last executing test programs: 10m40.160499233s ago: executing program 32 (id=524): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000000000), 0xc0402, 0x0) ioctl$auto_posix_clock_file_operations_posix_clock(r0, 0xffffffffc0603d0f, 0x0) mmap$auto(0x0, 0x80000001, 0xffffffffffffffff, 0x800040eb1, 0x401, 0x8000000000000000) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) r1 = openat$auto_udmabuf_fops_udmabuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x8080, 0x0) r2 = ioctl$auto_UDMABUF_CREATE_LIST(r1, 0x40087543, 0x0) ioctl$auto_SCSI_IOCTL_PROBE_HOST(r2, 0x5385, &(0x7f00000006c0)="07ae50c2a8299fd3b51f35346cfc8688e170fddb7c1a891bed7e90647a438ef83c1ce88c96c86411da8ac32029c807047552130e96716e7bbf385692") unshare$auto(0x40000080) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ram10\x00', 0xd8080, 0x0) mmap$auto(0x0, 0x2402000d, 0xffffffffffffffff, 0xeb1, 0xffffffffffffffff, 0x217ffe) ioctl$auto(0x4000000000000c8, 0x400454d9, 0x3) r4 = getpid() process_vm_readv$auto(r4, &(0x7f0000000000)={0x0, 0x1002}, 0x17af760a, &(0x7f0000000280)={&(0x7f0000000e40)="53240000000051868a39ead32ea3e3cfa1ce0fe6dff98a2242400ca1dd61edf2b22b2656c6c2555eca8a9ab14fe68cc6814b7f3d6c5142908ed117739917b44d1842c724c87d4565be0114ca", 0xffffffff}, 0xd84, 0xfffffffffffffffe) unshare$auto(0x40000080) recvmmsg$auto(0x3, 0x0, 0x80000401, 0x4000, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) r5 = setfsuid$auto(0x0) setreuid$auto(r5, 0x0) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) mprotect$auto(0x0, 0x806121, 0x8) mmap$auto(0xfffffffffffffffe, 0x9, 0x10000000000df, 0xeb2, 0x401, 0x800008000) fstat$auto(r3, &(0x7f00000000c0)={0x7, 0x2, 0x0, 0x0, r5, 0x0, 0x0, 0x7, 0x1, 0x2, 0x7, 0x4, 0x1, 0x25, 0x44f5d0e8, 0x8, 0x1720}) sendmsg$auto_OVS_CT_LIMIT_CMD_SET(0xffffffffffffffff, &(0x7f0000000dc0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000700)=ANY=[@ANYBLOB="48060000", @ANYRES16, @ANYBLOB="200028bd7000fddbdf2501000000320601808202d880eb005300a6c441a59df2355ec2e229411fa97d620adb876568d24b08ee20a05844a2d939c91849200c2cda36806ee742c8dae4555633a412bea7351e8300fb362d0dae3fae5e5a03d49eb441a65d293b86873a89c15d13f9184dee1a4c3bfe210c2fe3ee3e051c7d9b7d9d6fd2aafdd407c3737a4257bf75dda2231497c85317fe68beb30e7da2211fcd229dad5212d00133b8a15cda5b1ee6ad238a8d014d1ba6a35d22904891e813de373bcceaf2825af9dcce7557482246e76b159b5e8004c8e00950b4cbdbf736036cb2b05299afb73d8efccfd4359d8bba05dcf6f972a2f21b386da3a4880791b5bf000800b600", @ANYRES16=r5, @ANYBLOB="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"], 0x648}, 0x1, 0x0, 0x0, 0x4000}, 0x84) openat$auto_xfs_dir_file_operations_xfs_file(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/bluetooth/hci1/rfkill6/power\x00', 0x0, 0x0) ioctl$auto_XFS_IOC_PATH_TO_HANDLE(r2, 0xc0385869, &(0x7f0000000240)={r3, &(0x7f0000000300)="1f4ce9640d8a1f89fa22bac910625b2fe76e52a88ca1031da94282fa28302eca463e7f203d890841f6bd226b027a02ec5e99cdda47d1fb09e015f2969a712298be37afa7f63600ed3842b4eed1e1c9c3c262b6221b5a8c36d10de3d2a66c390c488c9bf0a9e80b570b45a14061582dbd5f9f5106c7a5baef8fc0b114c0984ba426044740c392130016ce6fb68ccd555eefbb720160f573b879f12d82cc2008398d035eba56b2a9d2566af53a1da90995515813887de55b67cf08c51a54955e57c35c9e", 0x7, &(0x7f0000000400)="3a485952e0f3ea69b9764318ff6128f17c45c87a7d82fcf291b89af963a57956c24f8da6a1ef7e7ea921597bd9e710689b0a741d7a8d46c2096e3ef073cecdb65955d9e06aaf535dd664c78300c809c95a00a783e02c5109bf62faa32df75480411beb632705a3d9c055536bca31b3a344ee3d8f846f0d6e17670855a4eb25bce6ea6707698ad65efc766689e326a2b1fb04096721af82989c1bf81030753fe8e9ff14b426e796a2f20b46102edef8a72ccd69fc695237cf14dbb2801a41b2fd2df9892f6e87dfcf77e04a1208dc7f756ba010c135", 0x3, &(0x7f0000000500)="05efb05f728ceab41ab986b4e2aefd99513c9c8c887909c1205d99281aff89a8b52e3d24270e799c7f99aaf59b2fce292b513ac7d53d852975ad6049a8f8ace7de5275576ca80f109308cd20f2cec414ec5de4a937ac290ec06594ada19da59467244893eb19ff034078ff6c7351885363b14cf12f6e7c200fae9377d6343c9df81ab39d25c4889981a8ece5d5d846575bb10124ed9bb6d0f65ff902ba1bef6c0796cdb43ff10314db5dc4b35ebcdf43034bda62c87c70acca88d7bfc30a018512dd495c7b0c676597091ed44129bcfb2dd9b8c1e3112f427e6c26", &(0x7f0000000600)=0x18}) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0f0026bd7000fcdbdf9907"], 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x4) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000ec0)=ANY=[@ANYBLOB="3c000000c776016e7317118d8c12e0def2fb3d5574aede3978453de332ef1b0cdcef1904659b2c105ad1301fbbf2f912f226efdb5405cb1b76bf8a00ed03bd499e61aa45ef958f0480328977064061171e4c8f9501791475312f", @ANYRES16=r1], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) socket(0x10, 0x2, 0x3c) 10m36.708854246s ago: executing program 33 (id=534): r0 = pidfd_open$auto(0x1, 0x0) setns(r0, 0x60020000) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) sysfs$auto(0x2, 0x100000000000039, 0x0) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x40000008000) openat$auto_proc_oom_score_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/oom_score_adj\x00', 0x102, 0x0) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) r1 = setfsuid$auto(0xee00) (async) read$auto(0x3, 0x0, 0xfdef) r2 = setfsuid$auto(0xee01) (async) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/mm/ksm/advisor_mode\x00', 0xa0340, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f0000001140)=""/4093, 0xffd) setresuid$auto(r1, r2, r1) writev$auto(0x3, &(0x7f0000000080)={0x0, 0x3e8}, 0x3) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) close_range$auto(0x2, 0x8, 0x0) (async) splice$auto(r0, &(0x7f0000000080)=0x16c7, r4, &(0x7f0000000140)=0x3ff, 0x5, 0x9f) connect$auto(0x3, &(0x7f0000000000), 0x55) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x1e, &(0x7f0000000000), 0x1) (async) r5 = fsopen$auto(0x0, 0x1) fsconfig$auto(r5, 0x1, &(0x7f0000000000)='4\x93\x03\x00\x04\x00\x00', &(0x7f00000001c0), 0x0) mount$auto(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x20008, 0x0) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) r6 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_FLOW_CMD_GET(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010425bd700002dcdf250300cebb8d3e6ca8000004000800040008001c0001801800108014000b00ff020000000000000000000000000001"], 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x8d0) 8m0.856669672s ago: executing program 34 (id=1026): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptya3\x00', 0x2000, 0x0) r1 = socketpair$auto(0x0, 0xffffffff, 0x8000000000000000, 0x0) mmap$auto(0x0, 0xfffffffffffffffc, 0x3, 0x40ebf, 0xffffffffffffffff, 0x308000000004) statx$auto(0xffffffffffffffff, 0x0, 0x401ff, 0x8001, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x0) bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0x5, 0x2, 0x2, 0x8, 0x4, 0xffffffffffffffff, 0xa, "2a36c83ce63f00a18b5f2600", 0x0, 0xffffffffffffffff, 0x5, 0x7, 0x7, 0x6}, 0xf) r2 = open(&(0x7f0000000000)='./file0\x00', 0x84242, 0xe1d2b27bdc14aabc) fallocate$auto(r2, 0x0, 0x7, 0x4cbd5d) rename$auto(&(0x7f0000000480)='./file0\x00', &(0x7f0000000100)='./file1\x00') write$auto(r2, 0x0, 0x1) bpf$auto(0x1a, &(0x7f0000000380)=@link_create={@map_fd, @target_fd, 0x3, 0x81, @uprobe_multi={0x81, 0x1ff, 0x3d7e, 0x0, 0x1, 0x4}}, 0x92) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000540)='/dev/tty45\x00', 0x200, 0x0) ioctl$auto_TIOCSTI2(r3, 0x5412, &(0x7f0000000840)="13") mmap$auto(0x0, 0xa, 0xdb, 0x9b72, r1, 0x8000) close_range$auto(0x2, 0x8, 0x0) pread64$auto(r0, &(0x7f0000000040)='\x00', 0x6, 0x6) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptya3\x00', 0x103e81, 0x0) r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) write$auto(0x3, 0x0, 0x81) recvfrom$auto(0x4, 0x0, 0x1, 0x3ffffd, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) openat$auto_uhid_fops_uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2800, 0x0) r5 = epoll_create$auto(0x3e) epoll_ctl$auto(r5, 0x1, r4, 0x0) ioctl$auto_TIOCSTI2(r3, 0x5412, 0x0) 3m14.924976319s ago: executing program 2 (id=2014): mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) socket(0x2, 0x2, 0x0) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x50) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000000000), 0xc0402, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) r0 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card1\x00', 0x1, 0x0) ioctl$auto(r0, 0x800064bc, 0x1e6) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/devices/platform/dummy_hcd.0/usb1/devpath\x00', 0x20000, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000000540)=""/68, 0x44) openat$auto_rb_simple_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/tracing_on\x00', 0x488100, 0x0) shmctl$auto(0x3, 0xc5e, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) migrate_pages$auto(0x0, 0x8, 0x0, &(0x7f00000001c0)=0x7b) r2 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/adsp1\x00', 0x40440, 0x0) ioctl$auto_SNDCTL_DSP_CHANNELS(r2, 0xc0045006, 0x0) readv$auto(r2, &(0x7f0000000200)={0x0, 0xfffc}, 0x3) fsconfig$auto_FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000000)='/dev/sequencer\x00', &(0x7f0000000140), 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x6, 0x0) 3m13.899960796s ago: executing program 2 (id=2018): socket$nl_generic(0x10, 0x3, 0x10) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram5\x00', 0x14fa02, 0x0) mmap$auto(0x0, 0x10005, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) r1 = socket(0x23, 0x5, 0x0) bind$auto(r1, 0x0, 0x80) r2 = socket(0x2a, 0x2, 0x1) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) connect$auto(r2, &(0x7f00000000c0)=@qipcrtr={0x2a, 0xffffffff, 0xfffffffe}, 0x55) io_uring_setup$auto(0x1, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x40000000c07) fcntl$auto(0x0, 0x407, 0x0) close_range$auto(0x2, 0x8, 0x0) r3 = socketcall$auto_SYS_GETSOCKOPT(0xf, 0x0) write$auto_tracing_mark_fops_trace(r3, &(0x7f0000000080)="164641", 0x3) ioctl$auto_PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f0000000100)={0x60, 0x2, 0x110000, 0x7fffffffefff, 0xfffffffffffffffe, 0x1, 0x0, 0x7f, 0x0, 0x2, 0x0, 0x2}) timerfd_settime$auto(0xffffffffffffffff, 0x3, &(0x7f0000000040)={{0x2, 0x8000000000000000}, {0x2, 0x80}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = getpid() process_vm_readv$auto(r4, 0x0, 0x1, &(0x7f0000000280)={&(0x7f0000000080), 0xffffffff}, 0x6, 0x0) read$auto(r0, 0x0, 0x20) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$auto_ovs_vport(0x0, 0xffffffffffffffff) openat$nci(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) 3m13.272195817s ago: executing program 2 (id=2020): openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/controlC1\x00', 0x2000, 0x0) r0 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, 0x0, 0x2a082, 0x0) ioctl$auto_FBIOPAN_DISPLAY(r0, 0x4606, &(0x7f0000000000)) 3m13.199797233s ago: executing program 2 (id=2022): r0 = waitid$auto(0x8, 0xffffffffffffffff, 0x0, 0x3, 0x0) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) ioctl$auto_BLKFLSBUF(r1, 0x1261, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, 0x0, 0x42, 0x0) mmap$auto(0x0, 0x202000a, 0x5, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$auto_VHOST_SET_BACKEND_FEATURES(r2, 0x4008af25, &(0x7f0000000000)=0x7) mmap$auto(0x4, 0xa00006, 0x2, 0x100000000040eb1, 0x602, 0x300000000000) rseq$auto(&(0x7f0000000580)={0xfffffff9, 0x85, 0x9416, 0x1, 0x7, 0x6, "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"}, 0x6, 0x3, 0xff) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket(0x6, 0xa, 0x1) unshare$auto(0x40000080) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x42, 0x1, r0, 0x1, 0x8) r4 = socket(0xa, 0x801, 0x84) mmap$auto(0x0, 0x2020009, 0x9, 0xeb1, r4, 0x8000) bind$auto(0x3, &(0x7f0000000140)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @empty}, 0x54) setsockopt$auto(0x3, 0x10000000084, 0x11, 0x0, 0x8) write$auto(r3, 0x0, 0x100000a3d9) socket(0x2b, 0x1, 0x0) ioctl$auto(0x3, 0x8905, 0x38) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) io_uring_setup$auto(0x1, 0x0) close_range$auto(0x2, 0xa, 0x0) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/mm/mempolicy/weighted_interleave/node0\x00', 0xa001, 0x0) write$auto(r5, &(0x7f0000000180)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0xfdf1) 3m12.531650604s ago: executing program 2 (id=2025): openat$auto_proc_setgroups_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/setgroups\x00', 0x149002, 0x0) write$auto(0xffffffffffffffff, &(0x7f0000000080)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94&\x81\xe2\x13\x8f\xea#\xf8F\xbbOO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\b\xc1\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xcbA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(', 0xa) unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) socket(0x2b, 0x1, 0x0) listen$auto(0x3, 0x81) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x18, 0xa, 0x1) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa}, 0x55) mmap$auto(0x0, 0x202000a, 0xffffffff, 0xdc, 0xfffffffffffffffa, 0x8000) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) r1 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) r2 = syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="1400000058796d0fbe8d7b706cb1ee2f5d5aff89cf5a93ee35f525f07109a5b9a0b40efdfccb56b9f79d6458ed03dc45d02a96c6ab23e9055b0d8fd022b013a3e8b59227af4e8eea8655f14ad9fad1c6faecbd3432722d31a7c15896d7832f41d6647354be72c727e88d33e70267b724e06fb15a5e2ae578ecd1a1a1f7f044a45984c7733f741077193e1ee0bbe25a3e462d58593768af5c0920fb057434f40e26349bab2bd4c39e5e704249b3a82e3b0324fcf26ee28499677c1690404ddfddd16a1392c45738f4341661c1", @ANYRES16=r2, @ANYBLOB="010031bd7000fddbdf250c000000"], 0x14}}, 0x24048084) madvise$auto(0x0, 0x200007, 0x19) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/thread-self/pagemap\x00', 0x103003, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x101001, 0x0) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000001c0), 0x101000, 0x0) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) r4 = openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f0000000340), 0x80200, 0x0) pread64$auto(r4, 0x0, 0x100000002, 0x100000001) close_range$auto(0x0, 0xfffffffffffff000, 0x0) mq_notify$auto(0xffffffffffffffff, &(0x7f0000000180)={@sival_ptr=0x0, @inferred, 0x0, @_sigev_thread={0x0, 0x0}}) mq_open$auto(&(0x7f0000000280)='\\*)A\x00', 0x7e, 0x9, 0x0) mq_timedsend$auto(r1, 0x0, 0x2, 0x9, 0x0) 3m8.842267761s ago: executing program 2 (id=2029): r0 = socket(0xa, 0x2, 0x3a) (async) r1 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_FLOW_CMD_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x28, r1, 0x1, 0x70bd29, 0x25dfdc02, {}, [@OVS_FLOW_ATTR_PROBE={0x4}, @OVS_FLOW_ATTR_KEY={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x16, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}]}, @OVS_FLOW_ATTR_PROBE={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x200440f0}, 0x800) (async) r3 = socket(0xa, 0x1, 0x84) getsockopt$auto(r3, 0x0, 0x53, 0x0, &(0x7f0000000040)=0x2c) (async, rerun: 64) r4 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000040), 0x20904, 0x0) (rerun: 64) ioctl$auto_SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f0000000000)={{0x3, 0x1002, 0xfffffffc, 0x5, 0x2}, "654c6dbc7a4d30983899a7e1325b6a29ba1e18441074052a3fa6c3ccf1bf00"}) readv$auto(r4, &(0x7f0000000a80)={0x0, 0x2}, 0x2) (async) ioctl$auto_SNDRV_TIMER_IOCTL_INFO(r4, 0x80e85411, 0x0) socket(0x11, 0x80003, 0x300) (async) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) (async) io_uring_setup$auto(0x6, 0x0) (async) r5 = socket(0x10, 0x2, 0x4) setsockopt$auto(r5, 0x104000000000010e, 0x1, 0x0, 0x16) (async) bpf$auto(0xffff0001, 0x0, 0x5) pidfd_open$auto(0x1, 0x0) (async, rerun: 64) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (rerun: 64) openat$auto_sg_fops_sg(0xffffffffffffff9c, 0x0, 0x60042, 0x0) (async) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) unshare$auto(0x40000080) (async) unshare$auto(0x40000080) fallocate$auto(0xffffffffffffffff, 0x2, 0xc5, 0x800) (async, rerun: 32) socket(0x21, 0x0, 0x6) (async, rerun: 32) ioctl$auto(0x3, 0x541b, 0xfffffffffffff4e0) (async) io_uring_setup$auto(0x6, 0x0) (async, rerun: 32) bind$auto(r0, &(0x7f0000000280)=@llc={0x1a, 0x325, 0x6, 0x9d, 0x6, 0x8, @random="c7ff4dd0edeb"}, 0x4) (rerun: 32) 3m4.45171648s ago: executing program 5 (id=2043): bpf$auto(0x0, &(0x7f00000003c0)=@task_fd_query={0x5, 0xffffffffffffffff, 0x454f, 0x5f, 0x180, 0x0, 0xffffffffffffffff, 0x80000001}, 0x6d4) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000012c0)='/sys/devices/virtual/ptp/ptp0/n_vclocks\x00', 0x8502, 0x0) mmap$auto(0x0, 0x400008, 0xe3, 0x9b72, 0x2, 0x8000) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptya7\x00', 0x101e81, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptyde\x00', 0xa0102, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) r0 = socket(0xf, 0x3, 0x2) sendmmsg$auto(r0, 0x0, 0x3, 0x5) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/veth0/accept_ra_pinfo\x00', 0x2000, 0x0) read$auto(0xffffffffffffffff, 0x0, 0x2) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000280)='/proc/thread-self/fail-nth\x00', 0x2, 0x0) write$auto(r1, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) write$auto(0x3, 0x0, 0x100082) 3m3.508996619s ago: executing program 5 (id=2046): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0xffffffffffffffff, 0x3) openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x40342, 0x22) r0 = openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000000040), 0x80040, 0x0) ioctl$auto_USB_RAW_IOCTL_CONFIGURE(r0, 0x5509, 0x0) bpf$auto(0x3f7a, &(0x7f0000000240)=@raw_tracepoint={0x4, r0, 0x0, 0xb10}, 0x6) openat$auto_ftrace_event_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/tracing/events/vmalloc/alloc_vmap_area/filter\x00', 0x2, 0x0) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) read$auto(0xffffffffffffffff, 0x0, 0x7) writev$auto(r1, &(0x7f0000000200)={0x0, 0xb}, 0x200000003) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/vlan/config\x00', 0xc0000, 0x0) 3m3.323941464s ago: executing program 5 (id=2048): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) r0 = socket(0xa, 0x5, 0x84) r1 = bpf$auto(0x2, &(0x7f00000001c0)=@raw_tracepoint={0x5, 0xffffffffffffffff, 0x0, 0x3}, 0x4) r2 = syz_genetlink_get_family_id$auto_nfc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_NFC_CMD_GET_SE(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)={0x100, r2, 0x4, 0x70bd25, 0x25dfdbfd, {}, [@NFC_ATTR_COMM_MODE={0x5}, @NFC_ATTR_VENDOR_DATA={0xdb, 0x1f, "4867d901dacc02eee1ab47506566b7c229d22cc8a7fbdfcfd9bd6028aa45e54fa80dca082e29c1e5b387677a7a5ae38f64b5edda851d2e0632b3268a8713d048450c51ae49a3cab3b0434f170ac98a1d4b2af52a1318bc7b75e97377c1719dc4396b8cd427aebea5bd8b9ef8cb29a38e01b0aaedbb4dec5c01509b408e4324852822624ac71b75246d1e057d787adba2b2f7048cb7633f3ef06b2fa2d95b9c41cf18ef52038ac5361b634fe127797b8b7efc85259463ab7203956656837c7a1c51fc4febb2d48c33907395ab64f299dfcc7889d18ce151"}, @NFC_ATTR_COMM_MODE={0x5, 0xa, 0x1}]}, 0x100}, 0x1, 0x0, 0x0, 0x44110}, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0xb, 0x0) r3 = socket(0x2, 0x5, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0x2, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) sendmmsg$auto(r3, &(0x7f0000000100)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x1a000}, 0x7, 0x0, 0x2, 0xb}, 0xfff}, 0x5, 0x311) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0xf00) getsockopt$auto(r0, 0x84, 0x1f, 0x0, &(0x7f0000000080)=0x49b) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0xd4, 0x8000) mmap$auto(0x1000000000, 0x6, 0x3, 0x9b72, 0x2, 0x8000) r4 = getpid() process_vm_readv$auto(r4, &(0x7f0000000000)={0x0, 0xfff}, 0x40000000001, &(0x7f0000000180)={0x0, 0x40000000001243}, 0xa, 0x0) 3m3.061809091s ago: executing program 5 (id=2049): mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x14fa02, 0x0) openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r0 = openat$auto_dma_buf_debug_fops_(0xffffffffffffff9c, &(0x7f0000000200), 0x500, 0x0) read$auto_dma_buf_debug_fops_(r0, &(0x7f0000000240)=""/83, 0x53) 3m2.861293637s ago: executing program 5 (id=2050): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0xc) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000010c0), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0xc1, 0x2020009, 0x80000001, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x11, 0x80000, 0x300) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/mptcp/available_schedulers\x00', 0x0, 0x0) read$auto(r1, &(0x7f00000001c0)='(]\x00\x8cyg\xe6\x95\xb7\x93\x14j\xc0\x021\x1c\xccW:/z\xbbm9\xdf|{*:\xb8\xbe\x93\xca\x82\xd3\xcc]\x02\x00\x00\x00\x00\x00\x00\x00Q\x1bN\x99\xa4\x1d\x01\x94\xb9^u\x92\xf7\xb2E\xb2c\x8b\x87H \xb3\x11\v\xe2\xb9Q\x99\x13\xf8\x95Vq\xee\xeeP\xb6e8\xbf\xce\xd7\x17G\x02G\x80\xc6\xd2\xbd\xe1f;a\x01\xd0h\xc5\xf6\x9f\xa0\xf0t\x18\xe0\xac\xaa\xb79\xed\xce,\x1d\x12QK\xffO\xb9^\x86`Z\xffs\xd0\xa4\nt\xb1\xb6\xb9\xc6\'\xa0\n#j\xc2\xac\xff\xc4\x15O\xba\xc5\xc0\xf3Z\xb5\x18\x92,\x06\xf5\x7f\x92\xd1\xf1N\x0ev]\xa3\xbb\x12\xb9\xb8\xcb_\xa5\x0f\x1f>a\x88\xa0?\xf7\xc2\x16+\x95\x1b\x96\xbd\x15\x15\xe3\x96`\xe6\xf2\x02\xc1{8\xcd\xdbV\xc6ZH4\x03\x98V\xfd-\xa0OM\x9ex\xc5\xc2>8\xdat5=\xff\n\xddB\xee\x96\x1dx\n(\xdd\x14e\x1c\x18\x7f\xae\x8e\xebs4\xb6\x9b0\xca\"\xa2\x8b(T\x03\x81k\x91*w\xe17\x94\xfb\xf1\xbe\xfe8\xe2\xddV\x8b}\x11\xa75\xa4j\x8e\x15\x1d\xfe\x8ar\xfa\xf3%\f\xe2\x1fj\x1e\x97\xd9\x9c_l\x12_\x85\xea\xaew\x02\x8f\xf4\x90&\x99\xb1\x83\xd8he\xe2X\xc8\xcd\x90\xde=\xd2\x81\x8b\xed\xbc\x86\xdb\x8a%\x9c\x00\\\xe1\x84\x7fv!\xc2p\x00\xf1\xf8)\xd2\x97\x90\xb7\x8d\xb2:C\xfa\xa7\x1f\t\xa4Ma\xb4\xb2\x12f\xfa\xae\x8c8\xf0\x91\x9c\xeb\xeb\xc1mi\x1b\xb6\x8c\xbf\x19\xe5z\xcb$:\xe3\xa0\x8a,\xba\xe3\xb5\xd4,\xd5\x15DS\xd08x\xc0\xb9\x11\xb2@\xa2\xe1\xfd\xd4\b\x12\xa4\x90c\x8a\xac\xdc\xa3\x03\xaf\xc7\xd2\x810b\xfb\xac\xf9G\xeb\xf0\xb7\x19/\'\xc8\xb9\xa3\nX\x92\x8b\xe7\xe1\xf1\xaf\xfds\x0e\x9b9\xcc\x80T4N\xd3\x0e\x14\xc92\xde\xbb\xe5\xc2\x02\x8a\xe2(\x0f\x93@\x19?\x96I4h\xf5nXA\v\xc4\xf5\x87P\xe4\xb2\x94(\x12qo\xa9\xb9\x16}B\xbc\xe7\x10tD\x9c\xe2\"\x04-\xb01\x99C\xa8m\xb2`\x8c\x18\x9d\xb4\"\xab\xb1\x06\xa3Q{\x05\x1d\x8c4xo\xea\xd4\x99\x17$\x94\x99\x06\x96\x99\v{u\\\x84\xc0M\xd5\"\xb1\x92\a\x02\xac\t\xde\x8a\xbb\x8d\x88\xd6\xff`\x87|\xc7E\x88N\x17\x8eA\xb8\x95\xces\xba\x8a\x18d\xf9`g\n\xa0\xe4#\xfb\xf0\x84R\xc7xi\xb1\x19\xa4.\xc1\xca\x9d\xdb\x11T\xca\x93\xe3\xdfXk\'\xe2\f\xfc\x94iYt\x0e\xac`*\x1cx>\xb9\x9e\x83cf\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) listen$auto(0x3, 0x81) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) madvise$auto(0x0, 0x2003f2, 0x15) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)=ANY=[@ANYRES8, @ANYRES16, @ANYBLOB="df250c000000000000"], 0x14}}, 0x24048004) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0xa8, r4, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NFSD_A_SERVER_SCOPE={0x81, 0x4, 'nfsf\x00\xd8\xef\xe4-\x13+r\xf3\fT1Z\xa7J[\x81\a\xcf-\xdf\x90\x1f\x8f\xc8\x13e\xe2R7D\x832j\xce}\xa3V\xb7\xa1o\\\xe6\x13\xbc\f\xe3\xae\xb8~\xd3\xd2+J\'\xc3\xec\xc9\fp\xc8a\xbe\xfe`\xa7\xa9AKDd\'\xa0\x01\xf6\x13y\xe8\xca\xf4Q\x9e\x03*]\xda\x1e\x11t\xe2\xd5uw+\x93\xfc\x04l\xd3\xa6t\x86k\x80\xd9\x14s\xec\xe2H\xc0=(\xf99\x8ac\xa7\x85\x99\x87'}, @NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0x85}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x2}]}, 0xa8}}, 0x4000) sendmsg$auto_NFSD_CMD_VERSION_GET(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x0) madvise$auto(0x0, 0x200007, 0x19) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, 0x0, 0x404001, 0x0) mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/smaps_rollup\x00', 0x40000, 0x0) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0xb74, 0x66a) socket(0x2, 0x3, 0xa) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x54) mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) r5 = bpf$auto(0xfffffffe, &(0x7f00000001c0)=@query={@target_fd, 0x8, 0x3, 0x5, 0xff, @count=0xe35c, 0x0, 0x5, 0x80000000000006, 0xd9, 0xffffffff}, 0x6f2) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_CHANNELS_SET(r1, &(0x7f0000000600)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000500)={0xb8, 0x0, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [@ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x3}, @ETHTOOL_A_CHANNELS_HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x400}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x71}]}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x10000}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x7}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x4}, @ETHTOOL_A_CHANNELS_HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xfffffffc}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x2f4}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x6}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x6}]}, 0xb8}, 0x1, 0x0, 0x0, 0x8001}, 0x20000005) sendmsg$auto_ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="d4000000", @ANYRES16=0x0, @ANYBLOB="100027bd7000fbdbdf2518000000200001800247eea41fac000014000200766574683100000000000000000000000800070063fbffff0500060001000000840002803d00488013b37090badc49d6dc93876646d25a4d297d01cd3b7da38d12889cc50d505f353dc42d0a3c0a14c7b46428910708003600", @ANYRES32=0x0, @ANYBLOB="0400b3800000003d003b800400a4800c009a00008000000000000004008680c16ab1b1b39dcaa14b6af7dcc011b43cf706e562811c62b28a702b72e0a87126700294f2350000000c000180080003"], 0xd4}, 0x1, 0x0, 0x0, 0x20000010}, 0x20008000) 2m53.40465895s ago: executing program 35 (id=2029): r0 = socket(0xa, 0x2, 0x3a) (async) r1 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_FLOW_CMD_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x28, r1, 0x1, 0x70bd29, 0x25dfdc02, {}, [@OVS_FLOW_ATTR_PROBE={0x4}, @OVS_FLOW_ATTR_KEY={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x16, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}]}, @OVS_FLOW_ATTR_PROBE={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x200440f0}, 0x800) (async) r3 = socket(0xa, 0x1, 0x84) getsockopt$auto(r3, 0x0, 0x53, 0x0, &(0x7f0000000040)=0x2c) (async, rerun: 64) r4 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000040), 0x20904, 0x0) (rerun: 64) ioctl$auto_SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f0000000000)={{0x3, 0x1002, 0xfffffffc, 0x5, 0x2}, "654c6dbc7a4d30983899a7e1325b6a29ba1e18441074052a3fa6c3ccf1bf00"}) readv$auto(r4, &(0x7f0000000a80)={0x0, 0x2}, 0x2) (async) ioctl$auto_SNDRV_TIMER_IOCTL_INFO(r4, 0x80e85411, 0x0) socket(0x11, 0x80003, 0x300) (async) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) (async) io_uring_setup$auto(0x6, 0x0) (async) r5 = socket(0x10, 0x2, 0x4) setsockopt$auto(r5, 0x104000000000010e, 0x1, 0x0, 0x16) (async) bpf$auto(0xffff0001, 0x0, 0x5) pidfd_open$auto(0x1, 0x0) (async, rerun: 64) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (rerun: 64) openat$auto_sg_fops_sg(0xffffffffffffff9c, 0x0, 0x60042, 0x0) (async) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) unshare$auto(0x40000080) (async) unshare$auto(0x40000080) fallocate$auto(0xffffffffffffffff, 0x2, 0xc5, 0x800) (async, rerun: 32) socket(0x21, 0x0, 0x6) (async, rerun: 32) ioctl$auto(0x3, 0x541b, 0xfffffffffffff4e0) (async) io_uring_setup$auto(0x6, 0x0) (async, rerun: 32) bind$auto(r0, &(0x7f0000000280)=@llc={0x1a, 0x325, 0x6, 0x9d, 0x6, 0x8, @random="c7ff4dd0edeb"}, 0x4) (rerun: 32) 2m46.057738654s ago: executing program 36 (id=2052): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) listen$auto(0x3, 0x81) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) madvise$auto(0x0, 0x2003f2, 0x15) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)=ANY=[@ANYRES8, @ANYRES16, @ANYBLOB="df250c000000000000"], 0x14}}, 0x24048004) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0xa8, r4, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NFSD_A_SERVER_SCOPE={0x81, 0x4, 'nfsf\x00\xd8\xef\xe4-\x13+r\xf3\fT1Z\xa7J[\x81\a\xcf-\xdf\x90\x1f\x8f\xc8\x13e\xe2R7D\x832j\xce}\xa3V\xb7\xa1o\\\xe6\x13\xbc\f\xe3\xae\xb8~\xd3\xd2+J\'\xc3\xec\xc9\fp\xc8a\xbe\xfe`\xa7\xa9AKDd\'\xa0\x01\xf6\x13y\xe8\xca\xf4Q\x9e\x03*]\xda\x1e\x11t\xe2\xd5uw+\x93\xfc\x04l\xd3\xa6t\x86k\x80\xd9\x14s\xec\xe2H\xc0=(\xf99\x8ac\xa7\x85\x99\x87'}, @NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0x85}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x2}]}, 0xa8}}, 0x4000) sendmsg$auto_NFSD_CMD_VERSION_GET(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x0) madvise$auto(0x0, 0x200007, 0x19) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, 0x0, 0x404001, 0x0) mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/smaps_rollup\x00', 0x40000, 0x0) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0xb74, 0x66a) socket(0x2, 0x3, 0xa) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x54) mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) r5 = bpf$auto(0xfffffffe, &(0x7f00000001c0)=@query={@target_fd, 0x8, 0x3, 0x5, 0xff, @count=0xe35c, 0x0, 0x5, 0x80000000000006, 0xd9, 0xffffffff}, 0x6f2) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_CHANNELS_SET(r1, &(0x7f0000000600)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000500)={0xb8, 0x0, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [@ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x3}, @ETHTOOL_A_CHANNELS_HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x400}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x71}]}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x10000}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x7}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x4}, @ETHTOOL_A_CHANNELS_HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xfffffffc}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x2f4}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x6}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x6}]}, 