last executing test programs: 7m8.001762528s ago: executing program 2 (id=2809): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_tcp_metrics(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$auto_TCP_METRICS_CMD_GET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="00000010", @ANYRES16=r1, @ANYBLOB="01002bbd7000fbdbdf2501000000080001000a01010114000c00fc00"/42], 0x30}, 0x1, 0x0, 0x0, 0x4004055}, 0x20000000) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc3\xdd\xa7\xee$\xf5\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xe6\x06g\x1a\xfc\xa8\x02\vw\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r3 = socket(0xa, 0x2, 0x3a) setsockopt$auto(r3, 0x29, 0x19, &(0x7f0000000040)='!\x00', 0x1ff) write$auto_safesetid_uid_file_fops_securityfs(0xffffffffffffffff, 0x0, 0x0) prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x8, 0x3, 0x0, 0x0, 0x2) socket(0x10, 0x4, 0xffffffc0) openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, 0x0, 0x200, 0x0) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r4, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d7) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/i8042/serio0/scroll\x00', 0x2062, 0x0) write$auto(r5, &(0x7f00000001c0)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) write$auto(r5, &(0x7f0000000440)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb', 0x98c7) r6 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x20881, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x401bf, 0x7352, 0x10003c, 0x1, 0x1ffde, 0x7, 0x3, 0xfffffffffffffffe, 0x9, 0x3, 0x6, 0x4, 0xb4, 0x9, 0x9, 0x10005, 0x80, 0x4, 0xffefffff, 0x7, 0x2000, 0x203, 0x0, 0x20e9d17d, 0x400300000000000, 0xdb, 0x0, 0x80000000, 0xf04, [0xfffffffffffffffe, 0x0, 0x2, 0xfffffffffffffffd, 0x2, 0xfffffffffffffffe, 0x0, 0x20000000000007, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0xff5b, 0xc72, 0x0, 0x9, 0x0, 0x66, 0x2, 0x1, 0x0, 0x0, 0x80000, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x8c]}, 0x2, 0xd) ioctl$auto_EVIOCGRAB(r6, 0x40044590, &(0x7f0000000000)=0x2) write$auto(r6, &(0x7f0000000040)='/dev/input/event1\x00', 0x10001) mmap$auto(0x800000000, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x4, 0x15) close_range$auto(0x2, 0x8, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000001c0), r7) sendmsg$auto_CTRL_CMD_GETPOLICY(r7, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x20, r8, 0x301, 0x4070bd25, 0x25dfdbff, {}, [@CTRL_ATTR_FAMILY_NAME={0xc, 0x2, 'nl80211\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x30000881}, 0xc040810) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x3, 0x1ff, 0x1001, 0x5, 0x717e, 0x0, 0x7, 0x200000000000003, 0xd, 0x2, 0x80003, 0x4, 0x1ffffffffffd, 0xb5, 0xfffffffffffffffe, 0x7, 0x10002, 0x7f, 0x2a2, 0x5, 0xa, 0x22000, 0x200, 0x4, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, [0x56, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x4, 0x400, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0xffffffffffffffff, 0x100000000000]}, 0x1fe, 0xd) dup3$auto(0x8000000000000001, 0x5, 0x800080000) 7m7.135124496s ago: executing program 2 (id=2813): mmap$auto(0x0, 0x20009, 0xdf, 0xeb5, 0x401, 0x8000) r0 = openat$auto_proc_timens_offsets_operations_base(0xffffffffffffff9c, &(0x7f0000000040), 0xc0401, 0x0) write$auto_proc_timens_offsets_operations_base(r0, &(0x7f0000000140)="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", 0x1000) lseek$auto(0x3, 0x7fffffffffffffff, 0x1) r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) ioctl$auto_SNDCTL_DSP_SPEED(r1, 0xc0045002, 0x0) lsm_list_modules$auto(0x0, 0x0, 0x0) r2 = socket(0x2, 0x801, 0x106) lsm_list_modules$auto(&(0x7f0000000000)=0x5, &(0x7f0000000040)=0x1, 0x1ff) getsockopt$auto(r2, 0x11c, 0x3, 0x0, 0x0) 7m7.018506183s ago: executing program 2 (id=2814): mmap$auto(0x0, 0x80, 0x6, 0xeb1, 0x401, 0xffffffffffff7fff) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000400)='/proc/sys/net/ipv4/tcp_available_congestion_control\x00', 0x0, 0x0) bpf$auto(0x0, 0x0, 0x4f4) mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000) capset$auto(0x0, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(0xffffffffffffffff, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) openat$auto_sg_fops_sg(0xffffffffffffff9c, 0x0, 0x60042, 0x0) io_uring_setup$auto(0x6, 0x0) openat$auto_generic(0xffffffffffffff9c, &(0x7f0000000040)='/proc/kmsg\x00', 0x80900, 0x0) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self/net/rt_cache\x00', 0x2000, 0x0) select$auto(0x10, 0x0, 0x0, &(0x7f0000000140)={[0x1ff, 0x4, 0xd3e, 0x1, 0x948b, 0x3, 0x800295f4da0a, 0x2, 0x3, 0x62, 0x80000001, 0x50a7, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7f, 0xd, 0x1, 0x948f, 0x1005, 0x206, 0x7, 0xfffffffffffffff6, 0x7, 0x9, 0x79d, 0x6, 0x100000000000000, 0xfffffffffffffffe, 0xf]}, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x6, 0x8000) capget$auto(0x0, 0xfffffffffffffffe) capset$auto(0x0, &(0x7f0000000180)={0x1, 0x7, 0x6}) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) ioctl$auto(r0, 0x4b44, 0x1) r1 = openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/debug/usb/usbmon/33u\x00', 0x20202, 0x0) pread64$auto(r1, 0x0, 0xfffe, 0x9) open(&(0x7f0000000200)='./file0\x00', 0x440000, 0x109) close_range$auto(0x2, 0xa, 0x0) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000100)='/dev/pts/ptmx\x00', 0xa0540, 0x0) ioctl$auto(r2, 0x80045430, 0x38) capset$auto(&(0x7f0000000080)={0xbf52, 0xffffffffffffffff}, &(0x7f00000001c0)={0x10001, 0xc2, 0x6}) 7m6.614641306s ago: executing program 2 (id=2815): close_range$auto(0x2, 0x8, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0xc) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) setsockopt$auto_SO_PREFER_BUSY_POLL(r0, 0x1, 0x45, &(0x7f0000000040)='\x00', 0x2) (async) setsockopt$auto_SO_PREFER_BUSY_POLL(r0, 0x1, 0x45, &(0x7f0000000040)='\x00', 0x2) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r2) ioctl$auto_KVM_GET_MSRS(r1, 0x4008ae89, &(0x7f00000000c0)={0xdd, 0x0, [{0x40000010, 0x400, 0x2}]}) (async) ioctl$auto_KVM_GET_MSRS(r1, 0x4008ae89, &(0x7f00000000c0)={0xdd, 0x0, [{0x40000010, 0x400, 0x2}]}) 7m6.392435689s ago: executing program 2 (id=2816): r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x80502, 0x0) write$auto_tty_fops_tty_io(r0, &(0x7f0000000340)="2a3f9218659200008a677517d554c80b25c30000000000000071dde0152c549d44cf790bd304059e64ec347e9b173c52324e7de19a503727fe47d78e0bc2c5590e61b5d86887240d03bca3460f12f2107274ade4e6e53a728e346cef781b623364989314a43e5fd9e20e24417d6b21117b3308557a7b2aa2cb541dea5cb3b6a521b869ac5ff14cb52c4487dd3a3f4a81ff5957aa1109af5a3a1ce466381cc21fea0c67d8a165f29a6b9537b178bfdd013443481ba707ba4632e0478b951e619775f83f13b36d6426", 0xc8) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) futex$auto(0x0, 0xfff, 0x5, 0x0, 0x0, 0x802) r4 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000004c0), r3) sendmsg$auto_ETHTOOL_MSG_PAUSE_GET(r3, &(0x7f0000001a00)={0x0, 0x0, &(0x7f00000019c0)={&(0x7f0000000140)={0x20, r4, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@ETHTOOL_A_PAUSE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x40080}, 0x0) mmap$auto(0x0, 0x7, 0xdf, 0x9b72, 0x2, 0x8000) r5 = getpgid$auto(0x0) kcmp$auto_KCMP_VM(r5, r5, 0x1, 0x4, 0x7fffffff) getpriority$auto_PRIO_PGRP(0x1, r5) waitid$auto_P_PGID(0x2, 0xffffffffffffffff, &(0x7f0000000140)={@_si_pad}, 0xfffffff4, &(0x7f00000001c0)={{0x8000, 0x8000000000000000}, {0xd976, 0x8}, 0x8, 0x4b, 0xffffffff7fffffff, 0x5, 0xa23, 0x3, 0x2, 0x5, 0x9, 0x3fd, 0x5, 0x6, 0x3, 0x7fffffffffffffff}) ioctl$auto(0x3, 0x402c542b, 0x38) 7m6.237699193s ago: executing program 2 (id=2818): openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000e00)=ANY=[@ANYBLOB="dc0a0000", @ANYRES16=0x0, @ANYBLOB="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"], 0xadc}, 0x1, 0x0, 0x0, 0x874e4331d61c4eaa}, 0x4010) mmap$auto(0x0, 0x2020009, 0x100000000000003, 0xeb1, 0xfffffffffffffffa, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x1, 0x0) io_uring_setup$auto(0x2, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "abe6de3d6468fe8000"}, 0x55) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) ioctl$auto(0x3, 0x400454ca, 0x38) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/net/udp\x00', 0x80100, 0x0) socketpair$auto(0xe, 0x4, 0x9, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/platform/mac802154_hwsim/ieee802154/phy1/net/wpan1/queues/tx-0/byte_queue_limits/stall_cnt\x00', 0x0, 0x0) read$auto(r0, 0x0, 0x20) write$auto(0x3, 0x0, 0xfdef) 6m51.066152896s ago: executing program 32 (id=2818): openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000e00)=ANY=[@ANYBLOB="dc0a0000", @ANYRES16=0x0, @ANYBLOB="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"], 0xadc}, 0x1, 0x0, 0x0, 0x874e4331d61c4eaa}, 0x4010) mmap$auto(0x0, 0x2020009, 0x100000000000003, 0xeb1, 0xfffffffffffffffa, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x1, 0x0) io_uring_setup$auto(0x2, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "abe6de3d6468fe8000"}, 0x55) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) ioctl$auto(0x3, 0x400454ca, 0x38) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/net/udp\x00', 0x80100, 0x0) socketpair$auto(0xe, 0x4, 0x9, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/platform/mac802154_hwsim/ieee802154/phy1/net/wpan1/queues/tx-0/byte_queue_limits/stall_cnt\x00', 0x0, 0x0) read$auto(r0, 0x0, 0x20) write$auto(0x3, 0x0, 0xfdef) 3m12.618449877s ago: executing program 4 (id=3695): mmap$auto(0x0, 0x2020009, 0x1000000000000006, 0xf8, 0xfffffffffffffffa, 0x8000) (async) close_range$auto(0x2, 0x8, 0x0) (async) ioctl$auto_FIFREEZE(0xffffffffffffffff, 0xc0045878, 0x0) (async) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) getpid() (async) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x100, 0x0) (async) select$auto(0x9, 0x0, 0x0, &(0x7f0000000200)={[0x8001ff, 0x7, 0xd, 0x8fd6, 0x948d, 0x3, 0x80, 0x3, 0x6, 0x8000000000000001, 0x7, 0x2, 0xd, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, 0x0, 0x8000, 0x0) (async) openat$auto_fops_ulong_ro_(0xffffffffffffff9c, 0x0, 0x40000, 0x0) (async) openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, 0x0, 0x40e342, 0x0) (async) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000440)={'netdevsim0\x00', 0x0}) bpf$auto(0x5, &(0x7f0000000300)=@bpf_attr_3={0x3, 0x4, 0xf, 0x63, 0x400, 0xfffffffd, 0x1, 0x80f0c8, 0x2, "38c1d5cbcb9f6b5e511f0cd8ed068f65", r1, 0x2, 0xffffffffffffffff, 0xe4, 0x2, 0x5, 0x3ad, 0x3, 0x0, 0x3, @attach_prog_fd, 0x6, 0xffff, 0x2, 0x81, 0xfffffffe}, 0x4a) (async) mseal$auto(0x0, 0x7dda, 0x0) close_range$auto(0x2, 0x8, 0x0) (async) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) fanotify_init$auto(0x65, 0x2) pipe$auto(0x0) dup2$auto(0x5, 0x4) (async) splice$auto(0x4, 0x0, 0x2, 0x0, 0x80000001, 0x9) (async) write$auto(0x6, 0x0, 0x100000001) (async) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) (async) close_range$auto(0x2, 0x8, 0x0) (async) mmap$auto(0x0, 0x9, 0x2, 0x40eb2, 0x401, 0x300000000000) getsockopt$auto(0xffffffffffffffff, 0x11c, 0x1, 0x0, 0x0) close_range$auto(0xffffffffffffffff, 0x8, 0x8) (async) fanotify_init$auto(0x65, 0x2) (async) socket(0x1d, 0x2, 0x2) (async) connect$auto(0x3, 0x0, 0x55) 3m11.936381569s ago: executing program 4 (id=3699): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_tcp_metrics(&(0x7f0000000300), 0xffffffffffffffff) unshare$auto(0x4) pread64$auto(0xffffffffffffffff, 0x0, 0x7ff, 0x400) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/net/icmp\x00', 0x181800, 0x0) pread64$auto(r0, &(0x7f0000000000)='/proc/thread-self/net/tcp6\x00\xd2)\x8e\x892\x82\x19\xfd\x03\xc3\x8d\xd7D\bz\xde5u4\xddS\xe6\x1a\x8a`\xad0\x98|\xbc\x00\x98\b\x0ey\xcb`\x9b\x91r\xd5\x13\x9e\xdd4\xe7\xb7\x94P\x8fBlm\x04eAW\xbc0\x9b\xbd\x8f\xf5];\x94\x18\xf0\v\xd7\xf4P\xd3\x9e,Q\xd8\x16\x989l\x03\a\xcc\x1e\xb9\xe9{\xeeS\xa9\xc60\x00\xb5&\x9e\xdbk{F\x18\xa8\xba*G\xd3\x80\xb1G.\xec1\x96uP\x97\x8co\xf1\xa6\xd5\xea\xc8L3|a\xb3\xaa\x90~Y\xb19\xad\xdc\x05o\x98g\xd4\x10]5\x95\xd0\xabJC\x06\xd0c\xd1Ra\xf7\xc4n\xdf\xe4\xc7\x03\x19x\xbb\v\x00\t\xde\xf5\x93\xfb\xfb#\xbd\xc0S\f57\x83\xdd\xaa\xf0\x9c\xd3G\xe1\x00'/232, 0x3ef, 0x9) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000400)='/dev/admmidi2\x00', 0xe0440, 0x0) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc3\xdd\xa7\xee$\xf5\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xe6\x06g\x1a\xfc\xa8\x02\vw\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x3, 0x1ff, 0x1001, 0x5, 0x717e, 0x0, 0x7, 0x200000000000003, 0xd, 0x2, 0x80003, 0x4, 0x1ffffffffffd, 0xb5, 0xfffffffffffffffe, 0x7, 0x10002, 0x7f, 0x2a2, 0x5, 0xa, 0x22000, 0x200, 0x4, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, [0x56, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x400, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0xffffffffffffffff, 0x100000000000]}, 0x1fe, 0xd) dup3$auto(0x8000000000000001, 0x5, 0x800080000) r3 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f00000003c0), 0x1541, 0x0) ioctl$auto__ctl_fops_dm_ioctl(r3, 0xfffffffffffffd03, &(0x7f00000001c0)) mmap$auto(0x0, 0x2000d, 0x4000000000df, 0xeb1, 0x404, 0x8000) close_range$auto(0x2, 0xa, 0x0) inotify_init1$auto(0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/platform/vhci_hcd.0/usbip_debug\x00', 0x8002, 0x0) write$auto(0x3, 0x0, 0x5c8) socket(0x15, 0x5, 0x0) connect$auto(0x3, &(0x7f00000018c0)=@ethernet={0x1, @remote}, 0x8) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/conf/ip6tnl0/bootp_relay\x00', 0x5014c0, 0x0) openat$auto_tracing_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/trace\x00', 0x82000, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x89fc, &(0x7f0000000040)={'veth0_macvtap\x00'}) ioctl$auto_TUNSETNOCSUM(r2, 0x400454c8, &(0x7f0000000080)=0x7) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001180), r4) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000040)={0x1c, r5, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@HWSIM_ATTR_REG_CUSTOM_REG={0x8, 0xc, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x404c091}, 0x40000) mmap$auto(0x0, 0x2020009, 0xfffffffffffffffd, 0xeb1, 0xfffffffffffffffa, 0x8000) r6 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_TREAD64(r6, 0x400454a4, 0x0) 3m10.794132697s ago: executing program 4 (id=3703): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2b, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @remote}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000000)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xfffffffd}, 0x10001}, 0x5, 0x20000000) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) setsockopt$auto(0x3, 0x1, 0x21, 0x0, 0x9) write$auto(0x3, 0x0, 0xfffffdef) connect$auto(0x3, 0x0, 0x401) r1 = openat$auto_tracing_pipe_fops_trace(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/tracing/trace_pipe\x00', 0x404801, 0x0) close_range$auto(0x2, r1, 0xa5) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) bpf$auto(0x8000000, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000002480), 0xffffffffffffffff) sendmsg$auto_TIPC_NL_MON_GET(r3, &(0x7f00000083c0)={0x0, 0x0, &(0x7f0000008380)={&(0x7f0000003680)={0x14, r4, 0x32f, 0x70bd2a, 0x25dfdbff, {0x12, 0x0, 0xf0}}, 0x14}, 0x1, 0x0, 0x0, 0x4801}, 0x8094) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f0000000200)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d5) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/i8042/serio0/scroll\x00', 0x2062, 0x0) sendmsg$auto_ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, 0x0, 0x20000054) write$auto(r5, &(0x7f00000001c0)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) write$auto(r5, &(0x7f0000000440)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb', 0x98c7) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) unshare$auto(0x40000080) r6 = socketpair$auto(0x81e, 0x5, 0x8000000000000000, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x700fdef) write$auto(r6, &(0x7f0000000080)='/dev/snd/midiC2D0\x00', 0x8) mmap$auto(0x0, 0x2000d, 0x7, 0xeb1, 0x404, 0x10008000) write$auto_console_fops_tty_io(0xffffffffffffffff, &(0x7f0000001bc0)="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", 0x84f) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x100000000000000) 3m8.154229838s ago: executing program 4 (id=3709): openat$auto_nodes_fops_netdebug(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) (async) socket(0x2, 0x1, 0x106) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) r0 = bpf$auto(0x0, 0x0, 0x6f4) (async) mmap$auto(0x0, 0xa00006, 0x400002, 0x40eb1, 0x602, 0x300000000000) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r1 = socket(0x2, 0x1, 0x106) bind$auto(r1, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) (async) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) (async) mknod$auto(&(0x7f0000000040)='./file0\x00', 0x1001, 0x4) (async) open$dir(&(0x7f00000001c0)='./file0\x00', 0x201, 0x14) (async) r2 = open(&(0x7f00000002c0)='./file0\x00', 0x200, 0x1c7) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r2) (async) sendmsg$auto_NL80211_CMD_GET_PROTOCOL_FEATURES(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000740)=ANY=[], 0xc0}, 0x1, 0x0, 0x0, 0x841}, 0x4000800) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x109001, 0x0) (async) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D2\x00', 0x1, 0x0) (async) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) write$auto(r3, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) (async) select$auto(0x9, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da07, 0x3, 0x3, 0x65, 0x8000001f, 0x1000, 0x6d3e, 0x9, 0x2, 0x8]}, 0x0) (async) sendmsg$auto(0xffffffffffffffff, 0x0, 0xfff) ioctl$auto_UI_SET_KEYBIT(r0, 0x40045565, &(0x7f0000000140)=0xc) select$auto(0x9, &(0x7f00000000c0)={[0xeeda, 0x7, 0x100000001, 0x9, 0x6, 0x1ff, 0x6, 0x3, 0x4, 0x4618ecd2, 0x3, 0x4303, 0x1, 0x9a8c, 0x9, 0x10001]}, 0x0, 0x0, &(0x7f0000000280)={0x6, 0xcb}) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) (async) write$auto(0x3, 0x0, 0xfffffdef) (async) r4 = getpid() process_vm_readv$auto(r4, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000040), 0xffffffff}, 0x6, 0x0) (async) getuid() (async) shmctl$auto_SHM_STAT_ANY(0x3, 0xf, &(0x7f00000006c0)={{0x2, 0xffffffffffffffff, 0xee01, 0x20000, 0x2ac1, 0x5, 0x400}, 0xfff, 0x9, 0x5, 0x5, @inferred, @raw=0x101, 0xf8, 0x0, &(0x7f0000000500)="57846fc05e58128db2171000b5ebb91d4743227cb3a7c1785cdac20480040f34e587857bc4e5cefaee17f067e1d2a72e6ef7d497f98bcad59f0a6b692426ea4ace93dbd1bff3563958ddf7e7e471d2a566fb05fadcd18a6c83cf06d35c75e88a060f56c4ed7452bf5b28a646ec0e65a0eba6cf951fbb4dace7f54516e574938a42658acea55d5240d9c267e782a69e5a1892fcd956e867233efcfc3736da3308e1a896b1cd800a0b411ad43f82cdf86a1771dc22590a83b2cbcc3f1cd0ccb47483c302b9197be6012cf2a7bdb223d56d66cad140682d3036bc56a31f5b62", &(0x7f0000000d40)="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"}) 3m7.14844415s ago: executing program 4 (id=3714): r0 = socket(0xa, 0x5, 0x0) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop13\x00', 0x60742, 0x0) write$auto(r1, &(0x7f0000000040)='//\xf2\x00', 0x80000000) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) timer_create$auto(0x0, 0x0, 0x0) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r2, 0x0, 0x0) mmap$auto(0x6, 0x4, 0x4000000000dd, 0x40eb1, r2, 0x300000000000) mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) unshare$auto(0x40000080) mmap$auto(0x0, 0x2020009, 0x2, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0xd, 0x2, 0x6, 0x7, 0x8, 0xffffffffffffffff, [], {0x6, 0x6, 0xf, 0x29f, 0x100, 0x83, 0x101, 0x6, 0x2}, {0x100, 0x1, 0x52, 0x5, 0x1, 0x40, 0x76c5, 0x8, 0x100000000}}) io_uring_register$auto(0x2, 0x11, &(0x7f0000000180), 0x83) sendmsg$auto_NL80211_CMD_LEAVE_OCB(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000028bd7000fcdbdf256d002a85c36c0a00107c4c000400d1000600b4000300"], 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) mbind$auto(0x8000, 0xfa9d, 0x2, &(0x7f0000000280)=0x20000000000000fb, 0x3, 0x1) set_mempolicy_home_node$auto(0x0, 0x2010001, 0x0, 0x0) mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000) shutdown$auto(r0, 0xfff) socket(0x2, 0x1, 0x0) r3 = openat$auto_proc_pid_numa_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/numa_maps\x00', 0x22000, 0x0) read$auto_proc_sessionid_operations_base(r3, &(0x7f00000000c0)=""/4096, 0x1000) 3m5.320702826s ago: executing program 4 (id=3722): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x6, 0x8000) move_pages$auto(0x1, 0x20007, 0x0, 0x0, 0x0, 0x8000000000000000) r0 = socket(0x1d, 0x1, 0x7fff) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp1\x00', 0x20002, 0x0) ioctl$auto_SNDCTL_DSP_POST(r3, 0x5008, 0x0) ioctl$auto_SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f0000000440)="0db1eb") ioctl$auto_SNDCTL_DSP_SETFMT(r3, 0xc0045005, &(0x7f0000000000)="388e3011") sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, 0x0, 0x8000) ioctl$auto_SOUND_MIXER_READ_RECSRC2(r2, 0x80044dff, &(0x7f0000000040)="4b9adba8d7568c2608028424cfa87808ff0c477ca02213") openat$auto_tracing_entries_fops_trace(0xffffffffffffff9c, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/system/node/node1/compact\x00', 0xc2481, 0x0) writev$auto(r4, &(0x7f0000000080)={&(0x7f0000000040), 0x1000}, 0x3) r5 = socket(0x18, 0x5, 0x1) connect$auto(r5, 0x0, 0x3a) syz_genetlink_get_family_id$auto_smbd_genl(&(0x7f0000000240), r0) sendmsg$auto_KSMBD_EVENT_LOGIN_RESPONSE(r5, 0x0, 0x30004850) msync$auto(0x1ffff000, 0x1800000000000fe, 0x400000004) close_range$auto(0x2, 0x8, 0x0) r6 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) ioctl$auto(r6, 0x4b47, 0x1) socket(0x25, 0x1, 0x0) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x20040000}, 0x880) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, 0x0, 0x106, 0x0, 0x1, 0x3}, 0xed7138c}, 0x7, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)={0x24, r8, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NFSD_A_SERVER_THREADS={0x8, 0x1, 0x4a}, @NFSD_A_SERVER_GRACETIME={0x8, 0x2, 0xb}]}, 0x24}}, 0x4000) 2m50.154001269s ago: executing program 33 (id=3722): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x6, 0x8000) move_pages$auto(0x1, 0x20007, 0x0, 0x0, 0x0, 0x8000000000000000) r0 = socket(0x1d, 0x1, 0x7fff) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp1\x00', 0x20002, 0x0) ioctl$auto_SNDCTL_DSP_POST(r3, 0x5008, 0x0) ioctl$auto_SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f0000000440)="0db1eb") ioctl$auto_SNDCTL_DSP_SETFMT(r3, 0xc0045005, &(0x7f0000000000)="388e3011") sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, 0x0, 0x8000) ioctl$auto_SOUND_MIXER_READ_RECSRC2(r2, 0x80044dff, &(0x7f0000000040)="4b9adba8d7568c2608028424cfa87808ff0c477ca02213") openat$auto_tracing_entries_fops_trace(0xffffffffffffff9c, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/system/node/node1/compact\x00', 0xc2481, 0x0) writev$auto(r4, &(0x7f0000000080)={&(0x7f0000000040), 0x1000}, 0x3) r5 = socket(0x18, 0x5, 0x1) connect$auto(r5, 0x0, 0x3a) syz_genetlink_get_family_id$auto_smbd_genl(&(0x7f0000000240), r0) sendmsg$auto_KSMBD_EVENT_LOGIN_RESPONSE(r5, 0x0, 0x30004850) msync$auto(0x1ffff000, 0x1800000000000fe, 0x400000004) close_range$auto(0x2, 0x8, 0x0) r6 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) ioctl$auto(r6, 0x4b47, 0x1) socket(0x25, 0x1, 0x0) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x20040000}, 0x880) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, 0x0, 0x106, 0x0, 0x1, 0x3}, 0xed7138c}, 0x7, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)={0x24, r8, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NFSD_A_SERVER_THREADS={0x8, 0x1, 0x4a}, @NFSD_A_SERVER_GRACETIME={0x8, 0x2, 0xb}]}, 0x24}}, 0x4000) 2m32.690210258s ago: executing program 3 (id=3857): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:01/wakeup/wakeup1/prevent_suspend_time_ms\x00', 0x0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000040)=""/62, 0x3e) r1 = openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/config/target/dbroot\x00', 0x0, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/netdevsim0/del_port\x00', 0xa001, 0x0) write$auto(r2, &(0x7f0000000380)='0\x81=\"\xad/\x8d\b\x00\x18\xa4\xb0\xb4\xd9\x82=~\x17\xfb&L\xeb=j\a\xf1y\xb3\"\xeb\a\xdd\xf4\xf4Ry\xee\xd7\x1e\x1c\x86\x0f\xcf\x7f\xbf\xab\x12{\xc2\xc2*\xc1M+6/v8\xea\xe9\x85s4\xfe\xe5\t\x7fc\xfb7^\xb86J_\x1d1s!\x01\xff\xff\xff\xff\xff\xff\xff\x1dF\xe6\xf6\x17\x10+\xc0\xb0\xafc\x99\xd4\x150Y~\x1e\xe2\xd6x4fW\x13\xc4U`\x9e-X\xd7\xe2H^\fLS`\xfc\xbb\r\f\x00\xeaN\xa5\xd2\x82;\x7f\xa0.\x9a\xfb\x8d\xf3l\xf2\xd3\x95\xc1M5\xcb\xa6I\x067\xe36\xea\xe9\xe3\xf44oT_`8\xb3\xef\x04 \x05K\xf9\x87pl\xac\x86\nE\xc7e\xc5Q\x89\xcd@\x1c\x92\x00\x87\x976\x9f>\xa2\xcfm\xec\r\x11\x7f\x00\x00\x00\xb1\xde@\x02\xce\x03\xb7\xb1\xfb\x9fr\v\xb2\xe3\xc7\b\x85K /zm\x7f\x8fg,p\a\xc8\x7f\xa5\x87\x02\x87\xbbR=A\x00\x1f\x8a\xa7/Q\"J\xbb\xb0m\xf2SP\x84\x84S\xf0\xba\x9a\xf6\xb6`WI\xba\xba*8\x9f\xea\xe8K/\x98\xbc7~>\x12\x9buB\xcb\xe4\x8aKf\xba\x8c\x19m\xe6I\x02\xde\x80\x9d\x87}\xf4\xbd9\xaa\xd6\xdb1]\xde\xa0r\x14\xca56^\x94\xd2\xd8\xe6}9\x91\xb6\xf7\xa1=\x96\x11\xf1\\\xa91\x0e\xd1\xe4z\xc1;Pw!