last executing test programs: 2m31.352663252s ago: executing program 1 (id=376): openat$auto_ftrace_event_format_fops_trace_events(0xffffffffffffff9c, 0x0, 0x10000, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x9, 0xffb, 0x8000000008011, 0x3, 0x6b000000000000) r1 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cec26\x00', 0x10000, 0x0) ioctl$auto_CEC_ADAP_G_PHYS_ADDR(r1, 0x80026101, &(0x7f0000000180)=0x9) modify_ldt$auto(0x11, 0x0, 0x10) ioperm$auto(0x2, 0x3, 0x1) r2 = socket(0x2, 0x801, 0x106) setsockopt$auto(r2, 0x1, 0x2, &(0x7f0000000040)='\xe2 \xa8\xf4', 0x7) bind$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x4001, @loopback}, 0x6b) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/snd/controlC1\x00', 0x802, 0x0) select$auto(0x5, 0x0, &(0x7f0000000100)={[0x9, 0x200, 0x0, 0x8000000000000201, 0x9, 0x3, 0x6, 0x7, 0xd886, 0x5e58296b, 0x341, 0x41, 0x7, 0x200, 0x8, 0xc]}, 0x0, 0x0) mmap$auto(0x0, 0xf4, 0xdf, 0xeb1, 0x69a5, 0xa800000000000000) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) mremap$auto(0x0, 0x7, 0x3fd6, 0x3, 0x20000000) mmap$auto(0x0, 0x4785, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptyq7\x00', 0x42001, 0x0) ioctl$auto_TCFLSH2(r3, 0x80045439, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x340, 0x0) ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000000c0), 0xffffffffffffffff) 2m31.08048374s ago: executing program 1 (id=378): r0 = socket(0x21, 0x2, 0xa) sendmsg$auto_MACSEC_CMD_ADD_TXSA(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = socket(0x21, 0x2, 0xa) sendmsg$auto_MACSEC_CMD_ADD_TXSA(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x0) close_range$auto(0x2, 0x8000, 0x0) (async) close_range$auto(0x2, 0x8000, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ram8\x00', 0x81, 0x0) semctl$auto(0xc, 0x2, 0x13, 0x6) (async) semctl$auto(0xc, 0x2, 0x13, 0x6) ioctl$auto_BLKDISCARD(r2, 0x1277, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) recvfrom$auto(r2, &(0x7f0000000000)="15eaf954ca76e11e3650aec8aa94b751f24c4830c56ae8a1f7569190f8bd50d66613a5dd30c1d686654c957d08f533d0a2633b20b3eb0efdc80b5f0d4186b3442e0860106bee40a2e9af28f373fee746230686a2653023ad422832369b53", 0x3, 0x6, &(0x7f0000000100)=@xdp={0x2c, 0x5, r3, 0x24}, &(0x7f0000000140)=0x5) 2m30.839531158s ago: executing program 1 (id=380): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, 0x0, 0x102, 0x0) write$auto_console_fops_tty_io(r0, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x40401, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv6/conf/batadv_slave_0/proxy_ndp\x00', 0x382, 0x0) mmap$auto(0x0, 0x4000b, 0x7, 0x9b72, 0x7, 0x28000) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) inotify_init1$auto(0x3000000000000) openat$auto_generic(0xffffffffffffff9c, &(0x7f0000000000)='/proc/kpagecount\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x40942, 0x0) openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, 0x0, 0x40000, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x189002, 0x0) openat$auto_l2cap_debugfs_fops_(0xffffffffffffff9c, 0x0, 0x280, 0x0) openat$auto_tracing_cpumask_fops_trace(0xffffffffffffff9c, 0x0, 0x8042, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/rpc/auth.unix.gid/content\x00', 0x20000, 0x0) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x20000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_ftrace_enable_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/tracing/events/vmalloc/purge_vmap_area_lazy/enable\x00', 0x28c2, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, 0x0, 0x1c8b40, 0x0) openat$auto_proc_page_owner_operations_page_owner(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x1e, 0x9, 0x7, 0x0) close_range$auto(0x2, 0xffffffffffffffff, 0x0) open(0x0, 0x22240, 0x55) 2m30.552770505s ago: executing program 1 (id=382): r0 = socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @loopback}, 0x54) r1 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000080), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_DP_CMD_DEL(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x38, r1, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@OVS_DP_ATTR_UPCALL_PID={0x8, 0x2, 0xc}, @OVS_DP_ATTR_MASKS_CACHE_SIZE={0x8, 0x7, 0x3}, @OVS_DP_ATTR_NAME={0x11, 0x1, 'ovs_datapath\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040011}, 0x20000000) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) r5 = socket(0xa, 0x3, 0x6) bpf$auto(0x0, &(0x7f0000000040)=@bpf_attr_5={@target_ifindex=r4, 0x7f, 0x99, 0x8, 0x1, @relative_fd=r5, 0xd}, 0x92) (async) bpf$auto(0x0, &(0x7f0000000040)=@bpf_attr_5={@target_ifindex=r4, 0x7f, 0x99, 0x8, 0x1, @relative_fd=r5, 0xd}, 0x92) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'veth0_to_batadv\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'veth0_to_batadv\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'veth0_to_hsr\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'veth0_to_hsr\x00', 0x0}) sendmsg$auto_OVS_DP_CMD_NEW(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x4c, r1, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@OVS_DP_ATTR_MASKS_CACHE_SIZE={0x8, 0x7, 0x9}, @OVS_DP_ATTR_MASKS_CACHE_SIZE={0x8, 0x7, 0x1ff}, @OVS_DP_ATTR_IFINDEX={0x8, 0x9, r4}, @OVS_DP_ATTR_UPCALL_PID={0x8, 0x2, 0xffffffffffffffff}, @OVS_DP_ATTR_IFINDEX={0x8}, @OVS_DP_ATTR_IFINDEX={0x8, 0x9, r6}, @OVS_DP_ATTR_IFINDEX={0x8, 0x9, r7}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2000c090}, 0x40) shutdown$auto(0x200000003, 0x2) (async) shutdown$auto(0x200000003, 0x2) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x9, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) 2m30.200885358s ago: executing program 1 (id=384): r0 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000180)='/dev/bus/usb/036/001\x00', 0xa901, 0x0) mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb2, 0x401, 0x8000) sendmmsg$auto(0xffffffffffffffff, 0x0, 0x5, 0x311) ioctl$auto(0x3, 0x8108551b, 0x1) ioctl$auto_USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000340)={0x1, 0x81, 0x8005b, 0x4, &(0x7f0000000000), 0x9, 0xeb10, 0x2, @stream_id=0x102, 0x7, 0x0, 0x0, [{0xff}, {0x3, 0x9, 0x6}, {0xd, 0x8, 0x8}]}) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x4, 0x5, 0x4000001000db, 0x4000eb1, r0, 0x6e) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/edac_core/parameters/edac_mc_poll_msec\x00', 0x60301, 0x0) r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/neigh/hsr_slave_1/base_reachable_time_ms\x00', 0x101000, 0x0) read$auto(r2, 0x0, 0x1ff) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) process_vm_readv$auto(0x0, &(0x7f0000000200)={0x0, 0xfff}, 0x0, &(0x7f0000000280)={&(0x7f0000000540)="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"/331, 0x400000fffffffe}, 0xa, 0x3b9f) timer_create$auto_CLOCK_REALTIME(0x0, &(0x7f0000000040)={@sival_int=0x6, @inferred=r1}, &(0x7f0000000080)=0x2) openat$auto_tap_fops_tap(0xffffffffffffff9c, 0x0, 0x119040, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) r4 = socket(0xa, 0x3, 0x3b) ioctl$auto_BTRFS_IOC_SEND(r3, 0x40489426, &(0x7f00000003c0)={@inferred=r3, 0x800, &(0x7f00000001c0)=0x80000001, 0x2, 0x6, 0x7, "d27eb4ff755f41f099a1e5532bf04f2b76a96eba50dab111e296a1d0"}) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x400, 0xdf, 0xeb1, 0x401, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ovs_meter(&(0x7f0000002340), 0xffffffffffffffff) sendmsg$auto_OVS_METER_CMD_SET(r4, &(0x7f0000002480)={0x0, 0x0, &(0x7f0000002440)={&(0x7f0000000440)=ANY=[@ANYBLOB="38007be60036eb708bec29", @ANYRES8, @ANYBLOB="010025bd7000fedbdf25020000000400020018000480140029800800018085f65a9a08000200", @ANYRES32=r0, @ANYBLOB="080001002500000087a9d3439e238debc9b7393f145fb8445419f61f9aa4cfbaefd316a9cd2d01d4bf9e07e0e6f4b8dc8077e791b8b8910bd7b70981dab36a5a95ce3df7a45f4227148cc63e01d0aae80c12a81c79741829c19b67d22a9a6234c260f2e99c657cecb631886b66de916511643b0bdcc30d04d36655fbb7602a6a4821a21a95d4576696ea4842a7b561efdb88193eeb26563bb74eb3567a71b6e932d1c19af8ff143156c742b16a0cc8d5"], 0x38}, 0x1, 0x0, 0x0, 0x48000}, 0x4084) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x80102, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0xa, 0x0) 2m28.972853337s ago: executing program 1 (id=386): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), r0) sendmsg$auto_NL80211_CMD_SET_MAC_ACL(r0, &(0x7f0000000800)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000007c0)={&(0x7f00000000c0)={0x6c4, r1, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xee77}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, 0x3}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x8}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x6779}, @NL80211_ATTR_STA_TX_POWER_SETTING={0x5, 0x113, 0x6}, @NL80211_ATTR_MBSSID_ELEMS={0x3ba, 0x133, 0x0, 0x1, [@generic="094b474f96a0fae9cd795352a658168fc9a0854980bcba30dca95c62a3ee685e92d26cdf51e827a96f2e4c7815bd1f3149524925bfd543b9285e5af3bfa6508071c304f51da4d3129eaa325794fdef10e0a7955c367a443de01dd8fc4dc81261426c462fdb85ec97744907c271e6c9dd1e8563bc5381736335a61bd942f7701767e2d24e2b3a9c020b371ed5d0b2a3c7b27a47567229286a941b8c7aff7363ca4f09148a6ac56f7607e7fd18cd6280f4e98d22cc75ffc36ed90d8aa44e70856ee18d4664798f795858d8490cdbda27f8911785243a4f959c8ccb26dc363c0043b990f460edf840efe94b4202824216c37de3d12ebf69c6c68d60", @nested={0x104, 0x11, 0x0, 0x1, [@nested={0x4, 0x19}, @typed={0x8, 0x94, 0x0, 0x0, @u32=0x1}, @nested={0x4, 0x83}, @generic="653da46de62584ae39c2ad694d12f91e0361b0fe04767498ceae5e4bbda310fb60d1283b0d724091f8200846580c5c3b56d137cc90ac19a468f01cd2f1cf76418fc957d62fbecf0c719ee34dc019006376cc1cfe3581e7b4887040e7b6a5b67be2c2bcedf078af8377d3c69f55badf6de5ec37739264cc1ed9af0436f619d41be0afd51f69f20a2a73d81a069164a7a0fbf203bb02fe463913fcc6b06dcfaecb3b11ff0b3ec5084611e8ece7c855d4b75bf01ddb188295c6cc8c68aab50c2d70e8d27abb34", @typed={0x8, 0xe5, 0x0, 0x0, @ipv4=@loopback}, @nested={0x4, 0x18}, @generic="b39604c99e0d55e07d07aea6bc5c3d1df1578f1bf34291acce64948406a8c6"]}, @generic="bca25f50e53364adc35d1a99759ea5f4ded11457b67b4795ef1d40ebb558b7dc6110a7de56f857923a7c784208b55679c63516bd88e18fc003302585b08efc2a4d5c5a4c9fede8acd603ce79d2a433b8c035c2913cebc3860bf72f474ddc8b893c307fd330da484683a0de03116ea1690d6d613cb479947899b1f46511c579e92684720b617b102a4974d737ad172e77e780ab5e50594e5d069e05adaf626cd8cc982183a9f5677e3a13a376caa47d087023a6a8da953c2388ead38df38d2ba3", @typed={0x4, 0x7f}, @nested={0xdf, 0xb7, 0x0, 0x1, [@generic="42ed8e78187e88", @typed={0x14, 0x81, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @typed={0x9, 0x41, 0x0, 0x0, @str='nfsd\x00'}, @generic="4453a0c6a83639c1005cef4445205dedb34666dc7720e80ba24ff728e53ab15bb5aba0f098c3dc98c4461cfe7d622e1f3350cb32de04eb973c8b3ba50897ce1182a6b99d145080dc351475a1a28e3bf24b3294de1048a09ee5b970cafe992cd41df14d4baf8d8a8eb3a418a1df38940327b1da64e297dd7680adf335d582dad1a60e30bbe3fc457ad39d17745197e31b18eb18c7766f04a7a550b8d0", @typed={0x8, 0x9d, 0x0, 0x0, @fd=r0}, @nested={0x4, 0x141}, @nested={0x4, 0xb3}, @typed={0x8, 0x89, 0x0, 0x0, @pid=0xffffffffffffffff}]}, @generic="afd090af03768a64", @typed={0xc, 0x0, 0x0, 0x0, @u64=0x673}]}, @NL80211_ATTR_FILS_KEK={0x14, 0xf2, "7fac580ffe8b8a4e512a81460e9dcfe9"}, @NL80211_ATTR_P2P_OPPPS={0x5, 0xa3, 0xf9}, @NL80211_ATTR_KEY={0x2b0, 0x50, 0x0, 0x1, [@typed={0x14, 0x116, 0x0, 0x0, @ipv6=@private0}, @typed={0xd5, 0xe8, 0x0, 0x0, @binary="3179414dcba43abe6c3c24a75a4ed2467c440bf0d02a0e4095e62272b89ad50c223b85f9a8064f52980de5a73283052672b23c70eb129388491409a6a6028bee9b3692fb10f87272107c69b98fba5c5d138c3d36d4c495850bf62cbebeb80d49a2d41f3d045cfe6ee6ea91bebcfa2e2f3969378ca4937649944d67ec45af05bb9b8d21b0b0545fb9ef12e3db8dfaf66ed85a2587a3b327f58d6da9db06ecc9eb23a830d065e7b66aea82e1977d36e1a8885b2fe00952d49002f57482c96f0dbde19d9b6db70ead00ed91eb66d2e658aa82"}, @typed={0x8, 0x26, 0x0, 0x0, @fd=r0}, @typed={0x75, 0xae, 0x0, 0x0, @binary="de0277f2d827b1403c9a00e3153a0ab56b292811a4e481d4286ba99ea8a87df8f35c4c68e705b9f3db707403325f0cc544ed81a00860789ffdaa84e886e81aeed4960c7f2aca3ec9633c06df73c11f536c10c9c2aa655526c3ef3ef5b5f93f69de23b2e1529079732791a660479c9893a5"}, @nested={0xab, 0x108, 0x0, 0x1, [@typed={0x6, 0xdf, 0x0, 0x0, @str='!\x00'}, @nested={0x4, 0x7e}, @generic="b29cd239936f40a5c28fe8e963e0a0ed48be24d76cee864e5a5c268ef89c9b9d64be023243bfc1bfa422fccad283d59ba90eec3b884ed813ffd047eff2b0a15d97fe48da1b0b6173a787ed5ce1e0b7af44f3335151935549b20d6f974825c3138c5da01c036658c472392844422b7839d9956f798dd207a1dc9e3ba52b61d34a186ffbfee740edd34b1347ad16df46cd11f7b7576c46d0e666b112"]}, @generic="8a8d0c538a508a994169188753f6ab0f813ee042de96c00da8779f804afefb9ab42ffdf4217b44550e1ce0fe6aa8385ab3773b0f9cf42f1e35b33294cecb08a2eb6ada2239a58e990d4cac288d2a236864a81b5b2505aff2c72fe630fe9fbfb1f3d42c0e7f5163c6131ec5095f702d41b427c0d4c9013bb6bb015bf9df4a5a7c031a81ea", @typed={0x8, 0x18, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x3c}}, @typed={0x8, 0x145, 0x0, 0x0, @fd=r0}]}]}, 0x6c4}, 0x1, 0x0, 0x0, 0xc0}, 0x20000004) r2 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000018c0)='/proc/thread-self/net/rxrpc/bundles\x00', 0x100, 0x0) pread64$auto(r3, 0x0, 0xf429, 0x100) sendmsg$auto_NFSD_CMD_LISTENER_SET(r0, &(0x7f0000005380)={0x0, 0x0, &(0x7f0000005340)={&(0x7f0000000000)={0x38, r2, 0x1, 0x870bd2b, 0x25dfdbfc, {}, [@NFSD_A_SERVER_SOCK_ADDR={0x24, 0x1, 0x0, 0x1, [@NFSD_A_SOCK_TRANSPORT_NAME={0x19, 0x2, '/dev/cpu_dma_latency\x00'}, @NFSD_A_SOCK_ADDR={0x4}]}]}, 0x38}, 0x1, 0x0, 0x0, 0xc000}, 0x20000000) 2m28.84229929s ago: executing program 3 (id=388): r0 = openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000005280), 0x0, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) ioctl$auto_posix_clock_file_operations_posix_clock(r0, 0x40043d14, 0x0) r1 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x2, 0x0) r2 = epoll_create$auto(0x8800001) epoll_ctl$auto(r2, 0x1, r1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000001640), r3) sendmsg$auto_NL802154_CMD_SET_CCA_MODE(r3, &(0x7f0000001f40)={0x0, 0x0, &(0x7f0000001f00)={&(0x7f0000000180)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010029bd7000fedbdf250d0000000c00060001000000000000000800010001"], 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$auto_NL802154_CMD_GET_SEC_DEV(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, r4, 0x100, 0x70bd25, 0x25dfdbff, {}, [@NL802154_ATTR_PAGE={0x5}, @NL802154_ATTR_SCAN_TYPE={0x5, 0x1f, 0xff}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x7d164c976b5166c1}, 0x24000010) 2m28.696703283s ago: executing program 3 (id=389): socket(0x2, 0x3, 0xa) (async) r0 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) (async, rerun: 32) r1 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtd0ro\x00', 0x2c00, 0x0) (rerun: 32) ioctl$auto_MEMREADOOB(r1, 0xc0104d04, &(0x7f0000000080)={0x7761, 0x80, 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_FLOW_CMD_GET(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010025bd700002dcdf2503000000040008000400080014000180100010800c000b00080001"], 0x30}, 0x1, 0x0, 0x0, 0x200400f0}, 0x800) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x7, @local}, 0x54) (async) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0xffffffffffffffff, 0x4, 0x11, 0xeb1, 0xffffffffffffffff, 0x8000) (async, rerun: 64) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) (rerun: 64) socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = bpf$auto(0x5, &(0x7f00000001c0)=@bpf_attr_7={@prog_id=0xc, 0x92f1, 0x4}, 0xa) sendmmsg$auto(0x3, 0x0, 0x9a5, 0x47ffff7a) r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000140), r2) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x200000000000404, 0x0) (async, rerun: 32) io_uring_setup$auto(0xf, 0x0) (async, rerun: 32) close_range$auto(0x2, 0x8, 0x0) (async) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) setsockopt$auto(0x3, 0x10000000084, 0x25, 0x0, 0x90) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0xffffffffffffffff, 0x0, 0x0) (async, rerun: 32) write$auto(0xca, &(0x7f0000000040)='\x04\"\x00\x00\x00\x00\xa6\xb8\xd8\xc6\xb05>ha9\x89|d\x00\x00\x00\x00\x00\x00', 0xd) (rerun: 32) close_range$auto(0x0, 0xfffffffffffff000, 0x2) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000000000), 0x141401, 0x0) (async) socket(0x2, 0x801, 0x106) socket$nl_generic(0x10, 0x3, 0x10) timerfd_create$auto(0x9, 0x0) (async, rerun: 64) select$auto(0xa, 0x0, &(0x7f0000000100)={[0x20000000000d, 0x203, 0x0, 0xc, 0x5, 0x3, 0x5, 0x2000000000000002, 0x9, 0x8, 0x400000000fb, 0xa, 0x4, 0xaab, 0x5, 0x10000]}, 0x0, 0x0) (async, rerun: 64) sendfile$auto(r5, r5, 0x0, 0x400000000003) (async) sendmsg$auto_NL80211_CMD_TDLS_CHANNEL_SWITCH(r3, &(0x7f0000000340)={&(0x7f0000000100), 0xc, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="000112bd7000fcdb00256f00000004002d810600080022000700c2c5bfdd369ae7c5afb63036eee9531fc41f74f2f0c1f41a83fd0f584a8459e7356e1febd73f884a000004001b000600fb007f0000000800c3000c000000090000000400020004000300040002000400020005008a0004000000000000008aed764163468a9847f1"], 0x74}, 0x1, 0x0, 0x0, 0x2004c800}, 0x0) 2m28.340922958s ago: executing program 3 (id=391): mmap$auto(0x6, 0x40, 0x3, 0x18, 0xffffffffffffffff, 0x8000) keyctl$auto(0xe, 0x1, 0x1, 0x4, 0x6) keyctl$auto(0xe, 0x1, 0x1, 0x4, 0x6) mmap$auto(0x0, 0x400005, 0xe2, 0x9b72, 0x2, 0x8000) io_uring_setup$auto(0x999, 0x0) ustat$auto(0x801, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x155) socket(0x2, 0x2, 0x0) r0 = socket(0x2, 0x1, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x155) socket(0x2, 0x1, 0x106) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0xffff, @remote}, 0x6a) r1 = socket(0x2, 0x1, 0x106) listen$auto(0x3, 0x81) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) sendmsg$auto_NETDEV_CMD_DEV_GET(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0xf5ffffffffffffff, 0x20004091}, 0x800) close_range$auto(0x2, 0xa, 0x0) move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) r2 = socket(0x1a, 0x4, 0x0) getsockopt$auto(r2, 0x11, 0x67, 0x0, 0x0) 2m27.954283017s ago: executing program 3 (id=394): mmap$auto(0x0, 0x9, 0x2, 0x40eb2, 0xffffffffffffffff, 0x300000000000) r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/rpc/nfsd.export/flush\x00', 0x2, 0x0) write$auto_proc_reg_file_ops_compat_inode(r1, &(0x7f0000000080)="d2e9075df743aa70c45dd80b8ec420049b2ea633", 0x14) io_uring_register$auto_IORING_REGISTER_CLONE_BUFFERS(r1, 0x1e, &(0x7f0000000300)="b2f156fa5eaea2748dc0236ed8d3e3f7e5a235e417205a964c45efc9f318aab4b6c98ba7dd89ce80a6d397f5af69e10a7916484082b4adaaad57539f867539945152b2c2c4298590cc68365584b80edd34f7b5e084883930584487601a1c", 0x20000) write$auto(r0, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) msgctl$auto_MSG_INFO(0x7be1f0d2, 0xc, &(0x7f0000000180)={{0x3, 0x0, 0x0, 0x100, 0x8e, 0x8, 0x7}, &(0x7f0000000100)=0xfd, &(0x7f0000000140)=0x8, 0xe0bb, 0x80000000, 0x0, 0x1, 0x3, 0x5e, 0x1, 0x3, @inferred=0xffffffffffffffff, @inferred=0xffffffffffffffff}) r3 = setfsuid$auto(0xee00) setregid$auto(0x0, 0x0) setreuid$auto(r3, 0x0) r4 = getegid() r5 = waitid$auto_P_PGID(0x2, 0x0, &(0x7f0000000280)={@_si_pad}, 0x3, &(0x7f0000000440)={{0x8, 0x6}, {0x8, 0xc5e}, 0x100000001, 0x3, 0x1, 0xf9, 0xfffffffffffffffc, 0x5, 0x6274, 0x9, 0x0, 0xb, 0x35d, 0x439c, 0x9, 0x7}) shmctl$auto_SHM_STAT_ANY(0x0, 0xf, &(0x7f00000006c0)={{0x7, r3, r4, 0x4, 0x6, 0x81, 0x48d}, 0x1, 0x5, 0x8, 0x2, @inferred=r5, @raw=0x5, 0x5, 0x0, &(0x7f0000000500)="4f98c640887224e1536d4e40a39d3c81a9c6e8ae66bc479f7d92b6c649f07587e8084d4fd558d54a2ddca9c318eb050342e0fbb295dd58250b8d185616881413c9b3a8bbc9cb6f3059624b9d64d81f5b347672273ff0eac474a4fce025de7972a1b178c920727aab101d7741be7f42a7acc5ee4675ca2c96a2d08ca9a74b323f548afca84b63a71fb65c71061963f9693b6afa898480b20dc6d2e4f35f2381eabde6ac3f3b34948a7014878f346459ef0a11d7cb4fe7732d8d9e95d0cc7450914c2b63b9054c10080ba951b8f095adaead86e8bf209f5a9ecef565321572507c2b71c3a04fe37344218ffc325a27547ba7f31f1edb3ba545", &(0x7f0000000600)="3b4aab5baf7b70279f51554278b9b2497af28d2f68748361dda23b269d8b59ff913dc2ce2f41389066481eb9ea5492d38b5b950569f4d785c41fe5d0ab02234a66c5d804108051813044b3235a4b452ff0c51b938f2f5440d9ecee6cfad16d8271c93fa2488f5af21c4361fca3799a20b53b6f0c6c3b19b35a674aec24b246c982d5f007b2ecde6cab52699af3b1e94e1a42d4e44b022d7d64730dd5127ccd9f02f7590e93c2c7d8eb"}) lstat$auto(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)={0x4, 0x62, 0x62c, 0x38, r2, r4, 0x0, 0x5, 0x5, 0xffffffff00000001, 0x7, 0x7fffffff, 0xd851, 0xffffffff00000000, 0x9, 0x17c2, 0x4055c54f}) write$auto(0x800000000000c8, 0x0, 0x1a) 2m27.612794525s ago: executing program 3 (id=396): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) mlock$auto(0xfbe8, 0x4) mlock$auto(0x5, 0x10) mlock$auto(0x7c88, 0x7fff) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r0 = socketpair$auto(0x1, 0xd, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) setsockopt$auto(0x3, 0x1, 0x23, 0x0, 0x9) setsockopt$auto(0x3, 0x1, 0x41, 0x0, 0x88) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) r1 = getsockopt$auto(0x3, 0x200000000001, 0x2e, 0x0, 0x0) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), r0) r3 = setfsuid$auto(0xee01) getpid() mmap$auto(0x0, 0x400408, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/security/tomoyo/query\x00', 0x20600, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptye9\x00', 0x101e81, 0x0) r4 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda1\x00', 0x8000, 0x0) r5 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card0/pcm0c/sub6/info\x00', 0xa0000, 0x0) pread64$auto(r5, 0x0, 0x200000000004, 0x4) ioctl$auto(0x3, 0x402c542b, 0x38) r6 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000980)='/dev/ttye9\x00', 0x102, 0x0) sendfile$auto(r6, r4, 0x0, 0x10000) close_range$auto(0x2, 0x8, 0x0) msgctl$auto_IPC_SET(0x40, 0x1, &(0x7f0000000100)={{0x4, 0xee01, 0xffffffffffffffff, 0x7, 0x3, 0xfffffffe, 0x81}, &(0x7f0000000080)=0x96, &(0x7f00000000c0), 0x196c, 0x4, 0x59, 0x9, 0x6, 0x8, 0xb9d0, 0x81, @raw=0x3, @inferred=0xffffffffffffffff}) ioctl$auto_XFS_IOC_FREESP64(r0, 0x40305825, &(0x7f0000000180)={0xfff, 0x6, 0x8, 0x10000, 0x6, 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(r1, &(0x7f0000000a00)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000009c0)={&(0x7f00000001c0)={0x7f4, r2, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@NL80211_ATTR_SCHED_SCAN_MATCH={0x182, 0x84, 0x0, 0x1, [@generic="530f188bf38234482b55b1a5831c0de0e1c18b9666a3da0b40cd14afdcbfa408083abfa45fce98a3a82b7528286c17fef848dd46b94221971048d713ec6c678cdb60863a8938c6046da9b40e2dcccee055732dab19301822e1a87706715d049e7034914a39f12156777c21e04f4f70133d941bdbd35b6a7ea7ae21faf8a1ae558daee2c158adf9eb0efd166ff6c32da9d449fdcb08e1ce5c20f2f00913cf741dc990a6ffdc3b388c685c9031151cd49cf2b403ab6465b9e7ac7bc490b89bebdc9d3acb1abfa53eb579ed0de1cd3254e4c3ba22d99dab33a2eb6db6", @nested={0x73, 0x12a, 0x0, 0x1, [@typed={0x8, 0xf0, 0x0, 0x0, @uid=r3}, @typed={0x9, 0x119, 0x0, 0x0, @str='!)#:\x00'}, @typed={0x8, 0x151, 0x0, 0x0, @uid=r7}, @nested={0x4, 0x14c}, @nested={0x4, 0x2e}, @typed={0x8, 0x117, 0x0, 0x0, @pid=r8}, @nested={0x4, 0x7b}, @generic="50eb537e45377779e52925ad4b29796848c10ff18e6705ddef9ecbb84ff0848dfa1924f177ebb1bcf329b0359ac7843fcaf03ca7c897dfc93d4e591828d6fa"]}, @typed={0x8, 0x6a, 0x0, 0x0, @u32=0x7}, @typed={0xc, 0x20, 0x0, 0x0, @u64=0x50}, @generic="37bac6657b8be4313b5d0050de212eda4633e9aed125ebe606af98"]}, @NL80211_ATTR_INACTIVITY_TIMEOUT={0x6, 0x96, 0x7}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "77c42a20175babc65c1fa3224c3dbf226c263f3c456e84ca"}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x4}, @NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0xff}, @NL80211_ATTR_PROBE_RESP={0x610, 0x91, "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"}, @NL80211_ATTR_EPCS={0x4}, @NL80211_ATTR_WDEV={0xc, 0x99, 0x7}, @NL80211_ATTR_PUNCT_BITMAP={0x8, 0x142, 0x8}]}, 0x7f4}, 0x1, 0x0, 0x0, 0x4040004}, 0x4000) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) 2m26.515965663s ago: executing program 3 (id=400): open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x84) mount$auto(&(0x7f0000000080)='veth1_to_team\x00', &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='jY\b\x00\x00\x00\x00\x00\x00\x00\x86\x80\xd0\xdd{\xc1\xa3P\x00', 0x8000009, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$auto_SO_RCVMARK(r0, 0x1, 0x4b, &(0x7f0000000800)='\x00', &(0x7f0000000840)=0x2) r1 = geteuid() setfsuid$auto(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_LISTENER_SET(r2, &(0x7f0000005380)={0x0, 0x0, &(0x7f0000005340)={&(0x7f0000000000)={0x14, r3, 0x1, 0x870bd2b, 0x25dfdc00}, 0x14}, 0x1, 0x0, 0x0, 0xc000}, 0x20000000) 2m13.877659957s ago: executing program 32 (id=386): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), r0) sendmsg$auto_NL80211_CMD_SET_MAC_ACL(r0, &(0x7f0000000800)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000007c0)={&(0x7f00000000c0)={0x6c4, r1, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xee77}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, 0x3}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x8}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x6779}, @NL80211_ATTR_STA_TX_POWER_SETTING={0x5, 0x113, 0x6}, @NL80211_ATTR_MBSSID_ELEMS={0x3ba, 0x133, 0x0, 0x1, [@generic="094b474f96a0fae9cd795352a658168fc9a0854980bcba30dca95c62a3ee685e92d26cdf51e827a96f2e4c7815bd1f3149524925bfd543b9285e5af3bfa6508071c304f51da4d3129eaa325794fdef10e0a7955c367a443de01dd8fc4dc81261426c462fdb85ec97744907c271e6c9dd1e8563bc5381736335a61bd942f7701767e2d24e2b3a9c020b371ed5d0b2a3c7b27a47567229286a941b8c7aff7363ca4f09148a6ac56f7607e7fd18cd6280f4e98d22cc75ffc36ed90d8aa44e70856ee18d4664798f795858d8490cdbda27f8911785243a4f959c8ccb26dc363c0043b990f460edf840efe94b4202824216c37de3d12ebf69c6c68d60", @nested={0x104, 0x11, 0x0, 0x1, [@nested={0x4, 0x19}, @typed={0x8, 0x94, 0x0, 0x0, @u32=0x1}, @nested={0x4, 0x83}, @generic="653da46de62584ae39c2ad694d12f91e0361b0fe04767498ceae5e4bbda310fb60d1283b0d724091f8200846580c5c3b56d137cc90ac19a468f01cd2f1cf76418fc957d62fbecf0c719ee34dc019006376cc1cfe3581e7b4887040e7b6a5b67be2c2bcedf078af8377d3c69f55badf6de5ec37739264cc1ed9af0436f619d41be0afd51f69f20a2a73d81a069164a7a0fbf203bb02fe463913fcc6b06dcfaecb3b11ff0b3ec5084611e8ece7c855d4b75bf01ddb188295c6cc8c68aab50c2d70e8d27abb34", @typed={0x8, 0xe5, 0x0, 0x0, @ipv4=@loopback}, @nested={0x4, 0x18}, @generic="b39604c99e0d55e07d07aea6bc5c3d1df1578f1bf34291acce64948406a8c6"]}, @generic="bca25f50e53364adc35d1a99759ea5f4ded11457b67b4795ef1d40ebb558b7dc6110a7de56f857923a7c784208b55679c63516bd88e18fc003302585b08efc2a4d5c5a4c9fede8acd603ce79d2a433b8c035c2913cebc3860bf72f474ddc8b893c307fd330da484683a0de03116ea1690d6d613cb479947899b1f46511c579e92684720b617b102a4974d737ad172e77e780ab5e50594e5d069e05adaf626cd8cc982183a9f5677e3a13a376caa47d087023a6a8da953c2388ead38df38d2ba3", @typed={0x4, 0x7f}, @nested={0xdf, 0xb7, 0x0, 0x1, [@generic="42ed8e78187e88", @typed={0x14, 0x81, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @typed={0x9, 0x41, 0x0, 0x0, @str='nfsd\x00'}, @generic="4453a0c6a83639c1005cef4445205dedb34666dc7720e80ba24ff728e53ab15bb5aba0f098c3dc98c4461cfe7d622e1f3350cb32de04eb973c8b3ba50897ce1182a6b99d145080dc351475a1a28e3bf24b3294de1048a09ee5b970cafe992cd41df14d4baf8d8a8eb3a418a1df38940327b1da64e297dd7680adf335d582dad1a60e30bbe3fc457ad39d17745197e31b18eb18c7766f04a7a550b8d0", @typed={0x8, 0x9d, 0x0, 0x0, @fd=r0}, @nested={0x4, 0x141}, @nested={0x4, 0xb3}, @typed={0x8, 0x89, 0x0, 0x0, @pid=0xffffffffffffffff}]}, @generic="afd090af03768a64", @typed={0xc, 0x0, 0x0, 0x0, @u64=0x673}]}, @NL80211_ATTR_FILS_KEK={0x14, 0xf2, "7fac580ffe8b8a4e512a81460e9dcfe9"}, @NL80211_ATTR_P2P_OPPPS={0x5, 0xa3, 0xf9}, @NL80211_ATTR_KEY={0x2b0, 0x50, 0x0, 0x1, [@typed={0x14, 0x116, 0x0, 0x0, @ipv6=@private0}, @typed={0xd5, 0xe8, 0x0, 0x0, @binary="3179414dcba43abe6c3c24a75a4ed2467c440bf0d02a0e4095e62272b89ad50c223b85f9a8064f52980de5a73283052672b23c70eb129388491409a6a6028bee9b3692fb10f87272107c69b98fba5c5d138c3d36d4c495850bf62cbebeb80d49a2d41f3d045cfe6ee6ea91bebcfa2e2f3969378ca4937649944d67ec45af05bb9b8d21b0b0545fb9ef12e3db8dfaf66ed85a2587a3b327f58d6da9db06ecc9eb23a830d065e7b66aea82e1977d36e1a8885b2fe00952d49002f57482c96f0dbde19d9b6db70ead00ed91eb66d2e658aa82"}, @typed={0x8, 0x26, 0x0, 0x0, @fd=r0}, @typed={0x75, 0xae, 0x0, 0x0, @binary="de0277f2d827b1403c9a00e3153a0ab56b292811a4e481d4286ba99ea8a87df8f35c4c68e705b9f3db707403325f0cc544ed81a00860789ffdaa84e886e81aeed4960c7f2aca3ec9633c06df73c11f536c10c9c2aa655526c3ef3ef5b5f93f69de23b2e1529079732791a660479c9893a5"}, @nested={0xab, 0x108, 0x0, 0x1, [@typed={0x6, 0xdf, 0x0, 0x0, @str='!