI: 0000000000008001 RDI: 0000200000000100 [ 1066.223787][T19233] RBP: 00007f0b3d032b39 R08: 0000000000000000 R09: 0000000000000000 [ 1066.223802][T19233] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1066.223816][T19233] R13: 00007f0b3d216128 R14: 00007f0b3d216090 R15: 00007ffc44dd0308 [ 1066.223848][T19233] [ 1066.223870][T19233] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1067.508289][T19090] veth0_vlan: entered promiscuous mode [ 1067.610045][T19090] veth1_vlan: entered promiscuous mode [ 1067.750712][T19090] veth0_macvtap: entered promiscuous mode [ 1067.785969][T19090] veth1_macvtap: entered promiscuous mode [ 1067.865642][T19090] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1067.936690][T19090] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1068.019788][ T49] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1068.038437][T19261] sd 0:0:1:0: PR command failed: 1026 [ 1068.045590][ T49] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1068.071921][T19261] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 1068.093995][ T49] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1068.106672][T19261] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 1068.138577][ T49] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1068.241308][T19249] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1068.331264][T19252] kafs: addr_prefs: Invalid Command [ 1068.477137][ T7127] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1068.512394][ T7127] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1068.623567][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1068.711885][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1074.863090][T19359] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1074.893597][T19359] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1074.921081][T19359] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1074.964398][T19359] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1074.970374][T19359] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1075.023688][T19359] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1076.361798][ T5826] Bluetooth: hci2: command 0x0c1a tx timeout [ 1076.923159][ T5826] Bluetooth: hci1: command 0x0c1a tx timeout [ 1076.930232][ T5826] Bluetooth: hci4: command 0x0c1a tx timeout [ 1077.014152][T19390] Bluetooth: hci3: command 0x0c1a tx timeout [ 1078.797354][T19422] random: crng reseeded on system resumption [ 1078.862158][T19390] Bluetooth: hci1: Received unexpected HCI Event 0x00 [ 1079.081928][T19390] Bluetooth: hci3: command 0x0c1a tx timeout [ 1081.166021][T19390] Bluetooth: hci3: command 0x0c1a tx timeout [ 1081.565316][T19474] random: crng reseeded on system resumption [ 1081.648247][T19390] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 1082.410551][T19482] random: crng reseeded on system resumption [ 1083.853484][T19501] FAULT_INJECTION: forcing a failure. [ 1083.853484][T19501] name failslab, interval 1, probability 0, space 0, times 0 [ 1083.933045][T19501] CPU: 0 UID: 0 PID: 19501 Comm: syz.0.3171 Tainted: G L syzkaller #0 PREEMPT(full) [ 1083.933087][T19501] Tainted: [L]=SOFTLOCKUP [ 1083.933097][T19501] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1083.933112][T19501] Call Trace: [ 1083.933121][T19501] [ 1083.933131][T19501] dump_stack_lvl+0x100/0x190 [ 1083.933173][T19501] should_fail_ex.cold+0x5/0xa [ 1083.933201][T19501] should_failslab+0xc2/0x120 [ 1083.933241][T19501] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 1083.933277][T19501] ? __d_alloc+0x34/0xa80 [ 1083.933307][T19501] __d_alloc+0x34/0xa80 [ 1083.933335][T19501] d_alloc_pseudo+0x1c/0xc0 [ 1083.933367][T19501] alloc_file_pseudo+0xcf/0x230 [ 1083.933398][T19501] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 1083.933434][T19501] __shmem_file_setup+0x221/0x490 [ 1083.933467][T19501] ? __pfx___shmem_file_setup+0x10/0x10 [ 1083.933502][T19501] ? vm_area_alloc+0x1f/0x160 [ 1083.933535][T19501] shmem_zero_setup+0x96/0x1b0 [ 1083.933574][T19501] __mmap_region+0x2198/0x29e0 [ 1083.933611][T19501] ? __pfx___mmap_region+0x10/0x10 [ 1083.933651][T19501] ? set_next_entity+0x11b/0x9c0 [ 1083.933700][T19501] ? __lock_acquire+0x4a5/0x2630 [ 1083.933730][T19501] ? update_cfs_rq_load_avg+0x51/0x550 [ 1083.933768][T19501] ? find_held_lock+0x2b/0x80 [ 1083.933806][T19501] ? finish_task_switch.isra.0+0x200/0xb80 [ 1083.933831][T19501] ? finish_task_switch.isra.0+0x200/0xb80 [ 1083.933870][T19501] ? trace_sched_exit_tp+0x13a/0x180 [ 1083.933904][T19501] ? __schedule+0x1000/0x60e0 [ 1083.933965][T19501] ? rcu_is_watching+0x12/0xc0 [ 1083.934001][T19501] ? cap_capable+0x107/0x460 [ 1083.934036][T19501] mmap_region+0x180/0x3e0 [ 1083.934076][T19501] do_mmap+0xc63/0x12f0 [ 1083.934106][T19501] ? __pfx_do_mmap+0x10/0x10 [ 1083.934130][T19501] ? __pfx_down_write_killable+0x10/0x10 [ 1083.934168][T19501] vm_mmap_pgoff+0x29e/0x470 [ 1083.934198][T19501] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 1083.934224][T19501] ? do_futex+0x192/0x350 [ 1083.934255][T19501] ? __pfx_do_futex+0x10/0x10 [ 1083.934291][T19501] ksys_mmap_pgoff+0xe1/0x650 [ 1083.934331][T19501] ? __x64_sys_futex+0x34f/0x4d0 [ 1083.934360][T19501] ? __x64_sys_futex+0x358/0x4d0 [ 1083.934392][T19501] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 1083.934433][T19501] ? xfd_validate_state+0x129/0x190 [ 1083.934473][T19501] __x64_sys_mmap+0x125/0x190 [ 1083.934512][T19501] do_syscall_64+0x106/0xf80 [ 1083.934538][T19501] ? clear_bhb_loop+0x40/0x90 [ 1083.934569][T19501] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1083.934595][T19501] RIP: 0033:0x7f0b3cf9c629 [ 1083.934622][T19501] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1083.934648][T19501] RSP: 002b:00007f0b3b1f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1083.934672][T19501] RAX: ffffffffffffffda RBX: 00007f0b3d215fa0 RCX: 00007f0b3cf9c629 [ 1083.934695][T19501] RDX: 00000000000000df RSI: 000000000000e983 RDI: 0000000000000000 [ 1083.934711][T19501] RBP: 00007f0b3d032b39 R08: 0000000000000401 R09: 0000000000008000 [ 1083.934726][T19501] R10: 0000000000000eb1 R11: 0000000000000246 R12: 0000000000000000 [ 1083.934742][T19501] R13: 00007f0b3d216038 R14: 00007f0b3d215fa0 R15: 00007ffc44dd0308 [ 1083.934774][T19501] [ 1084.314341][T19506] i2c i2c-0: delete_device: Can't find device in list [ 1085.229851][T19503] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input32 [ 1090.112159][T19579] netlink: 'syz.0.3187': attribute type 11 has an invalid length. [ 1091.290521][T19390] Bluetooth: hci1: Received unexpected HCI Event 0x00 [ 1091.941341][T19616] bridge0: port 3(team0) entered blocking state [ 1091.976519][T19616] bridge0: port 3(team0) entered disabled state [ 1092.005853][T19616] team0: entered allmulticast mode [ 1092.106505][T19616] team_slave_1: entered allmulticast mode [ 1092.152523][T19616] team0: entered promiscuous mode [ 1092.166282][T19616] team_slave_1: entered promiscuous mode [ 1092.190702][T19616] bridge0: port 3(team0) entered blocking state [ 1092.197124][T19616] bridge0: port 3(team0) entered forwarding state [ 1092.610218][T19629] FAULT_INJECTION: forcing a failure. [ 1092.610218][T19629] name failslab, interval 1, probability 0, space 0, times 0 [ 1092.719983][T19629] CPU: 0 UID: 0 PID: 19629 Comm: syz.4.3201 Tainted: G L syzkaller #0 PREEMPT(full) [ 1092.720022][T19629] Tainted: [L]=SOFTLOCKUP [ 1092.720031][T19629] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1092.720046][T19629] Call Trace: [ 1092.720055][T19629] [ 1092.720064][T19629] dump_stack_lvl+0x100/0x190 [ 1092.720110][T19629] should_fail_ex.cold+0x5/0xa [ 1092.720138][T19629] should_failslab+0xc2/0x120 [ 1092.720178][T19629] __kmalloc_cache_noprof+0x7a/0x6f0 [ 1092.720207][T19629] ? refill_pi_state_cache+0x91/0x260 [ 1092.720249][T19629] refill_pi_state_cache+0x91/0x260 [ 1092.720285][T19629] futex_lock_pi+0x177/0x7b0 [ 1092.720323][T19629] ? __pfx_futex_lock_pi+0x10/0x10 [ 1092.720360][T19629] ? __pfx___futex_wait+0x10/0x10 [ 1092.720401][T19629] ? lockdep_hardirqs_on+0x78/0x100 [ 1092.720453][T19629] ? __pfx_futex_wake_mark+0x10/0x10 [ 1092.720496][T19629] ? __get_user_nocheck_8+0x20/0x20 [ 1092.720534][T19629] ? do_vfs_ioctl+0x226/0x13e0 [ 1092.720570][T19629] do_futex+0x18a/0x350 [ 1092.720601][T19629] ? __pfx_do_futex+0x10/0x10 [ 1092.720633][T19629] ? find_held_lock+0x2b/0x80 [ 1092.720676][T19629] __x64_sys_futex+0x34f/0x4d0 [ 1092.720711][T19629] ? __pfx___x64_sys_futex+0x10/0x10 [ 1092.720752][T19629] do_syscall_64+0x106/0xf80 [ 1092.720777][T19629] ? clear_bhb_loop+0x40/0x90 [ 1092.720807][T19629] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1092.720832][T19629] RIP: 