\x8b\xf5{\xc7Xd\xf1\xf2}\x96EVf\xc9\xa8\xcd\xe4\xc9\x8d\x1d7\xd5\x94\\\xb5\r\xd2\xaa\xe6H\xfe)\xb3a\x04\x1eRMl\xa3F\xa8W0\x90\xc9Ky#\x03\xf5~\xd2Z\xe9(\x99\b\x00M\xde\x01]\r\xd09k\xc2\x84\xc1\xabN\x96\x8a6\x98@\xd3\xab\xa8m\xdf\x8d\x1d\b\x82\xfcP\x87\x93\x80\x97Q\x86\x8a\x9c\xf8L\x0f\xa8@VE2\x9d\x1e`#\xd8\xd7M\xd4k1\xe6\x13Y\\\x83E\xd0e\x0eM\xa9Q\xac\x0e\x1d]\a\x19H\x81\xd2\xccF\xc6\xd4\xe2R$\xfa\xd6}\xbdsN\x18\xdf\xf5\xffP\xf5\f\xccL\xef\x83\xb3$\xd4\xf4\xb5\xe6\xd0 \xb9\xa7\x8e6\t\x83q\xef\b\xd2\xdb', 0x1) close_range$auto(0xffffffffffffffff, 0x8, 0x1) (async) fcntl$auto_F_GETFL(r1, 0x3, 0x3) (async) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) (async) unshare$auto(0x40000080) getsockopt$auto_SO_TXTIME(r1, 0x1, 0x3d, &(0x7f0000000100)='/s\x19\xe6ys/devices/LNXSYSTM:00/L\x0eXSYBUS:00/PNP0A03:00/device:01/wakeup/wakeup1/prevent_suspend_time_m', &(0x7f0000000180)=0x6) (async) sendmsg$auto_MACSEC_CMD_DEL_TXSA(0xffffffffffffffff, &(0x7f00000056c0)={0x0, 0x0, &(0x7f0000005680)={&(0x7f0000000200)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16, @ANYBLOB="2bb22bbd7000fcdbfa2506"], 0x28}, 0x1, 0x0, 0x0, 0x20000050}, 0x40094) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) (async) r3 = socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) (async) mmap$auto(0x8, 0x2020009, 0x3, 0x216, r3, 0x8000) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) (async) mmap$auto(0x0, 0x5, 0x4000000000e2, 0xeb1, 0x401, 0x8000) (async) ioctl$auto(0xffffffffffffffff, 0xc0045405, 0x3) (async) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0xc02, 0x0) unshare$auto(0x20000) unshare$auto(0x20000) (async) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7fffffe) mkdir$auto(&(0x7f00000002c0)='./file0\x00', 0x3) (async) mkdir$auto(&(0x7f00000000c0)='./file1\x00', 0x9) (async) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1/file0\x00', 0x103040, 0x141) 2m32.248861456s ago: executing program 3 (id=3858): write$auto(0xffffffffffffffff, 0x0, 0x2fb) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) (async) r0 = openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000240), 0x20003, 0x0) (async) r1 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card1\x00', 0x0, 0x0) ioctl$auto(r1, 0x900064b0, 0x2000000000000c38) (async) socket(0xa, 0x1, 0x100) (async) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async, rerun: 32) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d6) (async, rerun: 32) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x4008014) (async) syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000040), 0xffffffffffffffff) (async, rerun: 64) mmap$auto(0x0, 0x400008, 0x200, 0x9b72, 0x2, 0x8000) (rerun: 64) r3 = openat$auto_proc_mem_operations_base(0xffffffffffffff9c, 0x0, 0x401, 0x0) write$auto_proc_mem_operations_base(r3, 0x0, 0x0) (async) madvise$auto(0x0, 0x20200, 0x15) mmap$auto(0x0, 0x502000a, 0x9, 0x15, r0, 0x8) (async) r4 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$auto_VHOST_SET_OWNER(r4, 0xaf01, 0x5) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$auto_SO_TXREHASH(r5, 0x2, 0x4a, 0x0, 0x0) (async) r6 = syz_genetlink_get_family_id$auto_seg6(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_SEG6_CMD_SET_TUNSRC(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={0x28, r6, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@SEG6_ATTR_DST={0x14, 0x1, @loopback}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x800) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) (async) mmap$auto(0x0, 0x2000a, 0x10000000000df, 0xeb2, 0x401, 0x8000) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) madvise$auto(0x0, 0x2003f0, 0x15) (async) ioctl$auto(r4, 0x4008af04, 0x0) (async) mmap$auto(0x0, 0x400008, 0xe2, 0x9b7e, 0x2, 0x8000) r7 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/irq/2/spurious\x00', 0xc40, 0x0) read$auto_proc_iter_file_ops_compat_inode(r7, 0x0, 0x4d) 2m31.984437909s ago: executing program 3 (id=3859): r0 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, 0x0, 0x2000, 0x0) ioctl$auto_EVIOCGMASK(r0, 0x80104592, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x8001, 0x0) mmap$auto(0xfffffffffffffffd, 0x20009, 0x0, 0xeb1, 0x40000000000a5, 0x8000) mmap$auto(0x80000000, 0xfffffffffffffffc, 0x1c, 0x40eb1, 0xffffffffffffffff, 0x300000000000) socket(0xb, 0x80000, 0x8000037) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) msync$auto(0x0, 0x2000000005, 0x6) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x5, 0x0) setsockopt$auto(0x3, 0x84, 0x16, 0xfffffffffffffffd, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x80002, 0x73) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @local}, 0x54) syz_genetlink_get_family_id$auto_nfsd(0x0, 0xffffffffffffffff) mmap$auto(0x5, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) sendmmsg$auto(0x3, 0x0, 0x9a6, 0xe000) 2m31.675777769s ago: executing program 3 (id=3863): mmap$auto(0x0, 0x8, 0x4000000000df, 0x78, 0xffffffffffffffff, 0x300000000000) sendmmsg$auto(0xffffffffffffffff, 0x0, 0x7, 0x20020000) ioctl$auto_NS_GET_PID_IN_PIDNS(0xffffffffffffffff, 0x8004b708, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001480)='/sys/kernel/irq/12/hwirq\x00', 0x900, 0x0) read$auto(r0, 0x0, 0x20) socket(0x80000000000000a, 0x2, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x0, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f0, 0x15) r1 = socket(0x15, 0x5, 0x0) bind$auto(0x3, &(0x7f0000000040)=@xdp={0x2c, 0x1, 0x0, 0x2f}, 0x6a) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) setsockopt$auto(0x3, 0x1, 0x23, 0x0, 0x9) read$auto(0x3, 0x0, 0x80) sendmsg$auto(r1, &(0x7f0000000180)={&(0x7f0000000040), 0x7fc, 0x0, 0x8, 0x0, 0x1, 0x4}, 0x0) mmap$auto(0x2, 0x20009, 0x3, 0xeb1, 0x401, 0x40000008000) close_range$auto(0x2, 0x8, 0x0) rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x0, 0x6, 0x6, 0x2}, 0x8000, 0x0, 0x6) io_uring_setup$auto(0x6, 0x0) socket(0x0, 0x2, 0x0) socket(0xa, 0x3, 0x3a) r2 = epoll_create$auto(0x2) epoll_pwait2$auto(r2, 0x0, 0x8, 0x0, 0x0, 0x8) sysfs$auto(0x2, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) epoll_ctl$auto(0x5, 0x1, r3, 0x0) madvise$auto(0x0, 0x200007, 0x19) clock_getres$auto(0x3, 0x0) 2m30.695313652s ago: executing program 3 (id=3869): listen$auto(0x3, 0x0) 2m30.47638042s ago: executing program 3 (id=3871): socket(0xa, 0x5, 0x0) keyctl$auto(0x200000000000020, 0xffffffffffffffff, 0x5, 0x5, 0x8) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/mm/ksm/advisor_mode\x00', 0xa041, 0x0) socket(0x10, 0x2, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x642, 0x0) pselect6$auto(0x9, &(0x7f0000000000)={[0x8, 0x4, 0x0, 0x6, 0x8001, 0x4000000000002bc8, 0xfff, 0x9, 0x3, 0xffffffff, 0x8000000000000001, 0x0, 0x2f, 0x2, 0x8, 0xfffffffffffffffe]}, 0x0, 0x0, 0x0, 0x0) bpf$auto_BPF_PROG_BIND_MAP(0x23, &(0x7f0000000280)=@iter_create={0xffffffffffffffff, 0x7}, 0x1000) bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x9, 0x21eb, 0x7ff, 0x6, 0xa, 0x1000009, 0x5f, 0x0, 0x3}, 0x6f3) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kmsg_fops_printk(0xffffffffffffff9c, &(0x7f0000000100), 0x80840, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x1, 0x0) socket(0x10, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0xa, 0x5, 0x84) bpf$auto(0xfffffffd, &(0x7f0000000000)=@bpf_attr_5={@target_fd, 0xffffffffffffffff, 0x6, 0x4, 0xffffffffffffffff, @relative_id=0xb99, 0xd}, 0xa3) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) sendto$auto(r1, 0x0, 0xaad, 0xffff, &(0x7f0000000000)=@hci={0x1f, 0xffffffffffffffff, 0x1}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) poll$auto(&(0x7f00000000c0)={r0, 0xf9, 0xfffb}, 0x6a, 0x8001) socket$nl_generic(0x10, 0x3, 0x10) fchmodat2$auto(0xffffffffffffffff, 0x0, 0x9, 0x0) mmap$auto(0x62a, 0x20008, 0x4000000000df, 0x40000000eb1, 0x401, 0x8000) semctl$auto(0x4, 0x0, 0x4, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_LISTENER_SET(r2, &(0x7f0000005380)={0x0, 0x0, &(0x7f0000005340)={&(0x7f0000000000)={0x38, r3, 0x1, 0x870bd2b, 0x25dfdbfc, {}, [@NFSD_A_SERVER_SOCK_ADDR={0x24, 0x1, 0x0, 0x1, [@NFSD_A_SOCK_TRANSPORT_NAME={0x19, 0x2, '/dev/cpu_dma_latency\x00'}, @NFSD_A_SOCK_ADDR={0x4}]}]}, 0x38}, 0x1, 0x0, 0x0, 0xc000}, 0x20000000) socket(0x1e, 0x2, 0x0) 2m15.397576568s ago: executing program 34 (id=3871): socket(0xa, 0x5, 0x0) keyctl$auto(0x200000000000020, 0xffffffffffffffff, 0x5, 0x5, 0x8) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/mm/ksm/advisor_mode\x00', 0xa041, 0x0) socket(0x10, 0x2, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x642, 0x0) pselect6$auto(0x9, &(0x7f0000000000)={[0x8, 0x4, 0x0, 0x6, 0x8001, 0x4000000000002bc8, 0xfff, 0x9, 0x3, 0xffffffff, 0x8000000000000001, 0x0, 0x2f, 0x2, 0x8, 0xfffffffffffffffe]}, 0x0, 0x0, 0x0, 0x0) bpf$auto_BPF_PROG_BIND_MAP(0x23, &(0x7f0000000280)=@iter_create={0xffffffffffffffff, 0x7}, 0x1000) bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x9, 0x21eb, 0x7ff, 0x6, 0xa, 0x1000009, 0x5f, 0x0, 0x3}, 0x6f3) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kmsg_fops_printk(0xffffffffffffff9c, &(0x7f0000000100), 0x80840, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x1, 0x0) socket(0x10, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0xa, 0x5, 0x84) bpf$auto(0xfffffffd, &(0x7f0000000000)=@bpf_attr_5={@target_fd, 0xffffffffffffffff, 0x6, 0x4, 0xffffffffffffffff, @relative_id=0xb99, 0xd}, 0xa3) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) sendto$auto(r1, 0x0, 0xaad, 0xffff, &(0x7f0000000000)=@hci={0x1f, 0xffffffffffffffff, 0x1}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) poll$auto(&(0x7f00000000c0)={r0, 0xf9, 0xfffb}, 0x6a, 0x8001) socket$nl_generic(0x10, 0x3, 0x10) fchmodat2$auto(0xffffffffffffffff, 0x0, 0x9, 0x0) mmap$auto(0x62a, 0x20008, 0x4000000000df, 0x40000000eb1, 0x401, 0x8000) semctl$auto(0x4, 0x0, 0x4, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_LISTENER_SET(r2, &(0x7f0000005380)={0x0, 0x0, &(0x7f0000005340)={&(0x7f0000000000)={0x38, r3, 0x1, 0x870bd2b, 0x25dfdbfc, {}, [@NFSD_A_SERVER_SOCK_ADDR={0x24, 0x1, 0x0, 0x1, [@NFSD_A_SOCK_TRANSPORT_NAME={0x19, 0x2, '/dev/cpu_dma_latency\x00'}, @NFSD_A_SOCK_ADDR={0x4}]}]}, 0x38}, 0x1, 0x0, 0x0, 0xc000}, 0x20000000) socket(0x1e, 0x2, 0x0) 1m58.140306922s ago: executing program 6 (id=3965): r0 = socket(0xa, 0x5, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop13\x00', 0x60742, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) timer_create$auto(0x0, 0x0, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r1, 0x0, 0x0) mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) mmap$auto(0x0, 0x2020009, 0x2, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0xd, 0x2, 0x6, 0x7, 0x8, 0xffffffffffffffff, [], {0x6, 0x6, 0xf, 0x29f, 0x100, 0x83, 0x101, 0x6, 0x2}, {0x100, 0x1, 0x52, 0x5, 0x1, 0x40, 0x76c5, 0x8, 0x100000000}}) io_uring_register$auto(0x2, 0x11, &(0x7f0000000180), 0x83) sendmsg$auto_NL80211_CMD_LEAVE_OCB(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x40000) mbind$auto(0x8000, 0xfa9d, 0x2, &(0x7f0000000280)=0x20000000000000fb, 0x3, 0x1) set_mempolicy_home_node$auto(0x0, 0x2010001, 0x0, 0x0) clone$auto(0x10051c, 0x6, 0x0, 0xffffffffffffffff, 0x80000001) shutdown$auto(r0, 0xfff) socket(0x2, 0x1, 0x0) mmap$auto(0x0, 0x5, 0xfffffffffffffe01, 0x8011, 0x3, 0x8000) socket(0x2, 0x3, 0x6) r4 = openat$auto_proc_pid_numa_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/numa_maps\x00', 0x26000, 0x0) shutdown$auto(r3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) read$auto_proc_sessionid_operations_base(r4, &(0x7f00000000c0)=""/4096, 0x1000) r5 = landlock_create_ruleset$auto(&(0x7f0000000000)={0x6, 0x3, 0x3}, 0x18, 0x0) bpf$auto(0x0, &(0x7f00000003c0)=@task_fd_query={0x5, r5, 0x454f, 0x5f, 0x0, 0x0, r5, 0x80000001}, 0x6d4) 1m56.612474985s ago: executing program 6 (id=3970): openat$auto_nvmf_dev_fops_fabrics(0xffffffffffffff9c, &(0x7f00000004c0), 0x101202, 0x0) ioctl$auto(0xffffffffffffffff, 0xab07, 0xffffffffffffffff) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$auto_NL80211_CMD_SET_COALESCE(0xffffffffffffffff, 0x0, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/platform/dummy_hcd.0/usb1/bDeviceProtocol\x00', 0x12bc00, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) semctl$auto(0x8, 0x806, 0x13, 0x46) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda1\x00', 0xc6c43, 0x0) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = openat$auto_stat_fops_per_vm_kvm_main(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/kvm/halt_poll_fail_hist\x00', 0xa2500, 0x0) read$auto_stat_fops_per_vm_kvm_main(r2, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="01002dbd0900fedbdf257e"], 0x14}, 0x1, 0x68, 0x0, 0x24000000}, 0xd0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0xa, 0x0) socket(0x18, 0xa, 0x1) socket(0xa, 0x2, 0x0) r4 = openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) setrlimit$auto(0x7, &(0x7f0000000080)={0x0, 0x6}) ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/kfence/parameters/sample_interval\x00', 0x102, 0x0) connect$auto(0x3, &(0x7f00000000c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0xeffd) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7) 1m54.175340456s ago: executing program 6 (id=3975): mmap$auto(0x0, 0x100, 0x4000000000df, 0x80000000eb1, 0x401, 0x8000) (async) r0 = socket(0x10, 0x2, 0x0) io_uring_setup$auto(0x4bf15e08, &(0x7f0000000000)={0x408, 0x3, 0x10101, 0x6fb7, 0x8a, 0x4, r0, [0x100, 0x7, 0x7f], {0x2, 0x7, 0x3034, 0xc, 0x8f, 0x5, 0x5, 0xfffffff9, 0x6}, {0x4000, 0x3, 0x0, 0xbffff000, 0x8, 0x20b85, 0x5, 0x837, 0x8}}) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYBLOB='_\x00'], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40000) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) (async) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) mmap$auto(0x0, 0x2000d, 0x7, 0xeb1, 0x404, 0x10008000) (async) r1 = socket(0xa, 0x1, 0x84) (async) msgctl$auto(0x0, 0x3, 0x0) (async) r2 = socket(0x11, 0x80003, 0x300) setsockopt$auto(r2, 0x107, 0x12, 0x0, 0x8) (async) mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) (async) getsockopt$auto(r1, 0x84, 0x80, 0x0, 0x0) semctl$auto(0x7, 0x2, 0x13, 0x1) (async) setsockopt$auto(0xffffffffffffffff, 0x107, 0x9, 0x0, 0x20008004) syz_genetlink_get_family_id$auto_smbd_genl(&(0x7f0000000080), 0xffffffffffffffff) 1m53.531213423s ago: executing program 6 (id=3979): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x55) socket(0x2, 0x3, 0xa) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0x8}, 0x1) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @empty}, 0x52) write$auto(0x3, 0x0, 0x5c8) 1m52.979958179s ago: executing program 6 (id=3982): r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x801, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x3, 0x12, 0x93f, 0x1fee1, 0x3, 0x6, 0xfffffffffffffffe, 0x9, 0x5, 0x8005, 0x7, 0xb0, 0x9, 0x5, 0x3, 0x8, 0x4, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, [0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x1000000000000, 0xfffffffffffffffc, 0x0, 0x7fffffffffff, 0x9, 0x3, 0x0, 0x10, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x1fe, 0x82) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r1 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) sendmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0x2000000, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) io_submit$auto(0x7, 0x7, &(0x7f0000000040)=&(0x7f0000000000)={0x7, 0x839a, 0x0, 0x2, 0xe7, 0xffffffffffffffff, 0x0, 0x3, 0x5}) socket(0x2, 0x1, 0x0) mmap$auto(0x0, 0x400004, 0x400, 0x9b72, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x20009, 0xde, 0xeb1, 0xffffffffffffffff, 0x8000) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f0000000040)='}[,&*}\x00', &(0x7f0000000080)='nfsd\x00', 0x7, 0x0) mount$auto(0x0, &(0x7f0000000140)='}[,&*}\x00', 0x0, 0xfff, &(0x7f00000001c0)="549a5282d0") get_mempolicy$auto(0x0, 0x0, 0x7f, 0x8, 0x3) close_range$auto(r2, r0, 0x6) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/bus/usb/011/001\x00', 0x40, 0x0) socket(0xa, 0x1, 0x84) socket(0x2a, 0x2, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x1e2102, 0x0) r4 = io_uring_setup$auto(0x6, 0x0) close_range$auto(r3, r4, 0x0) socket(0x2b, 0x1, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, 0x0, 0x1c8340, 0x0) socket$nl_generic(0x10, 0x3, 0x10) select$auto(0xd, 0x0, 0x0, &(0x7f0000000100)={[0x1ff, 0x4, 0x7fff, 0x400000000000001, 0x80000948b, 0x81, 0x7c1, 0x400000006, 0x100000000003, 0xc, 0x7, 0x3, 0x6, 0x400005, 0x5]}, 0x0) r5 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x1, 0x0) write$auto_seq_oss_f_ops_seq_oss(r5, &(0x7f0000000c80)="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", 0x300) close_range$auto(0x0, 0xfffffffffffff000, 0x0) 1m52.197366219s ago: executing program 6 (id=3986): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_btrfs_ctl_fops_super(0xffffffffffffff9c, &(0x7f0000000000), 0x400440, 0x0) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r1 = io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0x8, 0x0) fcntl$auto_F_GETOWN(r1, 0x9, 0x4) socket(0x11, 0x80003, 0x300) socket(0xa, 0x801, 0x84) r2 = open(0x0, 0x22240, 0x154) execveat$auto(r2, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x155) socket$nl_generic(0x10, 0x3, 0x10) r3 = open(0x0, 0x22240, 0x154) execveat$auto(r3, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) ioctl$auto_BTRFS_IOC_FORGET_DEV(r0, 0x50009405, &(0x7f0000000200)={@raw=0x400, "a73628ff9a8554db6b6026498bc2f937be07834a81b391f61f9236ae6ad687960fb5cb1c2f5aadfaa1775f2c5abe688e8f17a94087ea5e3dd1fa2ff27389f90b9f065f16e6606cb7d3c37fbfd442d6613748445a24b4d7b5f70525289675983491bb8aa70607980dba4451ea27bdf614d036abfba7492f1f41878c362afb75dd7555a449668c6c8d25180008f846b3d2013a5d8d780087540d4be776fe7dae303b0445b8331ec371dd814201ed65c0a2270d39857da027d50b0baf0e991ab586304b7377d42ffe1437167cf920bb543296bc90de2d422beb24110da7cee5aceaac3045153879eb3767225efe1bd37bad7c68acb7fe20b3242a9c249d309bf2db135c59c55c2820a71e4187a2613bef75a85d84124d7de55c47e2b30541263704cc2382a94ae4b0c33ff53d1245976084c076b6300effb87baa4c3f1bca91cb8e6d2d1a3283a4367fdeb003fff83cf334f2eece9b122cfe8b2a85289b4fdcaf00c8cdc9a0dc5ee31adc00dee4a6c5396d334807446b49f467c97bcac347e43736717f16d1f6f77202411347418a51199fd0ba3b6f6058473b518a4afbe7cb6bdb330b08d1e1b5add6ba4f16db70c0006b39e487b19ecf5095e3e7db960f3b0f64da070500357ecec0323bd535148d69fc675ec21b5894f34de35e16080aa5ea83b33fbaf6808c8df063dc0270072d0aaa474465f3c1f8f50246bbf7dcf22e291d127b44815f4346ecf59aeeb8d337d213559a274f7bfdaaf87210bb44c160f342d7502af3f176e272d01ed314f3ec77b449b0aa9a1cb0f6eadf1e606b176a24b945e6b01a5ea425062408a5037ef7bed987d86725dc9a55b66c1b8f12a32fd19b6b1bed6920660869ec50ceb35e48136e074c174b546d5503ac12ae48ba2d5c4923ff64379f184496de28a82481af73c64e1bbf9dbc543443fc7105bbcb845db8a630d121cfcc0f1affd0491f3ebe2da32377652d85b96aa5dbdf77ac5008f59227c38c8db936dd0ada35d203540550e09a8503ac49659e1047be7200308a6bde510ba828a7c5221866e3670e4ebd78ebbe11cc33f708e09a3c4a5200eeb55e45af8dfd98118569d28389bce441b3d0502a4b00c122861851f8a5a987d388be025fc911fc7e7a12e20fef0adcff169389ff682e57351d620683ddc6a1fa9fd624e48fc5e31307e75d0d3d1c7c3e9318a022f19eaf3a11c850a248a5d69f71d3d136e09ec44efc4273f8f3bef14e92a479f8f02e3be606c3504b9f5510d9964ce0928af5622f043194f8e925f4e01ab11dbfd92f72365794eee31e4472b54d3ee1f3684d4241f3d413f40071fef7beb84fa674cbe34ece583aa0276c98fcedbff670ed18428b69d347a5bac41e728a7529da2e08f7d6ae9ea686a4f81ae78b3cc25fb157f9a4bb67e0238f00fd51492a3b998d7a0881ef0073a2b1df4ed9ba98abf6c6e2aee8a4de9aea5226c2c1ee21972a363f9c68621a4dba5e1fcb205118ab572f4b3640f0464b8ccedabe153c84256121e46a9072c8f54125f71481e99946c9ba5eafe3c20dc6e3864dcdcf044a1e69498287db09092e1904190faa68b02a1c6673fdf380febeea9101780e7185296c5e301ac2f8f4b583b338805142d57cc923e320b2c978936e1fb449fd514b96913d24111225ef10b359543d5e04d4f70370f38e165c5eb8f68922c36a7327c5b95b8e29dd97aa402e8313142dc95a246b94deeb4a5737448b6edacae00f5bc64288386cb0e16d7f5a54037f4bcfd399283f66a70f1a447ccf2ec87aca5a528add1e4e144ed8ff6452294acb81ae02d06b6aae4ad5910aff43ecd01d0d075dbc235cf368675249ba7a62fe77cbb781485bb6c4f8d2466df4838d6174d17131b2315bdc959bdf008e0afecf0b48811bd6300a4a8c2fb38a2ed8a83346d1f9d5575895ed56b7c45d491136873b822d4af9ab66e2940c45db8db8d6e95bc37bb8da761d2795830cd1f7649419d401cc74e4f27d5aae94d4db04a48d903796e5ccd4e4f87b183d15cffc7034c0afe8d4752f2656203819fa83fc4dd0d593d076a5f7e9a2202ea0dfac01019c5fc1353d455ea6581fdc26200aa234ec7562a6d242531499cfc4f10ea783e3e07fb4612df0ee5037ea6871e17665697f48e399fdec937258b19cfea309279b14a17ec8083b45f32b61900723ecf364c327428a3afea845374efd182dcbaa27af85cc0bccfdceaa3c9e7fd23a9aef743e80700141e05b7763ae9ba670ecf3987ca749ff0e3391648855805002bf241d0afb205473bcb463ab12cb7c30262ddfb7f60d016aa5cb1e3b44d5fa965e479c37f8492aa3c57530ea024bf6279396ebd7a10aacdb26100ac1536885ca575dc63e522e1186f1d606d7e7ea205cc91c299ca211212f2b958e43a85fda4adbb382be018fb433f2df79a8defc4223299c0167e07ffc80a1c25d5c9f13ae9e9e979302156d32ba66b1bcd672e1d51bd58d566c6cc7a47b4e0c76f8b9828d6aa115a298297c05acc3812b7549fd8d61f129bebebca6e76ef5f00366e7c8f85d5cffb0bdd80bf2f0cef5a081553e27b2641a7678d7550be45e693d2323995450715619027a66dc67923f56e3a94e613fbaf44377bdcc3fd4da099bdd0bbdb6eaedbb2261f771a4519811b0b39da3594f66114e67d67dcf5644281f12f5e85d86306a1ab0d504145f27c92812a4ab284450d9aa9baec300abeb202bf4e3d591631b16234d4b737bde8e576be657ee478659615c95499baf2c5c22e05064179eab8aa1c45de3740bf687832a7c9960233894ece90afa84bcfe2d9d455c3deb421eb0e172ebc2a4fab45a17df85f1231f7f96022bacd71639a79f582f168506b5b01f791be6a402ac70503204f210f6975d66124a624712507bdce9d84cae63f7115e3efa94528c1d8d65de92239587a8a45f5d9c107e0d49384e744dc05d7b5e32549907ebda7e274e3772030ce815a7fbd3553799b6dc93cc55e377414b1b30d7a524738b5a57c92c674d624c790961bf1289d0c3e0bf7adf978c3c1143a5c64542cbd576a961b7ceff89606e0f0e152831571a9f7de0d0112dd105c69276e6c334c5182a0baf04e0076384d98f89467d57b493cb964b82af6ff2e0c067a7f107ab776c58b69e0f6ce1c0cdf31ce048c5d96a59bb6ae4deb1c2a6bf6e5194f6827f3024e253252782745d8848a73412d5b49cb914f66e8021c564d932ed77ee76dd5d417edae99c2b7da5301701a6637ecd4916bef8c532d805de76ac51eb417210e9d14cf2fb46435a5592b648f18721ad60a5da134e0dbe4fc33b32374326473bf260b17db1c8afea0a4ac0a1339634c0aa0674b27ef9765aae6bbc8f757f491176ed6116bc89574e8059c13fd97c210064e2303242c6be1c6bb449157167bebfc346a8cfd2af48d5380d91506b572b60b943accbb54515383cad8307645f867f4b5a95055a48635184b5af15f3b6a0b7773cd6f64b84dfeaa2408f974574343979168a3d3a9d1ac01fa57d64c1f65719f9df42d586f5539501d3c3db79677830f31b2fbf7f44067beab8631a7ad9475b2acbd2a653d113a2a0526b1e38972decd8ea0588724d0e78314b302135fe48d83af28b1a8a15f94d5ef5942f9f52ee2091a7f93203bcba5c305a0f0c7523d55ffaf3ccd0affa73e0a0b2d0a18b0f3702204b687f0e0368d62e482d5657c3bc49679e38c8b75867081920d0c757e3b5addb90aa765fef4aa95fa07bb226d3e55c5bd935746638654126cc082436eadb60fbf835bd50d02c9dae8f49d0be16c61b5bd3c4b6180bfebd23f86b0caf9dabc467a51d2bf3037d883b499598af5f32dcb7e4107199279d47c8c600ca45ca5bc42b03972ec078ec2c4cefb999f90587bd0a3df64ab71a34a6fd31e9222b063923ee6f89a38c54f4dcf56fe3d2f1a198d04a9298108f9072d781b14bd9003d0d0c7454d782aa34d876277ae2f564b6efe27fa480500a21bc0158f1b3d7123da9c04493a92a29f7f7ba1b52117477652b597a4d11de11b57e601b9faca403f7a30683dc46f1f8316ed169e95904b461c3d4bb3541d6ff2fc8cdaf6136a445cea11a8be5792165e2d60c383121762ad6b0ffc39a8870a937f4281f0cf167f499e4cf2da8cb30baa992bbd4dc15f9ab58983b06d60c83ca0e1fefd9e0c68cf60552b87c0d51757ec8f50808e3999ea3e35d56cadb589c256a5d2cf3f7d80b18f870a9c918facdfaf0751da08905d94767cbbfa75b36daf47f9458e096052b01b7c44a03b20dc9f900ef6db48e8155795666f2679b3b3ee9a28d318a797747317721e42ae098f358f3e1f68c30c73e90a1f584494a4b23078a1e7bb6b712286998f069f80ae1bbee25e2dca7d55674ce6a56a29f87682f1f7c8cf88ede2e8adbf0951e74a90c9122173069197eb9277e4a53cdd2568299c20cd40e23d507929be24d9cbec0bdb4240ea8f919df826ca28da6dc0d16ff03375e303502cc60c1c818f642a6bdcc8c2c639325832f19678bc9f9dec2f9787b2b2e8a336da47ea008e35ab8876e551a8633e44e3806371d50b34fb957b4d508cee5d10f29d8aaf182589139e77452b78b6f13bdcc6faaffdffd55cc82fe8d610560329beaa9ad3cc322c8c7b8dc1886aa201c42e72966c342c7d3201ec86826d4f8bd12651f9b30f3251ace9784c62f42672ac87a1f1127a66454d8c93b51311af53aaabd8dfa0d09eb662088e1780b9bf4b66b6b70500b2df155faa6ef5498d622ccdf0d91f8817a078d4512292bf5841459826871b11f2c74c0dfb10db99c2294efb21b6458b9658b57c722a9d92dcd9b83fc8806ca6c488bc4cd403f11c8d5e00f00ebccb794a94c4eea6fb64029fa2e194b871441d826f372718fb89bdd42abc4aec430d41c5e2fd07cbb08eb71ac99fff41cc6a83302ccb715eec945544a4f0094af6fab7cebf1cdda9fd0d53aeaa5f209404b4ed4c7325855d470e5fcee809733c9bed79e99c3cc82744e2f470b981b0678ffa259945b5dcf9dc460e395ca10f523aeb65dc994804f2d6f3ee6eeca00c5f6ffbe3e13517ce5a9f021eb99a0931dbf532b2920170d1df1c4094c228f13db33c2664274d4ab0d7bbebb6d8b2f4c9601709c52c3f23b59acb4b84e98c590816e8ee772d8e1faf4e04d6814971145e3fbe0b8e2974e59ebbf49001290048b7ce2e2a2e85b5a10a0126dcde0b7ec1739b39a2e340438f4bdd721faffeeb8bdb7d6414086fe00eeed71d8e660a58727a72ab59f1cc8bb12e61b9c49bdf57314dd2c7d575267b2fda2d33da2ae7d81a823c923584415506876d6ab7d6963f249197431db4d0a92cddbf19fd30c991bdaf5d6a10c17edbe75ff12a0fd116081a51b63e325626892a28f7cedc95a7696cb89aaf6a0ab3cee14e53df2dfe717791848fc5acb0611184ed80303770cccbfd9299da0f04097a48b635afca7ad5bad5d608d6a520a2775e38f1c7e250ead542afe84e1fe2a643d9b63ea9444668ea87233c06833de1997125a2115da8d4655d8f5a009bfda97f3af9279a77caa7cc2d9c0030d075f46eb262226117b1b07caae4809ddefabd4c17a98818a7969d46e5782aa04a65c255a329aac2cbad022ba98ca49cfc3bb8d8c4500179dcd6a74ff098f18dbd4cc91889bc4f4d5396c52e4252f418437bdddbe79204cac6b704a007d3129938fa1cfd91da9b5e774524a73f334e52bc5859a587c3c9132c8ce3bb26662091779330b5f2f04b7ad7e3fbc24306a4b37ff8492380f5d97685e76f4758ae850522aa277f40402ae"}) openat$auto_aoe_fops_aoechr(0xffffffffffffff9c, &(0x7f0000000080)='/dev/etherd/err\x00', 0x101000, 0x0) readv$auto(0x3, 0x0, 0x87) r4 = socket$nl_generic(0x11, 0x3, 0x10) bind$auto(r4, &(0x7f0000000200)=@generic={0x11, "00030f00"}, 0x80) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) readv$auto(0x3, &(0x7f00000001c0)={0x0, 0x7fffffffefff}, 0x7) 1m45.631620389s ago: executing program 5 (id=4007): madvise$auto(0x15, 0x3, 0x6) (async) mmap$auto(0x0, 0x88b, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) (async, rerun: 32) r0 = open(&(0x7f0000000000)='.\x00', 0xc00, 0x409) (rerun: 32) fanotify_mark$auto(0xffffffffffffffff, 0x9, 0x9, r0, 0x0) (async) getcwd$auto(0x0, 0xffffffffffffffff) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket(0xa, 0x5, 0x0) inotify_init1$auto(0x3000000000000) (async) inotify_add_watch$auto(0x4, 0x0, 0xe6e) (async) mknod$auto(&(0x7f0000000040)='./file0\x00', 0x1001, 0x9) (async) open(&(0x7f0000000000)='./file0\x00', 0x101800, 0x181) 1m45.27227906s ago: executing program 5 (id=4009): memfd_secret$auto(0x0) openat$auto_tap_fops_tap(0xffffffffffffff9c, 0x0, 0x20000, 0x0) (async) openat$auto_tap_fops_tap(0xffffffffffffff9c, 0x0, 0x20000, 0x0) socket(0x1a, 0x1, 0x0) epoll_create$auto(0x9) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(0xffffffffffffffff, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) (async) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fb0\x00', 0x20401, 0x0) (async) r0 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fb0\x00', 0x20401, 0x0) ioctl$auto_TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, 0x0) ioctl$auto_FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000080)) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r1, &(0x7f0000000240)={0x0, 0x7}, 0x8) listmount$auto(&(0x7f0000000100)={0x1f, @raw, 0x80000002, 0xfffffffffffffff7, 0x2}, 0x0, 0xf4240, 0x1) socket(0x2b, 0x1, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8) bpf$auto(0x0, 0x0, 0x6f4) (async) bpf$auto(0x0, 0x0, 0x6f4) mmap$auto(0x0, 0xa00006, 0x400002, 0x40eb1, 0x602, 0x300000000000) (async) mmap$auto(0x0, 0xa00006, 0x400002, 0x40eb1, 0x602, 0x300000000000) r3 = socket(0x2, 0x1, 0x106) bind$auto(r3, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) (async) bind$auto(r3, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) mknod$auto(&(0x7f0000000040)='./file0\x00', 0x1000, 0x7fffeffb) open$dir(&(0x7f00000001c0)='./file0\x00', 0x201, 0x14) open(&(0x7f00000002c0)='./file0\x00', 0x200, 0x1c7) (async) r4 = open(&(0x7f00000002c0)='./file0\x00', 0x200, 0x1c7) r5 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r4) sendmsg$auto_NL80211_CMD_GET_PROTOCOL_FEATURES(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000c40)=ANY=[@ANYBLOB="267466a62958b213d250b71567a2a1295dcda93d5e4652b7354db9aa73473eedabc1b8c84a09f249e39b0dc0956b69", @ANYRES16=r5, @ANYBLOB="00022abd7000ffdbdf255f0000006800c8002cc63c58a5b98fa7d6eca4e325a871c9238b1227015c8ff1128759b6240baa3220e665cce23cabccaec79442d2d13f81ea41d5fa902b641033041ec5fe134ff839900c46bbb2b2611ed8b1e82058680778641f42bde1b309108bbf7bc04afefe8c58df5708000b01ffffffff050020010e00000008000d00060000001c001b8004000300040002000400030005000100080000000400030004006c000600f7000706000004004100"], 0xc0}, 0x1, 0x0, 0x0, 0x80}, 0xc804) openat$dir(0xffffffffffffff9c, 0x0, 0x40000, 0x0) (async) openat$dir(0xffffffffffffff9c, 0x0, 0x40000, 0x0) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x109001, 0x0) (async) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x109001, 0x0) 1m44.684408236s ago: executing program 5 (id=4013): openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) socket(0x2, 0x5, 0x0) (async, rerun: 32) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async, rerun: 32) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/pts/ptmx\x00', 0x40001, 0x0) pwrite64$auto(r0, &(0x7f0000000040)='%:!\x00', 0x1, 0x4) (async) socket(0x2, 0x1, 0x0) socketpair$auto(0x1f, 0x5, 0x8000000000000000, 0x0) (async) ioctl$auto_TIOCSETD2(r0, 0x5423, 0x0) (async, rerun: 64) ioctl$auto(r0, 0x8924, r0) (rerun: 64) 1m44.256037434s ago: executing program 5 (id=4016): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) (async, rerun: 64) r0 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, 0x0, 0x2000, 0x0) (rerun: 64) ioctl$auto_EVIOCGMASK(r0, 0x80104592, 0x0) (async) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) (async) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x8001, 0x0) (async) mmap$auto(0xfffffffffffffffd, 0x20009, 0x0, 0xeb1, 0x40000000000a5, 0x8000) (async) mmap$auto(0x80000000, 0xfffffffffffffffc, 0x1c, 0x40eb1, 0xffffffffffffffff, 0x300000000000) (async) socket(0xb, 0x80000, 0x8000037) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) (async) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) msync$auto(0x0, 0x2000000005, 0x6) (async) close_range$auto(0x2, 0x8, 0x0) (async) socketpair$auto(0x1, 0x3306, 0x8000000000000000, 0x0) (async, rerun: 64) close_range$auto(0x2, 0x8, 0x0) (rerun: 64) socket$nl_generic(0x10, 0x3, 0x10) (async) socket(0x2, 0x80002, 0x73) (async) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) (async, rerun: 64) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @local}, 0x54) (async, rerun: 64) syz_genetlink_get_family_id$auto_nfsd(0x0, 0xffffffffffffffff) (async) mmap$auto(0x5, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) sendmmsg$auto(0x3, 0x0, 0x9a6, 0xe000) (async, rerun: 32) r1 = socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) (async, rerun: 32) mmap$auto(0xf, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) select$auto(0xe, 0x0, 0x0, &(0x7f0000000100)={[0x1ff, 0x6, 0xfffffffffffffff7, 0x8001, 0x800000000000948b, 0x1, 0x15f4da0a, 0x3, 0x4000000000000003, 0x62, 0x80000021, 0x7, 0x6d3e, 0x7fff, 0x5, 0x6]}, 0x0) (async) io_uring_setup$auto(0x6, 0x0) (async) r2 = socket(0x10, 0x2, 0x9) inotify_add_watch$auto(r1, &(0x7f0000000000)='./file0\x00', 0x8) (async) setsockopt$auto(r2, 0x104000000000010e, 0x2, 0x0, 0x7fff) rename$auto(&(0x7f0000000140)='.