\x00'}, @nested={0x4, 0x7e}, @generic="b29cd239936f40a5c28fe8e963e0a0ed48be24d76cee864e5a5c268ef89c9b9d64be023243bfc1bfa422fccad283d59ba90eec3b884ed813ffd047eff2b0a15d97fe48da1b0b6173a787ed5ce1e0b7af44f3335151935549b20d6f974825c3138c5da01c036658c472392844422b7839d9956f798dd207a1dc9e3ba52b61d34a186ffbfee740edd34b1347ad16df46cd11f7b7576c46d0e666b112"]}, @generic="8a8d0c538a508a994169188753f6ab0f813ee042de96c00da8779f804afefb9ab42ffdf4217b44550e1ce0fe6aa8385ab3773b0f9cf42f1e35b33294cecb08a2eb6ada2239a58e990d4cac288d2a236864a81b5b2505aff2c72fe630fe9fbfb1f3d42c0e7f5163c6131ec5095f702d41b427c0d4c9013bb6bb015bf9df4a5a7c031a81ea", @typed={0x8, 0x18, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x3c}}, @typed={0x8, 0x145, 0x0, 0x0, @fd=r0}]}]}, 0x6c4}, 0x1, 0x0, 0x0, 0xc0}, 0x20000004) r2 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000018c0)='/proc/thread-self/net/rxrpc/bundles\x00', 0x100, 0x0) pread64$auto(r3, 0x0, 0xf429, 0x100) sendmsg$auto_NFSD_CMD_LISTENER_SET(r0, &(0x7f0000005380)={0x0, 0x0, &(0x7f0000005340)={&(0x7f0000000000)={0x38, r2, 0x1, 0x870bd2b, 0x25dfdbfc, {}, [@NFSD_A_SERVER_SOCK_ADDR={0x24, 0x1, 0x0, 0x1, [@NFSD_A_SOCK_TRANSPORT_NAME={0x19, 0x2, '/dev/cpu_dma_latency\x00'}, @NFSD_A_SOCK_ADDR={0x4}]}]}, 0x38}, 0x1, 0x0, 0x0, 0xc000}, 0x20000000) 2m11.305361051s ago: executing program 33 (id=400): open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x84) mount$auto(&(0x7f0000000080)='veth1_to_team\x00', &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='jY\b\x00\x00\x00\x00\x00\x00\x00\x86\x80\xd0\xdd{\xc1\xa3P\x00', 0x8000009, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$auto_SO_RCVMARK(r0, 0x1, 0x4b, &(0x7f0000000800)='\x00', &(0x7f0000000840)=0x2) r1 = geteuid() setfsuid$auto(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_LISTENER_SET(r2, &(0x7f0000005380)={0x0, 0x0, &(0x7f0000005340)={&(0x7f0000000000)={0x14, r3, 0x1, 0x870bd2b, 0x25dfdc00}, 0x14}, 0x1, 0x0, 0x0, 0xc000}, 0x20000000) 1m23.673680058s ago: executing program 0 (id=614): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/bus/pci/rescan\x00', 0x20681, 0x0) r1 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000001cc0), 0x101440, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000080)={{0x0, 0x8, 0x200800, 0xffffffff, 0xfffffffb}, "0dd7fd00490000080000000008f75b1f6de0d6d51768a257a97ca5e9ca6310ea"}) mmap$auto(0x0, 0x8, 0x2, 0x9b72, 0x5, 0x0) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) membarrier$auto(0x4, 0x8000000000000000, 0xffffffff) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r3 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f0000000400)='\x00\x00\x00\x00', 0x100000a3d9) r4 = getpid() mremap$auto(0x0, 0x4000007, 0x3fd7, 0x0, 0x20000020000000) process_vm_readv$auto(r4, &(0x7f0000000000)={0x0, 0xfff}, 0x40000000001, &(0x7f0000000180)={&(0x7f0000000140), 0x40000000001243}, 0xa, 0x0) close_range$auto(0x2, r2, 0x100) memfd_create$auto(0x0, 0xe) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), r3) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) io_uring_setup$auto(0x6, 0x0) madvise$auto(0x0, 0x401, 0x15) io_destroy$auto(0x70f) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) r5 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$auto(r5, 0x104000000000010e, 0xc, 0x0, 0x6) write$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000200)='5', 0x1) 1m22.56022884s ago: executing program 0 (id=617): r0 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000180)='/dev/bus/usb/036/001\x00', 0xa901, 0x0) mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000) io_setup$auto(0x1, 0x0) mincore$auto(0x1000, 0x8001, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/fs/ext4/sda1/sra_exceeded_retry_limit\x00', 0x103080, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000003800)=""/168, 0xa8) openat$auto_proc_timers_operations_base(0xffffffffffffff9c, &(0x7f0000000080), 0x1a5240, 0x0) ioctl$auto_USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000000)={0x2, 0x4, 0x5f, 0x4, &(0x7f0000000080), 0x9, 0x401, 0x0, @stream_id=0x102, 0x7, 0x800476, 0x0, [{0x2, 0xf, 0x51}, {0x1, 0x6, 0x5}, {0x8b, 0x3, 0x4000007}]}) ioctl$auto_SIOCGIFHWADDR2(0xffffffffffffffff, 0x8927, &(0x7f0000000280)="1d401c725a2a23b23f3b4540705f4ba4bf67db34bcb93994e77792bf627a7d519e2ee3d36acaa2d14e4899238c96c011bc501db98ef64b72eaad9e05891bb22fc85f68ff0c138c77ae82f12236a1e6653b12685e0736afa5fa5498058e29fa5047a80961332a849c4305e4f998c6de3a2a2c33ed7a324e8399d0bb73781e992a3c1c6063a7e2f901af49a59a00e3bda02957897dcc1eb5c164f6249de1264d6ebcc17fb0ef2e64b79fd42c32dfeeb50b0c0d950b7914be3db15406fbeddf1ab6f89da0046344b18843b3de25b86f1b571c90a09931e2e4aa2bdf25d8a2ddcce79c7f349d7e8a14862da5033bc0") syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000100), 0xffffffffffffffff) r2 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/radio6\x00', 0x8a240, 0x0) ioctl$auto(r2, 0x5646, r2) readv$auto(0x3, &(0x7f0000000600)={0x0, 0x4}, 0x1da) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, 0x0, 0x40) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r3 = socket(0xa, 0x3, 0x3a) prctl$auto(0x41555856, 0x3f, 0x2008, 0x0, 0x0) setsockopt$auto(0x400000000000003, 0x29, 0xcc, 0x0, 0x567) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) semctl$auto(0x80001ff, 0x804, 0x13, 0x4) keyctl$auto(0x1, 0x7, 0x100, 0x8, 0x4) link$auto(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00') mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x80400, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x2) sendmsg$auto_NET_SHAPER_CMD_GROUP(r3, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x40, 0x0, 0x200, 0x70bd2a, 0x25dfdbff, {}, [@NET_SHAPER_A_PRIORITY={0x8, 0x6, 0x9}, @NET_SHAPER_A_IFINDEX={0x8}, @NET_SHAPER_A_METRIC={0x8, 0x2, 0x7}, @NET_SHAPER_A_PRIORITY={0x8, 0x6, 0x10}, @NET_SHAPER_A_BW_MIN={0xc, 0x3, 0x211}]}, 0x40}, 0x1, 0x0, 0x0, 0x4080}, 0x8000) 1m21.680050876s ago: executing program 0 (id=620): sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x8080}, 0x24004805) lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x31, 0x7f, 0xffffffff, 0x0, 0x0, 0x0, 0x1000000006, 0x6, 0x7, 0x0, 0x800000007ffffffb, 0x5, 0xffffffff80000003, 0x2, 0x60, 0x401}) madvise$auto(0x40, 0x6, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x89fc, &(0x7f0000000040)={'bridge0\x00'}) 1m21.126497969s ago: executing program 0 (id=622): pwrite64$auto(0xc8, &(0x7f0000000000)='\vX\xb5n\x91p\xe6\x1eRNM\x99\x86\xdde\x1cJ\x99\x00\x00\x00\x00\x00\x00\xfd\xfd\xd3\xd3\x1d\xf8\xbe\x01\x00\x00\x00\'\x03\x00\x00\x9f\x1e\xf9\xa4*\x01\x00\x00\x00^B\xb8\xe4j\t3\xe4\x90\xcc\x9d\xc5\x0fo\x84\xf4\x89\v\xea\x1b\x95\xafQ;CL\"\x01@\x00\x00\x00\x00\f\x00\xc0\x13\xc8\xe2\xae\xf5\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8d\x81\x81O*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,8\x93\xba\x88\x93\x9d\xb6\x1a\x7f\xc0%\xb0\x83ROJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd6eWj\xdc\xac\x88\xf0\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\xfb\xba\xb2.$\'\x1e\x82\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00\x00\xff\xff\x00'/250, 0xfdf3, 0x4) socket(0x18, 0x5, 0x1) r0 = open(&(0x7f0000000000)='./file0\x00', 0x4242, 0xe1d2b27bdc14aab4) flock$auto(r0, 0x1) connect$auto(r0, &(0x7f0000000000)=@in={0x2, 0x140, @dev={0xac, 0x14, 0x14, 0x4}}, 0x3a) 1m20.91648704s ago: executing program 0 (id=623): mount$auto(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)='nfsd\x00\xee\x1a\x8f\xa2~?\xe2\x82fg\xb3G\xbe\xc8\x12\xae\xc3\xc0@[\x99\xec\xbf(\xec\xc3\xb2\xf2\x15Zi\xc4S6\'\x14\x05\t\x8c\xd5?\xa0\x00\xd8\xe4\xafW\xcc\xa3\xce\tI\x95\xe12\xaclJ\xba\xeb\xe4\x83Z\xaev\xd7\xd9\xdd_\x14O\x84\xaa\x13W\xb7\x06\'fvQ\x95\xc5\xd1\x98\xe3T\xcdfk\xc7\xe9\x96\r\x91\xb0\xc46\xf2\xfc\xef\xfe\xa0\xc9d\xb3h$\xeb\xad\xa4P\x8f\xc3bM{4RQ\x00\x9d)_\xd81(\x03\xfd\rw\xca1\x88|\xe5\x1e\x10\x89X\x01\xe9\xf6g\x95xx\xaf\xa9~m\x05\xe1\xa8\xda\x80\xc5\x8f\xb41\x81\xf0\xa3\xa2\xe4\x81\xb9\x92\xda\x13\xfe5\xfb\xc6\xd8>\x01\xd4\x14', 0x7, 0x0) (async, rerun: 64) r0 = fcntl$auto(0xffffffffffffffff, 0x20007, 0xa553) (rerun: 64) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) r1 = prctl$auto_SIGCONT(0x401, 0x12, 0xffffffffffffffff, 0x2, 0x2) (async, rerun: 64) close_range$auto(0x2, 0xa, 0x0) (async, rerun: 64) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/platform/vhci_hcd.0/usbip_debug\x00', 0x8002, 0x0) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40602, 0x0) preadv$auto(0x40000000000003, &(0x7f0000000080)={0x0, 0xf15a}, 0x6, 0x8, 0x5) mmap$auto(0x0, 0x5, 0xdf, 0x9b72, 0x2, 0x8000) (async) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS0\x00', 0x8000, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000440)='/sys/devices/virtual/tty/ptyp4/dev\x00', 0x8fa982, 0x0) (async, rerun: 64) pipe2$auto(0x0, 0x4800) (rerun: 64) splice$auto(0x4, 0x0, 0x2, 0x0, 0x1000, 0xf) read$auto(0xca, 0x0, 0x6) r3 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC2\x00', 0x80, 0x0) ioctl$auto(r3, 0xc0045520, r2) (async, rerun: 32) read$auto(0x3, 0x0, 0x8080) (async, rerun: 32) r4 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f00000001c0), r1) sendmsg$auto_NL802154_CMD_ASSOCIATE(r0, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000340)={&(0x7f0000000200)={0x128, r4, 0x20, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_SCAN_DURATION={0x5, 0x24, 0x6}, @NL802154_ATTR_MAX_BE={0x5, 0x10, 0x2}, @NL802154_ATTR_PEER={0xf9, 0x28, 0x0, 0x1, [@generic="bb31b951ab92ca922208b2c143ff512617f83341fa2ec5dcbaa77f9b8518c6497d8d8fe328f578ef8b992d9f82965e1977e2ef5daf248d39fe6f5b170a3023623dd46ae37fdfd69fd6a6cc40d52c336cc9b400964c81ff97d730dff52450ff57a965d1c5c8805156c60c197bfbe5761d50fec17f194857651ea69769a455e8fed713003c9dc67db2295f6f5cba43802745283307c6f830e84e5d9eb9318bd8e2027cdd4bd53bb12733e8ac967f7d7990b6a488dc7a5fc148ee306156e0726ddfd1c95178e1003220ddd9c72f555aa01363d7f8942fb8b7994d58914a55b4eab58099a6ce15098aa96475e165f142128f59e0e929fa"]}, @NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x2a, 0x8}]}, 0x128}, 0x1, 0x0, 0x0, 0x4008000}, 0x80) 1m20.293017413s ago: executing program 0 (id=627): mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x13, 0x3, 0x8000) ioctl$auto_BLKFLSBUF(0xffffffffffffffff, 0x1261, 0x0) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, 0x0, 0xc0000, 0x0) socket(0x1e, 0x6, 0x0) mmap$auto(0xffffff7ffffffffc, 0x20009, 0x4000000000df, 0x20000000eb1, 0x401, 0x1) msync$auto(0x7f, 0x6, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x60742, 0x0) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) fanotify_init$auto(0x65, 0x2) pipe$auto(0x0) dup2$auto(0x5, 0x4) splice$auto(0x4, 0x0, 0x2, 0x0, 0x80000001, 0x9) write$auto(0x6, 0x0, 0x100000001) setsockopt$auto(0x3, 0x1, 0x2a, 0x0, 0x9) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/devices/virtual/block/loop15/queue/discard_granularity\x00', 0x8000, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket(0x10, 0x2, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) fanotify_init$auto(0x5, 0x2000000000002) r0 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x80080, 0x0) ioctl$auto_PPPIOCSMRU(r0, 0xc004743e, 0x0) mmap$auto(0x0, 0x100020009, 0x4000000000df, 0xeb1, 0x401, 0x8000) 1m4.909118076s ago: executing program 34 (id=627): mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x13, 0x3, 0x8000) ioctl$auto_BLKFLSBUF(0xffffffffffffffff, 0x1261, 0x0) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, 0x0, 0xc0000, 0x0) socket(0x1e, 0x6, 0x0) mmap$auto(0xffffff7ffffffffc, 0x20009, 0x4000000000df, 0x20000000eb1, 0x401, 0x1) msync$auto(0x7f, 0x6, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x60742, 0x0) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) fanotify_init$auto(0x65, 0x2) pipe$auto(0x0) dup2$auto(0x5, 0x4) splice$auto(0x4, 0x0, 0x2, 0x0, 0x80000001, 0x9) write$auto(0x6, 0x0, 0x100000001) setsockopt$auto(0x3, 0x1, 0x2a, 0x0, 0x9) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/devices/virtual/block/loop15/queue/discard_granularity\x00', 0x8000, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket(0x10, 0x2, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) fanotify_init$auto(0x5, 0x2000000000002) r0 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x80080, 0x0) ioctl$auto_PPPIOCSMRU(r0, 0xc004743e, 0x0) mmap$auto(0x0, 0x100020009, 0x4000000000df, 0xeb1, 0x401, 0x8000) 7.744557471s ago: executing program 2 (id=863): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) futex$auto(0x0, 0x3, 0x2, 0x0, &(0x7f0000002440)=0x8, 0x71a8dce0) mmap$auto(0x0, 0x5, 0x4000000000e2, 0xeb1, 0xffffffffffffffff, 0x8000) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r1 = socket(0x15, 0x3, 0x8000) connect$auto(0x3, 0x0, 0x81) sendmsg$auto_NL80211_CMD_NEW_MPATH(r1, &(0x7f0000000a80)={&(0x7f0000000200), 0xc, &(0x7f0000000a40)={&(0x7f00000002c0)={0x75c, 0x0, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@NL80211_ATTR_CENTER_FREQ1_OFFSET={0x8, 0x123, 0xffffffff}, @NL80211_ATTR_MAC_HINT={0x5, 0xc8, "a1"}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}, @NL80211_ATTR_IE={0x676, 0x2a, "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"}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x4}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x2}, @NL80211_ATTR_MAC_HINT={0xab, 0xc8, "5e4ef93324c7040a9de8813a98a79d278134cfe758c2d1749fc433b1a65d90d8eb87ee96de4cd414039d594a72a00d9ab1a5157ffb842e141da65bc6bef5496cd8cc6680106eb3bcb6513e43fdabf976c927b7e1ffd433f5b1dc6c7d7cefe92652d623f42ac23f2412fdec1bc2a0b719561baab5a3203e6537c3314876f724f54da19473ed6a1d95c7f87d61c91e83f317225615d919909fb23ca856c276a6cfbd6f51005cf46f"}]}, 0x75c}, 0x1, 0x0, 0x0, 0x4}, 0x0) openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0) keyctl$auto(0x2, 0x0, 0x0, 0xee00, 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'team_slave_1\x00', 0x0}) sendmsg$auto_ILA_CMD_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16, @ANYBLOB="29f729bd7000fedbdf250300000005000800ff000000050008000a00000008000400", @ANYRES32=0x0, @ANYBLOB="08000400", @ANYRES32=r3, @ANYBLOB="305d8022"], 0x34}, 0x1, 0x0, 0x0, 0x40800}, 0x20004814) close_range$auto(0x2, 0x8, 0x0) pread64$auto(0xffffffffffffffff, 0x0, 0x6, 0x1ff) mount_setattr$auto(0x5, 0x0, 0x0, 0x0, 0x7ff) bpf$auto(0x16, 0xffffffffffffffff, 0x0) write$auto_dynamic_events_ops_trace_dynevent(0xffffffffffffffff, 0x0, 0x0) mmap$auto(0xf22, 0x6, 0xfd5, 0x1e, 0xffffffffffffffff, 0x0) 6.515053993s ago: executing program 2 (id=872): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000003900)='/sys/devices/virtual/mtd/mtd0/writesize\x00', 0x22400, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, 0x0, 0x41) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x14, r2, 0x1, 0x70bd2d, 0x25dfdbf9, {0x1, 0x0, 0xff0f}}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_MPATH(r1, &(0x7f0000000600)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000080)={0x510, r3, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@NL80211_ATTR_RADAR_BACKGROUND={0x4}, @NL80211_ATTR_HT_CAPABILITY={0xa8, 0x1f, "8de968b21bb1d3967be4273b416f2b8993b31e692b667f202bc3af888803827dcc02a67050993fcabc261f8330772dfdbbfbfa52ee0feb8cf16f8b2a087e0815cf8a14eff329e7489b0526057d379a15870bfe93ad8652c15466806ac4a8a94c5031c24b8fbab7a9b2fdca3f5f673f0b80a91d1c35d6f81d216443031d3b8aaeab5a1bdc2ad1cf8d4e4242e768485980ab439fa4d84761232392286c32de5cdf71a2e6ed"}, @NL80211_ATTR_BEACON_HEAD={0x448, 0xe, "53af405584e0cb9d1f86ceacc48f717ab0f9bb21fdf75cae87556e45c6cf1ee4eb297ba1825f416fecbcdd8fca31a59523b3826aaeaf261e8432808cc836b9da2151ce01ef5b61f1191fed14870f8c4a4ee8a6d3c788ee8f2dbffc3b14afddf6e0fced3a21b42a2c78d6526458772dec63179a70927141bad65940f2232e753b86b6abd97c7511cfd2c65a64cdc84a6611c68c73c653212455187dcf8fa7e6d2aabeb741c0f29765029730b1be8bdfa19ce46959b9d6e853abf711b4569b802bf5eef73fc05bb6ebf4375c9ba8b260982950c8d15a956e458dfcd817a0bded010031310aecfdc321f38f4123e0e4ba8b5253378b61c36814fe11236617a4084e3f651c048083ad4180beded470007f26ca25e3fe6c7f3d899aa22fe1f7a7d9ad0f8dc769d5b090ba8356f73dcd23d24120e14e2deb299f255fad5f6afcd74f8a20737050481dad7e7ba07fd3259909e05632a31d6307e68ddeda8eea385c1bdef98f9286eb7d59c5141d9f39aeb4cf6759fca4d36f40418b9d7ca0abcaa384bca50d17f2f1fbadf582df64fa707caf54728b0c6c40e58bfc423bd5a89d30019a64d6a6fb4b1912627743f7d02485591ec3de845bcfa95a4980b36ac62ca3b21be20c10f2ec6df4517e117631df1a4b09b3f970740cc201263b8e772757cfd2e3c8a17dc68c5590c1349de864090f48180a7e3a47da7612b3141c778abee60bbf0889ed4d126dc1fbc18463e5bb7e257213e80e6855b245f9d03a7688866dcbbe863264ee7f159d59bf719a4d035beaddca4b17761430cb6de55525848c0f66baa9683acfd92fc843fea60f828d8fffbcbdfecf4fc1eb039afdbf7feb2f82b05c8f978827fe2ea40513ad86537aa9d7cbd7b4b1907d472be11a83626608cd99bb90d49e2733b0b02d477b0b6bdc7039a76f2878c5a2171a3127026b2d312957d1a5408dfcc7a1d7a41c30505cb7297b4f820baa6d833aa83f22737e0b80027c391bb018a60ff9d6d220d318c33e599016327c7ca2642e27caabbe039a5f5455d1bf5ed3ecea1d92d3ed95f345efa135e3a95514441aae7ae6dab16d770cefe2f3d6c1c0fa3971dc144a44cd36159e87a8a472e3a723fbc06cf3d238ba803caa1b600a27cec30b9d39302dd51f3be605f40f4f03bf84ed5b2a5597893b0af05deb0ffc550473d851befc26780669469bb80ee1f39b924243c655210d262795dd3f21d90350d36f2d8358db93efecaea97a827295f4a73cb83fa7438f7dfa5356e7599e1e86400e02ae3712c02f8adb0fb99cdf028a50d2d60fdba7e508422cfb591bdf78c0e24f9695d2a7d690c63a09ad03495ef003ad2eb67eaa1a88b9d20774df149295eaddffbd5cc1ac2dc05069d536c08488e65184734fc17ee267c2163624496f6e9d1124aaaa10b974160fa9c85dcccb13d2751ad40fc23d9076f03c9aba4f50605d2c11f129d18191fc650ea5d15a1c90a493bb5cc8b50afadac8b969b4b464d015174d3f7e6a0317d4cb465d15d17f3491c532d8c7a8542dee0dcace958c1590"}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x816b}]}, 0x510}, 0x1, 0x0, 0x0, 0x80}, 0x8001) 6.30494832s ago: executing program 6 (id=873): io_uring_setup$auto(0x2, &(0x7f0000000080)={0x80000003, 0x9, 0x9, 0x6, 0x4, 0x8, 0xffffffffffffffff, [], {0x9, 0x6, 0xf, 0x29f, 0x100, 0xfffffff9, 0x101, 0x4000006, 0x2000}, {0x100, 0x1, 0x50, 0x5, 0x1, 0x7, 0x8, 0x8, 0x100000002}}) 6.193743873s ago: executing program 6 (id=874): mmap$auto(0x0, 0x400008, 0xdf, 0xf1, 0x2, 0x8000) mmap$auto(0x0, 0x2, 0xe2, 0xeb1, 0x405, 0x8000) socket(0xa, 0x2, 0x73) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000000000008000) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000000c0)=ANY=[@ANYBLOB="361d5a270ea9abb065b5fa59a509ffa4cd58e2b070e1c60624050000000000000066b50f947503eb1c4d80d118ea4f07d6638bce727dc3ff75019212890f117fa40687a028d581e4534a4e065a6cae5855df3ac96e8ff5ad24567631549dd85d7cd17ac71c4dc5e8", @ANYRES16, @ANYBLOB="01002cbd7000fddbdf2502000000080001004a00000008"], 0x24}}, 0x4000) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/net/afs/rootcell\x00', 0x1cb842, 0x0) write$auto(r1, &(0x7f0000000300)='*o\xd3\xa49.\xa9\xe4\xe17\x12\xb3Z\x17I\x82\xdc\xbeiw\xc1\xd1\x8d\x9b\r\x9aR\xe7\x9f\xd8\xab\x16`f\nT\xaa\xfap \xe6\xdaV\xdeD\x8dR5\xd2\xe58\n\xff\x19+\xeb\xb3+\xf1A\xa5\x95\x1fk\x1f\xff\x99gP\x9e\x88\x97]\x93\x01\xff\xff\xffp\x0e\xd4C\xdc\x84\v\xafz\xfd\r\xa3\xb2\xbb\xa4\xd9\xf2P\xa8\xe9\x8f\x13\xa7\x98\x85\xf8\v\aB\xfc\xfa\x14E\xb8y\x884<\xa7\xffyb\x8a\b\xbb\x1b\x13W\xe3\xf7\xd8\x83\xc9\xd7\x8c', 0x9) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) ioctl$auto_UI_DEV_CREATE(0xffffffffffffffff, 0x5501, 0x0) r2 = openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = getpid() sendmsg$auto_WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f00000028c0)={0x0, 0x0, 0x0}, 0xc0) process_vm_readv$auto(r3, 0x0, 0x1, &(0x7f0000000280)={&(0x7f0000000080), 0x41}, 0x6, 0x0) ioctl$auto(r2, 0x40246f4c, 0x38) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0x802, 0x0) sendmmsg$auto(r1, 0x0, 0x6, 0x4008) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_tipcv2(0x0, 0xffffffffffffffff) sendmsg$auto_TIPC_NL_BEARER_SET(r4, &(0x7f0000002040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x1c, r5, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0x1}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44}, 0x40044) clone$auto(0x3ffc, 0xad3, 0x0, 0x0, 0x2) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) 5.697863196s ago: executing program 2 (id=877): mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) rseq$auto(&(0x7f00000001c0)={0xa, 0x20401, 0x5fc, 0x10000006, 0xffffffff, 0x6}, 0x8000, 0x0, 0x6) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/class/firmware/timeout\x00', 0x1a1942, 0x0) write$auto(r0, &(0x7f0000000180)='o\x00d1^\xa1/[\x00\x00\x00\x00\x00\xdc\xbf\x05V\x12\x00\x00\x00\x00\x00\x00\xf3\xa8)', 0x4) r1 = openat$auto_check_wx_fops_(0xffffffffffffff9c, &(0x7f0000000380), 0x400, 0x0) pread64$auto(r1, &(0x7f00000003c0)='@\x00', 0x9, 0x1) r2 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/dsp\x00', 0x0, 0x0) read$auto(r2, 0x0, 0x100) open(&(0x7f0000000100)='.\x00', 0x0, 0x1) openat$auto_vhci_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = socket(0x11, 0xa, 0x9) close_range$auto(0x2, 0x8, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x8800, 0x0) r4 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x787806, 0x0) close_range$auto(0x2, 0x8, 0x0) r5 = socket(0x825bd3580f837f9c, 0x1, 0xdde4) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0xc) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYRES32=0x0, @ANYRES8=r3, @ANYRES8=r4], 0x18}, 0x1, 0x0, 0x0, 0x60008004}, 0x2000c082) write$auto(r5, &(0x7f0000000000)='-\x00', 0xfdef) mmap$auto(0x0, 0x2000000000a, 0xffb, 0x12, 0x3, 0x0) r6 = openat$auto_generic(0xffffffffffffff9c, &(0x7f0000000040)='/proc/kmsg\x00', 0x80900, 0x0) r7 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x20282, 0x0) ioctl$auto_UI_DEV_CREATE(r7, 0x5501, 0x0) read$auto_proc_single_file_operations_base(r6, &(0x7f0000000500)=""/214, 0xd6) acct$auto(&(0x7f0000000000)='/dev/dsp\x00') socket$nl_generic(0x10, 0x3, 0x10) 5.55961654s ago: executing program 4 (id=878): epoll_create$auto(0x4) rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x0, 0x6, 0xffffffff, 0x2}, 0x8000, 0x0, 0x6) rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x0, 0x6, 0xffffffff, 0x2}, 0x8000, 0x0, 0x6) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) r0 = clone$auto(0x21, 0x80000007, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x6) wait4$auto(r0, 0x0, 0x80000000, &(0x7f0000000140)={{0x10000, 0x100080}, {0x1, 0xfffffffffffffff9}, 0x8000000000000000, 0x2, 0x9, 0x10, 0x2, 0x1, 0x5, 0x7, 0x3, 0x800000000000008, 0x4, 0x7, 0x6, 0xb4b8}) r1 = openat$auto_drm_edid_fops_drm_debugfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/dri/vkms/Virtual-1/edid_override\x00', 0xc0a82, 0x0) write$auto(r1, 0x0, 0x200002d00) r2 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/controlC1\x00', 0x20020, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_READ(r2, 0xc4c85512, &(0x7f00000004c0)={{@raw=0x5, 0xffffff7d, 0xa, 0x105, "50ddcc2d0a7b79ca0e62e667b5000000000000000000000000000000000100ffffffffffffffe700", @raw=0x3}, 0x1, @integer64=@value=[0x1, 0x9, 0x6b92, 0x6, 0xfffffffffffffffe, 0x7fffffff, 0x4c6a8f65, 0x5, 0xc, 0xffffffffffffff30, 0x6, 0x2000000002, 0x8, 0x7c1, 0x8000, 0x8, 0x2, 0x2, 0xca1, 0xfffffffffffffffc, 0xffffffff00000001, 0x2, 0x7, 0x6, 0x6, 0x8, 0x4, 0x93, 0xaa, 0x4, 0x2, 0x0, 0x7, 0x3, 0x749, 0x6, 0x4, 0x7, 0x1, 0x3, 0x9186, 0x3, 0x1, 0x1, 0x8, 0x6, 0xfffffffffffffffc, 0x3, 0x4, 0x7fff, 0x3, 0x1, 0xaa7, 0x0, 0xfffffffffffff41f, 0x6, 0xe36c, 0x22e, 0x9, 0x10000000, 0xaca7, 0xf3c, 0x9660, 0x9], "bee8fd3b16a97731269aff7312ae1a01006266a3bde1f332e1078696becfd044280e7fb7719d4362b09d9f6cb070bad3af7185ae1e691c585914c0b11dd65468fb68dfc32254d8ed55c8d806a2ef4bba7bc65cd90676ce6dec79ff2f44034ad55049ff128dd27f04ac14d8dbaffacc77596ca0dffa00"}) ioctl$auto_TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000280)={0x6, &(0x7f0000000240)={0x7fff, 0xd, 0x4d, @raw=0x6}}) mmap$auto(0x8, 0x20009, 0x2, 0xeb2, 0x8000000401, 0xb5) madvise$auto_MADV_GUARD_INSTALL(0x0, 0x2021000, 0x66) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000040), 0x290a00, 0x0) madvise$auto(0x0, 0x8, 0x3) 5.422152196s ago: executing program 4 (id=879): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x20681, 0x0) r1 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000001cc0), 0x101440, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000080)={{0x0, 0x8, 0x200800, 0xffffffff, 0xfffffffb}, "0dd7fd00490000080000000008f75b1f6de0d6d51768a257a97ca5e9ca6310ea"}) mmap$auto(0x0, 0x8, 0x2, 0x9b72, 0x5, 0x0) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) membarrier$auto(0x4, 0x8000000000000000, 0xffffffff) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000140), 0x2002, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r3 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f0000000400)='\x00\x00\x00\x00', 0x100000a3d9) r4 = getpid() mremap$auto(0x0, 0x4000007, 0x3fd7, 0x0, 0x20000020000000) process_vm_readv$auto(r4, &(0x7f0000000000)={0x0, 0xfff}, 0x40000000001, &(0x7f0000000180)={&(0x7f0000000140), 0x40000000001243}, 0xa, 0x0) close_range$auto(0x2, r2, 0x100) memfd_create$auto(0x0, 0xe) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), r3) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) io_uring_setup$auto(0x6, 0x0) madvise$auto(0x0, 0x401, 0x15) io_destroy$auto(0x70f) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) r5 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$auto(r5, 0x104000000000010e, 0xc, 0x0, 0x6) write$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000200)='5', 0x1) 5.050522679s ago: executing program 6 (id=880): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x2882, 0x0) write$auto_console_fops_tty_io(r0, &(0x7f0000000000)="c80d1b5d509b4b", 0x7) iopl$auto(0x3) r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv6/conf/ip6_vti0/stable_secret\x00', 0x2, 0x0) bind$auto(0xffffffffffffffff, &(0x7f0000000040)=@generic={0xa, "2c551d000000ff8000"}, 0x66) pread64$auto(0xffffffffffffffff, 0x0, 0x7ff, 0x800) tee$auto(r0, r1, 0x9, 0x400) pwrite64$auto(r1, &(0x7f0000000040)=':\'*&\x04!