0xb8}, 0x1, 0x0, 0x0, 0x8001}, 0x20000005) sendmsg$auto_ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="d4000000", @ANYRES16=0x0, @ANYBLOB="100027bd7000fbdbdf2518000000200001800247eea41fac000014000200766574683100000000000000000000000800070063fbffff0500060001000000840002803d00488013b37090badc49d6dc93876646d25a4d297d01cd3b7da38d12889cc50d505f353dc42d0a3c0a14c7b46428910708003600", @ANYRES32=0x0, @ANYBLOB="0400b3800000003d003b800400a4800c009a00008000000000000004008680c16ab1b1b39dcaa14b6af7dcc011b43cf706e562811c62b28a702b72e0a87126700294f2350000000c000180080003"], 0xd4}, 0x1, 0x0, 0x0, 0x20000010}, 0x20008000) 2m46.037891165s ago: executing program 7 (id=2067): mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) socket(0x2, 0x2, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x100) socket(0x840000000002, 0x3, 0xff) socketpair$auto(0x3, 0x5, 0x8, 0x0) setsockopt$auto(0x3, 0x0, 0x13, 0x0, 0x9) connect$auto(0x3, &(0x7f00000000c0)=@in={0x2, 0x0, @local}, 0x55) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x4, &(0x7f00000002c0)={0x0, 0xffeb}, 0x1, 0x0, 0x5, 0x7}, 0x8}, 0xffffffff, 0xb00) open(&(0x7f0000000000)='./cgroup\x00', 0x0, 0x160) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_vhci_fops_hci_vhci(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket(0x11, 0xa, 0x9) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0xc) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/fib_multipath_hash_policy\x00', 0x2602, 0x0) write$auto_proc_sys_file_operations_proc_sysctl(r0, 0x0, 0x0) openat$auto_fops_u64_(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/netdevsim/netdevsim2/psample/latency_max\x00', 0x400, 0x0) write$auto(0x3, 0x0, 0xfdf3) preadv2$auto(0x3, 0x0, 0x5, 0xffffffffffffffff, 0x7, 0x2e) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x50) socketpair$auto(0x1, 0x2, 0x7fd, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) setsockopt$auto(0x3, 0x0, 0xa, 0x0, 0x10000) 2m45.718523347s ago: executing program 7 (id=2074): openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000240)='/dev/midi2\x00', 0x80, 0x0) close_range$auto(0x2, 0x8, 0x0) r0 = socket(0x2, 0x1, 0x0) socket(0xa, 0x3, 0x3b) openat$auto_mISDN_fops_timerdev(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) madvise$auto(0x0, 0xff7fffffffff0005, 0x17) madvise$auto(0x1, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) pipe$auto(0x0) openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000000000), 0x880183, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000080), r0) sendmsg$auto_BATADV_CMD_GET_TRANSTABLE_GLOBAL(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x34, r1, 0x400, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_MESH_ADDRESS={0xa, 0x5, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, @BATADV_ATTR_MESH_ADDRESS={0xa, 0x5, @random="ece1c8245dfc"}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x4000000) socket(0xa, 0x801, 0x84) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) readv$auto(0x3, 0x0, 0x1) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0x15) mmap$auto(0x0, 0x2020009, 0x1003, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/pagemap\x00', 0x80800, 0x0) read$auto(r2, 0x0, 0x39b8) r3 = openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f0000003b80)='/dev/snd/pcmC0D0c\x00', 0x28101, 0x0) ioctl$auto_SNDRV_PCM_IOCTL_HW_REFINE2(r3, 0xc2604110, 0x0) r4 = socket(0xa, 0x3, 0x3c) syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000005c0), 0xffffffffffffffff) statmount$auto(&(0x7f0000000100)={0x8018, @raw=0x4, 0x4000, 0x7, 0x6}, 0x0, 0xffffffffffffffff, 0x1ffffd) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55) write$auto(r4, &(0x7f00000003c0)='+&\x00', 0x273f) 2m42.343092268s ago: executing program 7 (id=2079): socket$nl_generic(0x10, 0x3, 0x10) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram5\x00', 0x14fa02, 0x0) mmap$auto(0x0, 0x10005, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) r0 = socket(0x23, 0x5, 0x0) bind$auto(r0, 0x0, 0x80) r1 = socket(0x2a, 0x2, 0x1) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) connect$auto(r1, &(0x7f00000000c0)=@qipcrtr={0x2a, 0xffffffff, 0xfffffffe}, 0x55) io_uring_setup$auto(0x1, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x40000000c07) fcntl$auto(0x0, 0x407, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = socketcall$auto_SYS_GETSOCKOPT(0xf, 0x0) write$auto_tracing_mark_fops_trace(r2, &(0x7f0000000080)="164641", 0x3) ioctl$auto_PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f0000000100)={0x60, 0x2, 0x110000, 0x7fffffffefff, 0xfffffffffffffffe, 0x1, 0x0, 0x7f, 0x0, 0x2, 0x0, 0x2}) timerfd_settime$auto(0xffffffffffffffff, 0x3, &(0x7f0000000040)={{0x2, 0x8000000000000000}, {0x2, 0x80}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = getpid() process_vm_readv$auto(r3, 0x0, 0x1, &(0x7f0000000280)={&(0x7f0000000080), 0xffffffff}, 0x6, 0x0) r4 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r4, &(0x7f00000001c0)={0x0, 0x7}, 0x3) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$auto_ovs_vport(0x0, 0xffffffffffffffff) openat$nci(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) 2m39.642814656s ago: executing program 7 (id=2082): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_wireguard(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) read$auto(r2, &(0x7f0000000040)='$(\xc2[\x00', 0xe) r3 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000bc0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$auto_BATADV_CMD_GET_TRANSTABLE_LOCAL(r2, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x1c, r3, 0x305, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40008}, 0x0) capget$auto(&(0x7f0000000100)={0x8001, 0xffffffffffffffff}, &(0x7f0000000140)={0x5, 0x5, 0x100}) sendmsg$auto_WG_CMD_GET_DEVICE(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000380)={0x1388, r1, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'ip6gretap0\x00'}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r5}, @WGDEVICE_A_PEERS={0x132e, 0x8, 0x0, 0x1, [@typed={0x8, 0xb4, 0x0, 0x0, @pid=r6}, @nested={0x1119, 0xc5, 0x0, 0x1, [@nested={0x4, 0x5a}, @generic="c1bedadcc3d77aaef78b32d79eff0061a131f379084e829e0fd7cbbaf90d3b8a662f0c1445f9229b3f536ced0e2f3cd0435f34e08b67f6b80284b43bf5c7044afef8a4cf2100ffe393a1fa762f650299af49f4cba7cf12de800e8a7172ef1953b8037cede73768c56b65f0fb13506a5298f56e79b96ad021a2328256f124d2d7ea7551644a1efdcd46f123f2f43e9a4aa491d52f63d4f414baeb88bb8ad05541068ae83caa3e31c4d290a5be061388a1bf25dd98699fb6b7ca02b3d46ed02ed5b5ad8589e72f10f7910069f6ed51fea778c752b820f723bd5f222ab925f63e5c1982985adc0a3e4b48", @nested={0x4, 0x77}, @typed={0x14, 0xb0, 0x0, 0x0, @ipv6=@private0={0xfc, 0x0, '\x00', 0x1}}, @generic="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", @nested={0x4, 0xcd}, @typed={0xc, 0x15, 0x0, 0x0, @u64=0x3a2}]}, @generic="ddc21eef58886283d861bfd261ef3bcd1eb4bad681436d60767235dd7e23477efa3a68372b51d8ce23ec08a9d5dded33a33ac05b7c792a1eaea9db72efef7626c78036bae167b77324cb687a27ddb30b69dbb280959787d3fce9fa116c148caacc6772b14357777e55b214dac2d1208bbd7539f04a7a4a9f816c49c177ddff5a4af7f93eceac277df496004394eb30de2bea469c16364a13766546a9197536d2b5eb85739e4e6e5c460212ffb9d0de075c514271526c18331a9eaf1e51c3afc079970863c5dc804654831540e93662ea985dccf355", @generic="b283ea72f194d8b1b63e8f10a6f89c9391e61d6aa0a96c458d464c7895a2c91e145de5df8ff2113825bfd4262510a65a98ab54bec3c784dac5b0eb76131b93f014fec63f9659ce4d41d4788e9ee15074b3b834a7ef4f9917cfbddcd34ff01d82adf5890df102381c6994a033b7", @typed={0x4, 0x5a}, @generic="af96bd192d0c8aadff7431e90eecc52e4f590725ae6e90a43dee10168f7075051a49a8395ab2a8e5511ea406fbe1bd6c79f7c642410b4f25db14c46113658130cf10e1a6a86737284de88911b394e603ca1ff87d119e865d910293f2785de5ad9a74999b0bc2a03b6e2ff0b63e1a3f4cff3f82db37ed9b5a49a001fb7ae7ac4465b9e1fcaec59e626fe7d5a5f9ad7fb7d334471d61004907af8913f24952027def337e8c6f8c392095fde65b383ba3f15e9ffef8f70746f8919c6a3b574a7b2b"]}, @WGDEVICE_A_FWMARK={0x8}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x9}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x2}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x2}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x1}]}, 0x1388}}, 0x4000000) r7 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000000200), r0) r8 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000240)='/dev/mtd0\x00', 0x2142, 0x0) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0xa, 0x0) socket$nl_generic(0x10, 0x3, 0x10) get_robust_list$auto(0x0, 0x0, 0x0) r9 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) write$auto(r9, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x5) syz_clone3(&(0x7f0000000300)={0x28020400, 0x0, 0x0, 0x0, {0x31}, 0x0, 0x0, 0x0, 0x0}, 0x58) unshare$auto(0x40000080) connect$auto(0xffffffffffffffff, 0x0, 0x54) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000180)='/dev/input/event0\x00', 0x40000, 0x0) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/event0\x00', 0x2800, 0x0) ioctl$auto_SNDRV_PCM_IOCTL_REWIND2(0xffffffffffffffff, 0x40084146, &(0x7f0000000100)=0x8) shmctl$auto_SHM_INFO(0x39e2, 0xe, 0x0) ioctl$auto_MEMWRITEOOB(r8, 0xc0104d03, &(0x7f0000000340)={0x1ff, 0x3109, 0x0}) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000280), 0x500, 0x0) sendmsg$auto_NBD_CMD_CONNECT(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000002440)={&(0x7f0000000040)={0x14, r7, 0x1, 0x70bd26, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x8004}, 0x24000006) 2m36.257074571s ago: executing program 7 (id=2083): r0 = openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/block/nbd14/rqos/wbt/inflight\x00', 0x8000, 0x0) read$auto_blk_mq_debugfs_fops_blk_mq_debugfs(r0, 0x0, 0x0) 2m35.971488286s ago: executing program 7 (id=2084): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) listen$auto(r0, 0x9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) madvise$auto(0x0, 0x2003f2, 0x15) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff) r3 = openat$auto_proc_uid_map_operations_base(0xffffffffffffff9c, &(0x7f00000013c0)='/proc/self/uid_map\x00', 0x8006, 0x0) write$auto_proc_uid_map_operations_base(r3, 0x0, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB="60010000", @ANYRES16=r2, @ANYBLOB="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"], 0x160}}, 0x4000) madvise$auto(0x0, 0x200007, 0x19) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/thread-self/pagemap\x00', 0x404001, 0x0) mmap$auto(0x0, 0x420009, 0x10, 0xb812, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) remap_file_pages$auto(0x6a27, 0x4000000000001000, 0x0, 0x10001, 0x66a) unshare$auto(0x2) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3c, 0x5fa6, 0x0, 0x6000, 0xfffffffffffffffa) write$auto(r4, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) socket(0x2c, 0x2, 0x0) listen$auto(0x3, 0x81) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) 2m22.507257776s ago: executing program 6 (id=2109): r0 = openat$auto_rb_simple_fops_trace(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/tracing_on\x00', 0x202300, 0x0) mmap$auto(0x0, 0x4000b, 0x7, 0x4000000000009b72, r0, 0xb) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket(0x10, 0x2, 0x0) (async) fstat$auto(0xffffffffffffffff, &(0x7f0000000000)={0x5, 0x80000001, 0x0, 0x100, 0x0, 0x0, 0x0, 0xffffffffffffff91, 0xfd3, 0x2, 0xec, 0x4, 0x80000000081, 0x8, 0x2, 0xfffffffffffffff8}) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYBLOB="1a0027"], 0x1ac}}, 0x40000) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) (async) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) r1 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self/oom_adj\x00', 0x48402, 0x0) close_range$auto(0x2, 0x8, 0x0) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) socket(0x2c, 0x80003, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) close_range$auto(0x2, 0x8, 0x0) (async) r3 = openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, 0x0) (async, rerun: 64) ioctl$auto(0x3, 0xc0303e03, r2) (async, rerun: 64) close_range$auto(0x2, 0x8000, 0x0) read$auto(r1, 0x0, 0x80000000) (async) r4 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r4, &(0x7f0000000200)={0x0, 0x9}, 0x5) openat$auto_tracing_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/trace\x00', 0x1a6b75d638828712, 0x0) 2m22.162104753s ago: executing program 6 (id=2111): r0 = openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/block/nbd14/rqos/wbt/inflight\x00', 0x8000, 0x0) read$auto_blk_mq_debugfs_fops_blk_mq_debugfs(r0, &(0x7f00000010c0)=""/155, 0x9b) 2m21.989599669s ago: executing program 6 (id=2113): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ip6_vti0\x00'}) sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="0c0000001400c7"], 0x2c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4830) r1 = socket(0x10, 0x2, 0x4) write$auto(r1, &(0x7f0000000000)='\x16\x00', 0x2fb) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = open(&(0x7f0000000100)='.\x00', 0x0, 0x408) getdents$auto(r2, 0x0, 0x400018) r3 = openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000000000), 0xc0402, 0x0) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/v4l-touch12\x00', 0x2000, 0x0) ioctl$auto_posix_clock_file_operations_posix_clock(r3, 0x40603d10, 0x0) 2m21.772223273s ago: executing program 6 (id=2114): unshare$auto(0x40000080) mmap$auto(0x3dbcb68f, 0x7ff, 0xffb, 0x8000000008011, 0x3, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1, 0x1, 0x0, 0x402, 0xdd16) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xa142, 0x0) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x82802, 0x0) r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/snd/controlC1\x00', 0x802, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000140)={{@inferred, 0x0, 0x4, 0x8, "3112d585005a614d19e22af9ffb683dbede3d0bf828bbfba40f035f4be6b7fe5e2f94bd90484b0755015e48d"}, 0x3, 0x5, 0x4, @inferred, @enumerated={0x3, 0x800, "c832bcbae48ab01ec23457b7fd2dd3547c4e2eeba79edd0d1599ded9cbfaf517162fbe6a6f50f1aaa18fb20cabb4f176263bb0e781e3d0a2f992e8fcdcec86d9", 0x400, 0xc278}, "7a9fc199a16a2311eacf2fc7ae1da978dc3e8090334fdd73340238d212b6debe0ada55bdd70925450e24e87212f0bcab84a16f7ce8cbce0bb32777702b8d7c2d"}) r1 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/cec10\x00', 0x101901, 0x0) ioctl$auto_CEC_ADAP_S_LOG_ADDRS(r1, 0xc05c6104, &(0x7f0000000100)={'\x00', 0x0, 0x6, 0x2, 0x9b3, 0x9, "0200000002000000997e763f222ce1", '\x00', "0001410c", '\x00', ["f5404de9641f0000000060c1", "70d9a9a3af9f39d000000001", "ef5ac4927ad89c5c00"]}) ioctl$auto_CEC_TRANSMIT(r1, 0xc0386105, &(0x7f0000000000)={0x6, 0x3, 0x7, 0x2, 0x2, 0x7fffffff, "9b2189084142725dff0d933475a77466", 0xb, 0x5, 0x9, 0x5, 0x2, 0x4, 0x2}) 2m21.252748015s ago: executing program 6 (id=2117): socket(0x21, 0x2, 0xa) (async) r0 = socket(0xa, 0x2, 0x3a) getsockopt$auto(r0, 0x29, 0xcf, 0x0, 0x0) (async) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000280)='/proc/thread-self/fail-nth\x00', 0x2, 0x0) (async) waitid$auto(0x8009, 0xffffffffffffffff, 0x0, 0x9, &(0x7f00000001c0)={{0x4, 0x4000000000002}, {0x2003}, 0xffffffffffffff74, 0x1c0, 0xc, 0x3, 0x4, 0x3, 0x7c3, 0x6, 0x1, 0x3, 0x8, 0x2, 0x9, 0x200}) (async, rerun: 64) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) (async, rerun: 64) fadvise64$auto_POSIX_FADV_NOREUSE(r0, 0x9, 0x6, 0x5) (async) openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) (async) r2 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000000580), 0x2802, 0x0) mmap$auto(0x0, 0x400006, 0x6, 0x9b72, 0x2, 0x8000) (async) mount$auto(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000180)='nfsd\x00', 0x8, 0x0) (async) getcwd$auto(0x0, 0xffffffffffffffff) (async) move_mount$auto(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x200) (async) ioctl$auto__ctl_fops_dm_ioctl(r2, 0xfffffff7effffd07, &(0x7f00000001c0)) (async) r3 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) write$auto_console_fops_tty_io(r3, &(0x7f0000000000)="c80d1b5d399b6c", 0xfdef) (async) write$auto(r1, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) (async) write$auto(0x3, 0x0, 0x100082) 2m20.408194843s ago: executing program 37 (id=2084): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) listen$auto(r0, 0x9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) madvise$auto(0x0, 0x2003f2, 0x15) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff) r3 = openat$auto_proc_uid_map_operations_base(0xffffffffffffff9c, &(0x7f00000013c0)='/proc/self/uid_map\x00', 0x8006, 0x0) write$auto_proc_uid_map_operations_base(r3, 0x0, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB="60010000", @ANYRES16=r2, @ANYBLOB="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"], 0x160}}, 0x4000) madvise$auto(0x0, 0x200007, 0x19) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/thread-self/pagemap\x00', 0x404001, 0x0) mmap$auto(0x0, 0x420009, 0x10, 0xb812, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) remap_file_pages$auto(0x6a27, 0x4000000000001000, 0x0, 0x10001, 0x66a) unshare$auto(0x2) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3c, 0x5fa6, 0x0, 0x6000, 0xfffffffffffffffa) write$auto(r4, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) socket(0x2c, 0x2, 0x0) listen$auto(0x3, 0x81) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) 2m20.288807162s ago: executing program 6 (id=2119): socket$auto(0x4, 0x4, 0x8) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/misc/hw_random/rng_available\x00', 0x22000, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/firmware/acpi/interrupts/ff_slp_btn\x00', 0x8522, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0xa0102, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) r1 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000200)='/dev/snd/controlC0\x00', 0x222101, 0x0) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, r1, 0x0) socket(0xf, 0x2, 0x4) sendmsg$auto_ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001d80)={&(0x7f0000000000)=ANY=[@ANYBLOB="00000500", @ANYRES16=0x0, @ANYBLOB="010037bd7000ffdbdf25100000000c0001"], 0x20}, 0x1, 0x0, 0x0, 0x40010}, 0x20080800) socket(0x10, 0x2, 0xc) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x200009, 0x2, 0x48eb1, 0xffffffffffffffff, 0x300000000000) madvise$auto(0x200000, 0x20499d, 0x9) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/pci0000:00/0000:00:04.0/remove\x00', 0x2801, 0x0) write$auto(r0, &(0x7f00000002c0)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\b};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xde\f/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7\x00\x85Z\x06?\x12\x98\x0f)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1;\xe4pd$\xd7\x1b\v\x82\r\f\xd0Hq\xd9\r\x88#\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8HR+\a\xb7R\t\n+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb\xc8^\xa4\xe2\x05\x91|\x123\xc3:\xfd\xee\x04a\xc8\x12\xce\xa2\x12\xcb\x8c\x87f\xebGQ\xe9\x96\xd5E\x13a\xb7\x057<&\xe0\x94\xa7\xfb\x9d;\xfa\xb1\x1b4a,\'\xb2Ym\xe1:\xbf\x8cs\x06\xa3u\x8d!\n\x80-\x9a\xbb;\xf4\xf3\xe1\x97\xfc8\xff\xa7\\\x8b\xf9\x95\x10$\xef\x1a #b\xfb\xfe\xe9\x06fK0\xdd\x84T,\xfa\xb5\x00\x83d\xbba\xd7\n\x92\x90|l\xdfAN\x9d\xcb\x96\xc7\xe8\xe6\x8bC\xeb\xc7EZ\xc8\x1a\x81nf\tZ-sZ\x13n\xec\xa9\xbf\xd0$\xb9\xd8\x00'/507, 0x1098c7) 2m12.317687326s ago: executing program 8 (id=2146): r0 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, 0x0, 0x200, 0x0) ioctl$auto_PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f000000c380)={0x60, 0x0, 0x80000000, 0x7fffffffeffb, 0x5, 0x50b0, 0x2fe, 0x50b301a, 0xe4, 0x0, 0x1, 0x3}) 2m12.14011086s ago: executing program 8 (id=2148): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/thread-self/maps\x00', 0x0, 0x0) exit$auto(0x2) timer_gettime$auto(0x0, 0x0) pread64$auto(r1, 0x0, 0xeda5, 0xc86) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f000000a500), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_REQ_SET_REG(r3, &(0x7f000000a5c0)={0x0, 0x0, &(0x7f000000a580)={&(0x7f0000000080)={0x1c, r4, 0x1, 0x70bd0a, 0x25dfdbfd, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000040}, 0x24008080) sendmsg$auto_NL80211_CMD_DEL_PMK(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="f2ee0000", @ANYRES16=r4, @ANYBLOB="100027bd7000fddbdf257c0000000800420000feffff"], 0x1c}, 0x1, 0x0, 0x0, 0x20040000}, 0x4e050) sendmsg$auto_ETHTOOL_MSG_FEATURES_GET(r0, &(0x7f0000003080)={0x0, 0xfffffffffffffdb2, &(0x7f0000003040)={&(0x7f0000002fc0)={0x20, 0x0, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@ETHTOOL_A_FEATURES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x20004800}, 0x0) memfd_create$auto(&(0x7f0000000000)='!&', 0x7) bind$auto(r0, &(0x7f0000000080)=@tipc=@id={0x1e, 0x3, 0x2, {0x4e22, 0x1}}, 0x8) 2m11.2081229s ago: executing program 8 (id=2151): unshare$auto(0x40000080) mmap$auto(0x3dbcb68f, 0x7ff, 0xffb, 0x8000000008011, 0x3, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1, 0x1, 0x0, 0x402, 0xdd16) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xa142, 0x0) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x82802, 0x0) r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/snd/controlC1\x00', 0x802, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000140)={{@inferred, 0x0, 0x4, 0x8, "3112d585005a614d19e22af9ffb683dbede3d0bf828bbfba40f035f4be6b7fe5e2f94bd90484b0755015e48d"}, 0x3, 0x5, 0x4, @inferred, @enumerated={0x3, 0x800, "c832bcbae48ab01ec23457b7fd2dd3547c4e2eeba79edd0d1599ded9cbfaf517162fbe6a6f50f1aaa18fb20cabb4f176263bb0e781e3d0a2f992e8fcdcec86d9", 0x400, 0xc278}, "7a9fc199a16a2311eacf2fc7ae1da978dc3e8090334fdd73340238d212b6debe0ada55bdd70925450e24e87212f0bcab84a16f7ce8cbce0bb32777702b8d7c2d"}) r1 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/cec10\x00', 0x101901, 0x0) ioctl$auto_CEC_ADAP_S_LOG_ADDRS(r1, 0xc05c6104, &(0x7f0000000100)={'\x00', 0x0, 0x6, 0x2, 0x9b3, 0x9, "0200000002000000997e763f222ce1", '\x00', "0001410c", '\x00', ["f5404de9641f0000000060c1", "70d9a9a3af9f39d000000001", "ef5ac4927ad89c5c00"]}) ioctl$auto_CEC_TRANSMIT(r1, 0xc0386105, &(0x7f0000000000)={0x6, 0x3, 0x7, 0x2, 0x2, 0x7fffffff, "9b2189084142725dff0d933475a77466", 0xb, 0x5, 0x9, 0x5, 0x2, 0x4, 0x2}) madvise$auto(0x0, 0xffffffffffff0005, 0x17) prctl$auto(0x29, 0x17000000, 0x0, 0x0, 0x2) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r2 = socket(0x2b, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @remote}, 0x6a) sendmmsg$auto(r2, &(0x7f0000000000)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x9, 0xfffffffd}, 0x1}, 0x5, 0x20000000) setsockopt$auto(0x3, 0x6, 0x17, 0x0, 0xd) migrate_pages$auto(0x0, 0xa, 0x0, &(0x7f0000000140)=0x2) r3 = socket(0xa, 0x3, 0x3a) msgctl$auto(0x401, 0x0, &(0x7f0000000640)={{0x8, 0x0, 0xffffffffffffffff, 0x6, 0x9, 0x7f}, &(0x7f0000000500)=0x7, &(0x7f0000000600)=0x2, 0x54, 0x101, 0x3, 0xe, 0x1, 0x1000, 0x7, 0x6, @inferred=0xffffffffffffffff}) r5 = wait4$auto(0x0, &(0x7f0000000080)=0xb8e00000, 0x1, &(0x7f0000000700)={{0x100, 0x800}, {0x4ddbdf6d, 0x4}, 0x961f, 0x100000000000b0f7, 0x4040, 0x8, 0x100000ffff, 0x9, 0x400000000005, 0x240000000000000, 0x8000000000000001, 0x1000000000000004, 0x9, 0x0, 0xffffffffffffffff, 0x6}) shmctl$auto(0x80, 0x8001, &(0x7f0000000880)={{0x54, 0x0, r4, 0x4, 0x4, 0x1, 0x101}, 0x9, 0x9, 0xd0, 0x7, @inferred=r5, @raw=0x7, 0x3, 0x0, &(0x7f00000007c0), 0x0}) clock_getres$auto(0xfffffffd, 0x0) move_pages$auto(r5, 0x3, &(0x7f0000000040)=&(0x7f0000000280)="2726d9d229bb4bc5ff06d5a51188e1d4eb99afed9265382a5fc2d9aa70233867626c102b5e61486829edb833e64454ece68f963ace48affdffffffff", 0x0, &(0x7f00000000c0)=0x6, 0x10) getsockopt$auto(r3, 0x29, 0x38, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 2m9.364908699s ago: executing program 8 (id=2155): mmap$auto(0xfffffffffffffffe, 0x2020005, 0x3, 0x9000000eb1, 0xfffffffffffffffa, 0x9) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x161742, 0x0) write$auto(r0, 0x0, 0x2) getrlimit$auto(0x83, 0x0) r1 = openat$auto_tracing_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/per_cpu/cpu1/trace\x00', 0x0, 0x0) pread64$auto(r1, 0x0, 0x100000009, 0xa4000000000002) fdatasync$auto(r0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/035/001\x00', 0x1102, 0x0) ioctl$auto_posix_clock_file_operations_posix_clock(r2, 0x0, &(0x7f0000000180)="9939392317f5dc506655a8c8eead9700a30a83ea8e81e2e1e87393656b2c5d5293441b8b62cc90e71884962e0305a6e200") write$auto(0xffffffffffffffff, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xc8d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\xc6\x00\x89\te\x8d\a\xfb\\n\x89C:\x84D\x10u\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k', 0x100000a3d9) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x8ea182, 0x0) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x1000, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x8000000000000000, 0x15) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/kernel/kexec_crash_size\x00', 0x302, 0x0) 2m9.062850388s ago: executing program 8 (id=2158): openat$auto_qrtr_tun_ops_tun(0xffffffffffffff9c, 0x0, 0x8000, 0x0) mkdir$auto(&(0x7f0000000080)='}[,&*}\x00', 0x8001) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/kernel/threads-max\x00', 0x20202, 0x0) r0 = socket(0xa, 0x1, 0x84) getsockopt$auto(r0, 0x0, 0x480, 0x0, &(0x7f0000000040)=0x83) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'virt_wifi0\x00'}) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x40080}, 0x40) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x2, 0x1, 0x0) open(0x0, 0x22240, 0x155) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) madvise$auto(0x0, 0xfffffffffffeffff, 0x15) mkdir$auto(&(0x7f00000000c0)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f0000000040)='}[,&*}\x00', &(0x7f0000000080)='nfsd\x00', 0x7, 0x0) chdir$auto(&(0x7f0000000000)='}[,&*}\x00') r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x58400, 0x22) fchmod$auto(r2, 0xc) clone$auto(0x1, 0x8, 0x0, 0x0, 0x9) clone$auto(0x0, 0x2, &(0x7f0000000240)=0x800, &(0x7f00000002c0)=0x162600, 0x7) mmap$auto(0x0, 0x2020009, 0x203, 0xeb1, 0xfffffffffffffffa, 0x8000) mount$auto(0x0, &(0x7f0000000040)='}[,&*}\x00\x0e\x15F\xf7\x1a\xd1K+\xedy\xc6\x9bb\x94\xb4^\xc2\x83%\xfbw}\xfb_P\"\x19\xdfi\xe9hA|Q\x8a_F\x04:Q\x90\'\x06', &(0x7f0000000140)='nfsd\x00', 0x10000, 0x0) chdir$auto(&(0x7f0000000000)='}[,&*}\x00') setresuid$auto(0x2, 0x7, 0x8080) open(&(0x7f0000000100)='.\x00', 0x0, 0x23) 2m8.09205565s ago: executing program 8 (id=2159): mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) socket(0x2, 0x2, 0x0) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x50) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000000000), 0xc0402, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) r0 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card1\x00', 0x1, 0x0) ioctl$auto(r0, 0x800064bc, 0x1e6) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/devices/platform/dummy_hcd.0/usb1/devpath\x00', 0x20000, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000000540)=""/68, 0x44) openat$auto_rb_simple_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/tracing_on\x00', 0x488100, 0x0) shmctl$auto(0x3, 0xc5e, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) rt_sigsuspend$auto(0x0, 0x8) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/input/event0\x00', 0x30200, 0x0) ioctl$auto_EVIOCGMASK(r2, 0x80104592, &(0x7f0000000000)={0x2000, 0x800004, 0x105}) ioctl$auto(0x3, 0x80004509, 0x10000000000402) ioctl$auto(0x3, 0x800005411, 0x38) migrate_pages$auto(0x0, 0x8, 0x0, &(0x7f00000001c0)=0x7b) r3 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/adsp1\x00', 0x40440, 0x0) ioctl$auto_SNDCTL_DSP_CHANNELS(r3, 0xc0045006, &(0x7f00000001c0)) readv$auto(r3, &(0x7f0000000200)={0x0, 0xfffc}, 0x3) fsconfig$auto_FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000000)='/dev/sequencer\x00', &(0x7f0000000140), 0x0) 2m5.029199674s ago: executing program 38 (id=2119): socket$auto(0x4, 0x4, 0x8) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/misc/hw_random/rng_available\x00', 0x22000, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/firmware/acpi/interrupts/ff_slp_btn\x00', 0x8522, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0xa0102, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) r1 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000200)='/dev/snd/controlC0\x00', 0x222101, 0x0) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, r1, 0x0) socket(0xf, 0x2, 0x4) sendmsg$auto_ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001d80)={&(0x7f0000000000)=ANY=[@ANYBLOB="00000500", @ANYRES16=0x0, @ANYBLOB="010037bd7000ffdbdf25100000000c0001"], 0x20}, 0x1, 0x0, 0x0, 0x40010}, 0x20080800) socket(0x10, 0x2, 0xc) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x200009, 0x2, 0x48eb1, 0xffffffffffffffff, 0x300000000000) madvise$auto(0x200000, 0x20499d, 0x9) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/pci0000:00/0000:00:04.0/remove\x00', 0x2801, 0x0) write$auto(r0, &(0x7f00000002c0)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\b};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xde\f/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7\x00\x85Z\x06?\x12\x98\x0f)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1;\xe4pd$\xd7\x1b\v\x82\r\f\xd0Hq\xd9\r\x88#\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8HR+\a\xb7R\t\n+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb\xc8^\xa4\xe2\x05\x91|\x123\xc3:\xfd\xee\x04a\xc8\x12\xce\xa2\x12\xcb\x8c\x87f\xebGQ\xe9\x96\xd5E\x13a\xb7\x057<&\xe0\x94\xa7\xfb\x9d;\xfa\xb1\x1b4a,\'\xb2Ym\xe1:\xbf\x8cs\x06\xa3u\x8d!