\x00', 0x0) 1m43.076257481s ago: executing program 5 (id=4020): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x40000008000) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f00000001c0)='}[,&*}\x00', &(0x7f0000000080)='nfsd\x00', 0x3, 0x0) access$auto(&(0x7f0000000000)='}[,&*}\x00', 0x7) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/card1/cable#1\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0x25, 0x1, 0x3) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_nst_seq_fops_netdebug(0xffffffffffffff9c, &(0x7f0000001640), 0x200, 0x0) read$auto_nst_seq_fops_netdebug(r0, &(0x7f0000001680)=""/222, 0xde) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) eventfd$auto(0x3) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video1\x00', 0xc0400, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) bpf$auto(0x0, &(0x7f0000000040)=@bpf_attr_5={@target_ifindex=r3, 0x7f, 0x0, 0x8, 0x1, @relative_fd, 0xd}, 0x92) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000100), 0x7c3142, 0x0) r4 = socketpair$auto(0x1a, 0x1, 0x8000000000000000, 0x0) r5 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptye5\x00', 0x0, 0x0) ioctl$auto_TIOCSETD2(r5, 0x5423, 0x0) ioctl$auto_SNAPSHOT_FREE_SWAP_PAGES(r4, 0x3309, 0x0) ioctl$auto(r5, 0x400455c8, r1) 1m41.898758213s ago: executing program 5 (id=4021): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000001a80)='/dev/bus/usb/001/001\x00', 0x29202, 0x0) mmap$auto(0x0, 0x7, 0xde, 0x9b72, 0x2, 0x8000) socket(0xa, 0x2, 0x73) socket(0x23, 0x2, 0x0) sendto$auto(0x4, 0x0, 0x8000, 0x0, &(0x7f0000000100)=@in={0x23}, 0x80) unshare$auto(0x40000080) mmap$auto(0x0, 0x9, 0xffb, 0x8000000008011, 0x3, 0x0) move_pages$auto(0x0, 0x1002, 0x0, 0x0, 0x0, 0x2) 1m36.983658881s ago: executing program 35 (id=3986): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_btrfs_ctl_fops_super(0xffffffffffffff9c, &(0x7f0000000000), 0x400440, 0x0) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r1 = io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0x8, 0x0) fcntl$auto_F_GETOWN(r1, 0x9, 0x4) socket(0x11, 0x80003, 0x300) socket(0xa, 0x801, 0x84) r2 = open(0x0, 0x22240, 0x154) execveat$auto(r2, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x155) socket$nl_generic(0x10, 0x3, 0x10) r3 = open(0x0, 0x22240, 0x154) execveat$auto(r3, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) ioctl$auto_BTRFS_IOC_FORGET_DEV(r0, 0x50009405, &(0x7f0000000200)={@raw=0x400, "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"}) openat$auto_aoe_fops_aoechr(0xffffffffffffff9c, &(0x7f0000000080)='/dev/etherd/err\x00', 0x101000, 0x0) readv$auto(0x3, 0x0, 0x87) r4 = socket$nl_generic(0x11, 0x3, 0x10) bind$auto(r4, &(0x7f0000000200)=@generic={0x11, "00030f00"}, 0x80) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) readv$auto(0x3, &(0x7f00000001c0)={0x0, 0x7fffffffefff}, 0x7) 1m26.573142697s ago: executing program 36 (id=4021): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000001a80)='/dev/bus/usb/001/001\x00', 0x29202, 0x0) mmap$auto(0x0, 0x7, 0xde, 0x9b72, 0x2, 0x8000) socket(0xa, 0x2, 0x73) socket(0x23, 0x2, 0x0) sendto$auto(0x4, 0x0, 0x8000, 0x0, &(0x7f0000000100)=@in={0x23}, 0x80) unshare$auto(0x40000080) mmap$auto(0x0, 0x9, 0xffb, 0x8000000008011, 0x3, 0x0) move_pages$auto(0x0, 0x1002, 0x0, 0x0, 0x0, 0x2) 6.420362737s ago: executing program 1 (id=4325): r0 = openat$auto_tracing_pipe_fops_trace(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/tracing/trace_pipe\x00', 0x402, 0x0) read$auto_dai_list_fops_(r0, 0x0, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/nvme/parameters/io_queue_depth\x00', 0x121002, 0x0) r1 = socket(0x2, 0x1, 0x106) getsockopt$auto_SO_REUSEPORT(r1, 0x0, 0xf, &(0x7f0000000040)='$#,\x00', &(0x7f0000000240)=0x6) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r2 = socket(0xa, 0x5, 0x0) getsockopt$auto(r2, 0x0, 0x2, 0x0, 0x0) write$auto_proc_pid_attr_operations_base(0xffffffffffffffff, &(0x7f0000000200)="a597d9", 0x3) bind$auto(0x3, 0x0, 0x6a) semctl$auto(0x80001ff, 0x2, 0x2, 0x3) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x401bf, 0x7352, 0x3d, 0x65f, 0x1ffde, 0x7, 0x3, 0x2, 0xd, 0x3, 0x6, 0x4, 0xb4, 0x9, 0x6, 0x7ff, 0x80, 0x4, 0x0, 0x7, 0x2000, 0x203, 0x0, 0xb4, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x40068, 0x0, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x1fe, 0xd) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) socket(0x10, 0x2, 0x0) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) 5.501730106s ago: executing program 1 (id=4332): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0xa, 0x5, 0x0) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mmap$auto(0x0, 0xe9, 0x3, 0xeb1, r0, 0x8000) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/pts/ptmx\x00', 0x20540, 0x0) pipe$auto(&(0x7f00000000c0)=r1) ioctl$auto(0xffffffffffffffff, 0x80045438, 0x10000000000402) io_uring_setup$auto(0x6, 0x0) capset$auto(0x0, 0x0) setsockopt$auto(0x3, 0x0, 0x4, 0x0, 0x28) unshare$auto(0x40000080) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000002940)='/dev/fb0\x00', 0x841, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x305803, 0x0) sendmsg$auto_IEEE802154_ASSOCIATE_RESP(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) mmap$auto(0x0, 0x2, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0xffffffffffffffff, 0x8, 0xfffffffc) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/security/tomoyo/query\x00', 0x82a02, 0x0) openat$auto_ftrace_event_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/tracing/events/vmalloc/free_vmap_area_noflush/filter\x00', 0x2, 0x0) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/virtual/block/ram9/diskseq\x00', 0x0, 0x0) read$auto(r4, 0x0, 0x20) writev$auto(r3, &(0x7f0000000200)={0x0, 0x7}, 0x3) setsockopt$auto_SO_RCVBUF(r4, 0x1, 0x8, 0x0, 0xfff) landlock_create_ruleset$auto(0x0, 0x4, 0xfffffffd) write$auto(0x3, 0x0, 0x5c8) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_tracing_pipe_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/trace_pipe\x00', 0x20c01, 0x0) 5.118940641s ago: executing program 0 (id=4336): r0 = openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000080), 0x103040, 0x0) mmap$auto(0x4, 0x0, 0x8, 0xeb1, r0, 0x82) r1 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r1, &(0x7f0000000080)={{0x0, 0x8002, &(0x7f00000002c0)={0x0, 0xc4}, 0x2, 0x0, 0x0, 0x1}, 0x5}, 0x3, 0x0) (async) io_uring_register$auto_IORING_REGISTER_RESIZE_RINGS(r1, 0x21, &(0x7f0000000180)="4a0ef0593bf9e53595fca86082", 0x81) r2 = io_uring_setup$auto(0x6, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), r2) sendmsg$auto_NL80211_CMD_ASSOCIATE(r4, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r5, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@NL80211_ATTR_PEER_AID={0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x80) r6 = openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(r6, 0xc0285700, 0x0) (async) ioctl$auto(0x3, 0x40103e05, r3) 4.872371997s ago: executing program 0 (id=4338): r0 = openat$auto_set_tracer_fops_trace(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/tracing/current_tracer\x00', 0x240, 0x0) close_range$auto(0xffffffffffffffff, r0, 0x0) mmap$auto(0x0, 0x8000, 0xdf, 0xeb1, 0x401, 0x8000) r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/kernel/nmi_watchdog\x00', 0x101000, 0x0) read$auto(r1, 0x0, 0x1ff) socket(0x10, 0x2, 0xc) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x28efea34e33f7d83, 0x0) close_range$auto(0x2, 0x8, 0x0) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r3) r4 = open(&(0x7f0000000100)='./bus\x00', 0x14d27e, 0x72) socket(0x2, 0x1, 0x0) socket(0x1e, 0x1, 0x0) socket(0x10, 0x2, 0x0) memfd_create$auto(0x0, 0x4) fallocate$auto(0x8000000000000003, 0x0, 0xd, 0x9) copy_file_range$auto(r4, 0x0, r4, 0x0, 0x2, 0x0) ioctl$auto_KVM_GET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)={0xdd, 0x0, [{0x4, 0x7}, {0xffffffff, 0xfe1, 0x3}, {0x5, 0x80000, 0xb62}, {0x101, 0x7, 0xc}, {0x6, 0x29, 0x2}]}) r5 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$auto_SO_TXREHASH(r5, 0x7, 0x4a, 0x0, 0x3) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), r5) 4.592909581s ago: executing program 0 (id=4340): r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv6/conf/bond0/forwarding\x00', 0x82002, 0x0) r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/virt_wifi0/ra_defrtr_metric\x00', 0x0, 0x0) mmap$auto(0xfffffffffffffffc, 0xe986, 0x33, 0xeb1, r1, 0x8000) r2 = socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) statx$auto(r2, 0x0, 0x401006, 0x4015, 0x0) setsockopt$auto(0x3, 0x1, 0x41, 0x0, 0x88) sendfile$auto(r0, r1, 0x0, 0x1) 4.348166111s ago: executing program 8 (id=4342): openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/ignore_tunneled\x00', 0x280, 0x0) mmap$auto(0x0, 0x2020009, 0x10001, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, 0x0, 0x40802, 0x0) io_uring_setup$auto(0x6, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x89fc, &(0x7f0000000000)={'ip_vti0\x00'}) ioctl$auto(0x4000000000000c8, 0x400454d1, 0x6) mmap$auto(0x200000000000, 0x5, 0x4, 0x40eb2, 0x401, 0x300000000000) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sg0\x00', 0x8402, 0x0) mmap$auto(0x0, 0x5810, 0xffc, 0x8000000008011, 0x3, 0x0) openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) mmap$auto(0x0, 0x2000d, 0x4000000000df, 0xeb1, 0x800000404, 0x8000) setrlimit$auto(0x1000000007, 0x0) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) move_pages$auto(0x0, 0x1002, 0x0, &(0x7f0000001140), 0x0, 0x2) 4.104876273s ago: executing program 0 (id=4344): ioctl$auto_SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000000)) (async) socket(0x2, 0x1, 0x106) (async, rerun: 32) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x14000, 0x0) (rerun: 32) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async, rerun: 64) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) (async, rerun: 64) r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp1\x00', 0x20002, 0x0) ioctl$auto_SNDCTL_DSP_POST(r1, 0x5008, 0x0) ioctl$auto_SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000440)="0db1") ioctl$auto_SNDCTL_DSP_GETOSPACE(r1, 0x8010500c, &(0x7f0000000040)) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x9, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) mmap$auto(0x0, 0xe983, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) r2 = io_uring_setup$auto(0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async, rerun: 32) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x20c280, 0x0) (rerun: 32) read$auto_kernfs_file_fops_kernfs_internal(r3, 0x0, 0x0) (async) r4 = open(&(0x7f0000000000)='./file0\x00', 0x26142, 0x4b) write$auto(r4, 0x0, 0x100082) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'vlan1\x00'}) (async) ioctl$auto_FS_IOC_SETFLAGS2(r4, 0x40086602, 0x0) (async, rerun: 32) pwrite64$auto(r4, 0x0, 0x8, 0x200000000000003) (async, rerun: 32) close_range$auto(0x2, 0xa, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x3f) (async) mmap$auto(0x0, 0x40009, 0x3, 0x9b72, 0x7, 0x28000) (async) socket(0x10, 0x2, 0x6) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) (async, rerun: 64) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) (rerun: 64) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x55) 3.733735776s ago: executing program 1 (id=4346): mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) r0 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/profile\x00', 0x199600, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_batadv(&(0x7f00000002c0), r1) sendmsg$auto_BATADV_CMD_SET_HARDIF(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x38, r2, 0x321, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x100}, @BATADV_ATTR_BLA_ADDRESS={0xa, 0x1f, @random="b6b82d7d73b2"}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_TPMETER_RESULT={0x5, 0xa, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r3 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000000)='/proc/swaps\x00', 0x1a3000, 0x0) r4 = openat$auto_ubi_ctrl_cdev_operations_ubi(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0) ioctl$auto_UBI_IOCATT(r4, 0x40186f40, &(0x7f0000000080)={0x1f, 0x0, 0x202, 0x9, 0x1}) sendmsg$auto_NLBL_MGMT_C_VERSION(r1, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x64, 0x0, 0x20, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_MGMT_A_DOMAIN={0x28, 0x1, '/sys/kernel/security/tomoyo/profile\x00'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x2}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x6}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x9}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x6}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x4}]}, 0x64}, 0x1, 0x0, 0x0, 0x4004004}, 0x800) pread64$auto(r3, 0x0, 0xa8, 0x4) sendmsg$auto_NL80211_CMD_DISASSOCIATE(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x120, 0x0, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@NL80211_ATTR_TIMEOUT={0x8, 0x110, 0x7}, @NL80211_ATTR_CNTDWN_OFFS_BEACON={0x103, 0xba, "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"}]}, 0x120}}, 0x40000) r5 = openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000c40)='/proc/self/syscall\x00', 0x80, 0x0) read$auto_proc_single_file_operations_base(r5, &(0x7f00000001c0)=""/164, 0xa4) getsockopt$auto_SO_NETNS_COOKIE(r0, 0xa, 0x47, &(0x7f0000000580)='\x18\x8a\xa6r\x06\xc1+5#\xe8\x85\x8d}@\xf9\x8a\x81\xbf#\xab\xb2kyj\xbc\x96K\xf4\xf7\x9c\xe9\xca\xae\x1c6\x01\x13O(\xed\xa9^\x19\x02pg@\x84\x87\x82\xa3\xdd\x95S\xf4\x0e\"\xcd\xcc\x99sU\xb9{\xb0\x1b\xbc\xfeG\x00\x98u\x0f\xb7\x1b%\xb8?ql \x00Tx_l\x935#\x00\x92[3n\xdd\xab|6>\xa7,`\xc4\x9dkuT\x8b\x94\x1b95Yr.\x8e\xe8\xe97\xa7\xf1\xf3\xf6\x83\xe6\x13\xd1\"G\xfc\xcf\xdf\x14\x8d\xd8\xe5', &(0x7f00000003c0)=0xffffff81) write$auto(r1, &(0x7f0000000240)='^%(\x00', 0x50) read$auto(r0, 0x0, 0xb4d3) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) r6 = openat$auto_ftrace_set_event_notrace_pid_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/set_event_notrace_pid\x00', 0x2000, 0x0) ioctl$auto_FIBMAP(r6, 0x1, 0x1) 3.697547839s ago: executing program 7 (id=4347): mmap$auto(0x0, 0x400009, 0xdf, 0x9b72, 0x8000000000000003, 0x8000) r0 = ioctl$auto_TUNSETVNETLE2(0xffffffffffffffff, 0x400454dc, &(0x7f0000000080)=0xd01) epoll_ctl$auto_EPOLL_CTL_DEL(r0, 0x2, 0xffffffffffffffff, &(0x7f00000000c0)={0x3, 0x7}) keyctl$auto(0x18, 0xfffffffffffffffd, 0x0, 0x628, 0xfffffffffffffffd) openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000400)='/dev/binderfs/binder0\x00', 0x40, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_SMC_NETLINK_GET_DEV_SMCD(r1, &(0x7f0000004380)={0x0, 0x0, &(0x7f0000004340)={&(0x7f0000004300)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB='\v'], 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x810) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), r1) read$auto(r1, &(0x7f0000000000)='\x00', 0x91e2) socket(0x2, 0x3, 0x100) socket(0x10, 0x2, 0x0) openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000400)='/dev/binderfs/binder0\x00', 0x0, 0x0) openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000000)='/dev/usbmon7\x00', 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) r3 = socket(0x10, 0x2, 0x4) close_range$auto(0x2, 0x8, 0x0) r4 = socket(0x10, 0x2, 0xc) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYRES8=r4, @ANYBLOB="18000000", @ANYRES8=r2], 0x18}, 0x1, 0x0, 0x0, 0x60008004}, 0x40000f0) write$auto(r3, &(0x7f0000000000)='\xde\x00', 0xfded) 3.694393121s ago: executing program 8 (id=4348): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000900), 0xffffffffffffffff) r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv6/conf/all/disable_ipv6\x00', 0x1401, 0x0) mmap$auto(0x0, 0x9, 0x1, 0xeb1, r0, 0x107fff) sysfs$auto(0x2, 0x100000000000035, 0x0) pwrite64$auto(r1, &(0x7f0000000040)='\vX\xb5n\x91p\xe6\x1eRN8\x99C\x05s\x1cJ\x99\x00:\x00!\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02l@^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2y\x1f\xee\xeeE\x18A\x14\xc6\xaa\x19\x9d\x17\xcf\x9e3!\x97\xe8X\xa3,a\xd5\x14\xb9\xa9\xb3\xf7\x19\xe5\xa6\x81\xbb 3\xc3\xec\x12\xef\xfbs\x9e}\xb0\xc9\x16I\x14\xbc\x01\xf0\x93O\xf0\x9byg\xb2\xdcZ\xf8g[\xf5\x97\x16\x0fm3\xcc\xc9\xaa\x812\b\x12\xffQq\xd5\xfc\xc5\xaf\xcd:1\xef\xca\xf3\xc7\xa4\xebS\x17\x99\x0f\xa3\x83\xb9\xbe\xa0u\x90(\xd2\xa5\xbe\xaf9a\x10K&\xf7N\xb8\xf5\x19\x12\x95\x1ex\xe3\x89\x9eU\xb5\x80\x0e\xfb\xe2\xd61\b\t\xa4H*v\x9a`%\xb4)\xa0\xb6\x11\xc3\xb4\xaa^\x02\xc5E\na\x03\xd3\xf2j\xa4Ly\xfa\xfcX.\xa1\xcfU\xcc\xec\x8b\x057\xda,v\x1br\xd3\xc1\xcc\xb4p\xff\x8c\x17YW\xc2\x92\xaf\xa8\x9c\x9dX]\xa4\x9a\x1a\xd5\x80B\x10\xd1\xd5\xca\x85\x9e)FT0\xe3\xb4\x19\x9dR\xc5\xdf\xb3\x9e\xea+2\x94\xba\x8c\xbe79\xba\x92\xcb\xd5\x87kB\xbd\xda\xf9\xb6)\xb3R\"\xe5A\xcfi\xd1\xf6\xa9\x86\x00\x88\x86\x05@d\xbc\xca\xd0v\xa07\xd9\x01Z\x89\xec\xce[J\xfeM\xfc\x1f\xe7j)\xe8\xdb\xfa\xa57\xe71\x9b\xbc\xf5|\xc6\xc8\xe7N\xd3i.|\xdd\xc0h\xd6', 0x8001, 0x20000000) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv6/conf/netdevsim0/ioam6_id_wide\x00', 0xe0283, 0x0) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_handshake(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$auto_HANDSHAKE_CMD_ACCEPT(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)={0x1c, r5, 0x1, 0x70bd27, 0x25dfdc00, {}, [@HANDSHAKE_A_ACCEPT_HANDLER_CLASS={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4002040}, 0x2004881c) sendmsg$auto_HANDSHAKE_CMD_DONE(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x3c, r5, 0x300, 0x70bd2b, 0x25dfdbfe, {}, [@HANDSHAKE_A_DONE_STATUS={0x8, 0x1, 0x1}, @HANDSHAKE_A_DONE_STATUS={0x8, 0x1, 0x1ff}, @HANDSHAKE_A_DONE_STATUS={0x8, 0x1, 0x3}, @HANDSHAKE_A_DONE_STATUS={0x8, 0x1, 0x7}, @HANDSHAKE_A_DONE_STATUS={0x8, 0x1, 0xffff7aed}]}, 0x3c}, 0x1, 0x0, 0x0, 0xd0}, 0x40000) write$auto(r3, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) r6 = socket(0x1e, 0x1, 0x0) connect$auto(r6, &(0x7f0000000140)=@tipc=@nameseq={0x1e, 0x1, 0x1, {0x43, 0x1, 0x3}}, 0x10) sendfile$auto(r2, r2, 0x0, 0x7fffe000) r7 = socket$nl_generic(0x10, 0x3, 0x10) pipe$auto(&(0x7f0000000340)=r1) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$auto_seg6(&(0x7f0000000080), r8) sendmsg$auto_SEG6_CMD_SETHMAC(r8, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)={0x34, r9, 0x6c5679fc7dece1a9, 0x70bd25, 0x25dfdbfb, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x6}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x3}, @SEG6_ATTR_HMACKEYID={0x8}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x24000014}, 0x400c810) sendmsg$auto_SEG6_CMD_SETHMAC(r7, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r9, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x225}]}, 0x1c}, 0x1, 0x0, 0x0, 0xa8c1}, 0x90) openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000000200), 0x622000, 0x0) 3.237712734s ago: executing program 0 (id=4349): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/tasks\x00', 0x63102, 0x0) r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/vrf/strict_mode\x00', 0x80202, 0x0) sendfile$auto(r1, 0x3, 0x0, 0x400000000008) close_range$auto(r0, r1, 0x101) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000140)={{0x0, 0x10, &(0x7f00000000c0)={0x0, 0x1fff8}, 0x8, 0x0, 0x2, 0xb}, 0xfff}, 0x5, 0x311) mmap$auto(0x0, 0x202000b, 0x3, 0xeb1, 0xfffffffffffffffa, 0x7ffe) socket(0x29, 0x2, 0x0) socket(0x10, 0x3, 0x0) ioperm$auto(0x7, 0x800, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) r2 = socket$nl_generic(0x10, 0x3, 0x10) fcntl$auto(r2, 0x10, 0x2) setsockopt$auto(0xffffffffffffffff, 0x10000000084, 0x7d, 0x0, 0x8) mmap$auto(0x0, 0x800400007, 0x65d, 0xffff, 0xffffffffffffffff, 0x20000000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ram6\x00', 0xc6fc1, 0x0) write$auto(0x3, 0x0, 0x7fffffff) unshare$auto(0x40000080) mmap$auto(0x6, 0xc000000000000000, 0x200000000007ff, 0x800000000ebf, 0x404, 0xd) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0xe, 0x0, 0x20) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) io_uring_setup$auto(0x8, 0x0) close_range$auto(0x2, 0x8, 0x0) clock_nanosleep$auto(0x2, 0x6, 0x0, 0x0) socket(0xa, 0x2, 0x88) 3.235876044s ago: executing program 7 (id=4350): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)) mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000) (async) r1 = openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/oom_score\x00', 0x0, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/bus/netdevsim/new_device\x00', 0x149b01, 0x0) (async) r3 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0) setresuid$auto(0x0, 0x7, 0x8080) (async) rename$auto(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00') (async) setfsuid$auto(0x0) r4 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x82000, 0x0) r5 = bpf$auto_BPF_LINK_CREATE(0x1c, &(0x7f0000000300)=@task_fd_query={0x0, r4, 0x6, 0xa, 0x5, 0x5, r3, 0x400000000000003, 0xffff}, 0x19) mmap$auto(0x0, 0x2020005, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) socketcall$auto_SYS_ACCEPT(0x5, &(0x7f0000001140)=0x8001) (async) r7 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/block/loop14/queue/dma_alignment\x00', 0x80000, 0x0) read$auto(r7, 0x0, 0x20) bpf$auto_BPF_LINK_CREATE(0x1c, &(0x7f0000000480)=@bpf_attr_7={@btf_id=0xfffff801, 0x80, 0x3, r6}, 0x1002) ioctl$auto_XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, &(0x7f00000014c0)={{r1, &(0x7f00000011c0)="c08d64ac354ce82a4c7f0e882931a6dd51c50024fc524698a7b25f51d437b3ea5ffea287c2131f1da89085209deb2b65260f9999ce3f4ce340c34f9e44fe4f8089966706f6d6d7b57ad14a36bb1403b4674475e3a50e50c59107be2076fceb21b9ce3b2bcc92c65a63cc08d7bddef682bf091878d28b2cd310c644405387feb37f6c55b7d3a5f9b29eb5434226f50d4d486dc50aa7e84b4b5295232204fbc7", 0x2, &(0x7f0000001280)="de175549b1f1d9bf40f1125bcb3c5eda0c6aeb18aa9f6593256b7994c6da78d8d0da9e7150cb0beca20fc07f68eb190be716a65488990baff4d810accc9e0ccd96a9b9f1907cb968511deba8a939597c429bb7332e02a6", 0x3, &(0x7f0000001300)="5e421ecb52c22269d83a43eff0418da1ad43342d5262697ccaa46b68f7c33e896d09dfab5b09fdf4b174abbcec8dad8fdbfdc2591c15c32109e1a8c5dd21f4f7a4561dcabc414597823ea0ab349005fb34ab9abf42567a5f2efb10510c96539535f5ce0320ce7a8deca4d408060317f190c350cf77d9964d1669c1a2daa4d9c926ed11349ab828eae13b99905346097c4f8bcf7968e26645451813edb49307865003da524f253a405a75056a2f2d8ef4f59b9cfba65f6d89f45099309350f2ec3614f297839fe4177ac0dd2463", &(0x7f0000001400)=0x6}, {[0x9, 0x3, 0x80000000, 0x8eb1]}, 0x5, 0x6709d7c3, &(0x7f0000001440)="572b24045e02d44db132a2f609b8532e5f9dce072ebd19958a3c0e0dafb6e39dc2a2c565e54c45527fe2c0cb62d59c632e0ec663ac4ee69ff44a3963118bcb7b41a73b140c48d1abca7f88952c2dad38e689cd6032b143e1343b83ea88"}) r8 = setfsgid$auto(0xee01) setresgid$auto(r8, 0x0, 0x0) (async) ioctl$auto_KVM_GET_DEVICE_ATTR(r5, 0x4018aee2, &(0x7f0000000140)={0x6, r8, 0x3, 0x1}) (async) r9 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r9, &(0x7f0000000200)={0x0, 0x7}, 0x3) mknod$auto(&(0x7f0000000080)=':,\x00', 0xcb, 0xfffffffa) execve$auto(&(0x7f0000000100)=':,\x00', 0x0, 0x0) (async) mknod$auto(&(0x7f0000000b00)='X))\x00', 0x63c1, 0x7ff) (async) writev$auto(r2, &(0x7f0000000200)={0x0, 0x9}, 0x7) r10 = openat$auto_loop_ctl_fops_loop(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) io_uring_register$auto(r10, 0x2, &(0x7f0000000100)="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", 0x2dcd) (async) r11 = openat$auto_check_wx_fops_(0xffffffffffffff9c, &(0x7f0000000040), 0x8800, 0x0) read$auto_check_wx_fops_(r11, &(0x7f0000001100)=""/3, 0x3) 2.935299501s ago: executing program 8 (id=4351): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000440)='/sys/devices/virtual/block/ram13/ro\x00', 0x80404, 0x0) r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000280)='/proc/thread-self/fail-nth\x00', 0x2, 0x0) write$auto(r0, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) r1 = socket(0x2, 0x3, 0xa) connect$auto(r1, &(0x7f0000000080)=@in={0x2, 0x9, @dev={0xac, 0x14, 0x14, 0xc}}, 0x54) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/bdi/43:288/max_ratio_fine\x00', 0x10b142, 0x0) sendfile$auto(r1, r2, 0x0, 0x1000200) write$auto(0x3, 0x0, 0x100082) socket(0xf, 0x3, 0x2) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000440)='/sys/devices/virtual/block/ram13/ro\x00', 0x80404, 0x0) (async) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000280)='/proc/thread-self/fail-nth\x00', 0x2, 0x0) (async) write$auto(r0, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) (async) socket(0x2, 0x3, 0xa) (async) connect$auto(r1, &(0x7f0000000080)=@in={0x2, 0x9, @dev={0xac, 0x14, 0x14, 0xc}}, 0x54) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/bdi/43:288/max_ratio_fine\x00', 0x10b142, 0x0) (async) sendfile$auto(r1, r2, 0x0, 0x1000200) (async) write$auto(0x3, 0x0, 0x100082) (async) socket(0xf, 0x3, 0x2) (async) 2.792001188s ago: executing program 1 (id=4352): setrlimit$auto(0x7, &(0x7f0000000000)={0xfffffffffffffffe, 0xfb3}) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/fs/orangefs/getattr_timeout_msecs\x00', 0x8a82b6a56f18970a, 0x0) sendfile$auto(0x2, 0x3, 0x0, 0xc3e0) clone$auto(0x2, 0x5feb, 0x0, 0x0, 0x2000000000003) fremovexattr$auto(r0, &(0x7f0000000040)='&]}/#\x00') gettid() ioperm$auto(0x7, 0x6, 0x80) wait4$auto(0x0, 0xfffffffffffffffc, 0x60000003, 0x0) 2.489293206s ago: executing program 1 (id=4353): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sendmsg$auto_NL80211_CMD_SET_MPATH(0xffffffffffffffff, 0x0, 0x20000000) (async) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty17\x00', 0x0, 0x0) (async) socket(0x2, 0x1, 0x106) (async) bpf$auto(0x0, &(0x7f0000000780)=@link_update={0xa, @new_map_fd=0x5, 0x4007, @old_prog_fd=0x13b}, 0xa3) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, 0x0, 0x0) r1 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f00000002c0), r0) sendmsg$auto_OVS_DP_CMD_NEW(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000280)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010026bd7000f8dbdf250100000008000200", @ANYRES32=0x4, @ANYBLOB="080001004866520008000200"], 0x2c}, 0x1, 0x0, 0x0, 0x801}, 0x80) r2 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$auto(0x3, 0x400454da, 0xffffffffffffffff) (async) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, 0x0, 0x1000c000) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_DP_CMD_DEL(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0109080000000000002502"], 0x38}, 0x1, 0x0, 0x0, 0x20040011}, 0x20000000) openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, 0x0, 0xa00, 0x0) (async) adjtimex$auto(&(0x7f0000000000)={0x16, 0x0, 0x7, 0x4, 0x7fffffff, 0x4, 0x100, 0x0, 0x5, 0xffffffffffff8000, 0x4, {0x3, 0xa}, 0xe5, 0x9, 0x9, 0x4, 0x0, 0x6, 0x6, 0x81, 0x20, 0xffffffffffff8472, 0x1000}) (async) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x3fd, 0x8000) (async) close_range$auto(0x2, 0x8, 0x0) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xfffffffffffffffe, 0x8000) (async) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) write$auto(r4, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) madvise$auto(0x0, 0x2003f0, 0x15) 2.404502011s ago: executing program 8 (id=4354): close_range$auto(0x2, 0x8, 0x0) r0 = socket(0x2, 0x80002, 0x73) mmap$auto(0x0, 0x2020009, 0x20000000000de, 0xeb1, r0, 0x8000) (async) socket(0xa, 0x5, 0x84) setsockopt$auto(0x3, 0x84, 0x17, 0x0, 0x27) 2.204999165s ago: executing program 7 (id=4355): mmap$auto(0x0, 0x2020009, 0x7, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket(0x29, 0x2, 0x0) setsockopt$auto(r0, 0x119, 0xfffffffe, 0x0, 0x1) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/controlC1\x00', 0x20000, 0x0) close_range$auto(0x0, 0xffffeffe, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL802154_CMD_SET_SEC_PARAMS(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[], 0xb5c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) connect$auto(0x3, &(0x7f00000018c0)=@llc={0x1a, 0x30f, 0xe6, 0x9, 0x7, 0xf7, @local}, 0x55) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "abe6de3d6468fe8000"}, 0x55) close_range$auto(r1, 0xfffffffffffff000, 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=ANY=[@ANYBLOB="14400000", @ANYRES16=r3, @ANYBLOB="01032dbd7000ffdbdf251100fffc"], 0x14}}, 0x400c0) r4 = socket(0x1d, 0x2, 0x7) r5 = socket(0x2, 0x6, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$auto(r4, &(0x7f0000000000)=@can={0x1d, r6}, 0x6a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'ip6gre0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'virt_wifi0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond_slave_0\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000900}, 0xc, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="18010000", @ANYRES16=r3, @ANYBLOB="000227bd7000fbdbdf25190000000c00018008000100", @ANYRES32=r6, @ANYRES8, @ANYRES32=r7, @ANYBLOB="08000100fb69fec689ffd16700000000000001019ae37c8d9df7fe74e323d09956b73a7ced", @ANYRES32=r8, @ANYBLOB="08000100", @ANYRES32=r9, @ANYBLOB="14000200766c616e300000000000000000000000080003000700000008000300000000000800030004000000280001801400020067656e65766530000000000000000000080003000600000008000300070000002400078008000100050000000800020041800000080002008c00000008000100080000004800018014000200766c616e310000000000000000000000080003000100000014000200626f6e645f736c610000001400020076657468305f746f5f626f6e6400000014000780080002006d05000008000200050000000000000000"], 0x118}, 0x1, 0x0, 0x0, 0x80}, 0x4000) landlock_create_ruleset$auto(&(0x7f0000000000)={0xff, 0x400000000000401, 0x9}, 0x9, 0x0) landlock_restrict_self$auto(r1, 0x0) socket(0xa, 0x3, 0x94) openat$auto_drm_crtc_crc_data_fops_drm_debugfs_crc(0xffffffffffffff9c, &(0x7f0000000080), 0x10000, 0x0) r10 = openat$auto_ftrace_formats_fops_trace_printk(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/printk_formats\x00', 0x535e00, 0x0) fchown$auto(r10, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x1, 0x0) 1.976506447s ago: executing program 8 (id=4356): prctl$auto_PR_SET_SPECULATION_CTRL(0x35, 0x3, 0x80000001, 0x6fe, 0x3) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_gtp(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$auto_GTP_CMD_DELPDP(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)={0x1c, r1, 0x1, 0x70bd2f, 0x25dfdbfb, {}, [@GTPA_VERSION={0x8, 0x2, 0x3}]}, 0x1c}, 0x1, 0x4000000, 0x0, 0x10}, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = openat$auto_uhid_fops_uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r3 = openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000380)='/dev/cuse\x00', 0x0, 0x0) read$auto(r3, 0x0, 0x7fff) r4 = socket(0x11, 0x80003, 0x300) setsockopt$auto(r4, 0x107, 0x1, 0x0, 0x8004) statmount$auto(0x0, &(0x7f0000000180)={0x6, 0x1, 0x401bf, 0x7352, 0x37, 0x400000000065f, 0x1ffde, 0x40007, 0x7f, 0x20000005, 0x9, 0x3, 0x6, 0x400000004, 0xb4, 0x4, 0x6, 0x2, 0x1, 0xfff, 0xfffffff7, 0x10, 0x1fff, 0x203, 0x838b, 0x84, 0x12, 0x100, 0x5, 0x0, 0x7ff, [0x0, 0x10000000000006, 0x0, 0x40000000000, 0x1, 0xffffffffffffffff, 0x0, 0x0, 0x400, 0x3, 0x9, 0x1, 0x0, 0x0, 0x7, 0x0, 0x400000000001ff, 0xb06d, 0x10001, 0x0, 0x3, 0x1, 0x0, 0x0, 0x8, 0x0, 0x251, 0x3, 0x0, 0x0, 0x8, 0x0, 0xfffffffffffff7cc, 0x0, 0x400000000000002, 0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x9, 0x8, 0x2010]}, 0x1fe, 0x8) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x3d, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r5 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r5, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) sync_file_range$auto(r5, 0x3, 0x0, 0xa00000) close_range$auto(r2, r2, 0x2) socket(0x2, 0x5, 0x0) bind$auto(0x3, 0x0, 0x6a) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) pwrite64$auto(0xc8, &(0x7f0000000000)='\vX\xb5n\x91p\xe6\x1eRNM\x99\x86\xdde\x1cJ\x99\x00\x00\x00\x00\x00\x00\xfd\xfd\xd3\xd3\x1d\xf8\xbe\x01\x00\x00\x00\'\x03\x00\x00\x9f\x1e\xf9\xa4*\x01\x00\x00\x00^B\xb8\xe4j\t3\xe4\x90\xcc\x9d\xc5\x0fo\x84\xf4\x89\v\xea\x1b\x95\xafQ;CL\"\x01@\x00\x00\x00\x00\f\x00\xc0\x13\xc8\xe2\xae\xf5\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8d\x81\x81O*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,8\x93\xba\x88\x93\x9d\xb6\x1a\x7f\xc0%\xb0\x83ROJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd6eWj\xdc\xac\x88\xf0\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\xfb\xba\xb2.