\x00', 0x1, 0x27) 4.681251907s ago: executing program 2 (id=881): mmap$auto(0x5, 0x8, 0x4000000000e3, 0x800000000000017, 0x401, 0x5) (async) r0 = socket(0x18, 0x2, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth0\x00'}) (async) socket(0x18, 0x5, 0x1) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x80487436, 0x0) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) r2 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/maps\x00', 0x1a1000, 0x0) ioctl$auto_PROCMAP_QUERY(r2, 0xc0686611, &(0x7f0000000080)={0x67, 0x3f, 0x7fff, 0x5, 0x80000000007, 0x1, 0x6, 0xff, 0x5, 0x7f, 0xfbfffffe, 0xfff, 0x7fb, 0x4, 0x9}) (async) r3 = socket(0x11, 0x5, 0x0) (async) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) (async) openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, 0x0, 0x191000, 0x0) syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000040), r3) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) (async) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa}, 0x55) (async) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (async) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) openat$auto_tracing_pipe_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/trace_pipe\x00', 0x20c01, 0x0) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self/net/dev_snmp6/veth0_virt_wifi\x00', 0x200000, 0x0) write$auto(r4, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) (async) mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) (async) openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/smaps_rollup\x00', 0x40000, 0x0) (async) read$auto_proc_iter_file_ops_compat_inode(0xffffffffffffffff, &(0x7f0000000180)=""/286, 0x11e) (async) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0xb74, 0x66a) (async) madvise$auto(0x0, 0xffffffffffff0001, 0x15) 4.427535898s ago: executing program 5 (id=882): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/block/loop14/queue/dma_alignment\x00', 0x80000, 0x0) read$auto(r0, 0x0, 0x20) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3) r2 = landlock_create_ruleset$auto(&(0x7f0000000000)={0x6, 0x3, 0x3}, 0x18, 0x0) bpf$auto(0x0, &(0x7f00000003c0)=@task_fd_query={0x5, r2, 0x454f, 0xfff, 0x0, 0x134, r1, 0x80000000}, 0x6d4) 4.334933744s ago: executing program 4 (id=883): mmap$auto(0x0, 0x6, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) prctl$auto_PR_GET_CHILD_SUBREAPER(0x25, 0x6, 0xfffffffffffffffe, 0x5, 0xfffffffffffff9fe) mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0x8, 0x0) r0 = socket(0xa, 0x2, 0x0) r1 = socket(0xa, 0x801, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000180)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}, 0x54) r2 = socket(0x10, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000400)={'pimreg\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000440)={'wlan0\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_WOL_SET(r2, &(0x7f0000000540)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000328bd7000fcdbdf250a000000040003003800018008000100", @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32=r4, @ANYBLOB="140002007465616d30000000000000000000000008000300ce60ac9c080003001d5e000004000300"], 0x54}, 0x1, 0x0, 0x0, 0x4000}, 0x4040) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sg0\x00', 0x8001, 0x0) r5 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000002c00)='/dev/cec29\x00', 0x8801, 0x0) getsockopt$auto(r1, 0x84, 0x6c, 0x0, &(0x7f0000000280)=0x1000c0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) close_range$auto(r1, r1, 0x7fff) socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bind$auto(r5, &(0x7f0000000240)=@vsock={0x28, 0x0, 0xffffffff, @local}, 0x80) r7 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), r1) sendmsg$auto_NL80211_CMD_PROBE_CLIENT(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000c153ea8bacda276711d9df0e859b372268d724e6c3bd4c28704577e519e7f9c54c52ebf738f0106a75621dbd9c88106551e6b11a0fcf11a41670f7ab8590c04fead929c1a6c93942a1d449db7c2cdf7f9affd1873e9ba427e92e7dc3dc7e2a4d58a3e1cd3963abcd769ef3941f2a56f8e2bf1c8d35f8c07dbba35804efc0c00b1da681d414f72ab966c5e0317b3b05f0e82a39dd671c848729e2d7424f46d5e3f366596adaffd587b884224c3de5f946ac19dfa58603b64bfadd580a62b8537eca24064ea99a1b912ebd1c795e2b8eeca8622404ffe2ec7fbd0a0098b8de90cc10fc85bf9cb506cab48a6b94af", @ANYRES16=r7, @ANYBLOB="10002bbd7000fedbdf2554000000060036000080"], 0x1c}, 0x1, 0x0, 0x0, 0x200008c0}, 0x200000c0) close_range$auto(0x2, 0x8, 0x0) r8 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000280), 0x101000, 0x0) r9 = ioctl$auto_KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r0) ioctl$auto_KVM_CREATE_VM(r6, 0x4048aecb, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0xb896, 0x1, 0x9, 0x400000, 0x22, 0x940, 0x1ffde, 0x0, 0x4, 0x7, 0xa, 0x6, 0xfffffffffffffffe, 0x8000000000000004, 0xb0, 0x7, 0x2, 0x3, 0x5, 0x7, 0xe, 0x5, 0x2, 0x1000, 0x7, 0x9, 0x0, 0x1, 0x4, 0x0, 0xfffffffe, [0x0, 0x7fffffff, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x400000000, 0xffffffffffffeffa, 0x400000000, 0x0, 0x4, 0x1, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, 0x7, 0xffffffffff, 0x1, 0x0, 0x7, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x5757, 0x80000000000000, 0x2, 0x1, 0x8000000000000, 0x53d, 0x0, 0x0, 0x2]}, 0x7, 0x281) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="400001fd121662d9eb92a13eced4ee76c1e0fada2945d4014d2038a7124edc433948de59299c69"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) bpf$auto_BPF_MAP_DELETE_BATCH(0x1b, &(0x7f0000000580)=@link_update={r9, @new_map_fd=r6, 0x2, @old_prog_fd=r9}, 0xf) 4.095508352s ago: executing program 6 (id=884): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) ioctl$auto_RTC_RD_TIME(0xffffffffffffffff, 0x80247009, &(0x7f0000000180)={0xd8bf, 0x5, 0x8, 0x9, 0x1, 0x4, 0x6, 0x3e06}) socket(0x11, 0xa, 0x300) sendmmsg$auto(0x4, 0x0, 0x9a6, 0xa) close_range$auto(0x2, 0x8, 0x0) unshare$auto(0x40000080) write$auto(0xffffffffffffffff, 0x0, 0x56ec) openat$auto_vhci_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket(0x3, 0x3, 0x7) socket(0xa, 0x2, 0x3a) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x7, 0x0) openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000001b40)='/dev/cuse\x00', 0x8640, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) preadv$auto(0x3, 0x0, 0x3, 0x3, 0x10) close_range$auto(0x2, 0xa, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_ftrace_set_event_notrace_pid_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/tracing/set_event_notrace_pid\x00', 0x582, 0x0) write$auto(0x3, 0x0, 0x5) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/net/lapb3/threaded\x00', 0x8a801, 0x0) socket(0xa, 0x2, 0x0) openat$auto_proc_page_owner_operations_page_owner(0xffffffffffffff9c, &(0x7f0000000080), 0x2400, 0x0) socket(0x2, 0x1, 0x106) 3.628863089s ago: executing program 2 (id=885): openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, 0x0, 0x109001, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0x80000001) mq_open$auto(0x0, 0xde8, 0xb, 0x0) mq_unlink$auto(0x0) close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) write$auto(0xffffffffffffffff, 0x0, 0x8000000000000001) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/rpc/auth.unix.ip/flush\x00', 0x40d81, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000080), 0x101001, 0x0) getpid() openat$auto_drm_debugfs_entry_fops_drm_debugfs(0xffffffffffffff9c, 0x0, 0x2100, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000080), r1) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r1, 0x0, 0x40800) unshare$auto(0x40000080) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/usbmon0\x00', 0x2040, 0x0) ioctl$auto_MON_IOCX_MFETCH(r2, 0xc0109207, 0x0) ioctl$auto_MON_IOCX_MFETCH(r2, 0xc0109207, &(0x7f0000000100)={0x0, 0x2000004, 0x7}) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000001a80)='/dev/bus/usb/001/001\x00', 0x29202, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mlockall$auto(0x7) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) mprotect$auto(0x0, 0x806121, 0x6) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x16bd00, 0x0) bpf$auto(0x5, &(0x7f0000000080)=@bpf_attr_7={@prog_id=0xc, 0x92f1, 0x4}, 0xa) 3.628564044s ago: executing program 5 (id=886): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, &(0x7f0000000100)={{@raw=0xb, 0x3, 0xcf, 0x8, "16a0d89bf208384515b5375a677609aa1bc737276563c3d5a2fca999d5797ab7a10a4d2bc341c4bd369ae535", @raw=0x1}, 0x1, @integer=@value=[0x6d, 0x7, 0x0, 0xbb, 0x4, 0x80000000, 0x1, 0x10001, 0x1, 0x400000000009, 0xc4, 0x9, 0x6, 0x4, 0x3, 0x6, 0x1, 0x3, 0x4, 0x401, 0x6, 0x0, 0xa0, 0x5, 0x2, 0x3, 0x5, 0xa, 0x8, 0x1, 0x8, 0x7f, 0xffffffffffffdb75, 0x100000000, 0x3, 0x7, 0x7fffffffffffffff, 0x1, 0xd, 0x1, 0x71, 0x0, 0x8, 0x2, 0x3, 0x3, 0x2d7, 0x1, 0x1, 0x6, 0x2, 0x800000001, 0x6, 0x7, 0x0, 0x6, 0x4, 0x3, 0x40a, 0xd, 0x3fd, 0x8, 0x7, 0xffff, 0x50ce0883, 0xbd9, 0x5, 0x2, 0xd8f, 0x80000000, 0x0, 0x7, 0x46e, 0xa5cf, 0x8, 0x7, 0xc16b, 0x6, 0x9, 0x6, 0x8000002, 0x6, 0x1, 0x3, 0x3, 0xfffffffffffff16a, 0x6, 0xffffffffffff0001, 0x100000000, 0x4, 0x8, 0x4, 0x2, 0x2000000003, 0xfffffffffffffffe, 0x20007cf9, 0x40, 0x2, 0x7, 0x100, 0x14b, 0x2, 0x45f3, 0x0, 0x0, 0x4, 0x0, 0x8001, 0x0, 0x1, 0x7, 0xcf4, 0x1, 0x3, 0x0, 0x4, 0x7, 0x6, 0x25e2, 0xc9a, 0xd09, 0x40, 0x2, 0xffffffffffffff00, 0x7, 0x9, 0xfffffffffffffff8, 0x40], "f3fadb90a56b67d92a5b28b4b23f332550b1e5454e2027fb1a37efe81bbc27deaf7c3100aab088cdb3b40dad335c9174f18934845ac3152fef1e0f42b42471efc0225a4ebe7e05ce3d4ab429805d5921633ffbce8f1a82ff9dec6c288f431cb7005b85ca8633c55d49bbdf4bd9cac1046064001bca7ba37e4b5eacf1940c9a78"}) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) io_uring_setup$auto(0x8, &(0x7f0000000140)={0x0, 0x1, 0x9, 0x210001, 0xc, 0xc05, 0xffffffffffffffff, [0x7fd, 0x1001, 0x3], {0x9, 0x3, 0x6, 0x0, 0x4, 0x895, 0x3fdc, 0x6, 0x5}, {0x2, 0x1d11, 0x54ed, 0x0, 0x101, 0xff, 0x7, 0xa, 0xb}}) sendmsg$auto_NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16, @ANYBLOB="000329bd7000fedbdf250900000008000c000100008008000300", @ANYRES32, @ANYBLOB="08002c000001000008001d"], 0x3c}, 0x1, 0x0, 0x0, 0x20000828}, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_qrtr_tun_ops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8000, 0x0) socket(0x2, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = socketcall$auto(0x8000, 0x0) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$auto(0x3, 0xae60, 0x10000000000402) ioctl$auto(0x3, 0xae41, r2) sendmsg$auto_VDPA_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x40000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x6, 0x0) r4 = socket(0x11, 0x80003, 0x300) setsockopt$auto(r4, 0x107, 0xf, 0x0, 0x6) capset$auto(0x0, &(0x7f0000000000)={0x1, 0x6, 0x48}) sendmmsg$auto(r4, &(0x7f0000000140)={{&(0x7f0000000000), 0x5ac, &(0x7f0000000100)={&(0x7f0000000200)='S', 0x7}, 0x5, 0x0, 0x5, 0x1}, 0x5}, 0x4, 0x100) ioctl$auto_KVM_CREATE_VM(r1, 0x4004ae99, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22040, 0x75) 3.138706349s ago: executing program 4 (id=887): openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cec5\x00', 0x20000, 0x0) (async) r0 = openat$auto_ext4_dir_operations_ext4(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/mac80211_hwsim/hwsim13\x00', 0x430000, 0x0) ioctl$auto_EXT4_IOC_MIGRATE(r0, 0x6609, 0x0) (async) r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x50, r1, 0x1, 0x70bd25, 0x25dfdbff, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0x3b, 0x2, 0x0, 0x1, [@generic="f4ef7985dc3b7818a46a215424cb34cf0ef9c1824012854259b79144176a6beada442c15c1f7ed15604918fec135013a4a28dbd8bc6392"]}]}, 0x50}, 0x1, 0x0, 0x0, 0x8000010}, 0x90) (async) r2 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000240), 0xffffffffffffffff) statx$auto(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x5, 0x200, &(0x7f00000002c0)={0x3, 0x4, 0x100000000, 0x8, 0xee00, 0x0, 0xffe7, 0x101, 0xca9, 0x4, 0x2, 0x8000000000000001, {0x8, 0x7}, {0x7ff, 0x8}, {0x2658c86b, 0x5790}, {0x674b2dfa, 0x9}, 0xfffffffb, 0x673, 0x1, 0xb, 0xfffffffffffffff8, 0x70000, 0x3, 0x8f, 0x9, 0x8, 0xd, 0x5, [0x0, 0xffffffffffffffff, 0x10001, 0xe, 0x6, 0xdf, 0x6df5, 0x1, 0xb2]}) ioctl$auto_XFS_IOC_FREESP(0xffffffffffffffff, 0x4030580b, &(0x7f00000003c0)={0x5, 0x5, 0x248f, 0x8, 0x6, 0xffffffffffffffff}) sendmsg$auto_OVS_FLOW_CMD_DEL(0xffffffffffffffff, &(0x7f0000001980)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001940)={&(0x7f0000000400)={0x150c, r2, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@OVS_FLOW_ATTR_KEY={0x13cc, 0x1, 0x0, 0x1, [@nested={0xdf, 0xe9, 0x0, 0x1, [@nested={0x4, 0x118}, @generic="124b4420c6f2d60efda414e5edcea1bdff04c7a36eaa35ef6a9d5823fbc3d6655166c113e9c2dc4503f0a4954c95f282dda51b38f47fe44339d5a109cf49d4854c4b9673d00aeb583f53408eed595e428c89030e9be505a660a004aee969075ddeb8709130247d9e56b3c360bea7d04a475f25312dd43a43474c3f667b4a4ad26f2a96ba95e8ed59091b2a", @nested={0x4, 0x30}, @nested={0x4, 0xed}, @generic="f84466b93b889360baff211a35f98367d3f0a726d0375ca4370e324651e7c041", @typed={0x14, 0x14, 0x0, 0x0, @ipv6=@mcast2}, @typed={0x8, 0xc1, 0x0, 0x0, @u32=0x999}, @nested={0x4, 0x20}, @nested={0x4, 0x121}]}, @nested={0x117a, 0x110, 0x0, 0x1, [@generic="25250a37a2d4262f14e6489270918fc15334a4af33f4152b38a66cadff8313419fc40aa7c0fdb036edf40a817fee99e27cd7fa0f673a6c4ba6b55728c011283ec6a7b4ba06d66586357ee2598444dc4d83067d526557a3aa3ddf4bd69fed610807642381eed5e3e02058dcbd49b4b2fa2b5a836e515770876ff634266df7b5f8e32c31594e59acc1d567cfb47585a5f960162d236fc442387a79f02c83c738bb58c9cd6ac0756d245896cb", @nested={0x4, 0x28}, @generic="9b6c2cb331d0b486646d029b476f11bfe7603577a54e0d4d0bcb804f34bd4e392913e76cf17cbf101da11242ae7de8dbb914169f2105bdb39d027028b970aeee90f6c538c9fdd616f1f5efb690585287fe48993f559b7a42fdedd2f0b6a952f0a9cf849dc217e68b0ae64fa48e6a82c890d181293ec7044b3e1228cd57f78a31cbd28b8fc042898beb78e7cc136015887531c7a26ce0d81b14d4a458cfecc33327f27de62128b3868373711aab88526780a330b298b3d624e54c681426832278d3a33582d982a931df6e94590f5b27ba5cf5437fbce0c7bfe33c6b8499dc47061f18f459b784218bfe0677ce271daeac3fd857a89d15f75d39f71f802e203315f4a2de2a7adba77b31b4b9e74ba48c46956ddc5649ec669d74be771ec6494334330092f1f9bf83ac0f901b1a60307985e8a612b5d996ed49973e9a57a968b8716e1ace16c03b3ab73605d660cfdf40e64b352ed46a0f4fbed73386cd8238d547d19ba8bb36e1af58acebd9773f2e9d659cca99268416d1f5abd951a8b8eb943f29b5cadba55baa9117759729b828069fbf94ee06c493657f412edc4eed4e0603988e3979ed568bfe411f0c472cf51bd81a7084ed78b0e907bb2722a50ec0b48b0eed502f35abf576e8eff42812d6ba106cdd24b47073652509da7dfc937ba7cd6fb31e0391e41e8e6697f7715aff637c850271799e94d1a5927b59dd25cac8ec8b8baef795fe1effc15c790d561101546dd16028de2dd5d2d6b4220a3fbc2cfc3dca93494efee44acaa517c577720a199c02b508779fb8e4c33cb38adfa268f3ffd8d3967d1152461265a95acc178c11083a6f78906733ab28d1111471cb2adb5377e960a41f96b32cdacecd3d93f7bda807124d09442eba232c3a0e358d67c77984368aa34427ef96be1c0026a1c64d533f54ebe0620f4794879e50996717969684ccb7049baa577530e46da640d6044b32cd8f15679888ec1310c3f17ee5c4a89e0e47055e3cf4ed0bcbb1109188455c8f168ef739f7338910bd4b209c0885e2f76de4f6f9ff519ef0a6915ca8041cfe36568ae36a0033620befc65d1e338b6f03e892a2511b5418049504657832498fbc3d47ab6c22044c2a719f91788ad4f7a35339ab875fb5406a0d3266667688f280494f2a15bec886352ab1a2bf792a31915c6d8c992ab7ea3b0bdaa88d4fa8cc568170ab746e8b3d32e5d77a002d80b3e665ea5337e36460e1b95db8fe12bf492fcd334d0bbc0b71a3f8951681c82bbe3af90c0d8df13d4b3f479b3fae13506d8b3a1021918dbf2d3115c668de123568225614271b19454d6ae76e30d94e62ccc55836c7535a818afbfd66a57c87a8a0f4ed0470c4c04574c58a4ff18ee4828f41c5925ed653e7cd3fb3849ca4d0b2fa276bbceaa1cb0fa9213a7674263cc71ad0fe31775c79407f7a3e93e062ac9caa38af44e16f6841536f521cbb79f64dfcf4f161438b58d67c3ba9a4c51a044037dfeb72f3a0e20af4405283764c88f6b11b57c4ad11ac688fbe66a1ad0d34e53c1084db3448a325607da785b1053cff2ca20bfa015e3ebc32441830a5707ada347a4e176fca7330e8b6403ce87b549b52140f43172909ba1983ecf919e4fa4f89dd791b32315586b089697007219a642e744270abc671b57afec9263da8a212294121b72174d7a024d68be1ddf5ef1a6fd79be67c5ac742175f7f59395ab5a2dab625fd555e07865c59c93afa9c3a2fafb241f7489e7fe472afd4bfdd59555d06c6cc69d686c6eaa6ea40d92563f224f24e124c1efae95f974772d3de8cbdd24ce68802cc21b3ef7163e7e5d3b667f8cf77c7c4ab7af854546332439ba13e9fec0a3bf6bf7f8046e148ecba364d5f60d04e6ee3acead46c1bb28c73207ed26bee1e004ebeac624a59364fc34ab129321c929b6745347c0630504305a3e491ab021435ad4c1cb257c1c8487ea9d7ba099671c2fa8391cebf5a5a56d2b472504b3ea54ebacb76de4a2527b5525f8f6dedd0d32ca331f0fadbbcda3b0c2f814bcbf68ae2cf0ad57d5bf185d971b48c506e69aab2cd2b90ff15d20aae06e10a76a301d5c2ef1e60bf2723d0bc37574c19fed2a7ea72081269792a54eee0bbc2c7f96aa8be4f843adbcb23b94a136ef0a9c3e840d6eefa6445f41bbbb0a9b837995a4748633a67383f36ca7eb5a2ad2def8a97a41d4f5626a33eeb6fca8d615b5e07edbc7c38896cbf6d1adeb324d27f23cde0b29c9acd13674d8595cc895e07ff5a873b0a598577f97d8d552801995d45ec3bec5078aa38ece2c598ca2f26f64ed46acbd77dd7ae75cf75836cff7e9a328d9ff3767839a4f32f926a6d0d98ad18f1e982e4b59a669cc200adddcc1e3c690167956afbcb78df6e098bc8635f9475a9fd54ae61ecd5155a59635fec116b80776e0184e42d4892b0a00ab57fe22e6785e9b8c221979fc0e8cc1346968236a5c8b71018da18281bd8ab10c9d61c529ba2dc4bc31ca45d99190394c5f6015627f66dac196915f5f056c9ece088bb1002d20509f7f862d2046acba79d8e9ea7520931e32fe0942e7a569549d8effc62cfc940bda272ad5eadff98b4aac42a9c8b0eba2fb4c5d60950311cee9e907d28dc2a93ad1b732093fe0e37c56ff1ed502cf2a89a8729536ed790c5ff29078d562f92d3c4ef1d9a5e275e46ad7d9de68def1d4c329083f7cf03c933a8c707a0bc391f97dbea35f8b9ead4787f25a35bf80ee8405865919f6fd2b8748c20fe4af0a7582067e428a72ec338a5584f121489c6913c99bcf49669db46aa9d6803d1a317838ca4aed000e09f5379e8885f579c38fdf7abb246b3655f1b4222e5fa09d281e46e05cbe451f77240ff6062296689406b7609eff50d9e3955f43fa0f5784c221e804f7c233f9351e1dba35d94150c7e6c7db7d6238862e7d77479ad7f99154a54def4d24d4154569e275281303c1661a1712a2faa8516d7d85487946687f295f5b6797e38ffb2d473eb66010d8027ebc56b6a9b16d8668819c9e86e272986aa733a0cd5ef6193a5a20f7ba1d7347de0c736f01446433d9d12cd103adff94595dcdac86a1aefb73c1da8e6cc9986c48a1ad13475b7496006706a440883aa5b5296244ab2eb0998ec600e9d8eb95b90dde34570df8e60941189d06f887509635e315d131693a30c3951c9169ce79d0430b677021ce875f41031bee7f6210c6f8e2180dc604dad4f285fc91fee043773d3e97ad800975d30667bcbc8c3c2bddb323dbf246adcca22f992b8542bb260f9c3901f0533a96cd244f1eb912340c37c9267243fd86ec3494ab4eabb102fb53fdd0264f7ceea755c2c01aef0289e83d7b93eed3447d4081e30db6c1a7e95bcafe803a2cfe3942ef0089e5fcbefbd1d83faf0ce6362fde8ddd153c067760dcf7c8fdc5669ed6a1edce93bebe76b9e3903462185d963c1a4f13d35c778d5647b8453500b8e8d41243fe9590b47764ac163ee1ec7eca8964b486e3e36d936f6d4d64dfb30ac73055ae029b25f37a41b108b22b0a8348d7aec88f257364e0d6f03f980aa64ee960e63a6d66cf9901e3da4d723c892613815a160c988b0e38a521a1b58ce7ae66d00bc80079dece91e39f4dfcbf4505e01a8c620690bd41bdad84b846d6fd67b190145a669a32f2158fd55787c5034ced5348a0b25beda74f07adcfb7a8913d6868bd322658cd6d0b5190137234c0830db1fe2e89c2c62111a8e27c3422f47dc2a54734173251a0c0ff6e1decd68521ef3222880d2e342bd6004ca9cef77a8a586eb5fd0b445cc6ee70f2219d06ed028b72ebe757b108e6d18a7b49ba5b74cb483e8d87cc992bd5bde5d56117a09c98ac68df4f8b2d4bf0d54f771ad285988630380fdd3613827a4005f7c7e4a8808069cd599ff82382e010ed998f15359a0bc7bd1b7899ac068712d06b499d55a73ce0885c5a0c37f53c52aa4012ef1f4fc07198275a8d133ccb96735ad6cb17d182cd17699a9e0153a7aa37ac9d1c3106530ec613cd7aa3a7a5d90e43ba9b5ca82ed0fbd0d7ff733bacb08f501852ef35251b64b289a3de4a5d196fdea6a1dfa65742333dbfc812eacc5d4ed8cd5209d2509c73950486368f426d3d76a5a000254b1b9f4776cd32c7a46be70f0a56fed6d86c85ff56c71be7565fe23815c0414b780134934aa859f00dc9d9d4e001c35659f132c8aea762a01b60b9b7f6dd992ec93898c06095736ac3cf19b0d3e141cd9ad1ef57dfd9712a0afcb727a6b9ef7bdea60eb5dce2722a09db1d0dc0c5ba1f2f570bab1823b6e209a9f48dddf13d832037e1fc3f5bf62383dd6a98b07e9e1e800102cc5aff9cfc6ca10eb08f04cb9e1a59e65cae3e7070c03af3b0cfb68e2298c322b57c25b3f4ddf96b406ec816b45f2aad9ea2f2ee08887cc93ddbc541ab819fb7263e3ecf1c3d809accd254ec0548a6757abf122eec83023b018433898e0d374dfb3e3996d17caffc9cd58ca71fb27b18d59b9533883cfff1e5cd7cad77e6db3fe9be00f034ed24314e86cf5a4bb43bb526b1a2a4c3265e0da1ffbe617eb3d0ce76b99365b6fb6f69fd4714d246541bef5142717d93b1b45335ec19c206e16e7fccd7a2f7243bb32d37adba7673bccd047754fe0d9d000b3960e6ae3469c44d5c0bc1213f39187add4eaac7a2ccaa9232e2f2c93c9dc384253e482975f8db6eb579c8d877dbe179a2dba0510b36caf8d04257884b9dd1bc18199304ad51ce4269b392c1c0eab0d632cba578370e8c561cb2bdafa8a405cb92fa559462228c0c4626385f09652b68e802cb316c7e8c19ec01227623fb7ee7d0adbbe194bc86e0cdcff7d25efa83065d01dc9c051c4b2490d8893f9d3e8bb45c89a90682fa2e889ee6503f3cd9514b33ac812a24cc48d2ac07e9313cacf56c8459a165f48f5728ee4eca9ffd01dc862cb453df64b8b0f70e8e3edc7e22144a48375f50f722d2d7a0e3e788f0cff0ef3af8e5fc4f0d2270b5f68a1a7aab8012c2379e9c814ee042cc5b4e70d553fce2434f2137f9bc7b08d0a6a41b114d02e24fbd406e1dfcbddd5ae19a656957fe8d4c1c1be1583f21643f260f3c334b9afb3a86cce22ea608ba40b01bc8a2468a98d3ced372707bf7dd08369604ebcab5ddd3f3815f875655880124e66491b24dfa4960eb9327825a6df875723e729d4285f19871694ffc7f9ee646f0bf72909c7da85fa2877faf067d3d6c0e78431f2586b72cb85abe9ddf6dea1cfe4d246b37e6f4bb51cfcae214cc1731d93e47c5561a790f71d2c5b65bf008ea36a84d7a2d803956ae8d7b4d25dc93ad60f97c80040797a0e7ed5d71e00ee24cb7c5bdfad200d71db3f670a9adfbad4c891b013dbfe2d4f865837425e8526a73f78a4f57cfc16148f6f8e8458a95697e0df3340bb1fa94330d92a6ad9d397f9a4a19d21cbc6cef96d212a462089d3ead5308092b0c41b32835edf849ada13106d906506f0ec832d8313365eb730d2195be2965b251c3f9ca6d17dc44b953d8d957d54e0435932c7ebb241c31e8987b03fe12f255466338919a518bf2f11fd7b14dfa0a5406f551a1f98c901ae55fd14dcf4c5d444ca4973b645fd93df16020c02ddf5303f558425ca4ff594af3ec1097bca6f13a26cad15a4fb3e246ee6af24f80e2a3732e3e2d4430de4141c048012b506a93cc520e2df548433a023df39c9b7fbfe40f866119644cecf9989680d77b7c550439bf2e9a802446e09f223cd20d8bc5f46278f39f66129a5fbcf8946a43a5342734c4542b02befb784f6e78e4340dfaf51091deaee812624b6", @typed={0x8, 0x14b, 0x0, 0x0, @uid=r3}, @typed={0x14, 0x50, 0x0, 0x0, @ipv6=@mcast2}, @generic="e0258256872e372e6f61a31379187ecef4fb03c989ad38d24d79f3560ab71a1e309f6ba5d080cdb97bd66534a9f3f5d38d810bda9045180bd344496c695ceadd62c228f814b39774df0dd1d6282774295aaa5327b2c3e4e98371eed5de0446d8219ad51fa03a5b5f6dbce167c23e49bc6fad08", @typed={0x35, 0x53, 0x0, 0x0, @binary="ddfac0e3806f7d85e3e473e091f19fea3afa26d11c61e796a476c7ca83e6e885786eb5ac1c02b4dabc020b1f45e4e38173"}]}, @typed={0x8, 0xea, 0x0, 0x0, @pid=r5}, @generic="cca3c7691b89d9605119a016a319ddc73cf088acc4e0254d4786e622c91be269f0607951044f471d0359a1a7b8c55524a8", @generic="7e7788cc36ca56fd5dce5c8e2329c7675cfdbcb61486b311e0c20ea83091098fd586bab0cd2ccecc3420523ebc51884e2f8642730d56c9", @generic="ecf2a2d95e6a1e64358629f4e72055d538e6fd43031e51e56e25193dec879aef1fd3746d1771f3f70c777ae540464fc6b14d028a27d81c143727684ef762221c184b8bf16c167a25395bfa42da6c8576955e85df660f630af0acfd11ff468484be3b6fc2700ed5756f0b7147fa89dadac566f16d71983e61e04a8e5f90f6732cefb80f68edafe40c216e31dd53fd94f48f3c4ba4b0ac792c017b1f6bff91ab0c37fbb1f0abbd1f153a158e42b103ef8134cd80ea80efb6a13caf584a48f16068e0e15c81b62de8f0030455b70171c7e9d8e3a8", @generic="4f688647f71b16a7d80a675f33ad0a8789c150945dc41835aad92f65a6734872fe5d7dfdfcfd0b41ac"]}, @OVS_FLOW_ATTR_ACTIONS={0x120, 0x2, 0x0, 0x1, [@generic, @generic="ec26d598c0e3d7b57c501131b897588c91e10f0551f541ddb77e10bd99284ba3cf0d33c0151cfafa64ba862244374179e0d7d01da811eeaa61b5219cb829e50e5090c221bccd6f3ffe4fd6559aec140f3afe88b38d20", @typed={0x8, 0x1d, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}, @generic="4c065e303c4e42ba6d5b4942ecd551e479cf537f35c859b7c78f8dd64fb3deb57967f309f3a94c08a9b0f6441608a6bbccbe10e5fd92e94ca5082f3c5a102cb5c0d9ede081fa88ce8d92ae4651e9d7d2613d49084d07bab8114202e304bdf7bb0776eae2f8c04f8b152b27d08649c4bc0c1e583e43e92045d7073c3402fa1625106221a2aefedabb4e87a16c552e200d5223aac483e220d55d8fc493093f3c8d0605ae2daf8ecd8d5d1607807ad5888fa840638e57e8de6cd4ad8364077e"]}, @OVS_FLOW_ATTR_UFID={0x5, 0x9, 0xd}, @OVS_FLOW_ATTR_CLEAR={0x4}]}, 0x150c}, 0x1, 0x0, 0x0, 0x4000000}, 0x814) (async) r6 = ioctl$auto_TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, &(0x7f0000001a00)={0xa8, &(0x7f00000019c0)={0x7ff, 0x3, 0x4, @raw=0x2}}) r7 