\n\x80-\x9a\xbb;\xf4\xf3\xe1\x97\xfc8\xff\xa7\\\x8b\xf9\x95\x10$\xef\x1a #b\xfb\xfe\xe9\x06fK0\xdd\x84T,\xfa\xb5\x00\x83d\xbba\xd7\n\x92\x90|l\xdfAN\x9d\xcb\x96\xc7\xe8\xe6\x8bC\xeb\xc7EZ\xc8\x1a\x81nf\tZ-sZ\x13n\xec\xa9\xbf\xd0$\xb9\xd8\x00'/507, 0x1098c7) 1m52.464074426s ago: executing program 39 (id=2159): mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) socket(0x2, 0x2, 0x0) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x50) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000000000), 0xc0402, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) r0 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card1\x00', 0x1, 0x0) ioctl$auto(r0, 0x800064bc, 0x1e6) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/devices/platform/dummy_hcd.0/usb1/devpath\x00', 0x20000, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000000540)=""/68, 0x44) openat$auto_rb_simple_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/tracing_on\x00', 0x488100, 0x0) shmctl$auto(0x3, 0xc5e, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) rt_sigsuspend$auto(0x0, 0x8) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/input/event0\x00', 0x30200, 0x0) ioctl$auto_EVIOCGMASK(r2, 0x80104592, &(0x7f0000000000)={0x2000, 0x800004, 0x105}) ioctl$auto(0x3, 0x80004509, 0x10000000000402) ioctl$auto(0x3, 0x800005411, 0x38) migrate_pages$auto(0x0, 0x8, 0x0, &(0x7f00000001c0)=0x7b) r3 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/adsp1\x00', 0x40440, 0x0) ioctl$auto_SNDCTL_DSP_CHANNELS(r3, 0xc0045006, &(0x7f00000001c0)) readv$auto(r3, &(0x7f0000000200)={0x0, 0xfffc}, 0x3) fsconfig$auto_FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000000)='/dev/sequencer\x00', &(0x7f0000000140), 0x0) 1m6.538523535s ago: executing program 0 (id=2299): mmap$auto(0xfffffffffffffffe, 0x2020005, 0x3, 0x9000000eb1, 0xfffffffffffffffa, 0x9) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x161742, 0x0) write$auto(r0, 0x0, 0x2) getrlimit$auto(0x83, 0x0) r1 = openat$auto_tracing_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/per_cpu/cpu1/trace\x00', 0x0, 0x0) pread64$auto(r1, 0x0, 0x100000009, 0xa4000000000002) fdatasync$auto(r0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/035/001\x00', 0x1102, 0x0) ioctl$auto_posix_clock_file_operations_posix_clock(r2, 0x0, &(0x7f0000000180)="9939392317f5dc506655a8c8eead9700a30a83ea8e81e2e1e87393656b2c5d5293441b8b62cc90e71884962e0305a6e200fd45cf3eae2b1c7158514663a3bd1fab") write$auto(0xffffffffffffffff, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xc8d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\xc6\x00\x89\te\x8d\a\xfb\\n\x89C:\x84D\x10u\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k', 0x100000a3d9) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x8ea182, 0x0) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ram0\x00', 0x800, 0x0) ioctl$auto_BLKZEROOUT(r3, 0x127f, 0x0) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x1000, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x8000000000000000, 0x15) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/kernel/kexec_crash_size\x00', 0x302, 0x0) 1m5.972298017s ago: executing program 0 (id=2301): mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) r0 = socket(0x2, 0x2, 0x0) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x50) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, 0x0, 0x68881, 0x0) r1 = socket(0x2b, 0x1, 0x0) listen$auto(r1, 0x1) sendmsg$auto_KSMBD_EVENT_LOGOUT_REQUEST(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x20000000}, 0x240000c0) r2 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0xe8, 0x9, 0x2, 0x1, 0x5, 0x4, 0x15f4da0e, 0x8, 0x9, 0x100000000000000c, 0x8, 0x1, 0xfca, 0x9, 0x2, 0x4000000000000d]}, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) bind$auto(r0, &(0x7f0000000240)=@sco={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0xffffeffb) prctl$auto_SECCOMP_MODE_FILTER(0x7, 0x2, 0x0, 0xfff, 0x3) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) madvise$auto(0x0, 0xffffffdfffff0005, 0x14) setsockopt$auto(0x3, 0x0, 0x17, 0x0, 0x28) setsockopt$auto(0x3, 0x0, 0x17, 0x0, 0x28) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/usbcore/parameters/usbfs_snoop_max\x00', 0x0, 0x0) r3 = wait4$auto(0x0, 0x0, 0x80000000, 0x0) getsockopt$auto(0xffffffffffffffff, 0x84, 0x7d, 0x0, 0x0) mmap$auto(0x10000, 0x6a, 0xdf, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL802154_CMD_GET_SEC_DEV(r2, &(0x7f0000000740)={&(0x7f0000000040), 0xc, &(0x7f0000000280)={&(0x7f0000000480)={0x16c, 0x0, 0x4, 0x70bd2a, 0x25dfdbfc, {}, [@NL802154_ATTR_SUPPORTED_CHANNEL={0x8, 0x16, 0x100}, @NL802154_ATTR_CCA_ED_LEVEL={0x8, 0xe, 0x881}, @NL802154_ATTR_CCA_ED_LEVEL={0x8}, @NL802154_ATTR_COORDINATOR={0xc, 0x1e, 0x0, 0x1, [@typed={0x8, 0xd3, 0x0, 0x0, @pid=r3}]}, @NL802154_ATTR_SEC_OUT_KEY_ID={0x132, 0x2b, 0x0, 0x1, [@typed={0xc, 0xab, 0x0, 0x0, @u64=0x7}, @nested={0x6e, 0x2b, 0x0, 0x1, [@generic="cce791b5d8501207189a51bd53fa6f4dc2c52746ffe97bcf581c69ef1a609886da2090b39d7d1a4bc6f0c288b0b669ff2e356c87d27072c109f290f16246b105c7684363eca9", @typed={0x14, 0x92, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @broadcast}}, @typed={0xc, 0x9f, 0x0, 0x0, @u64=0x4}, @nested={0x4, 0x1}]}, @typed={0x8, 0x15c, 0x0, 0x0, @fd}, @typed={0x8, 0x351a, 0x0, 0x0, @uid}, @generic="ef5ff01bb709bc32117c14f738b42d36495d0d695db9761b808f4aa13760098f71ad2cd72a3722ee53889b9ae7fad2186698350d", @generic="51eec223b20906e6f8e8668f7125e3286592e220062805d588c8b7229931bd1dbd55dbec5d70f7401bf4e7cfd1effa7aa52d0c34555cf06632761f5bc896a69d371d14141e027e7c33274e54f0beb64765121e66cf4f096108660d4b95dc7320905fb616cbc55d9e6b92ef30021d"]}]}, 0x16c}, 0x1, 0x0, 0x0, 0x2008000}, 0xc0) r4 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$auto(r4, 0x104000000000010e, 0x5, 0x0, 0x400) openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, 0x0, 0x410081, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xc8282, 0x0) 1m4.81601991s ago: executing program 0 (id=2304): setresgid$auto(0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff) mmap$auto(0x0, 0x202000b, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'batadv_slave_1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'pim6reg0\x00', 0x0}) r3 = socket(0x2a, 0x2, 0x1) connect$auto(r3, &(0x7f00000000c0)=@qipcrtr={0x2a, 0x1, 0xfffffffe}, 0x55) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wg0\x00', 0x0}) bind$auto(r3, &(0x7f00000005c0)=@phonet={0x23, 0xa, 0x0, 0x2}, 0x4) sendmsg$auto_ETHTOOL_MSG_WOL_SET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000540)={&(0x7f0000000300)={0x214, r0, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@ETHTOOL_A_WOL_HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xff}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_WOL_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_WOL_SOPASS={0x9, 0x3, "54fb40467f"}, @ETHTOOL_A_WOL_MODES={0xfc, 0x2, 0x0, 0x1, [@nested={0xf5, 0x129, 0x0, 0x1, [@generic="6369de406f60dfe15d0156953d8deb295daeeef7dc98c1304d597361494324a0f3e633fc262a", @generic="d4a1871add667c162c04ec65f609162a6143b4674d718d9d318dd6c96b4921784045efcf78784d02bf302dc1068b9692fdd231c27f2d75b1e54fcaa580682a7845e639af21fe81bf1b85ef8895da040343ef7684a5b13772938a74719cd77f4513ff584f72056231489f293f80cbf41d8353eadf8c6d2ef40c6039d7b48b4ac369c20b07e18265fed4115c82608bee13174284b41f8cfd912ee664a5f41bab0fc34ece4fb4960184ea6ee12b35232438bbe7c505597de8d090eac4d3353ebba630f637", @generic, @typed={0x8, 0x10e, 0x0, 0x0, @fd=r3}]}]}, @ETHTOOL_A_WOL_SOPASS={0x6, 0x3, '%\x00'}, @ETHTOOL_A_WOL_SOPASS={0xa, 0x3, "b41a90b9bd78"}, @ETHTOOL_A_WOL_MODES={0x18, 0x2, 0x0, 0x1, [@typed={0x14, 0x44, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00'}]}, @ETHTOOL_A_WOL_HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}]}, @ETHTOOL_A_WOL_SOPASS={0x4}]}, 0x214}, 0x1, 0x0, 0x0, 0x1}, 0x8000) sysfs$auto(0x2, 0x9, 0x0) r5 = openat$auto_nvmf_dev_fops_fabrics(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) io_uring_register$auto_IORING_UNREGISTER_FILES(r5, 0x3, &(0x7f0000000040)="5f4fcae97939da77592ea3aaa6e7fc852fdda42445708d66e88434d245dec398a1a6072b1b894a566ecae1c35c0256c3a8cbdcaa5e81c1c01e559cb0bef8c08cd4a02395a447d220dc46564db88f2fbb97310d53de0df294b214758b29e66d70ef153e2c09ced55451ef0d3dc79fcc4700d155cb81e143cf0c1f9b239d4f42bc8e4b75bd88f9a6384fa61058deeb7c657775225f747cb5f1fc53562756040308dcc36750b56e895eff9a4f2d2c5454fa1f15c184474fe94e7f815acc3f295a741857e56f2b38c622eb6d016f98803344", 0x4) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/controlC2\x00', 0x8000, 0x0) ioctl$auto(0x3, 0x541b, 0xfffffffffffff4e0) r6 = fsopen$auto(0x0, 0x1) bpf$auto(0x7, &(0x7f00000000c0)=@bpf_attr_3={0x400, 0xc, 0x400000000000, 0x4, 0x2000003, 0xa9e3, 0x7, 0x1ff, 0xfffffff8, "6c2d8ad372f63dc0147d5f604a90d48c", 0x0, 0x7fffffff, 0xffffffffffffffff, 0x400004, 0x6, 0x5, 0x8, 0x7fff, 0x2, 0xfffffffb, @attach_prog_fd, 0x2, 0x4007, 0x80000001, 0xc3d, 0x1}, 0xf) fsconfig$auto(r6, 0x8, 0x0, 0x0, 0x0) 1m4.526136956s ago: executing program 0 (id=2307): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = openat$auto_drm_debugfs_entry_fops_drm_debugfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/dri/vkms/state\x00', 0xa8201, 0x0) lseek$auto(r0, 0x9, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0xc) socket(0x18, 0x1, 0x974a) ioctl$auto_SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x40085112, &(0x7f0000000280)="053b8c6a00394d64e013aed60ea55b9b14087438113fffc275747670630c8e96d06e1c38d397d4908fec12e6d058498d737ea574c097d069bb0ed761a5c8e597546366e43dcf84287fa21307db55b56bfebeb7a7a908534d6d26132741c29c85c65d45620d8c501ab675cb29b26710084754f9e3e7cedb6bfc430586159584a4195dbef4e20012c7a81d70b9c9b06599148963644099ec9706a1e5c9cf548a714e03ed3e") openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) r1 = openat$auto_fops_x64_ro_(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/ieee80211/phy7/netdev:wlan0/stations/08:02:11:00:00:01/driver_buffered_tids\x00', 0x2, 0x0) read$auto_fops_x64_ro_(r1, &(0x7f0000002140)=""/4096, 0x1000) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x88000, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) unshare$auto(0x42000080) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_seg6(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_SEG6_CMD_SETHMAC(r3, 0x0, 0x44000) sendmsg$auto_SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x8890) r4 = openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f00000001c0), 0x80100, 0x0) openat$auto_dvb_dvr_fops_dmxdev(0xffffffffffffff9c, &(0x7f00000002c0), 0x44100, 0x0) ioctl$auto_dvb_demux_fops_dmxdev(r4, 0x40146f2c, 0x0) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0x10803, 0x0) r5 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) r6 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0) read$auto(r6, 0x0, 0x7) writev$auto(r5, &(0x7f0000000200)={0x0, 0xb}, 0x200000003) 1m2.773852745s ago: executing program 0 (id=2312): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/mm/hugepages/hugepages-2048kB/nr_hugepages_mempolicy\x00', 0xa001, 0x0) write$auto(r0, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) r1 = openat$auto_vhci_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f0000000040)='}[,&*}\x00', &(0x7f0000000080)='nfsd\x00', 0x7, 0x0) chdir$auto(&(0x7f0000000000)='}[,&*}\x00') openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x40000, 0x0) lseek$auto(0x3, 0x7fffffffffffffff, 0x1) lseek$auto(0x3, 0x7fffffffffffffff, 0x1) mmap$auto(0x0, 0x4000b, 0x7, 0x1c, 0x7, 0xfffffffffffffff9) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0xf9e, 0xb, 0xa, 0x40007fff, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x5e, 0x80000001, 0x7, 0x2, 0x90, 0x2400000001, 0x2]}, 0x0) writev$auto(0x3, &(0x7f0000000080)={0x0, 0x1}, 0x3) getsockopt$auto_SO_ACCEPTCONN(r1, 0x0, 0x1e, &(0x7f0000000040)=':\\\x00', &(0x7f0000000080)) 1m2.592269986s ago: executing program 0 (id=2314): rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x0, 0x6, 0xffffffff, 0x2}, 0x8000, 0x0, 0x6) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) r0 = fsopen$auto(0x0, 0x1) r1 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000540)='/dev/sequencer2\x00', 0x402, 0x0) ioctl$auto(r1, 0x5101, 0x3) fsconfig$auto(r0, 0x6, 0x0, 0x0, 0x0) rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x0, 0x6, 0xffffffff, 0x2}, 0x8000, 0x0, 0x6) (async) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) (async) fsopen$auto(0x0, 0x1) (async) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000540)='/dev/sequencer2\x00', 0x402, 0x0) (async) ioctl$auto(r1, 0x5101, 0x3) (async) fsconfig$auto(r0, 0x6, 0x0, 0x0, 0x0) (async) 47.506663618s ago: executing program 40 (id=2314): rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x0, 0x6, 0xffffffff, 0x2}, 0x8000, 0x0, 0x6) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) r0 = fsopen$auto(0x0, 0x1) r1 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000540)='/dev/sequencer2\x00', 0x402, 0x0) ioctl$auto(r1, 0x5101, 0x3) fsconfig$auto(r0, 0x6, 0x0, 0x0, 0x0) rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x0, 0x6, 0xffffffff, 0x2}, 0x8000, 0x0, 0x6) (async) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) (async) fsopen$auto(0x0, 0x1) (async) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000540)='/dev/sequencer2\x00', 0x402, 0x0) (async) ioctl$auto(r1, 0x5101, 0x3) (async) fsconfig$auto(r0, 0x6, 0x0, 0x0, 0x0) (async) 14.753784984s ago: executing program 1 (id=2419): r0 = open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x130) fallocate$auto(0x8000000000000003, 0x0, 0x9, 0x4cbd5d) fallocate$auto(r0, 0x1, 0x820, 0x7fff) r1 = getsid$auto(0xffffffffffffffff) fcntl$auto(r0, 0x1ff, r1) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/platform/vidtv.0/i2c-0/0-0060/uevent\x00', 0xac00, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f0000001c00)=""/4111, 0x100f) madvise$auto(0x700000000000000, 0x200007, 0x19) pwrite64$auto(0xc8, 0x0, 0x400f24, 0xc425) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0x3, 0x4) write$auto(r0, &(0x7f0000000100)='\x00', 0x1) mmap$auto(0x2, 0x1, 0xdd, 0x9b70, 0xffffffffffffffff, 0x8000) r3 = openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/block/nbd9/rqos/wbt/wb_normal\x00', 0x400000, 0x0) setsockopt$auto(r3, 0x6, 0x6, &(0x7f00000000c0)='\x00', 0xfffff3a7) mmap$auto(0x0, 0x20009, 0x9, 0xebf, 0x401, 0x1000007ffe) unshare$auto(0x40000080) mmap$auto(0x0, 0x810004, 0x400000000ffb, 0x8000000008011, 0x3, 0x8000) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) mmap$auto(0x0, 0x2020006, 0x1000000000000007, 0xeb1, 0x0, 0x1008000) r4 = socket(0x1d, 0x2, 0x7) ioctl$auto_FIOASYNC(r4, 0x5452, 0x100) 10.185422946s ago: executing program 4 (id=2428): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) (async) r0 = open(0x0, 0x261c2, 0x84) close_range$auto(0x2, 0x8000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) close_range$auto(0x2, 0x8000, 0x0) (async, rerun: 64) r2 = socket(0xa, 0x2, 0x88) (rerun: 64) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'wg0\x00', 0x0}) (async) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.cpu/memory.failcnt\x00', 0xc2061, 0x0) write$auto(r5, 0x0, 0x80) (async) bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_5={@target_ifindex=r4, r3, 0x4, 0x401, r2, @relative_id=0x13, 0xe600}, 0xf) (async, rerun: 64) bpf$auto(0x2, &(0x7f00000001c0)=@raw_tracepoint={0x5, r0, 0x0, 0x3}, 0xc) (async, rerun: 64) bpf$auto(0x2, &(0x7f0000000500)=@bpf_attr_11={0x5, 0x8000000000000001, 0x9, 0x5, 0xf870e9f, 0x7, 0x8}, 0x9) (async, rerun: 32) close_range$auto(0x2, 0x8, 0x0) (rerun: 32) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x20342, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) socket(0x2, 0x80002, 0x73) socket(0x15, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) r6 = socket(0x10, 0x2, 0x4) close_range$auto(0x2, 0x8, 0x0) (async, rerun: 32) r7 = socket(0x10, 0x2, 0xc) (rerun: 32) sendmsg$auto_TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000003740)={&(0x7f0000000000)=ANY=[@ANYBLOB="b1000000", @ANYRES16, @ANYBLOB="01002dbd7000fddbdf25030000000c0001"], 0x20}, 0x1, 0x0, 0x0, 0x41}, 0x40080) (async, rerun: 32) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000080)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x60008044}, 0x51) (rerun: 32) write$auto(r6, &(0x7f0000000000)='-\x00', 0xfdef) 9.648302608s ago: executing program 4 (id=2429): mmap$auto(0x0, 0x400004, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x400, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x202, 0x0) io_uring_register$auto_IORING_REGISTER_MEM_REGION(r0, 0x22, &(0x7f0000000040)="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", 0xfffffff7) r1 = openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, 0x0, 0x189400, 0x0) writev$auto(r1, &(0x7f00000018c0)={0x0, 0x2}, 0x8) read$auto(r1, 0x0, 0x6) io_uring_setup$auto(0x86, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) r2 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x2000, 0x0) ioctl$auto_SNDCTL_DSP_GETCAPS(r2, 0x8004500f, &(0x7f0000000040)) r3 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/controlC1\x00', 0x40000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, r3, 0x0) socket(0x10, 0x2, 0x4) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/hugetlb.1GB.max_usage_in_bytes\x00', 0x1002, 0x0) socket(0xa, 0x2, 0x0) socket(0xa, 0x801, 0x84) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/fs/netfs/cookies\x00', 0xd00, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000100)='/dev/pts/ptmx\x00', 0xa0540, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8000, 0x0) socket(0x18, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000280), 0x101000, 0x0) 9.021106205s ago: executing program 4 (id=2430): unshare$auto(0x40000080) r0 = socket(0xa, 0x5, 0x0) mmap$auto(0x4, 0xa020009, 0x3, 0xeb1, r0, 0x7ffe) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/fs/cifs/mount_params\x00', 0x802, 0x0) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f0000000640)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\xff\x7f\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc:\xfa\x01\xd1\xa3\xb5\xc2B\xa5\xac:woR^a\xb9}\xe7\xbd\xe1\xf77.\xa3\xd8\xc2T\x95\x13\x91\xb6p\xf3\xb2w\xe6\xd7\x94DW\x97\x90a\xe6c\xfb\x88x\xd5L\xa9\xe4\x82\x04\xb1\x8b\r\xcaP\\\x1aVP\xc9\xa4`\xfd\v\x94\f\xc1\x0fQ\xc9\xdcL\x03\x9c\xbfk\xa6\xb1\xb0\xa1\xeeJ\xd8\xef\xc8t\x9d\x1e=J\x91W\xc6AuJ\xb9Q\xed\xd1\a\x05\x9d\x85\xb7b#r\xcd\xaf\xb7\x9f\xf7\xd2\xae\x0f\x98\xa9&\xb6~\xd4\xbd\xbbr\xb9\xc3\xacH!\xc1\x90K2\x05K@\xee\xac\xe8\xc7\t\xab\xbf\xa3\xedb\xd7\xb5\xd7\x83&\x95\xb2?\x0e\x85\xaaIGu\xd6$\xeb\xb6\xdd\a\x121\a\xac\x1bx#\x87\xa9\x10\x9b\xf8YD\x04ZL\xca\x99]\x8f[\x90[\xa8\xbf\x98\xa6\xe50(zC\xe84*w\x13\x96\xd5\xd0\x877\x12\xbc\xa1\xd0h@|\xf9\xfa\x9b\x17\x94\xb9\xe7\xf3\x15\x05\x91\xe8\x98p\x7f:\xd7s\xd9wo\x82\xda\xec\x91\xb7\xd9;H\x8a\b\x00\x00\x00\x00\x00\x00\x00\x8aZ\x94\x14$X7\xaeW6=^I\x9fQ\r5c\x81\xca]\x97m\x89o\x8f\xd8}P>I\xd0\xb3\x88C\xd7', 0x100000a3d9) ioctl$auto(0xffffffffffffffff, 0x540a, 0x0) close_range$auto(0x2, r2, 0x401) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) openat$auto_drm_crtc_crc_data_fops_drm_debugfs_crc(0xffffffffffffff9c, &(0x7f0000000040), 0x20301, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x801, 0x84) io_uring_setup$auto(0x6, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd3e, 0x1, 0x948b, 0x7, 0x3, 0x10001, 0x3, 0x5e, 0x80000001, 0x7, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) write$auto(r3, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0x11, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0xffffffffffffffff, 0x948e, 0xffffffffffffffff, 0x15f4da0a, 0x3, 0x1000, 0x5cd3628000000, 0x4000008000001f, 0x7, 0x6d3e, 0x6, 0x2, 0x6]}, 0x0) socketpair$auto(0x1, 0x1, 0x0, 0x0) r4 = socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) close_range$auto(r4, r4, 0x0) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x404c0c0}, 0x80) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x7ff}, 0x7, 0x4008) r5 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video57\x00', 0xa240, 0x0) ioctl$auto(r5, 0xc0585611, r5) syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) 8.96621298s ago: executing program 1 (id=2431): mmap$auto(0x0, 0x10005, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r0, 0x0, 0x20) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r1, &(0x7f00000001c0)={0x0, 0x7}, 0x3) openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, 0x0, 0x48002, 0x0) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_COALESCE(0xffffffffffffffff, 0x0, 0x44860) openat$auto_clk_dump_fops_(0xffffffffffffff9c, 0x0, 0x80, 0x0) r2 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/rt_cache\x00', 0x40100, 0x0) pread64$auto(r2, 0x0, 0x40000000006, 0x3) 8.547177898s ago: executing program 1 (id=2432): mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) r0 = socket(0x2, 0x2, 0x0) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x50) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, 0x0, 0x68881, 0x0) r2 = socket(0x2b, 0x1, 0x0) listen$auto(r2, 0x1) sendmsg$auto_KSMBD_EVENT_LOGOUT_REQUEST(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x20000000}, 0x240000c0) r3 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0xe8, 0x9, 0x2, 0x1, 0x5, 0x4, 0x15f4da0e, 0x8, 0x9, 0x100000000000000c, 0x8, 0x1, 0xfca, 0x9, 0x2, 0x4000000000000d]}, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) bind$auto(r0, &(0x7f0000000240)=@sco={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0xffffeffb) prctl$auto_SECCOMP_MODE_FILTER(0x7, 0x2, 0x0, 0xfff, 0x3) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) madvise$auto(0x0, 0xffffffdfffff0005, 0x14) setsockopt$auto(0x3, 0x0, 0x17, 0x0, 0x28) setsockopt$auto(0x3, 0x0, 0x17, 0x0, 0x28) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/usbcore/parameters/usbfs_snoop_max\x00', 0x0, 0x0) r4 = wait4$auto(0x0, 0x0, 0x80000000, 0x0) getsockopt$auto(0xffffffffffffffff, 0x84, 0x7d, 0x0, 0x0) mmap$auto(0x10000, 0x6a, 0xdf, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL802154_CMD_GET_SEC_DEV(r3, &(0x7f0000000740)={&(0x7f0000000040), 0xc, &(0x7f0000000280)={&(0x7f0000000480)={0x258, 0x0, 0x4, 0x70bd2a, 0x25dfdbfc, {}, [@NL802154_ATTR_SUPPORTED_CHANNEL={0x8, 0x16, 0x100}, @NL802154_ATTR_CCA_ED_LEVEL={0x8, 0xe, 0x881}, @NL802154_ATTR_CCA_ED_LEVEL={0x8}, @NL802154_ATTR_COORDINATOR={0xc, 0x1e, 0x0, 0x1, [@typed={0x8, 0xd3, 0x0, 0x0, @pid=r4}]}, @NL802154_ATTR_SEC_OUT_KEY_ID={0x21e, 0x2b, 0x0, 0x1, [@typed={0xc, 0xab, 0x0, 0x0, @u64=0x7}, @nested={0x6e, 0x2b, 0x0, 0x1, [@generic="cce791b5d8501207189a51bd53fa6f4dc2c52746ffe97bcf581c69ef1a609886da2090b39d7d1a4bc6f0c288b0b669ff2e356c87d27072c109f290f16246b105c7684363eca9", @typed={0x14, 0x92, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @broadcast}}, @typed={0xc, 0x9f, 0x0, 0x0, @u64=0x4}, @nested={0x4, 0x1}]}, @typed={0x8, 0x15c, 0x0, 0x0, @fd}, @typed={0x8, 0x351a, 0x0, 0x0, @uid}, @generic="ef5ff01bb709bc32117c14f738b42d36495d0d695db9761b808f4aa13760098f71ad2cd72a3722ee53889b9ae7fad2186698350d", @nested={0xe9, 0xd5, 0x0, 0x1, [@typed={0x8, 0xea, 0x0, 0x0, @uid}, @typed={0x8, 0x117, 0x0, 0x0, @fd=r1}, @generic="1c19d0b8ef3385a8ec6929d186c3cbb867410795dbda28e89eace9881c9a5108ca6287cebb1049220344aef9f75a4be529035edb27b894b34f7499d7e251ab46725cec8978427fc57e982f854d65f29c3f473a338fb2ee64f850ee87080f8c172a81f0516bc8dafa645cb7fe7e2698641d71a01e238841c0c41ce209cc8c8f3cb4d664abca68bdb98be2f40dcfe900d29230b8d206", @nested={0x4, 0xa6}, @nested={0x4, 0xe3}, @generic="0df4bed8dfc4dc0fe9f6e08ee16981be1913190cbe3e292fbec7d12ef758f816723ed5e73e3e44b3cb343429ba5a8d63", @typed={0x8, 0xf9, 0x0, 0x0, @pid=r4}]}, @generic="51eec223b20906e6f8e8668f7125e3286592e220062805d588c8b7229931bd1dbd55dbec5d70f7401bf4e7cfd1effa7aa52d0c34555cf06632761f5bc896a69d371d14141e027e7c33274e54f0beb64765121e66cf4f096108660d4b95dc7320905fb616cbc55d9e6b92ef30021d"]}]}, 0x258}, 0x1, 0x0, 0x0, 0x2008000}, 0xc0) r5 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$auto(r5, 0x104000000000010e, 0x5, 0x0, 0x400) openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, 0x0, 0x410081, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xc8282, 0x0) 7.485924564s ago: executing program 1 (id=2433): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3, 0x8000000000000001, 0x0, 0x500000000001, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r2 = socket(0x21, 0x4, 0x800) listen$auto(0x3, 0x81) mmap$auto(0x0, 0x20000a, 0x2, 0x12, r2, 0x7) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) ioctl$auto_SW_SYNC_IOC_INC(r1, 0x40045701, &(0x7f0000000080)=0x77) prctl$auto(0x5, 0x80000000, 0x0, 0x78, 0x8) mmap$auto(0x2, 0x1, 0xffb, 0x8000000008011, r2, 0x8000) openat$auto_wakeup_sources_stats_fops_wakeup(0xffffffffffffff9c, 0x0, 0x40002, 0x0) r3 = socket(0xa, 0x2, 0x200003a) bind$auto(r3, &(0x7f0000000040)=@generic={0xa, "2c551d000019ff714e00"}, 0x66) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x0, 0x5, 0x0) pipe$auto(0x0) pipe$auto(0x0) write$auto(0x3, 0x0, 0x7fffffff) tee$auto(0x2000000000000, 0x3, 0x402, 0xd) write$auto(0x1, 0x0, 0x3) close_range$auto(0x2, 0xa, 0x0) mremap$auto(0x0, 0xffffffffffffffff, 0x3fd6, 0x3, 0x7fffffffb000) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x4000804) lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x0, 0x9, 0x63, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1000, 0xfffffffffffffffd, 0x7ffffffb, 0x9, 0x8000000000000000, 0x9, 0x7, 0xfffffffffffffffb}) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x89fc, &(0x7f0000000040)={'bridge0\x00'}) 6.700171287s ago: executing program 3 (id=2434): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = socket$nl_generic(0x11, 0x3, 0x10) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x6, 0x0) move_pages$auto(0x0, 0x1002, 0x0, 0x0, 0x0, 0x2) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/system/memory/memory12/power/control\x00', 0x100, 0x0) close_range$auto(0x2, 0xffffffffffffffff, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xae00, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$auto(0x3, 0x4018aebd, r1) r3 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189002, 0x0) ioctl$auto_PPPIOCSMRU(r3, 0xc004743e, 0x0) bind$auto(r0, &(0x7f0000000200)=@generic={0x11, "00030f00"}, 0x80) r4 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0) read$auto(r4, 0x0, 0x1f40) r5 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r5, &(0x7f0000000200)={0x0, 0x9}, 0x3) close_range$auto(0x2, 0x8, 0x0) 6.34758111s ago: executing program 3 (id=2435): mmap$auto(0x0, 0x20009, 0x5, 0xeb2, 0x8, 0x1008000) (async) r0 = socket(0x10, 0x2, 0x0) (async) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/pid_for_children\x00') sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYRES8=r1, @ANYBLOB="1a00"], 0x1ac}}, 0x40000) write$auto_console_fops_tty_io(0xffffffffffffffff, &(0x7f0000000000)="c80d1b5d399b71", 0x7) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) (async) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) recvmmsg$auto(r0, &(0x7f0000000100)={{0x0, 0x4, &(0x7f0000000080)={&(0x7f0000000040), 0xcb}, 0x3, 0x0, 0x80000000, 0x6}, 0x9}, 0x7, 0x6, 0x0) r2 = open(&(0x7f0000000100)='./bus\x00', 0x14d27e, 0x72) copy_file_range$auto(r2, 0x0, r2, &(0x7f0000000080)=0xeb2f, 0xfffffffffffffffe, 0x0) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x5, 0x84) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) r5 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000040), 0x20904, 0x0) (async) r6 = openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f0000000580), 0x80, 0x0) fcntl$auto_F_GETPIPE_SZ(r6, 0x408, 0x2) (async) ioctl$auto_SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f0000000000)={{0x3, 0x1002, 0xfffffffc, 0x5, 0x2}, "654c6dbc7a4d30983899a7e1325b6a29ba1e18441074052a3fa6c3ccf1bf00"}) (async) readv$auto(r5, &(0x7f0000000a80)={0x0, 0x2}, 0x2) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002dbd7000fddbdf250800030008000300", @ANYRES32=r7], 0x24}, 0x1, 0x0, 0x0, 0x5c5fd097d751f33e}, 0x80) (async) syz_genetlink_get_family_id$auto_tipcv2(0x0, r0) 6.061060198s ago: executing program 3 (id=2436): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) ptrace$auto(0x6, 0x1, 0x3, 0x180002) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40811}, 0x4) madvise$auto(0x0, 0x200007, 0x19) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/pagemap\x00', 0x6801, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) r1 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000540)='/dev/sequencer2\x00', 0x1c8340, 0x0) ioctl$auto(r1, 0xc0045405, 0x3) mmap$auto(0x2, 0x202, 0xdf, 0xeb1, 0x401, 0x4000000000000003) prctl$auto(0x200003b, 0x200000200800000, 0x0, 0x6, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) r2 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/smaps_rollup\x00', 0x40000, 0x0) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0xb74, 0x66a) madvise$auto(0xfffffffffffffffe, 0xffffffffffff0001, 0x15) read$auto_proc_pid_maps_operations_internal(r2, &(0x7f00000020c0)=""/4093, 0xffd) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/platform/dummy_hcd.0/usb1/avoid_reset_quirk\x00', 0x68006, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) r3 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000000), 0x902, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) r4 = socket(0xa, 0x2, 0x73) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) sendto$auto(r4, 0x0, 0x402, 0x0, &(0x7f0000000000)=@generic={0xa, "e2e18340cba8fe8000"}, 0x1c) ioctl$auto_RTC_UIE_ON(r3, 0x7003, 0x0) ioctl$auto_RTC_WKALM_SET(r3, 0x4028700f, &(0x7f0000000000)={0x3, 0x9, {0x5, 0xc, 0x9, 0x7, 0x5, 0x3a50, 0xfffffffd, 0xffff, 0xfd}}) 5.419081838s ago: executing program 4 (id=2438): mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) r0 