$\'\x1e\x82\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00\x00\xff\xff\x00'/250, 0xfdf3, 0x6) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) open(0x0, 0x261c2, 0x84) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) r6 = socket(0x2a, 0x2, 0x1) connect$auto(r6, &(0x7f00000000c0)=@qipcrtr={0x2a, 0x1, 0xfffffffe}, 0x55) openat$auto_qrtr_tun_ops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0x10002}, 0x1) 1.765708766s ago: executing program 7 (id=4357): r0 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000002340)='/dev/binderfs/binder0\x00', 0x0, 0x0) r1 = inotify_init1$auto(0x3000000000000) ioctl$auto_BLKPBSZGET(r1, 0x127b, 0x0) mmap$auto(0x0, 0x800008, 0xfffffffffffffe01, 0x1000000000008011, r0, 0x8000) umount2$auto(&(0x7f0000000000)='.^\x00', 0xffffffff) mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb2, 0x401, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/mm/lru_gen/min_ttl_ms\x00', 0x2ab42, 0x0) socket(0x2, 0x1, 0x106) mmap$auto(0x0, 0x2020009, 0x8, 0xeb1, 0xfffffffffffffffa, 0x3) io_uring_setup$auto(0x6, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) r2 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/self/net/ip_tables_targets\x00', 0x0, 0x0) pread64$auto(r2, 0x0, 0xf42f, 0x7f) r3 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/bus/usb/013/001\x00', 0xa901, 0x0) kexec_load$auto(0x4, 0x1, &(0x7f00000000c0)={@kbuf=&(0x7f0000000340)="d7c108422e17e91d2e7d8a1f5e69a725323b5d5bf1c22a47925d", 0x7, 0x0, 0x7}, 0xff) ioctl$auto_USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000000080)={0x2, 0x80, 0x10001, 0x5, &(0x7f0000000000), 0x9, 0x3, 0x2, @number_of_packets=0x7c49, 0x7, 0x476, 0x0}) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) unshare$auto(0x40000080) close_range$auto(0x0, 0xffffffffffffffff, 0x2) socket(0x28, 0x5, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x400c890}, 0x800) sendmsg$auto_TASKSTATS_CMD_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x400c0}, 0x4040000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYRESHEX=r4, @ANYBLOB="1200", @ANYBLOB="5de1"], 0x1ac}, 0x1, 0x0, 0x0, 0x8020}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x9, &(0x7f0000000180)={0x0, 0xc4}, 0x3, 0x0, 0x0, 0x4004}, 0x7}, 0x5, 0x0) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/net/rpc/nfs4.nametoid/channel\x00', 0x8f3b7a51b80ebd01, 0x0) close_range$auto(0x2, 0xa, 0x0) 972.554476ms ago: executing program 7 (id=4358): r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio1\x00', 0x80e42, 0x0) r1 = openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/schedstat\x00', 0x100800, 0x0) r2 = prctl$auto_PR_TIMER_CREATE_RESTORE_IDS_ON(0x6, 0x1, 0xffffffffffffffff, 0x3, 0xd) read$auto_proc_pid_numa_maps_operations_internal(r2, &(0x7f00000001c0)=""/252, 0xfc) (async) read$auto_proc_single_file_operations_base(r1, &(0x7f00000000c0)=""/14, 0xe) (async) ioctl$auto_SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000080)) (async, rerun: 64) bpf$auto_BPF_ENABLE_STATS(0x20, &(0x7f0000000000)=@token_create={0x3, r0}, 0x3) (rerun: 64) write$auto_tracing_fops_trace(r3, &(0x7f0000000140)="378e7680981bae4d294736178c24bb8788639853d4e119dab3eb6ce64c5b37847ae7173803c2775c95b2892bdd7eefda2a434eb58f3bacdf8506ca506cd16921410a18965d221850a675f8efa6a2dd6f9841b73c2e108da83e", 0x59) (async) clock_gettime$auto(0x5, &(0x7f0000000180)={0x10001, 0x1cc}) (async) ioctl$auto_SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000140)) 763.471368ms ago: executing program 8 (id=4359): r0 = socket(0xa, 0x5, 0x0) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop13\x00', 0x60742, 0x0) write$auto(r1, &(0x7f0000000040)='//\xf2\x00', 0x80000000) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) timer_create$auto(0x0, 0x0, 0x0) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r2, 0x0, 0x0) mmap$auto(0x6, 0x4, 0x4000000000dd, 0x40eb1, r2, 0x300000000000) mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) unshare$auto(0x40000080) mmap$auto(0x0, 0x2020009, 0x2, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) r3 = io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0xd, 0x2, 0x6, 0x7, 0x8, 0xffffffffffffffff, [], {0x6, 0x6, 0xf, 0x29f, 0x100, 0x83, 0x101, 0x6, 0x2}, {0x100, 0x1, 0x52, 0x5, 0x1, 0x40, 0x76c5, 0x8, 0x100000000}}) io_uring_register$auto(0x2, 0x11, &(0x7f0000000180), 0x83) sendmsg$auto_NL80211_CMD_LEAVE_OCB(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000028bd7000fcdbdf256d002a85c36c0a00107c4c000400d1000600b400030000000500020000000000"], 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) r4 = socket(0xa, 0x2, 0x73) getsockopt$auto_SO_TIMESTAMPNS_NEW(r4, 0x0, 0x40, 0x0, &(0x7f0000000240)=0x400) madvise$auto(0x0, 0xffffffffffff0005, 0x17) mbind$auto(0x8000, 0xfa9d, 0x2, &(0x7f0000000280)=0x20000000000000fb, 0x3, 0x1) set_mempolicy_home_node$auto(0x0, 0x2010001, 0x0, 0x0) mmap$auto(0x4000000005, 0x10004000a, 0x210, 0x9b72, r2, 0x0) shutdown$auto(r0, 0xfff) socket(0x2, 0x1, 0x0) openat$auto_proc_pid_numa_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/numa_maps\x00', 0x22000, 0x0) r5 = mq_open$auto(&(0x7f0000000280)='\\*)A\x00', 0x7e, 0x9, 0x0) mq_notify$auto(r5, &(0x7f0000000180)={@sival_ptr=0x0, @raw=0x1, 0x1, @_sigev_thread={0x0, 0x0}}) r6 = mq_open$auto(&(0x7f0000000280)='\\*)A\x00', 0x7e, 0x9, 0x0) mq_notify$auto(r6, 0x0) read$auto_proc_sessionid_operations_base(r3, &(0x7f00000000c0)=""/4078, 0xfee) 660.369581ms ago: executing program 1 (id=4360): epoll_create$auto(0x4) rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x0, 0x6, 0xffffffff, 0x2}, 0x8000, 0x0, 0x6) rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x0, 0x6, 0xffffffff, 0x2}, 0x8000, 0x0, 0x6) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptyua\x00', 0x20804, 0x0) r0 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000000)='/dev/usbmon7\x00', 0x40080, 0x0) r1 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/pagemap\x00', 0x201, 0x0) ioctl$auto_PAGEMAP_SCAN(r1, 0xc0606610, &(0x7f000000c380)={0x60, 0x0, 0x3, 0x7fffbfffefff, 0xfffffffffffffffe, 0x0, 0x8, 0xbff, 0x2c, 0x2c, 0x3, 0x2}) mmap$auto(0x0, 0x4000002, 0xfffffffffffffe01, 0x8051, 0x3, 0x0) r2 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f00000031c0)='/dev/ttyua\x00', 0x109000, 0x0) socket(0x5, 0x4, 0x4) fsconfig$auto_SHMEM_HUGE_NEVER(r0, 0x3, &(0x7f0000000080)='/dev/ptyua\x00', &(0x7f0000000280)="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", 0x0) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) select$auto(0x8, 0x0, 0x0, &(0x7f0000000200)={[0x80000000008, 0xffffffffffffff4b, 0x100000001, 0x15, 0x80000001, 0x1, 0x5, 0x5, 0x8, 0x40000000000000, 0x2dde, 0x8, 0xfffffffffffffffa, 0xab, 0x8000000000000, 0x4]}, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) capset$auto(0x0, 0x0) io_uring_setup$auto(0x1, 0x0) poll$auto(&(0x7f0000000040)={0xffffffffffffffff, 0x7, 0x8}, 0x80, 0x400400) close_range$auto(r2, 0x8, 0x0) 552.709006ms ago: executing program 7 (id=4361): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) open_by_handle_at$auto(r0, 0x0, 0x1) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) setreuid$auto(0x0, 0x0) waitid$auto_P_PGID(0x2, 0x0, 0x0, 0x3, &(0x7f0000000440)={{0x8, 0x6}, {0x8, 0xc5e}, 0x100000001, 0x3, 0x1, 0xf9, 0xfffffffffffffffc, 0x5, 0x6274, 0x9, 0x0, 0xb, 0x35d, 0x439c, 0x9, 0x7}) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/adsp1\x00', 0x20342, 0x0) mseal$auto(0x0, 0x7dda, 0x0) openat$auto_tracing_pipe_fops_trace(0xffffffffffffff9c, 0x0, 0x20c01, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x81) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x10000000000001ff, 0x7, 0xd3e, 0x20, 0x9687, 0x100000000000003, 0x95f4da0a, 0x6, 0x3, 0x62, 0x8, 0x7, 0x6d3f, 0x9, 0x6, 0xfffffffffffffffe]}, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r1 = openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x8001, 0x0) write$auto(0x3, 0x0, 0x5c5) ioctl$auto_SNAPSHOT_FREE(r1, 0x3305, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_FLOW_CMD_GET(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40010}, 0x448c0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0x30}, 0x1) close_range$auto(0x2, 0xa, 0x0) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) fanotify_init$auto(0x65, 0x2) pipe$auto(0x0) dup2$auto(0x5, 0x4) splice$auto(0x4, 0x0, 0x2, 0x0, 0x80000001, 0x9) write$auto(0x6, 0x0, 0x100000001) clock_settime$auto(0x0, &(0x7f0000000000)={0x100000000, 0x3b9ac9ff}) clock_gettime$auto(0xb, &(0x7f0000000400)={0x705, 0x82}) 0s ago: executing program 0 (id=4362): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r1, 0x800, 0x70bd25, 0x6, {}, [@NL802154_ATTR_MIN_BE={0x5, 0x11, 0x4}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x2}, @NL802154_ATTR_WPAN_PHY_NAME={0x8, 0x2, ')!+\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10040}, 0x800) r2 = openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/pcmC0D0c\x00', 0xc744ae3bc2f645ce, 0x0) ioctl$auto_SNDRV_PCM_IOCTL_HW_PARAMS2(r2, 0xc2604111, &(0x7f0000000180)={0x3, [{[0xc, 0x1ff, 0x6e81, 0x40, 0x8, 0x9, 0x4, 0x6263]}, {[0x3ff, 0xfffff800, 0x5, 0x5, 0xffff, 0xffffffff, 0x8, 0x956b]}, {[0xf, 0x6, 0x800, 0xd, 0x80000000, 0x8, 0x3, 0x8000]}], [{[0xd, 0x0, 0xa, 0x100000, 0x4, 0x2, 0xc, 0x3]}, {[0x9, 0xc09, 0x3ff, 0x13b9, 0x480, 0x2, 0x6, 0x2]}, {[0x9, 0x1, 0x3, 0x0, 0x7, 0x6, 0x9, 0xc4]}, {[0x4c, 0xceb, 0x7, 0x7, 0x3, 0x4, 0x7, 0x40000000]}, {[0x7fff, 0x7, 0xe, 0xfffffffa, 0x3ff, 0x80, 0x99, 0xb]}], [{0xffff, 0x81, 0x0, 0x0, 0x1, 0x1}, {0x6, 0xfffffeff, 0x0, 0x1, 0x0, 0x1}, {0x2, 0x9, 0x1, 0x1}, {0x7, 0x2, 0x0, 0x1, 0x1}, {0x5, 0x3, 0x0, 0x0, 0x1, 0x1}, {0x2, 0x44d8, 0x1, 0x0, 0x1}, {0x3, 0x4735, 0x1, 0x1, 0x1}, {0x0, 0x4, 0x1, 0x1, 0x1, 0x1}, {0x0, 0x3, 0x0, 0x0, 0x0, 0x1}, {0xb035, 0x3, 0x1, 0x0, 0x1, 0x1}, {0xca48, 0x7ff, 0x0, 0x1, 0x1}, {0xf421, 0x7, 0x0, 0x1, 0x1, 0x1}], [{0x5, 0x2, 0x0, 0x1, 0x1, 0x1}, {0x2, 0x2, 0x1, 0x1, 0x1}, {0x7, 0x4, 0x0, 0x0, 0x0, 0x1}, {0x5, 0xffff, 0x1, 0x0, 0x1, 0x1}, {0x159, 0x1, 0x1, 0x1, 0x0, 0x1}, {0x3, 0x0, 0x0, 0x0, 0x0, 0x1}, {0xa, 0x0, 0x0, 0x1}, {0x7a23, 0x9, 0x1, 0x1, 0x1, 0x1}, {0x0, 0x6, 0x0, 0x1}], 0x0, 0x7, 0xfffffffb, 0x8e9, 0x7fff, 0x200, 0x8b, "0ba18dbeeecf99a26043b5d5c528d3ec", "c999d34398429069fc5a53f7d9a927b374b487e485d2bc3532b03bcd2ca5f65e77911eaa1e81dc6fe4a254325c3332eb"}) r3 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000440), r0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000480)={'nr0\x00', 0x0}) sendmsg$auto_NL802154_CMD_DEL_INTERFACE(r0, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x38, r3, 0x3f7d0cbe35a65418, 0x70bd29, 0x25dfdbfd, {}, [@NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x3}, @NL802154_ATTR_CCA_OPT={0x8, 0xd, 0x9}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x7}]}, 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x8000) r5 = geteuid() sendmsg$auto_NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000900)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x80208040}, 0xc, &(0x7f00000008c0)={&(0x7f00000005c0)={0x300, r3, 0x4, 0x70bd2c, 0x25dfdbfc, {}, [@NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x1}, @NL802154_ATTR_MAX_BE={0x5, 0x10, 0xd8}, @NL802154_ATTR_SCAN_DURATION={0x5, 0x24, 0x9}, @NL802154_ATTR_PEER={0x2d1, 0x28, 0x0, 0x1, [@generic="8177eec1ac2807c70d9ce8c56a6a6c122784cd07563cacd73d4408fbe20753ba93513453895c267c96bf55464a8592e41097e7d177ba6fd1cef28629999c2bed66e7027d289b0dd0d62cea12f13d5646bea68bc026e3160aae51400c37f0387a077c5d042ff087cb15ec7f6c316f9029a6c900a50c832072dd424609c5a7d8d685f7cbae5c7f044a6003607aac838b8879c5006493fab65de97b7bb9da22e86cdacd5de74e937dc4e661b0e009cb38dc90281840acc3005d6e40c3177ac03647cb1ab6b6666f76502b80dc7d9d7f964f620dd671f41ba8efb8182489fc0cadaa80fedfbb22e269617f4993ff8964ffc840e253f1d4bcd10ea793bb5949", @nested={0x1cf, 0xa, 0x0, 0x1, [@generic="93c95645863f1ff163d0d02aa9f35499062646546e52fd5197fdb1ac2a39287c0bdc26917a8a77166d3a7a4852d129ea759108989078503d95fc7b9147a9aa6e528cc3a37289903c176ba77237709fe7b6652933b766598ac0b759a2f1e2a90992432f54b1a31078e4776b50e7a8b49fe2aa5e564bc0", @generic="a1cb915f1eb5ee68fb0b32b92ab7f2bec90c5cfea8e730d2be89ee2abf1d49384eeb7598051874ac68e42b2dd9599718ebe2f9971f97538402aa168b1243ca43ebbc7769004c9170e95a1da3ff38da6301f82eaa56e550d169b57f8f29fa033c54f65349941b0694e7982940b6c76155e63ca4e3ebee3922032c87a07d96bce5e6dd90b695fd39131ddb64847eb764aa1d20d956847cdf3847a42c1cb8", @typed={0x8, 0xfc, 0x0, 0x0, @uid=r5}, @generic="6245b0b7797bceee7d843f275627f7ed96498308698f7e5c939abf912fa585f14f0e3b913435b844de79435bfcda0a54c88dae01bfbc953698f49dabecc5b15c4dd78189052d6d9f600e2aa62df33a32c7bbf53d1d371a8c6f6fbe1788b8521a5662f335365353008ea03846109a2486197d307aebe6015f42fd3db5a53d08ad266f61883109491ee300ce78045106e4ada97417301fc6eab6c8ffbd73c6f46a466f52e9525cb8dfad62fc8f240368dc"]}]}]}, 0x300}, 0x1, 0x0, 0x0, 0x1}, 0x804) openat$auto_dev_fops_plock(0xffffffffffffff9c, &(0x7f0000000940), 0x2c4000, 0x0) r6 = openat$auto_btrfs_dir_file_operations_inode(0xffffffffffffff9c, &(0x7f0000000980)='/sys/devices/virtual/bluetooth/hci4\x00', 0x10400, 0x0) ioctl$auto_FS_IOC_MEASURE_VERITY(r6, 0xc0046686, &(0x7f00000009c0)={0x7, 0x110, "dbca31d6fcd919"}) r7 = syz_genetlink_get_family_id$auto_802_15_4_mac(&(0x7f0000000a40), r0) sendmsg$auto_IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x30, r7, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_SECLEVEL={0x5, 0x2a, 0x6}, @IEEE802154_ATTR_TXPOWER={0x5, 0x21, 0x2}, @IEEE802154_ATTR_DEST_HW_ADDR={0xc, 0xf, 0xfffffffffffeffff}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x40800) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000b80), r0) sendmsg$auto_OVS_DP_CMD_GET(r8, &(0x7f0000000c40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x3c, r9, 0x2, 0x70bd27, 0x25dfdbfe, {}, [@OVS_DP_ATTR_UPCALL_PID={0x8, 0x2, 0xffffffffffffffff}, @OVS_DP_ATTR_UPCALL_PID={0x8, 0x2, 0xffffffffffffffff}, @OVS_DP_ATTR_MASKS_CACHE_SIZE={0x8, 0x7, 0x2}, @OVS_DP_ATTR_IFINDEX={0x8, 0x9, r4}, @OVS_DP_ATTR_NAME={0x8, 0x1, '\x18{{\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40008000}, 0x30004041) clock_gettime$auto(0x7, &(0x7f0000000c80)={0x3137, 0x9}) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000cc0)='/proc/self/pagemap\x00', 0x2, 0x0) shmctl$auto_SHM_STAT_ANY(0x9, 0xf, &(0x7f0000000dc0)={{0x8, r5, 0xee01, 0xdea8, 0xc, 0xfffffffb, 0x101}, 0xffffff7f, 0x9, 0x81, 0x8, @inferred=0xffffffffffffffff, @raw=0x4, 0x183, 0x0, &(0x7f0000000d00)="6a67d6fa6c3841126c91da2cd8735fb0d6c67b865269", &(0x7f0000000d40)="d0f345aa212450713f9bdbeea495c3f9209f9c3841e3c47cb4f125411534b5204829dd0046908b670ef2fc2766902c5086aa96230e787831e495cbc5171d62df520cf5f58cd0b818fa03004c48a6872d98f24b8382be5d04ea6ab16dd0a5b7"}) msgctl$auto_MSG_STAT(0x9, 0xb, &(0x7f0000000ec0)={{0xf4a, r5, 0xee01, 0x9, 0x2, 0x4, 0x6}, &(0x7f0000000e40)=0x6, &(0x7f0000000e80), 0xffffffffffff8001, 0x1, 0x1f, 0x6, 0x2, 0xfff, 0x0, 0x0, @raw=0x7}) ioctl$auto_XFS_IOC_FREESP(0xffffffffffffffff, 0x4030580b, &(0x7f0000000fc0)={0xbe9, 0x7, 0x419, 0xffff, 0x6f68, 0x0}) r13 = getpgrp(0x0) msgctl$auto_IPC_INFO(0x83c4, 0x3, &(0x7f0000001000)={{0x6, r10, r11, 0x2, 0x1, 0x80, 0x1}, &(0x7f0000000f40)=0x7f, &(0x7f0000000f80)=0xc, 0xf7fc, 0xe189, 0x4, 0x4, 0x7f7, 0x8, 0x81, 0x2, @inferred=r12, @inferred=r13}) ioctl$auto_FICLONERANGE(r2, 0x4020940d, 0x6) r15 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000010c0), r8) sendmsg$auto_NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000001180)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001140)={&(0x7f0000001100)={0x2c, r15, 0x800, 0x70bd2d, 0x25dfdbff, {}, [@NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, 0x7}, @NL80211_ATTR_WIPHY_ANTENNA_RX={0x8, 0x6a, 0xffffffff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x8000) r16 = syz_open_procfs$namespace(r14, &(0x7f0000001200)='ns/ipc\x00') sendmsg$auto_NL80211_CMD_SET_COALESCE(r8, &(0x7f0000002580)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000002540)={&(0x7f0000001240)={0x12c8, r15, 0x101, 0x70bd28, 0x25dfdbff, {}, [@NL80211_ATTR_CQM={0x12a2, 0x5e, 0x0, 0x1, [@generic="49bfd0fb584e01c307c677d357d6ea37a14625ba4fe02ec0e1a3e1690956bfe6e6cc0a8c7bf6342e66614814ab629d18d6027613e9525b0590d9204db80ec70e7917671ff49019661c6801c39454a7ab6dac5b37e178cc6c5e8e1d0f8d0641e6f837c89a333d73c6c5c4528677c3ae033619e13c5e919ff849995228c0607182acd1f02d1be1cd1b544833a1e3862bf10957b9e3f37db928bf94cd73f9a83ddd60ecbf6ff9cf5bb34253242010153dd47b6296941894523cfdbb243cb248042dfec12b17044862e4fa58", @typed={0x8, 0x62, 0x0, 0x0, @ipv4=@empty}, @generic="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", @nested={0x1cc, 0x134, 0x0, 0x1, [@generic="a1f79247a786d84a2c985df72680fef5c62a167f2a09708d2304ef1895b83f0afb3303e96f2d361b9190d8e9315520d09a1b1e49a4fc5e1524cdde0fc147dcf756cfb73ef3099d4624d5e0eb548b0444e16e89fc0d39eaac1697561a4f3bbb190985ca979b8d440edae335f0", @nested={0x4, 0x108}, @generic="fb5f1a621432e384276da5827f447caf9f6d7e8ffdb228155977e4fb10de41ab5b8e2c6113784ec8a8ed2b364456869b2b0c8c726de05424dfd117612709820a056802d7289ba3db75dc2ddebc3245cfd814e23460eb297b54d58e09946380c7711e39f0e3d5260bd6a4f1d2d695b4537a1ac059b0dbd48624dab45fbb7124235be2402465c2a7a2fdf9e93b8f2401ded9591a23dcd401cbb9b7e288f0b514759f45dcd7f75792a73ca177920ce51c6da98621d3a15ecefb98e181031f94f5f24c1e2733656fc89a9a80128e65f1ed92", @typed={0x88, 0x0, 0x0, 0x0, @binary="decca8dd5a76b2d7157c8d1bfb8c1daa09e34487032667e546fd000b7e4b09ef6b7b1819cadd1b7c4d356ee3ced926da1bec4de86667c0fcb19de108d822ce2a376fc856cfe2872e7bd28a55cf1d8e8c0f6fb11484895f99915470ee1a218a605fcda60b6d23de808b391b676ea5bf68de3afe66750ce22a3b8f3c887ceb9383aa71fb57"}]}]}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r16}, @NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_WIPHY_SELF_MANAGED_REG={0x4}]}, 0x12c8}, 0x1, 0x0, 0x0, 0x2400c890}, 0x20004000) kernel console output (not intermixed with test programs): : 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1012.742320][T22931] R13: 00007fbaf1de6038 R14: 00007fbaf1de5fa0 R15: 00007fff371fd438 [ 1012.742340][T22931] [ 1013.718319][T22948] bonding: no command found in bonding_masters - use +ifname or -ifname [ 1013.979691][T22954] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3613'. [ 1014.380692][T22960] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3614'. [ 1014.968108][T22979] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1015.028813][T22979] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1015.369256][T22990] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3623'. [ 1015.436461][T22996] netlink: 5 bytes leftover after parsing attributes in process `syz.3.3623'. [ 1018.881033][T23078] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3642'. [ 1019.329155][T23084] Invalid ELF header magic: != ELF [ 1020.033458][T22985] syz.1.3621 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 1020.088121][T22985] CPU: 0 UID: 0 PID: 22985 Comm: syz.1.3621 Tainted: G U syzkaller #0 PREEMPT(full) [ 1020.088148][T22985] Tainted: [U]=USER [ 1020.088153][T22985] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1020.088162][T22985] Call Trace: [ 1020.088168][T22985] [ 1020.088174][T22985] dump_stack_lvl+0x16c/0x1f0 [ 1020.088197][T22985] dump_header+0x101/0x930 [ 1020.088215][T22985] oom_kill_process+0x272/0xa40 [ 1020.088232][T22985] out_of_memory+0x350/0x1700 [ 1020.088252][T22985] ? __pfx_out_of_memory+0x10/0x10 [ 1020.088272][T22985] mem_cgroup_out_of_memory+0x118/0x130 [ 1020.088296][T22985] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 1020.088323][T22985] ? do_raw_spin_unlock+0x172/0x230 [ 1020.088342][T22985] try_charge_memcg+0x695/0xd30 [ 1020.088364][T22985] ? __pfx_try_charge_memcg+0x10/0x10 [ 1020.088387][T22985] ? find_held_lock+0x2b/0x80 [ 1020.088406][T22985] charge_memcg+0x8a/0x230 [ 1020.088425][T22985] mem_cgroup_swapin_charge_folio+0xbb/0x440 [ 1020.088448][T22985] __read_swap_cache_async+0x397/0x500 [ 1020.088468][T22985] ? __pfx___read_swap_cache_async+0x10/0x10 [ 1020.088487][T22985] ? __xa_erase+0xee/0x150 [ 1020.088509][T22985] swap_cluster_readahead+0x528/0x770 [ 1020.088530][T22985] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 1020.088560][T22985] ? lock_acquire+0x179/0x350 [ 1020.088580][T22985] ? get_vma_policy+0x242/0x3c0 [ 1020.088602][T22985] swapin_readahead+0x160/0x1180 [ 1020.088624][T22985] ? __pfx_swapin_readahead+0x10/0x10 [ 1020.088641][T22985] ? find_held_lock+0x2b/0x80 [ 1020.088654][T22985] ? swap_cache_get_folio+0x267/0x8e0 [ 1020.088668][T22985] ? swap_cache_get_folio+0x267/0x8e0 [ 1020.088680][T22985] ? swap_cache_get_folio+0x267/0x8e0 [ 1020.088703][T22985] ? swap_cache_get_folio+0x267/0x8e0 [ 1020.088717][T22985] ? swap_cache_get_folio+0x1f/0x8e0 [ 1020.088730][T22985] ? swap_cache_get_folio+0x293/0x8e0 [ 1020.088745][T22985] ? __pfx_swap_cache_get_folio+0x10/0x10 [ 1020.088759][T22985] ? __pfx_get_swap_device+0x10/0x10 [ 1020.088778][T22985] ? do_swap_page+0x125/0x6340 [ 1020.088801][T22985] ? do_swap_page+0x86c/0x6340 [ 1020.088818][T22985] do_swap_page+0x86c/0x6340 [ 1020.088847][T22985] ? __pfx_do_swap_page+0x10/0x10 [ 1020.088936][T22985] ? __pfx_default_wake_function+0x10/0x10 [ 1020.088967][T22985] ? rcu_is_watching+0x12/0xc0 [ 1020.088984][T22985] ? ___pte_offset_map+0x2ad/0x4f0 [ 1020.089007][T22985] __handle_mm_fault+0x17d1/0x2aa0 [ 1020.089037][T22985] ? __pfx___handle_mm_fault+0x10/0x10 [ 1020.089065][T22985] ? __pte_offset_map_lock+0x174/0x310 [ 1020.089084][T22985] ? find_held_lock+0x2b/0x80 [ 1020.089106][T22985] ? follow_page_pte+0x5cf/0x1390 [ 1020.089130][T22985] handle_mm_fault+0x589/0xd10 [ 1020.089157][T22985] __get_user_pages+0x54e/0x3530 [ 1020.089190][T22985] ? down_read_killable+0x220/0x4b0 [ 1020.089212][T22985] ? __lock_acquire+0x622/0x1c90 [ 1020.089231][T22985] ? __pfx___get_user_pages+0x10/0x10 [ 1020.089253][T22985] ? __lock_acquire+0x622/0x1c90 [ 1020.089274][T22985] __gup_longterm_locked+0x2dd/0x17e0 [ 1020.089301][T22985] ? __pfx___gup_longterm_locked+0x10/0x10 [ 1020.089323][T22985] ? try_get_folio+0x255/0x730 [ 1020.089341][T22985] ? find_held_lock+0x2b/0x80 [ 1020.089356][T22985] ? sanity_check_pinned_pages+0x58a/0x11d0 [ 1020.089379][T22985] gup_fast_fallback+0xee2/0x22a0 [ 1020.089415][T22985] ? __pfx_gup_fast_fallback+0x10/0x10 [ 1020.089436][T22985] ? ___kmalloc_large_node+0x114/0x160 [ 1020.089491][T22985] ? lockdep_hardirqs_on+0x7c/0x110 [ 1020.089512][T22985] ? rcu_is_watching+0x12/0xc0 [ 1020.089532][T22985] pin_user_pages_fast+0xa7/0xf0 [ 1020.089553][T22985] ? __pfx_pin_user_pages_fast+0x10/0x10 [ 1020.089572][T22985] ? io_pin_pages+0xc3/0x1e0 [ 1020.089598][T22985] io_pin_pages+0xe6/0x1e0 [ 1020.089619][T22985] io_sqe_buffer_register+0x16f/0x2010 [ 1020.089645][T22985] ? lockdep_hardirqs_on+0x7c/0x110 [ 1020.089670][T22985] ? __pfx_io_sqe_buffer_register+0x10/0x10 [ 1020.089692][T22985] ? copy_iovec_from_user+0x84/0x170 [ 1020.089722][T22985] ? iovec_from_user+0xbb/0x140 [ 1020.089739][T22985] io_sqe_buffers_register+0x1f2/0x860 [ 1020.089767][T22985] ? __pfx_io_sqe_buffers_register+0x10/0x10 [ 1020.089789][T22985] ? rcu_is_watching+0x12/0xc0 [ 1020.089804][T22985] ? trace_contention_end+0xdd/0x130 [ 1020.089832][T22985] __io_uring_register+0x1ff8/0x20d0 [ 1020.089855][T22985] ? __pfx___io_uring_register+0x10/0x10 [ 1020.089878][T22985] ? __fget_files+0x20e/0x3c0 [ 1020.089900][T22985] __x64_sys_io_uring_register+0x169/0x280 [ 1020.089924][T22985] do_syscall_64+0xcd/0xfa0 [ 1020.089944][T22985] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1020.089960][T22985] RIP: 0033:0x7f4c52b8f6c9 [ 1020.089974][T22985] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1020.089989][T22985] RSP: 002b:00007f4c53a5e038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 1020.090004][T22985] RAX: ffffffffffffffda RBX: 00007f4c52de5fa0 RCX: 00007f4c52b8f6c9 [ 1020.090014][T22985] RDX: 0000200000000000 RSI: 0000000000000000 RDI: 0000000000000002 [ 1020.090023][T22985] RBP: 00007f4c52c11f91 R08: 0000000000000000 R09: 0000000000000000 [ 1020.090032][T22985] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 1020.090040][T22985] R13: 00007f4c52de6038 R14: 00007f4c52de5fa0 R15: 00007ffc644210c8 [ 1020.090061][T22985] [ 1020.092150][T22985] memory: usage 3072kB, limit 3072kB, failcnt 27063 [ 1021.462875][T23112] netlink: 98 bytes leftover after parsing attributes in process `syz.3.3649'. [ 1021.510567][T23112] netlink: 2 bytes leftover after parsing attributes in process `syz.3.3649'. [ 1021.710616][T23123] mkiss: ax0: crc mode is auto. [ 1021.872507][T23127] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3652'. [ 1022.306219][T22985] memory+swap: usage 5380kB, limit 9007199254740988kB, failcnt 0 [ 1022.313994][T22985] kmem: usage 1048kB, limit 9007199254740988kB, failcnt 0 [ 1022.363535][T22985] Memory cgroup stats for /syz1: [ 1022.363754][T22985] cache 0 [ 1022.391044][T22985] rss 2052096 [ 1022.394351][T22985] rss_huge 0 [ 1022.426009][T22985] shmem 0 [ 1022.444636][T22985] mapped_file 0 [ 1022.455359][T22985] dirty 0 [ 1022.471914][T22985] writeback 0 [ 1022.486810][T22985] workingset_refault_anon 8374 [ 1022.491667][T22985] workingset_refault_file 5051 [ 1022.526187][T22985] swap 2363392 [ 1022.543365][T22985] swapcached 24576 [ 1022.570409][T22985] pgpgin 1439371 [ 1022.611879][T22985] pgpgout 1478212 [ 1022.618501][T22985] pgfault 579020 [ 1022.634220][T22985] pgmajfault 2167 [ 1022.640269][T22985] inactive_anon 2072576 [ 1022.675757][T22985] active_anon 0 [ 1022.684284][T22985] inactive_file 0 [ 1022.714065][T22985] active_file 0 [ 1022.717639][T22985] unevictable 0 [ 1022.732889][T22985] hierarchical_memory_limit 3145728 [ 1022.756063][T22985] hierarchical_memsw_limit 9223372036854771712 [ 1022.774840][T22985] total_cache 0 [ 1022.787803][T22985] total_rss 2052096 [ 1022.806009][T22985] total_rss_huge 0 [ 1022.815600][T22985] total_shmem 0 [ 1022.827590][T22985] total_mapped_file 0 [ 1022.843059][T22985] total_dirty 0 [ 1022.856090][T22985] total_writeback 0 [ 1022.868936][T22985] total_workingset_refault_anon 8374 [ 1022.887597][T22985] total_workingset_refault_file 5051 [ 1022.905539][T22985] total_swap 2363392 [ 1022.918192][T22985] total_swapcached 24576 [ 1022.934887][T22985] total_pgpgin 1439371 [ 1022.949152][T22985] total_pgpgout 1478212 [ 1022.966035][T22985] total_pgfault 579020 [ 1022.981008][T22985] total_pgmajfault 2167 [ 1022.995880][T22985] total_inactive_anon 2072576 [ 1023.013521][T22985] total_active_anon 0 [ 1023.022892][T22985] total_inactive_file 0 [ 1023.035705][T22985] total_active_file 0 [ 1023.047820][T22985] total_unevictable 0 [ 1023.067019][T22985] anon_cost 896 [ 1023.101384][T22985] file_cost 288 [ 1023.120533][T22985] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.3621,pid=22983,uid=0 [ 1023.188529][T22985] Memory cgroup out of memory: Killed process 22983 (syz.1.3621) total-vm:108432kB, anon-rss:3096kB, file-rss:22636kB, shmem-rss:0kB, UID:0 pgtables:152kB oom_score_adj:0 [ 1025.231778][T23202] scsi_dev_info_list_add_str: bad dev info string ')–õÒzD éú÷5fk+*X€©#åR8¾ð4*œýVs÷nîdv»ø¼qQWˆ}ûÄ~YrÈ€-8VGDƘ¹‹åLáBÍ%v—†õv‘}–Ypq|ƒí?ñºO¼ö[ŒÐ,!ä Ù7xWDr¾Ÿµ% [Û}†Eµ$3?ñGË™Î9–Ff=ŠÃlør«GH;2L<õ»=ÒÚ|èž¿®ô8ƒ -c¡„ FÕ¸šë"™ž£É[v9¯qôÂ4‚ MmËvq®ékñ¹¹ò[ÕãËú(i¨ýˆNDСÄMîËX PS­êq•èqX4‰X`VððŸ!;r¶Ö ±È)y]×W¨šzfIðH0êáÓ,àëí¬é¢vß{q8ÊìÛשU·Ü¹ä‘‰mØ›ŽH•ŽT´¸wí™C€Ïzø-óŠÊnR%§2]ÌÎx0Òéª5oùÐëâòÕ•|3>ÕlñS*LŒõÝ/«CdgÓ‘àŠ[C=Cw‹e•Äm)«ÿòÕl#È' '‹ï'“Sž‰¡.ÍsHgi-à»ÛTY%ܹF§…*8úÒnFTÿH‡—ýæ¿?