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000001a80), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_REQ_SET_REG(r6, &(0x7f0000001b80)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001b40)={&(0x7f0000001ac0)={0x44, r7, 0x2, 0x70bd2b, 0x25dfdbfb, {}, [@NL80211_ATTR_REG_ALPHA2={0x4}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0x54}, @NL80211_ATTR_CNTDWN_OFFS_BEACON={0x19, 0xba, "344188d767defd2de400fb124bf26cdcc828e51bbf"}, @NL80211_ATTR_VIF_RADIO_MASK={0x8, 0x14d, 0x3}]}, 0x44}, 0x1, 0x0, 0x0, 0x804}, 0x4000) (async) writev$auto(r6, &(0x7f0000001cc0)={&(0x7f0000001bc0)="1ed7ae8fd3030eccd4803d3d712015bf6d247d090903e5b1ff957736f9b034fbffd8f82f885baa6d8fb6763c0cb71111056f2e0bea3b2441b8caeeb1896a9ed4e048b926fce40cb1f1515fe1a4169684a1c1e24d508a193ab21d8ecc5f3b622a8f728c135c041f122770d3caa3bec708c077b4f68f1413c91bd812a5cf6abbdc17be41f7d15eb1e69b3da36fc90b01eeaf6697debe474c904de7494320da689e116344f0c2fdecd581a3f2cbf40f3c5e439529b115d94952b88ea15c4b21a715896b08896021ad6935f0bef294e47505a7fae487c1bd"}, 0x100) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) (async) io_uring_register$auto_IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000001d00)="c2fdf9f3960a948f1fd5814b5dfd5163790f292bf8aa6c2e8f5cebcaa70b2da87f14f897210ac884e6c2402176dd0c7b749b67eb02c4343d15c09e067ffaf9b70cf6506ecb44cbb366beb2700fb2283716d14fad983afffd0752901ddf99bee1336c63ea80c62c864ee02374ad56d211a7c6907b0018e7c81033964cda11eaba38b2efa2b3ecfd7efc1d572eaa3dad757bcd9256b89733de9dfcd6d05bd80638c1bd2905770e55ebd938f31bc4f5053fd26134d22461a93b4290085539372293cc33b72ec61e0bb30a6af915eb121beaee816fb7ab340c486463a75ea116201e3fc48663769e41fbb60f673e61f72372a0ab", 0x1) (async) r9 = syz_genetlink_get_family_id$auto_gtp(&(0x7f0000001e40), 0xffffffffffffffff) sendmsg$auto_GTP_CMD_ECHOREQ(r8, &(0x7f0000001f00)={&(0x7f0000001e00)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001ec0)={&(0x7f0000001e80)={0x30, r9, 0x10, 0x70bd2a, 0x25dfdbfd, {}, [@GTPA_LINK={0x8, 0x1, 0x6}, @GTPA_NET_NS_FD={0x8, 0x7, r6}, @GTPA_TID={0xc, 0x3, 0xb}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x2000c040) getsockopt$auto_SO_BINDTODEVICE(r8, 0x1000, 0x19, &(0x7f0000001f40)='&\'/\\\x00', &(0x7f0000001f80)=0x4) (async) r10 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000002000), r6) sendmsg$auto_NL802154_CMD_DEL_SEC_DEVKEY(r6, &(0x7f00000020c0)={&(0x7f0000001fc0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000002080)={&(0x7f0000002040)={0x14, r10, 0x400, 0x70bd27, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x44004}, 0xc3) (async) fchownat$auto(r6, &(0x7f0000002100)='./file0\x00', r3, r4, 0x8001) (async) r11 = openat$auto_set_tracer_fops_trace(0xffffffffffffff9c, &(0x7f0000002140)='/sys/kernel/debug/tracing/current_tracer\x00', 0x508100, 0x0) r12 = openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000002180)='/dev/snd/pcmC1D0p\x00', 0x20000, 0x0) ioctl$auto___SNDRV_PCM_IOCTL_SYNC_PTR32(r12, 0xc0844123, &(0x7f00000021c0)={0x0, @status={0x2, 0x0, 0x800, 0x0, 0x9, 0xd9, 0x0, 0x7}, @control={0x81, 0x3ff}}) (async) mmap$auto(0x4, 0x7fffffffffffffff, 0x7, 0x14, r11, 0x6) r13 = prctl$auto_PR_SET_MM_START_DATA(0x100, 0x3, r5, 0x2, 0x1) (async) r14 = syz_genetlink_get_family_id$auto_ovs_ct_limit(&(0x7f00000022c0), r8) shmctl$auto_SHM_INFO(0x8, 0xe, &(0x7f0000002380)={{0x7, r3, r4, 0x6, 0xd7d, 0x1, 0x8000}, 0x6, 0x2, 0x80000001, 0x6, @raw=0x1, @inferred=r5, 0x0, 0x0, &(0x7f0000002300)="f9bbb679844514cbd763e1d0f16de6943d55aa083bafa11a6c1886", &(0x7f0000002340)="28514cb190a2092496a15fc79e9826293274926dbde4070afe1865b2c2b58364c0a9458f5888cda2d33ecf0c341f5bd551793d0203f33683371b0c5bbe699e2b"}) sendmsg$auto_OVS_CT_LIMIT_CMD_GET(r13, &(0x7f0000002740)={&(0x7f0000002280)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000002700)={&(0x7f0000002400)={0x2fc, r14, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@OVS_CT_LIMIT_ATTR_ZONE_LIMIT={0x1b1, 0x1, 0x0, 0x1, [@generic="68468f79eb3e518e853a5a7a419004ffab16d1e4267fa22122a00633e9c9b587c64b552eaabd213f755d86b0d54c1a7051e87ff14ce17b81b476b8602ef509d83124f5b23303a7124339ff01734b655d0ea61a95c834a64c01239578905027b0a321ba60329da2f9b9b5b0fd6285a80b45bb3aaf8e6223e0b7d7cdfead7ab0d3b84be43af847585a617ab838682d561a306b7f2bd6127a4820daacade7", @typed={0x6, 0x67, 0x0, 0x0, @str='#\x00'}, @typed={0xc, 0x9e, 0x0, 0x0, @u64=0x6}, @nested={0xfa, 0xe5, 0x0, 0x1, [@typed={0x4, 0xa6}, @generic="50676c27a7dda06766d166825bce6524ff4d7ac3ee437539a70ed51800b7c26afb1f3b677249bda470a7d755954e36f41192cd949cf2e6ff0db2999dfd3ded9901248a32d5bd6372aaf1c3b63bf0f9681b8e07f781927b9adef413bb41ecb5c541e0ba075f34ee7fc7df28e3c690deeef5568607684a28d8afff319d2638317bea86af39be599b2699e10923383b9f2aa265192c04571ae24b09cac7def337052655ba31c0706cf74395c79878599d60f65bc924b4b155cad20b9e7ba1c81cf8486b1326366db1419bac29a46cc2ffc4c459e18b0c7f5f0be5e8c7476f9c9cb32e1d611850e62518103502487b9c", @nested={0x4, 0x139}]}]}, @OVS_CT_LIMIT_ATTR_ZONE_LIMIT={0x58, 0x1, 0x0, 0x1, [@typed={0x10, 0x71, 0x0, 0x0, @binary="e18c309f90551b8d45bad4e8"}, @generic="89ebe63a0671f523fdafab6993960109670832b9c14b7ca6cc4c76ce912cfda98f698ce5439900fc1ffd76403d9b643450d41114bffc84e6fd2b6082", @typed={0x8, 0xd6, 0x0, 0x0, @uid=r15}]}, @OVS_CT_LIMIT_ATTR_ZONE_LIMIT={0xdb, 0x1, 0x0, 0x1, [@generic="4ecff4d0af4d76eaa3428b86e6de39704029ba7416d877571e73b2b51823f12a2df9ab30b6c3617b2b232bc39e92c753d7735c145f083a9e24785c4e25b0c4f4be57250646c7e628ec8a83de53efc64c46b8fdb326ae0db9ce4185bb8bd09d6aea383bc1184574b0805fec719cdc195ece779d9c3ec3f7356583b0612f66816424b007d9bc19929e7004000a909020ca11733cd4f81ac5ac472cb91c25bd854baea3357ebf60eda2a9f575d31f6baeade086190c919889f95681af605691ec2337e0645d782e78a16bc1627a908de5", @typed={0x8, 0x85, 0x0, 0x0, @u32=0x2}]}]}, 0x2fc}, 0x1, 0x0, 0x0, 0x20000010}, 0x4000880) (async) bind$auto(0xffffffffffffffff, &(0x7f0000002780)=@qipcrtr={0x2a, 0x4, 0x7fff}, 0x4) 2.973564188s ago: executing program 4 (id=888): socket(0x2, 0x1, 0x106) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/ieee80211/phy0/power\x00', 0x88000, 0x0) read$auto(r1, &(0x7f0000001200)='\x00', 0x4) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x90}, 0x20000081) socket(0x10, 0x2, 0x4) r2 = socket(0x10, 0x3, 0x6) lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x7ff, 0x0, 0x63, 0x0, 0x0, 0x0, 0x8, 0x200, 0x800000000100002, 0x40000406, 0x2, 0xc, 0x2, 0x11, 0x6, 0x7}) syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0], 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}, 0x1, 0x0, 0x0, 0x2000c000}, 0x4004) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xee46}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) connect$auto(0x3, 0x0, 0x54) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) r3 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f00000001c0), 0x100, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000280)={{0x3, 0x1000, 0x1, 0x1, 0x4}, "654c6dbc7a4d30983899a7e1325b6a29ba1e184410ba9f74e82a3fa6c3ccf1bf"}) ioctl$auto_SNDRV_TIMER_IOCTL_INFO(r3, 0x80e85411, &(0x7f00000002c0)={0x1, 0x17b7, "e5d02ebff1a0f22827060519362f2f88e79b08745cfeeb517c6dc57b7e6cdc606f490e7822d765e620e59b384bb7a4767cef31f639bb12efa4922229c5b4918f", "957bb98f6817aa559f6d1846dba8340fd7ad51f4595586d2c600434e68629cea1e53bc48eae23140d90b519394bf8df11a3924c9253960b4e9ab012fc27ef6ab0965734454d6662aa9e4680705010b14", 0x4, 0x2, "8568cf815dcbb782114b268bb324a302a4842e0b7270da771be7a331349e3b3cb06f60eabb01da08aaee3bafb4fda1fa3d27f74dd006547ab43c2200128038c7"}) 2.703592977s ago: executing program 5 (id=889): mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) rseq$auto(&(0x7f00000001c0)={0xa, 0x20401, 0x5fc, 0x10000006, 0xffffffff, 0x6}, 0x8000, 0x0, 0x6) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/class/firmware/timeout\x00', 0x1a1942, 0x0) write$auto(r0, &(0x7f0000000180)='o\x00d1^\xa1/[\x00\x00\x00\x00\x00\xdc\xbf\x05V\x12\x00\x00\x00\x00\x00\x00\xf3\xa8)', 0x4) r1 = openat$auto_check_wx_fops_(0xffffffffffffff9c, &(0x7f0000000380), 0x400, 0x0) pread64$auto(r1, &(0x7f00000003c0)='@\x00', 0x9, 0x1) r2 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/dsp\x00', 0x0, 0x0) read$auto(r2, 0x0, 0x100) open(&(0x7f0000000100)='.\x00', 0x0, 0x1) openat$auto_vhci_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = socket(0x11, 0xa, 0x9) close_range$auto(0x2, 0x8, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x8800, 0x0) r4 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x787806, 0x0) close_range$auto(0x2, 0x8, 0x0) r5 = socket(0x825bd3580f837f9c, 0x1, 0xdde4) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0xc) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYRES32=0x0, @ANYRES8=r3, @ANYRES8=r4], 0x18}, 0x1, 0x0, 0x0, 0x60008004}, 0x2000c082) write$auto(r5, &(0x7f0000000000)='-\x00', 0xfdef) mmap$auto(0x0, 0x2000000000a, 0xffb, 0x12, 0x3, 0x0) r6 = openat$auto_generic(0xffffffffffffff9c, &(0x7f0000000040)='/proc/kmsg\x00', 0x80900, 0x0) r7 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x20282, 0x0) ioctl$auto_UI_DEV_CREATE(r7, 0x5501, 0x0) read$auto_proc_single_file_operations_base(r6, &(0x7f0000000500)=""/214, 0xd6) acct$auto(&(0x7f0000000000)='/dev/dsp\x00') socket$nl_generic(0x10, 0x3, 0x10) 1.643773242s ago: executing program 6 (id=890): close_range$auto(0xffffffffffffffff, 0x8, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x18, 0x2, 0x8000) rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x0, 0x6, 0xffffffff, 0x6}, 0x81, 0x0, 0x6) r0 = openat$auto_regulator_summary_fops_(0xffffffffffffff9c, &(0x7f0000001680), 0x40, 0x0) read$auto_regulator_summary_fops_(r0, &(0x7f00000016c0)=""/213, 0xd5) r1 = openat$auto_autofs_root_operations_autofs_i(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/ieee80211/phy11/netdev:wlan1/stations\x00', 0x0, 0x0) ioctl$auto_AUTOFS_IOC_EXPIRE_MULTI(r1, 0x40049366, &(0x7f0000000100)=0x8) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x402, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) r3 = socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) ioperm$auto(0x90d5, 0xc, 0x2) r4 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(r2, 0xffffffffffffffff, 0x8) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_TIPC_NL_PEER_REMOVE(r5, &(0x7f00000110c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f000000e000)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010026bd7000fedbdf251400000004000780"], 0x18}, 0x1, 0x0, 0x0, 0x104}, 0x40) syz_genetlink_get_family_id$auto_nl80211(0x0, r4) r7 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/card0/oss_mixer\x00', 0x121002, 0x0) socket(0x10, 0x2, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000140)='/dev/bus/usb/011/001\x00', 0x0, 0x0) kexec_load$auto(0x7ceb, 0x1, &(0x7f00000000c0)={@buf=&(0x7f0000000000)="e47d84feaa8d27", 0x7, 0x0, 0xffffffffffffffff}, 0xff) ioctl$auto_USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000000180)={0x2, 0x80, 0x10001, 0x5, &(0x7f0000000000), 0x2f, 0x6, 0x2, @stream_id=0x2000002, 0x7, 0x476, 0x0, [{0x5, 0x8, 0x8}, {0x4, 0x4, 0x6}, {0x8, 0x80, 0x3}, {0x4, 0x8b14, 0xfc}, {0x4, 0x1, 0x80}, {0x3, 0x3, 0x9}]}) mmap$auto(0x0, 0x4020008, 0x20000000df, 0x10, 0x401, 0x8002) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) getsockopt$auto(0x3, 0x200000000001, 0x19, 0x0, 0x0) write$auto(r7, 0x0, 0x100) close_range$auto(0x2, 0x8, 0x0) write$auto(0xffffffffffffffff, &(0x7f0000000080)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x4a) 1.244481554s ago: executing program 2 (id=891): r0 = gettid() (async) setresuid$auto(0x8, 0x0, 0x4) (async) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) (async) socket(0xa, 0x2, 0x73) (async) setpriority$auto(0x2, 0x8, 0x8) (async) lseek$auto(0x3, 0x8, 0x3) kexec_load$auto(0x5, 0x2, 0x0, 0x4) (async) kill$auto(r0, 0x11) io_uring_setup$auto(0x59, 0x0) (async) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x800, 0x0) (async) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x2000, 0x0) (async) r2 = clone3$auto(0x0, 0x6) (async) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/mtrr\x00', 0xa2102, 0x0) write$auto(r3, 0x0, 0x7ef) (async) prctl$auto(0x3e, 0x1, r2, 0x1, 0x0) (async) openat$auto_o2hb_debug_fops_heartbeat(0xffffffffffffff9c, &(0x7f0000001d80)='/sys/kernel/debug/o2hb/failed_regions\x00', 0x200, 0x0) (async) madvise$auto(0x2, 0x7fffffffffff0005, 0x219) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r4, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) (async) close_range$auto(0x0, 0xfffffffffffff001, 0x2) (async) socket(0x11, 0x80003, 0x300) socket(0x29, 0x5, 0x0) open(&(0x7f0000000040)='./cgroup\x00', 0x80, 0xb5d1af1605322de0) (async) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda1\x00', 0x0, 0x0) (async) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff011) read$auto(r1, 0x0, 0x7) 1.053857014s ago: executing program 5 (id=892): close_range$auto(0xffffffffffffffff, 0x8, 0xffffffff) close_range$auto(0x0, 0xfffffffffffff001, 0x2) (async) socket(0x18, 0x4, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) memfd_create$auto(&(0x7f0000000000)='\xc4--:\xdd:,./-${\x00', 0x4) (rerun: 32) memfd_secret$auto(0x0) (async) ftruncate$auto(0x3, 0x700) (async, rerun: 64) finit_module$auto(0x3, 0xfffffffffffffffe, 0x400000000004) (async, rerun: 64) socket(0xa, 0x2, 0x0) (async) socket(0xa, 0x801, 0x106) bind$auto(0x3, &(0x7f0000000040)=@generic={0xa, "00feffffffffffffffffff00"}, 0x6c) r0 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptyv1\x00', 0x2100, 0x0) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$auto_PTRACE_SETREGSET(0x4205, r1, 0xc421, 0x9) (async, rerun: 64) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) (async, rerun: 64) socket(0x2, 0x1, 0x0) setsockopt$auto(0x3, 0x0, 0x4, 0x0, 0x28) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) (async) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @empty}, 0x51) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) (async) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0x8000ffff}, 0x4) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) read$auto(r0, 0x0, 0x1f40) (async) openat$auto_lowpan_control_fops_6lowpan(0xffffffffffffff9c, &(0x7f00000000c0), 0x2a00, 0x0) (async) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/fail-nth\x00', 0x16000, 0x0) writev$auto(r2, &(0x7f0000000200)={0x0, 0x9}, 0x3) (async) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000001680), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$auto_OVS_METER_CMD_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="e05fbef2f3e47088fa5373a128000000", @ANYRES16=0x0, @ANYBLOB="00042abd7000fcdbdf25040000000c00050006000000000000000400060004000200"], 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) 839.156833ms ago: executing program 4 (id=893): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0) fstat$auto(r0, 0x0) io_uring_setup$auto(0x23, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$auto(r1, 0x10e, 0x1, 0x0, 0xe) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000040), 0xffffffffffffffff) r4 = setfsuid$auto(0xffffffffffffffff) sendmsg$auto_MACSEC_CMD_GET_TXSC(r2, &(0x7f00000006c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000680)={&(0x7f00000000c0)=ANY=[@ANYBLOB="84050000", @ANYRES16=r3, @ANYBLOB="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", @ANYRES32=r4, @ANYBLOB="120017002f6465762f7074732f70746d78000000c700028010004b800400908005006600000000001c00548004000d800c00ee0004000000000000000400228004008c8011002f00273a2e5b2b2a5b282d2324c2000000009f5a8efbb46170fa7e3c02e22a6b5f6ff3154fc2b16698e5a287fdd23d2fa49514870d862a9d59d9d815043157cb3b557d6e33d884cfd608345a342a09db48101aee64145e9454856f451b3f3cbcab844d42d1395631e7442e6526ebfa1a25c23929d0a31d4b3e61a73390571f4cc04f7f256150f18042b814e5985a3018886b6ff21c00fe010980400189800400a180040017803d57885a7a25f64ffae5375c6557888781f7eb994c3a79d88bd91cda85529566b02ba0b5afa5634adc11d9c1ff8f04002d80eba81bb1af48ce901361856d67f8c30f54563e9a104002cdb9db95492d24311caf523252506d427d72f3bb67a52d4b2557c26859c01ee04902ba957723dce252673ae993755b62323363f0d14da2cdf3c59637e8f880cb08eababb4af5c18a50372ec6e5d3c00a0c2d2f77537d244cd90196e76fb00765c737f4795dff29d647c087e0542fec3cdfb839861cd4ceb43e2c4f123599cd5460ceab93c6772d2d203133d7859abd1d4492467f95ee1eb8d3ce5488d994c635828fb5cb82699c7785d303cf8f5bfd22f54818ca4cdd4e25bf5fb774f2785e528ac4b5ba569ae64cbc40c18e8222dd91b4eb7c80f77012b7d5eb2e80f3d95bc59f63e772edab090400e980354ce6f56c9afca3da1167efa1b680e28ecbebf02284649a5cd920896f88eed46adb1e850b95d8ed7b129392aabe4b33bb395f0b04547c9d6e1aebce8f63db0173ea88c0993ecd364d3285143b58724417485c80d47df31917ae957e42916312677922da35c8168fcd8a064e3185bdd47fd3ea52db73c4372b09c91fb18f6e2c620edd266d1ce175ccc194a3ff6b0d1704641766f1998fb54c19c69ffcfc0428658d0cafa3986655ad34e3aa4db20d583e9aa319d182e006ddf80000"], 0x584}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) r5 = socket(0xa, 0x5, 0x0) ioctl$auto(r5, 0x8941, 0x8) 611.032518ms ago: executing program 5 (id=894): mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2b, 0x1, 0x0) sendmmsg$auto(r0, &(0x7f0000000000)={{0x0, 0xc5, 0x0, 0xffffffffffffffff, 0x0, 0x1000001f, 0xfffffffd}, 0x1}, 0x5, 0x7) ioctl$auto_RTC_IRQP_READ(0xffffffffffffffff, 0x8008700b, 0x0) setsockopt$auto(0x3, 0x1, 0x21, 0x0, 0x9) inotify_init1$auto(0x2) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), 0xffffffffffffffff) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x3, 0xdf, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x3, 0x7) writev$auto(0x0, 0x0, 0x40000400003) socket(0xa, 0x3, 0xff) openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000100), 0x159344, 0x0) ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, 0x0) mmap$auto(0x0, 0x800000009, 0xdf, 0x1000000eb1, 0xffffffffffffffff, 0x2000000008000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x654b82, 0x0) r2 = socket(0x18, 0x80000, 0x0) connect$auto(r2, 0x0, 0x1e) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/net/nr11/tx_queue_len\x00', 0x2000, 0x0) read$auto(r3, 0x0, 0x20) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) 608.46202ms ago: executing program 6 (id=895): close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) (async, rerun: 64) r1 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) (async, rerun: 64) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) ioctl$auto(r1, 0x400454ca, 0x38) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/net/sit0/ifindex\x00', 0x80000, 0x0) (async) socket(0x10, 0x2, 0x0) (async, rerun: 64) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x101840, 0x0) (async, rerun: 64) socketpair$auto(0x1e, 0x8, 0x8000000000000000, 0x0) (async, rerun: 32) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/virtual/block/loop5/hidden\x00', 0xa0140, 0x0) (async, rerun: 32) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) (async, rerun: 32) ioctl$auto(0x4000000000000c8, 0x800454cf, 0x3) (async, rerun: 32) r3 = socket(0x10, 0x2, 0x6) (async) r4 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="562129d991527bfa2e2aa66a0b", @ANYRES16=r4, @ANYBLOB="010028bd7000fcdbdf25110000002c001e8028005e80080046800400f7801c0010801800278014003f0000000000000000000000000000000001"], 0x40}, 0x1, 0x0, 0x0, 0x20008000}, 0x8044) r5 = socket(0x11, 0x80003, 0x300) setsockopt$auto(r5, 0x107, 0x12, 0x0, 0x4) (async) r6 = socket(0x11, 0x80003, 0x300) (async) mmap$auto(0x3, 0x8000008001, 0x62, 0x10, r5, 0x7) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mmap$auto(0x0, 0x9, 0xdf, 0xeb1, 0x1, 0x8000) move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) (async, rerun: 64) mmap$auto(0x0, 0x20009, 0xe3, 0x100000eb2, 0x40000000000a1, 0x8000) (rerun: 64) setsockopt$auto(r6, 0x107, 0x12, 0x0, 0x4) read$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f0000000040)=""/212, 0xd4) (async) write$auto(0x3, 0x0, 0xfffffdf2) (async, rerun: 32) ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) (async, rerun: 32) ioctl$auto(0x3, 0xae60, 0x10000000000402) 0s ago: executing program 5 (id=896): waitid$auto_P_ALL(0x0, 0xffffffff, &(0x7f0000000240)={@siginfo_0_0={0x2, 0xfffffffb, 0x3, @_sigsys={&(0x7f00000009c0)="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", 0x2, 0x1}}}, 0x1, &(0x7f00000002c0)={{0x0, 0x80000000}, {0x6, 0x9}, 0x40, 0x1, 0x2, 0x9, 0xe, 0x401, 0x0, 0xe31, 0x1, 0x9, 0x3, 0x3fd, 0x4, 0x6}) r0 = getpid() r1 = pidfd_open$auto(r0, 0x0) mmap$auto(0x0, 0x400008, 0xe000, 0x9b72, 0xffffffffffffffff, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x4008000) ioctl$auto_SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2, 0x0) r2 = socket(0x11, 0x3, 0x2) syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000040), 0xffffffffffffffff) setrlimit$auto(0x0, &(0x7f0000000000)={0x1, 0xfb3}) sigaltstack$auto(&(0x7f0000000180)={0x0, 0x80000001, 0x40b4}, 0x0) close_range$auto(r1, r2, 0x2) semctl$auto(0x2, 0x9, 0x939, 0x6) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3) openat$auto_ima_ascii_measurements_ops_ima_fs(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) syz_clone3(&(0x7f0000000400)={0x1045100, 0x0, 0x0, 0x0, {0x2f}, 0x0, 0x0, 0x0, 0x0}, 0x58) r3 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000980)='/proc/self/pagemap\x00', 0x2, 0x0) read$auto(r3, 0x0, 0x39b8) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/lru_gen_full\x00', 0xc0200, 0x0) prctl$auto(0x3e, 0x2, 0x0, 0x10, 0x4) syz_clone(0x40000, &(0x7f0000000380)="f2c377fb2006ea44d5f13494c4b3df1983ae88bd3cd27d71c28b8aba95c7801aaac4e2d9707f006680b53d566ad54ae3c62587dea4e7f5d65100858ab97dd6f921626998faf816d68b72429c07b7ee5bfbd71053232b60066ab60413558ca6210a8f710f1fb3cc9566f9a808b8de12e02d02abf073a429d0", 0x78, &(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)="aaf632fa07f5dc90c66bbab777e40e006f0e40dcfb83a58951d8a94d4c16580fb587fd69de28a9c4f771af9c349c85a17bebe1d1466d3f28f5a6f66c6d5c4d36bb7ec5a8a2f11262d8db4401cbd70b53c8587230b5dae947acd925bdaa365d576532096b35231392035f28d620e1500b2553b4e671d98ec82f8866a91c") r4 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000240)='/dev/bus/usb/002/001\x00', 0x40101, 0x0) ioctl$auto_USBDEVFS_CONTROL(r4, 0xc0185500, &(0x7f00000000c0)={0xa1, 0x0, 0x3, 0x0, 0xfff8, 0xfffffffe, 0x0}) r5 = prctl$auto_PR_SET_SECCOMP(0x16, 0x1, 0x50000, 0x9, 0x7) syz_clone3(&(0x7f0000000580)={0x320020000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000540)=0x0, {0x5}, &(0x7f0000000600)=""/148, 0x94, &(0x7f0000000180)=""/152, &(0x7f0000000100)=[r0], 0x1, {r5}}, 0x58) lseek$auto(0x3, 0x7fffffffffffffff, 0x1) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x3) prctl$auto(0x1000000003b, 0x10000000000d, r6, 0x4, 0x7) kernel console output (not intermixed with test programs): 1 R08: 0000000000000000 R09: 0000000000000000 [ 105.266205][ T5950] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 105.266223][ T5950] R13: 00007fc7ef1e6038 R14: 00007fc7ef1e5fa0 R15: 00007fff96465588 [ 105.266267][ T5950] [ 105.266434][ T5950] socket: no more sockets [ 105.277109][ T5152] Bluetooth: hci0: command tx timeout [ 105.490534][ T5152] Bluetooth: hci2: command tx timeout [ 105.496243][ T5152] Bluetooth: hci3: command tx timeout [ 105.501649][ T5152] Bluetooth: hci1: command tx timeout [ 106.186590][ T5943] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 106.531740][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 106.542138][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 106.557609][ T5964] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 106.823420][ T5969] sp0: Synchronizing with TNC [ 107.043450][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 107.053238][ T0] NOHZ tick-stop error: local softirq work is pending, handler #0a!!! [ 107.081331][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 107.090011][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 107.403328][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 107.411672][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 107.493493][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 107.502042][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 110.110729][ T6004] process 'syz.1.18' launched ':,' with NULL argv: empty string added [ 110.238098][ T6004] FAULT_INJECTION: forcing a failure. [ 110.238098][ T6004] name failslab, interval 1, probability 0, space 0, times 0 [ 110.255577][ T6006] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input6 [ 110.261554][ T6003] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(4) [ 110.293696][ T6004] CPU: 1 UID: 0 PID: 6004 Comm: syz.1.18 Not tainted syzkaller #0 PREEMPT(full) [ 110.293743][ T6004] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 110.293763][ T6004] Call Trace: [ 110.293774][ T6004] [ 110.293787][ T6004] dump_stack_lvl+0x16c/0x1f0 [ 110.293837][ T6004] should_fail_ex+0x512/0x640 [ 110.293889][ T6004] ? __kmalloc_node_track_caller_noprof+0xcb/0x8a0 [ 110.293939][ T6004] should_failslab+0xc2/0x120 [ 110.293985][ T6004] __kmalloc_node_track_caller_noprof+0xde/0x8a0 [ 110.294029][ T6004] ? string+0x2c4/0x4f0 [ 110.294057][ T6004] ? kstrdup_const+0x63/0x80 [ 110.294102][ T6004] ? kstrdup+0x53/0x100 [ 110.294135][ T6004] kstrdup+0x53/0x100 [ 110.294174][ T6004] kstrdup_const+0x63/0x80 [ 110.294210][ T6004] __kernfs_new_node+0x9b/0x8e0 [ 110.294260][ T6004] ? __pfx___kernfs_new_node+0x10/0x10 [ 110.294330][ T6004] ? find_held_lock+0x2b/0x80 [ 110.294367][ T6004] ? kernfs_root+0xee/0x2a0 [ 110.294420][ T6004] kernfs_new_node+0x13c/0x1e0 [ 110.294476][ T6004] __kernfs_create_file+0x53/0x350 [ 110.294518][ T6004] cgroup_addrm_files+0x546/0xc20 [ 110.294599][ T6004] ? __pfx_cgroup_addrm_files+0x10/0x10 [ 110.294674][ T6004] ? idr_replace+0xfa/0x170 [ 110.294721][ T6004] css_populate_dir+0x169/0x580 [ 110.294768][ T6004] cgroup_apply_control_enable+0x3f3/0xbb0 [ 110.294840][ T6004] cgroup_mkdir+0x5e0/0x1310 [ 110.294878][ T6004] ? __pfx_cgroup_mkdir+0x10/0x10 [ 110.294912][ T6004] kernfs_iop_mkdir+0x111/0x190 [ 110.294959][ T6004] ? bpf_lsm_inode_mkdir+0x9/0x10 [ 110.294998][ T6004] vfs_mkdir+0x593/0x8c0 [ 110.295055][ T6004] do_mkdirat+0x304/0x3e0 [ 110.295097][ T6004] ? __pfx_do_mkdirat+0x10/0x10 [ 110.295140][ T6004] ? getname_flags.part.0+0x1c5/0x550 [ 110.295196][ T6004] __x64_sys_mkdir+0xef/0x140 [ 110.295237][ T6004] do_syscall_64+0xcd/0xfa0 [ 110.295281][ T6004] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.295313][ T6004] RIP: 0033:0x7f177658f749 [ 110.295342][ T6004] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 110.295373][ T6004] RSP: 002b:00007f177735f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 110.295403][ T6004] RAX: ffffffffffffffda RBX: 00007f17767e5fa0 RCX: 00007f177658f749 [ 110.295424][ T6004] RDX: 0000000000000000 RSI: 00000000000008cd RDI: 0000200000000000 [ 110.295443][ T6004] RBP: 00007f1776613f91 R08: 0000000000000000 R09: 0000000000000000 [ 110.295461][ T6004] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 110.295479][ T6004] R13: 00007f17767e6038 R14: 00007f17767e5fa0 R15: 00007ffce99a3118 [ 110.295540][ T6004] [ 110.295564][ T6004] cgroup: cgroup_addrm_files: failed to add stat, err=-12 syzkaller syzkaller login: [ 111.353448][ T6011] binder: BINDER_SET_CONTEXT_MGR already set [ 111.359608][ T6011] binder: 6010:6011 ioctl 4018620d 9 returned -16 [ 111.376181][ T6020] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 112.725495][ T6036] FAULT_INJECTION: forcing a failure. [ 112.725495][ T6036] name failslab, interval 1, probability 0, space 0, times 0 [ 112.769685][ T6036] CPU: 1 UID: 0 PID: 6036 Comm: syz.0.24 Not tainted syzkaller #0 PREEMPT(full) [ 112.769718][ T6036] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 112.769732][ T6036] Call Trace: [ 112.769739][ T6036] [ 112.769748][ T6036] dump_stack_lvl+0x16c/0x1f0 [ 112.769782][ T6036] should_fail_ex+0x512/0x640 [ 112.769819][ T6036] ? __kmalloc_cache_noprof+0x5f/0x780 [ 112.769844][ T6036] should_failslab+0xc2/0x120 [ 112.769879][ T6036] __kmalloc_cache_noprof+0x72/0x780 [ 112.769902][ T6036] ? fuse_dev_alloc+0x48/0x280 [ 112.769933][ T6036] ? lockdep_init_map_type+0x5c/0x280 [ 112.769971][ T6036] ? fuse_dev_alloc+0x48/0x280 [ 112.770000][ T6036] fuse_dev_alloc+0x48/0x280 [ 112.770034][ T6036] fuse_dev_alloc_install+0x13/0x40 [ 112.770070][ T6036] cuse_channel_open+0x100/0x7f0 [ 112.770100][ T6036] ? __pfx_cuse_channel_open+0x10/0x10 [ 112.770131][ T6036] misc_open+0x26d/0x450 [ 112.770170][ T6036] ? __pfx_misc_open+0x10/0x10 [ 112.770206][ T6036] chrdev_open+0x234/0x6a0 [ 112.770236][ T6036] ? __pfx_chrdev_open+0x10/0x10 [ 112.770267][ T6036] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 112.770300][ T6036] do_dentry_open+0x982/0x1530 [ 112.770336][ T6036] ? __pfx_chrdev_open+0x10/0x10 [ 112.770371][ T6036] vfs_open+0x82/0x3f0 [ 112.770409][ T6036] path_openat+0x1de4/0x2cb0 [ 112.770446][ T6036] ? __pfx_path_openat+0x10/0x10 [ 112.770474][ T6036] ? __lock_acquire+0xb8a/0x1c90 [ 112.770510][ T6036] do_filp_open+0x20b/0x470 [ 112.770536][ T6036] ? __pfx_do_filp_open+0x10/0x10 [ 112.770585][ T6036] ? alloc_fd+0x471/0x7d0 [ 112.770617][ T6036] do_sys_openat2+0x11b/0x1d0 [ 112.770657][ T6036] ? __pfx_do_sys_openat2+0x10/0x10 [ 112.770704][ T6036] __x64_sys_openat+0x174/0x210 [ 112.770740][ T6036] ? __pfx___x64_sys_openat+0x10/0x10 [ 112.770789][ T6036] do_syscall_64+0xcd/0xfa0 [ 112.770821][ T6036] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.770845][ T6036] RIP: 0033:0x7fc7eef8f749 [ 112.770863][ T6036] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 112.770885][ T6036] RSP: 002b:00007fc7efedf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 112.770907][ T6036] RAX: ffffffffffffffda RBX: 00007fc7ef1e5fa0 RCX: 00007fc7eef8f749 [ 112.770922][ T6036] RDX: 0000000000181041 RSI: 0000200000000140 RDI: ffffffffffffff9c [ 112.770937][ T6036] RBP: 00007fc7ef013f91 R08: 0000000000000000 R09: 0000000000000000 [ 112.770951][ T6036] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 112.770964][ T6036] R13: 00007fc7ef1e6038 R14: 00007fc7ef1e5fa0 R15: 00007fff96465588 [ 112.770997][ T6036] [ 113.572696][ T6038] netlink: 4 bytes leftover after parsing attributes in process `syz.1.25'. [ 113.658379][ T6038] FAULT_INJECTION: forcing a failure. [ 113.658379][ T6038] name failslab, interval 1, probability 0, space 0, times 0 [ 113.776795][ T6038] CPU: 0 UID: 0 PID: 6038 Comm: syz.1.25 Not tainted syzkaller #0 PREEMPT(full) [ 113.776827][ T6038] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 113.776841][ T6038] Call Trace: [ 113.776849][ T6038] [ 113.776858][ T6038] dump_stack_lvl+0x16c/0x1f0 [ 113.776891][ T6038] should_fail_ex+0x512/0x640 [ 113.776928][ T6038] ? __kvmalloc_node_noprof+0x12e/0x9c0 [ 113.776961][ T6038] should_failslab+0xc2/0x120 [ 113.776996][ T6038] __kvmalloc_node_noprof+0x141/0x9c0 [ 113.777023][ T6038] ? __pfx_do_setup+0x10/0x10 [ 113.777052][ T6038] ? do_setup+0x2bd/0x3a0 [ 113.777082][ T6038] ? alloc_netdev_mqs+0xaef/0x1550 [ 113.777115][ T6038] ? iterate_supers_type+0x266/0x280 [ 113.777143][ T6038] ? alloc_netdev_mqs+0xaef/0x1550 [ 113.777165][ T6038] alloc_netdev_mqs+0xaef/0x1550 [ 113.777197][ T6038] internal_dev_create+0x8a/0x520 [ 113.777241][ T6038] ovs_vport_add+0x147/0x4d0 [ 113.777273][ T6038] new_vport+0x16/0x1d0 [ 113.777297][ T6038] ovs_dp_cmd_new+0x6ba/0xe60 [ 113.777331][ T6038] ? __pfx_ovs_dp_cmd_new+0x10/0x10 [ 113.777363][ T6038] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 113.777397][ T6038] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 113.777436][ T6038] genl_family_rcv_msg_doit+0x209/0x2f0 [ 113.777469][ T6038] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 113.777510][ T6038] ? bpf_lsm_capable+0x9/0x10 [ 113.777542][ T6038] ? security_capable+0x7e/0x260 [ 113.777577][ T6038] ? ns_capable+0xd7/0x110 [ 113.777611][ T6038] genl_rcv_msg+0x55c/0x800 [ 113.777644][ T6038] ? __pfx_genl_rcv_msg+0x10/0x10 [ 113.777676][ T6038] ? __pfx_ovs_dp_cmd_new+0x10/0x10 [ 113.777712][ T6038] netlink_rcv_skb+0x158/0x420 [ 113.777738][ T6038] ? __pfx_genl_rcv_msg+0x10/0x10 [ 113.777770][ T6038] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 113.777808][ T6038] ? netlink_deliver_tap+0x1ae/0xd30 [ 113.777837][ T6038] genl_rcv+0x28/0x40 [ 113.777863][ T6038] netlink_unicast+0x5aa/0x870 [ 113.777893][ T6038] ? __pfx_netlink_unicast+0x10/0x10 [ 113.777931][ T6038] netlink_sendmsg+0x8c8/0xdd0 [ 113.777962][ T6038] ? __pfx_netlink_sendmsg+0x10/0x10 [ 113.778008][ T6038] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 113.778061][ T6038] ____sys_sendmsg+0xa98/0xc70 [ 113.778096][ T6038] ? copy_msghdr_from_user+0x10a/0x160 [ 113.778120][ T6038] ? __pfx_____sys_sendmsg+0x10/0x10 [ 113.778166][ T6038] ___sys_sendmsg+0x134/0x1d0 [ 113.778191][ T6038] ? __pfx____sys_sendmsg+0x10/0x10 [ 113.778213][ T6038] ? __lock_acquire+0x622/0x1c90 [ 113.778291][ T6038] __sys_sendmsg+0x16d/0x220 [ 113.778316][ T6038] ? __pfx___sys_sendmsg+0x10/0x10 [ 113.778339][ T6038] ? __x64_sys_futex+0x1e0/0x4c0 [ 113.778392][ T6038] do_syscall_64+0xcd/0xfa0 [ 113.778424][ T6038] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.778448][ T6038] RIP: 0033:0x7f177658f749 [ 113.778467][ T6038] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 113.778489][ T6038] RSP: 002b:00007f177735f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 113.778511][ T6038] RAX: ffffffffffffffda RBX: 00007f17767e5fa0 RCX: 00007f177658f749 [ 113.778526][ T6038] RDX: 0000000002000000 RSI: 0000200000000080 RDI: 0000000000000009 [ 113.778540][ T6038] RBP: 00007f1776613f91 R08: 0000000000000000 R09: 0000000000000000 [ 113.778553][ T6038] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 113.778566][ T6038] R13: 00007f17767e6038 R14: 00007f17767e5fa0 R15: 00007ffce99a3118 [ 113.778598][ T6038] [ 115.770309][ T6071] hub 8-0:1.0: USB hub found [ 115.794133][ T6071] hub 8-0:1.0: 1 port detected [ 115.825457][ T6075] random: crng reseeded on system resumption [ 115.960265][ T6075] Zero length message leads to an empty skb [ 116.629672][ T6081] Invalid ELF header magic: != ELF [ 117.347519][ T6097] netlink: 28 bytes leftover after parsing attributes in process `syz.3.41'. [ 117.681438][ T6089] delete_channel: no stack [ 117.749738][ T6097] bond0: (slave bond_slave_0): Releasing backup interface [ 118.023469][ T6107] Invalid ELF header magic: != ELF [ 120.463963][ T6130] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 120.671988][ T6135] netlink: 25 bytes leftover after parsing attributes in process `syz.2.50'. [ 121.437664][ T6143] IPVS: length: 131 != 8 [ 121.447225][ T6143] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input7 [ 121.905276][ T6152] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 122.406178][ T6162] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 123.172477][ T6178] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 125.641420][ T6209] zswap: compressor not available [ 126.594127][ T6235] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input8 [ 129.307499][ T6259] openvswitch: netlink: ufid size 17 bytes exceeds the range (1, 16) [ 129.332991][ T6259] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 130.732119][ T6282] __vm_enough_memory: pid: 6282, comm: syz.2.85, bytes: 8589938688 not enough memory for the allocation [ 131.691061][ T6292] futex_wake_op: syz.2.87 tries to shift op by -2048; fix this program [ 131.694770][ T6303] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 131.760216][ T6296] size and base must be multiples of 4 kiB [ 131.773241][ T6296] CPU: 0 UID: 0 PID: 6296 Comm: syz.2.87 Not tainted syzkaller #0 PREEMPT(full) [ 131.773285][ T6296] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 131.773305][ T6296] Call Trace: [ 131.773316][ T6296] [ 131.773328][ T6296] dump_stack_lvl+0x16c/0x1f0 [ 131.773375][ T6296] mtrr_add+0xdf/0x110 [ 131.773421][ T6296] mtrr_ioctl+0x7ef/0xcf0 [ 131.773469][ T6296] ? __pfx_mtrr_ioctl+0x10/0x10 [ 131.773534][ T6296] ? find_held_lock+0x2b/0x80 [ 131.773581][ T6296] ? __fget_files+0x20e/0x3c0 [ 131.773616][ T6296] ? __pfx_mtrr_ioctl+0x10/0x10 [ 131.773661][ T6296] proc_reg_unlocked_ioctl+0x229/0x320 [ 131.773707][ T6296] ? __pfx_proc_reg_unlocked_ioctl+0x10/0x10 [ 131.773759][ T6296] __x64_sys_ioctl+0x18e/0x210 [ 131.773812][ T6296] do_syscall_64+0xcd/0xfa0 [ 131.773857][ T6296] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.773890][ T6296] RIP: 0033:0x7f242358f749 [ 131.773932][ T6296] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 131.773963][ T6296] RSP: 002b:00007f2424344038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 131.773994][ T6296] RAX: ffffffffffffffda RBX: 00007f24237e6090 RCX: 00007f242358f749 [ 131.774015][ T6296] RDX: 0000000000000000 RSI: 0000000040104d01 RDI: 0000000000000000 [ 131.774034][ T6296] RBP: 00007f2423613f91 R08: 0000000000000000 R09: 0000000000000000 [ 131.774052][ T6296] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 131.774070][ T6296] R13: 00007f24237e6128 R14: 00007f24237e6090 R15: 00007fff8cc06038 [ 131.774114][ T6296] [ 134.684269][ T6349] netlink: 8 bytes leftover after parsing attributes in process `syz.1.101'. [ 136.819294][ T6376] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 139.184904][ T6414] vhci_hcd: USB_PORT_FEAT_BH_PORT_RESET req not supported for USB 2.0 roothub [ 141.342102][ T6443] futex_wake_op: syz.0.123 tries to shift op by -2048; fix this program [ 141.368062][ T6443] futex_wake_op: syz.0.123 tries to shift op by -2048; fix this program [ 141.397699][ T6444] 0x000000000001-0x000000020000 : "" [ 141.451639][ T6444] ftl_cs: FTL header corrupt! [ 142.275750][ T6428] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 143.233309][ T6469] netlink: 330 bytes leftover after parsing attributes in process `syz.3.127'. [ 143.267200][ T6469] : renamed from gre0 (while UP) [ 143.289449][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 143.297546][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 143.405151][ T6469] netlink: 330 bytes leftover after parsing attributes in process `syz.3.127'. [ 143.433562][ T6472] db_root: not a directory: /dev/audio1 [ 143.443592][ T30] audit: type=1800 audit(1763929194.207:2): pid=6472 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.128" name="dbroot" dev="configfs" ino=11369 res=0 errno=0 [ 143.527660][ T6440] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 144.111034][ T6487] FAULT_INJECTION: forcing a failure. [ 144.111034][ T6487] name failslab, interval 1, probability 0, space 0, times 0 [ 144.152108][ T6487] CPU: 0 UID: 0 PID: 6487 Comm: syz.0.131 Not tainted syzkaller #0 PREEMPT(full) [ 144.152140][ T6487] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 144.152154][ T6487] Call Trace: [ 144.152161][ T6487] [ 144.152170][ T6487] dump_stack_lvl+0x16c/0x1f0 [ 144.152203][ T6487] should_fail_ex+0x512/0x640 [ 144.152239][ T6487] ? kmem_cache_alloc_lru_noprof+0x66/0x6e0 [ 144.152267][ T6487] should_failslab+0xc2/0x120 [ 144.152299][ T6487] kmem_cache_alloc_lru_noprof+0x79/0x6e0 [ 144.152323][ T6487] ? _raw_spin_unlock+0x28/0x50 [ 144.152354][ T6487] ? __d_alloc+0x32/0xae0 [ 144.152393][ T6487] ? __d_alloc+0x32/0xae0 [ 144.152417][ T6487] __d_alloc+0x32/0xae0 [ 144.152447][ T6487] d_alloc_parallel+0x111/0x1510 [ 144.152490][ T6487] ? find_held_lock+0x2b/0x80 [ 144.152516][ T6487] ? __pfx_d_alloc_parallel+0x10/0x10 [ 144.152555][ T6487] ? __d_lookup+0x266/0x4a0 [ 144.152598][ T6487] lookup_open.isra.0+0x665/0x1580 [ 144.152643][ T6487] ? __pfx_lookup_open.isra.0+0x10/0x10 [ 144.152698][ T6487] ? mnt_get_write_access+0x1e9/0x2f0 [ 144.152735][ T6487] path_openat+0x893/0x2cb0 [ 144.152787][ T6487] ? __pfx_path_openat+0x10/0x10 [ 144.152825][ T6487] ? __lock_acquire+0xb8a/0x1c90 [ 144.152874][ T6487] do_filp_open+0x20b/0x470 [ 144.152910][ T6487] ? __pfx_do_filp_open+0x10/0x10 [ 144.152963][ T6487] ? __pfx_kfree_link+0x10/0x10 [ 144.153021][ T6487] ? alloc_fd+0x471/0x7d0 [ 144.153065][ T6487] do_sys_openat2+0x11b/0x1d0 [ 144.153112][ T6487] ? __pfx_do_sys_openat2+0x10/0x10 [ 144.153157][ T6487] ? find_held_lock+0x2b/0x80 [ 144.153191][ T6487] ? handle_mm_fault+0x2ab/0xd10 [ 144.153251][ T6487] __x64_sys_openat+0x174/0x210 [ 144.153299][ T6487] ? __pfx___x64_sys_openat+0x10/0x10 [ 144.153373][ T6487] do_syscall_64+0xcd/0xfa0 [ 144.153414][ T6487] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.153446][ T6487] RIP: 0033:0x7fc7eef8f749 [ 144.153471][ T6487] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 144.153501][ T6487] RSP: 002b:00007fc7efebe038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 144.153530][ T6487] RAX: ffffffffffffffda RBX: 00007fc7ef1e6090 RCX: 00007fc7eef8f749 [ 144.153551][ T6487] RDX: 8f3b7a51b80ebd01 RSI: 0000200000000140 RDI: ffffffffffffff9c [ 144.153572][ T6487] RBP: 00007fc7ef013f91 R08: 0000000000000000 R09: 0000000000000000 [ 144.153591][ T6487] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 144.153610][ T6487] R13: 00007fc7ef1e6128 R14: 00007fc7ef1e6090 R15: 00007fff96465588 [ 144.153655][ T6487] [ 145.660746][ T6507] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input10 [ 145.901249][ T6514] netlink: 8 bytes leftover after parsing attributes in process `syz.2.138'. [ 146.360461][ T6519] FAULT_INJECTION: forcing a failure. [ 146.360461][ T6519] name failslab, interval 1, probability 0, space 0, times 0 [ 146.517512][ T6519] CPU: 0 UID: 0 PID: 6519 Comm: syz.3.140 Not tainted syzkaller #0 PREEMPT(full) [ 146.517556][ T6519] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 146.517575][ T6519] Call Trace: [ 146.517586][ T6519] [ 146.517598][ T6519] dump_stack_lvl+0x16c/0x1f0 [ 146.517646][ T6519] should_fail_ex+0x512/0x640 [ 146.517696][ T6519] ? fs_reclaim_acquire+0xae/0x150 [ 146.517745][ T6519] should_failslab+0xc2/0x120 [ 146.517791][ T6519] __kmalloc_noprof+0xdd/0x880 [ 146.517843][ T6519] ? tomoyo_encode2+0x100/0x3e0 [ 146.517885][ T6519] ? tomoyo_encode2+0x100/0x3e0 [ 146.517917][ T6519] tomoyo_encode2+0x100/0x3e0 [ 146.517957][ T6519] tomoyo_encode+0x29/0x50 [ 146.517990][ T6519] tomoyo_realpath_from_path+0x18f/0x6e0 [ 146.518042][ T6519] tomoyo_check_open_permission+0x2ab/0x3c0 [ 146.518074][ T6519] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 146.518159][ T6519] ? lock_acquire+0x179/0x350 [ 146.518205][ T6519] ? find_held_lock+0x2b/0x80 [ 146.518241][ T6519] ? mnt_get_write_access+0x52/0x2f0 [ 146.518290][ T6519] tomoyo_file_open+0x6b/0x90 [ 146.518347][ T6519] security_file_open+0x84/0x1e0 [ 146.518386][ T6519] do_dentry_open+0x596/0x1530 [ 146.518438][ T6519] vfs_open+0x82/0x3f0 [ 146.518494][ T6519] path_openat+0x1de4/0x2cb0 [ 146.518546][ T6519] ? __pfx_path_openat+0x10/0x10 [ 146.518596][ T6519] do_filp_open+0x20b/0x470 [ 146.518634][ T6519] ? __pfx_do_filp_open+0x10/0x10 [ 146.518702][ T6519] ? _raw_spin_unlock+0x28/0x50 [ 146.518738][ T6519] ? alloc_fd+0x471/0x7d0 [ 146.518784][ T6519] do_sys_openat2+0x11b/0x1d0 [ 146.518834][ T6519] ? __pfx_do_sys_openat2+0x10/0x10 [ 146.518901][ T6519] __x64_sys_open+0x153/0x1e0 [ 146.518953][ T6519] ? __pfx___x64_sys_open+0x10/0x10 [ 146.519012][ T6519] ? rcu_is_watching+0x12/0xc0 [ 146.519052][ T6519] do_syscall_64+0xcd/0xfa0 [ 146.519098][ T6519] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 146.519139][ T6519] RIP: 0033:0x7fc8f0f8f749 [ 146.519167][ T6519] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 146.519199][ T6519] RSP: 002b:00007fc8f1d5e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 146.519230][ T6519] RAX: ffffffffffffffda RBX: 00007fc8f11e5fa0 RCX: 00007fc8f0f8f749 [ 146.519252][ T6519] RDX: 0000000000000110 RSI: 0000000000161342 RDI: 0000200000000000 [ 146.519273][ T6519] RBP: 00007fc8f1013f91 R08: 0000000000000000 R09: 0000000000000000 [ 146.519293][ T6519] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 146.519312][ T6519] R13: 00007fc8f11e6038 R14: 00007fc8f11e5fa0 R15: 00007ffe6e434698 [ 146.519359][ T6519] [ 146.866941][ T6519] ERROR: Out of memory at tomoyo_realpath_from_path. [ 149.253279][ T6564] netlink: 28 bytes leftover after parsing attributes in process `syz.2.149'. [ 149.780204][ T6564] bond0: (slave bond_slave_1): Releasing backup interface [ 152.269237][ T6609] capability: warning: `syz.3.161' uses 32-bit capabilities (legacy support in use) [ 153.336600][ T6620] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 155.951114][ T6681] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 157.036748][ T6700] sctp: [Deprecated]: syz.3.183 (pid 6700) Use of struct sctp_assoc_value in delayed_ack socket option. [ 157.036748][ T6700] Use struct sctp_sack_info instead [ 157.719454][ T6708] netlink: 186 bytes leftover after parsing attributes in process `syz.3.186'. [ 157.740918][ T6708] netlink: 186 bytes leftover after parsing attributes in process `syz.3.186'. [ 159.822440][ T6728] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 164.011714][ T6783] futex_wake_op: syz.1.205 tries to shift op by -2048; fix this program [ 167.863205][ T6847] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 167.897475][ T6847] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 168.095475][ T6847] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 168.318628][ T6847] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 168.326091][ T6847] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 168.406815][ T6847] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 168.430931][ T6847] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 168.447594][ T6847] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 168.503546][ T6847] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 168.510928][ T6857] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input14 [ 168.579413][ T6847] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 168.639491][ T6847] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 168.694285][ T6847] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 168.915735][ T2975] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.923356][ T5840] Bluetooth: hci0: command 0x0c1a tx timeout [ 170.394409][ T5840] Bluetooth: hci2: command 0x0c1a tx timeout [ 170.472890][ T5840] Bluetooth: hci1: command 0x0c1a tx timeout [ 170.633802][ T5840] Bluetooth: hci3: command 0x0c1a tx timeout [ 170.788578][ T6892] netlink: 28 bytes leftover after parsing attributes in process `syz.1.233'. [ 170.997807][ T30] audit: type=1800 audit(1763929221.779:3): pid=6896 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.234" name="members" dev="configfs" ino=12702 res=0 errno=0 [ 171.211477][ T6895] hub 8-0:1.0: USB hub found [ 171.229037][ T6895] hub 8-0:1.0: 1 port detected [ 171.750936][ T6912] netlink: 8 bytes leftover after parsing attributes in process `syz.2.238'. [ 171.993469][ T5840] Bluetooth: hci0: command 0x0c1a tx timeout [ 172.009722][ T6919] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 172.483249][ T5840] Bluetooth: hci2: command 0x0c1a tx timeout [ 172.552870][ T5840] Bluetooth: hci1: command 0x0c1a tx timeout [ 172.713660][ T5840] Bluetooth: hci3: command 0x0c1a tx timeout [ 173.616718][ T6951] netlink: 4 bytes leftover after parsing attributes in process `syz.0.248'. [ 174.073084][ T5840] Bluetooth: hci0: command 0x0c1a tx timeout [ 174.556592][ T5840] Bluetooth: hci2: command 0x0c1a tx timeout [ 174.654041][ T5840] Bluetooth: hci1: command 0x0c1a tx timeout [ 174.793072][ T5840] Bluetooth: hci3: command 0x0c1a tx timeout [ 174.836901][ T6965] FAULT_INJECTION: forcing a failure. [ 174.836901][ T6965] name failslab, interval 1, probability 0, space 0, times 0 [ 174.850021][ T6965] CPU: 0 UID: 0 PID: 6965 Comm: syz.0.252 Not tainted syzkaller #0 PREEMPT(full) [ 174.850066][ T6965] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 174.850085][ T6965] Call Trace: [ 174.850096][ T6965] [ 174.850108][ T6965] dump_stack_lvl+0x16c/0x1f0 [ 174.850153][ T6965] should_fail_ex+0x512/0x640 [ 174.850204][ T6965] ? kmem_cache_alloc_node_noprof+0x65/0x770 [ 174.850245][ T6965] should_failslab+0xc2/0x120 [ 174.850292][ T6965] kmem_cache_alloc_node_noprof+0x78/0x770 [ 174.850326][ T6965] ? __alloc_skb+0x2b2/0x380 [ 174.850386][ T6965] ? __alloc_skb+0x2b2/0x380 [ 174.850433][ T6965] __alloc_skb+0x2b2/0x380 [ 174.850486][ T6965] ? __pfx___alloc_skb+0x10/0x10 [ 174.850543][ T6965] ? genl_rcv_msg+0x4bb/0x800 [ 174.850598][ T6965] netlink_ack+0x15d/0xb80 [ 174.850644][ T6965] netlink_rcv_skb+0x332/0x420 [ 174.850677][ T6965] ? __pfx_genl_rcv_msg+0x10/0x10 [ 174.850719][ T6965] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 174.850787][ T6965] genl_rcv+0x28/0x40 [ 174.850823][ T6965] netlink_unicast+0x5aa/0x870 [ 174.850871][ T6965] ? __pfx_netlink_unicast+0x10/0x10 [ 174.850913][ T6965] ? security_netlink_send+0x49/0x210 [ 174.850961][ T6965] ? __sanitizer_cov_trace_pc+0x56/0x70 [ 174.851000][ T6965] netlink_sendmsg+0x8c8/0xdd0 [ 174.851044][ T6965] ? __pfx_netlink_sendmsg+0x10/0x10 [ 174.851085][ T6965] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 174.851140][ T6965] ____sys_sendmsg+0xa98/0xc70 [ 174.851183][ T6965] ? copy_msghdr_from_user+0x10a/0x160 [ 174.851223][ T6965] ? __pfx_____sys_sendmsg+0x10/0x10 [ 174.851263][ T6965] ? preempt_schedule_thunk+0x16/0x30 [ 174.851323][ T6965] ? try_to_wake_up+0xa67/0x1870 [ 174.851363][ T6965] ___sys_sendmsg+0x134/0x1d0 [ 174.851391][ T6965] ? find_held_lock+0x2b/0x80 [ 174.851426][ T6965] ? __pfx____sys_sendmsg+0x10/0x10 [ 174.851455][ T6965] ? __lock_acquire+0x622/0x1c90 [ 174.851551][ T6965] __sys_sendmsg+0x16d/0x220 [ 174.851584][ T6965] ? __pfx___sys_sendmsg+0x10/0x10 [ 174.851616][ T6965] ? __x64_sys_futex+0x1e0/0x4c0 [ 174.851687][ T6965] do_syscall_64+0xcd/0xfa0 [ 174.851730][ T6965] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.851762][ T6965] RIP: 0033:0x7fc7eef8f749 [ 174.851788][ T6965] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 174.851819][ T6965] RSP: 002b:00007fc7efedf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 174.851851][ T6965] RAX: ffffffffffffffda RBX: 00007fc7ef1e5fa0 RCX: 00007fc7eef8f749 [ 174.851880][ T6965] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 000000000000000a [ 174.851899][ T6965] RBP: 00007fc7ef013f91 R08: 0000000000000000 R09: 0000000000000000 [ 174.851919][ T6965] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 174.851937][ T6965] R13: 00007fc7ef1e6038 R14: 00007fc7ef1e5fa0 R15: 00007fff96465588 [ 174.851982][ T6965] [ 177.044080][ T6993] netlink: 8 bytes leftover after parsing attributes in process `syz.2.259'. [ 177.985474][ T7014] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input16 [ 178.114025][ T7016] sd 0:0:1:0: PR command failed: 1026 [ 178.119487][ T7016] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 178.133721][ T7016] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 178.359256][ T6996] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 182.816536][ T7089] netlink: 186 bytes leftover after parsing attributes in process `syz.3.287'. [ 182.831314][ T7089] netlink: 186 bytes leftover after parsing attributes in process `syz.3.287'. [ 182.955594][ T7098] netlink: 'syz.2.289': attribute type 28 has an invalid length. [ 182.975024][ T7098] netlink: 334 bytes leftover after parsing attributes in process `syz.2.289'. [ 183.575791][ T7108] netlink: 334 bytes leftover after parsing attributes in process `syz.1.290'. [ 186.064106][ T7153] input: f as /devices/virtual/input/input18 [ 186.120472][ T7140] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 186.918923][ T7161] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input19 [ 186.953063][ T7171] usb usb36: usbfs: process 7171 (syz.1.309) did not claim interface 0 before use [ 187.308264][ T7171] netlink: 8 bytes leftover after parsing attributes in process `syz.1.309'. [ 188.429943][ T7195] Invalid ELF header magic: != ELF [ 191.652092][ T7244] netlink: 186 bytes leftover after parsing attributes in process `syz.2.326'. [ 191.815471][ T7248] netlink: 186 bytes leftover after parsing attributes in process `syz.2.326'. [ 193.428186][ T7234] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 194.442286][ T7277] FAULT_INJECTION: forcing a failure. [ 194.442286][ T7277] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 194.505863][ T7277] CPU: 0 UID: 0 PID: 7277 Comm: syz.2.336 Not tainted syzkaller #0 PREEMPT(full) [ 194.505895][ T7277] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 194.505909][ T7277] Call Trace: [ 194.505916][ T7277] [ 194.505925][ T7277] dump_stack_lvl+0x16c/0x1f0 [ 194.505958][ T7277] should_fail_ex+0x512/0x640 [ 