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) fcntl$auto(0x3, 0x4, 0xa553) swapon$auto(0x0, 0x4) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) ioctl$auto_TIOCSETD2(r0, 0x5423, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x129102, 0x0) adjtimex$auto(&(0x7f0000000000)={0xffff92b5, 0x0, 0x9, 0xc8c7, 0x0, 0x80000000000000, 0x80000000, 0x0, 0x4513, 0x9, 0x3, {0x7, 0xff}, 0xfffffffc, 0xbfa, 0x9, 0x10, 0x0, 0x2, 0x8, 0xff, 0x10000, 0x100000001, 0x4}) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x24) close_range$auto(0x2, 0x8, 0x0) close_range$auto(r0, 0x8, 0xfffffe02) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) socket(0x28, 0x3, 0x3) r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x20002, 0x0) ioctl$auto_SNDCTL_DSP_SPEED(r1, 0xc0045002, 0x0) ioctl$auto_SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000000)="7f07d3") mmap$auto(0x7, 0x400008, 0x1200400000000cd, 0x400049b72, 0xffffffffffffffff, 0x7ff) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r2 = socket(0xa, 0x3, 0x1) bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_4={0x1f, r2, 0x10000}, 0x10) socket(0xa, 0x1, 0x84) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x100000abdb) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0x240007, 0x19) 3.91207716s ago: executing program 3 (id=2440): mmap$auto(0xfffffffffffffffe, 0x2020005, 0x3, 0x9000000eb1, 0xfffffffffffffffa, 0x9) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x161742, 0x0) write$auto(r0, 0x0, 0x2) getrlimit$auto(0x83, 0x0) r1 = openat$auto_tracing_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/per_cpu/cpu1/trace\x00', 0x0, 0x0) pread64$auto(r1, 0x0, 0x100000009, 0xa4000000000002) fdatasync$auto(r0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/035/001\x00', 0x1102, 0x0) ioctl$auto_posix_clock_file_operations_posix_clock(r2, 0x0, &(0x7f0000000180)="9939392317f5dc506655a8c8eead9700a30a83ea8e81e2e1e87393656b2c5d5293441b8b62cc90e71884962e0305a6e200fd45cf3eae2b1c7158514663a3bd1fab") r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008012, r3, 0x8000) mprotect$auto(0x0, 0x806121, 0x8) write$auto(0xffffffffffffffff, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xc8d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\xc6\x00\x89\te\x8d\a\xfb\\n\x89C:\x84D\x10u\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k', 0x100000a3d9) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x8ea182, 0x0) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x1000, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x8000000000000000, 0x15) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/kernel/kexec_crash_size\x00', 0x302, 0x0) 3.531464382s ago: executing program 1 (id=2441): socket(0x2a, 0x80000, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x0, @remote}, 0x6a) write$auto_proc_loginuid_operations_base(0xffffffffffffffff, 0x0, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/fs/orangefs/dcache_timeout_msecs\x00', 0x8ea182, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x800, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/platform/vivid.0/video4linux/video53/uevent\x00', 0x2263, 0x0) write$auto(r1, 0x0, 0x81) write$auto(r1, &(0x7f0000000440)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb', 0x98c7) open(0x0, 0x163ac1, 0x82) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) close_range$auto(0x2, 0x8, 0x0) r2 = socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) sysfs$auto(0x2, 0x23, 0x0) r3 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/set_event\x00', 0x20201, 0x0) write$auto(r3, 0x0, 0x4) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000000)="42bf", 0x2) syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$auto_NETDEV_CMD_PAGE_POOL_GET(r2, 0x0, 0x0) mremap$auto(0x3, 0x0, 0xb, 0x2, 0x2) r4 = socket(0x10, 0x2, 0x6) getsockopt$auto(r4, 0x2, 0x0, 0x0, &(0x7f00000001c0)=0x8) 2.939955481s ago: executing program 3 (id=2443): r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x2f304d7c6579ed4, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x0, 0xfffffffffffff000, 0x2) landlock_create_ruleset$auto(&(0x7f0000000000)={0x81, 0x8000000000001, 0xa}, 0xb, 0x0) setfsuid$auto(0xee00) socket(0x2, 0x3, 0x100) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) r1 = socket(0x2b, 0x1, 0x1) setsockopt$auto(r1, 0x0, 0x25, 0x0, 0xc) r2 = openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/pcmC1D1c\x00', 0x1, 0x0) ioctl$auto___SNDRV_PCM_IOCTL_SYNC_PTR642(r2, 0xc0884123, 0x0) ioperm$auto(0x3b, 0xf99b, 0x6) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r3 = io_uring_setup$auto(0x406, 0x0) io_uring_enter$auto(r3, 0x7, 0x7ffffffb, 0x3, 0x0, 0x3) io_uring_enter$auto(0x3, 0x5, 0x5f3, 0x14, 0x0, 0x6) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) unshare$auto(0x40000080) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x745100, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/midiC2D0\x00', 0x0, 0x0) openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, &(0x7f0000001140)='/dev/psaux\x00', 0x42000, 0x0) io_uring_setup$auto(0x59, 0x0) openat$auto_vhci_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000d00), 0x0, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000580)={[0x1ff, 0x8000, 0xd, 0x1, 0x948d, 0x3, 0x10015f4da0a, 0xd, 0x7, 0x64c1, 0x8000001f, 0x8, 0x6d3e, 0xc, 0x2, 0x2]}, 0x0) write$auto(r4, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xfc\x04\x00\x00)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) 2.628032924s ago: executing program 9 (id=2445): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) write$auto(0x3, 0x0, 0xfdf3) read$auto(r0, 0x0, 0x2) setsockopt$auto(0x3, 0x1, 0x21, 0x0, 0x9) write$auto(r0, 0x0, 0x11aa) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) setsockopt$auto(0x3, 0x10000000084, 0x71, 0x0, 0x8) sendmsg$auto_NL80211_CMD_CHANGE_NAN_CONFIG(0xffffffffffffffff, 0x0, 0x4048002) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000880), r1) sendmsg$auto_BATADV_CMD_GET_ORIGINATORS(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000080)={0x1c, r2, 0x3abba0b2ae0bab93, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_HOP_PENALTY={0xfffffe9a, 0x35, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4840}, 0x4040010) 2.498440197s ago: executing program 4 (id=2446): mmap$auto(0x0, 0x10005, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r0, 0x0, 0x20) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r1, &(0x7f00000001c0)={0x0, 0x7}, 0x3) openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, 0x0, 0x48002, 0x0) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000340), 0xffffffffffffffff) r2 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/rt_cache\x00', 0x40100, 0x0) pread64$auto(r2, 0x0, 0x40000000006, 0x3) 2.373240919s ago: executing program 9 (id=2447): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="72010000", @ANYBLOB="120027", @ANYBLOB="5de1523353782950330a"], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB='J'], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc2}, 0x101, 0x0, 0x0, 0x9}, 0x3}, 0x5, 0x0) recvmmsg$auto(r0, &(0x7f0000000100)={{0x0, 0x4, &(0x7f0000000080)={&(0x7f0000000040), 0xcb}, 0x3, 0x0, 0x80000000, 0x6}, 0x9}, 0x7, 0x200, 0x0) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) syz_genetlink_get_family_id$auto_ioam6(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x44000809}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB='H'], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) waitid$auto_P_ALL(0x0, 0x59, &(0x7f0000000140)={@_si_pad}, 0x5, &(0x7f0000000340)={{0x8, 0xfffffffffffffff0}, {0x1, 0xf}, 0x2, 0x77, 0x1, 0x4, 0x6, 0xe81c, 0x1c3, 0xca9, 0x1, 0x6, 0x6, 0xa, 0x6d, 0xe49}) 2.259456229s ago: executing program 1 (id=2448): unshare$auto(0x40000080) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0xfffe0000) openat$auto_vhci_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000d00), 0x0, 0x0) r1 = socket(0x2b, 0x1, 0x0) r2 = syz_genetlink_get_family_id$auto_ncsi(&(0x7f0000000040), r0) shmctl$auto_SHM_INFO(0x2, 0xe, &(0x7f0000000140)={{0x0, 0xffffffffffffffff, 0x0, 0x55, 0x40, 0x2, 0x9}, 0x6, 0x2, 0x8, 0x7, @raw=0x40, @inferred=0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000080)="918b732212a6e81a09739cbdf2dc690a778bc01bc7a54695fcfca459249736e5ae1cc84b7b9755f27b3038c788084a4529ae4467450a84d3bbee0040685e234c8fdbe92a2c7876", &(0x7f0000000100)="540025ac70"}) r4 = socket(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'vcan0\x00'}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$auto(0x3, &(0x7f0000000040)=@can={0x1d, r5, 0xfd}, 0x6a) sendmsg$auto_NCSI_CMD_PKG_INFO(r1, &(0x7f00000007c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000780)={&(0x7f00000001c0)=ANY=[@ANYBLOB="84050000", @ANYRES16=r2, @ANYBLOB="000427bd7000fbdbdf2501000000560502800c000300ff0100005bedebcd8ce1dfe78b000000000201d480060049", @ANYRES32=r3, @ANYBLOB="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", @ANYRES32=r5, @ANYBLOB="0800030000000000"], 0x584}, 0x1, 0x0, 0x0, 0x80}, 0x8044) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) openat$auto_random_fops_random(0xffffffffffffff9c, &(0x7f0000000880), 0x4400, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) rt_sigprocmask$auto(0xffffffff, 0x0, 0x0, 0x8) r6 = openat$auto_proc_pid_numa_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000003640)='/proc/self/numa_maps\x00', 0x40080, 0x0) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) lseek$auto(r6, 0x7ff, 0x1) getsockopt$auto_SO_RESERVE_MEM(r1, 0x6, 0x49, &(0x7f0000000800)='^\xe8--\x00', &(0x7f0000000840)=0x7fff) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) 2.068910186s ago: executing program 4 (id=2449): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_SET_SAR_SPECS(r0, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000480)={0x1c, r1, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@NL80211_ATTR_BEACON_HEAD={0x6, 0xe, "1c36"}]}, 0x1c}, 0x1, 0x0, 0x0, 0x6040000}, 0x20008810) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x0, 0xfffffffffffff000, 0x2) mremap$auto(0x200001000000, 0x400000000004, 0x2, 0x3, 0x100000000) mmap$auto(0x0, 0x8001, 0xdc, 0xeb1, 0xffffffffffffffff, 0x8000) r2 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c000000", @ANYBLOB="5e00fbe18d073ba65c6df9cd1c8d10ea3ad6d7ac15"], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40000) recvmmsg$auto(r2, &(0x7f0000000180)={{0x0, 0x10001, &(0x7f0000000080)={&(0x7f0000000040), 0x200}, 0x4, 0x0, 0x8, 0x7}, 0x7}, 0x5, 0x66a6, 0x0) socket(0x10, 0x2, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000100)='/dev/bus/usb/028/001\x00', 0x181602, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/net/bond0/bonding/miimon\x00', 0x143b42, 0x0) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x24044814}, 0x800) sendmsg$auto_NETDEV_CMD_QUEUE_GET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="01002cbd7000fbdbdf250a0080"], 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x20008810) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB='J'], 0x1ac}}, 0x40000) socket(0xa, 0x5, 0x0) accept$auto(0x3, 0xffffffffffffffff, 0xfffffffffffffffd) 1.846519319s ago: executing program 3 (id=2450): r0 = socket(0x2, 0x5, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) r1 = io_uring_setup$auto(0x1, 0x0) setsockopt$auto(0x3, 0x0, 0x2, 0x0, 0x3) write$auto_fops_init_pkru_pkeys(r1, &(0x7f0000000280)="e7c2da8ba23469d9b78d2e257333bedaec957355b8c2c4c78f4a98e7180a2dfeddb935038a6350c625940925fc61f1b8b51df8f60e61c078ff39654003ba048fb5ce9f0cc683aa815dd3ad98c47fb90efa4ba1a790507d91d2a8beb4ce1934ec6dc65f", 0x63) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x10000}, 0x7, 0x0, 0x5, 0xb}, 0xfff}, 0x8, 0x311) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_ovs_ct_limit(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_OVS_CT_LIMIT_CMD_DEL(r2, &(0x7f0000003480)={0x0, 0x0, &(0x7f0000003440)={&(0x7f0000000a00)={0x24, r3, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@OVS_CT_LIMIT_ATTR_ZONE_LIMIT={0x4}, @OVS_CT_LIMIT_ATTR_ZONE_LIMIT={0xc, 0x1, 0x0, 0x1, [@nested={0x8, 0x2f, 0x0, 0x1, [@nested={0x4, 0xf7}]}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x40c4}, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop6\x00', 0x18dd01, 0x0) get_robust_list$auto(0x0, 0x0, 0x0) socket(0x1d, 0x3, 0x1) mmap$auto(0x0, 0x40009, 0x3, 0x9b72, 0x7, 0x28000) bpf$auto(0x0, &(0x7f0000000780)=@link_update={0xa, @new_map_fd=0x5, 0x4007, @old_prog_fd=0x13b}, 0xa3) bpf$auto_BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)=@link_create={@map_fd=r4, @target_fd=r4, 0xb3f6, 0x3, @tcx={@relative_fd=r1, 0x6}}, 0x8) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r5 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$auto_VHOST_SET_OWNER(r5, 0xaf01, 0x0) ioctl$auto(0x3, 0xc0485619, 0x38) mmap$auto(0x0, 0xe983, 0x7f, 0xeb1, 0x401, 0x8000) futex$auto(&(0x7f0000000080)=0x2948, 0x0, 0x2948, 0x0, 0x0, 0x5) futex$auto(&(0x7f0000000080)=0x3, 0x3, 0x0, 0x0, 0x0, 0x440a48d3) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) 1.365559731s ago: executing program 9 (id=2451): mmap$auto(0x0, 0x400008, 0xe3, 0xfffffffffffffc10, 0xffffffffffffffff, 0x800008000) getpid() mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) fcntl$auto(0x3, 0x8, 0x9ebfffffffffffff) fcntl$auto(0x3, 0x4, 0xa553) mmap$auto(0x0, 0x2020009, 0x8000000000000003, 0x40000000000eb1, 0xffffffffffffffff, 0x2008000) sysfs$auto(0x2, 0xd, 0x0) close_range$auto(0x2, 0x8000, 0x0) socket(0x2, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000140), 0xe0182, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r1) ioctl$auto_KVM_CREATE_VM(r0, 0x4048ae9b, 0x0) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/system/cpu/cpu0/cache/index0/type\x00', 0x183142, 0x0) getrlimit$auto(0x8, 0x0) keyctl$auto(0x806, 0x0, 0xffffffffffffffff, 0x0, 0x7) r2 = openat$auto_btrfs_ctl_fops_super(0xffffffffffffff9c, 0x0, 0x2100, 0x0) ioctl$auto_FS_IOC_UNRESVSP(0xffffffffffffffff, 0x40305829, 0x100) ioctl$auto_BTRFS_IOC_GET_SUPPORTED_FEATURES(r2, 0x80489439, 0x0) statmount$auto(0x0, 0x0, 0x1fe, 0x5) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x182883, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x1e, 0x4, 0x0) 951.971105ms ago: executing program 9 (id=2452): mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) (async) socket(0xa, 0x3, 0x3b) (async) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x56) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) setreuid$auto(0x2, 0x87) (async) timer_create$auto(0x9, 0x0, &(0x7f0000000140)=0x6) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001b80), r0) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r0, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f0000000140)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010027bd7000fbdbdf2504000000080017000800000004000e00170a6e91ec4d585b71ed58da822fda81ce8a6188182a2d6bbb3f26d508799ea0fe5497a4980b59d7e4ecd5895164facda6ffbd75d39ae745716720ff1ece2de4efd69952d8ce46c035ae98e741082f584490aab09f721eddf49b03b9f5ded612a892fea3128ad26ada5f9ef2cf75e8842f6f46881d29bed2da879c3f61577b7253538844c297583b5a87b5c93e31ae75ea58bb230bbbcb092c38901560"], 0x20}, 0x1, 0x0, 0x0, 0x220000c1}, 0xc0) 680.964328ms ago: executing program 9 (id=2453): r0 = socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0x20004, 0x1ff, 0xeb1, 0x8000000000000024, 0x8000) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000080), r1) sendmsg$auto_NETDEV_CMD_QUEUE_GET(r1, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000015c0)={0x24, r2, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@NETDEV_A_QUEUE_TYPE={0x8}, @NETDEV_A_QUEUE_ID={0x8, 0x1, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x810) r3 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$auto(0x3, &(0x7f0000000040)=@can={0x1d, r4, 0xfd}, 0x6a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'nr0\x00', 0x0}) sendmsg$auto_NETDEV_CMD_DEV_GET(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x34, r2, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@NETDEV_A_DEV_IFINDEX={0x8, 0x1, r4}, @NETDEV_A_DEV_IFINDEX={0x8}, @NETDEV_A_DEV_IFINDEX={0x8, 0x1, r5}, @NETDEV_A_DEV_IFINDEX={0x8, 0x1, r6}]}, 0x34}, 0x1, 0x0, 0x0, 0x70044040}, 0x44804) setsockopt$auto(0x3, 0x10000000084, 0x7c, 0x0, 0x8) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) 0s ago: executing program 9 (id=2454): r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x20342, 0x0) ioctl$auto_SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000)) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x1a9402, 0x0) sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(0xffffffffffffffff, 0x0, 0x800) timer_create$auto(0x9, 0x0, 0x0) read$auto(0x3, 0x0, 0x8080) socket(0xa, 0x1, 0x100) write$auto(0x3, 0x0, 0xffd8) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/module/workqueue/parameters/default_affinity_scope\x00', 0x1a9242, 0x0) sendfile$auto(r2, r1, 0x0, 0x100000000005) unshare$auto(0x40000080) fsconfig$auto(r0, 0x800, &(0x7f0000000040)='/sys/devices/LNXSYSTM:00/LNXPWRBN:00/power/wakeup_abort_count\x00', 0x0, 0x0) write$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffffff, &(0x7f00000001c0), 0x0) process_mrelease$auto(0xffffffffffffffff, 0xa) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) socket(0x2, 0x1, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x1, 0x106) setsockopt$auto(r2, 0x6, 0xd, &(0x7f00000000c0)='M_I\x83\x8a\xa7\xe4]\x00\x00#\x00\x10\x00\x00\x00\x00\x00\x00\x00\x00', 0x200004) bind$auto(0x3, &(0x7f0000000180)=@in={0x2, 0x3, @multicast1}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) mmap$auto(0x0, 0x400008, 0xdf, 0x9b7e, 0x2, 0x8000) mprotect$auto(0x1ffffffff000, 0x100018, 0x4) write$auto(0x3, 0x0, 0xfffffdef) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/midiC2D1\x00', 0x0, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r3, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3dc) kernel console output (not intermixed with test programs): 818.944508][T16701] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 819.046712][T16701] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 819.317572][T16866] FAULT_INJECTION: forcing a failure. [ 819.317572][T16866] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 819.390442][T16866] CPU: 0 UID: 0 PID: 16866 Comm: syz.9.2219 Tainted: G U L syzkaller #0 PREEMPT(full) [ 819.390475][T16866] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 819.390481][T16866] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 819.390492][T16866] Call Trace: [ 819.390498][T16866] [ 819.390505][T16866] dump_stack_lvl+0x100/0x190 [ 819.390536][T16866] should_fail_ex.cold+0x5/0xa [ 819.390557][T16866] _copy_to_user+0x32/0xd0 [ 819.390584][T16866] simple_read_from_buffer+0xcb/0x170 [ 819.390609][T16866] proc_fail_nth_read+0x1af/0x230 [ 819.390646][T16866] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 819.390676][T16866] ? rw_verify_area+0xce/0x6d0 [ 819.390697][T16866] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 819.390725][T16866] vfs_read+0x1e4/0xb30 [ 819.390751][T16866] ? __pfx_vfs_read+0x10/0x10 [ 819.390774][T16866] ? __fget_files+0x215/0x3d0 [ 819.390802][T16866] ? __fget_files+0x21f/0x3d0 [ 819.390839][T16866] ksys_read+0x12a/0x250 [ 819.390862][T16866] ? __pfx_ksys_read+0x10/0x10 [ 819.390891][T16866] do_syscall_64+0x106/0xf80 [ 819.390917][T16866] ? clear_bhb_loop+0x40/0x90 [ 819.390938][T16866] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 819.390956][T16866] RIP: 0033:0x7f243475c84e [ 819.390971][T16866] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 819.390988][T16866] RSP: 002b:00007f243566cfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 819.391006][T16866] RAX: ffffffffffffffda RBX: 00007f243566d6c0 RCX: 00007f243475c84e [ 819.391017][T16866] RDX: 000000000000000f RSI: 00007f243566d0a0 RDI: 0000000000000004 [ 819.391027][T16866] RBP: 00007f243566d090 R08: 0000000000000000 R09: 0000000000000000 [ 819.391037][T16866] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 819.391047][T16866] R13: 00007f2434a16038 R14: 00007f2434a15fa0 R15: 00007fffd9c79418 [ 819.391069][T16866] [ 819.847078][T16872] nvme_fabrics: missing parameter 'transport=%s' [ 819.853979][T16872] nvme_fabrics: missing parameter 'nqn=%s' [ 820.695852][T16701] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 820.970186][T16701] veth0_vlan: entered promiscuous mode [ 821.010042][T16701] veth1_vlan: entered promiscuous mode [ 821.200962][T16701] veth0_macvtap: entered promiscuous mode [ 821.247441][T16701] veth1_macvtap: entered promiscuous mode [ 821.376536][T16701] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 821.441580][T16701] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 821.526093][ T6806] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 821.535028][ T6806] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 821.634862][ T6806] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 821.734306][ T6806] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 822.091914][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 822.125988][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 822.405686][T16923] FAULT_INJECTION: forcing a failure. [ 822.405686][T16923] name failslab, interval 1, probability 0, space 0, times 0 [ 822.437086][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 822.445126][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 822.505562][T16923] CPU: 0 UID: 0 PID: 16923 Comm: syz.0.2226 Tainted: G U L syzkaller #0 PREEMPT(full) [ 822.505605][T16923] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 822.505613][T16923] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 822.505623][T16923] Call Trace: [ 822.505629][T16923] [ 822.505637][T16923] dump_stack_lvl+0x100/0x190 [ 822.505668][T16923] should_fail_ex.cold+0x5/0xa [ 822.505689][T16923] should_failslab+0xc2/0x120 [ 822.505717][T16923] __kmalloc_cache_noprof+0x7a/0x6f0 [ 822.505738][T16923] ? do_epoll_create+0x62/0x4b0 [ 822.505767][T16923] do_epoll_create+0x62/0x4b0 [ 822.505793][T16923] __x64_sys_epoll_create+0x45/0x70 [ 822.505819][T16923] do_syscall_64+0x106/0xf80 [ 822.505844][T16923] ? clear_bhb_loop+0x40/0x90 [ 822.505867][T16923] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 822.505885][T16923] RIP: 0033:0x7f1a8cd9bf79 [ 822.505901][T16923] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 822.505919][T16923] RSP: 002b:00007f1a8dc44028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d5 [ 822.505937][T16923] RAX: ffffffffffffffda RBX: 00007f1a8d015fa0 RCX: 00007f1a8cd9bf79 [ 822.505948][T16923] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000006 [ 822.505957][T16923] RBP: 00007f1a8ce327e0 R08: 0000000000000000 R09: 0000000000000000 [ 822.505968][T16923] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 822.505978][T16923] R13: 00007f1a8d016038 R14: 00007f1a8d015fa0 R15: 00007ffece3fc838 [ 822.506000][T16923] [ 822.747660][T16911] syz.3.2224 invoked oom-killer: gfp_mask=0x400cc0(GFP_KERNEL_ACCOUNT), order=1, oom_score_adj=1000 [ 822.762728][T16911] CPU: 0 UID: 0 PID: 16911 Comm: syz.3.2224 Tainted: G U L syzkaller #0 PREEMPT(full) [ 822.762760][T16911] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 822.762767][T16911] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 822.762777][T16911] Call Trace: [ 822.762783][T16911] [ 822.762790][T16911] dump_stack_lvl+0x100/0x190 [ 822.762822][T16911] dump_header+0xfb/0x606 [ 822.762842][T16911] oom_kill_process.cold+0xd/0x330 [ 822.762864][T16911] out_of_memory+0x340/0x14f0 [ 822.763139][T16911] ? __pfx_out_of_memory+0x10/0x10 [ 822.763364][T16911] mem_cgroup_out_of_memory+0xc6/0x130 [ 822.763398][T16911] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 822.763418][T16911] ? find_held_lock+0x2b/0x80 [ 822.763450][T16911] ? do_raw_spin_unlock+0x145/0x1e0 [ 822.763475][T16911] ? _raw_spin_unlock+0x28/0x50 [ 822.763502][T16911] try_charge_memcg+0x652/0xc90 [ 822.763534][T16911] ? __pfx_try_charge_memcg+0x10/0x10 [ 822.763563][T16911] ? rcu_read_unlock+0x17/0x60 [ 822.763590][T16911] ? rcu_read_unlock+0x17/0x60 [ 822.763621][T16911] ? get_mem_cgroup_from_objcg+0xd3/0x330 [ 822.763647][T16911] obj_cgroup_charge_account+0x33d/0x640 [ 822.763679][T16911] __memcg_slab_post_alloc_hook+0x2e3/0x9a0 [ 822.763716][T16911] __kmalloc_node_track_caller_noprof+0x66e/0x850 [ 822.763742][T16911] ? neigh_sysctl_register+0xb4/0x660 [ 822.763781][T16911] kmemdup_noprof+0x29/0x60 [ 822.763807][T16911] neigh_sysctl_register+0xb4/0x660 [ 822.763835][T16911] ? __pfx_neigh_sysctl_register+0x10/0x10 [ 822.763860][T16911] ? inetdev_init+0x245/0x570 [ 822.763875][T16911] ? inetdev_event+0x7fa/0x17f0 [ 822.763891][T16911] ? notifier_call_chain+0x99/0x420 [ 822.763917][T16911] ? copy_net_ns+0x46f/0x7c0 [ 822.763932][T16911] ? create_new_namespaces+0x3ea/0xac0 [ 822.763963][T16911] ? unshare_nsproxy_namespaces+0xc3/0x1f0 [ 822.763981][T16911] ? ksys_unshare+0x455/0xab0 [ 822.764000][T16911] ? __x64_sys_unshare+0x31/0x40 [ 822.764021][T16911] ? do_syscall_64+0x106/0xf80 [ 822.764046][T16911] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 822.764069][T16911] devinet_sysctl_register+0xb6/0x210 [ 822.764091][T16911] inetdev_init+0x2b8/0x570 [ 822.764111][T16911] inetdev_event+0x7fa/0x17f0 [ 822.764131][T16911] ? ib_netdevice_event+0xfc/0x330 [ 822.764159][T16911] ? __pfx_inetdev_event+0x10/0x10 [ 822.764178][T16911] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 822.764210][T16911] notifier_call_chain+0x99/0x420 [ 822.764236][T16911] call_netdevice_notifiers_info+0xbe/0x110 [ 822.764258][T16911] register_netdevice+0x16e6/0x2210 [ 822.764291][T16911] ? __pfx_register_netdevice+0x10/0x10 [ 822.764333][T16911] __ip_tunnel_create+0x52b/0x670 [ 822.764365][T16911] ? __pfx___ip_tunnel_create+0x10/0x10 [ 822.764391][T16911] ? net_generic+0xea/0x2a0 [ 822.764413][T16911] ip_tunnel_init_net+0x230/0x780 [ 822.764433][T16911] ? __pfx_ip_tunnel_init_net+0x10/0x10 [ 822.764458][T16911] ? __kmalloc_noprof+0x320/0x850 [ 822.764483][T16911] ? __pfx_ipgre_tap_init_net+0x10/0x10 [ 822.764509][T16911] ops_init+0x1e2/0x5f0 [ 822.764539][T16911] setup_net+0x118/0x3a0 [ 822.764576][T16911] ? __pfx_setup_net+0x10/0x10 [ 822.764602][T16911] ? lockdep_init_map_type+0x5c/0x250 [ 822.764625][T16911] ? mutex_init_lockep+0x110/0x150 [ 822.764651][T16911] copy_net_ns+0x46f/0x7c0 [ 822.764671][T16911] create_new_namespaces+0x3ea/0xac0 [ 822.764706][T16911] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 822.764726][T16911] ksys_unshare+0x455/0xab0 [ 822.764749][T16911] ? __pfx_ksys_unshare+0x10/0x10 [ 822.764780][T16911] __x64_sys_unshare+0x31/0x40 [ 822.764801][T16911] do_syscall_64+0x106/0xf80 [ 822.764826][T16911] ? clear_bhb_loop+0x40/0x90 [ 822.764848][T16911] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 822.764870][T16911] RIP: 0033:0x7f208e19bf79 [ 822.764887][T16911] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 822.764905][T16911] RSP: 002b:00007f208f0ae028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 822.764924][T16911] RAX: ffffffffffffffda RBX: 00007f208e415fa0 RCX: 00007f208e19bf79 [ 822.764936][T16911] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 822.764946][T16911] RBP: 00007f208e2327e0 R08: 0000000000000000 R09: 0000000000000000 [ 822.764957][T16911] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 822.764968][T16911] R13: 00007f208e416038 R14: 00007f208e415fa0 R15: 00007ffe44e219f8 [ 822.764991][T16911] [ 822.765000][T16911] memory: usage 3068kB, limit 3072kB, failcnt 50679 [ 823.967140][T16940] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 825.057355][T16911] memory+swap: usage 3960kB, limit 9007199254740988kB, failcnt 0 [ 825.107235][T16911] kmem: usage 2724kB, limit 9007199254740988kB, failcnt 0 [ 825.158736][T16911] Memory cgroup stats for /syz3: [ 825.158862][T16911] cache 4096 [ 825.209474][T16911] rss 0 [ 825.219686][T16911] rss_huge 0 [ 825.223029][T16911] shmem 0 [ 825.275497][T16911] mapped_file 0 [ 825.279452][T16911] dirty 0 [ 825.282705][T16911] writeback 0 [ 825.335220][T16911] workingset_refault_anon 14820 [ 825.371071][T16911] workingset_refault_file 8952 [ 825.427187][T16911] swap 909312 [ 825.430689][T16911] swapcached 232841216 [ 825.434936][T16911] pgpgin 553467 [ 825.485515][T16911] pgpgout 574860 [ 825.489216][T16911] pgfault 337817 [ 825.519373][T16911] pgmajfault 6513 [ 825.523236][T16911] inactive_anon 352256 [ 825.563849][T16911] active_anon 0 [ 825.579965][T16911] inactive_file 4096 [ 825.618031][T16911] active_file 0 [ 825.632586][T16911] unevictable 0 [ 825.645287][T16911] hierarchical_memory_limit 3145728 [ 825.665672][T16911] hierarchical_memsw_limit 9223372036854771712 [ 825.693809][T16911] total_cache 4096 [ 825.714511][T16911] total_rss 0 [ 825.726934][T16911] total_rss_huge 0 [ 825.741217][T16911] total_shmem 0 [ 825.744702][T16911] total_mapped_file 0 [ 825.771544][T16911] total_dirty 0 [ 825.775136][T16911] total_writeback 0 [ 825.814189][T16911] total_workingset_refault_anon 14820 [ 825.834455][T16911] total_workingset_refault_file 8952 [ 825.855840][T16911] total_swap 909312 [ 825.868412][T16911] total_swapcached 232841216 [ 825.885488][T16911] total_pgpgin 553467 [ 825.889519][T16911] total_pgpgout 574860 [ 825.914221][T16911] total_pgfault 337817 [ 825.928926][T16911] total_pgmajfault 6513 [ 825.933383][T16911] total_inactive_anon 352256 [ 825.972014][T16911] total_active_anon 0 [ 825.987362][T16911] total_inactive_file 4096 [ 825.991817][T16911] total_active_file 0 [ 826.026841][T16911] total_unevictable 0 [ 826.049270][T16911] anon_cost 0 [ 826.067261][T16911] file_cost 0 [ 