“ÿ–Þi{' '' [ 1026.433087][T23228] FAULT_INJECTION: forcing a failure. [ 1026.433087][T23228] name failslab, interval 1, probability 0, space 0, times 0 [ 1026.559858][T23230] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3678'. [ 1026.576757][T23228] CPU: 0 UID: 0 PID: 23228 Comm: syz.0.3677 Tainted: G U syzkaller #0 PREEMPT(full) [ 1026.576783][T23228] Tainted: [U]=USER [ 1026.576789][T23228] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1026.576798][T23228] Call Trace: [ 1026.576804][T23228] [ 1026.576810][T23228] dump_stack_lvl+0x16c/0x1f0 [ 1026.576833][T23228] should_fail_ex+0x512/0x640 [ 1026.576857][T23228] ? fs_reclaim_acquire+0xae/0x150 [ 1026.576888][T23228] should_failslab+0xc2/0x120 [ 1026.576908][T23228] __kmalloc_noprof+0xdd/0x880 [ 1026.576932][T23228] ? kfree+0x252/0x6d0 [ 1026.576944][T23228] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 1026.576965][T23228] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 1026.576981][T23228] tomoyo_realpath_from_path+0xc2/0x6e0 [ 1026.577003][T23228] tomoyo_check_open_permission+0x2ab/0x3c0 [ 1026.577019][T23228] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 1026.577061][T23228] ? do_raw_spin_lock+0x12c/0x2b0 [ 1026.577093][T23228] tomoyo_file_open+0x6b/0x90 [ 1026.577112][T23228] security_file_open+0x84/0x1e0 [ 1026.577129][T23228] do_dentry_open+0x596/0x1530 [ 1026.577152][T23228] vfs_open+0x82/0x3f0 [ 1026.577178][T23228] path_openat+0x1de4/0x2cb0 [ 1026.577201][T23228] ? __pfx_path_openat+0x10/0x10 [ 1026.577218][T23228] ? __lock_acquire+0xb8a/0x1c90 [ 1026.577239][T23228] do_filp_open+0x20b/0x470 [ 1026.577256][T23228] ? __pfx_do_filp_open+0x10/0x10 [ 1026.577362][T23228] ? alloc_fd+0x471/0x7d0 [ 1026.577393][T23228] do_sys_openat2+0x11b/0x1d0 [ 1026.577417][T23228] ? __pfx_do_sys_openat2+0x10/0x10 [ 1026.577446][T23228] __x64_sys_openat+0x174/0x210 [ 1026.577468][T23228] ? __pfx___x64_sys_openat+0x10/0x10 [ 1026.577497][T23228] do_syscall_64+0xcd/0xfa0 [ 1026.577518][T23228] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1026.577533][T23228] RIP: 0033:0x7f8fd638f6c9 [ 1026.577545][T23228] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1026.577561][T23228] RSP: 002b:00007f8fd726d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1026.577576][T23228] RAX: ffffffffffffffda RBX: 00007f8fd65e6180 RCX: 00007f8fd638f6c9 [ 1026.577586][T23228] RDX: 0000000000100000 RSI: 0000200000001000 RDI: ffffffffffffff9c [ 1026.577596][T23228] RBP: 00007f8fd6411f91 R08: 0000000000000000 R09: 0000000000000000 [ 1026.577605][T23228] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1026.577614][T23228] R13: 00007f8fd65e6218 R14: 00007f8fd65e6180 R15: 00007ffcb8cf3f98 [ 1026.577635][T23228] [ 1026.579574][T23228] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1027.183313][T23241] [U] [ 1027.186039][T23241] [U] [ 1027.189254][T23241] [U] [ 1027.191938][T23241] [U] [ 1027.224727][T23241] [U] [ 1027.227441][T23241] [U] [ 1027.230122][T23241] [U] [ 1027.232799][T23241] [U] [ 1027.257133][T23241] [U] [ 1027.259844][T23241] [U] [ 1027.262525][T23241] [U] [ 1027.265197][T23241] [U] [ 1027.395111][T23237] [U] [ 1028.335940][T23261] random: crng reseeded on system resumption [ 1028.397798][T23258] binder: 23257:23258 ioctl c018620c 0 returned -1 [ 1028.500712][T23264] netlink: 342 bytes leftover after parsing attributes in process `syz.1.3686'. [ 1028.514647][T23258] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3683'. [ 1028.559683][T23264] netlink: 'syz.1.3686': attribute type 1 has an invalid length. [ 1028.601290][T23264] netlink: 254 bytes leftover after parsing attributes in process `syz.1.3686'. [ 1030.180878][T23297] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3694'. [ 1032.439739][T23343] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input59 [ 1032.804123][T23350] ubi0: attaching mtd0 [ 1032.856485][T23350] ubi0 warning: ubi_attach: valid VID header but corrupted EC header at PEB 0 [ 1032.892015][T23350] ubi0: scanning is finished [ 1033.121653][T23350] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1033.166244][T23344] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input60 [ 1033.184943][T23350] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1033.225091][T23350] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1033.259959][T23350] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 1033.318414][T23350] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1033.364033][T23350] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1033.403724][T23350] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 0 [ 1033.457140][T23350] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1033.495802][T23352] FAULT_INJECTION: forcing a failure. [ 1033.495802][T23352] name failslab, interval 1, probability 0, space 0, times 0 [ 1033.539839][T23355] ubi0: background thread "ubi_bgt0d" started, PID 23355 [ 1033.587340][T23355] ubi0: scrubbed PEB 0 (LEB 2147479551:0), data moved to PEB 31 [ 1033.662612][T23352] CPU: 0 UID: 0 PID: 23352 Comm: syz.0.3706 Tainted: G U syzkaller #0 PREEMPT(full) [ 1033.662638][T23352] Tainted: [U]=USER [ 1033.662643][T23352] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1033.662652][T23352] Call Trace: [ 1033.662658][T23352] [ 1033.662665][T23352] dump_stack_lvl+0x16c/0x1f0 [ 1033.662688][T23352] should_fail_ex+0x512/0x640 [ 1033.662714][T23352] should_failslab+0xc2/0x120 [ 1033.662735][T23352] __kmalloc_cache_noprof+0x72/0x780 [ 1033.662749][T23352] ? cfusbl_device_notify+0x75c/0x900 [ 1033.662768][T23352] ? net_generic+0xf4/0x2a0 [ 1033.662784][T23352] ? batadv_hard_if_event+0xb13/0x1550 [ 1033.662806][T23352] ? batadv_hard_if_event+0xb13/0x1550 [ 1033.662824][T23352] batadv_hard_if_event+0xb13/0x1550 [ 1033.662845][T23352] ? lockdep_rtnl_is_held+0x26/0x40 [ 1033.662869][T23352] notifier_call_chain+0xbc/0x410 [ 1033.662888][T23352] ? __pfx_batadv_hard_if_event+0x10/0x10 [ 1033.662911][T23352] call_netdevice_notifiers_info+0xbe/0x140 [ 1033.662932][T23352] register_netdevice+0x182e/0x2270 [ 1033.662953][T23352] ? __pfx_register_netdevice+0x10/0x10 [ 1033.662976][T23352] cfg80211_register_netdevice+0x149/0x340 [ 1033.663001][T23352] ieee80211_if_add+0xc9d/0x1a40 [ 1033.663024][T23352] ? __pfx_minstrel_ht_add_debugfs+0x10/0x10 [ 1033.663046][T23352] ieee80211_register_hw+0x393b/0x4120 [ 1033.663075][T23352] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 1033.663095][T23352] ? __pfx___debug_object_init+0x10/0x10 [ 1033.663118][T23352] ? find_held_lock+0x2b/0x80 [ 1033.663134][T23352] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1033.663160][T23352] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 1033.663181][T23352] ? __hrtimer_setup+0x176/0x280 [ 1033.663206][T23352] mac80211_hwsim_new_radio+0x32d8/0x50b0 [ 1033.663240][T23352] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 1033.663263][T23352] hwsim_new_radio_nl+0xba2/0x1330 [ 1033.663281][T23352] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1033.663304][T23352] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 1033.663324][T23352] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 1033.663348][T23352] genl_family_rcv_msg_doit+0x209/0x2f0 [ 1033.663369][T23352] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1033.663395][T23352] ? bpf_lsm_capable+0x9/0x10 [ 1033.663413][T23352] ? security_capable+0x7e/0x260 [ 1033.663435][T23352] ? ns_capable+0xd7/0x110 [ 1033.663453][T23352] genl_rcv_msg+0x55c/0x800 [ 1033.663480][T23352] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1033.663499][T23352] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1033.663520][T23352] ? __lock_acquire+0x622/0x1c90 [ 1033.663543][T23352] netlink_rcv_skb+0x158/0x420 [ 1033.663559][T23352] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1033.663579][T23352] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1033.663603][T23352] ? netlink_deliver_tap+0x1ae/0xd30 [ 1033.663622][T23352] genl_rcv+0x28/0x40 [ 1033.663637][T23352] netlink_unicast+0x5aa/0x870 [ 1033.663656][T23352] ? __pfx_netlink_unicast+0x10/0x10 [ 1033.663680][T23352] netlink_sendmsg+0x8c8/0xdd0 [ 1033.663700][T23352] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1033.663718][T23352] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 1033.663743][T23352] ____sys_sendmsg+0xa98/0xc70 [ 1033.663763][T23352] ? copy_msghdr_from_user+0x10a/0x160 [ 1033.663778][T23352] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1033.663801][T23352] ? __pfx_futex_wake_mark+0x10/0x10 [ 1033.663827][T23352] ___sys_sendmsg+0x134/0x1d0 [ 1033.663840][T23352] ? find_held_lock+0x2b/0x80 [ 1033.663856][T23352] ? __pfx____sys_sendmsg+0x10/0x10 [ 1033.663868][T23352] ? __lock_acquire+0x622/0x1c90 [ 1033.663913][T23352] __sys_sendmsg+0x16d/0x220 [ 1033.663929][T23352] ? __pfx___sys_sendmsg+0x10/0x10 [ 1033.663943][T23352] ? __x64_sys_futex+0x1e0/0x4c0 [ 1033.663975][T23352] do_syscall_64+0xcd/0xfa0 [ 1033.663994][T23352] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1033.664010][T23352] RIP: 0033:0x7f8fd638f6c9 [ 1033.664022][T23352] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1033.664037][T23352] RSP: 002b:00007f8fd72af038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1033.664051][T23352] RAX: ffffffffffffffda RBX: 00007f8fd65e5fa0 RCX: 00007f8fd638f6c9 [ 1033.664061][T23352] RDX: 0000000004048000 RSI: 0000200000004240 RDI: 0000000000000009 [ 1033.664070][T23352] RBP: 00007f8fd6411f91 R08: 0000000000000000 R09: 0000000000000000 [ 1033.664079][T23352] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1033.664087][T23352] R13: 00007f8fd65e6038 R14: 00007f8fd65e5fa0 R15: 00007ffcb8cf3f98 [ 1033.664109][T23352] [ 1034.130725][ C0] vkms_vblank_simulate: vblank timer overrun [ 1035.276096][T23181] Bluetooth: hci0: unexpected event 0x3e length: 508 > 260 [ 1035.276121][T23181] Bluetooth: hci0: unexpected subevent 0x02 length: 507 > 260 [ 1035.292110][T23181] Bluetooth: hci0: Dropping invalid advertising data [ 1035.303086][T23181] Bluetooth: hci0: unknown advertising packet type: 0xe9 [ 1035.303112][T23181] Bluetooth: hci0: Dropping invalid advertising data [ 1035.318426][T23181] Bluetooth: hci0: Malformed LE Event: 0x02 [ 1038.346049][T23435] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3724'. [ 1038.990010][T23447] FAULT_INJECTION: forcing a failure. [ 1038.990010][T23447] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1039.036301][T23447] CPU: 0 UID: 0 PID: 23447 Comm: syz.0.3729 Tainted: G U syzkaller #0 PREEMPT(full) [ 1039.036328][T23447] Tainted: [U]=USER [ 1039.036333][T23447] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1039.036342][T23447] Call Trace: [ 1039.036348][T23447] [ 1039.036354][T23447] dump_stack_lvl+0x16c/0x1f0 [ 1039.036377][T23447] should_fail_ex+0x512/0x640 [ 1039.036403][T23447] __fpu_restore_sig+0xfe/0x13a0 [ 1039.036426][T23447] ? __pfx___fpu_restore_sig+0x10/0x10 [ 1039.036456][T23447] ? __might_fault+0xe3/0x190 [ 1039.036469][T23447] ? __might_fault+0x13b/0x190 [ 1039.036487][T23447] fpu__restore_sig+0x151/0x190 [ 1039.036507][T23447] restore_sigcontext+0x4c9/0x6a0 [ 1039.036525][T23447] ? __pfx_restore_sigcontext+0x10/0x10 [ 1039.036557][T23447] ? __pfx_restore_altstack+0x10/0x10 [ 1039.036578][T23447] ? _raw_spin_unlock_irq+0x23/0x50 [ 1039.036594][T23447] ? lockdep_hardirqs_on+0x7c/0x110 [ 1039.036613][T23447] __do_sys_rt_sigreturn+0x229/0x2c0 [ 1039.036632][T23447] ? __pfx___do_sys_rt_sigreturn+0x10/0x10 [ 1039.036655][T23447] do_syscall_64+0xcd/0xfa0 [ 1039.036673][T23447] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1039.036688][T23447] RIP: 0033:0x7f8fd638f6c9 [ 1039.036700][T23447] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1039.036713][T23447] RSP: 002b:00007f8fd72af038 EFLAGS: 00000246 [ 1039.036726][T23447] RAX: fffffffffffffffc RBX: 00007f8fd65e5fa0 RCX: 00007f8fd638f6c9 [ 1039.036735][T23447] RDX: 0000000000010000 RSI: 0000000000000000 RDI: 0000000000000003 [ 1039.036744][T23447] RBP: 00007f8fd6411f91 R08: 0000000000000000 R09: 0000000000000000 [ 1039.036752][T23447] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1039.036770][T23447] R13: 00007f8fd65e6038 R14: 00007f8fd65e5fa0 R15: 00007ffcb8cf3f98 [ 1039.036791][T23447] [ 1041.666680][T23491] random: crng reseeded on system resumption [ 1042.107992][T23502] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1042.637305][T23513] random: crng reseeded on system resumption [ 1042.676140][T23514] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3742'. [ 1043.469139][ T10] usb usb38-port5: attempt power cycle [ 1043.652865][T23527] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3747'. [ 1044.068316][ T10] usb usb38-port5: unable to enumerate USB device [ 1044.258862][T23542] binder: 23540:23542 ioctl c0205826 200000000080 returned -22 [ 1044.303842][T23544] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3751'. [ 1045.740963][T23582] FAULT_INJECTION: forcing a failure. [ 1045.740963][T23582] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1045.789134][T23582] CPU: 0 UID: 0 PID: 23582 Comm: syz.3.3763 Tainted: G U syzkaller #0 PREEMPT(full) [ 1045.789167][T23582] Tainted: [U]=USER [ 1045.789172][T23582] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1045.789184][T23582] Call Trace: [ 1045.789191][T23582] [ 1045.789198][T23582] dump_stack_lvl+0x16c/0x1f0 [ 1045.789226][T23582] should_fail_ex+0x512/0x640 [ 1045.789251][T23582] get_futex_key+0x1d0/0x1560 [ 1045.789273][T23582] ? __pfx_get_futex_key+0x10/0x10 [ 1045.789294][T23582] ? rcu_is_watching+0x12/0xc0 [ 1045.789311][T23582] ? _raw_spin_unlock_irq+0x23/0x50 [ 1045.789328][T23582] ? lockdep_hardirqs_on+0x7c/0x110 [ 1045.789350][T23582] futex_wake+0xea/0x530 [ 1045.789375][T23582] ? __pfx_futex_wake+0x10/0x10 [ 1045.789412][T23582] do_futex+0x1e3/0x350 [ 1045.789432][T23582] ? __pfx_do_futex+0x10/0x10 [ 1045.789451][T23582] ? __x64_sys_setitimer+0x254/0x370 [ 1045.789475][T23582] __x64_sys_futex+0x1e0/0x4c0 [ 1045.789497][T23582] ? __pfx___x64_sys_futex+0x10/0x10 [ 1045.789516][T23582] ? xfd_validate_state+0x61/0x180 [ 1045.789546][T23582] do_syscall_64+0xcd/0xfa0 [ 1045.789566][T23582] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1045.789581][T23582] RIP: 0033:0x7f427678f6c9 [ 1045.789600][T23582] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1045.789614][T23582] RSP: 002b:00007f42776f00e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1045.789628][T23582] RAX: ffffffffffffffda RBX: 00007f42769e5fa8 RCX: 00007f427678f6c9 [ 1045.789638][T23582] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f42769e5fac [ 1045.789647][T23582] RBP: 00007f42769e5fa0 R08: 00007f42776f1000 R09: 0000000000000000 [ 1045.789657][T23582] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1045.789666][T23582] R13: 00007f42769e6038 R14: 00007ffe3e6670e0 R15: 00007ffe3e6671c8 [ 1045.789686][T23582] [ 1046.696915][T23579] ima: policy update failed [ 1046.731586][ T30] audit: type=1802 audit(41975.309:75): pid=23579 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.3.3763" res=0 errno=0 [ 1048.370859][T23634] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3774'. [ 1049.199952][T23651] netlink: 'syz.1.3779': attribute type 2 has an invalid length. [ 1049.246401][T23650] netlink: 'syz.3.3778': attribute type 1 has an invalid length. [ 1049.285916][T23658] netlink: 29 bytes leftover after parsing attributes in process `syz.3.3778'. [ 1050.658602][T23703] hub 1-0:1.0: USB hub found [ 1050.688380][T23703] hub 1-0:1.0: 1 port detected [ 1050.863852][T23708] FAULT_INJECTION: forcing a failure. [ 1050.863852][T23708] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1050.909081][T23708] CPU: 0 UID: 0 PID: 23708 Comm: syz.0.3789 Tainted: G U syzkaller #0 PREEMPT(full) [ 1050.909108][T23708] Tainted: [U]=USER [ 1050.909113][T23708] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1050.909122][T23708] Call Trace: [ 1050.909128][T23708] [ 1050.909134][T23708] dump_stack_lvl+0x16c/0x1f0 [ 1050.909157][T23708] should_fail_ex+0x512/0x640 [ 1050.909182][T23708] get_futex_key+0x1d0/0x1560 [ 1050.909204][T23708] ? __pfx_get_futex_key+0x10/0x10 [ 1050.909229][T23708] futex_wake+0xea/0x530 [ 1050.909249][T23708] ? futex_wait+0x120/0x380 [ 1050.909263][T23708] ? __pfx_futex_wake+0x10/0x10 [ 1050.909289][T23708] ? ksys_write+0x190/0x250 [ 1050.909309][T23708] do_futex+0x1e3/0x350 [ 1050.909328][T23708] ? __pfx_do_futex+0x10/0x10 [ 1050.909347][T23708] ? __fget_files+0x204/0x3c0 [ 1050.909366][T23708] __x64_sys_futex+0x1e0/0x4c0 [ 1050.909388][T23708] ? __pfx___x64_sys_futex+0x10/0x10 [ 1050.909408][T23708] ? __sys_setsockopt+0x140/0x1a0 [ 1050.909428][T23708] do_syscall_64+0xcd/0xfa0 [ 1050.909447][T23708] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1050.909463][T23708] RIP: 0033:0x7f8fd638f6c9 [ 1050.909475][T23708] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1050.909489][T23708] RSP: 002b:00007f8fd72af0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1050.909504][T23708] RAX: ffffffffffffffda RBX: 00007f8fd65e5fa8 RCX: 00007f8fd638f6c9 [ 1050.909514][T23708] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f8fd65e5fac [ 1050.909523][T23708] RBP: 00007f8fd65e5fa0 R08: 00007f8fd72b0000 R09: 0000000000000000 [ 1050.909531][T23708] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 1050.909540][T23708] R13: 00007f8fd65e6038 R14: 00007ffcb8cf3eb0 R15: 00007ffcb8cf3f98 [ 1050.909560][T23708] [ 1051.101172][ C0] vkms_vblank_simulate: vblank timer overrun [ 1051.851336][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 1051.858448][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 1052.020656][T23724] ALSA: mixer_oss: invalid OSS volume '' [ 1052.562540][T23729] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3793'. [ 1052.635128][T23736] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1053.492682][T23129] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1053.502686][T23129] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1053.512489][T23129] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1053.520990][T23129] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1053.531246][T23129] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1053.792375][T23772] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3800'. [ 1054.139070][T23781] FAULT_INJECTION: forcing a failure. [ 1054.139070][T23781] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1054.173241][T23760] chnl_net:caif_netlink_parms(): no params data found [ 1054.233859][T23781] CPU: 0 UID: 0 PID: 23781 Comm: syz.0.3803 Tainted: G U syzkaller #0 PREEMPT(full) [ 1054.233886][T23781] Tainted: [U]=USER [ 1054.233892][T23781] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1054.233902][T23781] Call Trace: [ 1054.233908][T23781] [ 1054.233914][T23781] dump_stack_lvl+0x16c/0x1f0 [ 1054.233937][T23781] should_fail_ex+0x512/0x640 [ 1054.233962][T23781] strncpy_from_user+0x3b/0x2e0 [ 1054.233985][T23781] getname_flags.part.0+0x8f/0x550 [ 1054.234008][T23781] getname_flags+0x93/0xf0 [ 1054.234023][T23781] do_sys_openat2+0xb8/0x1d0 [ 1054.234043][T23781] ? __pfx_do_sys_openat2+0x10/0x10 [ 1054.234072][T23781] __x64_sys_openat+0x174/0x210 [ 1054.234093][T23781] ? __pfx___x64_sys_openat+0x10/0x10 [ 1054.234121][T23781] do_syscall_64+0xcd/0xfa0 [ 1054.234140][T23781] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1054.234155][T23781] RIP: 0033:0x7f8fd638f6c9 [ 1054.234167][T23781] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1054.234181][T23781] RSP: 002b:00007f8fd72af038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1054.234196][T23781] RAX: ffffffffffffffda RBX: 00007f8fd65e5fa0 RCX: 00007f8fd638f6c9 [ 1054.234206][T23781] RDX: 0000000000002002 RSI: 0000200000000140 RDI: ffffffffffffff9c [ 1054.234214][T23781] RBP: 00007f8fd6411f91 R08: 0000000000000000 R09: 0000000000000000 [ 1054.234223][T23781] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1054.234232][T23781] R13: 00007f8fd65e6038 R14: 00007f8fd65e5fa0 R15: 00007ffcb8cf3f98 [ 1054.234252][T23781] [ 1055.059217][T23760] bridge0: port 1(bridge_slave_0) entered blocking state [ 1055.091944][T23760] bridge0: port 1(bridge_slave_0) entered disabled state [ 1055.119641][T23760] bridge_slave_0: entered allmulticast mode [ 1055.139707][T23760] bridge_slave_0: entered promiscuous mode [ 1055.165776][T23760] bridge0: port 2(bridge_slave_1) entered blocking state [ 1055.188531][T23760] bridge0: port 2(bridge_slave_1) entered disabled state [ 1055.213596][T23760] bridge_slave_1: entered allmulticast mode [ 1055.239478][T23760] bridge_slave_1: entered promiscuous mode [ 1055.333314][T23760] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1055.366107][T23760] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1055.480798][T23760] team0: Port device team_slave_0 added [ 1055.501083][T23760] team0: Port device team_slave_1 added [ 1055.589584][T23129] Bluetooth: hci3: command tx timeout [ 1055.602699][T23760] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1055.619510][T23760] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1055.711084][T23760] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1055.757235][T23760] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1055.782461][T23760] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1055.866980][T23760] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1056.129948][T23760] hsr_slave_0: entered promiscuous mode [ 1056.158009][T23760] hsr_slave_1: entered promiscuous mode [ 1056.175399][T23760] debugfs: 'hsr0' already exists in 'hsr' [ 1056.206339][T23760] Cannot create hsr debugfs directory [ 1056.478552][T23849] CIFS: VFS: Invalid SecurityFlags: 0 [ 1056.789974][T23853] bond0: invalid ARP target specified [ 1056.976702][T23760] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1057.029202][T23760] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1057.060119][T23760] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1057.089759][T23760] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1057.312483][T23760] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1057.372475][T23760] 8021q: adding VLAN 0 to HW filter on device team0 [ 1057.410211][T23841] bridge0: port 1(bridge_slave_0) entered blocking state [ 1057.417748][T23841] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1057.471038][T23841] bridge0: port 2(bridge_slave_1) entered blocking state [ 1057.478330][T23841] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1057.614572][T23760] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1057.659803][T23129] Bluetooth: hci3: command tx timeout [ 1058.076619][T23760] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1058.670440][T23885] scsi_strcpy_devinfo: vendor string 'íÙ/&cžÀ~n] ò | [ 1058.670440][T23885] MÅ' is too long [ 1058.725127][T23885] scsi_strcpy_devinfo: model string '’Dd5‚ ÕK€2bÛ [ 1058.725127][T23885] ††½WÏõ›ú «ú' is too long [ 1058.917868][T23760] veth0_vlan: entered promiscuous mode [ 1058.969270][T23883] zswap: compressor not available [ 1059.005427][T23760] veth1_vlan: entered promiscuous mode [ 1059.113587][T23760] veth0_macvtap: entered promiscuous mode [ 1059.155961][T23760] veth1_macvtap: entered promiscuous mode [ 1059.245403][T23760] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1059.298148][T23760] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1059.371922][T23818] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1059.403271][T23818] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1059.444943][T23818] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1059.481503][T23818] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1059.730705][T23129] Bluetooth: hci3: command tx timeout [ 1059.789395][T23817] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1059.833184][T23817] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1059.915116][T23812] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1059.946300][T23812] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1061.317825][T23936] netlink: 'syz.3.3827': attribute type 1 has an invalid length. [ 1061.763200][T23939] [U] [ 1061.766015][T23939] [U] [ 1061.768708][T23939] [U] [ 1061.771391][T23939] [U] [ 1061.801037][T23129] Bluetooth: hci3: command tx timeout [ 1061.834533][T23939] [U] [ 1061.837258][T23939] [U] [ 1061.839942][T23939] [U] [ 1061.842617][T23939] [U] [ 1061.908103][T23938] [U] [ 1064.454240][T23977] QAT: Invalid ioctl 1074025672 [ 1064.871773][T23987] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3838'. [ 1064.898225][T23985] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3837'. [ 1064.917963][T23987] ipvlan0: entered promiscuous mode [ 1066.122045][T24002] can: request_module (can-proto-0) failed. [ 1066.590866][T23129] Bluetooth: hci4: unexpected event 0x1d length: 6 > 5 [ 1066.709692][T24027] FAULT_INJECTION: forcing a failure. [ 1066.709692][T24027] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1067.085933][T24027] CPU: 0 UID: 0 PID: 24027 Comm: syz.5.3847 Tainted: G U syzkaller #0 PREEMPT(full) [ 1067.085960][T24027] Tainted: [U]=USER [ 1067.085965][T24027] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1067.085974][T24027] Call Trace: [ 1067.085980][T24027] [ 1067.085987][T24027] dump_stack_lvl+0x16c/0x1f0 [ 1067.086010][T24027] should_fail_ex+0x512/0x640 [ 1067.086036][T24027] should_fail_futex+0x4c/0x60 [ 1067.086055][T24027] __x64_sys_futex+0x25e/0x4c0 [ 1067.086075][T24027] ? __x64_sys_timerfd_gettime+0xee/0x170 [ 1067.086096][T24027] ? __pfx___x64_sys_futex+0x10/0x10 [ 1067.086115][T24027] ? xfd_validate_state+0x61/0x180 [ 1067.086142][T24027] do_syscall_64+0xcd/0xfa0 [ 1067.086161][T24027] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1067.086182][T24027] RIP: 0033:0x7f354898f6c9 [ 1067.086195][T24027] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1067.086209][T24027] RSP: 002b:00007f354974e038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1067.086224][T24027] RAX: ffffffffffffffda RBX: 00007f3548be6180 RCX: 00007f354898f6c9 [ 1067.086235][T24027] RDX: 0000000000000004 RSI: 000000000000000d RDI: 0000000000000000 [ 1067.086244][T24027] RBP: 00007f3548a11f91 R08: 0000000000000000 R09: 0000000000000008 [ 1067.086253][T24027] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1067.086262][T24027] R13: 00007f3548be6218 R14: 00007f3548be6180 R15: 00007ffd8d3e6478 [ 1067.086282][T24027] [ 1068.325857][T24011] Invalid ELF header magic: != ELF [ 1069.053382][T24058] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x18000 [ 1069.143357][T24058] flags: 0xfff00000002000(reserved|node=0|zone=1|lastcpupid=0x7ff) [ 1069.248935][T24058] raw: 00fff00000002000 ffffea0000600008 ffffea0000600008 0000000000000000 [ 1069.345465][T24058] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 1069.464101][T24058] page dumped because: unmovable page [ 1069.515265][T24058] page_owner info is not present (never set?) [ 1069.720507][T24068] random: crng reseeded on system resumption [ 1069.812350][T24068] vhci_hcd: invalid port number 25 [ 1069.833511][T24068] vhci_hcd: default hub control req: a002 v294f i0019 l9 [ 1069.852010][T24070] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 1070.093184][T24078] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3855'. [ 1070.235085][ T30] audit: type=1800 audit(41998.919:76): pid=24080 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.3857" name="dbroot" dev="configfs" ino=101818 res=0 errno=0 [ 1070.370728][ T5836] usb usb38-port5: attempt power cycle [ 1070.889259][T24093] random: crng reseeded on system resumption [ 1070.938389][ T5836] usb usb38-port5: unable to enumerate USB device [ 1072.605613][T24137] vhci_hcd: invalid port number 16 [ 1072.670578][T24137] vhci_hcd: invalid port number 16 [ 1075.628264][T24185] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input61 [ 1075.997017][T24186] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input62 [ 1076.046704][T24181] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3880'. [ 1076.404421][T24194] FAULT_INJECTION: forcing a failure. [ 1076.404421][T24194] name failslab, interval 1, probability 0, space 0, times 0 [ 1076.473968][T24194] CPU: 0 UID: 0 PID: 24194 Comm: syz.0.3883 Tainted: G U syzkaller #0 PREEMPT(full) [ 1076.473995][T24194] Tainted: [U]=USER [ 1076.474000][T24194] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1076.474009][T24194] Call Trace: [ 1076.474015][T24194] [ 1076.474021][T24194] dump_stack_lvl+0x16c/0x1f0 [ 1076.474044][T24194] should_fail_ex+0x512/0x640 [ 1076.474066][T24194] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 1076.474084][T24194] should_failslab+0xc2/0x120 [ 1076.474104][T24194] kmem_cache_alloc_noprof+0x75/0x6e0 [ 1076.474118][T24194] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1076.474142][T24194] ? mas_preallocate+0xe6a/0x11f0 [ 1076.474163][T24194] ? mas_preallocate+0xe6a/0x11f0 [ 1076.474180][T24194] mas_preallocate+0xe6a/0x11f0 [ 1076.474202][T24194] ? __pfx_mas_preallocate+0x10/0x10 [ 1076.474220][T24194] ? rcu_is_watching+0x12/0xc0 [ 1076.474241][T24194] ? anon_vma_name+0x81/0x2f0 [ 1076.474264][T24194] __split_vma+0x34a/0x1070 [ 1076.474280][T24194] ? __pfx___split_vma+0x10/0x10 [ 1076.474307][T24194] ? __pfx_mas_prev+0x10/0x10 [ 1076.474338][T24194] vms_gather_munmap_vmas+0x3aa/0x1340 [ 1076.474356][T24194] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 1076.474374][T24194] ? mas_walk+0x6f5/0x980 [ 1076.474397][T24194] __mmap_region+0x434/0x27a0 [ 1076.474413][T24194] ? find_held_lock+0x2b/0x80 [ 1076.474429][T24194] ? __pfx___mmap_region+0x10/0x10 [ 1076.474442][T24194] ? finish_task_switch.isra.0+0x21c/0xc10 [ 1076.474459][T24194] ? rcu_is_watching+0x12/0xc0 [ 1076.474474][T24194] ? finish_task_switch.isra.0+0x221/0xc10 [ 1076.474489][T24194] ? lockdep_hardirqs_on+0x7c/0x110 [ 1076.474506][T24194] ? finish_task_switch.isra.0+0x221/0xc10 [ 