194.505998][ T7277] should_fail_alloc_page+0xe7/0x130 [ 194.506032][ T7277] prepare_alloc_pages+0x3c2/0x610 [ 194.506069][ T7277] ? rcu_is_watching+0x12/0xc0 [ 194.506097][ T7277] __alloc_frozen_pages_noprof+0x18b/0x2470 [ 194.506127][ T7277] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 194.506175][ T7277] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 194.506212][ T7277] ? __lock_acquire+0x622/0x1c90 [ 194.506248][ T7277] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 194.506287][ T7277] ? policy_nodemask+0xea/0x4e0 [ 194.506320][ T7277] alloc_pages_mpol+0x1fb/0x550 [ 194.506352][ T7277] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 194.506392][ T7277] folio_alloc_mpol_noprof+0x36/0x2f0 [ 194.506429][ T7277] vma_alloc_folio_noprof+0xed/0x1e0 [ 194.506464][ T7277] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 194.506509][ T7277] do_pte_missing+0x2202/0x3ba0 [ 194.506546][ T7277] ? find_held_lock+0x2b/0x80 [ 194.506577][ T7277] __handle_mm_fault+0x1556/0x2aa0 [ 194.506622][ T7277] ? __pfx___handle_mm_fault+0x10/0x10 [ 194.506660][ T7277] ? __pte_offset_map_lock+0x174/0x310 [ 194.506690][ T7277] ? find_held_lock+0x2b/0x80 [ 194.506722][ T7277] ? follow_page_pte+0x5cf/0x1390 [ 194.506759][ T7277] handle_mm_fault+0x589/0xd10 [ 194.506825][ T7277] __get_user_pages+0x54e/0x3530 [ 194.506882][ T7277] ? __pfx___get_user_pages+0x10/0x10 [ 194.506928][ T7277] populate_vma_page_range+0x267/0x3f0 [ 194.506967][ T7277] ? __pfx_populate_vma_page_range+0x10/0x10 [ 194.507001][ T7277] ? __pfx_find_vma_intersection+0x10/0x10 [ 194.507033][ T7277] ? do_mmap+0x69c/0x1210 [ 194.507071][ T7277] __mm_populate+0x1d8/0x380 [ 194.507106][ T7277] ? __pfx___mm_populate+0x10/0x10 [ 194.507142][ T7277] ? up_write+0x1b2/0x520 [ 194.507186][ T7277] vm_mmap_pgoff+0x37f/0x470 [ 194.507220][ T7277] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 194.507257][ T7277] ? __x64_sys_futex+0x1e0/0x4c0 [ 194.507288][ T7277] ? __x64_sys_futex+0x1e9/0x4c0 [ 194.507324][ T7277] ksys_mmap_pgoff+0x7d/0x5c0 [ 194.507352][ T7277] ? xfd_validate_state+0x61/0x180 [ 194.507384][ T7277] ? __pfx_do_writev+0x10/0x10 [ 194.507411][ T7277] __x64_sys_mmap+0x125/0x190 [ 194.507450][ T7277] do_syscall_64+0xcd/0xfa0 [ 194.507481][ T7277] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 194.507504][ T7277] RIP: 0033:0x7f242358f749 [ 194.507522][ T7277] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 194.507544][ T7277] RSP: 002b:00007f2424365038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 194.507572][ T7277] RAX: ffffffffffffffda RBX: 00007f24237e5fa0 RCX: 00007f242358f749 [ 194.507587][ T7277] RDX: 00000000000000df RSI: 0000000000040009 RDI: 0000000000000000 [ 194.507600][ T7277] RBP: 00007f2423613f91 R08: 0000000000000007 R09: 0000000000028000 [ 194.507613][ T7277] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 194.507626][ T7277] R13: 00007f24237e6038 R14: 00007f24237e5fa0 R15: 00007fff8cc06038 [ 194.507657][ T7277] [ 195.860706][ T7283] kexec: Could not allocate control_code_buffer [ 196.004867][ T7292] FAULT_INJECTION: forcing a failure. [ 196.004867][ T7292] name failslab, interval 1, probability 0, space 0, times 0 [ 196.034415][ T7292] CPU: 1 UID: 0 PID: 7292 Comm: syz.2.339 Not tainted syzkaller #0 PREEMPT(full) [ 196.034462][ T7292] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 196.034491][ T7292] Call Trace: [ 196.034506][ T7292] [ 196.034518][ T7292] dump_stack_lvl+0x16c/0x1f0 [ 196.034566][ T7292] should_fail_ex+0x512/0x640 [ 196.034616][ T7292] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 196.034654][ T7292] should_failslab+0xc2/0x120 [ 196.034698][ T7292] kmem_cache_alloc_noprof+0x75/0x6e0 [ 196.034737][ T7292] ? seq_open+0x55/0x170 [ 196.034787][ T7292] ? __pfx_timens_offsets_show+0x10/0x10 [ 196.034817][ T7292] ? seq_open+0x55/0x170 [ 196.034858][ T7292] seq_open+0x55/0x170 [ 196.034899][ T7292] ? __pfx_timens_offsets_show+0x10/0x10 [ 196.034931][ T7292] single_open+0xfc/0x1f0 [ 196.034985][ T7292] do_dentry_open+0x982/0x1530 [ 196.035024][ T7292] ? __pfx_timens_offsets_open+0x10/0x10 [ 196.035084][ T7292] vfs_open+0x82/0x3f0 [ 196.035135][ T7292] path_openat+0x1de4/0x2cb0 [ 196.035186][ T7292] ? __pfx_path_openat+0x10/0x10 [ 196.035225][ T7292] ? __lock_acquire+0xb8a/0x1c90 [ 196.035277][ T7292] do_filp_open+0x20b/0x470 [ 196.035313][ T7292] ? __pfx_do_filp_open+0x10/0x10 [ 196.035365][ T7292] ? __pfx_kfree_link+0x10/0x10 [ 196.035424][ T7292] ? alloc_fd+0x471/0x7d0 [ 196.035468][ T7292] do_sys_openat2+0x11b/0x1d0 [ 196.035516][ T7292] ? __pfx_do_sys_openat2+0x10/0x10 [ 196.035566][ T7292] ? find_held_lock+0x2b/0x80 [ 196.035610][ T7292] __x64_sys_openat+0x174/0x210 [ 196.035659][ T7292] ? __pfx___x64_sys_openat+0x10/0x10 [ 196.035727][ T7292] do_syscall_64+0xcd/0xfa0 [ 196.035771][ T7292] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.035804][ T7292] RIP: 0033:0x7f242358f749 [ 196.035830][ T7292] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 196.035860][ T7292] RSP: 002b:00007f2424365038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 196.035890][ T7292] RAX: ffffffffffffffda RBX: 00007f24237e5fa0 RCX: 00007f242358f749 [ 196.035911][ T7292] RDX: 0000000000000080 RSI: 0000200000000440 RDI: ffffffffffffff9c [ 196.035931][ T7292] RBP: 00007f2423613f91 R08: 0000000000000000 R09: 0000000000000000 [ 196.035949][ T7292] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 196.036015][ T7292] R13: 00007f24237e6038 R14: 00007f24237e5fa0 R15: 00007fff8cc06038 [ 196.036061][ T7292] [ 196.489428][ T7305] FAULT_INJECTION: forcing a failure. [ 196.489428][ T7305] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 196.586609][ T7305] CPU: 0 UID: 0 PID: 7305 Comm: syz.2.342 Not tainted syzkaller #0 PREEMPT(full) [ 196.586677][ T7305] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 196.586698][ T7305] Call Trace: [ 196.586709][ T7305] [ 196.586721][ T7305] dump_stack_lvl+0x16c/0x1f0 [ 196.586769][ T7305] should_fail_ex+0x512/0x640 [ 196.586825][ T7305] _copy_from_iter+0x29f/0x1720 [ 196.586884][ T7305] ? __build_skb_around+0x278/0x3b0 [ 196.586934][ T7305] ? __pfx__copy_from_iter+0x10/0x10 [ 196.586997][ T7305] ? __pfx___alloc_skb+0x10/0x10 [ 196.587063][ T7305] ? common_file_perm+0x1a9/0x340 [ 196.587105][ T7305] vhci_write+0x150/0x480 [ 196.587154][ T7305] vfs_write+0x7d3/0x11d0 [ 196.587198][ T7305] ? __pfx_vhci_write+0x10/0x10 [ 196.587250][ T7305] ? __pfx_vfs_write+0x10/0x10 [ 196.587284][ T7305] ? find_held_lock+0x2b/0x80 [ 196.587346][ T7305] ksys_write+0x12a/0x250 [ 196.587383][ T7305] ? __pfx_ksys_write+0x10/0x10 [ 196.587432][ T7305] do_syscall_64+0xcd/0xfa0 [ 196.587477][ T7305] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.587510][ T7305] RIP: 0033:0x7f242358f749 [ 196.587536][ T7305] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 196.587566][ T7305] RSP: 002b:00007f2424344038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 196.587597][ T7305] RAX: ffffffffffffffda RBX: 00007f24237e6090 RCX: 00007f242358f749 [ 196.587619][ T7305] RDX: 000000000000007f RSI: 0000000000000000 RDI: 00000000000000ca [ 196.587639][ T7305] RBP: 00007f2423613f91 R08: 0000000000000000 R09: 0000000000000000 [ 196.587659][ T7305] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 196.587678][ T7305] R13: 00007f24237e6128 R14: 00007f24237e6090 R15: 00007fff8cc06038 [ 196.587728][ T7305] [ 196.805241][ T7304] netlink: 186 bytes leftover after parsing attributes in process `syz.0.340'. [ 196.815209][ T7304] netlink: 186 bytes leftover after parsing attributes in process `syz.0.340'. [ 200.130535][ T7349] svc: failed to register nfsdv3 RPC service (errno 111). [ 200.150700][ T7349] svc: failed to register nfsaclv3 RPC service (errno 111). [ 200.730289][ T7358] netlink: 8 bytes leftover after parsing attributes in process `syz.0.354'. [ 200.823677][ T7362] FAULT_INJECTION: forcing a failure. [ 200.823677][ T7362] name failslab, interval 1, probability 0, space 0, times 0 [ 200.838936][ T7362] CPU: 1 UID: 0 PID: 7362 Comm: syz.3.355 Not tainted syzkaller #0 PREEMPT(full) [ 200.838984][ T7362] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 200.839005][ T7362] Call Trace: [ 200.839015][ T7362] [ 200.839027][ T7362] dump_stack_lvl+0x16c/0x1f0 [ 200.839075][ T7362] should_fail_ex+0x512/0x640 [ 200.839122][ T7362] ? kmem_cache_alloc_lru_noprof+0x66/0x6e0 [ 200.839163][ T7362] should_failslab+0xc2/0x120 [ 200.839206][ T7362] kmem_cache_alloc_lru_noprof+0x79/0x6e0 [ 200.839238][ T7362] ? __dquot_initialize+0x299/0xd50 [ 200.839278][ T7362] ? __d_alloc+0x32/0xae0 [ 200.839331][ T7362] ? __d_alloc+0x32/0xae0 [ 200.839365][ T7362] __d_alloc+0x32/0xae0 [ 200.839408][ T7362] d_alloc_pseudo+0x1c/0xc0 [ 200.839454][ T7362] alloc_file_pseudo+0xcf/0x230 [ 200.839513][ T7362] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 200.839576][ T7362] __shmem_file_setup+0x1a3/0x330 [ 200.839632][ T7362] shmem_zero_setup+0x93/0x1a0 [ 200.839670][ T7362] __mmap_region+0x2076/0x27a0 [ 200.839705][ T7362] ? find_held_lock+0x2b/0x80 [ 200.839738][ T7362] ? __pfx___mmap_region+0x10/0x10 [ 200.839766][ T7362] ? finish_task_switch.isra.0+0x21c/0xc10 [ 200.839802][ T7362] ? rcu_is_watching+0x12/0xc0 [ 200.839834][ T7362] ? finish_task_switch.isra.0+0x221/0xc10 [ 200.839867][ T7362] ? lockdep_hardirqs_on+0x7c/0x110 [ 200.839905][ T7362] ? finish_task_switch.isra.0+0x221/0xc10 [ 200.839976][ T7362] ? __pfx___schedule+0x10/0x10 [ 200.840059][ T7362] ? trace_cap_capable+0x18d/0x200 [ 200.840120][ T7362] mmap_region+0x1ab/0x3f0 [ 200.840151][ T7362] ? __get_unmapped_area+0x267/0x440 [ 200.840198][ T7362] do_mmap+0xa3e/0x1210 [ 200.840246][ T7362] ? __pfx_do_mmap+0x10/0x10 [ 200.840288][ T7362] ? __pfx_down_write_killable+0x10/0x10 [ 200.840350][ T7362] vm_mmap_pgoff+0x29e/0x470 [ 200.840399][ T7362] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 200.840450][ T7362] ? __x64_sys_futex+0x1e0/0x4c0 [ 200.840492][ T7362] ? __x64_sys_futex+0x1e9/0x4c0 [ 200.840542][ T7362] ksys_mmap_pgoff+0x7d/0x5c0 [ 200.840588][ T7362] ? xfd_validate_state+0x61/0x180 [ 200.840635][ T7362] ? __pfx_ksys_write+0x10/0x10 [ 200.840675][ T7362] __x64_sys_mmap+0x125/0x190 [ 200.840729][ T7362] do_syscall_64+0xcd/0xfa0 [ 200.840770][ T7362] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 200.840801][ T7362] RIP: 0033:0x7fc8f0f8f749 [ 200.840827][ T7362] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 200.840858][ T7362] RSP: 002b:00007fc8f1d5e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 200.840892][ T7362] RAX: ffffffffffffffda RBX: 00007fc8f11e5fa0 RCX: 00007fc8f0f8f749 [ 200.840913][ T7362] RDX: 0000000000000006 RSI: 0000000004020009 RDI: 0000000000000000 [ 200.840931][ T7362] RBP: 00007fc8f1013f91 R08: 0000000000000401 R09: 0000000000008000 [ 200.840951][ T7362] R10: 0000000000000eb1 R11: 0000000000000246 R12: 0000000000000000 [ 200.840970][ T7362] R13: 00007fc8f11e6038 R14: 00007fc8f11e5fa0 R15: 00007ffe6e434698 [ 200.841015][ T7362] [ 201.006741][ T7353] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 201.722910][ T7360] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 201.918430][ T7376] random: crng reseeded on system resumption [ 202.056836][ T7379] nbd: couldn't find device at index 36720 [ 202.536863][ T7389] netlink: 186 bytes leftover after parsing attributes in process `syz.2.361'. [ 202.565301][ T7389] netlink: 186 bytes leftover after parsing attributes in process `syz.2.361'. [ 204.716937][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 204.723743][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 205.625107][ T7428] mmap: syz.1.371 (7428) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 206.571578][ T7441] netlink: 186 bytes leftover after parsing attributes in process `syz.3.373'. [ 206.585944][ T7441] netlink: 186 bytes leftover after parsing attributes in process `syz.3.373'. [ 206.828467][ T7447] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 207.726186][ T7466] netlink: 'syz.3.379': attribute type 2 has an invalid length. [ 209.901984][ T7494] netlink: 186 bytes leftover after parsing attributes in process `syz.2.387'. [ 209.916741][ T7494] netlink: 186 bytes leftover after parsing attributes in process `syz.2.387'. [ 210.450106][ T7514] FAULT_INJECTION: forcing a failure. [ 210.450106][ T7514] name failslab, interval 1, probability 0, space 0, times 0 [ 210.487178][ T7514] CPU: 0 UID: 0 PID: 7514 Comm: syz.3.394 Not tainted syzkaller #0 PREEMPT(full) [ 210.487222][ T7514] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 210.487242][ T7514] Call Trace: [ 210.487253][ T7514] [ 210.487266][ T7514] dump_stack_lvl+0x16c/0x1f0 [ 210.487314][ T7514] should_fail_ex+0x512/0x640 [ 210.487365][ T7514] ? __kmalloc_noprof+0xca/0x880 [ 210.487434][ T7514] should_failslab+0xc2/0x120 [ 210.487479][ T7514] __kmalloc_noprof+0xdd/0x880 [ 210.487540][ T7514] ? lsm_blob_alloc+0x68/0x90 [ 210.487588][ T7514] ? lsm_blob_alloc+0x68/0x90 [ 210.487627][ T7514] lsm_blob_alloc+0x68/0x90 [ 210.487669][ T7514] security_prepare_creds+0x30/0x270 [ 210.487712][ T7514] prepare_creds+0x56f/0x7d0 [ 210.487767][ T7514] __sys_setfsuid+0xda/0x350 [ 210.487801][ T7514] ? rcu_is_watching+0x12/0xc0 [ 210.487840][ T7514] do_syscall_64+0xcd/0xfa0 [ 210.487883][ T7514] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 210.487915][ T7514] RIP: 0033:0x7fc8f0f8f749 [ 210.487950][ T7514] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 210.487981][ T7514] RSP: 002b:00007fc8f1d5e038 EFLAGS: 00000246 ORIG_RAX: 000000000000007a [ 210.488020][ T7514] RAX: ffffffffffffffda RBX: 00007fc8f11e5fa0 RCX: 00007fc8f0f8f749 [ 210.488041][ T7514] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000ee00 [ 210.488060][ T7514] RBP: 00007fc8f1013f91 R08: 0000000000000000 R09: 0000000000000000 [ 210.488079][ T7514] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 210.488098][ T7514] R13: 00007fc8f11e6038 R14: 00007fc8f11e5fa0 R15: 00007ffe6e434698 [ 210.488142][ T7514] [ 211.270389][ T7526] FAULT_INJECTION: forcing a failure. [ 211.270389][ T7526] name failslab, interval 1, probability 0, space 0, times 0 [ 211.315707][ T7526] CPU: 0 UID: 0 PID: 7526 Comm: syz.0.397 Not tainted syzkaller #0 PREEMPT(full) [ 211.315751][ T7526] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 211.315770][ T7526] Call Trace: [ 211.315780][ T7526] [ 211.315792][ T7526] dump_stack_lvl+0x16c/0x1f0 [ 211.315838][ T7526] should_fail_ex+0x512/0x640 [ 211.315883][ T7526] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 211.315920][ T7526] should_failslab+0xc2/0x120 [ 211.315964][ T7526] kmem_cache_alloc_noprof+0x75/0x6e0 [ 211.315996][ T7526] ? acpi_ut_create_control_state+0x6a/0x100 [ 211.316055][ T7526] ? acpi_ut_create_control_state+0x6a/0x100 [ 211.316105][ T7526] acpi_ut_create_control_state+0x6a/0x100 [ 211.316156][ T7526] acpi_ds_exec_begin_control_op+0x180/0x520 [ 211.316196][ T7526] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 211.316253][ T7526] acpi_ds_exec_begin_op+0x209/0x9c0 [ 211.316308][ T7526] acpi_ps_create_op+0x7cb/0xd30 [ 211.316366][ T7526] ? __pfx_acpi_ps_create_op+0x10/0x10 [ 211.316432][ T7526] ? __pfx_acpi_ut_trace_ptr+0x10/0x10 [ 211.316466][ T7526] ? acpi_ut_value_exit+0xff/0x180 [ 211.316510][ T7526] acpi_ps_parse_loop+0xf06/0x2470 [ 211.316569][ T7526] ? acpi_ns_get_normalized_pathname+0x95/0x250 [ 211.316617][ T7526] ? __pfx_acpi_ps_parse_loop+0x10/0x10 [ 211.316667][ T7526] ? acpi_ut_status_exit+0x103/0x1c0 [ 211.316703][ T7526] ? acpi_ds_call_control_method+0x435/0xab0 [ 211.316758][ T7526] acpi_ps_parse_aml+0x817/0x1170 [ 211.316821][ T7526] acpi_ps_execute_method+0x5c4/0xe90 [ 211.316865][ T7526] acpi_ns_evaluate+0x98c/0x16d0 [ 211.316913][ T7526] acpi_evaluate_object+0x4ca/0xdf0 [ 211.316962][ T7526] ? pfn_reader_user_pin+0x935/0x10b0 [ 211.317009][ T7526] ? __pfx_acpi_evaluate_object+0x10/0x10 [ 211.317059][ T7526] ? __mutex_trylock_common+0xe9/0x250 [ 211.317116][ T7526] acpi_evaluate_integer+0xdd/0x200 [ 211.317157][ T7526] ? __pfx_acpi_evaluate_integer+0x10/0x10 [ 211.317218][ T7526] ? __pfx_status_show+0x10/0x10 [ 211.317266][ T7526] status_show+0xa0/0x120 [ 211.317314][ T7526] ? __pfx_status_show+0x10/0x10 [ 211.317382][ T7526] dev_attr_show+0x56/0xe0 [ 211.317436][ T7526] ? __pfx_dev_attr_show+0x10/0x10 [ 211.317486][ T7526] sysfs_kf_seq_show+0x216/0x3e0 [ 211.317534][ T7526] seq_read_iter+0x50e/0x12d0 [ 211.317609][ T7526] kernfs_fop_read_iter+0x46c/0x610 [ 211.317645][ T7526] ? rw_verify_area+0xcf/0x6c0 [ 211.317682][ T7526] vfs_read+0x8bf/0xcf0 [ 211.317724][ T7526] ? __pfx___mutex_lock+0x10/0x10 [ 211.317768][ T7526] ? __pfx_vfs_read+0x10/0x10 [ 211.317834][ T7526] ksys_read+0x12a/0x250 [ 211.317871][ T7526] ? __pfx_ksys_read+0x10/0x10 [ 211.317923][ T7526] do_syscall_64+0xcd/0xfa0 [ 211.317968][ T7526] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 211.318002][ T7526] RIP: 0033:0x7fc7eef8f749 [ 211.318029][ T7526] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 211.318061][ T7526] RSP: 002b:00007fc7efedf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 211.318092][ T7526] RAX: ffffffffffffffda RBX: 00007fc7ef1e5fa0 RCX: 00007fc7eef8f749 [ 211.318114][ T7526] RDX: 000000000000007a RSI: 0000200000000140 RDI: 0000000000000005 [ 211.318134][ T7526] RBP: 00007fc7ef013f91 R08: 0000000000000000 R09: 0000000000000000 [ 211.318154][ T7526] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 211.318173][ T7526] R13: 00007fc7ef1e6038 R14: 00007fc7ef1e5fa0 R15: 00007fff96465588 [ 211.318221][ T7526] [ 211.665554][ T7526] ACPI Error: Aborting method \_SB.IQST due to previous error (AE_NO_MEMORY) (20250807/psparse-529) [ 211.696336][ T7526] ACPI Error: Aborting method \_SB.LNKA._STA due to previous error (AE_NO_MEMORY) (20250807/psparse-529) [ 211.828613][ T7531] program syz.0.398 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 211.960111][ T7535] syz.2.399 (7535): attempted to duplicate a private mapping with mremap. This is not supported. [ 212.990200][ T7553] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 215.667080][ T7587] netlink: 12 bytes leftover after parsing attributes in process `syz.0.416'. [ 218.180937][ T30] audit: type=1800 audit(1763929268.919:4): pid=7623 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.425" name="SYSV00000008" dev="hugetlbfs" ino=0 res=0 errno=0 [ 219.437950][ T7634] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 222.565757][ T7678] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 222.874524][ T7701] program syz.2.444 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 223.143923][ T7710] blktrace: Concurrent blktraces are not allowed on sg0 [ 225.033647][ T5152] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 225.053227][ T5152] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 225.062509][ T5152] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 225.071638][ T5152] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 225.083621][ T5152] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 225.927633][ T7731] chnl_net:caif_netlink_parms(): no params data found [ 226.049376][ T7748] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 [ 226.297625][ T7731] bridge0: port 1(bridge_slave_0) entered blocking state [ 226.308581][ T7731] bridge0: port 1(bridge_slave_0) entered disabled state [ 226.317649][ T7731] bridge_slave_0: entered allmulticast mode [ 226.326829][ T7731] bridge_slave_0: entered promiscuous mode [ 226.346484][ T7731] bridge0: port 2(bridge_slave_1) entered blocking state [ 226.354084][ T7731] bridge0: port 2(bridge_slave_1) entered disabled state [ 226.362580][ T7731] bridge_slave_1: entered allmulticast mode [ 226.370787][ T7731] bridge_slave_1: entered promiscuous mode [ 226.425642][ T7731] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 226.449034][ T7731] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 226.567539][ T7731] team0: Port device team_slave_0 added [ 226.648542][ T7731] team0: Port device team_slave_1 added [ 226.844526][ T7731] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 226.859592][ T7731] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 226.899457][ T7731] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 226.914124][ T7731] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 226.959241][ T7731] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 227.027916][ T7731] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 227.113247][ T5152] Bluetooth: hci4: command tx timeout [ 227.229160][ T7731] hsr_slave_0: entered promiscuous mode [ 227.254219][ T7731] hsr_slave_1: entered promiscuous mode [ 227.262471][ T7731] debugfs: 'hsr0' already exists in 'hsr' [ 227.275068][ T7731] Cannot create hsr debugfs directory [ 227.303345][ T7763] sp0: Synchronizing with TNC [ 227.727597][ T5840] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 227.738446][ T5840] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 227.747486][ T5840] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 227.759515][ T5840] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 227.770775][ T5840] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 227.877460][ T7731] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 227.890409][ T7731] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 227.963549][ T7731] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 228.035717][ T7731] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 228.460344][ T7731] 8021q: adding VLAN 0 to HW filter on device bond0 [ 228.531806][ T7771] chnl_net:caif_netlink_parms(): no params data found [ 228.670685][ T7731] 8021q: adding VLAN 0 to HW filter on device team0 [ 228.848771][ T2975] bridge0: port 1(bridge_slave_0) entered blocking state [ 228.856006][ T2975] bridge0: port 1(bridge_slave_0) entered forwarding state [ 228.896109][ T2975] bridge0: port 2(bridge_slave_1) entered blocking state [ 228.903311][ T2975] bridge0: port 2(bridge_slave_1) entered forwarding state [ 229.090228][ T7771] bridge0: port 1(bridge_slave_0) entered blocking state [ 229.103239][ T7771] bridge0: port 1(bridge_slave_0) entered disabled state [ 229.117537][ T7771] bridge_slave_0: entered allmulticast mode [ 229.126277][ T7771] bridge_slave_0: entered promiscuous mode [ 229.193067][ T5152] Bluetooth: hci4: command tx timeout [ 229.203139][ T7771] bridge0: port 2(bridge_slave_1) entered blocking state [ 229.228900][ T7771] bridge0: port 2(bridge_slave_1) entered disabled state [ 229.245346][ T7794] FAULT_INJECTION: forcing a failure. [ 229.245346][ T7794] name failslab, interval 1, probability 0, space 0, times 0 [ 229.262068][ T7771] bridge_slave_1: entered allmulticast mode [ 229.279049][ T7771] bridge_slave_1: entered promiscuous mode [ 229.313584][ T7794] CPU: 1 UID: 0 PID: 7794 Comm: syz.2.463 Not tainted syzkaller #0 PREEMPT(full) [ 229.313620][ T7794] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 229.313634][ T7794] Call Trace: [ 229.313641][ T7794] [ 229.313650][ T7794] dump_stack_lvl+0x16c/0x1f0 [ 229.313683][ T7794] should_fail_ex+0x512/0x640 [ 229.313719][ T7794] ? __kmalloc_cache_noprof+0x5f/0x780 [ 229.313758][ T7794] should_failslab+0xc2/0x120 [ 229.313791][ T7794] __kmalloc_cache_noprof+0x72/0x780 [ 229.313814][ T7794] ? percpu_ref_init+0xec/0x410 [ 229.313850][ T7794] ? percpu_ref_init+0xec/0x410 [ 229.313879][ T7794] ? __pfx_swap_users_ref_free+0x10/0x10 [ 229.313904][ T7794] percpu_ref_init+0xec/0x410 [ 229.313938][ T7794] __do_sys_swapon+0x165/0x3a90 [ 229.313966][ T7794] ? find_held_lock+0x2b/0x80 [ 229.313992][ T7794] ? handle_mm_fault+0x2ab/0xd10 [ 229.314032][ T7794] ? __x64_sys_futex+0x1e0/0x4c0 [ 229.314063][ T7794] ? __x64_sys_futex+0x1e9/0x4c0 [ 229.314097][ T7794] ? exc_page_fault+0x64/0xc0 [ 229.314125][ T7794] ? arch_syscall_is_vdso_sigreturn+0xb6/0x230 [ 229.314164][ T7794] ? __pfx___do_sys_swapon+0x10/0x10 [ 229.314191][ T7794] ? syscall_user_dispatch+0x78/0x140 [ 229.314221][ T7794] do_syscall_64+0xcd/0xfa0 [ 229.314252][ T7794] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 229.314275][ T7794] RIP: 0033:0x7f242358f749 [ 229.314293][ T7794] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 229.314315][ T7794] RSP: 002b:00007f2424365038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a7 [ 229.314336][ T7794] RAX: ffffffffffffffda RBX: 00007f24237e5fa0 RCX: 00007f242358f749 [ 229.314351][ T7794] RDX: 0000000000000000 RSI: 0000000000007057 RDI: 0000000000000000 [ 229.314364][ T7794] RBP: 00007f2423613f91 R08: 0000000000000000 R09: 0000000000000000 [ 229.314377][ T7794] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 229.314390][ T7794] R13: 00007f24237e6038 R14: 00007f24237e5fa0 R15: 00007fff8cc06038 [ 229.314421][ T7794] [ 229.759201][ T7771] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 229.777429][ T7771] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 229.840016][ T5152] Bluetooth: hci5: command tx timeout [ 229.868546][ T7771] team0: Port device team_slave_0 added [ 229.927391][ T7771] team0: Port device team_slave_1 added [ 230.121541][ T7771] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 230.141068][ T7771] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 230.196122][ T7771] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 230.219543][ T7771] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 230.233336][ T7771] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 230.275849][ T7771] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 230.446146][ T7771] hsr_slave_0: entered promiscuous mode [ 230.523457][ T7771] hsr_slave_1: entered promiscuous mode [ 230.530349][ T7771] debugfs: 'hsr0' already exists in 'hsr' [ 230.538340][ T7771] Cannot create hsr debugfs directory [ 230.806580][ T7731] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 231.273552][ T5152] Bluetooth: hci4: command tx timeout [ 231.918018][ T5152] Bluetooth: hci5: command tx timeout [ 232.182110][ T7771] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 232.217105][ T7771] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 232.280884][ T7771] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 232.306461][ T7771] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 