826.070627][T16911] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.2224,pid=16910,uid=0 [ 826.138008][T16911] Memory cgroup out of memory: Killed process 16910 (syz.3.2224) total-vm:137432kB, anon-rss:1236kB, file-rss:22416kB, shmem-rss:0kB, UID:0 pgtables:152kB oom_score_adj:1000 [ 827.895208][T17001] ptrace attach of "./syz-executor exec"[5826] was attempted by "./syz-executor exec"[17001] [ 828.303169][T17012] zero sized request [ 829.149731][T17027] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 829.225689][T17030] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 829.365814][T17031] net_ratelimit: 10 callbacks suppressed [ 829.365834][T17031] openvswitch: netlink: Key 15 has unexpected len 16 expected 4 [ 829.462626][T17027] openvswitch: netlink: Key 15 has unexpected len 16 expected 4 [ 829.514122][T17039] FAULT_INJECTION: forcing a failure. [ 829.514122][T17039] name failslab, interval 1, probability 0, space 0, times 0 [ 829.593715][T17039] CPU: 0 UID: 0 PID: 17039 Comm: syz.0.2239 Tainted: G U L syzkaller #0 PREEMPT(full) [ 829.593747][T17039] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 829.593754][T17039] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 829.593765][T17039] Call Trace: [ 829.593771][T17039] [ 829.593778][T17039] dump_stack_lvl+0x100/0x190 [ 829.593812][T17039] should_fail_ex.cold+0x5/0xa [ 829.593833][T17039] should_failslab+0xc2/0x120 [ 829.593860][T17039] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 829.593883][T17039] ? proc_alloc_inode+0x25/0x200 [ 829.593903][T17039] ? d_alloc_parallel+0x864/0x14e0 [ 829.593926][T17039] ? __pfx_proc_alloc_inode+0x10/0x10 [ 829.593948][T17039] proc_alloc_inode+0x25/0x200 [ 829.593969][T17039] alloc_inode+0x68/0x250 [ 829.593987][T17039] new_inode+0x22/0x1c0 [ 829.594008][T17039] proc_get_inode+0x1d/0x780 [ 829.594032][T17039] proc_lookup_de+0x236/0x360 [ 829.594059][T17039] proc_tgid_net_lookup+0x61/0x90 [ 829.594086][T17039] __lookup_slow+0x251/0x460 [ 829.594106][T17039] ? __pfx___lookup_slow+0x10/0x10 [ 829.594136][T17039] ? __d_lookup+0x266/0x4a0 [ 829.594161][T17039] lookup_slow+0x50/0x70 [ 829.594180][T17039] link_path_walk+0x1377/0x1cc0 [ 829.594220][T17039] path_openat+0x1be/0x31a0 [ 829.594244][T17039] ? kasan_save_stack+0x3f/0x50 [ 829.594271][T17039] ? kasan_save_stack+0x30/0x50 [ 829.594293][T17039] ? kasan_save_track+0x14/0x30 [ 829.594315][T17039] ? kmem_cache_alloc_noprof+0x241/0x6e0 [ 829.594349][T17039] ? __pfx_path_openat+0x10/0x10 [ 829.594383][T17039] do_file_open+0x20e/0x430 [ 829.594411][T17039] ? __pfx_do_file_open+0x10/0x10 [ 829.594445][T17039] ? __pfx_kfree_link+0x10/0x10 [ 829.594472][T17039] ? alloc_fd+0x476/0x790 [ 829.594498][T17039] ? do_getname+0x191/0x390 [ 829.594518][T17039] do_sys_openat2+0x10d/0x1e0 [ 829.594538][T17039] ? __pfx_do_sys_openat2+0x10/0x10 [ 829.594556][T17039] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 829.594587][T17039] ? __fget_files+0x21f/0x3d0 [ 829.594614][T17039] __x64_sys_openat+0x12d/0x210 [ 829.594635][T17039] ? __pfx___x64_sys_openat+0x10/0x10 [ 829.594653][T17039] ? ksys_write+0x1ac/0x250 [ 829.594690][T17039] do_syscall_64+0x106/0xf80 [ 829.594716][T17039] ? clear_bhb_loop+0x40/0x90 [ 829.594738][T17039] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 829.594756][T17039] RIP: 0033:0x7f1a8cd9bf79 [ 829.594772][T17039] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 829.594789][T17039] RSP: 002b:00007f1a8dc44028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 829.594806][T17039] RAX: ffffffffffffffda RBX: 00007f1a8d015fa0 RCX: 00007f1a8cd9bf79 [ 829.594817][T17039] RDX: 00000000000c0000 RSI: 00002000000000c0 RDI: ffffffffffffff9c [ 829.594828][T17039] RBP: 00007f1a8dc44090 R08: 0000000000000000 R09: 0000000000000000 [ 829.594838][T17039] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 829.594848][T17039] R13: 00007f1a8d016038 R14: 00007f1a8d015fa0 R15: 00007ffece3fc838 [ 829.594870][T17039] [ 829.920576][T17030] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 829.930162][T17041] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 830.905366][T17057] Invalid ELF header magic: != ELF [ 832.626976][T17081] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 832.655239][T17081] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 832.704411][T17081] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 832.769553][T17081] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 832.805922][T17081] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 832.840230][T17099] FAULT_INJECTION: forcing a failure. [ 832.840230][T17099] name failslab, interval 1, probability 0, space 0, times 0 [ 832.987105][T17097] bond0: option num_grat_arp: invalid value () [ 833.029289][T17099] CPU: 0 UID: 0 PID: 17099 Comm: syz.9.2247 Tainted: G U L syzkaller #0 PREEMPT(full) [ 833.029321][T17099] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 833.029328][T17099] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 833.029338][T17099] Call Trace: [ 833.029344][T17099] [ 833.029350][T17099] dump_stack_lvl+0x100/0x190 [ 833.029381][T17099] should_fail_ex.cold+0x5/0xa [ 833.029402][T17099] should_failslab+0xc2/0x120 [ 833.029428][T17099] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 833.029451][T17099] ? sk_prot_alloc+0x60/0x2a0 [ 833.029473][T17099] sk_prot_alloc+0x60/0x2a0 [ 833.029492][T17099] sk_alloc+0x36/0xe80 [ 833.029516][T17099] inet6_create+0x385/0x12b0 [ 833.029545][T17099] ? inet6_create+0x7f/0x12b0 [ 833.029573][T17099] __sock_create+0x339/0x860 [ 833.029600][T17099] __sys_socket+0x14d/0x260 [ 833.029621][T17099] ? __pfx___sys_socket+0x10/0x10 [ 833.029647][T17099] __x64_sys_socket+0x72/0xb0 [ 833.029666][T17099] ? lockdep_hardirqs_on+0x78/0x100 [ 833.029692][T17099] do_syscall_64+0x106/0xf80 [ 833.029717][T17099] ? clear_bhb_loop+0x40/0x90 [ 833.029738][T17099] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 833.029756][T17099] RIP: 0033:0x7f243479bf79 [ 833.029772][T17099] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 833.029790][T17099] RSP: 002b:00007f243562b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 833.029808][T17099] RAX: ffffffffffffffda RBX: 00007f2434a16180 RCX: 00007f243479bf79 [ 833.029819][T17099] RDX: 0000000000000084 RSI: 0000000000000801 RDI: 000000000000000a [ 833.029829][T17099] RBP: 00007f24348327e0 R08: 0000000000000000 R09: 0000000000000000 [ 833.029839][T17099] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 833.029849][T17099] R13: 00007f2434a16218 R14: 00007f2434a16180 R15: 00007fffd9c79418 [ 833.029870][T17099] [ 833.029965][T17097] bond0: option num_grat_arp: allowed values 0 - 255 [ 833.526280][T17081] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 833.700088][T17081] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 833.721853][T17081] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 833.791564][T17111] program syz.1.2248 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 833.880214][ T30] audit: type=1807 audit(1771328679.605:72): UNKNOWN=0"û]$|Ë1jë0B|d™¹ýÓ‰OŸ¬+ö×/ÉéxÔóÈõWÓ¦–Ó^¸´gq%ḦrêOŽ res=0 [ 833.985518][ T30] audit: type=1802 audit(1771328679.705:73): pid=17106 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.1.2248" res=0 errno=0 [ 834.026261][T11705] Bluetooth: hci0: command 0x0c1a tx timeout [ 834.144844][T17081] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 834.179912][T17103] ima: policy update failed [ 834.185044][ T30] audit: type=1802 audit(1771328679.905:74): pid=17103 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.1.2248" res=0 errno=0 [ 834.254420][T17081] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 834.289317][T17121] FAULT_INJECTION: forcing a failure. [ 834.289317][T17121] name failslab, interval 1, probability 0, space 0, times 0 [ 834.345713][T17121] CPU: 0 UID: 0 PID: 17121 Comm: syz.9.2250 Tainted: G U L syzkaller #0 PREEMPT(full) [ 834.345747][T17121] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 834.345753][T17121] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 834.345764][T17121] Call Trace: [ 834.345770][T17121] [ 834.345776][T17121] dump_stack_lvl+0x100/0x190 [ 834.345807][T17121] should_fail_ex.cold+0x5/0xa [ 834.345828][T17121] should_failslab+0xc2/0x120 [ 834.345855][T17121] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 834.345878][T17121] ? security_inode_alloc+0x3b/0x2c0 [ 834.345900][T17121] ? lockdep_init_map_type+0x5c/0x250 [ 834.345925][T17121] security_inode_alloc+0x3b/0x2c0 [ 834.345947][T17121] inode_init_always_gfp+0xced/0x1040 [ 834.345982][T17121] alloc_inode+0x8e/0x250 [ 834.346001][T17121] new_inode+0x22/0x1c0 [ 834.346022][T17121] proc_get_inode+0x1d/0x780 [ 834.346046][T17121] proc_lookup_de+0x236/0x360 [ 834.346073][T17121] proc_tgid_net_lookup+0x61/0x90 [ 834.346100][T17121] __lookup_slow+0x251/0x460 [ 834.346120][T17121] ? __pfx___lookup_slow+0x10/0x10 [ 834.346151][T17121] ? __d_lookup+0x266/0x4a0 [ 834.346176][T17121] lookup_slow+0x50/0x70 [ 834.346195][T17121] link_path_walk+0x1377/0x1cc0 [ 834.346233][T17121] path_openat+0x1be/0x31a0 [ 834.346258][T17121] ? kasan_save_stack+0x3f/0x50 [ 834.346280][T17121] ? kasan_save_stack+0x30/0x50 [ 834.346301][T17121] ? kasan_save_track+0x14/0x30 [ 834.346324][T17121] ? kmem_cache_alloc_noprof+0x241/0x6e0 [ 834.346352][T17121] ? __pfx_path_openat+0x10/0x10 [ 834.346386][T17121] do_file_open+0x20e/0x430 [ 834.346413][T17121] ? __pfx_do_file_open+0x10/0x10 [ 834.346447][T17121] ? __pfx_kfree_link+0x10/0x10 [ 834.346476][T17121] ? alloc_fd+0x476/0x790 [ 834.346504][T17121] ? do_getname+0x191/0x390 [ 834.346524][T17121] do_sys_openat2+0x10d/0x1e0 [ 834.346544][T17121] ? __pfx_do_sys_openat2+0x10/0x10 [ 834.346561][T17121] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 834.346592][T17121] ? __fget_files+0x21f/0x3d0 [ 834.346620][T17121] __x64_sys_openat+0x12d/0x210 [ 834.346640][T17121] ? __pfx___x64_sys_openat+0x10/0x10 [ 834.346659][T17121] ? ksys_write+0x1ac/0x250 [ 834.346690][T17121] do_syscall_64+0x106/0xf80 [ 834.346715][T17121] ? clear_bhb_loop+0x40/0x90 [ 834.346737][T17121] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 834.346756][T17121] RIP: 0033:0x7f243479bf79 [ 834.346771][T17121] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 834.346788][T17121] RSP: 002b:00007f243566d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 834.346806][T17121] RAX: ffffffffffffffda RBX: 00007f2434a15fa0 RCX: 00007f243479bf79 [ 834.346817][T17121] RDX: 00000000000c0000 RSI: 00002000000000c0 RDI: ffffffffffffff9c [ 834.346828][T17121] RBP: 00007f243566d090 R08: 0000000000000000 R09: 0000000000000000 [ 834.346838][T17121] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 834.346848][T17121] R13: 00007f2434a16038 R14: 00007f2434a15fa0 R15: 00007fffd9c79418 [ 834.346873][T17121] [ 835.127468][T11705] Bluetooth: hci1: command 0x0c1a tx timeout [ 835.133892][T11705] Bluetooth: hci5: command 0x040f tx timeout [ 835.140343][T11705] Bluetooth: hci2: command 0x0c1a tx timeout [ 835.309391][T17081] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 835.345599][T17081] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 835.721188][T17081] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 835.767992][T17081] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 835.777101][T10526] Bluetooth: hci3: command 0x0c1a tx timeout [ 835.790656][T17081] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 836.204110][T17128] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 836.272259][T17081] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 837.157278][ T12] EXT4-fs (sda1): Delayed block allocation failed for inode 2027 at logical offset 1358 with max blocks 5 with error 117 [ 837.225943][T10526] Bluetooth: hci2: command 0x0c1a tx timeout [ 837.290345][ T12] EXT4-fs (sda1): This should not happen!! Data will be lost [ 837.290345][ T12] [ 837.455547][T10526] Bluetooth: hci4: command 0x0c1a tx timeout [ 837.855582][T11705] Bluetooth: hci6: command 0x0c1a tx timeout [ 837.862937][T10526] Bluetooth: hci3: command 0x0c1a tx timeout [ 838.171511][ T30] audit: type=1800 audit(1771328683.885:75): pid=17182 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.2257" name="dbroot" dev="configfs" ino=69304 res=0 errno=0 [ 838.667179][T17195] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input15 [ 839.300547][T10526] Bluetooth: hci2: command 0x0c1a tx timeout [ 839.536702][T10526] Bluetooth: hci4: command 0x0c1a tx timeout [ 839.566835][T17197] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input16 [ 839.945625][T10526] Bluetooth: hci3: command 0x0c1a tx timeout [ 839.952386][T10526] Bluetooth: hci6: command 0x0c1a tx timeout [ 840.345856][T17226] phram: not enough arguments [ 841.616674][T10526] Bluetooth: hci4: command 0x0c1a tx timeout [ 842.015522][T10526] Bluetooth: hci6: command 0x0c1a tx timeout [ 842.021620][T11705] Bluetooth: hci3: command 0x0c1a tx timeout [ 843.360412][T17273] device-mapper: ioctl: Invalid ioctl structure: uuid , name , dev 700000007 [ 843.421555][T17274] device-mapper: ioctl: Invalid ioctl structure: uuid , name , dev 700000007 [ 844.231651][T17287] netlink: 334 bytes leftover after parsing attributes in process `syz.3.2270'. [ 846.716616][T17334] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2276'. [ 847.233252][T17349] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2282'. [ 847.279220][T17349] netlink: 'syz.9.2282': attribute type 1 has an invalid length. [ 847.314034][T17349] netlink: 'syz.9.2282': attribute type 6 has an invalid length. [ 847.854215][T17355] netlink: 334 bytes leftover after parsing attributes in process `syz.0.2283'. [ 847.930428][T17355] FAULT_INJECTION: forcing a failure. [ 847.930428][T17355] name failslab, interval 1, probability 0, space 0, times 0 [ 847.930483][T17355] CPU: 0 UID: 0 PID: 17355 Comm: syz.0.2283 Tainted: G U L syzkaller #0 PREEMPT(full) [ 847.930511][T17355] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 847.930518][T17355] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 847.930529][T17355] Call Trace: [ 847.930535][T17355] [ 847.930542][T17355] dump_stack_lvl+0x100/0x190 [ 847.930573][T17355] should_fail_ex.cold+0x5/0xa [ 847.930594][T17355] should_failslab+0xc2/0x120 [ 847.930623][T17355] __kmalloc_cache_noprof+0x7a/0x6f0 [ 847.930643][T17355] ? device_create_groups_vargs+0x8a/0x270 [ 847.930670][T17355] ? __lock_acquire+0x4a5/0x2630 [ 847.930694][T17355] device_create_groups_vargs+0x8a/0x270 [ 847.930723][T17355] device_create+0xed/0x130 [ 847.930748][T17355] ? __pfx_device_create+0x10/0x10 [ 847.930774][T17355] ? is_console_locked+0x9/0x20 [ 847.930793][T17355] ? con_is_visible+0x65/0x150 [ 847.930817][T17355] ? csi_J+0x57e/0xad0 [ 847.930848][T17355] vcs_make_sysfs+0x32/0x80 [ 847.930873][T17355] vc_allocate+0x539/0x880 [ 847.930890][T17355] ? __pfx_vc_allocate+0x10/0x10 [ 847.930914][T17355] con_install+0xa1/0x620 [ 847.930932][T17355] ? __pfx_con_install+0x10/0x10 [ 847.930953][T17355] ? __pfx_con_install+0x10/0x10 [ 847.930970][T17355] tty_init_dev.part.0+0x9e/0x470 [ 847.930992][T17355] tty_open+0xa63/0xfa0 [ 847.931015][T17355] ? __pfx_tty_open+0x10/0x10 [ 847.931033][T17355] ? chrdev_open+0x589/0x6a0 [ 847.931068][T17355] ? chrdev_open+0x589/0x6a0 [ 847.931098][T17355] ? __pfx_tty_open+0x10/0x10 [ 847.931125][T17355] chrdev_open+0x234/0x6a0 [ 847.931151][T17355] ? __pfx_chrdev_open+0x10/0x10 [ 847.931180][T17355] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 847.931212][T17355] do_dentry_open+0x6d8/0x1660 [ 847.931237][T17355] ? __pfx_chrdev_open+0x10/0x10 [ 847.931269][T17355] vfs_open+0x82/0x3f0 [ 847.931292][T17355] path_openat+0x208c/0x31a0 [ 847.931327][T17355] ? __pfx_path_openat+0x10/0x10 [ 847.931362][T17355] do_file_open+0x20e/0x430 [ 847.931390][T17355] ? __pfx_do_file_open+0x10/0x10 [ 847.931433][T17355] ? alloc_fd+0x476/0x790 [ 847.931461][T17355] ? do_getname+0x191/0x390 [ 847.931481][T17355] do_sys_openat2+0x10d/0x1e0 [ 847.931501][T17355] ? __pfx_do_sys_openat2+0x10/0x10 [ 847.931529][T17355] __x64_sys_openat+0x12d/0x210 [ 847.931550][T17355] ? __pfx___x64_sys_openat+0x10/0x10 [ 847.931579][T17355] do_syscall_64+0x106/0xf80 [ 847.931605][T17355] ? clear_bhb_loop+0x40/0x90 [ 847.931627][T17355] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 847.931646][T17355] RIP: 0033:0x7f1a8cd9bf79 [ 847.931662][T17355] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 847.931680][T17355] RSP: 002b:00007f1a8dc44028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 847.931698][T17355] RAX: ffffffffffffffda RBX: 00007f1a8d015fa0 RCX: 00007f1a8cd9bf79 [ 847.931709][T17355] RDX: 0000000000000000 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 847.931720][T17355] RBP: 00007f1a8ce327e0 R08: 0000000000000000 R09: 0000000000000000 [ 847.931730][T17355] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 847.931740][T17355] R13: 00007f1a8d016038 R14: 00007f1a8d015fa0 R15: 00007ffece3fc838 [ 847.931765][T17355] [ 851.298648][T17383] cifs: Unknown parameter 'no+ 1§• Ö`ÑørêsFn)ÈøaõH†šÄ¿¡h`àØÝë9k¤A}€žŠ1\D@‹Ç.ÁäZÔCg^‚' [ 851.364565][T17382] netlink: 346 bytes leftover after parsing attributes in process `syz.0.2292'. [ 851.435845][T17383] CIFS mount error: No usable UNC path provided in device string! [ 851.435845][T17383] [ 851.475727][T17383] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 852.522289][T17386] syz.3.2293 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 852.635468][T17386] CPU: 0 UID: 0 PID: 17386 Comm: syz.3.2293 Tainted: G U L syzkaller #0 PREEMPT(full) [ 852.635501][T17386] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 852.635507][T17386] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 852.635518][T17386] Call Trace: [ 852.635524][T17386] [ 852.635531][T17386] dump_stack_lvl+0x100/0x190 [ 852.635563][T17386] dump_header+0xfb/0x606 [ 852.635584][T17386] oom_kill_process.cold+0xd/0x330 [ 852.635605][T17386] out_of_memory+0x340/0x14f0 [ 852.635633][T17386] ? __pfx_out_of_memory+0x10/0x10 [ 852.635662][T17386] mem_cgroup_out_of_memory+0xc6/0x130 [ 852.635683][T17386] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 852.635703][T17386] ? find_held_lock+0x2b/0x80 [ 852.635734][T17386] ? do_raw_spin_unlock+0x145/0x1e0 [ 852.635765][T17386] ? _raw_spin_unlock+0x28/0x50 [ 852.635792][T17386] try_charge_memcg+0x652/0xc90 [ 852.635823][T17386] ? __pfx_try_charge_memcg+0x10/0x10 [ 852.635854][T17386] ? find_held_lock+0x2b/0x80 [ 852.635880][T17386] ? rcu_read_unlock+0x17/0x60 [ 852.635906][T17386] ? rcu_read_unlock+0x17/0x60 [ 852.635935][T17386] charge_memcg+0xa6/0x280 [ 852.635961][T17386] mem_cgroup_swapin_charge_folio+0xeb/0x470 [ 852.635982][T17386] __swap_cache_prepare_and_add+0x528/0x9e0 [ 852.636013][T17386] ? __pfx___swap_cache_prepare_and_add+0x10/0x10 [ 852.636033][T17386] ? __pfx_swap_entry_swapped+0x10/0x10 [ 852.636072][T17386] swap_cache_alloc_folio+0x1cb/0x300 [ 852.636096][T17386] ? __pfx_swap_cache_alloc_folio+0x10/0x10 [ 852.636124][T17386] swap_cluster_readahead+0x411/0x770 [ 852.636152][T17386] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 852.636179][T17386] ? lru_gen_add_folio+0x20f/0x13e0 [ 852.636211][T17386] ? get_vma_policy+0x23f/0x3b0 [ 852.636241][T17386] swapin_readahead+0x160/0x12c0 [ 852.636270][T17386] ? __pfx_swapin_readahead+0x10/0x10 [ 852.636290][T17386] ? find_held_lock+0x2b/0x80 [ 852.636315][T17386] ? swap_table_get+0x103/0x2c0 [ 852.636334][T17386] ? swap_table_get+0x103/0x2c0 [ 852.636357][T17386] ? swap_table_get+0x10d/0x2c0 [ 852.636376][T17386] ? swap_cache_get_folio+0x1ae/0x600 [ 852.636398][T17386] ? __pfx_swap_cache_get_folio+0x10/0x10 [ 852.636417][T17386] ? __pfx_get_swap_device+0x10/0x10 [ 852.636447][T17386] ? do_swap_page+0xb2e/0x68e0 [ 852.636466][T17386] do_swap_page+0xb2e/0x68e0 [ 852.636497][T17386] ? __pfx_do_swap_page+0x10/0x10 [ 852.636522][T17386] ? rcu_is_watching+0x12/0xc0 [ 852.636547][T17386] ? __pte_offset_map+0x179/0x310 [ 852.636575][T17386] __handle_mm_fault+0x18c1/0x2b60 [ 852.636600][T17386] ? reacquire_held_locks+0xce/0x1e0 [ 852.636622][T17386] ? __pfx___handle_mm_fault+0x10/0x10 [ 852.636646][T17386] ? lock_vma_under_rcu+0x17c/0x590 [ 852.636679][T17386] handle_mm_fault+0x36d/0xa20 [ 852.636704][T17386] do_user_addr_fault+0x5a3/0x12f0 [ 852.636739][T17386] exc_page_fault+0x6f/0xd0 [ 852.636765][T17386] asm_exc_page_fault+0x26/0x30 [ 852.636782][T17386] RIP: 0033:0x7f208e05074d [ 852.636798][T17386] Code: 44 8d 56 04 4c 8d 0d d2 18 3b 00 89 f0 4c 8d 05 c9 f8 3a 00 89 c2 81 e2 ff 1f 00 00 49 8b 0c d1 48 39 f1 74 28 48 85 c9 74 29 <45> 38 1c 10 75 23 83 c0 01 44 39 d0 75 dc 48 89 f0 25 ff 1f 00 00 [ 852.636815][T17386] RSP: 002b:00007ffe44e21a38 EFLAGS: 00010286 [ 852.636831][T17386] RAX: 0000000082364bf3 RBX: ffffffff82364bf3 RCX: ffffffff8951cbf3 [ 852.636842][T17386] RDX: 0000000000000bf3 RSI: ffffffff82364bf3 RDI: 0000000000000004 [ 852.636852][T17386] RBP: 000000000000000d R08: 00007f208e400000 R09: 00007f208e402000 [ 852.636862][T17386] R10: 0000000082364bf7 R11: 0000000000000004 R12: 00007f208e416128 [ 852.636873][T17386] R13: 0000000000000014 R14: ffffffff82364209 R15: 00007f208ef45720 [ 852.636884][T17386] ? bpf_lsm_task_prctl+0x9/0x20 [ 852.636902][T17386] ? __pfx_bpf_lsm_tun_dev_open+0x3/0x10 [ 852.636928][T17386] ? __sys_socketpair+0x4a3/0x5b0 [ 852.636949][T17386] ? __pfx_bpf_lsm_tun_dev_open+0x3/0x10 [ 852.636977][T17386] [ 852.636984][T17386] memory: usage 3072kB, limit 3072kB, failcnt 55112 [ 853.333657][T17408] FAULT_INJECTION: forcing a failure. [ 853.333657][T17408] name failslab, interval 1, probability 0, space 0, times 0 [ 853.425499][T17408] CPU: 0 UID: 0 PID: 17408 Comm: syz.9.2298 Tainted: G U L syzkaller #0 PREEMPT(full) [ 853.425531][T17408] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 853.425538][T17408] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 853.425548][T17408] Call Trace: [ 853.425555][T17408] [ 853.425562][T17408] dump_stack_lvl+0x100/0x190 [ 853.425592][T17408] should_fail_ex.cold+0x5/0xa [ 853.425613][T17408] should_failslab+0xc2/0x120 [ 853.425640][T17408] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 853.425662][T17408] ? do_getname+0x35/0x390 [ 853.425679][T17408] ? find_held_lock+0x2b/0x80 [ 853.425709][T17408] do_getname+0x35/0x390 [ 853.425729][T17408] do_sys_openat2+0xc5/0x1e0 [ 853.425748][T17408] ? __pfx_do_sys_openat2+0x10/0x10 [ 853.425766][T17408] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 853.425796][T17408] ? __fget_files+0x21f/0x3d0 [ 853.425824][T17408] __x64_sys_openat+0x12d/0x210 [ 853.425844][T17408] ? __pfx___x64_sys_openat+0x10/0x10 [ 853.425862][T17408] ? ksys_write+0x1ac/0x250 [ 853.425893][T17408] do_syscall_64+0x106/0xf80 [ 853.425918][T17408] ? clear_bhb_loop+0x40/0x90 [ 853.425939][T17408] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 853.425957][T17408] RIP: 0033:0x7f243479bf79 [ 853.425973][T17408] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 853.425990][T17408] RSP: 002b:00007f243566d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 853.426007][T17408] RAX: ffffffffffffffda RBX: 00007f2434a15fa0 RCX: 00007f243479bf79 [ 853.426019][T17408] RDX: 0000000000000302 RSI: 00002000000003c0 RDI: ffffffffffffff9c [ 853.426029][T17408] RBP: 00007f243566d090 R08: 0000000000000000 R09: 0000000000000000 [ 853.426040][T17408] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 853.426049][T17408] R13: 00007f2434a16038 R14: 00007f2434a15fa0 R15: 00007fffd9c79418 [ 853.426078][T17408] [ 853.925491][T17386] memory+swap: usage 3692kB, limit 9007199254740988kB, failcnt 0 [ 854.001419][T17386] kmem: usage 2708kB, limit 9007199254740988kB, failcnt 0 [ 854.050921][T17386] Memory cgroup stats for /syz3: [ 854.051052][T17386] cache 4096 [ 854.086591][T17386] rss 0 [ 854.103196][T17386] rss_huge 0 [ 854.129389][T17386] shmem 0 [ 854.132473][T17386] mapped_file 0 [ 854.155475][T17386] dirty 0 [ 854.187644][T17386] writeback 0 [ 854.205537][T17386] workingset_refault_anon 15482 [ 854.210441][T17386] workingset_refault_file 8952 [ 854.252309][T17386] swap 634880 [ 854.277747][T17386] swapcached 251441152 [ 854.301149][T17386] pgpgin 559008 [ 854.323008][T17386] pgpgout 580405 [ 854.334727][T17386] pgfault 345561 [ 854.355959][T17386] pgmajfault 7033 [ 854.380930][T17386] inactive_anon 368640 [ 854.408980][T17386] active_anon 0 [ 854.421378][T17386] inactive_file 4096 [ 854.445508][T17386] active_file 0 [ 854.458103][T17386] unevictable 0 [ 854.482773][T17386] hierarchical_memory_limit 3145728 [ 854.514706][T17386] hierarchical_memsw_limit 9223372036854771712 [ 854.536343][T17386] total_cache 4096 [ 854.555682][T17386] total_rss 0 [ 854.559078][T17386] total_rss_huge 0 [ 854.589775][T17386] total_shmem 0 [ 854.593277][T17386] total_mapped_file 0 [ 854.630021][T17386] total_dirty 0 [ 854.655697][T17386] total_writeback 0 [ 854.665492][T17386] total_workingset_refault_anon 15482 [ 854.685461][T17386] total_workingset_refault_file 8952 [ 854.691139][T17386] total_swap 634880 [ 854.731165][T17386] total_swapcached 251441152 [ 854.765684][T17386] total_pgpgin 559008 [ 854.769715][T17386] total_pgpgout 580405 [ 854.773838][T17386] total_pgfault 345561 [ 854.816134][T17386] total_pgmajfault 7033 [ 854.820413][T17386] total_inactive_anon 368640 [ 854.824997][T17386] total_active_anon 0 [ 854.902407][T17386] total_inactive_file 4096 [ 854.921112][T17386] total_active_file 0 [ 854.925176][T17386] total_unevictable 0 [ 854.977382][T17386] anon_cost 0 [ 854.980886][T17386] file_cost 0 [ 854.984170][T17386] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.2293,pid=17386,uid=0 [ 855.105533][T17386] Memory cgroup out of memory: Killed process 17386 (syz.3.2293) total-vm:104460kB, anon-rss:1236kB, file-rss:22336kB, shmem-rss:0kB, UID:0 pgtables:136kB oom_score_adj:1000 [ 855.616923][T17446] FAULT_INJECTION: forcing a failure. [ 855.616923][T17446] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 855.676539][T17446] CPU: 0 UID: 0 PID: 17446 Comm: syz.9.2308 Tainted: G U L syzkaller #0 PREEMPT(full) [ 855.676577][T17446] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 855.676585][T17446] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 855.676596][T17446] Call Trace: [ 855.676602][T17446] [ 855.676610][T17446] dump_stack_lvl+0x100/0x190 [ 855.676641][T17446] should_fail_ex.cold+0x5/0xa [ 855.676662][T17446] strncpy_from_user+0x3b/0x2d0 [ 855.676692][T17446] do_getname+0x78/0x390 [ 855.676713][T17446] do_sys_openat2+0xc5/0x1e0 [ 855.676733][T17446] ? __pfx_do_sys_openat2+0x10/0x10 [ 855.676751][T17446] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 855.676782][T17446] ? __fget_files+0x21f/0x3d0 [ 855.676810][T17446] __x64_sys_openat+0x12d/0x210 [ 855.676830][T17446] ? __pfx___x64_sys_openat+0x10/0x10 [ 855.676849][T17446] ? ksys_write+0x1ac/0x250 [ 855.676889][T17446] do_syscall_64+0x106/0xf80 [ 855.676914][T17446] ? clear_bhb_loop+0x40/0x90 [ 855.676936][T17446] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 855.676955][T17446] RIP: 0033:0x7f243479bf79 [ 855.676976][T17446] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 855.676994][T17446] RSP: 002b:00007f243564c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 855.677013][T17446] RAX: ffffffffffffffda RBX: 00007f2434a16090 RCX: 00007f243479bf79 [ 855.677025][T17446] RDX: 0000000000000302 RSI: 00002000000003c0 RDI: ffffffffffffff9c [ 855.677036][T17446] RBP: 00007f243564c090 R08: 0000000000000000 R09: 0000000000000000 [ 855.677047][T17446] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 855.677057][T17446] R13: 00007f2434a16128 R14: 00007f2434a16090 R15: 00007fffd9c79418 [ 855.677080][T17446] [ 855.863021][T17443] FAULT_INJECTION: forcing a failure. [ 855.863021][T17443] name fail_futex, interval 1, probability 0, space 0, times 0 [ 855.878438][T17443] CPU: 0 UID: 0 PID: 17443 Comm: syz.0.2307 Tainted: G U L syzkaller #0 PREEMPT(full) [ 855.878471][T17443] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 855.878478][T17443] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 855.878490][T17443] Call Trace: [ 855.878496][T17443] [ 855.878504][T17443] dump_stack_lvl+0x100/0x190 [ 855.878536][T17443] should_fail_ex.cold+0x5/0xa [ 855.878558][T17443] get_futex_key+0x1d2/0x1620 [ 855.878583][T17443] ? __pfx_get_futex_key+0x10/0x10 [ 855.878602][T17443] ? rcu_is_watching+0x12/0xc0 [ 855.878628][T17443] ? vfs_writev+0x1d5/0xe10 [ 855.878650][T17443] ? kfree+0x2ec/0x6b0 [ 855.878676][T17443] futex_wake+0xea/0x530 [ 855.878703][T17443] ? __pfx_futex_wake+0x10/0x10 [ 855.878730][T17443] ? do_writev+0x214/0x340 [ 855.878759][T17443] do_futex+0x32b/0x350 [ 855.878781][T17443] ? __pfx_do_futex+0x10/0x10 [ 855.878804][T17443] ? __fget_files+0x21f/0x3d0 [ 855.878832][T17443] __x64_sys_futex+0x34f/0x4d0 [ 855.878857][T17443] ? __pfx___x64_sys_futex+0x10/0x10 [ 855.878879][T17443] ? __pfx_do_writev+0x10/0x10 [ 855.878908][T17443] do_syscall_64+0x106/0xf80 [ 855.878934][T17443] ? clear_bhb_loop+0x40/0x90 [ 855.878956][T17443] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 855.878975][T17443] RIP: 0033:0x7f1a8cd9bf79 [ 855.878997][T17443] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 855.879015][T17443] RSP: 002b:00007f1a8dc230e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 855.879033][T17443] RAX: ffffffffffffffda RBX: 00007f1a8d016098 RCX: 00007f1a8cd9bf79 [ 855.879045][T17443] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f1a8d01609c [ 855.879056][T17443] RBP: 00007f1a8d016090 R08: 0000000000000000 R09: 0000000000000000 [ 855.879067][T17443] R10: 000000000000000c R11: 0000000000000246 R12: 0000000000000000 [ 855.879086][T17443] R13: 00007f1a8d016128 R14: 00007ffece3fc750 R15: 00007ffece3fc838 [ 855.879108][T17443] [ 856.470079][T17452] FAULT_INJECTION: forcing a failure. [ 856.470079][T17452] name failslab, interval 1, probability 0, space 0, times 0 [ 856.515813][T17452] CPU: 0 UID: 0 PID: 17452 Comm: syz.3.2311 Tainted: G U L syzkaller #0 PREEMPT(full) [ 856.515846][T17452] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 856.515854][T17452] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 856.515865][T17452] Call Trace: [ 856.515872][T17452] [ 856.515879][T17452] dump_stack_lvl+0x100/0x190 [ 856.515911][T17452] should_fail_ex.cold+0x5/0xa [ 856.515932][T17452] ? tomoyo_encode2+0xfb/0x3c0 [ 856.515958][T17452] should_failslab+0xc2/0x120 [ 856.515985][T17452] __kmalloc_noprof+0xe0/0x850 [ 856.516009][T17452] ? rcu_is_watching+0x12/0xc0 [ 856.516215][T17452] tomoyo_encode2+0xfb/0x3c0 [ 856.516246][T17452] tomoyo_encode+0x29/0x50 [ 856.516271][T17452] tomoyo_realpath_from_path+0x18c/0x690 [ 856.516304][T17452] tomoyo_check_open_permission+0x2af/0x3c0 [ 856.516329][T17452] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 856.516353][T17452] ? d_splice_alias_ops+0x5c3/0x1320 [ 856.516395][T17452] ? do_raw_spin_lock+0x128/0x260 [ 856.516421][T17452] ? path_get+0x61/0x80 [ 856.516450][T17452] tomoyo_file_open+0x6b/0x90 [ 856.516471][T17452] security_file_open+0xb5/0x1e0 [ 856.516497][T17452] do_dentry_open+0x5aa/0x1660 [ 856.516524][T17452] ? security_inode_permission+0xbf/0x250 [ 856.516552][T17452] vfs_open+0x82/0x3f0 [ 856.516573][T17452] path_openat+0x208c/0x31a0 [ 856.516606][T17452] ? __pfx_path_openat+0x10/0x10 [ 856.516639][T17452] do_file_open+0x20e/0x430 [ 856.516667][T17452] ? __pfx_do_file_open+0x10/0x10 [ 856.516700][T17452] ? __pfx_kfree_link+0x10/0x10 [ 856.516727][T17452] ? alloc_fd+0x476/0x790 [ 856.516760][T17452] ? do_getname+0x191/0x390 [ 856.516780][T17452] do_sys_openat2+0x10d/0x1e0 [ 856.516800][T17452] ? __pfx_do_sys_openat2+0x10/0x10 [ 856.516818][T17452] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 856.516850][T17452] ? __fget_files+0x21f/0x3d0 [ 856.516881][T17452] __x64_sys_openat+0x12d/0x210 [ 856.516902][T17452] ? __pfx___x64_sys_openat+0x10/0x10 [ 856.516921][T17452] ? ksys_write+0x1ac/0x250 [ 856.516952][T17452] do_syscall_64+0x106/0xf80 [ 856.516978][T17452] ? clear_bhb_loop+0x40/0x90 [ 856.517000][T17452] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 856.517027][T17452] RIP: 0033:0x7f208e19bf79 [ 856.517045][T17452] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 856.517062][T17452] RSP: 002b:00007f208f0ae028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 856.517081][T17452] RAX: ffffffffffffffda RBX: 00007f208e415fa0 RCX: 00007f208e19bf79 [ 856.517092][T17452] RDX: 00000000000c0000 RSI: 00002000000000c0 RDI: ffffffffffffff9c [ 856.517103][T17452] RBP: 00007f208f0ae090 R08: 0000000000000000 R09: 0000000000000000 [ 856.517114][T17452] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 856.517125][T17452] R13: 00007f208e416038 R14: 00007f208e415fa0 R15: 00007ffe44e219f8 [ 856.517147][T17452] [ 856.517169][T17452] ERROR: Out of memory at tomoyo_realpath_from_path. [ 856.913778][T17449] TCP: TCP_TX_DELAY enabled [ 860.723604][T17479] netlink: 62 bytes leftover after parsing attributes in process `syz.1.2319'. [ 860.792781][T17478] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2320'. [ 860.816192][T17481] netlink: 62 bytes leftover after parsing attributes in process `syz.1.2319'. [ 860.884639][T17478] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 860.924246][T17478] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 861.143121][T17481] netlink: 62 bytes leftover after parsing attributes in process `syz.1.2319'. [ 861.201050][T17481] netlink: 62 bytes leftover after parsing attributes in process `syz.1.2319'. [ 861.271639][T17481] netlink: 62 bytes leftover after parsing attributes in process `syz.1.2319'. [ 861.428585][T17491] FAULT_INJECTION: forcing a failure. [ 861.428585][T17491] name failslab, interval 1, probability 0, space 0, times 0 [ 861.505531][T17481] netlink: 62 bytes leftover after parsing attributes in process `syz.1.2319'. [ 861.515012][T17481] netlink: 62 bytes leftover after parsing attributes in process `syz.1.2319'. [ 861.556281][T17491] CPU: 0 UID: 0 PID: 17491 Comm: syz.3.2322 Tainted: G U L syzkaller #0 PREEMPT(full) [ 861.556314][T17491] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 861.556321][T17491] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 861.556332][T17491] Call Trace: [ 861.556339][T17491] [ 861.556346][T17491] dump_stack_lvl+0x100/0x190 [ 861.556376][T17491] should_fail_ex.cold+0x5/0xa [ 861.556397][T17491] should_failslab+0xc2/0x120 [ 861.556424][T17491] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 861.556448][T17491] ? alloc_empty_file+0x55/0x1c0 [ 861.556466][T17491] ? __pfx_stack_trace_save+0x10/0x10 [ 861.556498][T17491] alloc_empty_file+0x55/0x1c0 [ 861.556517][T17491] path_openat+0xe8/0x31a0 [ 861.556541][T17491] ? kasan_save_stack+0x3f/0x50 [ 861.556563][T17491] ? kasan_save_stack+0x30/0x50 [ 861.556585][T17491] ? kasan_save_track+0x14/0x30 [ 861.556606][T17491] ? __kasan_slab_alloc+0x89/0x90 [ 861.556630][T17491] ? kmem_cache_alloc_noprof+0x241/0x6e0 [ 861.556651][T17491] ? do_getname+0x35/0x390 [ 861.556668][T17491] ? do_sys_openat2+0xc5/0x1e0 [ 861.556687][T17491] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 861.556709][T17491] ? __pfx_path_openat+0x10/0x10 [ 861.556743][T17491] do_file_open+0x20e/0x430 [ 861.556770][T17491] ? __pfx_do_file_open+0x10/0x10 [ 861.556810][T17491] ? alloc_fd+0x476/0x790 [ 861.556837][T17491] ? do_getname+0x191/0x390 [ 861.556857][T17491] do_sys_openat2+0x10d/0x1e0 [ 861.556877][T17491] ? __pfx_do_sys_openat2+0x10/0x10 [ 861.556895][T17491] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 861.556926][T17491] ? __fget_files+0x21f/0x3d0 [ 861.556953][T17491] __x64_sys_openat+0x12d/0x210 [ 861.556981][T17491] ? __pfx___x64_sys_openat+0x10/0x10 [ 861.557000][T17491] ? ksys_write+0x1ac/0x250 [ 861.557031][T17491] do_syscall_64+0x106/0xf80 [ 861.557056][T17491] ? clear_bhb_loop+0x40/0x90 [ 861.557078][T17491] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 861.557096][T17491] RIP: 0033:0x7f208e19bf79 [ 861.557112][T17491] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 861.557129][T17491] RSP: 002b:00007f208f08d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 861.557147][T17491] RAX: ffffffffffffffda RBX: 00007f208e416090 RCX: 00007f208e19bf79 [ 861.557159][T17491] RDX: 0000000000000302 RSI: 00002000000003c0 RDI: ffffffffffffff9c [ 861.557170][T17491] RBP: 00007f208f08d090 R08: 0000000000000000 R09: 0000000000000000 [ 861.557180][T17491] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 861.557191][T17491] R13: 00007f208e416128 R14: 00007f208e416090 R15: 00007ffe44e219f8 [ 861.557213][T17491] [ 862.135719][T17481] netlink: 62 bytes leftover after parsing attributes in process `syz.1.2319'. [ 862.145227][T17481] netlink: 62 bytes leftover after parsing attributes in process `syz.1.2319'. [ 863.703448][T17496] syz.3.2324 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 863.769400][T17496] CPU: 0 UID: 0 PID: 17496 Comm: syz.3.2324 Tainted: G U L syzkaller #0 PREEMPT(full) [ 863.769433][T17496] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 863.769440][T17496] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 863.769450][T17496] Call Trace: [ 863.769457][T17496] [ 863.769465][T17496] dump_stack_lvl+0x100/0x190 [ 863.769496][T17496] dump_header+0xfb/0x606 [ 863.769516][T17496] oom_kill_process.cold+0xd/0x330 [ 863.769538][T17496] out_of_memory+0x340/0x14f0 [ 863.769567][T17496] ? __pfx_out_of_memory+0x10/0x10 [ 863.769597][T17496] mem_cgroup_out_of_memory+0xc6/0x130 [ 863.769619][T17496] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 863.769639][T17496] ? find_held_lock+0x2b/0x80 [ 863.769670][T17496] ? do_raw_spin_unlock+0x145/0x1e0 [ 863.769695][T17496] ? _raw_spin_unlock+0x28/0x50 [ 863.769720][T17496] try_charge_memcg+0x652/0xc90 [ 863.769751][T17496] ? __pfx_try_charge_memcg+0x10/0x10 [ 863.769782][T17496] ? find_held_lock+0x2b/0x80 [ 863.769808][T17496] ? rcu_read_unlock+0x17/0x60 [ 863.769835][T17496] ? rcu_read_unlock+0x17/0x60 [ 863.769864][T17496] charge_memcg+0xa6/0x280 [ 863.769891][T17496] mem_cgroup_swapin_charge_folio+0xeb/0x470 [ 863.769913][T17496] __swap_cache_prepare_and_add+0x528/0x9e0 [ 863.769950][T17496] ? __pfx___swap_cache_prepare_and_add+0x10/0x10 [ 863.769972][T17496] ? __pfx_swap_entry_swapped+0x10/0x10 [ 863.770005][T17496] swap_cache_alloc_folio+0x1cb/0x300 [ 863.770028][T17496] ? __pfx_swap_cache_alloc_folio+0x10/0x10 [ 863.770049][T17496] ? __handle_mm_fault+0x180f/0x2b60 [ 863.770070][T17496] ? do_user_addr_fault+0x5a3/0x12f0 [ 863.770097][T17496] ? css_rstat_updated+0x1ce/0x5a0 [ 863.770113][T17496] ? asm_exc_page_fault+0x26/0x30 [ 863.770135][T17496] swap_cluster_readahead+0x53b/0x770 [ 863.770163][T17496] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 863.770191][T17496] ? lru_gen_add_folio+0x20f/0x13e0 [ 863.770223][T17496] ? get_vma_policy+0x23f/0x3b0 [ 863.770252][T17496] swapin_readahead+0x160/0x12c0 [ 863.770281][T17496] ? __pfx_swapin_readahead+0x10/0x10 [ 863.770302][T17496] ? find_held_lock+0x2b/0x80 [ 863.770327][T17496] ? swap_table_get+0x103/0x2c0 [ 863.770346][T17496] ? swap_table_get+0x103/0x2c0 [ 863.770368][T17496] ? swap_table_get+0x10d/0x2c0 [ 863.770389][T17496] ? swap_cache_get_folio+0x1ae/0x600 [ 863.770410][T17496] ? __pfx_swap_cache_get_folio+0x10/0x10 [ 863.770430][T17496] ? __pfx_get_swap_device+0x10/0x10 [ 863.770460][T17496] ? do_swap_page+0xb2e/0x68e0 [ 863.770478][T17496] do_swap_page+0xb2e/0x68e0 [ 863.770510][T17496] ? __pfx_do_swap_page+0x10/0x10 [ 863.770531][T17496] ? __free_object+0x2a8/0x400 [ 863.770550][T17496] ? lockdep_hardirqs_on+0x78/0x100 [ 863.770577][T17496] ? rcu_is_watching+0x12/0xc0 [ 863.770603][T17496] ? __pte_offset_map+0x179/0x310 [ 863.770631][T17496] __handle_mm_fault+0x18c1/0x2b60 [ 863.770657][T17496] ? reacquire_held_locks+0xce/0x1e0 [ 863.770679][T17496] ? __pfx___handle_mm_fault+0x10/0x10 [ 863.770704][T17496] ? lock_vma_under_rcu+0x17c/0x590 [ 863.770738][T17496] handle_mm_fault+0x36d/0xa20 [ 863.770762][T17496] do_user_addr_fault+0x5a3/0x12f0 [ 863.770796][T17496] exc_page_fault+0x6f/0xd0 [ 863.770822][T17496] asm_exc_page_fault+0x26/0x30 [ 863.770840][T17496] RIP: 0033:0x7f208e050780 [ 863.770856][T17496] Code: 44 39 d0 75 dc 48 89 f0 25 ff 1f 00 00 49 89 34 c1 41 88 3c 00 31 c0 c3 66 90 41 38 3c 10 74 0b 41 88 3c 10 31 c0 49 89 34 d1 b8 01 00 00 00 c3 66 0f 1f 84 00 00 00 00 00 48 83 ec 28 48 89 [ 863.770874][T17496] RSP: 002b:00007ffe44e21a88 EFLAGS: 00010246 [ 863.770889][T17496] RAX: 0000000000000000 RBX: ffffffff8290c2a3 RCX: ffffffff8290c2a3 [ 863.770900][T17496] RDX: 00000000000002a3 RSI: ffffffff8290c2a3 RDI: 000000000000000b [ 863.770911][T17496] RBP: 0000000000000003 R08: 00007f208e400000 R09: 00007f208e402000 [ 863.770922][T17496] R10: 000000008290c2a7 R11: 000000000000000b R12: 00007f208e416038 [ 863.770933][T17496] R13: 0000000000000003 R14: ffffffff8290c173 R15: 00007f208ef45720 [ 863.770954][T17496] ? fdget_pos+0x2d3/0x380 [ 863.770982][T17496] ? set_close_on_exec+0x43/0x270 [ 863.771010][T17496] ? set_close_on_exec+0x43/0x270 [ 863.771036][T17496] ? set_close_on_exec+0x43/0x270 [ 863.771066][T17496] [ 863.771074][T17496] memory: usage 3072kB, limit 3072kB, failcnt 56741 [ 864.837523][T17507] FAULT_INJECTION: forcing a failure. [ 864.837523][T17507] name fail_futex, interval 1, probability 0, space 0, times 0 [ 864.883543][T17507] CPU: 0 UID: 0 PID: 17507 Comm: syz.9.2326 Tainted: G U L syzkaller #0 PREEMPT(full) [ 864.883577][T17507] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 864.883585][T17507] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 864.883596][T17507] Call Trace: [ 864.883602][T17507] [ 864.883609][T17507] dump_stack_lvl+0x100/0x190 [ 864.883640][T17507] should_fail_ex.cold+0x5/0xa [ 864.883662][T17507] get_futex_key+0x106f/0x1620 [ 864.883685][T17507] ? __pfx_get_futex_key+0x10/0x10 [ 864.883703][T17507] ? lock_acquire+0x1cf/0x380 [ 864.883731][T17507] futex_wake+0xea/0x530 [ 864.883757][T17507] ? __pfx_futex_wake+0x10/0x10 [ 864.883782][T17507] ? exit_mm_release+0x19/0x30 [ 864.883808][T17507] do_futex+0x32b/0x350 [ 864.883829][T17507] ? __pfx_do_futex+0x10/0x10 [ 864.883848][T17507] ? __might_fault+0xc5/0x140 [ 864.883875][T17507] mm_release+0x24a/0x2f0 [ 864.883893][T17507] do_exit+0x675/0x2aa0 [ 864.883919][T17507] ? __pfx_do_exit+0x10/0x10 [ 864.883941][T17507] ? do_raw_spin_lock+0x128/0x260 [ 864.883973][T17507] ? find_held_lock+0x2b/0x80 [ 864.883999][T17507] ? get_signal+0x7e0/0x21e0 [ 864.884018][T17507] do_group_exit+0xd5/0x2a0 [ 864.884043][T17507] get_signal+0x1ec7/0x21e0 [ 864.884068][T17507] ? __pfx_get_signal+0x10/0x10 [ 864.884087][T17507] ? do_futex+0x192/0x350 [ 864.884110][T17507] arch_do_signal_or_restart+0x91/0x770 [ 864.884131][T17507] ? blkcg_maybe_throttle_current+0x5df/0xeb0 [ 864.884161][T17507] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 864.884188][T17507] ? __pfx___x64_sys_futex+0x10/0x10 [ 864.884215][T17507] exit_to_user_mode_loop+0x86/0x4a0 [ 864.884239][T17507] do_syscall_64+0x668/0xf80 [ 864.884265][T17507] ? clear_bhb_loop+0x40/0x90 [ 864.884287][T17507] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 864.884305][T17507] RIP: 0033:0x7f243479bf79 [ 864.884321][T17507] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 864.884338][T17507] RSP: 002b:00007f243564c0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 864.884356][T17507] RAX: fffffffffffffe00 RBX: 00007f2434a16098 RCX: 00007f243479bf79 [ 864.884367][T17507] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f2434a16098 [ 864.884378][T17507] RBP: 00007f2434a16090 R08: 0000000000000000 R09: 0000000000000000 [ 864.884389][T17507] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 864.884399][T17507] R13: 00007f2434a16128 R14: 00007fffd9c79330 R15: 00007fffd9c79418 [ 864.884421][T17507] [ 865.550449][T17511] FAULT_INJECTION: forcing a failure. [ 865.550449][T17511] name failslab, interval 1, probability 0, space 0, times 0 [ 865.581151][T17511] CPU: 0 UID: 0 PID: 17511 Comm: syz.1.2327 Tainted: G U L syzkaller #0 PREEMPT(full) [ 865.581188][T17511] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 865.581196][T17511] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 865.581207][T17511] Call Trace: [ 865.581213][T17511] [ 865.581222][T17511] dump_stack_lvl+0x100/0x190 [ 865.581253][T17511] should_fail_ex.cold+0x5/0xa [ 865.581275][T17511] should_failslab+0xc2/0x120 [ 865.581303][T17511] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 865.581328][T17511] ? __d_alloc+0x34/0xa80 [ 865.581360][T17511] __d_alloc+0x34/0xa80 [ 865.581390][T17511] d_alloc_pseudo+0x1c/0xc0 [ 865.581411][T17511] alloc_file_pseudo+0xcf/0x230 [ 865.581433][T17511] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 865.581459][T17511] __shmem_file_setup+0x1a3/0x330 [ 865.581483][T17511] shmem_zero_setup+0x93/0x1b0 [ 865.581509][T17511] __mmap_region+0x20b5/0x2760 [ 865.581536][T17511] ? __pfx___mmap_region+0x10/0x10 [ 865.581573][T17511] ? finish_task_switch.isra.0+0x205/0xb80 [ 865.581592][T17511] ? lockdep_hardirqs_on+0x78/0x100 [ 865.581620][T17511] ? finish_task_switch.isra.0+0x205/0xb80 [ 865.581677][T17511] ? rcu_is_watching+0x12/0xc0 [ 865.581703][T17511] ? cap_capable+0x107/0x460 [ 865.581736][T17511] mmap_region+0x180/0x3e0 [ 865.581763][T17511] do_mmap+0xc63/0x12f0 [ 865.581797][T17511] ? __pfx_do_mmap+0x10/0x10 [ 865.581825][T17511] ? __pfx_down_write_killable+0x10/0x10 [ 865.581849][T17511] vm_mmap_pgoff+0x29e/0x470 [ 865.581883][T17511] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 865.581917][T17511] ? __x64_sys_futex+0x34f/0x4d0 [ 865.581945][T17511] ? __x64_sys_futex+0x358/0x4d0 [ 865.581969][T17511] ksys_mmap_pgoff+0x7d/0x5b0 [ 865.582000][T17511] __x64_sys_mmap+0x125/0x190 [ 865.582029][T17511] do_syscall_64+0x106/0xf80 [ 865.582055][T17511] ? clear_bhb_loop+0x40/0x90 [ 865.582079][T17511] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 865.582099][T17511] RIP: 0033:0x7f0fccb9bf79 [ 865.582117][T17511] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 865.582136][T17511] RSP: 002b:00007f0fcdb22028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 865.582154][T17511] RAX: ffffffffffffffda RBX: 00007f0fcce15fa0 RCX: 00007f0fccb9bf79 [ 865.582166][T17511] RDX: 0000000000000003 RSI: 0000000002020009 RDI: 0000000000000000 [ 865.582177][T17511] RBP: 00007f0fccc327e0 R08: fffffffffffffffa R09: 0000000000008000 [ 865.582188][T17511] R10: 0000000000000eb1 R11: 0000000000000246 R12: 0000000000000000 [ 865.582199][T17511] R13: 00007f0fcce16038 R14: 00007f0fcce15fa0 R15: 00007fffc10e3618 [ 865.582222][T17511] [ 865.873017][T17496] memory+swap: usage 3720kB, limit 9007199254740988kB, failcnt 0 [ 865.881196][T17496] kmem: usage 2736kB, limit 9007199254740988kB, failcnt 0 [ 865.888455][T17496] Memory cgroup stats for /syz3: [ 865.888571][T17496] cache 4096 [ 865.897056][T17496] rss 0 [ 865.900034][T17496] rss_huge 0 [ 865.903230][T17496] shmem 0 [ 865.906401][T17496] mapped_file 0 [ 865.909875][T17496] dirty 0 [ 865.912894][T17496] writeback 0 [ 865.916552][T17496] workingset_refault_anon 16224 [ 865.921523][T17496] workingset_refault_file 8952 [ 865.926430][T17496] swap 663552 [ 865.929712][T17496] swapcached 255729664 [ 865.933886][T17496] pgpgin 560993 [ 865.938144][T17496] pgpgout 582397 [ 865.942043][T17496] pgfault 348118 [ 865.948672][T17496] pgmajfault 7674 [ 865.952398][T17496] inactive_anon 339968 [ 865.956691][T17496] active_anon 0 [ 865.960590][T17496] inactive_file 4096 [ 865.964680][T17496] active_file 0 [ 865.969105][T17496] unevictable 0 [ 865.972654][T17496] hierarchical_memory_limit 3145728 [ 865.978107][T17496] hierarchical_memsw_limit 9223372036854771712 [ 865.984452][T17496] total_cache 4096 [ 865.988414][T17496] total_rss 0 [ 865.991695][T17496] total_rss_huge 0 [ 865.995443][T17496] total_shmem 0 [ 865.999236][T17496] total_mapped_file 0 [ 866.003216][T17496] total_dirty 0 [ 866.006795][T17496] total_writeback 0 [ 866.010771][T17496] total_workingset_refault_anon 16224 [ 866.016422][T17496] total_workingset_refault_file 8952 [ 866.021797][T17496] total_swap 663552 [ 866.025654][T17496] total_swapcached 255729664 [ 866.030236][T17496] total_pgpgin 560993 [ 866.034220][T17496] total_pgpgout 582397 [ 866.038335][T17496] total_pgfault 348118 [ 866.042401][T17496] total_pgmajfault 7674 [ 866.049311][T17496] total_inactive_anon 339968 [ 866.053900][T17496] total_active_anon 0 [ 866.057998][T17496] total_inactive_file 4096 [ 866.062595][T17496] total_active_file 0 [ 866.066711][T17496] total_unevictable 0 [ 866.071323][T17496] anon_cost 0 [ 866.074612][T17496] file_cost 0 [ 866.078194][T17496] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.2324,pid=17496,uid=0 [ 866.093314][T17496] Memory cgroup out of memory: Killed process 17496 (syz.3.2324) total-vm:137432kB, anon-rss:1236kB, file-rss:22908kB, shmem-rss:0kB, UID:0 pgtables:144kB oom_score_adj:1000 [ 866.395280][T17511] __nla_validate_parse: 9 callbacks suppressed [ 866.395299][T17511] netlink: 330 bytes leftover after parsing attributes in process `syz.1.2327'. [ 867.322304][T17525] FAULT_INJECTION: forcing a failure. [ 867.322304][T17525] name failslab, interval 1, probability 0, space 0, times 0 [ 867.368446][T17525] CPU: 0 UID: 0 PID: 17525 Comm: syz.1.2332 Tainted: G U L syzkaller #0 PREEMPT(full) [ 867.368480][T17525] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 867.368487][T17525] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 867.368497][T17525] Call Trace: [ 867.368504][T17525] [ 867.368511][T17525] dump_stack_lvl+0x100/0x190 [ 867.368542][T17525] should_fail_ex.cold+0x5/0xa [ 867.368564][T17525] should_failslab+0xc2/0x120 [ 867.368592][T17525] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 867.368615][T17525] ? security_file_alloc+0x34/0x2c0 [ 867.368640][T17525] ? trace_kmem_cache_alloc+0xf3/0x120 [ 867.368671][T17525] security_file_alloc+0x34/0x2c0 [ 867.368697][T17525] init_file+0x95/0x480 [ 867.368715][T17525] alloc_empty_file+0x73/0x1c0 [ 867.368734][T17525] path_openat+0xe8/0x31a0 [ 867.368759][T17525] ? kasan_save_stack+0x3f/0x50 [ 867.368781][T17525] ? kasan_save_stack+0x30/0x50 [ 867.368803][T17525] ? kasan_save_track+0x14/0x30 [ 867.368825][T17525] ? __kasan_slab_alloc+0x89/0x90 [ 867.368849][T17525] ? kmem_cache_alloc_noprof+0x241/0x6e0 [ 867.368870][T17525] ? do_getname+0x35/0x390 [ 867.368887][T17525] ? do_sys_openat2+0xc5/0x1e0 [ 867.368905][T17525] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 867.368937][T17525] ? __pfx_path_openat+0x10/0x10 [ 867.368970][T17525] do_file_open+0x20e/0x430 [ 867.368998][T17525] ? __pfx_do_file_open+0x10/0x10 [ 867.369039][T17525] ? alloc_fd+0x476/0x790 [ 867.369066][T17525] ? do_getname+0x191/0x390 [ 867.369086][T17525] do_sys_openat2+0x10d/0x1e0 [ 867.369106][T17525] ? __pfx_do_sys_openat2+0x10/0x10 [ 867.369124][T17525] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 867.369155][T17525] ? __fget_files+0x21f/0x3d0 [ 867.369183][T17525] __x64_sys_openat+0x12d/0x210 [ 867.369203][T17525] ? __pfx___x64_sys_openat+0x10/0x10 [ 867.369223][T17525] ? ksys_write+0x1ac/0x250 [ 867.369254][T17525] do_syscall_64+0x106/0xf80 [ 867.369280][T17525] ? clear_bhb_loop+0x40/0x90 [ 867.369302][T17525] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 867.369321][T17525] RIP: 0033:0x7f0fccb9bf79 [ 867.369337][T17525] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 867.369355][T17525] RSP: 002b:00007f0fcdb01028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 867.369374][T17525] RAX: ffffffffffffffda RBX: 00007f0fcce16090 RCX: 00007f0fccb9bf79 [ 867.369386][T17525] RDX: 0000000000000302 RSI: 00002000000003c0 RDI: ffffffffffffff9c [ 867.369397][T17525] RBP: 00007f0fcdb01090 R08: 0000000000000000 R09: 0000000000000000 [ 867.369407][T17525] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 867.369418][T17525] R13: 00007f0fcce16128 R14: 00007f0fcce16090 R15: 00007fffc10e3618 [ 867.369441][T17525] [ 868.552522][T17530] syz.3.2334 invoked oom-killer: gfp_mask=0x400cc0(GFP_KERNEL_ACCOUNT), order=1, oom_score_adj=1000 [ 868.644323][T17530] CPU: 0 UID: 0 PID: 17530 Comm: syz.3.2334 Tainted: G U L syzkaller #0 PREEMPT(full) [ 868.644357][T17530] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 868.644364][T17530] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 868.644375][T17530] Call Trace: [ 868.644382][T17530] [ 868.644389][T17530] dump_stack_lvl+0x100/0x190 [ 868.644421][T17530] dump_header+0xfb/0x606 [ 868.644442][T17530] oom_kill_process.cold+0xd/0x330 [ 868.644464][T17530] out_of_memory+0x340/0x14f0 [ 868.644492][T17530] ? __pfx_out_of_memory+0x10/0x10 [ 868.644521][T17530] mem_cgroup_out_of_memory+0xc6/0x130 [ 868.644544][T17530] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 868.644564][T17530] ? find_held_lock+0x2b/0x80 [ 868.644595][T17530] ? do_raw_spin_unlock+0x145/0x1e0 [ 868.644621][T17530] ? _raw_spin_unlock+0x28/0x50 [ 868.644647][T17530] try_charge_memcg+0x652/0xc90 [ 868.644678][T17530] ? __pfx_try_charge_memcg+0x10/0x10 [ 868.644704][T17530] ? rcu_read_unlock+0x17/0x60 [ 868.644730][T17530] ? rcu_read_unlock+0x17/0x60 [ 868.644762][T17530] ? get_mem_cgroup_from_objcg+0xd3/0x330 [ 868.644787][T17530] obj_cgroup_charge_account+0x33d/0x640 [ 868.644818][T17530] __memcg_slab_post_alloc_hook+0x2e3/0x9a0 [ 868.644855][T17530] __kmalloc_node_track_caller_noprof+0x66e/0x850 [ 868.644881][T17530] ? neigh_sysctl_register+0xb4/0x660 [ 868.644919][T17530] kmemdup_noprof+0x29/0x60 [ 868.644945][T17530] neigh_sysctl_register+0xb4/0x660 [ 868.644972][T17530] ? __pfx_neigh_sysctl_register+0x10/0x10 [ 868.644996][T17530] ? inetdev_init+0x245/0x570 [ 868.645012][T17530] ? inetdev_event+0x7fa/0x17f0 [ 868.645028][T17530] ? notifier_call_chain+0x99/0x420 [ 868.645052][T17530] ? copy_net_ns+0x46f/0x7c0 [ 868.645068][T17530] ? create_new_namespaces+0x3ea/0xac0 [ 868.645095][T17530] ? unshare_nsproxy_namespaces+0xc3/0x1f0 [ 868.645112][T17530] ? ksys_unshare+0x455/0xab0 [ 868.645132][T17530] ? __x64_sys_unshare+0x31/0x40 [ 868.645152][T17530] ? do_syscall_64+0x106/0xf80 [ 868.645177][T17530] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 868.645199][T17530] devinet_sysctl_register+0xb6/0x210 [ 868.645220][T17530] inetdev_init+0x2b8/0x570 [ 868.645239][T17530] inetdev_event+0x7fa/0x17f0 [ 868.645259][T17530] ? ib_netdevice_event+0xfc/0x330 [ 868.645286][T17530] ? __pfx_inetdev_event+0x10/0x10 [ 868.645306][T17530] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 868.645337][T17530] notifier_call_chain+0x99/0x420 [ 868.645364][T17530] call_netdevice_notifiers_info+0xbe/0x110 [ 868.645385][T17530] register_netdevice+0x16e6/0x2210 [ 868.645417][T17530] ? __pfx_register_netdevice+0x10/0x10 [ 868.645452][T17530] __ip_tunnel_create+0x52b/0x670 [ 868.645482][T17530] ? __pfx___ip_tunnel_create+0x10/0x10 [ 868.645509][T17530] ? net_generic+0xea/0x2a0 [ 868.645531][T17530] ip_tunnel_init_net+0x230/0x780 [ 868.645552][T17530] ? __pfx_ip_tunnel_init_net+0x10/0x10 [ 868.645576][T17530] ? __kmalloc_noprof+0x320/0x850 [ 868.645601][T17530] ? __pfx_ipgre_tap_init_net+0x10/0x10 [ 868.645627][T17530] ops_init+0x1e2/0x5f0 [ 868.645656][T17530] setup_net+0x118/0x3a0 [ 868.645683][T17530] ? __pfx_setup_net+0x10/0x10 [ 868.645708][T17530] ? lockdep_init_map_type+0x5c/0x250 [ 868.645731][T17530] ? mutex_init_lockep+0x110/0x150 [ 868.645757][T17530] copy_net_ns+0x46f/0x7c0 [ 868.645777][T17530] create_new_namespaces+0x3ea/0xac0 [ 868.645812][T17530] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 868.645833][T17530] ksys_unshare+0x455/0xab0 [ 868.645855][T17530] ? __pfx_ksys_unshare+0x10/0x10 [ 868.645885][T17530] __x64_sys_unshare+0x31/0x40 [ 868.645911][T17530] do_syscall_64+0x106/0xf80 [ 868.645937][T17530] ? clear_bhb_loop+0x40/0x90 [ 868.645958][T17530] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 868.645977][T17530] RIP: 0033:0x7f208e19bf79 [ 868.645993][T17530] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 868.646011][T17530] RSP: 002b:00007f208f0ae028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 868.646029][T17530] RAX: ffffffffffffffda RBX: 00007f208e415fa0 RCX: 00007f208e19bf79 [ 868.646041][T17530] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 868.646052][T17530] RBP: 00007f208e2327e0 R08: 0000000000000000 R09: 0000000000000000 [ 868.646062][T17530] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 868.646073][T17530] R13: 00007f208e416038 R14: 00007f208e415fa0 R15: 00007ffe44e219f8 [ 868.646101][T17530] [ 870.220841][T17539] random: crng reseeded on system resumption [ 870.337853][T17530] memory: usage 3072kB, limit 3072kB, failcnt 58381 [ 870.362483][T17530] memory+swap: usage 4728kB, limit 9007199254740988kB, failcnt 0 [ 870.383415][T17530] kmem: usage 2732kB, limit 9007199254740988kB, failcnt 0 [ 870.403823][T17530] Memory cgroup stats for /syz3: [ 870.403952][T17530] cache 4096 [ 870.425833][T17530] rss 4096 [ 870.436955][T17530] rss_huge 0 [ 870.446208][T17530] shmem 0 [ 870.455775][T17530] mapped_file 0 [ 870.466727][T17530] dirty 0 [ 870.481172][T17530] writeback 0 [ 870.488655][T17530] workingset_refault_anon 16325 [ 870.501223][T17530] workingset_refault_file 8952 [ 870.513786][T17530] swap 1716224 [ 870.526033][T17530] swapcached 261029888 [ 870.534865][T17530] pgpgin 562461 [ 870.544393][T17530] pgpgout 583864 [ 870.556261][T17530] pgfault 349684 [ 870.566835][T17530] pgmajfault 7763 [ 870.583187][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.589668][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.611648][T17530] inactive_anon 188416 [ 870.626676][T17530] active_anon 155648 [ 870.636060][T17530] inactive_file 0 [ 870.647507][T17530] active_file 4096 [ 870.661017][T17530] unevictable 0 [ 870.668905][T17530] hierarchical_memory_limit 3145728 [ 870.684923][T17530] hierarchical_memsw_limit 9223372036854771712 [ 870.699077][T17530] total_cache 4096 [ 870.712891][T17530] total_rss 4096 [ 870.724535][T17530] total_rss_huge 0 [ 870.738542][T17530] total_shmem 0 [ 870.750264][T17530] total_mapped_file 0 [ 870.767347][T17530] total_dirty 0 [ 870.775589][T17530] total_writeback 0 [ 870.792342][T17530] total_workingset_refault_anon 16325 [ 870.805500][T17530] total_workingset_refault_file 8952 [ 870.820760][T17530] total_swap 1716224 [ 870.832428][T17530] total_swapcached 261029888 [ 870.847989][T17530] total_pgpgin 562461 [ 870.865273][T17530] total_pgpgout 583864 [ 870.876139][T17530] total_pgfault 349684 [ 870.890862][T17530] total_pgmajfault 7763 [ 870.913874][T17530] total_inactive_anon 188416 [ 870.939294][T17530] total_active_anon 155648 [ 870.957566][T17530] total_inactive_file 0 [ 870.961843][T17530] total_active_file 4096 [ 870.984879][T17530] total_unevictable 0 [ 870.998356][T17530] anon_cost 0 [ 871.010934][T17530] file_cost 0 [ 871.019935][T17530] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.2334,pid=17529,uid=0 [ 871.060173][T17530] Memory cgroup out of memory: Killed process 17529 (syz.3.2334) total-vm:102744kB, anon-rss:1236kB, file-rss:21516kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 871.535482][T17545] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2338'. [ 871.581258][T17545] netlink: 13 bytes leftover after parsing attributes in process `syz.3.2338'. [ 871.647098][T17549] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 872.518186][T17567] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 872.608310][T17567] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 872.748996][T17567] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 