0033:0x7fe5fc19c629 [ 1092.720858][T19629] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1092.720883][T19629] RSP: 002b:00007fe5fcfe5028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1092.720906][T19629] RAX: ffffffffffffffda RBX: 00007fe5fc416090 RCX: 00007fe5fc19c629 [ 1092.720923][T19629] RDX: 0000000000000008 RSI: 0000000000000006 RDI: 0000000000000000 [ 1092.720938][T19629] RBP: 00007fe5fc232b39 R08: 0000000000000000 R09: 000000008000fff5 [ 1092.720955][T19629] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1092.720969][T19629] R13: 00007fe5fc416128 R14: 00007fe5fc416090 R15: 00007ffe574092e8 [ 1092.721000][T19629] [ 1094.783269][T19390] Bluetooth: hci4: unexpected subevent 0x03 length: 253 > 9 [ 1095.755499][T19673] hub 1-0:1.0: USB hub found [ 1095.777547][T19673] hub 1-0:1.0: 1 port detected [ 1098.223852][T19714] QAT: failed to copy from user cfg_data. [ 1098.837750][T19730] misc userio: Invalid payload size [ 1101.074108][T19759] netlink: 342 bytes leftover after parsing attributes in process `syz.5.3234'. [ 1103.452799][T19786] batman_adv: Routing algorithm '' is not supported [ 1104.003255][T19390] Bluetooth: hci1: unexpected event 0x1c length: 725 > 5 [ 1105.382123][T19802] Invalid ELF header magic: != ELF [ 1108.572714][T19835] netlink: 326 bytes leftover after parsing attributes in process `syz.2.3254'. [ 1108.722647][T19847] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3259'. [ 1108.856015][T19835] bridge0: port 2(bridge_slave_1) entered disabled state [ 1108.863598][T19835] bridge0: port 1(bridge_slave_0) entered disabled state [ 1109.322021][T19847] veth0_macvtap: left promiscuous mode [ 1109.494527][T19847] macvtap0: entered promiscuous mode [ 1109.516072][T19847] macvtap0: entered allmulticast mode [ 1112.224673][T19877] snd_aloop snd_aloop.0: control 7:265:7::2463 is already present [ 1114.159170][T19900] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input33 [ 1114.892399][T19909] futex_wake_op: syz.5.3275 tries to shift op by -2048; fix this program [ 1114.952289][T19909] futex_wake_op: syz.5.3275 tries to shift op by -2048; fix this program [ 1115.032412][T19910] 0x000000000001-0x000000020000 : "" [ 1115.148981][T19910] ftl_cs: FTL header corrupt! [ 1115.970695][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1115.977126][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.868228][T19390] Bluetooth: hci2: Received unexpected HCI Event 0x00 [ 1117.758882][T19952] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3285'. [ 1118.006489][T19960] Console: switching to colour VGA+ 32x4 [ 1118.217285][T19963] netlink: 146 bytes leftover after parsing attributes in process `syz.5.3288'. [ 1120.803002][T19390] Bluetooth: hci1: SCO packet for unknown connection handle 0 [ 1121.070146][T19989] FAULT_INJECTION: forcing a failure. [ 1121.070146][T19989] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1121.350060][T19989] CPU: 0 UID: 0 PID: 19989 Comm: syz.2.3294 Tainted: G L syzkaller #0 PREEMPT(full) [ 1121.350104][T19989] Tainted: [L]=SOFTLOCKUP [ 1121.350112][T19989] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1121.350127][T19989] Call Trace: [ 1121.350135][T19989] [ 1121.350145][T19989] dump_stack_lvl+0x100/0x190 [ 1121.350185][T19989] should_fail_ex.cold+0x5/0xa [ 1121.350207][T19989] ? prepare_alloc_pages+0x16d/0x5f0 [ 1121.350234][T19989] should_fail_alloc_page+0xeb/0x140 [ 1121.350281][T19989] prepare_alloc_pages+0x1f0/0x5f0 [ 1121.350305][T19989] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1121.350347][T19989] __alloc_frozen_pages_noprof+0x19a/0x2ba0 [ 1121.350382][T19989] ? vms_complete_munmap_vmas+0x1e1/0xdd0 [ 1121.350422][T19989] ? __pfx_vms_complete_munmap_vmas+0x10/0x10 [ 1121.350454][T19989] ? vma_wants_writenotify+0x10b/0x390 [ 1121.350506][T19989] ? __pfx_vma_wants_writenotify+0x10/0x10 [ 1121.350543][T19989] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1121.350584][T19989] ? vma_set_page_prot+0xb1/0x120 [ 1121.350632][T19989] ? mas_ascend+0x53d/0xb30 [ 1121.350657][T19989] ? __pfx___mmap_region+0x10/0x10 [ 1121.350688][T19989] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1121.350729][T19989] ? policy_nodemask+0xed/0x4f0 [ 1121.350772][T19989] alloc_pages_mpol+0x1fb/0x550 [ 1121.350813][T19989] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1121.350861][T19989] alloc_pages_noprof+0x131/0x390 [ 1121.350903][T19989] __pmd_alloc+0x3b/0x9c0 [ 1121.350932][T19989] __handle_mm_fault+0xa99/0x2b60 [ 1121.350966][T19989] ? mt_find+0x45e/0x8e0 [ 1121.350996][T19989] ? __pfx___handle_mm_fault+0x10/0x10 [ 1121.351025][T19989] ? __pfx_mt_find+0x10/0x10 [ 1121.351076][T19989] handle_mm_fault+0x36d/0xa20 [ 1121.351118][T19989] __get_user_pages+0xf9c/0x34d0 [ 1121.351154][T19989] ? __pfx___get_user_pages+0x10/0x10 [ 1121.351187][T19989] populate_vma_page_range+0x267/0x3f0 [ 1121.351216][T19989] ? __pfx_populate_vma_page_range+0x10/0x10 [ 1121.351243][T19989] ? __pfx_find_vma_intersection+0x10/0x10 [ 1121.351331][T19989] ? do_mmap+0x93f/0x12f0 [ 1121.351358][T19989] __mm_populate+0x107/0x3a0 [ 1121.351386][T19989] ? __pfx___mm_populate+0x10/0x10 [ 1121.351420][T19989] ? up_write+0x290/0x4f0 [ 1121.351457][T19989] vm_mmap_pgoff+0x37f/0x470 [ 1121.351485][T19989] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 1121.351512][T19989] ? do_futex+0x192/0x350 [ 1121.351543][T19989] ? __pfx_do_futex+0x10/0x10 [ 1121.351579][T19989] ksys_mmap_pgoff+0xe1/0x650 [ 1121.351618][T19989] ? __x64_sys_futex+0x34f/0x4d0 [ 1121.351648][T19989] ? __x64_sys_futex+0x358/0x4d0 [ 1121.351678][T19989] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 1121.351719][T19989] ? xfd_validate_state+0x129/0x190 [ 1121.351758][T19989] __x64_sys_mmap+0x125/0x190 [ 1121.351797][T19989] do_syscall_64+0x106/0xf80 [ 1121.351822][T19989] ? clear_bhb_loop+0x40/0x90 [ 1121.351852][T19989] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1121.351877][T19989] RIP: 0033:0x7fe86fb9c629 [ 1121.351898][T19989] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1121.351923][T19989] RSP: 002b:00007fe870a43028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1121.351946][T19989] RAX: ffffffffffffffda RBX: 00007fe86fe16270 RCX: 00007fe86fb9c629 [ 1121.351963][T19989] RDX: 00000000000000df RSI: 0000000000400008 RDI: 0000000000000000 [ 1121.351979][T19989] RBP: 00007fe86fc32b39 R08: 0000000000000002 R09: 0000000000008000 [ 1121.351995][T19989] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 1121.352010][T19989] R13: 00007fe86fe16308 R14: 00007fe86fe16270 R15: 00007ffc7d3118f8 [ 1121.352042][T19989] [ 1123.221472][T19982] delete_channel: no stack [ 1126.228747][T20032] snd_aloop snd_aloop.0: control 7:265:7::2463 is already present [ 1128.862594][T20071] openvswitch: netlink: Flow key attr not present in new flow. [ 1129.280925][ T35] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1129.686445][T20080] Invalid ELF header magic: != ELF [ 1129.696910][T20086] FAULT_INJECTION: forcing a failure. [ 1129.696910][T20086] name failslab, interval 1, probability 0, space 0, times 0 [ 1129.819522][T20086] CPU: 0 UID: 0 PID: 20086 Comm: syz.2.3322 Tainted: G L syzkaller #0 PREEMPT(full) [ 1129.819562][T20086] Tainted: [L]=SOFTLOCKUP [ 1129.819571][T20086] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1129.819587][T20086] Call Trace: [ 1129.819595][T20086] [ 1129.819605][T20086] dump_stack_lvl+0x100/0x190 [ 1129.819647][T20086] should_fail_ex.cold+0x5/0xa [ 1129.819675][T20086] should_failslab+0xc2/0x120 [ 1129.819715][T20086] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 1129.819758][T20086] ? shmem_alloc_inode+0x25/0x50 [ 1129.819786][T20086] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 1129.819813][T20086] shmem_alloc_inode+0x25/0x50 [ 1129.819836][T20086] alloc_inode+0x68/0x250 [ 1129.819866][T20086] new_inode+0x22/0x1c0 [ 1129.819897][T20086] shmem_get_inode+0x212/0x1040 [ 1129.819930][T20086] ? __pfx_shmem_get_inode+0x10/0x10 [ 1129.819958][T20086] ? rcu_is_watching+0x12/0xc0 [ 1129.819993][T20086] ? percpu_counter_add_batch+0xb9/0x230 [ 1129.820039][T20086] __shmem_file_setup+0x3ac/0x490 [ 1129.820070][T20086] ? __pfx___shmem_file_setup+0x10/0x10 [ 1129.820105][T20086] ? vm_area_alloc+0x1f/0x160 [ 1129.820139][T20086] shmem_zero_setup+0x96/0x1b0 [ 1129.820177][T20086] __mmap_region+0x2198/0x29e0 [ 1129.820215][T20086] ? __pfx___mmap_region+0x10/0x10 [ 1129.820255][T20086] ? set_next_entity+0x11b/0x9c0 [ 1129.820294][T20086] ? __lock_acquire+0x4a5/0x2630 [ 1129.820323][T20086] ? update_cfs_rq_load_avg+0x51/0x550 [ 1129.820361][T20086] ? find_held_lock+0x2b/0x80 [ 1129.820398][T20086] ? finish_task_switch.isra.0+0x200/0xb80 [ 1129.820423][T20086] ? finish_task_switch.isra.0+0x200/0xb80 [ 1129.820459][T20086] ? trace_sched_exit_tp+0x13a/0x180 [ 1129.820487][T20086] ? __schedule+0x1000/0x60e0 [ 1129.820547][T20086] ? rcu_is_watching+0x12/0xc0 [ 1129.820589][T20086] ? cap_capable+0x107/0x460 [ 1129.820625][T20086] mmap_region+0x180/0x3e0 [ 1129.820665][T20086] do_mmap+0xc63/0x12f0 [ 1129.820694][T20086] ? __pfx_do_mmap+0x10/0x10 [ 1129.820718][T20086] ? __pfx_down_write_killable+0x10/0x10 [ 1129.820761][T20086] vm_mmap_pgoff+0x29e/0x470 [ 1129.820791][T20086] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 1129.820818][T20086] ? do_futex+0x192/0x350 [ 1129.820849][T20086] ? __pfx_do_futex+0x10/0x10 [ 1129.820885][T20086] ksys_mmap_pgoff+0xe1/0x650 [ 1129.820925][T20086] ? __x64_sys_futex+0x34f/0x4d0 [ 1129.820954][T20086] ? __x64_sys_futex+0x358/0x4d0 [ 1129.820986][T20086] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 1129.821026][T20086] ? xfd_validate_state+0x129/0x190 [ 1129.821066][T20086] __x64_sys_mmap+0x125/0x190 [ 1129.821105][T20086] do_syscall_64+0x106/0xf80 [ 1129.821131][T20086] ? clear_bhb_loop+0x40/0x90 [ 1129.821161][T20086] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1129.821186][T20086] RIP: 0033:0x7fe86fb9c629 [ 1129.821208][T20086] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1129.821233][T20086] RSP: 002b:00007fe870a43028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1129.821257][T20086] RAX: ffffffffffffffda RBX: 00007fe86fe16270 RCX: 00007fe86fb9c629 [ 1129.821274][T20086] RDX: 00000000000000df RSI: 000000000000e983 RDI: 0000000000000000 [ 1129.821289][T20086] RBP: 00007fe86fc32b39 R08: 0000000000000401 R09: 0000000000008000 [ 1129.821305][T20086] R10: 0000000000000eb1 R11: 0000000000000246 R12: 0000000000000000 [ 1129.821321][T20086] R13: 00007fe86fe16308 R14: 00007fe86fe16270 R15: 00007ffc7d3118f8 [ 1129.821352][T20086] [ 1130.882801][T20100] [U]  [ 1130.885886][T20100] [U] [ 1130.888600][T20100] [U] [ 1130.891317][T20100] [U] [ 1130.905221][T20100] [U] [ 1130.907965][T20100] [U] [ 1130.910675][T20100] [U] [ 1130.913394][T20100] [U] [ 1130.943847][T20100] [U] [ 1130.946624][T20100] [U] [ 1130.949359][T20100] [U] [ 1130.952067][T20100] [U] [ 1130.992031][T20100] [U] [ 1130.994781][T20100] [U] [ 1130.997491][T20100] [U] [ 1131.000196][T20100] [U] [ 1131.064389][T20100] [U] [ 1131.067142][T20100] [U] [ 1131.069863][T20100] [U] [ 1131.072572][T20100] [U] [ 1131.120188][T20100] [U] [ 1131.122943][T20100] [U] [ 1131.125652][T20100] [U] [ 1131.128361][T20100] [U] [ 1131.159070][T20100] [U] [ 1131.161812][T20100] [U] [ 1131.164516][T20100] [U] [ 1131.167224][T20100] [U] [ 1131.183957][T20100] [U] [ 1131.186692][T20100] [U] [ 1131.189400][T20100] [U] [ 1131.192106][T20100] [U] [ 1131.213909][T20100] [U] [ 1131.216655][T20100] [U] [ 1131.219362][T20100] [U] [ 1131.222067][T20100] [U] [ 1131.237200][T20100] [U] [ 1131.239942][T20100] [U] [ 1131.242648][T20100] [U] [ 1131.245352][T20100] [U] [ 1131.262190][T20100] [U] [ 1131.264971][T20100] [U] [ 1131.267685][T20100] [U] [ 1131.270441][T20100] [U] [ 1131.284321][T20100] [U] [ 1131.287063][T20100] [U] [ 1131.289773][T20100] [U] [ 1131.292487][T20100] [U] [ 1131.313465][T20100] [U] [ 1131.316235][T20100] [U] [ 1131.318946][T20100] [U] [ 1131.321652][T20100] [U] [ 1131.405371][T20100] [U] [ 1131.408123][T20100] [U] [ 1131.410840][T20100] [U] [ 1131.413562][T20100] [U] [ 1131.458942][T20100] [U] [ 1131.461691][T20100] [U] [ 1131.464399][T20100] [U] [ 1131.467112][T20100] [U] [ 1131.601983][T20100] [U] [ 1131.604747][T20100] [U] [ 1131.607467][T20100] [U] [ 1131.610264][T20100] [U] [ 1131.707211][T20100] [U] [ 1131.819158][ T35] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1132.495835][ T35] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1132.904978][T20117] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3328'. [ 1132.998950][T20113] zswap: compressor not available [ 1133.090038][ T35] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1133.897358][T20124] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3331'. [ 1133.930714][ T35] bridge_slave_1: left allmulticast mode [ 1133.968530][ T35] bridge_slave_1: left promiscuous mode [ 1133.984488][T20124] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3331'. [ 1134.030041][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 1134.183654][ T35] bridge_slave_0: left allmulticast mode [ 1134.215012][ T35] bridge_slave_0: left promiscuous mode [ 1134.240967][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 1135.978095][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1136.112767][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1136.196098][ T35] bond0 (unregistering): Released all slaves [ 1136.323633][T20124] bridge_slave_1 (unregistering): left allmulticast mode [ 1136.340891][T20124] bridge_slave_1 (unregistering): left promiscuous mode [ 1136.371830][T20124] bridge0: port 2(bridge_slave_1) entered disabled state [ 1136.645163][ T35] tipc: Left network mode [ 1137.523633][T20170] hub 1-0:1.0: USB hub found [ 1137.605782][T20170] hub 1-0:1.0: 1 port detected [ 1138.448847][ T35] hsr_slave_0: left promiscuous mode [ 1138.507694][ T35] hsr_slave_1: left promiscuous mode [ 1138.543476][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1138.598874][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1138.663940][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1138.716110][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1139.190527][ T35] veth1_macvtap: left promiscuous mode [ 1139.233474][ T35] veth0_macvtap: left promiscuous mode [ 1139.239065][ T35] veth1_vlan: left promiscuous mode [ 1139.333170][ T35] veth0_vlan: left promiscuous mode [ 1139.437930][T20201] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3345'. [ 1141.629424][ T35] team0 (unregistering): Port device team_slave_1 removed [ 1141.782289][ T35] team0 (unregistering): Port device team_slave_0 removed [ 1143.067131][T20216] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3348'. [ 1143.309998][T20219] HfR: entered promiscuous mode [ 1143.398441][T20216] HfR: left promiscuous mode [ 1144.531010][T19390] Bluetooth: hci2: Received unexpected HCI Event 0x00 [ 1145.335816][T20248] netlink: 330 bytes leftover after parsing attributes in process `syz.2.3352'. [ 1145.453227][T20248] mac80211_hwsim hwsim20 : renamed from wlan0 (while UP) [ 1148.880340][T20314] tipc: Started in network mode [ 1148.927581][T20314] tipc: Node identity ee00, cluster identity 4711 [ 1149.054859][T20314] tipc: Node number set to 60928 [ 1151.651072][T20350] can: request_module (can-proto-4) failed. [ 1153.107321][T20367] usb usb12: usbfs: interface 0 claimed by hub while 'syz.4.3373' sets config #-1 [ 1153.537617][T20376] netlink: 330 bytes leftover after parsing attributes in process `syz.4.3375'. [ 1153.601781][T20376] mac80211_hwsim hwsim28 : renamed from wlan0 (while UP) [ 1155.089478][T20399] netlink: 146 bytes leftover after parsing attributes in process `syz.5.3382'. [ 1155.110666][T20401] netlink: 334 bytes leftover after parsing attributes in process `syz.4.3383'. [ 1155.696719][ T29] audit: type=1804 audit(4294969005.238:18): pid=20409 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.3384" name="/newroot/sys/kernel/debug/tracing/events/vmalloc/alloc_vmap_area/filter" dev="tracefs" ino=19680823 res=1 errno=0 [ 1159.380688][T20442] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1159.406419][T20442] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1159.430693][T20442] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1159.454501][T20442] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1159.728618][T19390] Bluetooth: hci2: command 0x0c1a tx timeout [ 1161.196118][T20507] netlink: 'syz.4.3402': attribute type 1 has an invalid length. [ 1161.481770][T19390] Bluetooth: hci3: command 0x0c1a tx timeout [ 1161.487865][T19390] Bluetooth: hci1: command 0x0c1a tx timeout [ 1161.493977][T13453] Bluetooth: hci4: command 0x0c1a tx timeout [ 1172.473522][T20718] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3439'. [ 1172.522415][T20575] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 1173.239927][T20731] misc userio: Invalid payload size [ 1173.321019][T20735] netlink: 342 bytes leftover after parsing attributes in process `syz.2.3443'. [ 1173.387374][T20735] ima: policy update failed [ 1173.410008][ T29] audit: type=1802 audit(4294969022.958:19): pid=20735 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.3443" res=0 errno=0 [ 1174.481298][T20754] netlink: 