232.370495][ T7731] veth0_vlan: entered promiscuous mode [ 232.407633][ T7731] veth1_vlan: entered promiscuous mode [ 232.557121][ T7731] veth0_macvtap: entered promiscuous mode [ 232.594512][ T7731] veth1_macvtap: entered promiscuous mode [ 232.678480][ T7731] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 232.711484][ T7771] 8021q: adding VLAN 0 to HW filter on device bond0 [ 232.729707][ T7731] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 232.786115][ T1159] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.824480][ T7771] 8021q: adding VLAN 0 to HW filter on device team0 [ 232.838010][ T1159] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.860327][ T7840] netlink: 186 bytes leftover after parsing attributes in process `syz.2.472'. [ 232.869530][ T1159] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.897561][ T1159] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.922201][ T7840] netlink: 186 bytes leftover after parsing attributes in process `syz.2.472'. [ 232.944489][ T2975] bridge0: port 1(bridge_slave_0) entered blocking state [ 232.951809][ T2975] bridge0: port 1(bridge_slave_0) entered forwarding state [ 233.023209][ T2975] bridge0: port 2(bridge_slave_1) entered blocking state [ 233.030422][ T2975] bridge0: port 2(bridge_slave_1) entered forwarding state [ 233.228368][ T1159] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 233.271535][ T1159] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 233.352974][ T5152] Bluetooth: hci4: command tx timeout [ 233.490221][ T80] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 233.525748][ T80] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 233.947002][ T7771] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 233.997607][ T5152] Bluetooth: hci5: command tx timeout [ 234.828930][ T7861] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 235.308846][ T7880] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 235.374629][ T7771] veth0_vlan: entered promiscuous mode [ 235.458846][ T7771] veth1_vlan: entered promiscuous mode [ 235.656245][ T7771] veth0_macvtap: entered promiscuous mode [ 235.703207][ T7771] veth1_macvtap: entered promiscuous mode [ 235.746080][ T7771] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 235.779571][ T7771] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 235.857005][ T50] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.032957][ T50] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.078625][ T5152] Bluetooth: hci5: command tx timeout [ 236.092277][ T1007] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.131626][ T1007] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.407960][ T2975] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 236.436398][ T2975] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 236.603715][ T2975] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 236.628881][ T2975] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 236.997364][ T7900] netlink: 16 bytes leftover after parsing attributes in process `syz.4.483'. [ 237.218390][ T7908] netlink: 16 bytes leftover after parsing attributes in process `syz.4.483'. [ 237.382407][ T7903] netlink: 4 bytes leftover after parsing attributes in process `syz.4.483'. [ 237.473744][ T7903] netlink: 4 bytes leftover after parsing attributes in process `syz.4.483'. [ 237.558117][ T7903] netlink: 4 bytes leftover after parsing attributes in process `syz.4.483'. [ 237.663001][ T7918] netlink: 36 bytes leftover after parsing attributes in process `syz.2.485'. [ 237.674359][ T7903] netlink: 4 bytes leftover after parsing attributes in process `syz.4.483'. [ 237.695238][ T7903] netlink: 4 bytes leftover after parsing attributes in process `syz.4.483'. [ 238.441858][ T7931] FAULT_INJECTION: forcing a failure. [ 238.441858][ T7931] name failslab, interval 1, probability 0, space 0, times 0 [ 238.454931][ T7931] CPU: 0 UID: 0 PID: 7931 Comm: syz.2.488 Not tainted syzkaller #0 PREEMPT(full) [ 238.454962][ T7931] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 238.454976][ T7931] Call Trace: [ 238.454984][ T7931] [ 238.454992][ T7931] dump_stack_lvl+0x16c/0x1f0 [ 238.455026][ T7931] should_fail_ex+0x512/0x640 [ 238.455062][ T7931] ? __kmalloc_cache_node_noprof+0x62/0x7a0 [ 238.455096][ T7931] should_failslab+0xc2/0x120 [ 238.455128][ T7931] __kmalloc_cache_node_noprof+0x75/0x7a0 [ 238.455156][ T7931] ? stack_depot_save_flags+0x3de/0x9c0 [ 238.455193][ T7931] ? __get_vm_area_node+0x101/0x330 [ 238.455239][ T7931] ? __get_vm_area_node+0x101/0x330 [ 238.455270][ T7931] __get_vm_area_node+0x101/0x330 [ 238.455302][ T7931] ? __vb2_init_fileio+0x3f1/0x1100 [ 238.455328][ T7931] __vmalloc_node_range_noprof+0x271/0x1480 [ 238.455364][ T7931] ? vb2_vmalloc_alloc+0x135/0x3f0 [ 238.455396][ T7931] ? vb2_vmalloc_alloc+0x135/0x3f0 [ 238.455426][ T7931] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 238.455472][ T7931] ? vb2_vmalloc_alloc+0x135/0x3f0 [ 238.455494][ T7931] vmalloc_user_noprof+0x9e/0xe0 [ 238.455529][ T7931] ? vb2_vmalloc_alloc+0x135/0x3f0 [ 238.455552][ T7931] vb2_vmalloc_alloc+0x135/0x3f0 [ 238.455575][ T7931] ? __pfx_vb2_vmalloc_alloc+0x10/0x10 [ 238.455597][ T7931] __vb2_queue_alloc+0x8c9/0x1280 [ 238.455649][ T7931] vb2_core_reqbufs+0xa90/0xfe0 [ 238.455693][ T7931] ? __pfx_vb2_core_reqbufs+0x10/0x10 [ 238.455748][ T7931] __vb2_init_fileio+0x3f1/0x1100 [ 238.455767][ T7931] ? __mutex_lock+0x1c5/0x1060 [ 238.455808][ T7931] __vb2_perform_fileio+0x9c2/0x1660 [ 238.455837][ T7931] ? __pfx___vb2_perform_fileio+0x10/0x10 [ 238.455870][ T7931] vb2_fop_read+0x215/0x3e0 [ 238.455902][ T7931] ? common_file_perm+0x1a9/0x340 [ 238.455931][ T7931] v4l2_read+0x229/0x360 [ 238.455958][ T7931] ? __pfx_v4l2_read+0x10/0x10 [ 238.455986][ T7931] vfs_read+0x1e4/0xcf0 [ 238.456018][ T7931] ? __pfx_vfs_read+0x10/0x10 [ 238.456041][ T7931] ? find_held_lock+0x2b/0x80 [ 238.456066][ T7931] ? __fget_files+0x204/0x3c0 [ 238.456095][ T7931] ? __fget_files+0x20e/0x3c0 [ 238.456127][ T7931] ksys_read+0x12a/0x250 [ 238.456152][ T7931] ? __pfx_ksys_read+0x10/0x10 [ 238.456187][ T7931] do_syscall_64+0xcd/0xfa0 [ 238.456227][ T7931] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 238.456251][ T7931] RIP: 0033:0x7f242358f749 [ 238.456278][ T7931] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 238.456301][ T7931] RSP: 002b:00007f2424365038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 238.456322][ T7931] RAX: ffffffffffffffda RBX: 00007f24237e5fa0 RCX: 00007f242358f749 [ 238.456338][ T7931] RDX: 0000000000000028 RSI: 0000200000000280 RDI: 0000000000000005 [ 238.456351][ T7931] RBP: 00007f2423613f91 R08: 0000000000000000 R09: 0000000000000000 [ 238.456364][ T7931] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 238.456378][ T7931] R13: 00007f24237e6038 R14: 00007f24237e5fa0 R15: 00007fff8cc06038 [ 238.456409][ T7931] [ 238.456569][ T7931] syz.2.488: vmalloc error: size 4096, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 238.818728][ T7931] CPU: 0 UID: 0 PID: 7931 Comm: syz.2.488 Not tainted syzkaller #0 PREEMPT(full) [ 238.818771][ T7931] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 238.818789][ T7931] Call Trace: [ 238.818799][ T7931] [ 238.818812][ T7931] dump_stack_lvl+0x16c/0x1f0 [ 238.818892][ T7931] warn_alloc+0x248/0x3a0 [ 238.818938][ T7931] ? __pfx_warn_alloc+0x10/0x10 [ 238.818966][ T7931] ? rcu_is_watching+0x12/0xc0 [ 238.819011][ T7931] ? trace_kmalloc+0x2b/0xd0 [ 238.819050][ T7931] ? __get_vm_area_node+0x101/0x330 [ 238.819098][ T7931] ? __kasan_kmalloc+0x8a/0xb0 [ 238.819136][ T7931] ? __get_vm_area_node+0x208/0x330 [ 238.819187][ T7931] __vmalloc_node_range_noprof+0xaf5/0x1480 [ 238.819249][ T7931] ? vb2_vmalloc_alloc+0x135/0x3f0 [ 238.819290][ T7931] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 238.819351][ T7931] ? vb2_vmalloc_alloc+0x135/0x3f0 [ 238.819381][ T7931] vmalloc_user_noprof+0x9e/0xe0 [ 238.819427][ T7931] ? vb2_vmalloc_alloc+0x135/0x3f0 [ 238.819458][ T7931] vb2_vmalloc_alloc+0x135/0x3f0 [ 238.819490][ T7931] ? __pfx_vb2_vmalloc_alloc+0x10/0x10 [ 238.819520][ T7931] __vb2_queue_alloc+0x8c9/0x1280 [ 238.819593][ T7931] vb2_core_reqbufs+0xa90/0xfe0 [ 238.819654][ T7931] ? __pfx_vb2_core_reqbufs+0x10/0x10 [ 238.819731][ T7931] __vb2_init_fileio+0x3f1/0x1100 [ 238.819760][ T7931] ? __mutex_lock+0x1c5/0x1060 [ 238.819816][ T7931] __vb2_perform_fileio+0x9c2/0x1660 [ 238.819855][ T7931] ? __pfx___vb2_perform_fileio+0x10/0x10 [ 238.819905][ T7931] vb2_fop_read+0x215/0x3e0 [ 238.819951][ T7931] ? common_file_perm+0x1a9/0x340 [ 238.819992][ T7931] v4l2_read+0x229/0x360 [ 238.820030][ T7931] ? __pfx_v4l2_read+0x10/0x10 [ 238.820069][ T7931] vfs_read+0x1e4/0xcf0 [ 238.820114][ T7931] ? __pfx_vfs_read+0x10/0x10 [ 238.820146][ T7931] ? find_held_lock+0x2b/0x80 [ 238.820181][ T7931] ? __fget_files+0x204/0x3c0 [ 238.820220][ T7931] ? __fget_files+0x20e/0x3c0 [ 238.820267][ T7931] ksys_read+0x12a/0x250 [ 238.820302][ T7931] ? __pfx_ksys_read+0x10/0x10 [ 238.820350][ T7931] do_syscall_64+0xcd/0xfa0 [ 238.820394][ T7931] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 238.820427][ T7931] RIP: 0033:0x7f242358f749 [ 238.820452][ T7931] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 238.820483][ T7931] RSP: 002b:00007f2424365038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 238.820513][ T7931] RAX: ffffffffffffffda RBX: 00007f24237e5fa0 RCX: 00007f242358f749 [ 238.820534][ T7931] RDX: 0000000000000028 RSI: 0000200000000280 RDI: 0000000000000005 [ 238.820552][ T7931] RBP: 00007f2423613f91 R08: 0000000000000000 R09: 0000000000000000 [ 238.820571][ T7931] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 238.820589][ T7931] R13: 00007f24237e6038 R14: 00007f24237e5fa0 R15: 00007fff8cc06038 [ 238.820633][ T7931] [ 238.904342][ T7931] Mem-Info: [ 239.128478][ T7931] active_anon:14963 inactive_anon:1 isolated_anon:0 [ 239.128478][ T7931] active_file:11759 inactive_file:44719 isolated_file:0 [ 239.128478][ T7931] unevictable:768 dirty:30 writeback:0 [ 239.128478][ T7931] slab_reclaimable:11137 slab_unreclaimable:98626 [ 239.128478][ T7931] mapped:38382 shmem:1359 pagetables:1321 [ 239.128478][ T7931] sec_pagetables:0 bounce:0 [ 239.128478][ T7931] kernel_misc_reclaimable:0 [ 239.128478][ T7931] free:1283076 free_pcp:18474 free_cma:0 [ 239.175826][ T7931] Node 0 active_anon:61452kB inactive_anon:4kB active_file:47036kB inactive_file:178672kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:153528kB dirty:120kB writeback:0kB shmem:3900kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12656kB pagetables:5152kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 239.212121][ T7931] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:132kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 239.308768][ T7931] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 239.510073][ T7931] lowmem_reserve[]: 0 2485 2487 2487 2487 [ 239.564421][ T7931] Node 0 DMA32 free:1230784kB boost:0kB min:34108kB low:42632kB high:51156kB reserved_highatomic:0KB free_highatomic:0KB active_anon:60952kB inactive_anon:4kB active_file:47036kB inactive_file:178672kB unevictable:1536kB writepending:220kB zspages:0kB present:3129332kB managed:2545064kB mlocked:0kB bounce:0kB free_pcp:46116kB local_pcp:27216kB free_cma:0kB [ 239.715878][ T7931] lowmem_reserve[]: 0 0 1 1 1 [ 239.720713][ T7931] Node 0 Normal free:0kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 239.756464][ T7931] lowmem_reserve[]: 0 0 0 0 0 [ 239.791182][ T7931] Node 1 Normal free:3888252kB boost:0kB min:55768kB low:69708kB high:83648kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:26568kB local_pcp:10040kB free_cma:0kB [ 239.884584][ T7942] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 239.962931][ T7931] lowmem_reserve[]: 0 0 0 0 0 [ 240.032551][ T7931] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 240.053070][ T7931] Node 0 DMA32: 285*4kB (UME) 486*8kB (UM) 170*16kB (UM) 194*32kB (UM) 138*64kB (UM) 141*128kB (UM) 37*256kB (UM) 47*512kB (UM) 25*1024kB (UM) 10*2048kB (M) 271*4096kB (M) = 1230468kB [ 240.118257][ T7931] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 240.152565][ T7931] Node 1 Normal: 231*4kB (UME) 81*8kB (UME) 49*16kB (UME) 92*32kB (UME) 29*64kB (UME) 13*128kB (UME) 4*256kB (UME) 4*512kB (UM) 2*1024kB (UM) 2*2048kB (UE) 945*4096kB (M) = 3888756kB [ 240.240712][ T7931] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 240.322581][ T7931] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 240.362861][ T7931] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 240.381108][ T7931] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 240.422446][ T7931] 62193 total pagecache pages [ 240.471649][ T7931] 0 pages in swap cache [ 240.496450][ T7931] Free swap = 124996kB [ 240.505486][ T7931] Total swap = 124996kB [ 240.601457][ T7931] 2097051 pages RAM [ 240.734559][ T7931] 0 pages HighMem/MovableOnly [ 240.740214][ T7931] 428695 pages reserved [ 240.782971][ T7931] 0 pages cma reserved [ 241.688614][ T7958] scsi_strcpy_devinfo: vendor string '/&c~n] | [ 241.688614][ T7958] M' is too long [ 241.724334][ T7958] scsi_strcpy_devinfo: model string 'Dd5 K2b [ 241.724334][ T7958] W ' is too long [ 242.065921][ T7965] : Can't lookup blockdev [ 242.340894][ T7971] FAULT_INJECTION: forcing a failure. [ 242.340894][ T7971] name failslab, interval 1, probability 0, space 0, times 0 [ 242.363365][ T7971] CPU: 0 UID: 0 PID: 7971 Comm: syz.0.499 Not tainted syzkaller #0 PREEMPT(full) [ 242.363424][ T7971] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 242.363442][ T7971] Call Trace: [ 242.363452][ T7971] [ 242.363464][ T7971] dump_stack_lvl+0x16c/0x1f0 [ 242.363511][ T7971] should_fail_ex+0x512/0x640 [ 242.363560][ T7971] ? fs_reclaim_acquire+0xae/0x150 [ 242.363607][ T7971] should_failslab+0xc2/0x120 [ 242.363652][ T7971] __kmalloc_noprof+0xdd/0x880 [ 242.363705][ T7971] ? tomoyo_encode2+0x100/0x3e0 [ 242.363749][ T7971] ? tomoyo_encode2+0x100/0x3e0 [ 242.363784][ T7971] tomoyo_encode2+0x100/0x3e0 [ 242.363835][ T7971] tomoyo_encode+0x29/0x50 [ 242.363872][ T7971] tomoyo_realpath_from_path+0x18f/0x6e0 [ 242.363924][ T7971] tomoyo_path_number_perm+0x245/0x580 [ 242.363954][ T7971] ? tomoyo_path_number_perm+0x237/0x580 [ 242.363989][ T7971] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 242.364023][ T7971] ? find_held_lock+0x2b/0x80 [ 242.364095][ T7971] ? find_held_lock+0x2b/0x80 [ 242.364128][ T7971] ? hook_file_ioctl_common+0x145/0x410 [ 242.364172][ T7971] ? __fget_files+0x20e/0x3c0 [ 242.364214][ T7971] security_file_ioctl+0x9b/0x240 [ 242.364248][ T7971] __x64_sys_ioctl+0xb7/0x210 [ 242.364301][ T7971] do_syscall_64+0xcd/0xfa0 [ 242.364353][ T7971] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 242.364386][ T7971] RIP: 0033:0x7fc7eef8f749 [ 242.364410][ T7971] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 242.364440][ T7971] RSP: 002b:00007fc7efedf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 242.364470][ T7971] RAX: ffffffffffffffda RBX: 00007fc7ef1e5fa0 RCX: 00007fc7eef8f749 [ 242.364490][ T7971] RDX: 0000200000000340 RSI: 000000008038550a RDI: 0000000000000003 [ 242.364510][ T7971] RBP: 00007fc7efedf090 R08: 0000000000000000 R09: 0000000000000000 [ 242.364529][ T7971] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 242.364548][ T7971] R13: 00007fc7ef1e6038 R14: 00007fc7ef1e5fa0 R15: 00007fff96465588 [ 242.364592][ T7971] [ 242.364619][ T7971] ERROR: Out of memory at tomoyo_realpath_from_path. [ 242.596364][ T7971] usb usb36: usbfs: process 7971 (syz.0.499) did not claim interface 0 before use [ 243.085990][ T7979] zswap: compressor 000 not available [ 243.682640][ T7995] random: crng reseeded on system resumption [ 244.687648][ T8016] __nla_validate_parse: 14 callbacks suppressed [ 244.687675][ T8016] netlink: 186 bytes leftover after parsing attributes in process `syz.5.508'. [ 245.528177][ T7997] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 245.978034][ T8036] usb usb36: usbfs: process 8036 (syz.2.514) did not claim interface 0 before use [ 246.375682][ T8044] hub 1-0:1.0: USB hub found [ 246.380608][ T8044] hub 1-0:1.0: 1 port detected [ 250.196052][ T8121] FAULT_INJECTION: forcing a failure. [ 250.196052][ T8121] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 250.225563][ T8121] CPU: 0 UID: 0 PID: 8121 Comm: syz.5.532 Not tainted syzkaller #0 PREEMPT(full) [ 250.225603][ T8121] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 250.225621][ T8121] Call Trace: [ 250.225631][ T8121] [ 250.225643][ T8121] dump_stack_lvl+0x16c/0x1f0 [ 250.225687][ T8121] should_fail_ex+0x512/0x640 [ 250.225742][ T8121] _copy_to_iter+0x29f/0x1710 [ 250.225784][ T8121] ? __pfx__copy_to_iter+0x10/0x10 [ 250.225823][ T8121] ? find_held_lock+0x2b/0x80 [ 250.225865][ T8121] simple_copy_to_iter+0x46/0x90 [ 250.225913][ T8121] __skb_datagram_iter+0x5af/0x900 [ 250.225959][ T8121] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 250.226021][ T8121] skb_copy_datagram_iter+0x40/0x50 [ 250.226070][ T8121] tcp_recvmsg_locked+0x1af4/0x2910 [ 250.226140][ T8121] ? __pfx_tcp_recvmsg_locked+0x10/0x10 [ 250.226212][ T8121] ? __local_bh_enable_ip+0xa4/0x120 [ 250.226258][ T8121] tcp_recvmsg+0x12f/0x680 [ 250.226309][ T8121] ? __pfx_tcp_recvmsg+0x10/0x10 [ 250.226376][ T8121] ? __pfx_tcp_recvmsg+0x10/0x10 [ 250.226423][ T8121] inet_recvmsg+0x129/0x6a0 [ 250.226470][ T8121] ? __fget_files+0x204/0x3c0 [ 250.226504][ T8121] ? __pfx_inet_recvmsg+0x10/0x10 [ 250.226551][ T8121] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 250.226608][ T8121] sock_recvmsg+0x1b2/0x250 [ 250.226651][ T8121] __sys_recvfrom+0x203/0x310 [ 250.226702][ T8121] ? 0xffffffff81000000 [ 250.226726][ T8121] ? __pfx___sys_recvfrom+0x10/0x10 [ 250.226821][ T8121] ? ksys_write+0x1ac/0x250 [ 250.226858][ T8121] ? __pfx_ksys_write+0x10/0x10 [ 250.226899][ T8121] __x64_sys_recvfrom+0xe0/0x1c0 [ 250.226950][ T8121] ? do_syscall_64+0x91/0xfa0 [ 250.226989][ T8121] ? lockdep_hardirqs_on+0x7c/0x110 [ 250.227028][ T8121] do_syscall_64+0xcd/0xfa0 [ 250.227071][ T8121] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.227103][ T8121] RIP: 0033:0x7fd98778f749 [ 250.227127][ T8121] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 250.227157][ T8121] RSP: 002b:00007fd9886cc038 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 250.227187][ T8121] RAX: ffffffffffffffda RBX: 00007fd9879e5fa0 RCX: 00007fd98778f749 [ 250.227214][ T8121] RDX: 000000800000000e RSI: 0000000000000000 RDI: 0000000000000003 [ 250.227233][ T8121] RBP: 00007fd9886cc090 R08: 0000000000000000 R09: ffffffff81000000 [ 250.227253][ T8121] R10: 0000000000000100 R11: 0000000000000246 R12: 0000000000000001 [ 250.227272][ T8121] R13: 00007fd9879e6038 R14: 00007fd9879e5fa0 R15: 00007ffe9a6bc928 [ 250.227302][ T8121] ? 0xffffffff81000000 [ 250.227338][ T8121] [ 252.022743][ T8143] netlink: 334 bytes leftover after parsing attributes in process `syz.5.538'. [ 254.054433][ T5152] block nbd0: Receive control failed (result -107) [ 254.080703][ T8165] ICMPv6: process `syz.4.542' is using deprecated sysctl (syscall) net.ipv6.neigh.ipvlan1.retrans_time - use net.ipv6.neigh.ipvlan1.retrans_time_ms instead [ 254.544179][ T8173] netlink: 24 bytes leftover after parsing attributes in process `syz.2.544'. [ 255.358648][ T8185] netlink: 186 bytes leftover after parsing attributes in process `syz.4.547'. [ 255.371540][ T8185] netlink: 186 bytes leftover after parsing attributes in process `syz.4.547'. [ 256.984240][ T8220] ima: policy update failed [ 257.014196][ T30] audit: type=1802 audit(1763929307.789:5): pid=8220 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.4.554" res=0 errno=0 [ 257.376817][ T8226] netlink: 4 bytes leftover after parsing attributes in process `syz.2.555'. [ 257.398815][ T8225] CIFS: VFS: Invalid SecurityFlags: 0 [ 257.945092][ T8237] usb usb36: usbfs: process 8237 (syz.2.560) did not claim interface 0 before use [ 257.954767][ T8237] FAULT_INJECTION: forcing a failure. [ 257.954767][ T8237] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 258.027384][ T8237] CPU: 1 UID: 0 PID: 8237 Comm: syz.2.560 Not tainted syzkaller #0 PREEMPT(full) [ 258.027426][ T8237] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 258.027443][ T8237] Call Trace: [ 258.027453][ T8237] [ 258.027464][ T8237] dump_stack_lvl+0x16c/0x1f0 [ 258.027507][ T8237] should_fail_ex+0x512/0x640 [ 258.027573][ T8237] _copy_to_user+0x32/0xd0 [ 258.027606][ T8237] simple_read_from_buffer+0xcb/0x170 [ 258.027662][ T8237] proc_fail_nth_read+0x197/0x240 [ 258.027699][ T8237] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 258.027739][ T8237] ? rw_verify_area+0xcf/0x6c0 [ 258.027769][ T8237] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 258.027805][ T8237] vfs_read+0x1e4/0xcf0 [ 258.027844][ T8237] ? __pfx___mutex_lock+0x10/0x10 [ 258.027884][ T8237] ? __pfx_vfs_read+0x10/0x10 [ 258.027928][ T8237] ? __fget_files+0x20e/0x3c0 [ 258.027969][ T8237] ksys_read+0x12a/0x250 [ 258.028002][ T8237] ? __pfx_ksys_read+0x10/0x10 [ 258.028048][ T8237] do_syscall_64+0xcd/0xfa0 [ 258.028089][ T8237] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 258.028121][ T8237] RIP: 0033:0x7f242358e15c [ 258.028145][ T8237] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 258.028173][ T8237] RSP: 002b:00007f2424365030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 258.028201][ T8237] RAX: ffffffffffffffda RBX: 00007f24237e5fa0 RCX: 00007f242358e15c [ 258.028221][ T8237] RDX: 000000000000000f RSI: 00007f24243650a0 RDI: 0000000000000004 [ 258.028237][ T8237] RBP: 00007f2424365090 R08: 0000000000000000 R09: 0000000000000000 [ 258.028256][ T8237] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 258.028272][ T8237] R13: 00007f24237e6038 R14: 00007f24237e5fa0 R15: 00007fff8cc06038 [ 258.028313][ T8237] [ 258.346522][ T8239] netlink: 350 bytes leftover after parsing attributes in process `syz.0.561'. [ 258.370024][ T8243] usb usb36: usbfs: process 8243 (syz.4.562) did not claim interface 0 before use [ 259.293739][ T8255] netlink: 4 bytes leftover after parsing attributes in process `syz.0.565'. [ 259.377655][ T8260] netlink: 354 bytes leftover after parsing attributes in process `syz.0.565'. [ 260.699714][ T8276] futex_wake_op: syz.4.569 tries to shift op by -2048; fix this program [ 260.708419][ T8276] futex_wake_op: syz.4.569 tries to shift op by -2048; fix this program [ 260.718127][ T8276] 0x000000000001-0x000000020000 : "" [ 260.734600][ T8276] ftl_cs: FTL header corrupt! [ 261.243999][ T8284] can: request_module (can-proto-3) failed. [ 263.265938][ T8308] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 264.111886][ T8325] futex_wake_op: syz.0.578 tries to shift op by -2048; fix this program [ 264.123878][ T8325] futex_wake_op: syz.0.578 tries to shift op by -2048; fix this program [ 264.189153][ T8325] usb usb36: usbfs: process 8325 (syz.0.578) did not claim interface 0 before use [ 264.791419][ T8311] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 266.157161][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 266.170288][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 267.770964][ T8371] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 267.770964][ T8371] The task syz.4.589 (8371) triggered the difference, watch for misbehavior. [ 269.435225][ T8388] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 0 out of range (51000000..2150000000) [ 270.396382][ T8390] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 270.697439][ T8407] syz.5.597 (8407) used greatest stack depth: 19720 bytes left [ 270.723202][ T8406] syz.5.597 (8406) used greatest stack depth: 19176 bytes left [ 271.317547][ T8423] mkiss: ax0: crc mode is auto. [ 272.217608][ T5152] Bluetooth: hci5: unexpected subevent 0x01 length: 123 > 18 [ 272.297416][ T8442] netlink: zone id is out of range [ 272.306876][ T8440] netlink: set zone limit has 8 unknown bytes [ 272.370890][ T8442] netlink: del zone limit has 4 unknown bytes [ 272.580782][ T8440] HfR: entered promiscuous mode [ 274.232897][ T5840] Bluetooth: hci5: command tx timeout [ 276.150819][ T8492] vivid-003: ================= START STATUS ================= [ 276.182955][ T8492] vivid-003: Radio HW Seek Mode: Bounded [ 276.223637][ T8492] vivid-003: Radio Programmable HW Seek: false [ 276.320543][ T8492] vivid-003: RDS Rx I/O Mode: Block I/O [ 276.327543][ T8492] vivid-003: Generate RBDS Instead of RDS: false [ 276.334088][ T8492] vivid-003: RDS Reception: true [ 276.340642][ T8492] vivid-003: RDS Program Type: 0 inactive [ 276.346643][ T8492] vivid-003: RDS PS Name: inactive [ 276.352024][ T8492] vivid-003: RDS Radio Text: inactive [ 276.358169][ T8492] vivid-003: RDS Traffic Announcement: false inactive [ 276.370791][ T8492] vivid-003: RDS Traffic Program: false inactive [ 276.377591][ T8492] vivid-003: RDS Music: false inactive [ 276.392881][ T8492] vivid-003: ================== END STATUS ================== [ 276.827745][ T8502] bridge0: port 3(hsr0) entered blocking state [ 276.848922][ T8502] bridge0: port 3(hsr0) entered disabled state [ 276.881805][ T8502] hsr0: entered allmulticast mode [ 276.900886][ T8502] hsr_slave_0: entered allmulticast mode [ 276.936444][ T8502] hsr_slave_1: entered allmulticast mode [ 276.958662][ T8502] hsr0: entered promiscuous mode [ 276.988480][ T8502] bridge0: port 3(hsr0) entered blocking state [ 276.995073][ T8502] bridge0: port 3(hsr0) entered forwarding state [ 278.104829][ T8522] syz.5.625 uses obsolete (PF_INET,SOCK_PACKET) [ 278.136747][ T8524] ceph: Failed to parse sending metrics switch value 'P^' [ 278.165239][ T8524] syz.4.626: vmalloc error: size 1093632, failed to allocate pages, mode:0xcc2(GFP_KERNEL|__GFP_HIGHMEM), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 278.193304][ T8524] CPU: 0 UID: 0 PID: 8524 Comm: syz.4.626 Not tainted syzkaller #0 PREEMPT(full) [ 278.193347][ T8524] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 278.193363][ T8524] Call Trace: [ 278.193373][ T8524] [ 278.193383][ T8524] dump_stack_lvl+0x16c/0x1f0 [ 278.193424][ T8524] warn_alloc+0x248/0x3a0 [ 278.193465][ T8524] ? __pfx_warn_alloc+0x10/0x10 [ 