1076.474534][T24194] ? __lock_acquire+0x622/0x1c90 [ 1076.474555][T24194] ? __pfx___schedule+0x10/0x10 [ 1076.474594][T24194] ? trace_cap_capable+0x18d/0x200 [ 1076.474625][T24194] mmap_region+0x1ab/0x3f0 [ 1076.474639][T24194] ? __get_unmapped_area+0x267/0x440 [ 1076.474661][T24194] do_mmap+0xa3e/0x1210 [ 1076.474682][T24194] ? __pfx_do_mmap+0x10/0x10 [ 1076.474700][T24194] ? __pfx_down_write_killable+0x10/0x10 [ 1076.474724][T24194] vm_mmap_pgoff+0x29e/0x470 [ 1076.474746][T24194] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 1076.474769][T24194] ? __x64_sys_futex+0x1e0/0x4c0 [ 1076.474787][T24194] ? __x64_sys_futex+0x1e9/0x4c0 [ 1076.474808][T24194] ksys_mmap_pgoff+0x7d/0x5c0 [ 1076.474827][T24194] ? syscall_user_dispatch+0x78/0x140 [ 1076.474843][T24194] __x64_sys_mmap+0x125/0x190 [ 1076.474867][T24194] do_syscall_64+0xcd/0xfa0 [ 1076.474886][T24194] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1076.474900][T24194] RIP: 0033:0x7f8fd638f6c9 [ 1076.474913][T24194] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1076.474928][T24194] RSP: 002b:00007f8fd72af038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1076.474942][T24194] RAX: ffffffffffffffda RBX: 00007f8fd65e5fa0 RCX: 00007f8fd638f6c9 [ 1076.474952][T24194] RDX: 00004000000000df RSI: 0000000000020009 RDI: 0000000000000000 [ 1076.474961][T24194] RBP: 00007f8fd6411f91 R08: 00000000000000d4 R09: 0000000000008000 [ 1076.474970][T24194] R10: 0000000000000eb1 R11: 0000000000000246 R12: 0000000000000000 [ 1076.474979][T24194] R13: 00007f8fd65e6038 R14: 00007f8fd65e5fa0 R15: 00007ffcb8cf3f98 [ 1076.475001][T24194] [ 1077.506851][T24201] mkiss: ax0: crc mode is auto. [ 1078.874622][T24240] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3893'. [ 1079.244925][T24247] mkiss: ax0: crc mode is auto. [ 1080.836977][ T30] audit: type=1800 audit(42009.569:77): pid=24262 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.3897" name="features" dev="configfs" ino=102748 res=0 errno=0 [ 1082.205598][T24299] [U] [ 1082.208404][T24299] [U] [ 1082.211084][T24299] [U] [ 1082.213857][T24299] [U] [ 1082.216562][T24299] [U] [ 1082.241302][T24299] [U] [ 1082.244025][T24299] [U] [ 1082.246700][T24299] [U] [ 1082.249478][T24299] [U] [ 1082.274661][T24299] [U] [ 1082.277411][T24299] [U] [ 1082.280116][T24299] [U] [ 1082.282804][T24299] [U] [ 1082.335562][T24298] [U] [ 1084.471404][T24338] FAULT_INJECTION: forcing a failure. [ 1084.471404][T24338] name failslab, interval 1, probability 0, space 0, times 0 [ 1084.547588][T24338] CPU: 0 UID: 0 PID: 24338 Comm: syz.0.3913 Tainted: G U syzkaller #0 PREEMPT(full) [ 1084.547614][T24338] Tainted: [U]=USER [ 1084.547619][T24338] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1084.547628][T24338] Call Trace: [ 1084.547633][T24338] [ 1084.547639][T24338] dump_stack_lvl+0x16c/0x1f0 [ 1084.547670][T24338] should_fail_ex+0x512/0x640 [ 1084.547692][T24338] ? __kmalloc_noprof+0xca/0x880 [ 1084.547717][T24338] should_failslab+0xc2/0x120 [ 1084.547737][T24338] __kmalloc_noprof+0xdd/0x880 [ 1084.547759][T24338] ? sk_prot_alloc+0x1a8/0x2a0 [ 1084.547780][T24338] ? sk_prot_alloc+0x1a8/0x2a0 [ 1084.547795][T24338] sk_prot_alloc+0x1a8/0x2a0 [ 1084.547813][T24338] sk_alloc+0x36/0xc20 [ 1084.547834][T24338] __netlink_create+0x5e/0x2c0 [ 1084.547855][T24338] ? __wake_up+0x3f/0x60 [ 1084.547872][T24338] netlink_create+0x39e/0x620 [ 1084.547885][T24338] ? __pfx_genl_bind+0x10/0x10 [ 1084.547900][T24338] ? __pfx_genl_unbind+0x10/0x10 [ 1084.547914][T24338] ? __pfx_genl_release+0x10/0x10 [ 1084.547933][T24338] __sock_create+0x338/0x8d0 [ 1084.547955][T24338] __sys_socket+0x14d/0x260 [ 1084.547974][T24338] ? __pfx___sys_socket+0x10/0x10 [ 1084.547993][T24338] ? xfd_validate_state+0x61/0x180 [ 1084.548017][T24338] __x64_sys_socket+0x72/0xb0 [ 1084.548035][T24338] ? lockdep_hardirqs_on+0x7c/0x110 [ 1084.548052][T24338] do_syscall_64+0xcd/0xfa0 [ 1084.548070][T24338] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1084.548085][T24338] RIP: 0033:0x7f8fd638f6c9 [ 1084.548097][T24338] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1084.548111][T24338] RSP: 002b:00007f8fd72af038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1084.548125][T24338] RAX: ffffffffffffffda RBX: 00007f8fd65e5fa0 RCX: 00007f8fd638f6c9 [ 1084.548135][T24338] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 1084.548143][T24338] RBP: 00007f8fd6411f91 R08: 0000000000000000 R09: 0000000000000000 [ 1084.548152][T24338] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1084.548160][T24338] R13: 00007f8fd65e6038 R14: 00007f8fd65e5fa0 R15: 00007ffcb8cf3f98 [ 1084.548180][T24338] [ 1087.302544][T24365] Invalid ELF header magic: != ELF [ 1088.014528][T24378] [U] [ 1088.017252][T24378] [U] [ 1088.019958][T24378] [U] [ 1088.022644][T24378] [U] [ 1088.119020][T23181] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1088.129787][T23181] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1088.139366][T23181] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1088.148884][T23181] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1088.161744][T23181] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1088.190470][T24378] [U] [ 1088.193181][T24378] [U] [ 1088.195861][T24378] [U] [ 1088.198548][T24378] [U] [ 1088.298119][T24377] [U] [ 1088.830253][T24383] chnl_net:caif_netlink_parms(): no params data found [ 1088.990786][T24397] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3925'. [ 1089.043285][T24397] nbd: must specify an index to disconnect [ 1089.259218][T24401] device-mapper: ioctl: Invalid ioctl structure: name þÿÿÿÿÿÿÿ, dev 4 [ 1089.392164][T24383] bridge0: port 1(bridge_slave_0) entered blocking state [ 1089.399323][T24383] bridge0: port 1(bridge_slave_0) entered disabled state [ 1089.453199][T24383] bridge_slave_0: entered allmulticast mode [ 1089.487457][T24383] bridge_slave_0: entered promiscuous mode [ 1089.514696][T24383] bridge0: port 2(bridge_slave_1) entered blocking state [ 1089.561320][T24383] bridge0: port 2(bridge_slave_1) entered disabled state [ 1089.604354][T24383] bridge_slave_1: entered allmulticast mode [ 1089.640448][T24383] bridge_slave_1: entered promiscuous mode [ 1089.770134][T24383] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1089.815203][T24383] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1089.953100][T24383] team0: Port device team_slave_0 added [ 1089.998468][T24383] team0: Port device team_slave_1 added [ 1090.159196][T24383] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1090.188038][T24383] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1090.227464][T23181] Bluetooth: hci5: command tx timeout [ 1090.294230][T24383] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1090.365170][T24383] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1090.395528][T24383] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1090.483529][T24383] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1090.743564][T24383] hsr_slave_0: entered promiscuous mode [ 1090.780252][T24383] hsr_slave_1: entered promiscuous mode [ 1090.805543][T24383] debugfs: 'hsr0' already exists in 'hsr' [ 1090.843252][T24383] Cannot create hsr debugfs directory [ 1091.764768][T24422] FAULT_INJECTION: forcing a failure. [ 1091.764768][T24422] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1091.884254][T24422] CPU: 0 UID: 0 PID: 24422 Comm: syz.5.3929 Tainted: G U syzkaller #0 PREEMPT(full) [ 1091.884281][T24422] Tainted: [U]=USER [ 1091.884287][T24422] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1091.884297][T24422] Call Trace: [ 1091.884302][T24422] [ 1091.884309][T24422] dump_stack_lvl+0x16c/0x1f0 [ 1091.884332][T24422] should_fail_ex+0x512/0x640 [ 1091.884358][T24422] get_futex_key+0x1d0/0x1560 [ 1091.884380][T24422] ? __pfx_get_futex_key+0x10/0x10 [ 1091.884400][T24422] ? __pick_eevdf+0x30a/0x670 [ 1091.884421][T24422] futex_wait_setup+0x9d/0x550 [ 1091.884441][T24422] __futex_wait+0x193/0x2f0 [ 1091.884455][T24422] ? __pfx___futex_wait+0x10/0x10 [ 1091.884467][T24422] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1091.884484][T24422] ? lockdep_hardirqs_on+0x7c/0x110 [ 1091.884503][T24422] ? __pfx_futex_wake_mark+0x10/0x10 [ 1091.884528][T24422] ? find_held_lock+0x2b/0x80 [ 1091.884545][T24422] ? futex_private_hash_put+0xd5/0x190 [ 1091.884565][T24422] futex_wait+0xe8/0x380 [ 1091.884578][T24422] ? __pfx_futex_wait+0x10/0x10 [ 1091.884601][T24422] do_futex+0x229/0x350 [ 1091.884620][T24422] ? __pfx_do_futex+0x10/0x10 [ 1091.884639][T24422] ? __sys_bind+0x1c5/0x260 [ 1091.884662][T24422] __x64_sys_futex+0x1e0/0x4c0 [ 1091.884684][T24422] ? __pfx___x64_sys_futex+0x10/0x10 [ 1091.884703][T24422] ? xfd_validate_state+0x61/0x180 [ 1091.884722][T24422] ? __pfx_ksys_write+0x10/0x10 [ 1091.884744][T24422] do_syscall_64+0xcd/0xfa0 [ 1091.884762][T24422] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1091.884777][T24422] RIP: 0033:0x7f354898f6c9 [ 1091.884790][T24422] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1091.884804][T24422] RSP: 002b:00007f354976f0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1091.884818][T24422] RAX: ffffffffffffffda RBX: 00007f3548be6098 RCX: 00007f354898f6c9 [ 1091.884828][T24422] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f3548be6098 [ 1091.884837][T24422] RBP: 00007f3548be6090 R08: 0000000000000000 R09: 0000000000000000 [ 1091.884846][T24422] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1091.884854][T24422] R13: 00007f3548be6128 R14: 00007ffd8d3e6390 R15: 00007ffd8d3e6478 [ 1091.884874][T24422] [ 1092.396787][T23181] Bluetooth: hci5: command tx timeout [ 1092.696301][T24427] netlink: 342 bytes leftover after parsing attributes in process `syz.0.3932'. [ 1092.747398][T24383] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1092.808304][T24383] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1092.840859][T24429] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3933'. [ 1092.863200][T24383] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1092.904942][T24383] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1093.200165][T24383] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1093.276726][T24383] 8021q: adding VLAN 0 to HW filter on device team0 [ 1093.318266][T23812] bridge0: port 1(bridge_slave_0) entered blocking state [ 1093.325466][T23812] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1093.403767][T23812] bridge0: port 2(bridge_slave_1) entered blocking state [ 1093.410938][T23812] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1094.093297][T24383] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1094.364797][T24461] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1094.409664][T24461] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1094.454344][T23129] Bluetooth: hci5: command tx timeout [ 1094.752936][T24472] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3940'. [ 1095.000228][T24383] veth0_vlan: entered promiscuous mode [ 1095.057682][T24383] veth1_vlan: entered promiscuous mode [ 1095.220241][T24383] veth0_macvtap: entered promiscuous mode [ 1095.278500][T24383] veth1_macvtap: entered promiscuous mode [ 1095.346748][T24383] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1095.510819][T24383] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1095.595058][T23129] Bluetooth: hci4: unexpected event 0x3e length: 726 > 260 [ 1095.595084][T23129] Bluetooth: hci4: unexpected subevent 0x0e length: 725 > 15 [ 1095.614105][T23129] Bluetooth: hci4: Unable to find connection for dst 00:a2:f2:94:be:c8 sid 0x4f [ 1095.671993][T23819] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1095.710960][T23819] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1095.763086][T23819] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1095.805478][T23819] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1096.111988][T23819] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1096.151271][T23819] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1096.303519][T23841] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1096.358816][T23841] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1096.465900][T24492] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3946'. [ 1096.521081][T23129] Bluetooth: hci5: command tx timeout [ 1103.734712][T24590] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3963'. [ 1106.589586][T24624] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm syz.6.3970: iget: checksum invalid [ 1106.759780][T24624] faux_driver regulatory: loading /lib/firmware/updates/syzkaller/regulatory.db failed with error -74 [ 1106.981533][T24624] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm syz.6.3970: iget: checksum invalid [ 1107.212749][T24624] faux_driver regulatory: loading /lib/firmware/updates/regulatory.db failed with error -74 [ 1107.508258][T24624] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm syz.6.3970: iget: checksum invalid [ 1107.579389][T24633] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3972'. [ 1107.665085][T24624] faux_driver regulatory: loading /lib/firmware/syzkaller/regulatory.db failed with error -74 [ 1107.935408][T24624] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm syz.6.3970: iget: checksum invalid [ 1108.164410][T24624] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -74 [ 1108.288878][T24624] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -74 [ 1108.395355][T24624] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 1110.088492][T24674] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3982'. [ 1110.225625][T24677] nfsd: Unknown parameter 'TšR‚Ð' [ 1112.482415][T24715] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1112.651961][T24715] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1112.723501][T24717] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3994'. [ 1113.006066][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 1113.019193][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 1114.599227][T24144] syz.1.3872 (24144) used greatest stack depth: 18264 bytes left [ 1118.913076][T24822] netlink: 'syz.0.4017': attribute type 2 has an invalid length. [ 1119.360112][T24825] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input63 [ 1119.593451][T24829] block2mtd: error: cannot open device çin [ 1119.736176][T24827] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input64 [ 1120.002065][T24832] can0: slcan on pty245. [ 1120.045369][T24826] syz.1.4019 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 1120.156795][T24826] CPU: 0 UID: 0 PID: 24826 Comm: syz.1.4019 Tainted: G U syzkaller #0 PREEMPT(full) [ 1120.156821][T24826] Tainted: [U]=USER [ 1120.156826][T24826] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1120.156835][T24826] Call Trace: [ 1120.156841][T24826] [ 1120.156847][T24826] dump_stack_lvl+0x16c/0x1f0 [ 1120.156871][T24826] dump_header+0x101/0x930 [ 1120.156889][T24826] oom_kill_process+0x272/0xa40 [ 1120.156906][T24826] out_of_memory+0x350/0x1700 [ 1120.156925][T24826] ? __pfx_out_of_memory+0x10/0x10 [ 1120.156945][T24826] mem_cgroup_out_of_memory+0x118/0x130 [ 1120.156969][T24826] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 1120.156998][T24826] ? do_raw_spin_unlock+0x172/0x230 [ 1120.157015][T24826] try_charge_memcg+0x695/0xd30 [ 1120.157038][T24826] ? __pfx_try_charge_memcg+0x10/0x10 [ 1120.157060][T24826] ? find_held_lock+0x2b/0x80 [ 1120.157084][T24826] charge_memcg+0x8a/0x230 [ 1120.157103][T24826] mem_cgroup_swapin_charge_folio+0xbb/0x440 [ 1120.157126][T24826] __read_swap_cache_async+0x397/0x500 [ 1120.157145][T24826] ? __pfx___read_swap_cache_async+0x10/0x10 [ 1120.157161][T24826] ? __lock_acquire+0xb70/0x1c90 [ 1120.157184][T24826] ? __xa_erase+0xee/0x150 [ 1120.157205][T24826] swap_cluster_readahead+0x528/0x770 [ 1120.157226][T24826] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 1120.157246][T24826] ? move_cluster+0x39d/0x560 [ 1120.157266][T24826] ? lock_acquire+0x179/0x350 [ 1120.157286][T24826] ? get_vma_policy+0x242/0x3c0 [ 1120.157307][T24826] swapin_readahead+0x160/0x1180 [ 1120.157329][T24826] ? __pfx_swapin_readahead+0x10/0x10 [ 1120.157345][T24826] ? find_held_lock+0x2b/0x80 [ 1120.157358][T24826] ? swap_cache_get_folio+0x267/0x8e0 [ 1120.157394][T24826] ? swap_cache_get_folio+0x267/0x8e0 [ 1120.157407][T24826] ? swap_cache_get_folio+0x267/0x8e0 [ 1120.157422][T24826] ? swap_cache_get_folio+0x267/0x8e0 [ 1120.157436][T24826] ? swap_cache_get_folio+0x1f/0x8e0 [ 1120.157448][T24826] ? swap_cache_get_folio+0x293/0x8e0 [ 1120.157463][T24826] ? __pfx_swap_cache_get_folio+0x10/0x10 [ 1120.157477][T24826] ? __pfx_get_swap_device+0x10/0x10 [ 1120.157496][T24826] ? do_swap_page+0x125/0x6340 [ 1120.157519][T24826] ? do_swap_page+0x86c/0x6340 [ 1120.157536][T24826] do_swap_page+0x86c/0x6340 [ 1120.157564][T24826] ? __pfx_do_swap_page+0x10/0x10 [ 1120.157585][T24826] ? __pfx_default_wake_function+0x10/0x10 [ 1120.157602][T24826] ? __lock_acquire+0x622/0x1c90 [ 1120.157623][T24826] ? rcu_is_watching+0x12/0xc0 [ 1120.157643][T24826] ? ___pte_offset_map+0x2ad/0x4f0 [ 1120.157664][T24826] __handle_mm_fault+0x17d1/0x2aa0 [ 1120.157695][T24826] ? __pfx___handle_mm_fault+0x10/0x10 [ 1120.157721][T24826] ? lock_vma_under_rcu+0x176/0x530 [ 1120.157750][T24826] ? __pfx_lock_vma_under_rcu+0x10/0x10 [ 1120.157778][T24826] handle_mm_fault+0x589/0xd10 [ 1120.157801][T24826] ? __pkru_allows_pkey+0x21/0xb0 [ 1120.157826][T24826] do_user_addr_fault+0x60c/0x1370 [ 1120.157842][T24826] ? rcu_is_watching+0x12/0xc0 [ 1120.157859][T24826] exc_page_fault+0x64/0xc0 [ 1120.157877][T24826] asm_exc_page_fault+0x26/0x30 [ 1120.157892][T24826] RIP: 0033:0x7f4c52a6594c [ 1120.157905][T24826] Code: 66 0f 1f 44 00 00 69 3d 66 fd ea 00 e8 03 00 00 48 8d 1d 67 06 38 00 e8 e2 9c 12 00 eb 0c 48 81 c3 f0 00 00 00 48 39 eb 74 24 <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df 48 81 c3 f0 00 00 [ 1120.157919][T24826] RSP: 002b:00007ffc64421230 EFLAGS: 00010206 [ 1120.157932][T24826] RAX: 0000000000000000 RBX: 00007f4c52de5fa0 RCX: 0000000000000000 [ 1120.157941][T24826] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000055556f7bf808 [ 1120.157950][T24826] RBP: 00007f4c52de7da0 R08: 0000000000000000 R09: 00007f4c53a5f000 [ 1120.157959][T24826] R10: 0000000000000000 R11: 0000000000000293 R12: 00000000001122fe [ 1120.157968][T24826] R13: 00007ffc64421320 R14: ffffffffffffffff R15: 00007ffc64421340 [ 1120.157989][T24826] [ 1120.157996][T24826] memory: usage 3072kB, limit 3072kB, failcnt 75210 [ 1120.772567][T24831] can0 (unregistered): slcan off pty245. [ 1121.275240][T24826] memory+swap: usage 5440kB, limit 9007199254740988kB, failcnt 0 [ 1121.318923][T24826] kmem: usage 3024kB, limit 9007199254740988kB, failcnt 0 [ 1121.339648][T24826] Memory cgroup stats for /syz1: [ 1121.339870][T24826] cache 0 [ 1121.354863][T24826] rss 0 [ 1121.357661][T24826] rss_huge 0 [ 1121.385394][T24826] shmem 0 [ 1121.388509][T24826] mapped_file 0 [ 1121.409728][T24826] dirty 0 [ 1121.422962][T24826] writeback 0 [ 1121.426269][T24826] workingset_refault_anon 14506 [ 1121.470360][T24826] workingset_refault_file 12665 [ 1121.480997][T24826] swap 2424832 [ 1121.495379][T24826] swapcached 49152 [ 1121.499271][T24826] pgpgin 1525109 [ 1121.526789][T24826] pgpgout 1564444 [ 1121.547902][T24826] pgfault 646632 [ 1121.561606][T24826] pgmajfault 5363 [ 1121.565370][T24826] inactive_anon 49152 [ 1121.605399][T24826] active_anon 0 [ 1121.608879][T24826] inactive_file 0 [ 1121.620842][T24826] active_file 0 [ 1121.641501][T24826] unevictable 0 [ 1121.644991][T24826] hierarchical_memory_limit 3145728 [ 1121.670591][T24826] hierarchical_memsw_limit 9223372036854771712 [ 1121.676889][T24826] total_cache 0 [ 1121.720460][T24826] total_rss 0 [ 1121.723862][T24826] total_rss_huge 0 [ 1121.755449][T24826] total_shmem 0 [ 1121.768848][T24826] total_mapped_file 0 [ 1121.772847][T24826] total_dirty 0 [ 1121.776379][T24826] total_writeback 0 [ 1121.808315][T24826] total_workingset_refault_anon 14506 [ 1121.813711][T24826] total_workingset_refault_file 12665 [ 1121.852524][T24826] total_swap 2424832 [ 1121.856452][T24826] total_swapcached 49152 [ 1121.868087][T24826] total_pgpgin 1525109 [ 1121.872279][T24826] total_pgpgout 1564444 [ 1121.907826][T24826] total_pgfault 646632 [ 1121.913354][T24826] total_pgmajfault 5363 [ 1121.917593][T24826] total_inactive_anon 49152 [ 1121.959556][T24826] total_active_anon 0 [ 1121.963572][T24826] total_inactive_file 0 [ 1121.985722][T24826] total_active_file 0 [ 1122.008781][T24826] total_unevictable 0 [ 1122.012868][T24826] anon_cost 896 [ 1122.016418][T24826] file_cost 288 [ 1122.051709][T24826] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.4019,pid=24826,uid=0 [ 1122.108987][T24826] Memory cgroup out of memory: Killed process 24826 (syz.1.4019) total-vm:108164kB, anon-rss:1268kB, file-rss:22548kB, shmem-rss:0kB, UID:0 pgtables:140kB oom_score_adj:0 [ 1122.746561][T24885] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4028'. [ 1123.954167][T24921] HfR: entered promiscuous mode [ 1124.053091][T24919] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4038'. [ 1126.309983][T23181] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1126.327723][T23181] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1126.336269][T23181] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1126.344072][T23181] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1126.352065][T23181] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1126.651393][T24950] chnl_net:caif_netlink_parms(): no params data found [ 1126.808857][T24950] bridge0: port 1(bridge_slave_0) entered blocking state [ 1126.826304][T24950] bridge0: port 1(bridge_slave_0) entered disabled state [ 1126.843627][T24950] bridge_slave_0: entered allmulticast mode [ 1126.859954][T24950] bridge_slave_0: entered promiscuous mode [ 1126.881775][T24950] bridge0: port 2(bridge_slave_1) entered blocking state [ 1126.897608][T24950] bridge0: port 2(bridge_slave_1) entered disabled state [ 1126.913216][T24950] bridge_slave_1: entered allmulticast mode [ 1126.931338][T24950] bridge_slave_1: entered promiscuous mode [ 1126.997266][T24950] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1127.023423][T24950] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1127.091730][T24950] team0: Port device team_slave_0 added [ 1127.110986][T24950] team0: Port device team_slave_1 added [ 1127.165695][T24950] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1127.181736][T24950] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1127.245431][T24950] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1127.282457][T24950] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1127.300884][T24950] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1127.360619][T24950] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1127.458504][T24950] hsr_slave_0: entered promiscuous mode [ 1127.476006][T24950] hsr_slave_1: entered promiscuous mode [ 1127.485918][T24950] debugfs: 'hsr0' already exists in 'hsr' [ 1127.499843][T24950] Cannot create hsr debugfs directory [ 1128.096412][T24950] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1128.129354][T24950] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1128.165373][T24950] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1128.208097][T24950] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1128.365924][T23181] Bluetooth: hci6: command tx timeout [ 1128.481197][T24950] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1128.579661][T24950] 8021q: adding VLAN 0 to HW filter on device team0 [ 1128.675197][T23841] bridge0: port 1(bridge_slave_0) entered blocking state [ 1128.682628][T23841] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1128.727327][T23841] bridge0: port 2(bridge_slave_1) entered blocking state [ 1128.734693][T23841] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1128.848178][T24950] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1129.246922][T24950] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1129.644697][T24950] veth0_vlan: entered promiscuous mode [ 1129.675449][T24950] veth1_vlan: entered promiscuous mode [ 1129.730379][T24950] veth0_macvtap: entered promiscuous mode [ 1129.751083][T24950] veth1_macvtap: entered promiscuous mode [ 1129.799654][T24950] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1129.821307][T24950] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1129.852080][T23819] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1129.861960][T23819] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1129.892817][T23819] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1129.917894][T23819] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1130.072072][T23819] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1130.104449][T23819] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1130.143817][T23819] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1130.154686][T23819] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1130.434852][T23181] Bluetooth: hci6: command tx timeout [ 1132.052950][T25005] syz.1.4052 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 1132.170078][T25005] CPU: 0 UID: 0 PID: 25005 Comm: syz.1.4052 Tainted: G U syzkaller #0 PREEMPT(full) [ 1132.170104][T25005] Tainted: [U]=USER [ 1132.170109][T25005] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1132.170118][T25005] Call Trace: [ 1132.170124][T25005] [ 1132.170130][T25005] dump_stack_lvl+0x16c/0x1f0 [ 1132.170152][T25005] dump_header+0x101/0x930 [ 1132.170171][T25005] oom_kill_process+0x272/0xa40 [ 1132.170188][T25005] out_of_memory+0x350/0x1700 [ 1132.170207][T25005] ? __pfx_out_of_memory+0x10/0x10 [ 1132.170228][T25005] mem_cgroup_out_of_memory+0x118/0x130 [ 1132.170251][T25005] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 1132.170278][T25005] ? do_raw_spin_unlock+0x172/0x230 [ 1132.170304][T25005] try_charge_memcg+0x695/0xd30 [ 1132.170327][T25005] ? __pfx_try_charge_memcg+0x10/0x10 [ 1132.170346][T25005] ? __print_lock_name+0xb1/0xe0 [ 1132.170362][T25005] ? rcu_read_unlock+0x17/0x60 [ 1132.170386][T25005] charge_memcg+0x8a/0x230 [ 1132.170405][T25005] __mem_cgroup_charge+0x2b/0x1e0 [ 1132.170426][T25005] do_pte_missing+0x222a/0x3ba0 [ 1132.170449][T25005] ? find_held_lock+0x2b/0x80 [ 1132.170469][T25005] __handle_mm_fault+0x1556/0x2aa0 [ 1132.170497][T25005] ? __pfx___handle_mm_fault+0x10/0x10 [ 1132.170521][T25005] ? __pte_offset_map_lock+0x174/0x310 [ 1132.170540][T25005] ? find_held_lock+0x2b/0x80 [ 1132.170563][T25005] ? follow_page_pte+0x5cf/0x1390 [ 1132.170587][T25005] handle_mm_fault+0x589/0xd10 [ 1132.170613][T25005] __get_user_pages+0x54e/0x3530 [ 1132.170642][T25005] ? __pfx___get_user_pages+0x10/0x10 [ 1132.170667][T25005] populate_vma_page_range+0x267/0x3f0 [ 1132.170692][T25005] ? __pfx_populate_vma_page_range+0x10/0x10 [ 1132.170712][T25005] ? __pfx_find_vma_intersection+0x10/0x10 [ 1132.170732][T25005] ? do_mmap+0x69c/0x1210 [ 1132.170752][T25005] __mm_populate+0x1d8/0x380 [ 1132.170774][T25005] ? __pfx___mm_populate+0x10/0x10 [ 1132.170796][T25005] ? up_write+0x1b2/0x520 [ 1132.170820][T25005] vm_mmap_pgoff+0x37f/0x470 [ 1132.170842][T25005] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 1132.170860][T25005] ? find_held_lock+0x2b/0x80 [ 1132.170877][T25005] ? __x64_sys_futex+0x1e0/0x4c0 [ 1132.170897][T25005] ? __x64_sys_futex+0x1e9/0x4c0 [ 1132.170919][T25005] ksys_mmap_pgoff+0x7d/0x5c0 [ 1132.170936][T25005] ? xfd_validate_state+0x61/0x180 [ 1132.170960][T25005] __x64_sys_mmap+0x125/0x190 [ 1132.170984][T25005] do_syscall_64+0xcd/0xfa0 [ 1132.171004][T25005] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1132.171020][T25005] RIP: 0033:0x7f4c52b8f6c9 [ 1132.171033][T25005] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1132.171048][T25005] RSP: 002b:00007f4c53a1c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1132.171063][T25005] RAX: ffffffffffffffda RBX: 00007f4c52de6180 RCX: 00007f4c52b8f6c9 [ 1132.171073][T25005] RDX: 00000000000000df RSI: 0000000000400008 RDI: 0000000000000000 [ 1132.171081][T25005] RBP: 00007f4c52c11f91 R08: ffffffffffffffff R09: 0000000000000000 [ 1132.171091][T25005] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 1132.171099][T25005] R13: 00007f4c52de6218 R14: 00007f4c52de6180 R15: 00007ffc644210c8 [ 1132.171121][T25005] [ 1132.171283][T25005] memory: usage 3072kB, limit 3072kB, failcnt 78438 [ 1132.543992][T23181] Bluetooth: hci6: command tx timeout [ 1132.672276][T25005] memory+swap: usage 9552kB, limit 9007199254740988kB, failcnt 0 [ 1132.683764][T25005] kmem: usage 1428kB, limit 9007199254740988kB, failcnt 0 [ 1132.701214][T25005] Memory cgroup stats for /syz1: [ 1132.701446][T25005] cache 0 [ 1132.720906][T25005] rss 28672 [ 1132.726684][T25005] rss_huge 0 [ 1132.737729][T25005] shmem 0 [ 1132.740791][T25005] mapped_file 0 [ 1132.752559][T25005] dirty 0 [ 1132.762812][T25005] writeback 0 [ 1132.766500][T25005] workingset_refault_anon 15333 [ 1132.771536][T25005] workingset_refault_file 12665 [ 1132.786794][T25005] swap 7966720 [ 1132.795606][T25005] swapcached 110592 [ 1132.803951][T25005] pgpgin 1532034 [ 1132.807561][T25005] pgpgout 1571350 [ 1132.819194][T25005] pgfault 654377 [ 1132.829433][T25005] pgmajfault 5650 [ 