872.837239][T17567] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 872.970536][T17567] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 873.042766][T17567] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 873.136589][T17567] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 873.263836][T11705] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 873.269127][T11705] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 873.270069][T11705] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 873.270744][T11705] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 873.271169][T11705] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 874.579427][T11705] Bluetooth: hci0: command 0x0c1a tx timeout [ 874.659328][T11705] Bluetooth: hci5: command 0x040f tx timeout [ 874.822780][T10526] Bluetooth: hci1: command 0x0c1a tx timeout [ 874.829597][T11705] Bluetooth: hci2: command 0x0c1a tx timeout [ 874.885043][ T5826] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 874.917642][T11705] Bluetooth: hci6: unexpected event 0x1c length: 725 > 5 [ 874.981630][T11705] Bluetooth: hci3: command 0x0c1a tx timeout [ 875.025216][ T5826] CPU: 0 UID: 0 PID: 5826 Comm: syz-executor Tainted: G U L syzkaller #0 PREEMPT(full) [ 875.025250][ T5826] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 875.025257][ T5826] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 875.025269][ T5826] Call Trace: [ 875.025275][ T5826] [ 875.025283][ T5826] dump_stack_lvl+0x100/0x190 [ 875.025315][ T5826] dump_header+0xfb/0x606 [ 875.025336][ T5826] oom_kill_process.cold+0xd/0x330 [ 875.025359][ T5826] out_of_memory+0x340/0x14f0 [ 875.025387][ T5826] ? __pfx_out_of_memory+0x10/0x10 [ 875.025416][ T5826] mem_cgroup_out_of_memory+0xc6/0x130 [ 875.025438][ T5826] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 875.025458][ T5826] ? find_held_lock+0x2b/0x80 [ 875.025489][ T5826] ? do_raw_spin_unlock+0x145/0x1e0 [ 875.025514][ T5826] ? _raw_spin_unlock+0x28/0x50 [ 875.025541][ T5826] try_charge_memcg+0x652/0xc90 [ 875.025572][ T5826] ? __pfx_try_charge_memcg+0x10/0x10 [ 875.025604][ T5826] ? find_held_lock+0x2b/0x80 [ 875.025629][ T5826] ? rcu_read_unlock+0x17/0x60 [ 875.025656][ T5826] ? rcu_read_unlock+0x17/0x60 [ 875.025685][ T5826] charge_memcg+0xa6/0x280 [ 875.025711][ T5826] mem_cgroup_swapin_charge_folio+0xeb/0x470 [ 875.025733][ T5826] __swap_cache_prepare_and_add+0x528/0x9e0 [ 875.025765][ T5826] ? __pfx___swap_cache_prepare_and_add+0x10/0x10 [ 875.025786][ T5826] ? __pfx_swap_entry_swapped+0x10/0x10 [ 875.025818][ T5826] swap_cache_alloc_folio+0x1cb/0x300 [ 875.025842][ T5826] ? __pfx_swap_cache_alloc_folio+0x10/0x10 [ 875.025866][ T5826] ? finish_task_switch.isra.0+0x2c6/0xb80 [ 875.025888][ T5826] swap_cluster_readahead+0x411/0x770 [ 875.025922][ T5826] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 875.025959][ T5826] ? get_vma_policy+0x23f/0x3b0 [ 875.025988][ T5826] swapin_readahead+0x160/0x12c0 [ 875.026018][ T5826] ? __pfx_swapin_readahead+0x10/0x10 [ 875.026038][ T5826] ? find_held_lock+0x2b/0x80 [ 875.026064][ T5826] ? swap_table_get+0x103/0x2c0 [ 875.026083][ T5826] ? swap_table_get+0x103/0x2c0 [ 875.026106][ T5826] ? swap_table_get+0x10d/0x2c0 [ 875.026127][ T5826] ? swap_cache_get_folio+0x1ae/0x600 [ 875.026149][ T5826] ? __pfx_swap_cache_get_folio+0x10/0x10 [ 875.026174][ T5826] ? __pfx_get_swap_device+0x10/0x10 [ 875.026204][ T5826] ? do_swap_page+0xb2e/0x68e0 [ 875.026223][ T5826] do_swap_page+0xb2e/0x68e0 [ 875.026255][ T5826] ? __pfx_do_swap_page+0x10/0x10 [ 875.026276][ T5826] ? __free_object+0x2a8/0x400 [ 875.026295][ T5826] ? lockdep_hardirqs_on+0x78/0x100 [ 875.026323][ T5826] ? rcu_is_watching+0x12/0xc0 [ 875.026349][ T5826] ? __pte_offset_map+0x179/0x310 [ 875.026377][ T5826] __handle_mm_fault+0x18c1/0x2b60 [ 875.026403][ T5826] ? reacquire_held_locks+0xce/0x1e0 [ 875.026425][ T5826] ? __pfx___handle_mm_fault+0x10/0x10 [ 875.026450][ T5826] ? lock_vma_under_rcu+0x17c/0x590 [ 875.026485][ T5826] handle_mm_fault+0x36d/0xa20 [ 875.026510][ T5826] do_user_addr_fault+0x5a3/0x12f0 [ 875.026545][ T5826] exc_page_fault+0x6f/0xd0 [ 875.026571][ T5826] asm_exc_page_fault+0x26/0x30 [ 875.026589][ T5826] RIP: 0033:0x7f208e15c84e [ 875.026606][ T5826] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 875.026624][ T5826] RSP: 002b:00007ffe44e21cd8 EFLAGS: 00010246 [ 875.026639][ T5826] RAX: 0000000000000000 RBX: 0000555578146500 RCX: 00007f208e15c84e [ 875.026651][ T5826] RDX: 00007ffe44e21d30 RSI: 0000000000000000 RDI: 0000000000000000 [ 875.026661][ T5826] RBP: 00007ffe44e21d9c R08: 0000000000000000 R09: 0000000000000000 [ 875.026672][ T5826] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000001388 [ 875.026682][ T5826] R13: 00000000000927c0 R14: 00000000000d550f R15: 00007ffe44e21df0 [ 875.026706][ T5826] [ 875.407876][ T5826] memory: usage 3072kB, limit 3072kB, failcnt 59082 [ 875.416704][ T5826] memory+swap: usage 3660kB, limit 9007199254740988kB, failcnt 0 [ 875.424538][ T5826] kmem: usage 2684kB, limit 9007199254740988kB, failcnt 0 [ 875.431998][ T5826] Memory cgroup stats for /syz3: [ 875.432115][ T5826] cache 4096 [ 875.440563][ T5826] rss 0 [ 875.443345][ T5826] rss_huge 0 [ 875.446541][ T5826] shmem 0 [ 875.449469][ T5826] mapped_file 0 [ 875.453069][ T5826] dirty 0 [ 875.456001][ T5826] writeback 0 [ 875.460043][ T5826] workingset_refault_anon 16619 [ 875.465047][ T5826] workingset_refault_file 8952 [ 875.472636][ T5826] swap 602112 [ 875.476139][ T5826] swapcached 261500928 [ 875.480295][ T5826] pgpgin 562928 [ 875.483756][ T5826] pgpgout 584319 [ 875.487484][ T5826] pgfault 350400 [ 875.491123][ T5826] pgmajfault 8009 [ 875.495319][ T5826] inactive_anon 393216 [ 875.499626][ T5826] active_anon 0 [ 875.503223][ T5826] inactive_file 4096 [ 875.507212][ T5826] active_file 0 [ 875.510778][ T5826] unevictable 0 [ 875.515039][ T5826] hierarchical_memory_limit 3145728 [ 875.520513][ T5826] hierarchical_memsw_limit 9223372036854771712 [ 875.526865][ T5826] total_cache 4096 [ 875.531074][ T5826] total_rss 0 [ 875.534467][ T5826] total_rss_huge 0 [ 875.538623][ T5826] total_shmem 0 [ 875.542565][ T5826] total_mapped_file 0 [ 875.546539][ T5826] total_dirty 0 [ 875.550124][ T5826] total_writeback 0 [ 875.554070][ T5826] total_workingset_refault_anon 16619 [ 875.559435][ T5826] total_workingset_refault_file 8952 [ 875.565013][ T5826] total_swap 602112 [ 875.569177][ T5826] total_swapcached 261500928 [ 875.576551][ T5826] total_pgpgin 562928 [ 875.580592][ T5826] total_pgpgout 584319 [ 875.584914][ T5826] total_pgfault 350400 [ 875.589144][ T5826] total_pgmajfault 8009 [ 875.593340][ T5826] total_inactive_anon 393216 [ 875.598354][ T5826] total_active_anon 0 [ 875.602488][ T5826] total_inactive_file 4096 [ 875.606907][ T5826] total_active_file 0 [ 875.611071][ T5826] total_unevictable 0 [ 875.615234][ T5826] anon_cost 0 [ 875.618516][ T5826] file_cost 0 [ 875.622360][ T5826] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.2347,pid=17578,uid=0 [ 875.638007][ T5826] Memory cgroup out of memory: Killed process 17578 (syz.3.2347) total-vm:137300kB, anon-rss:1236kB, file-rss:22080kB, shmem-rss:0kB, UID:0 pgtables:152kB oom_score_adj:1000 [ 875.713043][T11705] Bluetooth: hci4: command 0x0c1a tx timeout [ 875.719193][T11705] Bluetooth: hci6: command 0x0c1a tx timeout [ 875.725621][T11705] Bluetooth: hci7: command tx timeout [ 875.839043][T17571] chnl_net:caif_netlink_parms(): no params data found [ 876.257528][T17571] bridge0: port 1(bridge_slave_0) entered blocking state [ 876.284212][T17571] bridge0: port 1(bridge_slave_0) entered disabled state [ 876.332175][T17571] bridge_slave_0: entered allmulticast mode [ 876.362032][T17571] bridge_slave_0: entered promiscuous mode [ 876.398055][T17571] bridge0: port 2(bridge_slave_1) entered blocking state [ 876.450174][T17571] bridge0: port 2(bridge_slave_1) entered disabled state [ 876.466953][T17571] bridge_slave_1: entered allmulticast mode [ 876.541819][T17571] bridge_slave_1: entered promiscuous mode [ 876.692678][T17571] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 876.762095][T17571] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 876.908766][T17571] team0: Port device team_slave_0 added [ 876.941988][T17571] team0: Port device team_slave_1 added [ 877.053825][T17571] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 877.090487][T17571] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 877.220760][T17571] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 877.282838][T17571] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 877.289991][T17571] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 877.454553][T17571] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 877.513900][T17630] syz.3.2356 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 877.713102][T17630] CPU: 0 UID: 0 PID: 17630 Comm: syz.3.2356 Tainted: G U L syzkaller #0 PREEMPT(full) [ 877.713135][T17630] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 877.713142][T17630] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 877.713153][T17630] Call Trace: [ 877.713160][T17630] [ 877.713168][T17630] dump_stack_lvl+0x100/0x190 [ 877.713200][T17630] dump_header+0xfb/0x606 [ 877.713221][T17630] oom_kill_process.cold+0xd/0x330 [ 877.713253][T17630] out_of_memory+0x340/0x14f0 [ 877.713282][T17630] ? __pfx_out_of_memory+0x10/0x10 [ 877.713311][T17630] mem_cgroup_out_of_memory+0xc6/0x130 [ 877.713334][T17630] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 877.713354][T17630] ? find_held_lock+0x2b/0x80 [ 877.713386][T17630] ? do_raw_spin_unlock+0x145/0x1e0 [ 877.713411][T17630] ? _raw_spin_unlock+0x28/0x50 [ 877.713437][T17630] try_charge_memcg+0x652/0xc90 [ 877.713468][T17630] ? __pfx_try_charge_memcg+0x10/0x10 [ 877.713499][T17630] ? find_held_lock+0x2b/0x80 [ 877.713525][T17630] ? rcu_read_unlock+0x17/0x60 [ 877.713551][T17630] ? rcu_read_unlock+0x17/0x60 [ 877.713580][T17630] charge_memcg+0xa6/0x280 [ 877.713607][T17630] mem_cgroup_swapin_charge_folio+0xeb/0x470 [ 877.713629][T17630] __swap_cache_prepare_and_add+0x528/0x9e0 [ 877.713660][T17630] ? __pfx___swap_cache_prepare_and_add+0x10/0x10 [ 877.713681][T17630] ? __pfx_swap_entry_swapped+0x10/0x10 [ 877.713714][T17630] swap_cache_alloc_folio+0x1cb/0x300 [ 877.713737][T17630] ? __pfx_swap_cache_alloc_folio+0x10/0x10 [ 877.713762][T17630] ? finish_task_switch.isra.0+0x2c6/0xb80 [ 877.713783][T17630] swap_cluster_readahead+0x411/0x770 [ 877.713811][T17630] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 877.713847][T17630] ? get_vma_policy+0x23f/0x3b0 [ 877.713877][T17630] swapin_readahead+0x160/0x12c0 [ 877.713905][T17630] ? __pfx_swapin_readahead+0x10/0x10 [ 877.713926][T17630] ? find_held_lock+0x2b/0x80 [ 877.713951][T17630] ? swap_table_get+0x103/0x2c0 [ 877.713970][T17630] ? swap_table_get+0x103/0x2c0 [ 877.713993][T17630] ? swap_table_get+0x10d/0x2c0 [ 877.714013][T17630] ? swap_cache_get_folio+0x1ae/0x600 [ 877.714035][T17630] ? __pfx_swap_cache_get_folio+0x10/0x10 [ 877.714055][T17630] ? __pfx_get_swap_device+0x10/0x10 [ 877.714091][T17630] ? do_swap_page+0xb2e/0x68e0 [ 877.714111][T17630] do_swap_page+0xb2e/0x68e0 [ 877.714143][T17630] ? __pfx_do_swap_page+0x10/0x10 [ 877.714169][T17630] ? rcu_is_watching+0x12/0xc0 [ 877.714194][T17630] ? __pte_offset_map+0x179/0x310 [ 877.714223][T17630] __handle_mm_fault+0x18c1/0x2b60 [ 877.714249][T17630] ? reacquire_held_locks+0xce/0x1e0 [ 877.714276][T17630] ? __pfx___handle_mm_fault+0x10/0x10 [ 877.714301][T17630] ? lock_vma_under_rcu+0x17c/0x590 [ 877.714336][T17630] handle_mm_fault+0x36d/0xa20 [ 877.714362][T17630] do_user_addr_fault+0x5a3/0x12f0 [ 877.714397][T17630] exc_page_fault+0x6f/0xd0 [ 877.714423][T17630] asm_exc_page_fault+0x26/0x30 [ 877.714440][T17630] RIP: 0033:0x7f208e137e92 [ 877.714457][T17630] Code: 48 03 04 25 00 00 00 00 c3 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 c7 c0 70 fe ff ff 48 c7 c1 c8 ff ff ff 64 48 8b 00 <48> 8b 00 48 8b 70 38 48 8d 96 00 01 00 00 64 48 89 11 48 8b 78 40 [ 877.714475][T17630] RSP: 002b:00007f208efe8118 EFLAGS: 00010246 [ 877.714490][T17630] RAX: 00007f208e3ea460 RBX: 00007f208efe86c0 RCX: ffffffffffffffc8 [ 877.714502][T17630] RDX: 00007f208efe8d78 RSI: 0000000000000058 RDI: 00007f208efe86c0 [ 877.714514][T17630] RBP: 0000000000000000 R08: 00007f208efe86c0 R09: 00007ffe44e219f7 [ 877.714525][T17630] R10: 0000000000000008 R11: 0000000000000206 R12: ffffffffffffffe8 [ 877.714536][T17630] R13: 000000000000000b R14: 00007ffe44e21910 R15: 00007ffe44e219f8 [ 877.714559][T17630] [ 878.097616][T17571] hsr_slave_0: entered promiscuous mode [ 878.104480][T17571] hsr_slave_1: entered promiscuous mode [ 878.110708][T17571] debugfs: 'hsr0' already exists in 'hsr' [ 878.116572][T17571] Cannot create hsr debugfs directory [ 878.194260][T17630] memory: usage 3072kB, limit 3072kB, failcnt 59357 [ 878.201161][T17630] memory+swap: usage 3664kB, limit 9007199254740988kB, failcnt 0 [ 878.209357][T17630] kmem: usage 2716kB, limit 9007199254740988kB, failcnt 0 [ 878.216530][T17630] Memory cgroup stats for /syz3: [ 878.216648][T17630] cache 4096 [ 878.225365][T17630] rss 0 [ 878.228220][T17630] rss_huge 0 [ 878.231581][T17630] shmem 0 [ 878.234521][T17630] mapped_file 0 [ 878.240790][T17630] dirty 0 [ 878.243804][T17630] writeback 0 [ 878.247244][T17630] workingset_refault_anon 16679 [ 878.252244][T17630] workingset_refault_file 8952 [ 878.257316][T17630] swap 606208 [ 878.261048][T17630] swapcached 261554176 [ 878.265392][T17630] pgpgin 563056 [ 878.268956][T17630] pgpgout 584456 [ 878.274234][T17630] pgfault 350663 [ 878.277965][T17630] pgmajfault 8061 [ 878.281757][T17630] inactive_anon 12288 [ 878.285730][T17630] active_anon 348160 [ 878.289644][T17630] inactive_file 0 [ 878.293319][T17630] active_file 4096 [ 878.297323][T17630] unevictable 0 [ 878.300871][T17630] hierarchical_memory_limit 3145728 [ 878.306296][T17630] hierarchical_memsw_limit 9223372036854771712 [ 878.312592][T17630] total_cache 4096 [ 878.316416][T17630] total_rss 0 [ 878.319925][T17630] total_rss_huge 0 [ 878.323720][T17630] total_shmem 0 [ 878.327267][T17630] total_mapped_file 0 [ 878.331283][T17630] total_dirty 0 [ 878.334752][T17630] total_writeback 0 [ 878.338571][T17630] total_workingset_refault_anon 16679 [ 878.346964][T17630] total_workingset_refault_file 8952 [ 878.352311][T17630] total_swap 606208 [ 878.356308][T17630] total_swapcached 261554176 [ 878.361096][T17630] total_pgpgin 563056 [ 878.365675][T17630] total_pgpgout 584456 [ 878.369825][T17630] total_pgfault 350663 [ 878.374150][T17630] total_pgmajfault 8061 [ 878.378297][T17630] total_inactive_anon 12288 [ 878.383282][T17630] total_active_anon 348160 [ 878.387712][T17630] total_inactive_file 0 [ 878.392082][T17630] total_active_file 4096 [ 878.396492][T17630] total_unevictable 0 [ 878.400809][T17630] anon_cost 0 [ 878.404114][T17630] file_cost 0 [ 878.407424][T17630] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.2356,pid=17618,uid=0 [ 878.423563][T17630] Memory cgroup out of memory: Killed process 17618 (syz.3.2356) total-vm:99232kB, anon-rss:1236kB, file-rss:21516kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 878.661252][T10526] Bluetooth: hci7: command tx timeout [ 879.640914][T17634] syz.3.2359 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 879.817749][T17634] CPU: 0 UID: 0 PID: 17634 Comm: syz.3.2359 Tainted: G U L syzkaller #0 PREEMPT(full) [ 879.817789][T17634] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 879.817796][T17634] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 879.817807][T17634] Call Trace: [ 879.817813][T17634] [ 879.817821][T17634] dump_stack_lvl+0x100/0x190 [ 879.817852][T17634] dump_header+0xfb/0x606 [ 879.817873][T17634] oom_kill_process.cold+0xd/0x330 [ 879.817895][T17634] out_of_memory+0x340/0x14f0 [ 879.817923][T17634] ? __pfx_out_of_memory+0x10/0x10 [ 879.817952][T17634] mem_cgroup_out_of_memory+0xc6/0x130 [ 879.817974][T17634] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 879.817994][T17634] ? find_held_lock+0x2b/0x80 [ 879.818025][T17634] ? do_raw_spin_unlock+0x145/0x1e0 [ 879.818050][T17634] ? _raw_spin_unlock+0x28/0x50 [ 879.818076][T17634] try_charge_memcg+0x652/0xc90 [ 879.818107][T17634] ? __pfx_try_charge_memcg+0x10/0x10 [ 879.818133][T17634] ? rcu_read_unlock+0x17/0x60 [ 879.818159][T17634] ? rcu_read_unlock+0x17/0x60 [ 879.818190][T17634] ? get_mem_cgroup_from_objcg+0xd3/0x330 [ 879.818215][T17634] __memcg_kmem_charge_page+0xd0/0x530 [ 879.818246][T17634] memcg_charge_kernel_stack+0xc1/0x1f0 [ 879.818265][T17634] ? memcpy_and_pad+0x5a/0x90 [ 879.818294][T17634] copy_process+0x1735/0x7a10 [ 879.818324][T17634] ? __pfx_copy_process+0x10/0x10 [ 879.818350][T17634] ? _copy_from_user+0x59/0xd0 [ 879.818377][T17634] kernel_clone+0xfc/0x9a0 [ 879.818397][T17634] ? rcu_is_watching+0x12/0xc0 [ 879.818423][T17634] ? __pfx_kernel_clone+0x10/0x10 [ 879.818455][T17634] __do_sys_clone3+0x214/0x290 [ 879.818475][T17634] ? __pfx___do_sys_clone3+0x10/0x10 [ 879.818518][T17634] ? do_user_addr_fault+0x8d6/0x12f0 [ 879.818550][T17634] do_syscall_64+0x106/0xf80 [ 879.818576][T17634] ? clear_bhb_loop+0x40/0x90 [ 879.818598][T17634] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 879.818616][T17634] RIP: 0033:0x7f208e19cd89 [ 879.818633][T17634] Code: 90 b8 01 00 00 00 b9 01 00 00 00 eb ec 0f 1f 40 00 b8 ea ff ff ff 48 85 ff 74 28 48 85 d2 74 23 49 89 c8 b8 b3 01 00 00 0f 05 <48> 85 c0 7c 14 74 01 c3 31 ed 4c 89 c7 ff d2 48 89 c7 b8 3c 00 00 [ 879.818651][T17634] RSP: 002b:00007ffe44e218b8 EFLAGS: 00000206 ORIG_RAX: 00000000000001b3 [ 879.818670][T17634] RAX: ffffffffffffffda RBX: 00007f208e1583a0 RCX: 00007f208e19cd89 [ 879.818681][T17634] RDX: 00007f208e1583a0 RSI: 0000000000000058 RDI: 00007ffe44e21910 [ 879.818692][T17634] RBP: 00007f208f08d6c0 R08: 00007f208f08d6c0 R09: 00007ffe44e219f7 [ 879.818703][T17634] R10: 0000000000000008 R11: 0000000000000206 R12: ffffffffffffffe8 [ 879.818713][T17634] R13: 000000000000006e R14: 00007ffe44e21910 R15: 00007ffe44e219f8 [ 879.818736][T17634] [ 879.818744][T17634] memory: usage 3072kB, limit 3072kB, failcnt 59725 [ 880.756914][T11705] Bluetooth: hci7: command tx timeout [ 881.054898][T17634] memory+swap: usage 3704kB, limit 9007199254740988kB, failcnt 0 [ 881.101156][T17634] kmem: usage 2720kB, limit 9007199254740988kB, failcnt 0 [ 881.171863][T17634] Memory cgroup stats for /syz3: [ 881.171982][T17634] cache 4096 [ 881.232759][T17634] rss 0 [ 881.235552][T17634] rss_huge 0 [ 881.238844][T17634] shmem 0 [ 881.274505][T17634] mapped_file 0 [ 881.299056][T17634] dirty 4096 [ 881.322013][T17634] writeback 0 [ 881.346347][T17634] workingset_refault_anon 16830 [ 881.371874][T17634] workingset_refault_file 8952 [ 881.410502][T17634] swap 647168 [ 881.446336][T17634] swapcached 261685248 [ 881.492391][T17634] pgpgin 563278 [ 881.496832][T17634] pgpgout 584681 [ 881.509968][T17634] pgfault 350997 [ 881.537105][T17634] pgmajfault 8167 [ 881.555895][T17634] inactive_anon 356352 [ 881.561327][T17571] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 881.578560][T17634] active_anon 0 [ 881.589704][T17634] inactive_file 4096 [ 881.606409][T17571] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 881.633938][T17634] active_file 0 [ 881.648536][T17634] unevictable 0 [ 881.675659][T17634] hierarchical_memory_limit 3145728 [ 881.684246][T17634] hierarchical_memsw_limit 9223372036854771712 [ 881.693179][T17571] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 881.714254][T17634] total_cache 4096 [ 881.730970][T17634] total_rss 0 [ 881.737140][T17571] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 881.752808][T17634] total_rss_huge 0 [ 881.765322][T17634] total_shmem 0 [ 881.782252][T17634] total_mapped_file 0 [ 881.819907][T17634] total_dirty 4096 [ 881.882917][T17634] total_writeback 0 [ 881.902899][T17634] total_workingset_refault_anon 16830 [ 881.908438][T17634] total_workingset_refault_file 8952 [ 881.982940][T17634] total_swap 647168 [ 881.986902][T17634] total_swapcached 261685248 [ 881.991599][T17634] total_pgpgin 563278 [ 882.083755][T17634] total_pgpgout 584681 [ 882.088118][T17634] total_pgfault 350997 [ 882.092297][T17634] total_pgmajfault 8167 [ 882.179201][T17634] total_inactive_anon 356352 [ 882.220938][T17634] total_active_anon 0 [ 882.246573][T17571] 8021q: adding VLAN 0 to HW filter on device bond0 [ 882.281538][T17634] total_inactive_file 4096 [ 882.299840][T17634] total_active_file 0 [ 882.352128][T17634] total_unevictable 0 [ 882.376613][T17634] anon_cost 0 [ 882.380112][T17634] file_cost 0 [ 882.390439][T17571] 8021q: adding VLAN 0 to HW filter on device team0 [ 882.441356][T17634] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.2359,pid=17634,uid=0 [ 882.462562][T17676] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2362'. [ 882.534274][ T6368] bridge0: port 1(bridge_slave_0) entered blocking state [ 882.541609][ T6368] bridge0: port 1(bridge_slave_0) entered forwarding state [ 882.567807][T17634] Memory cgroup out of memory: Killed process 17634 (syz.3.2359) total-vm:170068kB, anon-rss:1236kB, file-rss:22088kB, shmem-rss:0kB, UID:0 pgtables:140kB oom_score_adj:1000 [ 882.604808][ T6368] bridge0: port 2(bridge_slave_1) entered blocking state [ 882.612114][ T6368] bridge0: port 2(bridge_slave_1) entered forwarding state [ 882.828654][T11705] Bluetooth: hci7: command tx timeout [ 882.916305][T17571] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 883.452901][T17692] zswap: compressor not available [ 883.783140][T17571] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 885.331277][T17571] veth0_vlan: entered promiscuous mode [ 885.402660][T17571] veth1_vlan: entered promiscuous mode [ 885.792055][T17571] veth0_macvtap: entered promiscuous mode [ 885.861304][T17571] veth1_macvtap: entered promiscuous mode [ 886.102212][T17571] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 886.313802][T17571] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 886.561212][ T6806] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 886.626439][ T6806] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 886.928360][ T6806] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 887.026524][ T6806] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 888.543782][T17768] syz.3.2374 invoked oom-killer: gfp_mask=0x400cc0(GFP_KERNEL_ACCOUNT), order=1, oom_score_adj=1000 [ 888.708710][T17768] CPU: 0 UID: 0 PID: 17768 Comm: syz.3.2374 Tainted: G U L syzkaller #0 PREEMPT(full) [ 888.708745][T17768] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 888.708752][T17768] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 888.708763][T17768] Call Trace: [ 888.708769][T17768] [ 888.708777][T17768] dump_stack_lvl+0x100/0x190 [ 888.708809][T17768] dump_header+0xfb/0x606 [ 888.708830][T17768] oom_kill_process.cold+0xd/0x330 [ 888.708852][T17768] out_of_memory+0x340/0x14f0 [ 888.708881][T17768] ? __pfx_out_of_memory+0x10/0x10 [ 888.708911][T17768] mem_cgroup_out_of_memory+0xc6/0x130 [ 888.708933][T17768] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 888.708953][T17768] ? find_held_lock+0x2b/0x80 [ 888.708993][T17768] ? do_raw_spin_unlock+0x145/0x1e0 [ 888.709019][T17768] ? _raw_spin_unlock+0x28/0x50 [ 888.709045][T17768] try_charge_memcg+0x652/0xc90 [ 888.709077][T17768] ? __pfx_try_charge_memcg+0x10/0x10 [ 888.709104][T17768] ? rcu_read_unlock+0x17/0x60 [ 888.709131][T17768] ? rcu_read_unlock+0x17/0x60 [ 888.709163][T17768] ? get_mem_cgroup_from_objcg+0xd3/0x330 [ 888.709194][T17768] obj_cgroup_charge_account+0x33d/0x640 [ 888.709226][T17768] __memcg_slab_post_alloc_hook+0x2e3/0x9a0 [ 888.709264][T17768] __kmalloc_node_track_caller_noprof+0x66e/0x850 [ 888.709291][T17768] ? __devinet_sysctl_register+0xbc/0x360 [ 888.709309][T17768] ? register_net_sysctl_sz+0x211/0x430 [ 888.709332][T17768] kmemdup_noprof+0x29/0x60 [ 888.709358][T17768] __devinet_sysctl_register+0xbc/0x360 [ 888.709392][T17768] ? __pfx_neigh_sysctl_register+0x10/0x10 [ 888.709417][T17768] ? inetdev_init+0x245/0x570 [ 888.709434][T17768] ? __pfx___devinet_sysctl_register+0x10/0x10 [ 888.709454][T17768] ? copy_net_ns+0x46f/0x7c0 [ 888.709470][T17768] ? create_new_namespaces+0x3ea/0xac0 [ 888.709499][T17768] ? unshare_nsproxy_namespaces+0xc3/0x1f0 [ 888.709517][T17768] ? ksys_unshare+0x455/0xab0 [ 888.709538][T17768] ? __x64_sys_unshare+0x31/0x40 [ 888.709558][T17768] ? do_syscall_64+0x106/0xf80 [ 888.709583][T17768] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 888.709606][T17768] devinet_sysctl_register+0x17b/0x210 [ 888.709627][T17768] inetdev_init+0x2b8/0x570 [ 888.709646][T17768] inetdev_event+0x7fa/0x17f0 [ 888.709666][T17768] ? ib_netdevice_event+0xfc/0x330 [ 888.709695][T17768] ? __pfx_inetdev_event+0x10/0x10 [ 888.709714][T17768] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 888.709746][T17768] notifier_call_chain+0x99/0x420 [ 888.709774][T17768] call_netdevice_notifiers_info+0xbe/0x110 [ 888.709796][T17768] register_netdevice+0x16e6/0x2210 [ 888.709829][T17768] ? __pfx_register_netdevice+0x10/0x10 [ 888.709864][T17768] __ip_tunnel_create+0x52b/0x670 [ 888.709895][T17768] ? __pfx___ip_tunnel_create+0x10/0x10 [ 888.709922][T17768] ? net_generic+0xea/0x2a0 [ 888.709944][T17768] ip_tunnel_init_net+0x230/0x780 [ 888.709965][T17768] ? __pfx_ip_tunnel_init_net+0x10/0x10 [ 888.709995][T17768] ? __kmalloc_noprof+0x320/0x850 [ 888.710021][T17768] ? __pfx_ipgre_tap_init_net+0x10/0x10 [ 888.710047][T17768] ops_init+0x1e2/0x5f0 [ 888.710077][T17768] setup_net+0x118/0x3a0 [ 888.710105][T17768] ? __pfx_setup_net+0x10/0x10 [ 888.710130][T17768] ? lockdep_init_map_type+0x5c/0x250 [ 888.710153][T17768] ? mutex_init_lockep+0x110/0x150 [ 888.710184][T17768] copy_net_ns+0x46f/0x7c0 [ 888.710204][T17768] create_new_namespaces+0x3ea/0xac0 [ 888.710239][T17768] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 888.710261][T17768] ksys_unshare+0x455/0xab0 [ 888.710281][T17768] ? kfree+0x2ec/0x6b0 [ 888.710298][T17768] ? rcu_is_watching+0x12/0xc0 [ 888.710325][T17768] ? __pfx_ksys_unshare+0x10/0x10 [ 888.710350][T17768] ? kcov_ioctl+0x16a/0x720 [ 888.710381][T17768] __x64_sys_unshare+0x31/0x40 [ 888.710403][T17768] do_syscall_64+0x106/0xf80 [ 888.710428][T17768] ? clear_bhb_loop+0x40/0x90 [ 888.710451][T17768] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 888.710470][T17768] RIP: 0033:0x7f208e19bf79 [ 888.710487][T17768] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 888.710505][T17768] RSP: 002b:00007f208f0ae028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 888.710523][T17768] RAX: ffffffffffffffda RBX: 00007f208e415fa0 RCX: 00007f208e19bf79 [ 888.710535][T17768] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 888.710546][T17768] RBP: 00007f208e2327e0 R08: 0000000000000000 R09: 0000000000000000 [ 888.710557][T17768] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 888.710567][T17768] R13: 00007f208e416038 R14: 00007f208e415fa0 R15: 00007ffe44e219f8 [ 888.710591][T17768] [ 889.205283][T17768] memory: usage 3072kB, limit 3072kB, failcnt 60636 [ 889.212124][T17768] memory+swap: usage 4896kB, limit 9007199254740988kB, failcnt 0 [ 889.220093][T17768] kmem: usage 2704kB, limit 9007199254740988kB, failcnt 0 [ 889.228311][T17768] Memory cgroup stats for /syz3: [ 889.228428][T17768] cache 4096 [ 889.236923][T17768] rss 0 [ 889.239703][T17768] rss_huge 0 [ 889.243230][T17768] shmem 0 [ 889.246244][T17768] mapped_file 0 [ 889.249738][T17768] dirty 0 [ 889.252934][T17768] writeback 0 [ 889.256294][T17768] workingset_refault_anon 17093 [ 889.261183][T17768] workingset_refault_file 8952 [ 889.266027][T17768] swap 1867776 [ 889.269517][T17768] swapcached 263053312 [ 889.273661][T17768] pgpgin 563944 [ 889.277361][T17768] pgpgout 585358 [ 889.280921][T17768] pgfault 352488 [ 889.284879][T17768] pgmajfault 8283 [ 889.288670][T17768] inactive_anon 12288 [ 889.292798][T17768] active_anon 360448 [ 889.296916][T17768] inactive_file 0 [ 889.304277][T17768] active_file 4096 [ 889.308443][T17768] unevictable 0 [ 889.311906][T17768] hierarchical_memory_limit 3145728 [ 889.317237][T17768] hierarchical_memsw_limit 9223372036854771712 [ 889.323851][T17768] total_cache 4096 [ 889.328262][T17768] total_rss 0 [ 889.331667][T17768] total_rss_huge 0 [ 889.335385][T17768] total_shmem 0 [ 889.339216][T17768] total_mapped_file 0 [ 889.343379][T17768] total_dirty 0 [ 889.347004][T17768] total_writeback 0 [ 889.351001][T17768] total_workingset_refault_anon 17093 [ 889.356611][T17768] total_workingset_refault_file 8952 [ 889.362065][T17768] total_swap 1867776 [ 889.366050][T17768] total_swapcached 263053312 [ 889.370786][T17768] total_pgpgin 563944 [ 889.374845][T17768] total_pgpgout 585358 [ 889.379028][T17768] total_pgfault 352488 [ 889.383451][T17768] total_pgmajfault 8283 [ 889.387822][T17768] total_inactive_anon 12288 [ 889.392580][T17768] total_active_anon 360448 [ 889.397085][T17768] total_inactive_file 0 [ 889.401494][T17768] total_active_file 4096 [ 889.408034][T17768] total_unevictable 0 [ 889.412207][T17768] anon_cost 0 [ 889.415697][T17768] file_cost 0 [ 889.420267][T17768] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.2374,pid=17767,uid=0 [ 889.435851][T17768] Memory cgroup out of memory: Killed process 17767 (syz.3.2374) total-vm:135384kB, anon-rss:1236kB, file-rss:22344kB, shmem-rss:0kB, UID:0 pgtables:152kB oom_score_adj:1000 [ 890.003390][ T6372] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 890.021504][ T6372] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 890.152611][ T6807] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 890.175803][ T6807] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 890.668578][T17814] FAULT_INJECTION: forcing a failure. [ 