'syz.5.3448': attribute type 1 has an invalid length. [ 1175.098974][T20767] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3450'. [ 1176.141100][ T29] audit: type=1800 audit(4294969536.688:20): pid=20784 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.3454" name="dbroot" dev="configfs" ino=90542 res=0 errno=0 [ 1177.051515][T20794] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(5) [ 1177.166708][T20796] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3458'. [ 1177.407277][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.416342][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1178.901355][T20825] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3467'. [ 1179.989084][T20848] FAULT_INJECTION: forcing a failure. [ 1179.989084][T20848] name failslab, interval 1, probability 0, space 0, times 0 [ 1180.027375][T20844] netlink: 330 bytes leftover after parsing attributes in process `syz.2.3472'. [ 1180.076546][T20848] CPU: 0 UID: 0 PID: 20848 Comm: syz.0.3473 Tainted: G L syzkaller #0 PREEMPT(full) [ 1180.076584][T20848] Tainted: [L]=SOFTLOCKUP [ 1180.076594][T20848] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1180.076609][T20848] Call Trace: [ 1180.076618][T20848] [ 1180.076628][T20848] dump_stack_lvl+0x100/0x190 [ 1180.076670][T20848] should_fail_ex.cold+0x5/0xa [ 1180.076697][T20848] ? process_preds+0x4bc/0x1e10 [ 1180.076732][T20848] should_failslab+0xc2/0x120 [ 1180.076772][T20848] __kmalloc_noprof+0xe0/0x850 [ 1180.076813][T20848] process_preds+0x4bc/0x1e10 [ 1180.076863][T20848] ? create_filter_start.constprop.0+0x134/0x310 [ 1180.076905][T20848] create_filter+0x140/0x210 [ 1180.076942][T20848] ? __pfx_create_filter+0x10/0x10 [ 1180.076985][T20848] ? find_held_lock+0x2b/0x80 [ 1180.077028][T20848] apply_event_filter+0x220/0x500 [ 1180.077065][T20848] ? __pfx_apply_event_filter+0x10/0x10 [ 1180.077111][T20848] event_filter_write+0x16d/0x290 [ 1180.077140][T20848] vfs_write+0x2aa/0x1070 [ 1180.077178][T20848] ? __pfx_event_filter_write+0x10/0x10 [ 1180.077207][T20848] ? __pfx_vfs_write+0x10/0x10 [ 1180.077243][T20848] ? __fget_files+0x215/0x3d0 [ 1180.077290][T20848] ? __fget_files+0x21f/0x3d0 [ 1180.077335][T20848] ksys_write+0x12a/0x250 [ 1180.077371][T20848] ? __pfx_ksys_write+0x10/0x10 [ 1180.077416][T20848] do_syscall_64+0x106/0xf80 [ 1180.077442][T20848] ? clear_bhb_loop+0x40/0x90 [ 1180.077472][T20848] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1180.077497][T20848] RIP: 0033:0x7f0b3cf9c629 [ 1180.077518][T20848] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1180.077542][T20848] RSP: 002b:00007f0b3b1f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1180.077565][T20848] RAX: ffffffffffffffda RBX: 00007f0b3d215fa0 RCX: 00007f0b3cf9c629 [ 1180.077582][T20848] RDX: 00000000000005c8 RSI: 0000000000000000 RDI: 0000000000000003 [ 1180.077596][T20848] RBP: 00007f0b3d032b39 R08: 0000000000000000 R09: 0000000000000000 [ 1180.077612][T20848] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1180.077626][T20848] R13: 00007f0b3d216038 R14: 00007f0b3d215fa0 R15: 00007ffc44dd0308 [ 1180.077659][T20848] [ 1182.748026][T20575] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 1183.138778][T20875] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 1184.532510][T20908] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input35 [ 1186.039944][T20926] netlink: 'syz.4.3493': attribute type 29 has an invalid length. [ 1186.057973][T20923] openvswitch: netlink: Duplicate key (type 15). [ 1186.072530][T20925] netlink: 'syz.4.3493': attribute type 29 has an invalid length. [ 1186.108876][T20925] netlink: 'syz.4.3493': attribute type 30 has an invalid length. [ 1186.152561][T20926] netlink: 'syz.4.3493': attribute type 30 has an invalid length. [ 1186.211813][T20925] netlink: 'syz.4.3493': attribute type 31 has an invalid length. [ 1186.261012][T20926] netlink: 'syz.4.3493': attribute type 31 has an invalid length. [ 1186.294650][T20926] netlink: 'syz.4.3493': attribute type 32 has an invalid length. [ 1186.323888][T20925] netlink: 'syz.4.3493': attribute type 32 has an invalid length. [ 1186.363145][T20926] netlink: 'syz.4.3493': attribute type 33 has an invalid length. [ 1186.402032][T20925] netlink: 'syz.4.3493': attribute type 33 has an invalid length. [ 1186.451762][T20926] netlink: 18 bytes leftover after parsing attributes in process `syz.4.3493'. [ 1186.482634][T20925] netlink: 18 bytes leftover after parsing attributes in process `syz.4.3493'. [ 1186.774562][T20931] hub 1-0:1.0: USB hub found [ 1186.844708][T20931] hub 1-0:1.0: 1 port detected [ 1187.524191][T20575] Bluetooth: hci2: Received unexpected HCI Event 0x00 [ 1188.458399][T20575] Bluetooth: hci3: unexpected event 0x1c length: 725 > 5 [ 1190.962653][T20991] vhci_hcd vhci_hcd.2: SetHubDepth req not supported for USB 2.0 roothub [ 1193.856383][T21025] zram: Added device: zram0 [ 1194.129398][T21033] nbd: must specify at least one socket [ 1195.926185][T21054] netlink: 330 bytes leftover after parsing attributes in process `syz.4.3528'. [ 1196.255756][T21056] zswap: compressor not available [ 1198.028452][T20697] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1198.039623][T20697] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1198.049659][T20697] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1198.057454][T20697] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1198.065298][T20697] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1198.653237][T21089] block nbd8: shutting down sockets [ 1199.021529][T21095] chnl_net:caif_netlink_parms(): no params data found [ 1199.334152][T21095] bridge0: port 1(bridge_slave_0) entered blocking state [ 1199.362351][T21095] bridge0: port 1(bridge_slave_0) entered disabled state [ 1199.369868][T21095] bridge_slave_0: entered allmulticast mode [ 1199.436771][T21095] bridge_slave_0: entered promiscuous mode [ 1199.464419][T21095] bridge0: port 2(bridge_slave_1) entered blocking state [ 1199.471539][T21095] bridge0: port 2(bridge_slave_1) entered disabled state [ 1199.496486][T21116] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1199.518479][T21095] bridge_slave_1: entered allmulticast mode [ 1199.550936][T21095] bridge_slave_1: entered promiscuous mode [ 1199.660584][T21095] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1199.705264][T21095] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1199.825690][T21095] team0: Port device team_slave_0 added [ 1199.859038][T21095] team0: Port device team_slave_1 added [ 1199.934326][T21095] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1199.955556][T21095] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1200.032173][T21095] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1200.060486][T21095] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1200.078314][T21095] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1200.123899][T20697] Bluetooth: hci0: command tx timeout [ 1200.143315][T21095] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1200.250290][T21095] hsr_slave_0: entered promiscuous mode [ 1200.266507][T21095] hsr_slave_1: entered promiscuous mode [ 1200.297005][T21095] debugfs: 'hsr0' already exists in 'hsr' [ 1200.315391][T21095] Cannot create hsr debugfs directory [ 1200.807269][T21095] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1200.865742][T21095] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1200.973988][T21095] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1201.035173][T21095] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1201.315557][T21095] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1201.380754][T21143] netlink: 330 bytes leftover after parsing attributes in process `syz.5.3551'. [ 1201.407591][T21095] 8021q: adding VLAN 0 to HW filter on device team0 [ 1201.436482][T21143] mac80211_hwsim hwsim30 : renamed from wlan0 (while UP) [ 1201.494200][T20851] bridge0: port 1(bridge_slave_0) entered blocking state [ 1201.501482][T20851] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1201.544370][T20851] bridge0: port 2(bridge_slave_1) entered blocking state [ 1201.551538][T20851] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1202.016881][T21095] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1202.201762][T20697] Bluetooth: hci0: command tx timeout [ 1202.811455][T20575] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1202.825142][T20575] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1202.832936][T20575] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1202.840809][T20575] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1202.852596][T20575] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1203.109873][T21095] veth0_vlan: entered promiscuous mode [ 1203.180758][T21095] veth1_vlan: entered promiscuous mode [ 1203.419298][T21095] veth0_macvtap: entered promiscuous mode [ 1203.484790][T21095] veth1_macvtap: entered promiscuous mode [ 1203.614048][T21095] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1203.675914][T21095] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1203.731165][T21165] chnl_net:caif_netlink_parms(): no params data found [ 1203.771068][T20565] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1203.846565][T20565] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1203.930594][T20565] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1203.961500][T20565] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1204.284172][T20575] Bluetooth: hci0: command tx timeout [ 1204.403038][T20570] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1204.410881][T20570] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1204.516862][T21165] bridge0: port 1(bridge_slave_0) entered blocking state [ 1204.543576][T21165] bridge0: port 1(bridge_slave_0) entered disabled state [ 1204.573859][T21165] bridge_slave_0: entered allmulticast mode [ 1204.602122][T21165] bridge_slave_0: entered promiscuous mode [ 1204.647474][T20570] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1204.655901][T21165] bridge0: port 2(bridge_slave_1) entered blocking state [ 1204.671688][T20570] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1204.689389][T21165] bridge0: port 2(bridge_slave_1) entered disabled state [ 1204.714855][T21165] bridge_slave_1: entered allmulticast mode [ 1204.744730][T21165] bridge_slave_1: entered promiscuous mode [ 1204.863278][T21165] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1204.910321][T21165] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1204.924924][T20575] Bluetooth: hci5: command tx timeout [ 1205.327420][T21165] team0: Port device team_slave_0 added [ 1205.360297][T21165] team0: Port device team_slave_1 added [ 1205.474687][T21165] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1205.497023][T21165] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1205.605571][T21165] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1205.682184][T21165] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1205.737063][T21165] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1205.836725][T21171] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 1205.854056][T21165] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1205.867841][T21187] rnbd_client L213: map_device: Parameters missing [ 1206.083431][T21165] hsr_slave_0: entered promiscuous mode [ 1206.109992][T21165] hsr_slave_1: entered promiscuous mode [ 1206.192364][T21165] debugfs: 'hsr0' already exists in 'hsr' [ 1206.198132][T21165] Cannot create hsr debugfs directory [ 1206.362342][T20575] Bluetooth: hci0: command tx timeout [ 1207.002494][T20575] Bluetooth: hci5: command tx timeout [ 1207.944790][T21165] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1208.071690][T21165] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1208.164723][T21165] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1208.226525][T21165] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1209.085074][T20575] Bluetooth: hci5: command tx timeout [ 1209.116258][T21165] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1209.240493][T21165] 8021q: adding VLAN 0 to HW filter on device team0 [ 1209.327754][T20563] bridge0: port 1(bridge_slave_0) entered blocking state [ 1209.334939][T20563] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1209.385626][T20563] bridge0: port 2(bridge_slave_1) entered blocking state [ 1209.392802][T20563] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1210.470181][T21165] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1211.161858][T20575] Bluetooth: hci5: command tx timeout [ 1211.579222][T21165] veth0_vlan: entered promiscuous mode [ 1211.661285][T21165] veth1_vlan: entered promiscuous mode [ 1211.823877][T21165] veth0_macvtap: entered promiscuous mode [ 1211.876608][T21165] veth1_macvtap: entered promiscuous mode [ 1211.929872][T21165] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1211.970501][T21165] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1212.011533][T20563] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1212.013099][T20563] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1212.013141][T20563] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1212.013180][T20563] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1212.261536][T21190] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1212.261703][T21190] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1212.359776][T20851] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1212.359802][T20851] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1213.409310][T21274] tipc: Started in network mode [ 1213.427348][T21274] tipc: Node identity ee00, cluster identity 4711 [ 1213.449304][T21274] tipc: Node number set to 60928 [ 1213.483191][T21274] FAULT_INJECTION: forcing a failure. [ 1213.483191][T21274] name failslab, interval 1, probability 0, space 0, times 0 [ 1213.541030][T21274] CPU: 0 UID: 0 PID: 21274 Comm: syz.6.3577 Tainted: G L syzkaller #0 PREEMPT(full) [ 1213.541068][T21274] Tainted: [L]=SOFTLOCKUP [ 1213.541077][T21274] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1213.541091][T21274] Call Trace: [ 1213.541100][T21274] [ 1213.541109][T21274] dump_stack_lvl+0x100/0x190 [ 1213.541167][T21274] should_fail_ex.cold+0x5/0xa [ 1213.541195][T21274] should_failslab+0xc2/0x120 [ 1213.541235][T21274] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 1213.541284][T21274] ? shmem_alloc_inode+0x25/0x50 [ 1213.541309][T21274] ? __lock_acquire+0x4a5/0x2630 [ 1213.541338][T21274] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 1213.541364][T21274] shmem_alloc_inode+0x25/0x50 [ 1213.541387][T21274] alloc_inode+0x68/0x250 [ 1213.541416][T21274] new_inode+0x22/0x1c0 [ 1213.541446][T21274] shmem_get_inode+0x212/0x1040 [ 1213.541478][T21274] ? __pfx_shmem_get_inode+0x10/0x10 [ 1213.541506][T21274] ? rcu_is_watching+0x12/0xc0 [ 1213.541539][T21274] ? percpu_counter_add_batch+0xb9/0x230 [ 1213.541584][T21274] __shmem_file_setup+0x3ac/0x490 [ 1213.541618][T21274] ? __pfx___shmem_file_setup+0x10/0x10 [ 1213.541652][T21274] ? vm_area_alloc+0x1f/0x160 [ 1213.541685][T21274] shmem_zero_setup+0x96/0x1b0 [ 1213.541721][T21274] __mmap_region+0x2198/0x29e0 [ 1213.541758][T21274] ? __pfx___mmap_region+0x10/0x10 [ 1213.541805][T21274] ? set_next_entity+0x11b/0x9c0 [ 1213.541844][T21274] ? __lock_acquire+0x4a5/0x2630 [ 1213.541872][T21274] ? update_cfs_rq_load_avg+0x51/0x550 [ 1213.541908][T21274] ? find_held_lock+0x2b/0x80 [ 1213.541945][T21274] ? finish_task_switch.isra.0+0x200/0xb80 [ 1213.541968][T21274] ? finish_task_switch.isra.0+0x200/0xb80 [ 1213.542003][T21274] ? trace_sched_exit_tp+0x13a/0x180 [ 1213.542030][T21274] ? __schedule+0x1000/0x60e0 [ 1213.542105][T21274] ? rcu_is_watching+0x12/0xc0 [ 1213.542141][T21274] ? cap_capable+0x107/0x460 [ 1213.542177][T21274] mmap_region+0x180/0x3e0 [ 1213.542217][T21274] do_mmap+0xc63/0x12f0 [ 1213.542247][T21274] ? __pfx_do_mmap+0x10/0x10 [ 1213.542270][T21274] ? __pfx_down_write_killable+0x10/0x10 [ 1213.542307][T21274] vm_mmap_pgoff+0x29e/0x470 [ 1213.542337][T21274] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 1213.542363][T21274] ? do_futex+0x192/0x350 [ 1213.542394][T21274] ? __pfx_do_futex+0x10/0x10 [ 1213.542429][T21274] ksys_mmap_pgoff+0xe1/0x650 [ 1213.542469][T21274] ? __x64_sys_futex+0x34f/0x4d0 [ 1213.542498][T21274] ? __x64_sys_futex+0x358/0x4d0 [ 1213.542529][T21274] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 1213.542569][T21274] ? xfd_validate_state+0x129/0x190 [ 1213.542608][T21274] __x64_sys_mmap+0x125/0x190 [ 1213.542646][T21274] do_syscall_64+0x106/0xf80 [ 1213.542672][T21274] ? clear_bhb_loop+0x40/0x90 [ 1213.542701][T21274] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1213.542726][T21274] RIP: 0033:0x7f76add9c629 [ 1213.542747][T21274] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1213.542776][T21274] RSP: 002b:00007f76abff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1213.542800][T21274] RAX: ffffffffffffffda RBX: 00007f76ae016090 RCX: 00007f76add9c629 [ 1213.542817][T21274] RDX: 00000000000000df RSI: 000000000000e983 RDI: 0000000000000000 [ 1213.542832][T21274] RBP: 00007f76ade32b39 R08: 0000000000000401 R09: 0000000000008000 [ 1213.542848][T21274] R10: 0000000000000eb1 R11: 