1132.844236][T25005] inactive_anon 0 [ 1132.853567][T25005] active_anon 77824 [ 1132.861837][T25005] inactive_file 0 [ 1132.865570][T25005] active_file 0 [ 1132.876178][T25005] unevictable 0 [ 1132.885566][T25005] hierarchical_memory_limit 3145728 [ 1132.896746][T25005] hierarchical_memsw_limit 9223372036854771712 [ 1132.910326][T25005] total_cache 0 [ 1132.918638][T25005] total_rss 28672 [ 1132.926049][T25005] total_rss_huge 0 [ 1132.929876][T25005] total_shmem 0 [ 1132.945919][T25005] total_mapped_file 0 [ 1132.957367][T25005] total_dirty 0 [ 1132.965551][T25005] total_writeback 0 [ 1132.972944][T25005] total_workingset_refault_anon 15333 [ 1132.978456][T25005] total_workingset_refault_file 12665 [ 1132.998356][T25005] total_swap 7966720 [ 1133.004791][T25005] total_swapcached 110592 [ 1133.016045][T25005] total_pgpgin 1532034 [ 1133.024984][T25005] total_pgpgout 1571350 [ 1133.036585][T25005] total_pgfault 654377 [ 1133.045195][T25005] total_pgmajfault 5650 [ 1133.057120][T25005] total_inactive_anon 0 [ 1133.075359][T25005] total_active_anon 77824 [ 1133.079835][T25005] total_inactive_file 0 [ 1133.093328][T25005] total_active_file 0 [ 1133.103397][T25005] total_unevictable 0 [ 1133.112211][T25005] anon_cost 896 [ 1133.120287][T25005] file_cost 288 [ 1133.127840][T25005] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.4052,pid=24999,uid=0 [ 1133.170405][T25005] Memory cgroup out of memory: Killed process 24999 (syz.1.4052) total-vm:139420kB, anon-rss:1268kB, file-rss:26324kB, shmem-rss:0kB, UID:0 pgtables:164kB oom_score_adj:0 [ 1133.739921][T25025] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4059'. [ 1134.574576][T23181] Bluetooth: hci6: command tx timeout [ 1135.899875][T25069] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4069'. [ 1135.985075][T25071] bond0: invalid ARP target specified [ 1136.613397][T25059] kexec: Could not allocate control_code_buffer [ 1136.838590][T23129] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1136.848785][T23129] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1136.858077][T23129] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1136.866719][T23129] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1136.876065][T23129] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1137.216578][T25076] chnl_net:caif_netlink_parms(): no params data found [ 1137.652652][T25076] bridge0: port 1(bridge_slave_0) entered blocking state [ 1137.668951][T25076] bridge0: port 1(bridge_slave_0) entered disabled state [ 1137.694324][T25076] bridge_slave_0: entered allmulticast mode [ 1137.717495][T25076] bridge_slave_0: entered promiscuous mode [ 1137.738044][T25076] bridge0: port 2(bridge_slave_1) entered blocking state [ 1137.754543][T25076] bridge0: port 2(bridge_slave_1) entered disabled state [ 1137.772560][T25076] bridge_slave_1: entered allmulticast mode [ 1137.789657][T25076] bridge_slave_1: entered promiscuous mode [ 1137.915128][T25076] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1137.961885][T25076] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1138.245505][T25076] team0: Port device team_slave_0 added [ 1138.273596][T25076] team0: Port device team_slave_1 added [ 1138.540886][T25076] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1138.561218][T25076] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1138.691920][T25076] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1138.751965][T25076] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1138.790715][T25076] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1138.819870][ C0] vkms_vblank_simulate: vblank timer overrun [ 1138.940319][T25076] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1138.954928][T23181] Bluetooth: hci7: command tx timeout [ 1139.231391][T25076] hsr_slave_0: entered promiscuous mode [ 1139.256581][T25076] hsr_slave_1: entered promiscuous mode [ 1139.274285][T25076] debugfs: 'hsr0' already exists in 'hsr' [ 1139.286316][T25076] Cannot create hsr debugfs directory [ 1141.019956][T23181] Bluetooth: hci7: command tx timeout [ 1141.037940][T25076] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1141.321418][T25076] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1141.492135][T25076] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1141.591188][T25076] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1142.037953][T25076] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1142.077795][T25076] 8021q: adding VLAN 0 to HW filter on device team0 [ 1142.104958][T23818] bridge0: port 1(bridge_slave_0) entered blocking state [ 1142.112491][T23818] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1142.153210][T23818] bridge0: port 2(bridge_slave_1) entered blocking state [ 1142.160492][T23818] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1142.214942][T25076] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1142.239167][T25076] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1142.696081][T25076] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1143.090344][T23181] Bluetooth: hci7: command tx timeout [ 1143.544730][T25076] veth0_vlan: entered promiscuous mode [ 1143.604648][T25076] veth1_vlan: entered promiscuous mode [ 1143.736313][T25076] veth0_macvtap: entered promiscuous mode [ 1144.299445][T25076] veth1_macvtap: entered promiscuous mode [ 1144.401730][T25076] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1144.466074][T25076] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1144.541363][T23817] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1144.941746][T23817] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1144.973789][T23817] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1145.020099][T23817] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1145.158991][T23181] Bluetooth: hci7: command tx timeout [ 1145.497178][ T30] audit: type=1800 audit(1843104530.338:78): pid=25203 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.4089" name="features" dev="configfs" ino=108640 res=0 errno=0 [ 1145.864459][T23819] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1145.899357][T23819] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1146.298800][T23818] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1146.334731][T23818] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1149.839750][T25219] Invalid ELF header magic: != ELF [ 1150.194972][ T5836] Process accounting resumed [ 1150.709503][T25251] program syz.0.4097 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1158.509141][T25358] [U] [ 1158.511962][T25358] [U] [ 1158.514648][T25358] [U] [ 1158.517411][T25358] [U] [ 1158.520199][T25358] [U] [ 1158.571364][T25358] [U] [ 1158.574100][T25358] [U] [ 1158.577096][T25358] [U] [ 1158.580099][T25358] [U] [ 1158.674491][T25357] [U] [ 1159.239487][T25374] FAULT_INJECTION: forcing a failure. [ 1159.239487][T25374] name failslab, interval 1, probability 0, space 0, times 0 [ 1159.436610][T25374] CPU: 0 UID: 0 PID: 25374 Comm: syz.8.4124 Tainted: G U syzkaller #0 PREEMPT(full) [ 1159.436636][T25374] Tainted: [U]=USER [ 1159.436641][T25374] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1159.436650][T25374] Call Trace: [ 1159.436656][T25374] [ 1159.436663][T25374] dump_stack_lvl+0x16c/0x1f0 [ 1159.436684][T25374] should_fail_ex+0x512/0x640 [ 1159.436705][T25374] ? fs_reclaim_acquire+0xae/0x150 [ 1159.436730][T25374] should_failslab+0xc2/0x120 [ 1159.436750][T25374] kmem_cache_alloc_noprof+0x75/0x6e0 [ 1159.436764][T25374] ? __pfx_map_id_range_down+0x10/0x10 [ 1159.436786][T25374] ? security_inode_alloc+0x3b/0x2b0 [ 1159.436811][T25374] ? security_inode_alloc+0x3b/0x2b0 [ 1159.436831][T25374] security_inode_alloc+0x3b/0x2b0 [ 1159.436852][T25374] inode_init_always_gfp+0xce4/0x1030 [ 1159.436871][T25374] alloc_inode+0x86/0x240 [ 1159.436890][T25374] iget_locked+0x2fa/0x860 [ 1159.436911][T25374] ? __pfx_iget_locked+0x10/0x10 [ 1159.436932][T25374] ? find_held_lock+0x2b/0x80 [ 1159.436947][T25374] ? kernfs_root+0xee/0x2a0 [ 1159.436970][T25374] kernfs_get_inode+0x48/0x460 [ 1159.436988][T25374] kernfs_iop_lookup+0x1a7/0x2d0 [ 1159.437009][T25374] __lookup_slow+0x251/0x460 [ 1159.437030][T25374] ? __pfx___lookup_slow+0x10/0x10 [ 1159.437063][T25374] ? lookup_fast+0x156/0x610 [ 1159.437081][T25374] walk_component+0x353/0x5b0 [ 1159.437097][T25374] path_lookupat+0x142/0x6d0 [ 1159.437114][T25374] filename_lookup+0x224/0x5f0 [ 1159.437131][T25374] ? __pfx_filename_lookup+0x10/0x10 [ 1159.437173][T25374] ? getname_flags.part.0+0x1c5/0x550 [ 1159.437198][T25374] user_path_at+0x3a/0x60 [ 1159.437214][T25374] __x64_sys_name_to_handle_at+0x1e7/0x310 [ 1159.437233][T25374] ? __pfx___x64_sys_name_to_handle_at+0x10/0x10 [ 1159.437256][T25374] do_syscall_64+0xcd/0xfa0 [ 1159.437275][T25374] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1159.437290][T25374] RIP: 0033:0x7f7acf18f6c9 [ 1159.437303][T25374] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1159.437317][T25374] RSP: 002b:00007f7acffd3038 EFLAGS: 00000246 ORIG_RAX: 000000000000012f [ 1159.437332][T25374] RAX: ffffffffffffffda RBX: 00007f7acf3e6090 RCX: 00007f7acf18f6c9 [ 1159.437342][T25374] RDX: 0000000000000000 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 1159.437352][T25374] RBP: 00007f7acf211f91 R08: 0000000000000002 R09: 0000000000000000 [ 1159.437362][T25374] R10: 0000200000001180 R11: 0000000000000246 R12: 0000000000000000 [ 1159.437371][T25374] R13: 00007f7acf3e6128 R14: 00007f7acf3e6090 R15: 00007ffd26d2eed8 [ 1159.437392][T25374] [ 1160.790401][T25406] vhci_hcd: invalid port number 16 [ 1160.819896][T25406] vhci_hcd: invalid port number 16 [ 1162.653245][T25432] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4135'. [ 1164.697038][T25460] [U] [ 1164.700201][T25460] [U] [ 1164.702964][T25460] [U] [ 1164.705649][T25460] [U] [ 1164.740390][T25460] [U] [ 1164.743129][T25460] [U] [ 1164.745915][T25460] [U] [ 1164.748615][T25460] [U] [ 1164.893481][T25471] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4146'. [ 1164.923024][T25459] [U] [ 1165.551541][T25486] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4149'. [ 1167.376278][T25520] netlink: 28 bytes leftover after parsing attributes in process `syz.8.4157'. [ 1167.855644][T25524] FAULT_INJECTION: forcing a failure. [ 1167.855644][T25524] name failslab, interval 1, probability 0, space 0, times 0 [ 1167.958702][T25526] FAULT_INJECTION: forcing a failure. [ 1167.958702][T25526] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1167.981611][T25524] CPU: 0 UID: 0 PID: 25524 Comm: syz.8.4158 Tainted: G U syzkaller #0 PREEMPT(full) [ 1167.981639][T25524] Tainted: [U]=USER [ 1167.981644][T25524] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1167.981653][T25524] Call Trace: [ 1167.981659][T25524] [ 1167.981665][T25524] dump_stack_lvl+0x16c/0x1f0 [ 1167.981688][T25524] should_fail_ex+0x512/0x640 [ 1167.981710][T25524] ? __kvmalloc_node_noprof+0x12e/0x9c0 [ 1167.981730][T25524] should_failslab+0xc2/0x120 [ 1167.981751][T25524] __kvmalloc_node_noprof+0x141/0x9c0 [ 1167.981770][T25524] ? v4l2_ctrl_handler_init_class+0x201/0x350 [ 1167.981794][T25524] ? v4l2_ctrl_handler_init_class+0x201/0x350 [ 1167.981811][T25524] ? v4l2_ctrl_handler_init_class+0x113/0x350 [ 1167.981828][T25524] v4l2_ctrl_handler_init_class+0x201/0x350 [ 1167.981849][T25524] vicodec_open+0x18b/0xf70 [ 1167.981864][T25524] ? kobject_get_unless_zero+0x156/0x1e0 [ 1167.981887][T25524] v4l2_open+0x1d2/0x5e0 [ 1167.981904][T25524] ? __pfx_v4l2_open+0x10/0x10 [ 1167.981919][T25524] chrdev_open+0x234/0x6a0 [ 1167.981937][T25524] ? __pfx_apparmor_file_open+0x10/0x10 [ 1167.981958][T25524] ? __pfx_chrdev_open+0x10/0x10 [ 1167.981976][T25524] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 1167.981996][T25524] do_dentry_open+0x982/0x1530 [ 1167.982014][T25524] ? __pfx_chrdev_open+0x10/0x10 [ 1167.982035][T25524] vfs_open+0x82/0x3f0 [ 1167.982061][T25524] path_openat+0x1de4/0x2cb0 [ 1167.982085][T25524] ? __pfx_path_openat+0x10/0x10 [ 1167.982102][T25524] ? __lock_acquire+0xb8a/0x1c90 [ 1167.982126][T25524] do_filp_open+0x20b/0x470 [ 1167.982142][T25524] ? __pfx_do_filp_open+0x10/0x10 [ 1167.982173][T25524] ? alloc_fd+0x471/0x7d0 [ 1167.982200][T25524] do_sys_openat2+0x11b/0x1d0 [ 1167.982221][T25524] ? __pfx_do_sys_openat2+0x10/0x10 [ 1167.982241][T25524] ? fput+0x9b/0xd0 [ 1167.982260][T25524] ? __sys_sendmsg+0x18c/0x220 [ 1167.982280][T25524] __x64_sys_openat+0x174/0x210 [ 1167.982301][T25524] ? __pfx___x64_sys_openat+0x10/0x10 [ 1167.982330][T25524] do_syscall_64+0xcd/0xfa0 [ 1167.982349][T25524] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1167.982364][T25524] RIP: 0033:0x7f7acf18f6c9 [ 1167.982377][T25524] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1167.982393][T25524] RSP: 002b:00007f7acfff4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1167.982408][T25524] RAX: ffffffffffffffda RBX: 00007f7acf3e5fa0 RCX: 00007f7acf18f6c9 [ 1167.982417][T25524] RDX: 0000000000000000 RSI: 0000200000000100 RDI: ffffffffffffff9c [ 1167.982426][T25524] RBP: 00007f7acf211f91 R08: 0000000000000000 R09: 0000000000000000 [ 1167.982435][T25524] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1167.982444][T25524] R13: 00007f7acf3e6038 R14: 00007f7acf3e5fa0 R15: 00007ffd26d2eed8 [ 1167.982465][T25524] [ 1168.473168][T25528] Invalid ELF header magic: != ELF [ 1168.518177][T25526] CPU: 0 UID: 0 PID: 25526 Comm: syz.7.4159 Tainted: G U syzkaller #0 PREEMPT(full) [ 1168.518203][T25526] Tainted: [U]=USER [ 1168.518208][T25526] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1168.518217][T25526] Call Trace: [ 1168.518223][T25526] [ 1168.518229][T25526] dump_stack_lvl+0x16c/0x1f0 [ 1168.518252][T25526] should_fail_ex+0x512/0x640 [ 1168.518278][T25526] get_futex_key+0x1d0/0x1560 [ 1168.518298][T25526] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 1168.518315][T25526] ? __pfx_get_futex_key+0x10/0x10 [ 1168.518362][T25526] ? rcu_is_watching+0x12/0xc0 [ 1168.518378][T25526] ? kfree+0x252/0x6d0 [ 1168.518389][T25526] ? bpf_lsm_file_permission+0x9/0x10 [ 1168.518406][T25526] ? security_file_permission+0x71/0x210 [ 1168.518427][T25526] futex_wake+0xea/0x530 [ 1168.518451][T25526] ? __pfx_futex_wake+0x10/0x10 [ 1168.518473][T25526] ? __pfx_vfs_readv+0x10/0x10 [ 1168.518495][T25526] do_futex+0x1e3/0x350 [ 1168.518514][T25526] ? __pfx_do_futex+0x10/0x10 [ 1168.518539][T25526] __x64_sys_futex+0x1e0/0x4c0 [ 1168.518562][T25526] ? __pfx___x64_sys_futex+0x10/0x10 [ 1168.518583][T25526] ? __pfx_do_readv+0x10/0x10 [ 1168.518602][T25526] do_syscall_64+0xcd/0xfa0 [ 1168.518622][T25526] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1168.518637][T25526] RIP: 0033:0x7f756678f6c9 [ 1168.518649][T25526] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1168.518663][T25526] RSP: 002b:00007f75649f60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1168.518677][T25526] RAX: ffffffffffffffda RBX: 00007f75669e5fa8 RCX: 00007f756678f6c9 [ 1168.518687][T25526] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f75669e5fac [ 1168.518696][T25526] RBP: 00007f75669e5fa0 R08: 00007f756752b000 R09: 0000000000000000 [ 1168.518705][T25526] R10: 0000000000000024 R11: 0000000000000246 R12: 0000000000000000 [ 1168.518714][T25526] R13: 00007f75669e6038 R14: 00007fff81904480 R15: 00007fff81904568 [ 1168.518734][T25526] [ 1168.519187][T25526] FAULT_INJECTION: forcing a failure. [ 1168.519187][T25526] name failslab, interval 1, probability 0, space 0, times 0 [ 1168.824160][T23181] Bluetooth: hci8: Opcode 0x1003 failed: -110 [ 1169.016533][T25526] CPU: 0 UID: 0 PID: 25526 Comm: syz.7.4159 Tainted: G U syzkaller #0 PREEMPT(full) [ 1169.016563][T25526] Tainted: [U]=USER [ 1169.016569][T25526] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1169.016578][T25526] Call Trace: [ 1169.016583][T25526] [ 1169.016589][T25526] dump_stack_lvl+0x16c/0x1f0 [ 1169.016613][T25526] should_fail_ex+0x512/0x640 [ 1169.016635][T25526] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 1169.016654][T25526] should_failslab+0xc2/0x120 [ 1169.016674][T25526] kmem_cache_alloc_noprof+0x75/0x6e0 [ 1169.016689][T25526] ? __anon_vma_prepare+0x344/0x5e0 [ 1169.016716][T25526] ? __anon_vma_prepare+0x344/0x5e0 [ 1169.016736][T25526] __anon_vma_prepare+0x344/0x5e0 [ 1169.016757][T25526] ? do_raw_spin_lock+0x12c/0x2b0 [ 1169.016782][T25526] __vmf_anon_prepare+0x11c/0x240 [ 1169.016803][T25526] do_huge_pmd_anonymous_page+0x161/0x1f50 [ 1169.016820][T25526] ? __pmd_alloc+0x64f/0x8b0 [ 1169.016841][T25526] __handle_mm_fault+0x1cff/0x2aa0 [ 1169.016869][T25526] ? __pfx___handle_mm_fault+0x10/0x10 [ 1169.016908][T25526] handle_mm_fault+0x589/0xd10 [ 1169.016934][T25526] __get_user_pages+0x54e/0x3530 [ 1169.016963][T25526] ? __pfx___get_user_pages+0x10/0x10 [ 1169.016988][T25526] populate_vma_page_range+0x267/0x3f0 [ 1169.017009][T25526] ? __pfx_populate_vma_page_range+0x10/0x10 [ 1169.017033][T25526] ? __pfx_find_vma_intersection+0x10/0x10 [ 1169.017053][T25526] ? do_mmap+0x69c/0x1210 [ 1169.017074][T25526] __mm_populate+0x1d8/0x380 [ 1169.017104][T25526] ? __pfx___mm_populate+0x10/0x10 [ 1169.017126][T25526] ? up_write+0x1b2/0x520 [ 1169.017155][T25526] vm_mmap_pgoff+0x37f/0x470 [ 1169.017180][T25526] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 1169.017203][T25526] ? __x64_sys_futex+0x1e0/0x4c0 [ 1169.017223][T25526] ? __x64_sys_futex+0x1e9/0x4c0 [ 1169.017245][T25526] ksys_mmap_pgoff+0x7d/0x5c0 [ 1169.017262][T25526] ? xfd_validate_state+0x61/0x180 [ 1169.017283][T25526] ? __pfx_ksys_write+0x10/0x10 [ 1169.017301][T25526] __x64_sys_mmap+0x125/0x190 [ 1169.017325][T25526] do_syscall_64+0xcd/0xfa0 [ 1169.017345][T25526] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1169.017360][T25526] RIP: 0033:0x7f756678f6c9 [ 1169.017372][T25526] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1169.017386][T25526] RSP: 002b:00007f75649f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1169.017401][T25526] RAX: ffffffffffffffda RBX: 00007f75669e5fa0 RCX: 00007f756678f6c9 [ 1169.017411][T25526] RDX: 00000000000000df RSI: 0000000000400008 RDI: 0000000000000000 [ 1169.017420][T25526] RBP: 00007f7566811f91 R08: 0000000000000002 R09: 0000000000008000 [ 1169.017429][T25526] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 1169.017438][T25526] R13: 00007f75669e6038 R14: 00007f75669e5fa0 R15: 00007fff81904568 [ 1169.017458][T25526] [ 1170.561223][T25550] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4168'. [ 1170.616367][T25552] netlink: 25 bytes leftover after parsing attributes in process `syz.0.4168'. [ 1170.686512][T25555] futex_wake_op: syz.8.4169 tries to shift op by -2048; fix this program [ 1170.803500][T25555] futex_wake_op: syz.8.4169 tries to shift op by -2048; fix this program [ 1172.767570][T25603] FAULT_INJECTION: forcing a failure. [ 1172.767570][T25603] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1172.861041][T25603] CPU: 0 UID: 0 PID: 25603 Comm: syz.7.4176 Tainted: G U syzkaller #0 PREEMPT(full) [ 1172.861067][T25603] Tainted: [U]=USER [ 1172.861072][T25603] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1172.861082][T25603] Call Trace: [ 1172.861089][T25603] [ 1172.861095][T25603] dump_stack_lvl+0x16c/0x1f0 [ 1172.861119][T25603] should_fail_ex+0x512/0x640 [ 1172.861144][T25603] _copy_from_iter+0x463/0x1720 [ 1172.861173][T25603] ? __pfx__copy_from_iter+0x10/0x10 [ 1172.861194][T25603] ? do_raw_spin_lock+0x12c/0x2b0 [ 1172.861216][T25603] ? find_held_lock+0x2b/0x80 [ 1172.861233][T25603] ? rcu_is_watching+0x12/0xc0 [ 1172.861247][T25603] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1172.861267][T25603] write_pool_user+0xe8/0x2f0 [ 1172.861288][T25603] ? __pfx_write_pool_user+0x10/0x10 [ 1172.861310][T25603] ? __futex_wait+0x24b/0x2f0 [ 1172.861323][T25603] ? copy_iovec_from_user+0x131/0x170 [ 1172.861346][T25603] do_iter_readv_writev+0x662/0x9e0 [ 1172.861363][T25603] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 1172.861381][T25603] ? bpf_lsm_file_permission+0x9/0x10 [ 1172.861398][T25603] ? security_file_permission+0x71/0x210 [ 1172.861414][T25603] ? rw_verify_area+0xcf/0x6c0 [ 1172.861429][T25603] vfs_writev+0x35f/0xde0 [ 1172.861449][T25603] ? __pfx_vfs_writev+0x10/0x10 [ 1172.861464][T25603] ? kmem_cache_free+0x2d4/0x6c0 [ 1172.861479][T25603] ? putname+0x154/0x1a0 [ 1172.861508][T25603] ? __fget_files+0x20e/0x3c0 [ 1172.861528][T25603] ? do_writev+0x132/0x340 [ 1172.861540][T25603] do_writev+0x132/0x340 [ 1172.861554][T25603] ? __pfx_do_writev+0x10/0x10 [ 1172.861575][T25603] do_syscall_64+0xcd/0xfa0 [ 1172.861593][T25603] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1172.861609][T25603] RIP: 0033:0x7f756678f6c9 [ 1172.861622][T25603] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1172.861636][T25603] RSP: 002b:00007f75649d5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 1172.861651][T25603] RAX: ffffffffffffffda RBX: 00007f75669e6090 RCX: 00007f756678f6c9 [ 1172.861660][T25603] RDX: 0000000000000003 RSI: 00002000000003c0 RDI: 0000000000000009 [ 1172.861669][T25603] RBP: 00007f7566811f91 R08: 0000000000000000 R09: 0000000000000000 [ 1172.861685][T25603] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1172.861695][T25603] R13: 00007f75669e6128 R14: 00007f75669e6090 R15: 00007fff81904568 [ 1172.861716][T25603] [ 1174.149134][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 1174.168842][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 1175.705723][T25627] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4182'. [ 1176.202984][T23129] Bluetooth: hci3: command 0x0406 tx timeout [ 1176.435526][T25632] netlink: 342 bytes leftover after parsing attributes in process `syz.7.4183'. [ 1176.795600][T25654] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4189'. [ 1180.704700][T23181] Bluetooth: hci4: unexpected event 0x3e length: 0 < 1 [ 1180.955060][T25704] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input67 [ 1181.982124][T25714] netlink: 56 bytes leftover after parsing attributes in process `syz.0.4203'. [ 1183.554391][T25721] kexec: Could not allocate control_code_buffer [ 1183.616032][T25737] FAULT_INJECTION: forcing a failure. [ 1183.616032][T25737] name failslab, interval 1, probability 0, space 0, times 0 [ 1183.706539][T25737] CPU: 0 UID: 0 PID: 25737 Comm: syz.0.4207 Tainted: G U syzkaller #0 PREEMPT(full) [ 1183.706585][T25737] Tainted: [U]=USER [ 1183.706591][T25737] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1183.706600][T25737] Call Trace: [ 1183.706606][T25737] [ 1183.706613][T25737] dump_stack_lvl+0x16c/0x1f0 [ 1183.706635][T25737] should_fail_ex+0x512/0x640 [ 1183.706658][T25737] ? kmem_cache_alloc_node_noprof+0x65/0x770 [ 1183.706677][T25737] should_failslab+0xc2/0x120 [ 1183.706697][T25737] kmem_cache_alloc_node_noprof+0x78/0x770 [ 1183.706712][T25737] ? __alloc_skb+0x2b2/0x380 [ 1183.706738][T25737] ? __alloc_skb+0x2b2/0x380 [ 1183.706757][T25737] __alloc_skb+0x2b2/0x380 [ 1183.706778][T25737] ? __pfx___alloc_skb+0x10/0x10 [ 1183.706800][T25737] ? ip_frag_init+0x330/0x350 [ 1183.706817][T25737] ? ima_match_policy+0x7f9/0x22e0 [ 1183.706836][T25737] __ip6_append_data+0x2b74/0x4740 [ 1183.706873][T25737] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 1183.706899][T25737] ? __pfx___ip6_append_data+0x10/0x10 [ 1183.706920][T25737] ? __pfx_ip6_mtu+0x10/0x10 [ 1183.706936][T25737] ? ip6_setup_cork+0xc51/0x1530 [ 1183.707040][T25737] ip6_make_skb+0x2c8/0x3f0 [ 1183.707070][T25737] ? ip6_dst_check+0x343/0x950 [ 1183.707093][T25737] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 1183.707112][T25737] ? __pfx_ip6_make_skb+0x10/0x10 [ 1183.707138][T25737] ? find_held_lock+0x2b/0x80 [ 1183.707159][T25737] ? sk_dst_check+0x1da/0x540 [ 1183.707186][T25737] ? udpv6_sendmsg+0x2365/0x2d30 [ 1183.707201][T25737] udpv6_sendmsg+0x2365/0x2d30 [ 1183.707218][T25737] ? aa_label_sk_perm+0x195/0x600 [ 1183.707235][T25737] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 1183.707262][T25737] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 1183.707284][T25737] ? __lock_acquire+0x622/0x1c90 [ 1183.707312][T25737] ? __pfx___might_resched+0x10/0x10 [ 1183.707343][T25737] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 1183.707360][T25737] ? inet6_sendmsg+0x105/0x140 [ 1183.707375][T25737] inet6_sendmsg+0x105/0x140 [ 1183.707396][T25737] sock_write_iter+0x437/0x610 [ 1183.707416][T25737] ? __pfx_sock_write_iter+0x10/0x10 [ 1183.707442][T25737] ? bpf_lsm_file_permission+0x9/0x10 [ 1183.707460][T25737] ? security_file_permission+0x71/0x210 [ 1183.707476][T25737] ? rw_verify_area+0xcf/0x6c0 [ 1183.707493][T25737] vfs_write+0x7d3/0x11d0 [ 1183.707510][T25737] ? __pfx_sock_write_iter+0x10/0x10 [ 1183.707530][T25737] ? __pfx_vfs_write+0x10/0x10 [ 1183.707544][T25737] ? find_held_lock+0x2b/0x80 [ 1183.707571][T25737] ksys_write+0x1f8/0x250 [ 1183.707588][T25737] ? __pfx_ksys_write+0x10/0x10 [ 1183.707611][T25737] do_syscall_64+0xcd/0xfa0 [ 1183.707631][T25737] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1183.707646][T25737] RIP: 0033:0x7f8fd638f6c9 [ 1183.707660][T25737] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1183.707675][T25737] RSP: 002b:00007f8fd728e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1183.707691][T25737] RAX: ffffffffffffffda RBX: 00007f8fd65e6090 RCX: 00007f8fd638f6c9 [ 1183.707702][T25737] RDX: 00000000000005c8 RSI: 0000000000000000 RDI: 0000000000000003 [ 1183.707711][T25737] RBP: 00007f8fd6411f91 R08: 0000000000000000 R09: 0000000000000000 [ 1183.707720][T25737] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1183.707732][T25737] R13: 00007f8fd65e6128 R14: 00007f8fd65e6090 R15: 00007ffcb8cf3f98 [ 1183.707753][T25737] [ 1184.068226][ C0] vkms_vblank_simulate: vblank timer overrun [ 1185.910121][ T5928] usb usb38-port5: attempt power cycle [ 1185.991693][T25767] [U] [ 1185.994603][T25767] [U] [ 1185.997298][T25767] [U] [ 1186.000006][T25767] [U] [ 1186.002769][T25767] [U] [ 1186.046096][T25767] [U] [ 1186.048865][T25767] [U] [ 1186.051728][T25767] [U] [ 1186.054406][T25767] [U] [ 1186.081174][T25767] [U] [ 1186.084013][T25767] [U] [ 1186.086695][T25767] [U] [ 1186.089393][T25767] [U] [ 1186.134580][T25767] [U] [ 1186.137398][T25767] [U] [ 1186.140184][T25767] [U] [ 1186.143055][T25767] [U] [ 1186.178683][T25767] [U] [ 1186.181416][T25767] [U] [ 1186.184097][T25767] [U] [ 1186.186790][T25767] [U] [ 1186.255989][T25767] [U] [ 1186.258727][T25767] [U] [ 1186.261528][T25767] [U] [ 1186.264313][T25767] [U] [ 1186.298111][T25767] [U] [ 1186.300830][T25767] [U] [ 1186.303522][T25767] [U] [ 1186.306285][T25767] [U] [ 1186.350751][T25767] [U] [ 1186.353571][T25767] [U] [ 1186.356262][T25767] [U] [ 1186.359151][T25767] [U] [ 1186.383779][T25767] [U] [ 1186.386494][T25767] [U] [ 1186.389174][T25767] [U] [ 1186.391850][T25767] [U] [ 1186.456130][T25767] [U] [ 1186.458849][T25767] [U] [ 1186.461620][T25767] [U] [ 1186.464307][T25767] [U] [ 1186.493764][ T5928] usb usb38-port5: unable to enumerate USB device [ 1186.632934][T25767] [U] [ 1186.635660][T25767] [U] [ 1186.638342][T25767] [U] [ 1186.641015][T25767] [U] [ 1186.825036][T25772] [U] [ 1187.288533][T25795] program syz.7.4216 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1187.700540][T25805] blktrace: Concurrent blktraces are not allowed on loop2 [ 1187.853139][T25808] delete_channel: no stack [ 1188.642052][T25815] netlink: 'syz.8.4224': attribute type 1 has an invalid length. [ 1189.264370][T25822] binder: 25819:25822 ioctl c018620c 0 returned -1 [ 1189.349746][T25820] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4225'. [ 1189.403613][T25826] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4225'. [ 1190.061354][T25848] program syz.0.4228 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1190.725617][T25856] nbd: illegal input index -560326505 [ 1191.503928][T25860] netlink: 342 bytes leftover after parsing attributes in process `syz.7.4232'. [ 1193.425703][T25901] netlink: 28 bytes leftover after parsing attributes in process `syz.8.4243'. [ 1193.659095][T25912] ovs_: entered promiscuous mode [ 1196.464022][T25968] netlink: 338 bytes leftover after parsing attributes in process `syz.0.4258'. [ 1196.499153][T25965] netlink: 338 bytes leftover after parsing attributes in process `syz.0.4258'. [ 1196.556284][T25965] netlink: 134 bytes leftover after parsing attributes in process `syz.0.4258'. [ 1200.487938][T26036] netlink: 330 bytes leftover after parsing attributes in process `syz.0.4274'. [ 1200.542450][T26036] mac80211_hwsim hwsim22 ›: renamed from wlan0 (while UP) [ 1201.014397][T26047] netlink: 28 bytes leftover after parsing attributes in process `syz.8.4276'. [ 1201.328201][T26049] zram: Added device: zram0 [ 1201.653829][T26059] could not allocate digest TFM handle [ 1201.906020][T26076] sctp: Failed to create the SCTP UDP tunneling v4 sock [ 1202.118459][T26080] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 0 out of range (51000000..2150000000) [ 1204.651290][T23181] Bluetooth: hci7: unexpected subevent 0x01 length: 123 > 18 [ 1204.667612][T26151] FAULT_INJECTION: forcing a failure. [ 1204.667612][T26151] name failslab, interval 1, probability 0, space 0, times 0 [ 1204.758214][T26151] CPU: 0 UID: 0 PID: 26151 Comm: syz.8.4295 Tainted: G U syzkaller #0 PREEMPT(full) [ 1204.758240][T26151] Tainted: [U]=USER [ 1204.758246][T26151] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1204.758254][T26151] Call Trace: [ 1204.758260][T26151] [ 1204.758267][T26151] dump_stack_lvl+0x16c/0x1f0 [ 1204.758290][T26151] should_fail_ex+0x512/0x640 [ 1204.758312][T26151] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 1204.758330][T26151] ? __pfx_filemap_map_pages+0x10/0x10 [ 1204.758344][T26151] should_failslab+0xc2/0x120 [ 1204.758364][T26151] kmem_cache_alloc_noprof+0x75/0x6e0 [ 1204.758378][T26151] ? __anon_vma_prepare+0xae/0x5e0 [ 1204.758403][T26151] ? __pfx_filemap_map_pages+0x10/0x10 [ 1204.758416][T26151] ? __anon_vma_prepare+0xae/0x5e0 [ 1204.758436][T26151] ? __pfx_filemap_map_pages+0x10/0x10 [ 1204.758448][T26151] __anon_vma_prepare+0xae/0x5e0 [ 1204.758471][T26151] ? __pfx_filemap_map_pages+0x10/0x10 [ 1204.758484][T26151] __vmf_anon_prepare+0x11c/0x240 [ 1204.758504][T26151] do_pte_missing+0x8cd/0x3ba0 [ 1204.758526][T26151] ? find_held_lock+0x2b/0x80 [ 1204.758542][T26151] ? __handle_mm_fault+0x1529/0x2aa0 [ 1204.758566][T26151] __handle_mm_fault+0x1556/0x2aa0 [ 1204.758593][T26151] ? __pfx___handle_mm_fault+0x10/0x10 [ 1204.758616][T26151] ? __pte_offset_map_lock+0x174/0x310 [ 1204.758634][T26151] ? find_held_lock+0x2b/0x80 [ 1204.758654][T26151] ? follow_page_pte+0x5cf/0x1390 [ 1204.758677][T26151] handle_mm_fault+0x589/0xd10 [ 1204.758702][T26151] __get_user_pages+0x54e/0x3530 [ 1204.758730][T26151] ? __pfx___get_user_pages+0x10/0x10 [ 1204.758755][T26151] populate_vma_page_range+0x267/0x3f0 [ 1204.758777][T26151] ? __pfx_populate_vma_page_range+0x10/0x10 [ 1204.758796][T26151] ? __pfx_find_vma_intersection+0x10/0x10 [ 1204.758815][T26151] ? do_mmap+0x69c/0x1210 [ 1204.758835][T26151] __mm_populate+0x1d8/0x380 [ 1204.758855][T26151] ? __pfx___mm_populate+0x10/0x10 [ 1204.758877][T26151] ? up_write+0x1b2/0x520 [ 1204.758899][T26151] vm_mmap_pgoff+0x37f/0x470 [ 1204.758919][T26151] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 1204.758941][T26151] ? __fget_files+0x20e/0x3c0 [ 1204.758959][T26151] ksys_mmap_pgoff+0x32c/0x5c0 [ 1204.758977][T26151] ? __pfx_ksys_write+0x10/0x10 [ 1204.758995][T26151] __x64_sys_mmap+0x125/0x190 [ 1204.759019][T26151] do_syscall_64+0xcd/0xfa0 [ 1204.759037][T26151] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1204.759052][T26151] RIP: 0033:0x7f7acf18f6c9 [ 1204.759066][T26151] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1204.759081][T26151] RSP: 002b:00007f7acffd3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1204.759100][T26151] RAX: ffffffffffffffda RBX: 00007f7acf3e6090 RCX: 00007f7acf18f6c9 [ 1204.759117][T26151] RDX: 0000000000000003 RSI: 0000000000000009 RDI: 0000000000000000 [ 1204.759126][T26151] RBP: 00007f7acf211f91 R08: 0000000000000003 R09: 0000000000008000 [ 1204.759135][T26151] R10: 0000000000008012 R11: 0000000000000246 R12: 0000000000000000 [ 1204.759144][T26151] R13: 00007f7acf3e6128 R14: 00007f7acf3e6090 R15: 00007ffd26d2eed8 [ 1204.759166][T26151] [ 1207.316652][T26176] FAULT_INJECTION: forcing a failure. [ 1207.316652][T26176] name failslab, interval 1, probability 0, space 0, times 0 [ 1207.499616][T26176] CPU: 0 UID: 0 PID: 26176 Comm: syz.0.4296 Tainted: G U syzkaller #0 PREEMPT(full) [ 1207.499643][T26176] Tainted: [U]=USER [ 1207.499649][T26176] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1207.499658][T26176] Call Trace: [ 1207.499663][T26176] [ 1207.499670][T26176] dump_stack_lvl+0x16c/0x1f0 [ 1207.499693][T26176] should_fail_ex+0x512/0x640 [ 1207.499715][T26176] ? __kmalloc_cache_node_noprof+0x62/0x7a0 [ 1207.499737][T26176] should_failslab+0xc2/0x120 [ 1207.499757][T26176] __kmalloc_cache_node_noprof+0x75/0x7a0 [ 1207.499776][T26176] ? tracing_mark_open+0x44f/0x6f0 [ 1207.499803][T26176] ? tracing_mark_open+0x44f/0x6f0 [ 1207.499832][T26176] tracing_mark_open+0x44f/0x6f0 [ 1207.499858][T26176] do_dentry_open+0x982/0x1530 [ 1207.499876][T26176] ? __pfx_tracing_mark_open+0x10/0x10 [ 1207.499903][T26176] vfs_open+0x82/0x3f0 [ 1207.499926][T26176] path_openat+0x1de4/0x2cb0 [ 1207.499954][T26176] ? __pfx_path_openat+0x10/0x10 [ 1207.499972][T26176] ? __lock_acquire+0xb8a/0x1c90 [ 1207.499995][T26176] do_filp_open+0x20b/0x470 [ 1207.500012][T26176] ? __pfx_do_filp_open+0x10/0x10 [ 1207.500044][T26176] ? alloc_fd+0x471/0x7d0 [ 1207.500065][T26176] do_sys_openat2+0x11b/0x1d0 [ 1207.500084][T26176] ? __pfx_do_sys_openat2+0x10/0x10 [ 1207.500113][T26176] __x64_sys_openat+0x174/0x210 [ 1207.500133][T26176] ? __pfx___x64_sys_openat+0x10/0x10 [ 1207.500162][T26176] do_syscall_64+0xcd/0xfa0 [ 1207.500181][T26176] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1207.500196][T26176] RIP: 0033:0x7f8fd638f6c9 [ 1207.500208][T26176] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1207.500223][T26176] RSP: 002b:00007f8fd726d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1207.500238][T26176] RAX: ffffffffffffffda RBX: 00007f8fd65e6180 RCX: 00007f8fd638f6c9 [ 1207.500247][T26176] RDX: 0000000000000201 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 1207.500257][T26176] RBP: 00007f8fd6411f91 R08: 0000000000000000 R09: 0000000000000000 [ 1207.500267][T26176] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1207.500276][T26176] R13: 00007f8fd65e6218 R14: 00007f8fd65e6180 R15: 00007ffcb8cf3f98 [ 1207.500297][T26176] [ 1207.757231][T25986] syz.1.4261 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 1207.766879][T25986] CPU: 0 UID: 0 PID: 25986 Comm: syz.1.4261 Tainted: G U syzkaller #0 PREEMPT(full) [ 1207.766905][T25986] Tainted: [U]=USER [ 1207.766910][T25986] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1207.766919][T25986] Call Trace: [ 1207.766927][T25986] [ 1207.766934][T25986] dump_stack_lvl+0x16c/0x1f0 [ 1207.766958][T25986] dump_header+0x101/0x930 [ 1207.766975][T25986] oom_kill_process+0x272/0xa40 [ 1207.766993][T25986] out_of_memory+0x350/0x1700 [ 1207.767013][T25986] ? __pfx_out_of_memory+0x10/0x10 [ 1207.767033][T25986] mem_cgroup_out_of_memory+0x118/0x130 [ 1207.767056][T25986] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 1207.767086][T25986] ? do_raw_spin_unlock+0x172/0x230 [ 1207.767103][T25986] try_charge_memcg+0x695/0xd30 [ 1207.767127][T25986] ? __pfx_try_charge_memcg+0x10/0x10 [ 1207.767152][T25986] ? __print_lock_name+0xb1/0xe0 [ 1207.767170][T25986] ? rcu_read_unlock+0x17/0x60 [ 1207.767194][T25986] charge_memcg+0x8a/0x230 [ 1207.767213][T25986] __mem_cgroup_charge+0x2b/0x1e0 [ 1207.767234][T25986] shmem_alloc_and_add_folio+0x50c/0xc20 [ 1207.767255][T25986] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 1207.767280][T25986] ? shmem_allowable_huge_orders+0xd4/0x3f0 [ 1207.767300][T25986] shmem_get_folio_gfp+0x67f/0x1610 [ 1207.767318][T25986] ? __lock_acquire+0xb8a/0x1c90 [ 1207.767338][T25986] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 1207.767359][T25986] shmem_write_begin+0x160/0x300 [ 1207.767376][T25986] ? __pfx_shmem_write_begin+0x10/0x10 [ 1207.767390][T25986] ? timestamp_truncate+0x21e/0x2d0 [ 1207.767408][T25986] ? balance_dirty_pages_ratelimited_flags+0x92/0x1260 [ 1207.767432][T25986] generic_perform_write+0x3c4/0x900 [ 1207.767461][T25986] ? __pfx_generic_perform_write+0x10/0x10 [ 1207.767484][T25986] ? inode_needs_update_time.part.0+0x191/0x270 [ 1207.767507][T25986] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 1207.767523][T25986] shmem_file_write_iter+0x10e/0x140 [ 1207.767545][T25986] __kernel_write_iter+0x31a/0xb10 [ 1207.767564][T25986] ? __pfx___kernel_write_iter+0x10/0x10 [ 1207.767579][T25986] ? __up_read+0x1f8/0x750 [ 1207.767604][T25986] ? dump_user_range+0x756/0xb70 [ 1207.767618][T25986] ? dump_user_range+0x423/0xb70 [ 1207.767635][T25986] dump_user_range+0x413/0xb70 [ 1207.767655][T25986] ? __pfx_dump_user_range+0x10/0x10 [ 1207.767671][T25986] ? elf_coredump_extra_notes_write+0xbd/0x4f0 [ 1207.767698][T25986] ? __pfx_writenote+0x10/0x10 [ 1207.767720][T25986] elf_core_dump+0x29c3/0x3c00 [ 1207.767747][T25986] ? __pfx_elf_core_dump+0x10/0x10 [ 1207.767762][T25986] ? kasan_save_stack+0x33/0x60 [ 1207.767778][T25986] ? kasan_save_track+0x14/0x30 [ 1207.767799][T25986] ? __kasan_kmalloc+0xaa/0xb0 [ 1207.767814][T25986] ? __kvmalloc_node_noprof+0x3a3/0x9c0 [ 1207.767830][T25986] ? vfs_coredump+0x1ddc/0x5670 [ 1207.767844][T25986] ? arch_do_signal_or_restart+0x8f/0x790 [ 1207.767861][T25986] ? irqentry_exit_to_user_mode+0x176/0x310 [ 1207.767879][T25986] ? asm_exc_page_fault+0x26/0x30 [ 1207.767898][T25986] ? 0xffffffffff600000 [ 1207.767944][T25986] ? vfs_coredump+0x2b9f/0x5670 [ 1207.767957][T25986] vfs_coredump+0x2b9f/0x5670 [ 1207.767979][T25986] ? __pfx_vfs_coredump+0x10/0x10 [ 1207.767994][T25986] ? __lock_acquire+0x622/0x1c90 [ 1207.768021][T25986] ? lock_acquire+0x179/0x350 [ 1207.768049][T25986] ? is_bpf_text_address+0x8a/0x1a0 [ 1207.768070][T25986] ? bpf_ksym_find+0x124/0x1c0 [ 1207.768091][T25986] ? unwind_get_return_address+0x59/0xa0 [ 1207.768108][T25986] ? arch_stack_walk+0xa6/0x100 [ 1207.768130][T25986] ? stack_trace_save+0x8e/0xc0 [ 1207.768147][T25986] ? __pfx_stack_trace_save+0x10/0x10 [ 1207.768164][T25986] ? stack_depot_save_flags+0x29/0x9c0 [ 1207.768187][T25986] ? __lock_acquire+0xb8a/0x1c90 [ 1207.768241][T25986] ? proc_coredump_connector+0x2d1/0x4f0 [ 1207.768257][T25986] ? __pfx_proc_coredump_connector+0x10/0x10 [ 1207.768277][T25986] ? rcu_is_watching+0x12/0xc0 [ 1207.768296][T25986] get_signal+0x22e1/0x26d0 [ 1207.768318][T25986] ? force_sig_fault+0xc4/0x100 [ 1207.768335][T25986] ? __pfx_get_signal+0x10/0x10 [ 1207.768357][T25986] arch_do_signal_or_restart+0x8f/0x790 [ 1207.768375][T25986] ? trace_irq_disable.constprop.0+0xd4/0x120 [ 1207.768390][T25986] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1207.768421][T25986] irqentry_exit_to_user_mode+0x176/0x310 [ 1207.768441][T25986] asm_exc_page_fault+0x26/0x30 [ 1207.768454][T25986] RIP: 0033:0x7f4c52b8f6c9 [ 1207.768471][T25986] Code: Unable to access opcode bytes at 0x7f4c52b8f69f. [ 1207.768478][T25986] RSP: 002b:00007f4c53a5df08 EFLAGS: 00010246 [ 1207.768490][T25986] RAX: 0000000000000000 RBX: 0000000000000058 RCX: 00007f4c52b8f6c9 [ 1207.768500][T25986] RDX: 00007f4c53a5df20 RSI: 0000000000000058 RDI: 00007f4c53a5df20 [ 1207.768509][T25986] RBP: 00007f4c52c11f91 R08: 0000000000000000 R09: 0000000000000058 [ 1207.768518][T25986] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1207.768526][T25986] R13: 00007f4c52de6038 R14: 00007f4c52de5fa0 R15: 00007ffc644210c8 [ 1207.768549][T25986] [ 1207.768555][T25986] memory: usage 3072kB, limit 3072kB, failcnt 110932 [ 1208.783975][T25986] memory+swap: usage 34792kB, limit 9007199254740988kB, failcnt 0 [ 1208.859520][T25986] kmem: usage 1804kB, limit 9007199254740988kB, failcnt 0 [ 1208.922848][T25986] Memory cgroup stats for /syz1: [ 1208.922955][T25986] cache 1216512 [ 1208.950064][T25986] rss 0 [ 1208.953055][T25986] rss_huge 0 [ 1208.988691][T25986] shmem 4096 [ 1208.992011][T25986] mapped_file 0 [ 1209.015098][T25986] dirty 0 [ 1209.029501][T25986] writeback 0 [ 1209.054227][T25986] workingset_refault_anon 19681 [ 1209.094992][T25986] workingset_refault_file 12730 [ 1209.109458][T25986] swap 32481280 [ 1209.139097][T25986] swapcached 81920 [ 1209.183683][T25986] pgpgin 1584696 [ 1209.201042][T25986] pgpgout 1623726 [ 1209.204691][T25986] pgfault 698918 [ 1209.242369][T25986] pgmajfault 7664 [ 1209.267305][T25986] inactive_anon 86016 [ 1209.271506][T25986] active_anon 0 [ 1209.288215][T25986] inactive_file 1212416 [ 1209.309600][T25986] active_file 0 [ 1209.327749][T25986] unevictable 0 [ 1209.352178][T25986] hierarchical_memory_limit 3145728 [ 1209.400476][T25986] hierarchical_memsw_limit 9223372036854771712 [ 1209.451213][T25986] total_cache 1216512 [ 1209.463590][T25986] total_rss 0 [ 1209.467000][T25986] total_rss_huge 0 [ 1209.470928][T25986] total_shmem 4096 [ 1209.536611][T25986] total_mapped_file 0 [ 1209.575603][T25986] total_dirty 0 [ 1209.579090][T25986] total_writeback 0 [ 1209.613430][T25986] total_workingset_refault_anon 19681 [ 1209.618879][T25986] total_workingset_refault_file 12730 [ 1209.669084][T25986] total_swap 32481280 [ 1209.721010][T25986] total_swapcached 81920 [ 1209.732186][T25986] total_pgpgin 1584696 [ 1209.736288][T25986] total_pgpgout 1623726 [ 1209.740529][T25986] total_pgfault 698918 [ 1209.808041][T25986] total_pgmajfault 7664 [ 1209.836257][T25986] total_inactive_anon 86016 [ 1209.840786][T25986] total_active_anon 0 [ 1209.885793][T25986] total_inactive_file 1212416 [ 1209.938954][T25986] total_active_file 0 [ 1209.953209][T25986] total_unevictable 0 [ 1209.972022][T25986] anon_cost 896 [ 1209.975542][T25986] file_cost 288 [ 1210.005449][T25986] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.4290,pid=26122,uid=0 [ 1210.064282][T25986] Memory cgroup out of memory: Killed process 26122 (syz.1.4290) total-vm:167820kB, anon-rss:1268kB, file-rss:21968kB, shmem-rss:0kB, UID:0 pgtables:144kB oom_score_adj:0 [ 1210.146154][ T30] audit: type=1800 audit(6138071891.327:79): pid=26218 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.4305" name="features" dev="configfs" ino=115036 res=0 errno=0 [ 1211.854161][T23181] Bluetooth: hci5: command 0x0406 tx timeout [ 1213.839409][T26233] kexec: Could not allocate control_code_buffer [ 1214.267030][ T30] audit: type=1804 audit(6138071895.469:80): pid=26296 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.8.4321" name="/newroot/sys/kernel/tracing/set_event" dev="tracefs" ino=31 res=1 errno=0 [ 1214.300176][T26296] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4321'. [ 1214.899588][T23129] Bluetooth: hci4: unexpected subevent 0x01 length: 123 > 18 [ 1215.115245][T26307] netlink: set zone limit has 8 unknown bytes [ 1215.252601][T26311] FAULT_INJECTION: forcing a failure. [ 1215.252601][T26311] name failslab, interval 1, probability 0, space 0, times 0 [ 1215.302617][T26311] CPU: 0 UID: 0 PID: 26311 Comm: syz.7.4324 Tainted: G U syzkaller #0 PREEMPT(full) [ 1215.302644][T26311] Tainted: [U]=USER [ 1215.302650][T26311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1215.302659][T26311] Call Trace: [ 1215.302665][T26311] [ 1215.302671][T26311] dump_stack_lvl+0x16c/0x1f0 [ 1215.302695][T26311] should_fail_ex+0x512/0x640 [ 1215.302717][T26311] ? fs_reclaim_acquire+0xae/0x150 [ 1215.302739][T26311] should_failslab+0xc2/0x120 [ 1215.302759][T26311] kmem_cache_alloc_noprof+0x75/0x6e0 [ 1215.302773][T26311] ? __pfx_map_id_range_down+0x10/0x10 [ 1215.302795][T26311] ? security_inode_alloc+0x3b/0x2b0 [ 1215.302826][T26311] ? security_inode_alloc+0x3b/0x2b0 [ 1215.302846][T26311] security_inode_alloc+0x3b/0x2b0 [ 1215.302869][T26311] inode_init_always_gfp+0xce4/0x1030 [ 1215.302888][T26311] alloc_inode+0x86/0x240 [ 1215.302907][T26311] iget_locked+0x2fa/0x860 [ 1215.302925][T26311] ? __pfx_stack_trace_save+0x10/0x10 [ 1215.302943][T26311] ? __pfx_iget_locked+0x10/0x10 [ 1215.302965][T26311] ? find_held_lock+0x2b/0x80 [ 1215.302980][T26311] ? kernfs_find_and_get_node_by_id+0x1c3/0x3f0 [ 1215.303005][T26311] kernfs_get_inode+0x48/0x460 [ 1215.303023][T26311] kernfs_fh_to_dentry+0xf3/0x250 [ 1215.303040][T26311] exportfs_decode_fh_raw+0x167/0x7d0 [ 1215.303057][T26311] ? __pfx_vfs_dentry_acceptable+0x10/0x10 [ 1215.303077][T26311] ? __pfx_kernfs_fh_to_dentry+0x10/0x10 [ 1215.303093][T26311] ? __pfx_exportfs_decode_fh_raw+0x10/0x10 [ 1215.303135][T26311] do_handle_open+0x702/0xc90 [ 1215.303151][T26311] ? __pfx_do_handle_open+0x10/0x10 [ 1215.303164][T26311] ? __x64_sys_futex+0x1e0/0x4c0 [ 1215.303187][T26311] ? xfd_validate_state+0x61/0x180 [ 1215.303212][T26311] ? do_syscall_64+0xcd/0xfa0 [ 1215.303228][T26311] do_syscall_64+0xcd/0xfa0 [ 1215.303246][T26311] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1215.303261][T26311] RIP: 0033:0x7f756678f6c9 [ 1215.303274][T26311] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1215.303288][T26311] RSP: 002b:00007f75649f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000130 [ 1215.303303][T26311] RAX: ffffffffffffffda RBX: 00007f75669e5fa0 RCX: 00007f756678f6c9 [ 1215.303313][T26311] RDX: 0000000000000002 RSI: 0000200000000040 RDI: 0000000000000006 [ 1215.303322][T26311] RBP: 00007f7566811f91 R08: 0000000000000000 R09: 0000000000000000 [ 1215.303330][T26311] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1215.303339][T26311] R13: 00007f75669e6038 R14: 00007f75669e5fa0 R15: 00007fff81904568 [ 1215.303360][T26311] [ 1216.944691][T23129] Bluetooth: hci4: command 0x0c1a tx timeout [ 1217.068804][T26326] bond0: no command found in slaves file - use +ifname or -ifname [ 1219.265954][T26382] netlink: 158 bytes leftover after parsing attributes in process `syz.7.4347'. [ 1219.306482][T26382] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4347'. [ 1219.495462][T26385] FAULT_INJECTION: forcing a failure. [ 1219.495462][T26385] name failslab, interval 1, probability 0, space 0, times 0 [ 1219.712681][T26391] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1219.733379][T26385] CPU: 0 UID: 0 PID: 26385 Comm: syz.8.4348 Tainted: G U syzkaller #0 PREEMPT(full) [ 1219.733405][T26385] Tainted: [U]=USER [ 1219.733410][T26385] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1219.733419][T26385] Call Trace: [ 1219.733425][T26385] [ 1219.733433][T26385] dump_stack_lvl+0x16c/0x1f0 [ 1219.733455][T26385] should_fail_ex+0x512/0x640 [ 1219.733477][T26385] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 1219.733495][T26385] should_failslab+0xc2/0x120 [ 1219.733514][T26385] kmem_cache_alloc_noprof+0x75/0x6e0 [ 1219.733529][T26385] ? alloc_empty_file+0x55/0x1e0 [ 1219.733553][T26385] ? alloc_empty_file+0x55/0x1e0 [ 1219.733571][T26385] alloc_empty_file+0x55/0x1e0 [ 1219.733591][T26385] alloc_file_pseudo+0x13a/0x230 [ 1219.733612][T26385] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 1219.733633][T26385] ? alloc_fd+0x471/0x7d0 [ 1219.733650][T26385] sock_alloc_file+0x50/0x210 [ 1219.733667][T26385] __sys_socket+0x1c0/0x260 [ 1219.733686][T26385] ? __pfx___sys_socket+0x10/0x10 [ 1219.733711][T26385] ? xfd_validate_state+0x61/0x180 [ 1219.733733][T26385] ? __pfx_ksys_write+0x10/0x10 [ 1219.733753][T26385] __x64_sys_socket+0x72/0xb0 [ 1219.733771][T26385] ? lockdep_hardirqs_on+0x7c/0x110 [ 1219.733789][T26385] do_syscall_64+0xcd/0xfa0 [ 1219.733809][T26385] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1219.733824][T26385] RIP: 0033:0x7f7acf18f6c9 [ 1219.733836][T26385] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1219.733850][T26385] RSP: 002b:00007f7acfff4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1219.733865][T26385] RAX: ffffffffffffffda RBX: 00007f7acf3e5fa0 RCX: 00007f7acf18f6c9 [ 1219.733875][T26385] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 000000000000001e [ 1219.733884][T26385] RBP: 00007f7acf211f91 R08: 0000000000000000 R09: 0000000000000000 [ 1219.733893][T26385] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1219.733902][T26385] R13: 00007f7acf3e6038 R14: 00007f7acf3e5fa0 R15: 00007ffd26d2eed8 [ 1219.733922][T26385] [ 1219.773023][T26398] Format for adding new device is "id port_count num_queues" (uint uint unit). [ 1220.156089][T26403] FAULT_INJECTION: forcing a failure. [ 1220.156089][T26403] name failslab, interval 1, probability 0, space 0, times 0 [ 1220.156118][T26403] CPU: 0 UID: 0 PID: 26403 Comm: syz.8.4351 Tainted: G U syzkaller #0 PREEMPT(full) [ 1220.156140][T26403] Tainted: [U]=USER [ 1220.156144][T26403] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1220.156153][T26403] Call Trace: [ 1220.156158][T26403] [ 1220.156164][T26403] dump_stack_lvl+0x16c/0x1f0 [ 1220.156186][T26403] should_fail_ex+0x512/0x640 [ 1220.156209][T26403] ? kmem_cache_alloc_lru_noprof+0x66/0x6e0 [ 1220.156227][T26403] should_failslab+0xc2/0x120 [ 1220.156247][T26403] kmem_cache_alloc_lru_noprof+0x79/0x6e0 [ 1220.156264][T26403] ? __d_alloc+0x32/0xae0 [ 1220.156284][T26403] ? __d_alloc+0x32/0xae0 [ 1220.156299][T26403] __d_alloc+0x32/0xae0 [ 1220.156317][T26403] d_alloc_pseudo+0x1c/0xc0 [ 1220.156337][T26403] alloc_file_pseudo+0xcf/0x230 [ 1220.156359][T26403] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 1220.156379][T26403] ? alloc_fd+0x471/0x7d0 [ 1220.156412][T26403] sock_alloc_file+0x50/0x210 [ 1220.156430][T26403] __sys_socket+0x1c0/0x260 [ 1220.156450][T26403] ? __pfx___sys_socket+0x10/0x10 [ 1220.156469][T26403] ? xfd_validate_state+0x61/0x180 [ 1220.156489][T26403] ? __pfx_ksys_write+0x10/0x10 [ 1220.156509][T26403] __x64_sys_socket+0x72/0xb0 [ 1220.156527][T26403] ? lockdep_hardirqs_on+0x7c/0x110 [ 1220.156544][T26403] do_syscall_64+0xcd/0xfa0 [ 1220.156563][T26403] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1220.156578][T26403] RIP: 0033:0x7f7acf18f6c9 [ 1220.156590][T26403] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1220.156604][T26403] RSP: 002b:00007f7acfff4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1220.156617][T26403] RAX: ffffffffffffffda RBX: 00007f7acf3e5fa0 RCX: 00007f7acf18f6c9 [ 1220.156627][T26403] RDX: 000000000000000a RSI: 0000000000000003 RDI: 0000000000000002 [ 1220.156635][T26403] RBP: 00007f7acf211f91 R08: 0000000000000000 R09: 0000000000000000 [ 1220.156644][T26403] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1220.156652][T26403] R13: 00007f7acf3e6038 R14: 00007f7acf3e5fa0 R15: 00007ffd26d2eed8 [ 1220.156672][T26403] [ 1220.489474][T26397] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 1221.202259][T26424] usb usb13: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1221.230333][T26422] netlink: 28 bytes leftover after parsing attributes in process `syz.8.4356'. [ 1221.736795][T26428] openvswitch: HfR: Dropping previously announced user features [ 1221.744637][T26428] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4353'. [ 1222.487468][T26446] random: crng reseeded on system resumption [ 1222.531441][T26446] Restarting kernel threads ... [ 1222.542358][T26446] Done restarting kernel threads. [ 1222.684364][T26396] tty tty1: ldisc open failed (-12), clearing slot 0 [ 1223.153433][ T31] INFO: task syz.3.3871:24133 blocked for more than 143 seconds. [ 1223.166673][ T31] Tainted: G U syzkaller #0 [ 1223.214865][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1223.260177][ T31] task:syz.3.3871 state:D stack:27720 pid:24133 tgid:24130 ppid:16731 task_flags:0x400140 flags:0x00080002 [ 1223.333866][ T31] Call Trace: [ 1223.342124][ T31] [ 1223.357543][ T31] __schedule+0x1190/0x5de0 [ 1223.373275][ T31] ? __lock_acquire+0x622/0x1c90 [ 1223.396107][ T31] ? __pfx___schedule+0x10/0x10 [ 1223.421389][ T31] ? find_held_lock+0x2b/0x80 [ 1223.450201][ T31] ? schedule+0x2d7/0x3a0 [ 1223.479993][ T31] ? nfsd_nl_listener_set_doit+0xd5/0x1b10 [ 1223.506647][ T31] schedule+0xe7/0x3a0 [ 1223.524322][ T31] schedule_preempt_disabled+0x13/0x30 [ 1223.551581][ T31] __mutex_lock+0x818/0x1060 [ 1223.573155][ T31] ? nfsd_nl_listener_set_doit+0xd5/0x1b10 [ 1223.605991][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1223.628452][ T31] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1223.662217][ T31] ? __nla_validate_parse+0x600/0x2880 [ 1223.678253][ T31] ? nfsd_nl_listener_set_doit+0xd5/0x1b10 [ 1223.698581][ T31] nfsd_nl_listener_set_doit+0xd5/0x1b10 [ 1223.722193][ T31] ? rcu_is_watching+0x12/0xc0 [ 1223.739578][ T31] ? __pfx_nfsd_nl_listener_set_doit+0x10/0x10 [ 1223.759494][ T31] ? __nla_parse+0x40/0x60 [ 1223.777930][ T31] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 1223.803859][ T31] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 1223.831720][ T31] genl_family_rcv_msg_doit+0x209/0x2f0 [ 1223.849022][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1223.869080][ T31] ? rcu_is_watching+0x12/0xc0 [ 1223.886156][ T31] ? bpf_lsm_capable+0x9/0x10 [ 1223.905129][ T31] ? security_capable+0x7e/0x260 [ 1223.922498][ T31] genl_rcv_msg+0x55c/0x800 [ 1223.938004][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1223.954856][ T31] ? __pfx_nfsd_nl_listener_set_doit+0x10/0x10 [ 1223.975007][ T31] ? __lock_acquire+0x622/0x1c90 [ 1223.994249][ T31] netlink_rcv_skb+0x158/0x420 [ 1224.011030][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1224.029137][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1224.048384][ T31] ? netlink_deliver_tap+0x1ae/0xd30 [ 1224.066833][ T31] genl_rcv+0x28/0x40 [ 1224.081800][ T31] netlink_unicast+0x5aa/0x870 [ 1224.101063][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 1224.123074][ T31] netlink_sendmsg+0x8c8/0xdd0 [ 1224.139535][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1224.158592][ T31] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 1224.178382][ T31] ____sys_sendmsg+0xa98/0xc70 [ 1224.195281][ T31] ? copy_msghdr_from_user+0x10a/0x160 [ 1224.214410][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1224.234577][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 1224.252758][ T31] ? try_to_wake_up+0xa67/0x1870 [ 1224.273511][ T31] ___sys_sendmsg+0x134/0x1d0 [ 1224.289262][ T31] ? find_held_lock+0x2b/0x80 [ 1224.302799][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 1224.325190][ T31] ? __lock_acquire+0x622/0x1c90 [ 1224.342230][ T31] __sys_sendmsg+0x16d/0x220 [ 1224.363723][ T31] ? __pfx___sys_sendmsg+0x10/0x10 [ 1224.382978][ T31] ? __x64_sys_futex+0x1e0/0x4c0 [ 1224.400683][ T31] do_syscall_64+0xcd/0xfa0 [ 1224.413796][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1224.443510][ T31] RIP: 0033:0x7f427678f6c9 [ 1224.454743][ T31] RSP: 002b:00007f42776cf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1224.484222][ T31] RAX: ffffffffffffffda RBX: 00007f42769e6090 RCX: 00007f427678f6c9 [ 1224.511691][ T31] RDX: 0000000020000000 RSI: 0000200000005380 RDI: 0000000000000011 [ 1224.541866][ T31] RBP: 00007f4276811f91 R08: 0000000000000000 R09: 0000000000000000 [ 1224.571336][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1224.601537][ T31] R13: 00007f42769e6128 R14: 00007f42769e6090 R15: 00007ffe3e6671c8 [ 1224.631521][ T31] [ 1224.640408][ T31] [ 1224.640408][ T31] Showing all locks held in the system: [ 1224.679799][ T31] 1 lock held by khungtaskd/31: [ 1224.698119][ T31] #0: ffffffff8e3c45e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0 [ 1224.733063][ T31] 2 locks held by getty/18848: [ 1224.752777][ T31] #0: ffff88814d97e0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 1224.783879][ T31] #1: ffffc90002fd62f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x14f0 [ 1224.817707][ T31] 2 locks held by syz.4.3722/23428: [ 1224.837705][ T31] #0: ffffffff9018ee90 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1224.865314][ T31] #1: ffffffff8e7ed348 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x687/0xbc0 [ 1224.901402][ T31] 2 locks held by syz-executor/23760: [ 1224.919254][ T31] #0: ffff88806512e0e0 (&type->s_umount_key#50){++++}-{4:4}, at: deactivate_super+0xd6/0x100 [ 1224.957521][ T31] #1: ffffffff8e7ed348 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 1224.992314][ T31] 2 locks held by syz.3.3871/24133: [ 1225.009834][ T31] #0: ffffffff9018ee90 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1225.040517][ T31] #1: ffffffff8e7ed348 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0xd5/0x1b10 [ 1225.069945][T23428] svc: failed to register nfsdv3 RPC service (errno 512). [ 1225.085510][ T31] 2 locks held by syz-executor/24383: [ 1225.104356][T23428] svc: failed to register nfsaclv3 RPC service (errno 512). [ 1225.122853][ T31] #0: ffff8880474720e0 (&type->s_umount_key#50){++++}-{4:4}, at: deactivate_super+0xd6/0x100 [ 1225.151951][ T31] #1: ffffffff8e7ed348 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 1225.183210][ T31] 1 lock held by syz.8.4307/26230: [ 1225.200454][ T31] 3 locks held by syz.8.4342/26378: [ 1225.219205][ T31] 2 locks held by syz.1.4352/26407: [ 1225.238364][ T31] 2 locks held by syz.8.4356/26427: [ 1225.259629][ T31] 2 locks held by syz.1.4360/26441: [ 1225.277147][ T31] 1 lock held by syz.8.4359/26442: [ 1225.295656][ T31] 2 locks held by syz.8.4359/26449: [ 1225.316892][ T31] [ 1225.324742][ T31] ============================================= [ 1225.324742][ T31] [ 1225.360607][ T31] NMI backtrace for cpu 0 [ 1225.360625][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G U syzkaller #0 PREEMPT(full) [ 1225.360645][ T31] Tainted: [U]=USER [ 1225.360651][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1225.360659][ T31] Call Trace: [ 1225.360665][ T31] [ 1225.360671][ T31] dump_stack_lvl+0x116/0x1f0 [ 1225.360692][ T31] nmi_cpu_backtrace+0x27b/0x390 [ 1225.360715][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1225.360737][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 1225.360761][ T31] watchdog+0xf3f/0x1170 [ 1225.360781][ T31] ? rcu_is_watching+0x12/0xc0 [ 1225.360797][ T31] ? __pfx_watchdog+0x10/0x10 [ 1225.360809][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 1225.360829][ T31] ? __kthread_parkme+0x19e/0x250 [ 1225.360848][ T31] ? __pfx_watchdog+0x10/0x10 [ 1225.360861][ T31] kthread+0x3c5/0x780 [ 1225.360882][ T31] ? __pfx_kthread+0x10/0x10 [ 1225.360903][ T31] ? rcu_is_watching+0x12/0xc0 [ 1225.360918][ T31] ? __pfx_kthread+0x10/0x10 [ 1225.360938][ T31] ret_from_fork+0x675/0x7d0 [ 1225.360962][ T31] ? __pfx_kthread+0x10/0x10 [ 1225.360983][ T31] ret_from_fork_asm+0x1a/0x30 [ 1225.361011][ T31]