890.668578][T17814] name failslab, interval 1, probability 0, space 0, times 0 [ 890.740222][T17817] netlink: 350 bytes leftover after parsing attributes in process `syz.1.2381'. [ 890.767959][T17814] CPU: 0 UID: 0 PID: 17814 Comm: syz.4.2344 Tainted: G U L syzkaller #0 PREEMPT(full) [ 890.768003][T17814] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 890.768011][T17814] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 890.768023][T17814] Call Trace: [ 890.768030][T17814] [ 890.768038][T17814] dump_stack_lvl+0x100/0x190 [ 890.768070][T17814] should_fail_ex.cold+0x5/0xa [ 890.768092][T17814] should_failslab+0xc2/0x120 [ 890.768121][T17814] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 890.768144][T17814] ? security_inode_alloc+0x3b/0x2c0 [ 890.768167][T17814] ? lockdep_init_map_type+0x5c/0x250 [ 890.768194][T17814] security_inode_alloc+0x3b/0x2c0 [ 890.768218][T17814] inode_init_always_gfp+0xced/0x1040 [ 890.768248][T17814] alloc_inode+0x8e/0x250 [ 890.768268][T17814] new_inode+0x22/0x1c0 [ 890.768289][T17814] proc_get_inode+0x1d/0x780 [ 890.768315][T17814] proc_lookup_de+0x236/0x360 [ 890.768342][T17814] proc_tgid_net_lookup+0x61/0x90 [ 890.768370][T17814] __lookup_slow+0x251/0x460 [ 890.768391][T17814] ? __pfx___lookup_slow+0x10/0x10 [ 890.768421][T17814] ? __d_lookup+0x266/0x4a0 [ 890.768448][T17814] lookup_slow+0x50/0x70 [ 890.768468][T17814] link_path_walk+0x1377/0x1cc0 [ 890.768499][T17814] path_openat+0x1be/0x31a0 [ 890.768524][T17814] ? kasan_save_stack+0x3f/0x50 [ 890.768547][T17814] ? kasan_save_stack+0x30/0x50 [ 890.768569][T17814] ? kasan_save_track+0x14/0x30 [ 890.768592][T17814] ? kmem_cache_alloc_noprof+0x241/0x6e0 [ 890.768620][T17814] ? __pfx_path_openat+0x10/0x10 [ 890.768655][T17814] do_file_open+0x20e/0x430 [ 890.768683][T17814] ? __pfx_do_file_open+0x10/0x10 [ 890.768717][T17814] ? __pfx_kfree_link+0x10/0x10 [ 890.768747][T17814] ? alloc_fd+0x476/0x790 [ 890.768775][T17814] ? do_getname+0x191/0x390 [ 890.768796][T17814] do_sys_openat2+0x10d/0x1e0 [ 890.768817][T17814] ? __pfx_do_sys_openat2+0x10/0x10 [ 890.768838][T17814] ? __fget_files+0x21f/0x3d0 [ 890.768868][T17814] __x64_sys_openat+0x12d/0x210 [ 890.768889][T17814] ? __pfx___x64_sys_openat+0x10/0x10 [ 890.768917][T17814] do_syscall_64+0x106/0xf80 [ 890.768943][T17814] ? clear_bhb_loop+0x40/0x90 [ 890.768966][T17814] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 890.768986][T17814] RIP: 0033:0x7f341359bf79 [ 890.769010][T17814] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 890.769027][T17814] RSP: 002b:00007f34117f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 890.769046][T17814] RAX: ffffffffffffffda RBX: 00007f3413815fa0 RCX: 00007f341359bf79 [ 890.769058][T17814] RDX: 00000000000c0000 RSI: 00002000000000c0 RDI: ffffffffffffff9c [ 890.769069][T17814] RBP: 00007f34136327e0 R08: 0000000000000000 R09: 0000000000000000 [ 890.769080][T17814] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 890.769091][T17814] R13: 00007f3413816038 R14: 00007f3413815fa0 R15: 00007ffdc9ba51a8 [ 890.769116][T17814] [ 892.194888][T10526] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 892.275306][T10526] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 892.353116][T10526] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 892.504838][T10526] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 892.524367][T17842] FAULT_INJECTION: forcing a failure. [ 892.524367][T17842] name failslab, interval 1, probability 0, space 0, times 0 [ 892.608221][T10526] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 892.634029][T17842] CPU: 0 UID: 0 PID: 17842 Comm: syz.1.2388 Tainted: G U L syzkaller #0 PREEMPT(full) [ 892.634062][T17842] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 892.634070][T17842] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 892.634081][T17842] Call Trace: [ 892.634087][T17842] [ 892.634095][T17842] dump_stack_lvl+0x100/0x190 [ 892.634127][T17842] should_fail_ex.cold+0x5/0xa [ 892.634148][T17842] ? iovec_from_user+0x108/0x140 [ 892.634172][T17842] should_failslab+0xc2/0x120 [ 892.634199][T17842] __kmalloc_noprof+0xe0/0x850 [ 892.634227][T17842] iovec_from_user+0x108/0x140 [ 892.634255][T17842] __import_iovec+0x81/0x640 [ 892.634284][T17842] import_iovec+0x82/0xb0 [ 892.634311][T17842] vfs_writev+0x197/0xe10 [ 892.634334][T17842] ? rcu_is_watching+0x12/0xc0 [ 892.634360][T17842] ? trace_contention_end+0x140/0x180 [ 892.634386][T17842] ? __pfx_vfs_writev+0x10/0x10 [ 892.634408][T17842] ? fdget_pos+0x2aa/0x380 [ 892.634434][T17842] ? find_held_lock+0x2b/0x80 [ 892.634473][T17842] ? __fget_files+0x21f/0x3d0 [ 892.634502][T17842] ? do_writev+0x13e/0x340 [ 892.634524][T17842] do_writev+0x13e/0x340 [ 892.634547][T17842] ? __pfx_do_writev+0x10/0x10 [ 892.634575][T17842] do_syscall_64+0x106/0xf80 [ 892.634601][T17842] ? clear_bhb_loop+0x40/0x90 [ 892.634623][T17842] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 892.634642][T17842] RIP: 0033:0x7f0fccb9bf79 [ 892.634657][T17842] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 892.634675][T17842] RSP: 002b:00007f0fcdb22028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 892.634693][T17842] RAX: ffffffffffffffda RBX: 00007f0fcce15fa0 RCX: 00007f0fccb9bf79 [ 892.634704][T17842] RDX: 000000000000000c RSI: 0000200000000200 RDI: 0000000000000003 [ 892.634715][T17842] RBP: 00007f0fcdb22090 R08: 0000000000000000 R09: 0000000000000000 [ 892.634726][T17842] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 892.634737][T17842] R13: 00007f0fcce16038 R14: 00007f0fcce15fa0 R15: 00007fffc10e3618 [ 892.634766][T17842] [ 893.777855][T17856] device-mapper: ioctl: Invalid ioctl structure: name , dev 3ff [ 893.989390][T17856] FAULT_INJECTION: forcing a failure. [ 893.989390][T17856] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 894.067161][T17856] CPU: 0 UID: 0 PID: 17856 Comm: syz.1.2390 Tainted: G U L syzkaller #0 PREEMPT(full) [ 894.067195][T17856] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 894.067203][T17856] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 894.067214][T17856] Call Trace: [ 894.067221][T17856] [ 894.067230][T17856] dump_stack_lvl+0x100/0x190 [ 894.067261][T17856] should_fail_ex.cold+0x5/0xa [ 894.067284][T17856] _copy_from_iter+0x1f4/0x1690 [ 894.067315][T17856] ? __pfx__copy_from_iter+0x10/0x10 [ 894.067344][T17856] ? __pfx___might_resched+0x10/0x10 [ 894.067374][T17856] file_tty_write.isra.0+0x45b/0x890 [ 894.067399][T17856] redirected_tty_write+0xd4/0x120 [ 894.067418][T17856] vfs_write+0x6ac/0x1070 [ 894.067445][T17856] ? __pfx_redirected_tty_write+0x10/0x10 [ 894.067466][T17856] ? __pfx_vfs_write+0x10/0x10 [ 894.067488][T17856] ? find_held_lock+0x2b/0x80 [ 894.067529][T17856] ksys_write+0x12a/0x250 [ 894.067554][T17856] ? __pfx_ksys_write+0x10/0x10 [ 894.067585][T17856] do_syscall_64+0x106/0xf80 [ 894.067611][T17856] ? clear_bhb_loop+0x40/0x90 [ 894.067633][T17856] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 894.067652][T17856] RIP: 0033:0x7f0fccb9bf79 [ 894.067668][T17856] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 894.067686][T17856] RSP: 002b:00007f0fcdb22028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 894.067704][T17856] RAX: ffffffffffffffda RBX: 00007f0fcce15fa0 RCX: 00007f0fccb9bf79 [ 894.067716][T17856] RDX: 000000000000fdef RSI: 0000200000000000 RDI: 0000000000000009 [ 894.067727][T17856] RBP: 00007f0fccc327e0 R08: 0000000000000000 R09: 0000000000000000 [ 894.067738][T17856] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 894.067749][T17856] R13: 00007f0fcce16038 R14: 00007f0fcce15fa0 R15: 00007fffc10e3618 [ 894.067772][T17856] [ 894.446813][T17870] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2391'. [ 894.625180][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 894.972207][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 895.149558][T11705] Bluetooth: hci8: command tx timeout [ 895.267593][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 895.444419][T17834] chnl_net:caif_netlink_parms(): no params data found [ 895.819293][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 895.874742][T17900] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 896.385135][T17910] FAULT_INJECTION: forcing a failure. [ 896.385135][T17910] name failslab, interval 1, probability 0, space 0, times 0 [ 896.490257][T17910] CPU: 0 UID: 0 PID: 17910 Comm: syz.9.2401 Tainted: G U L syzkaller #0 PREEMPT(full) [ 896.490292][T17910] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 896.490299][T17910] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 896.490311][T17910] Call Trace: [ 896.490318][T17910] [ 896.490326][T17910] dump_stack_lvl+0x100/0x190 [ 896.490357][T17910] should_fail_ex.cold+0x5/0xa [ 896.490387][T17910] should_failslab+0xc2/0x120 [ 896.490415][T17910] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 896.490440][T17910] ? __kernfs_new_node+0xd2/0x960 [ 896.490468][T17910] __kernfs_new_node+0xd2/0x960 [ 896.490492][T17910] ? __pfx___kernfs_new_node+0x10/0x10 [ 896.490520][T17910] ? find_held_lock+0x2b/0x80 [ 896.490547][T17910] ? kernfs_root+0xee/0x2a0 [ 896.490567][T17910] ? kernfs_root+0xee/0x2a0 [ 896.490593][T17910] kernfs_new_node+0x11b/0x1a0 [ 896.490635][T17910] kernfs_create_dir_ns+0x4c/0x1a0 [ 896.490663][T17910] internal_create_group+0x36f/0xf40 [ 896.490690][T17910] ? kernfs_add_one+0x214/0x850 [ 896.490715][T17910] ? __pfx_internal_create_group+0x10/0x10 [ 896.490741][T17910] ? __pfx_dev_add_physical_location+0x10/0x10 [ 896.490766][T17910] ? bus_to_subsys+0x114/0x150 [ 896.490797][T17910] dpm_sysfs_add+0x80/0x280 [ 896.490822][T17910] device_add+0x9ef/0x1950 [ 896.490849][T17910] ? __pfx_device_add+0x10/0x10 [ 896.490881][T17910] nfc_register_device+0x41/0x3e0 [ 896.490910][T17910] nci_register_device+0x7f1/0xb80 [ 896.490934][T17910] ? __pfx_nci_register_device+0x10/0x10 [ 896.490959][T17910] ? lockdep_init_map_type+0x5c/0x250 [ 896.490986][T17910] virtual_ncidev_open+0x141/0x220 [ 896.491014][T17910] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 896.491042][T17910] misc_open+0x26d/0x450 [ 896.491066][T17910] ? __pfx_misc_open+0x10/0x10 [ 896.491090][T17910] chrdev_open+0x234/0x6a0 [ 896.491116][T17910] ? __pfx_apparmor_file_open+0x10/0x10 [ 896.491138][T17910] ? __pfx_chrdev_open+0x10/0x10 [ 896.491165][T17910] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 896.491198][T17910] do_dentry_open+0x6d8/0x1660 [ 896.491228][T17910] ? __pfx_chrdev_open+0x10/0x10 [ 896.491261][T17910] vfs_open+0x82/0x3f0 [ 896.491283][T17910] path_openat+0x208c/0x31a0 [ 896.491318][T17910] ? __pfx_path_openat+0x10/0x10 [ 896.491353][T17910] do_file_open+0x20e/0x430 [ 896.491381][T17910] ? __pfx_do_file_open+0x10/0x10 [ 896.491425][T17910] ? alloc_fd+0x476/0x790 [ 896.491452][T17910] ? do_getname+0x191/0x390 [ 896.491474][T17910] do_sys_openat2+0x10d/0x1e0 [ 896.491495][T17910] ? __pfx_do_sys_openat2+0x10/0x10 [ 896.491524][T17910] __x64_sys_openat+0x12d/0x210 [ 896.491545][T17910] ? __pfx___x64_sys_openat+0x10/0x10 [ 896.491575][T17910] do_syscall_64+0x106/0xf80 [ 896.491601][T17910] ? clear_bhb_loop+0x40/0x90 [ 896.491629][T17910] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 896.491649][T17910] RIP: 0033:0x7f243479bf79 [ 896.491666][T17910] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 896.491684][T17910] RSP: 002b:00007f243566d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 896.491703][T17910] RAX: ffffffffffffffda RBX: 00007f2434a15fa0 RCX: 00007f243479bf79 [ 896.491716][T17910] RDX: 0000000000000002 RSI: 0000200000000400 RDI: ffffffffffffff9c [ 896.491728][T17910] RBP: 00007f24348327e0 R08: 0000000000000000 R09: 0000000000000000 [ 896.491740][T17910] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 896.491752][T17910] R13: 00007f2434a16038 R14: 00007f2434a15fa0 R15: 00007fffd9c79418 [ 896.491776][T17910] [ 897.357856][T11705] Bluetooth: hci8: command tx timeout [ 897.822832][T17911] MTRR 0 not used [ 897.926396][T17834] bridge0: port 1(bridge_slave_0) entered blocking state [ 897.959524][T17834] bridge0: port 1(bridge_slave_0) entered disabled state [ 897.991077][T17834] bridge_slave_0: entered allmulticast mode [ 898.031510][T17834] bridge_slave_0: entered promiscuous mode [ 898.072845][T17834] bridge0: port 2(bridge_slave_1) entered blocking state [ 898.106924][T17834] bridge0: port 2(bridge_slave_1) entered disabled state [ 898.144420][T17834] bridge_slave_1: entered allmulticast mode [ 898.186355][T17834] bridge_slave_1: entered promiscuous mode [ 898.212313][ T12] team0: left allmulticast mode [ 898.238570][ T12] team_slave_1: left allmulticast mode [ 898.279978][ T12] team0: left promiscuous mode [ 898.303717][ T12] team_slave_1: left promiscuous mode [ 898.326070][ T12] bridge0: port 3(team0) entered disabled state [ 898.373992][ T12] bridge_slave_0: left allmulticast mode [ 898.379775][ T12] bridge_slave_0: left promiscuous mode [ 898.441285][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 899.080442][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 899.130981][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 899.203013][ T12] bond0 (unregistering): Released all slaves [ 899.402893][T11705] Bluetooth: hci8: command tx timeout [ 899.545089][T17834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 899.791100][T17834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 900.087307][T17834] team0: Port device team_slave_0 added [ 900.144712][T17834] team0: Port device team_slave_1 added [ 900.390467][T17834] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 900.471334][T17834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 900.639566][T17834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 900.689783][T17834] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 900.760066][T17834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 900.947201][T17834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 901.477672][T11705] Bluetooth: hci8: command tx timeout [ 901.611331][T18006] FAULT_INJECTION: forcing a failure. [ 901.611331][T18006] name failslab, interval 1, probability 0, space 0, times 0 [ 901.675709][T18006] CPU: 0 UID: 0 PID: 18006 Comm: syz.4.2412 Tainted: G U L syzkaller #0 PREEMPT(full) [ 901.675743][T18006] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 901.675752][T18006] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 901.675763][T18006] Call Trace: [ 901.675769][T18006] [ 901.675777][T18006] dump_stack_lvl+0x100/0x190 [ 901.675816][T18006] should_fail_ex.cold+0x5/0xa [ 901.675839][T18006] should_failslab+0xc2/0x120 [ 901.675867][T18006] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 901.675891][T18006] ? __d_alloc+0x34/0xa80 [ 901.675923][T18006] __d_alloc+0x34/0xa80 [ 901.675954][T18006] d_alloc_pseudo+0x1c/0xc0 [ 901.675977][T18006] alloc_file_pseudo+0xcf/0x230 [ 901.675998][T18006] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 901.676024][T18006] sock_alloc_file+0x50/0x210 [ 901.676053][T18006] __sys_socketpair+0x353/0x5b0 [ 901.676077][T18006] ? __pfx___sys_socketpair+0x10/0x10 [ 901.676106][T18006] ? xfd_validate_state+0x129/0x190 [ 901.676137][T18006] __x64_sys_socketpair+0x96/0x100 [ 901.676165][T18006] ? lockdep_hardirqs_on+0x78/0x100 [ 901.676193][T18006] do_syscall_64+0x106/0xf80 [ 901.676224][T18006] ? clear_bhb_loop+0x40/0x90 [ 901.676247][T18006] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 901.676267][T18006] RIP: 0033:0x7f341359bf79 [ 901.676283][T18006] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 901.676302][T18006] RSP: 002b:00007f34117f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 901.676324][T18006] RAX: ffffffffffffffda RBX: 00007f3413815fa0 RCX: 00007f341359bf79 [ 901.676339][T18006] RDX: 8000000000000000 RSI: 0000000000000002 RDI: 0000000000000001 [ 901.676350][T18006] RBP: 00007f34136327e0 R08: 0000000000000000 R09: 0000000000000000 [ 901.676361][T18006] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 901.676372][T18006] R13: 00007f3413816038 R14: 00007f3413815fa0 R15: 00007ffdc9ba51a8 [ 901.676395][T18006] [ 902.978837][ T12] hsr_slave_0: left promiscuous mode [ 902.996205][ T12] hsr_slave_1: left promiscuous mode [ 903.056155][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 903.096071][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 903.158605][ T12] veth0_macvtap: left promiscuous mode [ 903.190021][ T12] veth1_vlan: left promiscuous mode [ 903.224187][ T12] veth0_vlan: left promiscuous mode [ 904.215108][ T12] team0 (unregistering): Port device team_slave_1 removed [ 904.528194][T18056] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 904.658355][T18058] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 904.738271][T18063] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 904.804989][T17834] hsr_slave_0: entered promiscuous mode [ 904.863558][T17834] hsr_slave_1: entered promiscuous mode [ 904.895003][T17834] debugfs: 'hsr0' already exists in 'hsr' [ 904.943490][T17834] Cannot create hsr debugfs directory [ 907.247387][T17834] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 907.337520][T17834] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 907.565450][T17834] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 907.903577][T17834] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 908.508643][T17834] 8021q: adding VLAN 0 to HW filter on device bond0 [ 908.594487][T17834] 8021q: adding VLAN 0 to HW filter on device team0 [ 908.657330][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 908.664662][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 908.761371][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 908.768726][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 908.779270][T18131] netlink: 334 bytes leftover after parsing attributes in process `syz.9.2425'. [ 908.990395][T17834] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 909.256876][T18147] vhci_hcd vhci_hcd.2: invalid port number 16 [ 909.281775][T18147] vhci_hcd vhci_hcd.2: invalid port number 16 [ 909.842714][T17834] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 910.102003][T17834] veth0_vlan: entered promiscuous mode [ 910.191291][T17834] veth1_vlan: entered promiscuous mode [ 910.309827][T17834] veth0_macvtap: entered promiscuous mode [ 910.364135][T17834] veth1_macvtap: entered promiscuous mode [ 910.449286][T17834] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 910.500097][T17834] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 910.551370][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 910.588646][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 910.677058][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 910.709755][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 911.025600][ T6806] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 911.066814][ T6806] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 911.182095][ T6820] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 911.214255][ T6820] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 915.438780][T18212] rtc_cmos 00:00: Alarms can be up to one day in the future [ 916.142040][ T10] rtc_cmos 00:00: Alarms can be up to one day in the future [ 916.208180][ T10] rtc_cmos 00:00: Alarms can be up to one day in the future [ 916.290634][ T10] rtc_cmos 00:00: Alarms can be up to one day in the future [ 916.298283][ T10] rtc_cmos 00:00: Alarms can be up to one day in the future [ 916.430859][ T10] rtc rtc0: __rtc_set_alarm: err=-22 [ 918.097054][T18270] netlink: del zone limit has 8 unknown bytes [ 919.882454][ T31] INFO: task syz.7.2084:16029 blocked for more than 143 seconds. [ 919.892045][ T31] Tainted: G U L syzkaller #0 [ 919.899450][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 919.960835][ T31] task:syz.7.2084 state:D stack:27464 pid:16029 tgid:16022 ppid:15866 task_flags:0x400140 flags:0x00080002 [ 920.057044][ T31] Call Trace: [ 920.085132][ T31] [ 920.109633][ T31] __schedule+0xfee/0x60e0 [ 920.136054][ T31] ? __lock_acquire+0x4a5/0x2630 [ 920.252017][ T31] ? __pfx___schedule+0x10/0x10 [ 920.270291][ T31] ? find_held_lock+0x2b/0x80 [ 920.324150][ T31] ? schedule+0x2bf/0x390 [ 920.328757][ T31] schedule+0xdd/0x390 [ 920.379077][ T31] schedule_preempt_disabled+0x13/0x30 [ 920.422935][ T31] __mutex_lock+0xc9a/0x1b90 [ 920.442497][ T31] ? nfsd_nl_threads_set_doit+0x718/0xc60 [ 920.492755][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 920.497885][ T31] ? net_generic+0xea/0x2a0 [ 920.551415][ T31] ? net_generic+0xea/0x2a0 [ 920.573856][ T31] ? nfsd_nl_threads_set_doit+0x718/0xc60 [ 920.579809][ T31] nfsd_nl_threads_set_doit+0x718/0xc60 [ 920.636303][ T31] genl_family_rcv_msg_doit+0x214/0x300 [ 920.641945][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 920.729790][ T31] ? genl_get_cmd+0x3ef/0x720 [ 920.755511][ T31] ? bpf_lsm_capable+0x9/0x10 [ 920.760430][ T31] ? security_capable+0x80/0x260 [ 920.768920][T11705] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 920.812258][ T31] genl_rcv_msg+0x560/0x800 [ 920.817030][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 920.842650][ T31] ? __pfx_nfsd_nl_threads_set_doit+0x10/0x10 [ 920.848957][ T31] netlink_rcv_skb+0x159/0x420 [ 920.875347][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 920.894303][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 920.899666][ T31] ? netlink_deliver_tap+0x1ae/0xcc0 [ 920.912597][ T31] genl_rcv+0x28/0x40 [ 920.916627][ T31] netlink_unicast+0x5aa/0x870 [ 920.921602][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 920.944848][ T31] netlink_sendmsg+0x8b0/0xda0 [ 920.949860][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 920.968795][ T31] ? __import_iovec+0x1d2/0x640 [ 920.975068][ T31] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 920.980893][ T31] ____sys_sendmsg+0xa54/0xc30 [ 920.986504][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 920.992168][ T31] ? try_to_wake_up+0x644/0x1a80 [ 920.997625][ T31] ___sys_sendmsg+0x190/0x1e0 [ 921.004715][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 921.009945][ T31] ? futex_private_hash_put+0x107/0x1c0 [ 921.016995][ T31] __sys_sendmsg+0x170/0x220 [ 921.021625][ T31] ? __pfx___sys_sendmsg+0x10/0x10 [ 921.027217][ T31] ? __x64_sys_futex+0x34f/0x4d0 [ 921.032490][ T31] do_syscall_64+0x106/0xf80 [ 921.037798][ T31] ? clear_bhb_loop+0x40/0x90 [ 921.043454][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 921.049357][ T31] RIP: 0033:0x7f91a1b9bf79 [ 921.056677][ T31] RSP: 002b:00007f91a29ab028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 921.068562][ T31] RAX: ffffffffffffffda RBX: 00007f91a1e16270 RCX: 00007f91a1b9bf79 [ 921.077240][ T31] RDX: 0000000000004000 RSI: 0000200000000040 RDI: 0000000000000006 [ 921.086547][ T31] RBP: 00007f91a1c327e0 R08: 0000000000000000 R09: 0000000000000000 [ 921.095092][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 921.103446][ T31] R13: 00007f91a1e16308 R14: 00007f91a1e16270 R15: 00007ffd77db1958 [ 921.111437][ T31] [ 921.212503][ T31] [ 921.212503][ T31] Showing all locks held in the system: [ 921.220369][ T31] 1 lock held by khungtaskd/31: [ 921.332473][ T31] #0: ffffffff8e7e9220 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 921.404347][ T31] 2 locks held by getty/5588: [ 921.409068][ T31] #0: ffff8880378fd0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 921.492636][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x1500 [ 921.562996][ T31] 5 locks held by kworker/u8:11/6368: [ 921.568644][ T31] #0: ffff88801c6ae948 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x1287/0x1920 [ 921.672750][ T31] #1: ffffc900053c7d08 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x93c/0x1920 [ 921.726395][ T31] #2: ffffffff905f9170 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xb8/0x920 [ 921.793076][ T31] #3: ffffffff90611a68 (rtnl_mutex){+.+.}-{4:4}, at: ops_undo_list+0x7ec/0xab0 [ 921.886126][ T31] #4: ffffffff8e7f4e38 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x19e/0x3c0 [ 921.935885][ T31] 2 locks held by syz-executor/11105: [ 921.941670][ T31] #0: ffff88806ef640e0 (&type->s_umount_key#53){+.+.}-{4:4}, at: deactivate_super+0xdf/0x110 [ 921.964125][ T31] #1: ffffffff8ec58408 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 921.974282][ T31] 2 locks held by syz.5.2052/15815: [ 921.979494][ T31] #0: ffffffff906bdbb0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 921.990937][ T31] #1: ffffffff8ec58408 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x718/0xc60 [ 922.001541][ T31] 2 locks held by syz.7.2084/16029: [ 922.007506][ T31] #0: ffffffff906bdbb0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 922.016113][ T31] #1: ffffffff8ec58408 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x718/0xc60 [ 922.027518][ T31] 3 locks held by kworker/0:2/16115: [ 922.033209][ T31] #0: ffff88813fe63548 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x1287/0x1920 [ 922.048080][ T31] #1: ffffc90004737d08 (free_ipc_work){+.+.}-{0:0}, at: process_one_work+0x93c/0x1920 [ 922.058156][ T31] #2: ffffffff8e7f4e38 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x27f/0x3c0 [ 922.073084][ T31] 2 locks held by syz.8.2158/16434: [ 922.078350][ T31] #0: ffff88802370e0e0 (&type->s_umount_key#53){+.+.}-{4:4}, at: deactivate_super+0xdf/0x110 [ 922.092114][ T31] #1: ffffffff8ec58408 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 922.102459][ T31] 2 locks held by syz-executor/16512: [ 922.108697][ T31] #0: ffff88803119a0e0 (&type->s_umount_key#53){+.+.}-{4:4}, at: deactivate_super+0xdf/0x110 [ 922.120201][ T31] #1: ffffffff8ec58408 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 922.130779][ T31] 3 locks held by syz.4.2428/18164: [ 922.136746][ T31] #0: ffff88809f474ec0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_dev_do_close+0x26/0xb0 [ 922.146943][ T31] #1: ffff88809f4740c0 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x35c/0x1240 [ 922.160705][ T31] #2: ffffffff908a99e8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xbb/0x280 [ 922.172175][ T31] 1 lock held by syz.1.2448/18261: [ 922.181052][ T31] #0: ffffffff90611a68 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x38/0x220 [ 922.193271][ T31] 4 locks held by syz.3.2450/18274: [ 922.198675][ T31] #0: ffff8880a1704ec0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_dev_do_close+0x26/0xb0 [ 922.209429][ T31] #1: ffff8880a17040c0 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x35c/0x1240 [ 922.220270][ T31] #2: ffffffff908a99e8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xbb/0x280 [ 922.230747][ T31] #3: ffff88802b2ceaf8 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x80/0x770 [ 922.240599][ T31] 1 lock held by syz.9.2454/18293: [ 922.246573][ T31] #0: ffffffff90611a68 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x38/0x220 [ 922.307479][ T31] [ 922.309854][ T31] ============================================= [ 922.309854][ T31] [ 922.359422][ T31] NMI backtrace for cpu 0 [ 922.359443][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G U L syzkaller #0 PREEMPT(full) [ 922.359478][ T31] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 922.359485][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 922.359497][ T31] Call Trace: [ 922.359504][ T31] [ 922.359512][ T31] dump_stack_lvl+0x100/0x190 [ 922.359543][ T31] nmi_cpu_backtrace.cold+0x12d/0x151 [ 922.359572][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 922.359598][ T31] nmi_trigger_cpumask_backtrace+0x1d7/0x230 [ 922.359622][ T31] sys_info+0x141/0x190 [ 922.359639][ T31] watchdog+0xd25/0x1050 [ 922.359671][ T31] ? __pfx_watchdog+0x10/0x10 [ 922.359697][ T31] ? __kthread_parkme+0x18c/0x230 [ 922.359719][ T31] ? kthread+0x13a/0x450 [ 922.359739][ T31] ? __pfx_watchdog+0x10/0x10 [ 922.359763][ T31] kthread+0x370/0x450 [ 922.359783][ T31] ? __pfx_kthread+0x10/0x10 [ 922.359806][ T31] ret_from_fork+0x754/0xd80 [ 922.359832][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 922.359859][ T31] ? __switch_to+0x7b4/0x1120 [ 922.359878][ T31] ? __pfx_kthread+0x10/0x10 [ 922.359900][ T31] ret_from_fork_asm+0x1a/0x30 [ 922.359927][ T31] [ 922.664285][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 922.671280][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G U L syzkaller #0 PREEMPT(full) [ 922.681973][ T31] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 922.687172][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 922.697624][ T31] Call Trace: [ 922.700921][ T31] [ 922.703894][ T31] dump_stack_lvl+0x100/0x190 [ 922.708609][ T31] vpanic+0x552/0x970 [ 922.712718][ T31] ? __pfx_vpanic+0x10/0x10 [ 922.717273][ T31] ? nmi_trigger_cpumask_backtrace+0x182/0x230 [ 922.723624][ T31] panic+0xd1/0xe0 [ 922.727468][ T31] ? __pfx_panic+0x10/0x10 [ 922.731899][ T31] ? nmi_trigger_cpumask_backtrace+0x1b5/0x230 [ 922.738168][ T31] ? nmi_trigger_cpumask_backtrace+0x1f6/0x230 [ 922.744368][ T31] ? nmi_trigger_cpumask_backtrace+0x200/0x230 [ 922.750618][ T31] ? watchdog.cold+0x198/0x1ca [ 922.755744][ T31] ? watchdog+0xd35/0x1050 [ 922.760445][ T31] watchdog.cold+0x1a9/0x1ca [ 922.765055][ T31] ? __pfx_watchdog+0x10/0x10 [ 922.769744][ T31] ? __kthread_parkme+0x18c/0x230 [ 922.774859][ T31] ? kthread+0x13a/0x450 [ 922.779371][ T31] ? __pfx_watchdog+0x10/0x10 [ 922.784239][ T31] kthread+0x370/0x450 [ 922.788320][ T31] ? __pfx_kthread+0x10/0x10 [ 922.792938][ T31] ret_from_fork+0x754/0xd80 [ 922.797817][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 922.803202][ T31] ? __switch_to+0x7b4/0x1120 [ 922.807995][ T31] ? __pfx_kthread+0x10/0x10 [ 922.812614][ T31] ret_from_fork_asm+0x1a/0x30 [ 922.817572][ T31] [ 922.820983][ T31] Kernel Offset: disabled [ 922.825402][ T31] Rebooting in 86400 seconds..