0000000000000246 R12: 0000000000000000 [ 1213.542863][T21274] R13: 00007f76ae016128 R14: 00007f76ae016090 R15: 00007ffe9e775d48 [ 1213.542895][T21274] [ 1215.919559][T21304] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1217.221421][T21320] Invalid ELF header magic: != ELF [ 1218.784999][T21331] FAULT_INJECTION: forcing a failure. [ 1218.784999][T21331] name failslab, interval 1, probability 0, space 0, times 0 [ 1219.099000][T21331] CPU: 0 UID: 0 PID: 21331 Comm: syz.7.3592 Tainted: G L syzkaller #0 PREEMPT(full) [ 1219.099040][T21331] Tainted: [L]=SOFTLOCKUP [ 1219.099049][T21331] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1219.099065][T21331] Call Trace: [ 1219.099073][T21331] [ 1219.099083][T21331] dump_stack_lvl+0x100/0x190 [ 1219.099123][T21331] should_fail_ex.cold+0x5/0xa [ 1219.099150][T21331] should_failslab+0xc2/0x120 [ 1219.099189][T21331] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1219.099223][T21331] ? do_getname+0x35/0x390 [ 1219.099257][T21331] do_getname+0x35/0x390 [ 1219.099296][T21331] do_sys_openat2+0xc5/0x1e0 [ 1219.099326][T21331] ? __pfx_do_sys_openat2+0x10/0x10 [ 1219.099357][T21331] ? find_held_lock+0x2b/0x80 [ 1219.099402][T21331] __x64_sys_openat+0x12d/0x210 [ 1219.099433][T21331] ? __pfx___x64_sys_openat+0x10/0x10 [ 1219.099473][T21331] do_syscall_64+0x106/0xf80 [ 1219.099499][T21331] ? clear_bhb_loop+0x40/0x90 [ 1219.099529][T21331] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1219.099554][T21331] RIP: 0033:0x7fb0d939c629 [ 1219.099574][T21331] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1219.099598][T21331] RSP: 002b:00007fb0d75b4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1219.099622][T21331] RAX: ffffffffffffffda RBX: 00007fb0d9616180 RCX: 00007fb0d939c629 [ 1219.099639][T21331] RDX: 0000000000181040 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 1219.099655][T21331] RBP: 00007fb0d9432b39 R08: 0000000000000000 R09: 0000000000000000 [ 1219.099670][T21331] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1219.099685][T21331] R13: 00007fb0d9616218 R14: 00007fb0d9616180 R15: 00007ffe024b2ee8 [ 1219.099716][T21331] [ 1227.757154][T21397] KVM: debugfs: duplicate directory 21397-3 [ 1228.084787][T21400] netlink: 354 bytes leftover after parsing attributes in process `syz.4.3604'. [ 1232.042158][T20575] Bluetooth: hci6: Opcode 0x0c03 failed: -110 [ 1233.572505][T20697] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1233.583112][T20697] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1233.590976][T20697] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1233.599134][T20697] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1233.622158][T20697] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1234.454364][T21432] chnl_net:caif_netlink_parms(): no params data found [ 1235.031334][T21452] misc userio: Invalid payload size [ 1235.096164][T21432] bridge0: port 1(bridge_slave_0) entered blocking state [ 1235.128695][T21432] bridge0: port 1(bridge_slave_0) entered disabled state [ 1235.168984][T21432] bridge_slave_0: entered allmulticast mode [ 1235.215905][T21432] bridge_slave_0: entered promiscuous mode [ 1235.315498][T21432] bridge0: port 2(bridge_slave_1) entered blocking state [ 1235.351037][T21432] bridge0: port 2(bridge_slave_1) entered disabled state [ 1235.389833][T21432] bridge_slave_1: entered allmulticast mode [ 1235.434597][T21432] bridge_slave_1: entered promiscuous mode [ 1235.605341][T21432] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1235.691941][T21432] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1235.722954][T20697] Bluetooth: hci6: command tx timeout [ 1235.844586][T21432] team0: Port device team_slave_0 added [ 1235.890670][T21432] team0: Port device team_slave_1 added [ 1236.039397][T21432] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1236.069855][T21432] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1236.184338][T21432] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1236.253884][T21432] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1236.260969][T21432] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1236.425388][T21432] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1236.466777][T21466] nvme_fabrics: missing parameter 'transport=%s' [ 1236.615001][T21466] nvme_fabrics: missing parameter 'nqn=%s' [ 1236.706072][T21432] hsr_slave_0: entered promiscuous mode [ 1236.747737][T21432] hsr_slave_1: entered promiscuous mode [ 1236.792351][T21432] debugfs: 'hsr0' already exists in 'hsr' [ 1236.821882][T21432] Cannot create hsr debugfs directory [ 1236.900977][T21468] nvme_fabrics: missing parameter 'transport=%s' [ 1236.951711][T21468] nvme_fabrics: missing parameter 'nqn=%s' [ 1237.810303][T20697] Bluetooth: hci6: command tx timeout [ 1238.042994][T21432] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1238.087645][T21432] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1238.205691][T21432] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1238.271170][T21432] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1238.505051][T21497] netlink: 334 bytes leftover after parsing attributes in process `syz.6.3624'. [ 1238.850330][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.859861][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1238.925173][T21432] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1239.061647][T21432] 8021q: adding VLAN 0 to HW filter on device team0 [ 1239.120322][T21190] bridge0: port 1(bridge_slave_0) entered blocking state [ 1239.127785][T21190] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1239.196682][T21190] bridge0: port 2(bridge_slave_1) entered blocking state [ 1239.203914][T21190] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1239.503596][T21432] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1239.881829][T20697] Bluetooth: hci6: command tx timeout [ 1240.647578][T21432] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1241.196556][T21479] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 1241.810205][T21432] veth0_vlan: entered promiscuous mode [ 1241.877207][T21432] veth1_vlan: entered promiscuous mode [ 1241.962613][T20697] Bluetooth: hci6: command tx timeout [ 1242.017991][T21432] veth0_macvtap: entered promiscuous mode [ 1242.077523][T21432] veth1_macvtap: entered promiscuous mode [ 1242.166796][T21432] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1242.220855][T21432] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1242.342498][T20570] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1242.351250][T20570] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1242.433753][T20570] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1242.472272][T20570] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1242.716063][T20565] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1242.758013][T20565] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1242.879083][T20851] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1242.918864][T20851] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1245.770274][T21588] Invalid ELF header magic: != ELF [ 1250.653672][T21668] Invalid ELF header magic: != ELF [ 1252.323792][T21677] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1252.344257][T21677] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1252.368256][T21677] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1252.393351][T21677] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1252.415646][T21677] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1252.450004][T21677] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1252.496559][T21677] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1252.527714][T21677] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1252.542927][T21677] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 1252.562328][T21677] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 1252.580092][T21677] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 1252.586312][T21677] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 1252.614769][T21677] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 1252.887761][T21692] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3660'. [ 1253.323255][T20697] Bluetooth: hci2: command 0x0c1a tx timeout [ 1254.371690][T20697] Bluetooth: hci4: command 0x0c1a tx timeout [ 1254.442436][T20697] Bluetooth: hci0: command 0x0c1a tx timeout [ 1254.448496][T20575] Bluetooth: hci3: command 0x0c1a tx timeout [ 1254.454923][T20697] Bluetooth: hci1: command 0x0c1a tx timeout [ 1254.601922][T21713] Bluetooth: hci6: command 0x0c1a tx timeout [ 1254.608016][T20564] Bluetooth: hci5: command 0x0c1a tx timeout [ 1256.521700][T21713] Bluetooth: hci0: command 0x0c1a tx timeout [ 1256.682221][T21713] Bluetooth: hci6: command 0x0c1a tx timeout [ 1256.688304][T20564] Bluetooth: hci5: command 0x0c1a tx timeout [ 1258.603554][T21713] Bluetooth: hci0: command 0x0c1a tx timeout [ 1258.733694][T21759] bcache: register_bcache() error : Not a bcache superblock (bad offset) [ 1258.761833][T21713] Bluetooth: hci6: command 0x0c1a tx timeout [ 1258.767893][T21713] Bluetooth: hci5: command 0x0c1a tx timeout [ 1264.752692][T20564] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1264.762725][T20564] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1264.770485][T20564] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1264.778458][T20564] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1264.798377][T20564] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1265.901168][T21834] chnl_net:caif_netlink_parms(): no params data found [ 1266.349099][T21834] bridge0: port 1(bridge_slave_0) entered blocking state [ 1266.406171][T21834] bridge0: port 1(bridge_slave_0) entered disabled state [ 1266.436039][T21834] bridge_slave_0: entered allmulticast mode [ 1266.477022][T21834] bridge_slave_0: entered promiscuous mode [ 1266.509749][T21834] bridge0: port 2(bridge_slave_1) entered blocking state [ 1266.537753][T21834] bridge0: port 2(bridge_slave_1) entered disabled state [ 1266.559677][T21834] bridge_slave_1: entered allmulticast mode [ 1266.586875][T21834] bridge_slave_1: entered promiscuous mode [ 1266.720093][T21834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1266.780202][T21834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1266.842342][T21713] Bluetooth: hci7: command tx timeout [ 1266.952906][T21834] team0: Port device team_slave_0 added [ 1266.993501][T21834] team0: Port device team_slave_1 added [ 1267.160930][T21834] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1267.215677][T21834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1267.331951][T21834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1267.393824][T21834] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1267.463164][T21834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1267.598788][T21834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1267.916275][T21834] hsr_slave_0: entered promiscuous mode [ 1267.955204][T21834] hsr_slave_1: entered promiscuous mode [ 1267.981804][T21834] debugfs: 'hsr0' already exists in 'hsr' [ 1268.019927][T21834] Cannot create hsr debugfs directory [ 1268.782383][T21893] netlink: 330 bytes leftover after parsing attributes in process `syz.4.3713'. [ 1268.926524][T21713] Bluetooth: hci7: command tx timeout [ 1269.087635][T21834] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1269.153869][T21834] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1269.194017][T21834] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1269.302943][T21834] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1269.814782][T21834] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1269.914123][T21834] 8021q: adding VLAN 0 to HW filter on device team0 [ 1270.023955][T20565] bridge0: port 1(bridge_slave_0) entered blocking state [ 1270.031148][T20565] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1270.106381][T20565] bridge0: port 2(bridge_slave_1) entered blocking state [ 1270.113607][T20565] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1271.015425][T21713] Bluetooth: hci7: command tx timeout [ 1271.235563][T21834] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1272.349728][T21834] veth0_vlan: entered promiscuous mode [ 1272.413602][T21834] veth1_vlan: entered promiscuous mode [ 1272.554149][T21834] veth0_macvtap: entered promiscuous mode [ 1272.621893][T21834] veth1_macvtap: entered promiscuous mode [ 1272.642575][T21952] ubi: mtd0 is already attached to ubi31 [ 1272.699191][T21834] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1272.760662][T21834] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1272.835074][T21882] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1272.879886][T21882] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1272.926420][T21882] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1273.027942][T21882] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1273.082592][T21713] Bluetooth: hci7: command tx timeout [ 1273.306076][T21882] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1273.346339][T21882] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1273.521400][T20565] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1273.552880][T20565] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1275.863057][T21988] misc userio: Invalid payload size [ 1276.722310][T21993] netlink: 28 bytes leftover after parsing attributes in process `syz.9.3734'. [ 1278.603202][T22006] zswap: compressor not available [ 1282.142986][T22036] tipc: Started in network mode [ 1282.242047][T22036] tipc: Node identity ee00, cluster identity 4711 [ 1282.248605][T22036] tipc: Node number set to 60928 [ 1282.314459][T22037] FAULT_INJECTION: forcing a failure. [ 1282.314459][T22037] name failslab, interval 1, probability 0, space 0, times 0 [ 1282.392206][T22037] CPU: 0 UID: 0 PID: 22037 Comm: syz.9.3739 Tainted: G L syzkaller #0 PREEMPT(full) [ 1282.392245][T22037] Tainted: [L]=SOFTLOCKUP [ 1282.392254][T22037] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1282.392270][T22037] Call Trace: [ 1282.392279][T22037] [ 1282.392289][T22037] dump_stack_lvl+0x100/0x190 [ 1282.392331][T22037] should_fail_ex.cold+0x5/0xa [ 1282.392359][T22037] should_failslab+0xc2/0x120 [ 1282.392399][T22037] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1282.392433][T22037] ? vm_area_alloc+0x1f/0x160 [ 1282.392471][T22037] ? vma_merge_new_range+0x38b/0xa30 [ 1282.392503][T22037] ? __sanitizer_cov_trace_const_cmp8+0x20/0x20 [ 1282.392549][T22037] vm_area_alloc+0x1f/0x160 [ 1282.392578][T22037] __mmap_region+0x10cc/0x29e0 [ 1282.392615][T22037] ? __pfx___mmap_region+0x10/0x10 [ 1282.392655][T22037] ? set_next_entity+0x11b/0x9c0 [ 1282.392695][T22037] ? __lock_acquire+0x4a5/0x2630 [ 1282.392724][T22037] ? update_cfs_rq_load_avg+0x51/0x550 [ 1282.392761][T22037] ? find_held_lock+0x2b/0x80 [ 1282.392799][T22037] ? finish_task_switch.isra.0+0x200/0xb80 [ 1282.392824][T22037] ? finish_task_switch.isra.0+0x200/0xb80 [ 1282.392861][T22037] ? trace_sched_exit_tp+0x13a/0x180 [ 1282.392888][T22037] ? __schedule+0x1000/0x60e0 [ 1282.392949][T22037] ? rcu_is_watching+0x12/0xc0 [ 1282.392985][T22037] ? cap_capable+0x107/0x460 [ 1282.393021][T22037] mmap_region+0x180/0x3e0 [ 1282.393061][T22037] do_mmap+0xc63/0x12f0 [ 1282.393090][T22037] ? __pfx_do_mmap+0x10/0x10 [ 1282.393114][T22037] ? __pfx_down_write_killable+0x10/0x10 [ 1282.393151][T22037] vm_mmap_pgoff+0x29e/0x470 [ 1282.393181][T22037] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 1282.393207][T22037] ? do_futex+0x192/0x350 [ 1282.393237][T22037] ? __pfx_do_futex+0x10/0x10 [ 1282.393272][T22037] ksys_mmap_pgoff+0xe1/0x650 [ 1282.393312][T22037] ? __x64_sys_futex+0x34f/0x4d0 [ 1282.393349][T22037] ? __x64_sys_futex+0x358/0x4d0 [ 1282.393380][T22037] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 1282.393420][T22037] ? xfd_validate_state+0x129/0x190 [ 1282.393516][T22037] __x64_sys_mmap+0x125/0x190 [ 1282.393555][T22037] do_syscall_64+0x106/0xf80 [ 1282.393581][T22037] ? clear_bhb_loop+0x40/0x90 [ 1282.393611][T22037] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1282.393636][T22037] RIP: 0033:0x7f2f5459c629 [ 1282.393657][T22037] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1282.393681][T22037] RSP: 002b:00007f2f51f6e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1282.393705][T22037] RAX: ffffffffffffffda RBX: 00007f2f54816360 RCX: 00007f2f5459c629 [ 1282.393722][T22037] RDX: 00000000000000df RSI: 000000000000e983 RDI: 0000000000000000 [ 1282.393737][T22037] RBP: 00007f2f54632b39 R08: 0000000000000401 R09: 0000000000008000 [ 1282.393754][T22037] R10: 0000000000000eb1 R11: 0000000000000246 R12: 0000000000000000 [ 1282.393769][T22037] R13: 00007f2f548163f8 R14: 00007f2f54816360 R15: 00007fff36b65ae8 [ 1282.393801][T22037] [ 1283.918571][T22044] zswap: compressor not available [ 1288.600181][T22105] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input37 [ 1289.294153][T22117] netlink: 330 bytes leftover after parsing attributes in process `syz.9.3755'. [ 1289.374034][T22117] mac80211_hwsim hwsim40 : renamed from wlan0 (while UP) [ 1291.279897][T22126] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1296.703386][T22195] qrtr: Invalid version 0 [ 1296.971055][T22204] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3779'. [ 1298.920403][T22225] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input38 [ 1300.305441][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.312060][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1303.418942][T22260] validate_nla: 4 callbacks suppressed [ 1303.418962][T22260] netlink: 'syz.6.3792': attribute type 1 has an invalid length. [ 1309.565951][T22310] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input39 [ 1313.558289][T22352] Invalid ELF header magic: != ELF [ 1315.004315][ T30] INFO: task kworker/u8:14:7116 blocked for more than 143 seconds. [ 1315.026629][ T30] Tainted: G L syzkaller #0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1315.051615][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1315.093824][ T30] task:kworker/u8:14 state:D stack:23488 pid:7116 tgid:7116 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 1315.151644][ T30] Workqueue: netns cleanup_net [ 1315.156524][ T30] Call Trace: [ 1315.159842][ T30] [ 1315.211607][ T30] __schedule+0xfee/0x60e0 [ 1315.223256][ T30] ? __lock_acquire+0x4a5/0x2630 [ 1315.253292][ T30] ? __pfx___schedule+0x10/0x10 [ 1315.258260][ T30] ? find_held_lock+0x2b/0x80 [ 1315.301602][ T30] ? schedule+0x2bf/0x390 [ 1315.306029][ T30] schedule+0xdd/0x390 [ 1315.332304][ T30] schedule_timeout+0x1b2/0x280 [ 1315.337399][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 1315.389910][ T30] ? mark_held_locks+0x40/0x70 [ 1315.471619][ T30] __wait_for_common+0x2e7/0x4c0 [ 1315.476789][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 1315.556515][ T30] ? __pfx___wait_for_common+0x10/0x10 [ 1315.601585][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 1315.606913][ T30] ? flush_workqueue_prep_pwqs+0x2e9/0x510 [ 1315.672851][ T30] __flush_workqueue+0x3f7/0x1200 [ 1315.711440][ T30] ? __virt_addr_valid+0x32d/0x620 [ 1315.716828][ T30] ? find_held_lock+0x2b/0x80 [ 1315.747786][ T30] ? find_held_lock+0x2b/0x80 [ 1315.771592][ T30] ? __pfx___flush_workqueue+0x10/0x10 [ 1315.777169][ T30] ? queue_work_on+0x11b/0x1e0 [ 1315.828722][ T30] ? lockdep_hardirqs_on+0x78/0x100 [ 1315.834709][ T30] rxrpc_destroy_all_connections+0xf9/0x420 [ 1315.840692][ T30] ? __pfx_rxrpc_destroy_all_connections+0x10/0x10 [ 1315.911601][ T30] ? __pfx___try_to_del_timer_sync+0x10/0x10 [ 1315.917714][ T30] ? __timer_delete_sync+0x151/0x1c0 [ 1315.962722][ T30] rxrpc_exit_net+0x7b/0xc0 [ 1315.967326][ T30] ? __pfx_rxrpc_exit_net+0x10/0x10 [ 1316.001641][ T30] ops_undo_list+0x2ee/0xab0 [ 1316.006363][ T30] ? __pfx_ops_undo_list+0x10/0x10 [ 1316.042225][ T30] ? cleanup_net+0x332/0x920 [ 1316.046926][ T30] ? idr_destroy+0x62/0x2e0 [ 1316.086735][ T30] cleanup_net+0x499/0x920 [ 1316.091269][ T30] ? __pfx_cleanup_net+0x10/0x10 [ 1316.136332][ T30] ? rcu_is_watching+0x12/0xc0 [ 1316.141222][ T30] process_one_work+0x9d7/0x1920 [ 1316.185382][ T30] ? __pfx_process_one_work+0x10/0x10 [ 1316.201702][ T30] ? __pfx_cleanup_net+0x10/0x10 [ 1316.206741][ T30] worker_thread+0x5da/0xe40 [ 1316.211403][ T30] ? kthread+0x13a/0x450 [ 1316.344568][ T30] ? __pfx_worker_thread+0x10/0x10 [ 1316.349783][ T30] kthread+0x370/0x450 [ 1316.411670][ T30] ? __pfx_kthread+0x10/0x10 [ 1316.416384][ T30] ret_from_fork+0x754/0xd80 [ 1316.421083][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 1316.481856][ T30] ? __switch_to+0x7b4/0x1120 [ 1316.486646][ T30] ? __pfx_kthread+0x10/0x10 [ 1316.491310][ T30] ret_from_fork_asm+0x1a/0x30 [ 1316.545787][ T30] [ 1316.561875][ T30] [ 1316.561875][ T30] Showing all locks held in the system: [ 1316.570176][ T30] 1 lock held by khungtaskd/30: [ 1316.711646][ T30] #0: ffffffff8e7e9220 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 1316.722269][T22350] MTRR 4 not used [ 1316.750811][ T30] 3 locks held by kworker/0:4/5882: [ 1316.785083][ T30] 3 locks held by kworker/u8:14/7116: [ 1316.790574][ T30] #0: ffff88801c6ae948 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x1287/0x1920 [ 1316.852048][ T30] #1: ffffc90003427d08 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x93c/0x1920 [ 1316.895056][ T30] #2: ffffffff905f8f70 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xb8/0x920 [ 1316.931157][ T30] 2 locks held by getty/13435: [ 1316.941616][ T30] #0: ffff8880395340a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 1316.961581][ T30] #1: ffffc900025ca2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x1500 [ 1316.991603][ T30] 1 lock held by syz.0.3482/20880: [ 1316.996810][ T30] #0: ffff888048efc708 (&sb->s_type->i_mutex_key#14){+.+.}-{4:4}, at: __sock_release+0x86/0x260 [ 1317.034962][ T30] 1 lock held by syz.2.3497/20942: [ 1317.040157][ T30] #0: ffff88805ca7ccc8 (&sb->s_type->i_mutex_key#14){+.+.}-{4:4}, at: __sock_release+0x86/0x260 [ 1317.071632][ T30] 1 lock held by syz.7.3592/21329: [ 1317.076936][ T30] #0: ffffffff905f8f70 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x451/0x7c0 [ 1317.101612][ T30] 1 lock held by syz.8.3651/21642: [ 1317.106940][ T30] #0: ffff88805c923b88 (&sb->s_type->i_mutex_key#14){+.+.}-{4:4}, at: __sock_release+0x86/0x260 [ 1317.144898][ T30] 1 lock held by syz.5.3790/22248: [ 1317.150103][ T30] #0: ffffffff905f8f70 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x451/0x7c0 [ 1317.181616][ T30] 1 lock held by syz.9.3796/22279: [ 1317.187028][ T30] #0: ffffffff905f8f70 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x451/0x7c0 [ 1317.213037][ T30] 1 lock held by syz.6.3810/22336: [ 1317.218230][ T30] #0: ffff888048d0de08 (&sb->s_type->i_mutex_key#14){+.+.}-{4:4}, at: __sock_release+0x86/0x260 [ 1317.241849][ T30] 1 lock held by syz.4.3814/22350: [ 1317.247136][ T30] #0: ffffffff8e7f4e38 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x27f/0x3c0 [ 1317.291726][ T30] [ 1317.294112][ T30] ============================================= [ 1317.294112][ T30] [ 1317.334443][ T30] NMI backtrace for cpu 0 [ 1317.334478][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1317.334512][ T30] Tainted: [L]=SOFTLOCKUP [ 1317.334520][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1317.334534][ T30] Call Trace: [ 1317.334542][ T30] [ 1317.334551][ T30] dump_stack_lvl+0x100/0x190 [ 1317.334591][ T30] nmi_cpu_backtrace.cold+0x12d/0x151 [ 1317.334629][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1317.334663][ T30] nmi_trigger_cpumask_backtrace+0x1d7/0x230 [ 1317.334703][ T30] sys_info+0x141/0x190 [ 1317.334732][ T30] watchdog+0xd25/0x1050 [ 1317.334761][ T30] ? __pfx_watchdog+0x10/0x10 [ 1317.334799][ T30] ? __kthread_parkme+0x18c/0x230 [ 1317.334827][ T30] ? kthread+0x13a/0x450 [ 1317.334855][ T30] ? __pfx_watchdog+0x10/0x10 [ 1317.334890][ T30] kthread+0x370/0x450 [ 1317.334918][ T30] ? __pfx_kthread+0x10/0x10 [ 1317.334948][ T30] ret_from_fork+0x754/0xd80 [ 1317.334983][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 1317.335018][ T30] ? __switch_to+0x7b4/0x1120 [ 1317.335043][ T30] ? __pfx_kthread+0x10/0x10 [ 1317.335073][ T30] ret_from_fork_asm+0x1a/0x30 [ 1317.335110][ T30] [ 1317.762130][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 1317.769119][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1317.779838][ T30] Tainted: [L]=SOFTLOCKUP [ 1317.784206][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1317.794360][ T30] Call Trace: [ 1317.797649][ T30] [ 1317.800612][ T30] dump_stack_lvl+0x100/0x190 [ 1317.805321][ T30] vpanic+0x552/0x970 [ 1317.809442][ T30] ? __pfx_vpanic+0x10/0x10 [ 1317.813972][ T30] ? nmi_trigger_cpumask_backtrace+0x182/0x230 [ 1317.820161][ T30] panic+0xd1/0xe0 [ 1317.823922][ T30] ? __pfx_panic+0x10/0x10 [ 1317.828360][ T30] ? nmi_trigger_cpumask_backtrace+0x1b5/0x230 [ 1317.834547][ T30] ? nmi_trigger_cpumask_backtrace+0x1f6/0x230 [ 1317.840756][ T30] ? nmi_trigger_cpumask_backtrace+0x200/0x230 [ 1317.846972][ T30] ? watchdog.cold+0x198/0x1ca [ 1317.851777][ T30] ? watchdog+0xd35/0x1050 [ 1317.856219][ T30] watchdog.cold+0x1a9/0x1ca [ 1317.860882][ T30] ? __pfx_watchdog+0x10/0x10 [ 1317.865591][ T30] ? __kthread_parkme+0x18c/0x230 [ 1317.870654][ T30] ? kthread+0x13a/0x450 [ 1317.874937][ T30] ? __pfx_watchdog+0x10/0x10 [ 1317.879642][ T30] kthread+0x370/0x450 [ 1317.883737][ T30] ? __pfx_kthread+0x10/0x10 [ 1317.888347][ T30] ret_from_fork+0x754/0xd80 [ 1317.892963][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 1317.898113][ T30] ? __switch_to+0x7b4/0x1120 [ 1317.902837][ T30] ? __pfx_kthread+0x10/0x10 [ 1317.907466][ T30] ret_from_fork_asm+0x1a/0x30 [ 1317.912288][ T30] [ 1317.915392][ T30] Kernel Offset: disabled [ 1317.919726][ T30] Rebooting in 86400 seconds..