278.193496][ T8524] ? alloc_pages_mpol+0x25a/0x550 [ 278.193538][ T8524] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 278.193574][ T8524] ? __pfx_alloc_pages_bulk_mempolicy_noprof+0x10/0x10 [ 278.193624][ T8524] ? __kmalloc_node_noprof+0x364/0x8a0 [ 278.193658][ T8524] ? __get_vm_area_node+0x208/0x330 [ 278.193706][ T8524] __vmalloc_node_range_noprof+0x119b/0x1480 [ 278.193759][ T8524] ? __snd_dma_alloc_pages+0x53/0x90 [ 278.193796][ T8524] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 278.193844][ T8524] ? __mutex_unlock_slowpath+0x161/0x7b0 [ 278.193886][ T8524] ? __snd_dma_alloc_pages+0x53/0x90 [ 278.193911][ T8524] __vmalloc_node_noprof+0xad/0xf0 [ 278.193952][ T8524] ? __snd_dma_alloc_pages+0x53/0x90 [ 278.193979][ T8524] ? __pfx_snd_dma_vmalloc_alloc+0x10/0x10 [ 278.194011][ T8524] __snd_dma_alloc_pages+0x53/0x90 [ 278.194038][ T8524] snd_dma_alloc_dir_pages+0x151/0x240 [ 278.194070][ T8524] do_alloc_pages+0x136/0x2d0 [ 278.194119][ T8524] snd_pcm_lib_malloc_pages+0x3df/0x980 [ 278.194152][ T8524] snd_pcm_hw_params+0x1656/0x1ba0 [ 278.194184][ T8524] ? __pfx_snd_pcm_hw_params+0x10/0x10 [ 278.194211][ T8524] ? snd_pcm_hw_param_near.constprop.0+0x734/0x8e0 [ 278.194256][ T8524] ? __pfx_snd_pcm_hw_param_near.constprop.0+0x10/0x10 [ 278.194297][ T8524] ? __asan_memset+0x23/0x50 [ 278.194329][ T8524] snd_pcm_kernel_ioctl+0x147/0x2e0 [ 278.194357][ T8524] snd_pcm_oss_change_params_locked+0x1432/0x3a30 [ 278.194414][ T8524] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 278.194489][ T8524] snd_pcm_oss_get_active_substream+0x168/0x1d0 [ 278.194535][ T8524] snd_pcm_oss_set_channels+0x23a/0x370 [ 278.194577][ T8524] ? __pfx_snd_pcm_oss_set_channels+0x10/0x10 [ 278.194616][ T8524] ? __might_fault+0x13b/0x190 [ 278.194654][ T8524] snd_pcm_oss_ioctl+0x21c6/0x37c0 [ 278.194694][ T8524] ? find_held_lock+0x2b/0x80 [ 278.194722][ T8524] ? hook_file_ioctl_common+0x145/0x410 [ 278.194753][ T8524] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 278.194797][ T8524] ? __fget_files+0x20e/0x3c0 [ 278.194830][ T8524] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 278.194872][ T8524] __x64_sys_ioctl+0x18e/0x210 [ 278.194917][ T8524] do_syscall_64+0xcd/0xfa0 [ 278.194954][ T8524] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 278.194982][ T8524] RIP: 0033:0x7fc64518f749 [ 278.195004][ T8524] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 278.195031][ T8524] RSP: 002b:00007fc646096038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 278.195057][ T8524] RAX: ffffffffffffffda RBX: 00007fc6453e5fa0 RCX: 00007fc64518f749 [ 278.195074][ T8524] RDX: 00002000000001c0 RSI: 00000000c0045006 RDI: 000000000000000a [ 278.195091][ T8524] RBP: 00007fc645213f91 R08: 0000000000000000 R09: 0000000000000000 [ 278.195108][ T8524] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 278.195123][ T8524] R13: 00007fc6453e6038 R14: 00007fc6453e5fa0 R15: 00007ffd57445418 [ 278.195160][ T8524] [ 278.195177][ T8524] Mem-Info: [ 278.437767][ T8528] ceph: Failed to parse sending metrics switch value '511 [ 278.437767][ T8528] ' [ 278.442164][ T8524] active_anon:12337 inactive_anon:1 isolated_anon:0 [ 278.442164][ T8524] active_file:13565 inactive_file:44749 isolated_file:0 [ 278.442164][ T8524] unevictable:768 dirty:4 writeback:0 [ 278.442164][ T8524] slab_reclaimable:11249 slab_unreclaimable:99106 [ 278.442164][ T8524] mapped:35515 shmem:1356 pagetables:1256 [ 278.442164][ T8524] sec_pagetables:0 bounce:0 [ 278.442164][ T8524] kernel_misc_reclaimable:0 [ 278.442164][ T8524] free:1283195 free_pcp:19055 free_cma:0 [ 278.622844][ T8524] Node 0 active_anon:49348kB inactive_anon:4kB active_file:54260kB inactive_file:178792kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:146260kB dirty:216kB writeback:0kB shmem:3888kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12532kB pagetables:4892kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 278.666492][ T8524] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:132kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 278.736169][ T8524] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 278.736281][ T8524] lowmem_reserve[]: 0 2485 2487 2487 2487 [ 278.736464][ T8524] Node 0 DMA32 free:1227300kB boost:0kB min:34108kB low:42632kB high:51156kB reserved_highatomic:0KB free_highatomic:0KB active_anon:49248kB inactive_anon:4kB active_file:54260kB inactive_file:178792kB unevictable:1536kB writepending:216kB zspages:0kB present:3129332kB managed:2545064kB mlocked:0kB bounce:0kB free_pcp:52276kB local_pcp:20172kB free_cma:0kB [ 278.736583][ T8524] lowmem_reserve[]: 0 0 1 1 1 [ 278.736655][ T8524] Node 0 Normal free:0kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 278.736851][ T8524] lowmem_reserve[]: 0 0 0 0 0 [ 278.736920][ T8524] Node 1 Normal free:3890232kB boost:0kB min:55768kB low:69708kB high:83648kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:24600kB local_pcp:8000kB free_cma:0kB [ 278.898186][ T8524] lowmem_reserve[]: 0 0 0 0 0 [ 278.898269][ T8524] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 278.898512][ T8524] Node 0 DMA32: 1363*4kB (UME) 795*8kB (UME) 326*16kB (UM) 539*32kB (UM) 245*64kB (UME) 162*128kB (UME) 68*256kB (UM) 27*512kB (UM) 9*1024kB (UM) 11*2048kB (UM) 267*4096kB (M) = 1227300kB [ 278.898882][ T8524] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 278.899061][ T8524] Node 1 Normal: 246*4kB (UE) 76*8kB (UME) 46*16kB (UME) 103*32kB (UME) 31*64kB (UME) 13*128kB (UME) 4*256kB (UME) 4*512kB (UM) 3*1024kB (UM) 2*2048kB (UE) 945*4096kB (M) = 3890232kB [ 278.899384][ T8524] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 278.899411][ T8524] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 278.899438][ T8524] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 278.899465][ T8524] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 278.899492][ T8524] 59666 total pagecache pages [ 278.899505][ T8524] 0 pages in swap cache [ 278.899517][ T8524] Free swap = 124996kB [ 278.899529][ T8524] Total swap = 124996kB [ 278.899543][ T8524] 2097051 pages RAM [ 278.899554][ T8524] 0 pages HighMem/MovableOnly [ 278.899566][ T8524] 428695 pages reserved [ 278.899578][ T8524] 0 pages cma reserved [ 279.042179][ T8541] program syz.2.629 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 279.533631][ T8556] netlink: 186 bytes leftover after parsing attributes in process `syz.2.631'. [ 279.536863][ T8556] netlink: 186 bytes leftover after parsing attributes in process `syz.2.631'. [ 280.782870][ T8572] usb usb36: usbfs: process 8572 (syz.4.636) did not claim interface 0 before use [ 282.691684][ T8593] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 286.563526][ T8659] netlink: 186 bytes leftover after parsing attributes in process `syz.2.660'. [ 286.577887][ T8659] netlink: 186 bytes leftover after parsing attributes in process `syz.2.660'. [ 288.981799][ T8682] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 289.189771][ T8684] sctp: [Deprecated]: syz.5.671 (pid 8684) Use of struct sctp_assoc_value in delayed_ack socket option. [ 289.189771][ T8684] Use struct sctp_sack_info instead [ 289.959196][ T8673] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 292.511695][ T8707] random: crng reseeded on system resumption [ 292.783082][ T8709] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 294.216127][ T8732] FAULT_INJECTION: forcing a failure. [ 294.216127][ T8732] name fail_futex, interval 1, probability 0, space 0, times 1 [ 294.283521][ T8732] CPU: 0 UID: 0 PID: 8732 Comm: syz.5.683 Not tainted syzkaller #0 PREEMPT(full) [ 294.283564][ T8732] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 294.283582][ T8732] Call Trace: [ 294.283592][ T8732] [ 294.283603][ T8732] dump_stack_lvl+0x16c/0x1f0 [ 294.283651][ T8732] should_fail_ex+0x512/0x640 [ 294.283707][ T8732] get_futex_key+0x1d0/0x1560 [ 294.283755][ T8732] ? __pfx_get_futex_key+0x10/0x10 [ 294.283792][ T8732] ? find_held_lock+0x2b/0x80 [ 294.283835][ T8732] futex_wake+0xea/0x530 [ 294.283878][ T8732] ? futex_wait+0x120/0x380 [ 294.283904][ T8732] ? __pfx_futex_wait+0x10/0x10 [ 294.283931][ T8732] ? __pfx_futex_wake+0x10/0x10 [ 294.283984][ T8732] ? __lock_acquire+0xb8a/0x1c90 [ 294.284049][ T8732] do_futex+0x1e3/0x350 [ 294.284093][ T8732] ? __pfx_do_futex+0x10/0x10 [ 294.284139][ T8732] ? find_held_lock+0x2b/0x80 [ 294.284175][ T8732] __x64_sys_futex+0x1e0/0x4c0 [ 294.284223][ T8732] ? __pfx___x64_sys_futex+0x10/0x10 [ 294.284269][ T8732] ? _copy_to_user+0x48/0xd0 [ 294.284311][ T8732] do_syscall_64+0xcd/0xfa0 [ 294.284354][ T8732] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 294.284386][ T8732] RIP: 0033:0x7fd98778f749 [ 294.284412][ T8732] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 294.284442][ T8732] RSP: 002b:00007fd9886ab0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 294.284472][ T8732] RAX: ffffffffffffffda RBX: 00007fd9879e6098 RCX: 00007fd98778f749 [ 294.284493][ T8732] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fd9879e609c [ 294.284513][ T8732] RBP: 00007fd9879e6090 R08: 00007fd9886cd000 R09: 0000000000000000 [ 294.284533][ T8732] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 294.284552][ T8732] R13: 00007fd9879e6128 R14: 00007ffe9a6bc840 R15: 00007ffe9a6bc928 [ 294.284596][ T8732] [ 294.669765][ T5152] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 294.684211][ T5152] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 294.700517][ T5152] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 294.716440][ T5152] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 294.748326][ T5152] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 296.793700][ T5840] Bluetooth: hci6: command tx timeout [ 297.089840][ T8735] chnl_net:caif_netlink_parms(): no params data found [ 297.454489][ T8735] bridge0: port 1(bridge_slave_0) entered blocking state [ 297.466095][ T8735] bridge0: port 1(bridge_slave_0) entered disabled state [ 297.477401][ T8735] bridge_slave_0: entered allmulticast mode [ 297.490217][ T8735] bridge_slave_0: entered promiscuous mode [ 297.502389][ T8735] bridge0: port 2(bridge_slave_1) entered blocking state [ 297.538373][ T8735] bridge0: port 2(bridge_slave_1) entered disabled state [ 297.549182][ T8735] bridge_slave_1: entered allmulticast mode [ 297.558441][ T8735] bridge_slave_1: entered promiscuous mode [ 297.697842][ T8735] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 297.736765][ T8735] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 297.897546][ T8735] team0: Port device team_slave_0 added [ 297.906540][ T8735] team0: Port device team_slave_1 added [ 298.789923][ T8792] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.878142][ T5840] Bluetooth: hci6: command tx timeout [ 298.889260][ T8735] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 298.915425][ T8735] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 298.942979][ T8735] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 298.956886][ T8735] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 298.963973][ T8735] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 299.024905][ T8735] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 299.356545][ T8735] hsr_slave_0: entered promiscuous mode [ 299.373785][ T8735] hsr_slave_1: entered promiscuous mode [ 299.380343][ T8735] debugfs: 'hsr0' already exists in 'hsr' [ 299.386244][ T8735] Cannot create hsr debugfs directory [ 299.419361][ T30] audit: type=1326 audit(1763929350.199:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8801 comm="syz.4.697" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc64518f749 code=0x0 [ 300.687600][ T8735] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 300.733602][ T8735] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 300.775366][ T8735] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 300.799086][ T8735] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 300.958947][ T5840] Bluetooth: hci6: command tx timeout [ 301.043884][ T8806] binder: BINDER_SET_CONTEXT_MGR already set [ 301.049922][ T8806] binder: 8805:8806 ioctl 4018620d 9 returned -16 [ 301.312155][ T8735] 8021q: adding VLAN 0 to HW filter on device bond0 [ 301.362528][ T8735] 8021q: adding VLAN 0 to HW filter on device team0 [ 301.419537][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 301.426831][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 301.519595][ T1007] bridge0: port 2(bridge_slave_1) entered blocking state [ 301.526810][ T1007] bridge0: port 2(bridge_slave_1) entered forwarding state [ 302.296071][ T8735] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 303.035492][ T5840] Bluetooth: hci6: command tx timeout [ 303.316467][ T8735] veth0_vlan: entered promiscuous mode [ 303.359503][ T8735] veth1_vlan: entered promiscuous mode [ 303.477939][ T8735] veth0_macvtap: entered promiscuous mode [ 303.510900][ T8735] veth1_macvtap: entered promiscuous mode [ 303.520720][ T8846] vhci_hcd: Wrong hub descriptor type for USB 3.0 roothub. [ 303.567944][ T8735] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 303.685917][ T8735] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 303.726560][ T1007] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.750158][ T1007] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.779208][ T1007] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.804880][ T1007] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.064979][ T8850] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 304.103182][ T8850] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 304.109371][ T8850] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 304.180700][ T8850] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 304.187483][ T8850] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 304.194810][ T8850] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 304.208200][ T8850] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 304.238386][ T8850] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 304.254258][ T8850] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 304.270008][ T8850] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 304.282201][ T8850] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 304.294443][ T8844] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 304.305941][ T8850] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 304.342821][ T8850] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 304.365977][ T8850] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 304.563752][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 304.590211][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 304.710619][ T1007] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 304.747823][ T1007] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 305.673214][ T5152] Bluetooth: hci0: command 0x0c1a tx timeout [ 305.708975][ T8892] FAULT_INJECTION: forcing a failure. [ 305.708975][ T8892] name failslab, interval 1, probability 0, space 0, times 0 [ 305.762795][ T8892] CPU: 0 UID: 0 PID: 8892 Comm: syz.6.681 Not tainted syzkaller #0 PREEMPT(full) [ 305.762838][ T8892] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 305.762871][ T8892] Call Trace: [ 305.762881][ T8892] [ 305.762894][ T8892] dump_stack_lvl+0x16c/0x1f0 [ 305.762940][ T8892] should_fail_ex+0x512/0x640 [ 305.762992][ T8892] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 305.763031][ T8892] should_failslab+0xc2/0x120 [ 305.763086][ T8892] kmem_cache_alloc_noprof+0x75/0x6e0 [ 305.763121][ T8892] ? __proc_create+0x2ce/0x8e0 [ 305.763177][ T8892] ? __proc_create+0x2ce/0x8e0 [ 305.763222][ T8892] __proc_create+0x2ce/0x8e0 [ 305.763273][ T8892] ? __pfx___proc_create+0x10/0x10 [ 305.763320][ T8892] ? copy_net_ns+0x2f8/0x690 [ 305.763358][ T8892] ? unshare_nsproxy_namespaces+0xc0/0x1f0 [ 305.763396][ T8892] ? ksys_unshare+0x45b/0xa40 [ 305.763438][ T8892] ? __x64_sys_unshare+0x31/0x40 [ 305.763496][ T8892] proc_create_reg+0x7d/0x180 [ 305.763552][ T8892] proc_create_net_data+0x8e/0x1c0 [ 305.763606][ T8892] ? __pfx_proc_create_net_data+0x10/0x10 [ 305.763671][ T8892] xt_proto_init+0x24e/0xc10 [ 305.763720][ T8892] ? __pfx_xt_proto_init+0x10/0x10 [ 305.763766][ T8892] ? kasan_save_track+0x14/0x30 [ 305.763805][ T8892] ? __kasan_kmalloc+0xaa/0xb0 [ 305.763850][ T8892] ? __pfx_ip_tables_net_init+0x10/0x10 [ 305.763897][ T8892] ops_init+0x1e2/0x5f0 [ 305.763938][ T8892] setup_net+0x100/0x390 [ 305.763974][ T8892] ? __pfx_setup_net+0x10/0x10 [ 305.764007][ T8892] ? debug_mutex_init+0x37/0x70 [ 305.764034][ T8892] copy_net_ns+0x2f8/0x690 [ 305.764074][ T8892] create_new_namespaces+0x3ea/0xa90 [ 305.764108][ T8892] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 305.764139][ T8892] ksys_unshare+0x45b/0xa40 [ 305.764171][ T8892] ? __pfx_ksys_unshare+0x10/0x10 [ 305.764205][ T8892] ? xfd_validate_state+0x61/0x180 [ 305.764248][ T8892] __x64_sys_unshare+0x31/0x40 [ 305.764279][ T8892] do_syscall_64+0xcd/0xfa0 [ 305.764311][ T8892] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 305.764334][ T8892] RIP: 0033:0x7fc13538f749 [ 305.764354][ T8892] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 305.764376][ T8892] RSP: 002b:00007fc1362e5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 305.764399][ T8892] RAX: ffffffffffffffda RBX: 00007fc1355e6090 RCX: 00007fc13538f749 [ 305.764415][ T8892] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 305.764429][ T8892] RBP: 00007fc135413f91 R08: 0000000000000000 R09: 0000000000000000 [ 305.764442][ T8892] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 305.764456][ T8892] R13: 00007fc1355e6128 R14: 00007fc1355e6090 R15: 00007fff694a80a8 [ 305.764487][ T8892] [ 306.154218][ T5152] Bluetooth: hci1: command 0x0c1a tx timeout [ 306.160496][ T5840] Bluetooth: hci2: command 0x0c1a tx timeout [ 306.251730][ T5840] Bluetooth: hci4: command 0x0c1a tx timeout [ 306.258143][ T5152] Bluetooth: hci3: command 0x0c1a tx timeout [ 306.347380][ T5152] Bluetooth: hci6: command 0x0c1a tx timeout [ 306.362892][ T5840] Bluetooth: hci5: command 0x0c1a tx timeout [ 306.642249][ T8867] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 308.312867][ T5840] Bluetooth: hci4: command 0x0c1a tx timeout [ 308.381174][ T8943] netlink: 186 bytes leftover after parsing attributes in process `syz.5.720'. [ 308.393140][ T5840] Bluetooth: hci5: command 0x0c1a tx timeout [ 308.399309][ T5152] Bluetooth: hci6: command 0x0c1a tx timeout [ 309.875002][ T8952] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 310.392843][ T5840] Bluetooth: hci4: command 0x0c1a tx timeout [ 310.472925][ T5840] Bluetooth: hci5: command 0x0c1a tx timeout [ 310.479065][ T5840] Bluetooth: hci6: command 0x0c1a tx timeout syzkaller syzkaller login: [ 312.553118][ T5840] Bluetooth: hci5: command 0x0c1a tx timeout [ 312.755365][ T9006] netlink: 186 bytes leftover after parsing attributes in process `syz.4.733'. [ 314.807674][ T9038] input: f as /devices/virtual/input/input34 [ 315.313448][ T9043] : renamed from gre0 (while UP) [ 315.495201][ T9049] netlink: 186 bytes leftover after parsing attributes in process `syz.4.743'. [ 316.274626][ T9064] netlink: 8 bytes leftover after parsing attributes in process `syz.2.745'. [ 320.639886][ T9130] bonding: no command found in bonding_masters - use +ifname or -ifname [ 321.820085][ T9138] netlink: 186 bytes leftover after parsing attributes in process `syz.2.763'. [ 322.223798][ T9143] netlink: 8 bytes leftover after parsing attributes in process `syz.6.765'. [ 322.233331][ T9143] nbd: must specify at least one socket [ 323.654953][ T9150] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 324.359973][ T9171] FAULT_INJECTION: forcing a failure. [ 324.359973][ T9171] name failslab, interval 1, probability 0, space 0, times 0 [ 324.373524][ T9171] CPU: 1 UID: 0 PID: 9171 Comm: syz.2.771 Not tainted syzkaller #0 PREEMPT(full) [ 324.373567][ T9171] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 324.373587][ T9171] Call Trace: [ 324.373597][ T9171] [ 324.373609][ T9171] dump_stack_lvl+0x16c/0x1f0 [ 324.373656][ T9171] should_fail_ex+0x512/0x640 [ 324.373708][ T9171] ? kmem_cache_alloc_lru_noprof+0x66/0x6e0 [ 324.373748][ T9171] should_failslab+0xc2/0x120 [ 324.373795][ T9171] kmem_cache_alloc_lru_noprof+0x79/0x6e0 [ 324.373828][ T9171] ? d_lookup+0xe7/0x190 [ 324.373876][ T9171] ? alloc_inode+0x64/0x240 [ 324.373927][ T9171] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 324.373978][ T9171] ? alloc_inode+0x64/0x240 [ 324.374020][ T9171] alloc_inode+0x64/0x240 [ 324.374066][ T9171] new_inode+0x22/0x1c0 [ 324.374113][ T9171] __debugfs_create_file+0x11c/0x6b0 [ 324.374152][ T9171] debugfs_create_file_full+0x41/0x60 [ 324.374191][ T9171] drm_debugfs_clients_add+0xd9/0x200 [ 324.374238][ T9171] drm_file_alloc+0x5c6/0xb40 [ 324.374293][ T9171] drm_open_helper+0x204/0x550 [ 324.374499][ T9171] drm_open+0x1a0/0x3e0 [ 324.374546][ T9171] ? __pfx_drm_open+0x10/0x10 [ 324.374591][ T9171] drm_stub_open+0x20f/0x380 [ 324.374669][ T9171] ? __pfx_drm_stub_open+0x10/0x10 [ 324.374716][ T9171] chrdev_open+0x234/0x6a0 [ 324.374755][ T9171] ? __pfx_apparmor_file_open+0x10/0x10 [ 324.374808][ T9171] ? __pfx_chrdev_open+0x10/0x10 [ 324.374851][ T9171] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 324.374898][ T9171] do_dentry_open+0x982/0x1530 [ 324.374940][ T9171] ? __pfx_chrdev_open+0x10/0x10 [ 324.374989][ T9171] vfs_open+0x82/0x3f0 [ 324.375043][ T9171] path_openat+0x1de4/0x2cb0 [ 324.375095][ T9171] ? __pfx_path_openat+0x10/0x10 [ 324.375137][ T9171] ? __lock_acquire+0xb8a/0x1c90 [ 324.375188][ T9171] do_filp_open+0x20b/0x470 [ 324.375225][ T9171] ? __pfx_do_filp_open+0x10/0x10 [ 324.375323][ T9171] ? alloc_fd+0x471/0x7d0 [ 324.375374][ T9171] do_sys_openat2+0x11b/0x1d0 [ 324.375426][ T9171] ? __pfx_do_sys_openat2+0x10/0x10 [ 324.375474][ T9171] ? ktime_get+0x1a7/0x310 [ 324.375532][ T9171] __x64_sys_openat+0x174/0x210 [ 324.375585][ T9171] ? __pfx___x64_sys_openat+0x10/0x10 [ 324.375666][ T9171] do_syscall_64+0xcd/0xfa0 [ 324.375712][ T9171] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 324.375746][ T9171] RIP: 0033:0x7f242358f749 [ 324.375773][ T9171] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 324.375807][ T9171] RSP: 002b:00007f2424365038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 324.375838][ T9171] RAX: ffffffffffffffda RBX: 00007f24237e5fa0 RCX: 00007f242358f749 [ 324.375859][ T9171] RDX: 0000000000020100 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 324.375879][ T9171] RBP: 00007f2423613f91 R08: 0000000000000000 R09: 0000000000000000 [ 324.375899][ T9171] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 324.375917][ T9171] R13: 00007f24237e6038 R14: 00007f24237e5fa0 R15: 00007fff8cc06038 [ 324.375962][ T9171] [ 324.375975][ T9171] debugfs: out of free dentries, can not create file 'proc_info' [ 325.475470][ T9161] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 326.578603][ T9201] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 326.899843][ T9215] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 327.596324][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 327.602925][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 329.078593][ T9262] netlink: 186 bytes leftover after parsing attributes in process `syz.4.787'. [ 329.115546][ T9262] netlink: 186 bytes leftover after parsing attributes in process `syz.4.787'. [ 330.040679][ T5904] Process accounting resumed [ 333.586571][ T9282] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 334.903497][ T9359] netlink: 186 bytes leftover after parsing attributes in process `syz.6.803'. [ 335.014502][ T9359] netlink: 186 bytes leftover after parsing attributes in process `syz.6.803'. [ 340.325487][ T9398] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 340.496113][ T9420] netlink: 'syz.4.820': attribute type 1 has an invalid length. [ 340.522827][ T9420] netlink: 190 bytes leftover after parsing attributes in process `syz.4.820'. [ 340.550915][ T9419] ima: policy update failed [ 340.562769][ T30] audit: type=1802 audit(1763929391.339:7): pid=9419 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.4.820" res=0 errno=0 [ 341.561361][ T9439] [U] [ 341.564404][ T9439] [U] [ 341.567139][ T9439] [U] [ 341.569849][ T9439] [U] [ 341.666151][ T9439] [U] [ 341.668953][ T9439] [U] [ 341.671710][ T9439] [U] [ 341.674442][ T9439] [U] [ 341.733313][ T9439] [U] [ 341.736072][ T9439] [U] a•` Ugxjf [ 341.740624][ T9439] [U] !xECE+ΛƽF`go6lC&L`UN0~]AԘg|]H+g+T:iaeK9 [ 341.751694][ T9439] [U] >t*O[3;Rv)&>2htUuD@`W0 [,\IH,RE#ukb''Csh*gIBʺDUs/}w ={\}L+ [ 341.765282][ T9439] [U] %`V!7"GD4 [ 341.769713][ T9439] [U] OBv|ݏ4F3PU_+iHɬP [ 341.775621][ T9439] [U] 0T8QJ2áa**؃ ^sBD~CՇ[SkFAn'ג*gQ35ݽ+d'>p/\AKQ:^ [ 341.788473][ T9439] [U] BZ2D [ 341.792600][ T9439] [U] -\y{Dgu" 8 ܖwy_ش+Z9AmXK@&ƻC0 |EK#8Tm q6=<k-"r# 7UJ)-bDՏ-]pC? KyO Rc-ubЧ^'%`hEر~,5TKwMiAw_i[cȣYņzClhI~"DScvFP3j4?$.:7ưoQV"'6YCyY[j_gjE7l)yMOg@:oI_$2&ZFqGd}\[~:uWǖ:okz+XHm8 ]X8ϥ>T.t7HEUHiÐJa\ [ 341.839538][ T9439] [U] ߎef:דm_dS\-b8.JnHp [ 341.847289][ T9439] [U] t!zQK9GܖV#onbOɑXb=޾]7ڊ E(~ȁ}'I뮐Zfn  |9 [ 341.859303][ T9439] [U] ,jEWqY]' [ 341.862800][ T9439] [U] /&Ѿ&b#2`?lWHqurcBaR8N;9ۈYt7_۝֒6𾈚Mڧ=5e [ 341.872540][ T9439] [U] '(<jk,t_oHT [ 341.877921][ T9439] [U] ;kqoL g`iýJsQ;PH }w [ 341.883905][ T9439] [U] ']*!9l*bmUϥ/>RslgGʸB< [ 341.890415][ T9439] [U] W\Ί?!n: QPai [ 341.895021][ T9439] [U] le\;Q [ 341.899122][ T9439] [U] h8?NUӢ 72+@R1EFLeJ#yAb4i`;yK׎ua8+6쨙yS3&塍 OPX$zڙ (s+TeVG|z9)ŕv`\$H$V-+5QDօ8fƧkS g [ 341.957165][ T9439] [U] =OFm [ 341.961078][ T9439] [U] vݜRyCg~)f#ޙvtW5$ yE}S%N¥ch~l48b?iP%V\4is77Q/!E)x, v̳k-+ ʝ!-?6$!+r}~< [ 341.977238][ T9439] [U] 8q6d*$;-gQcF3:%$¤yWLcAB:)Ò~x1E6BٍYQ7߮>GLf+Fz; [ 341.988895][ T9439] [U] =$o䃎lDK5^\*JFGD J`!3Pݡcrt yO"pwo)O۠v76L|d(0U5HoD\PxVLϒKV#lvW:j첢{ڴG_ŏovE@^zwM_Έܻ##(! [ 342.009134][ T9439] [U] "f/@*q|+( [ 342.013999][ T9439] [U] 9[1v [ 342.017114][ T9439] [U] ^7߰vX_YIPtާ5EL)ۼ[3_:HdI>eljs|2 [ 342.025701][ T9439] [U] EW:n\'Uy ߪ2uJNؠ>~.F:|<) [ 342.033962][ T9439] [U] -h]jĤ`29J̺[tkFV=TsY螳 [ 342.040824][ T9439] [U] 3NK}K8-riIᲸ_A{+-d8OP&dH,ޗ1;oj@opyo,_jgW6`a-[KR!)>!VI[B/ӽ [ 342.053166][ T9439] [U] ì|Q]ڳEJm}&e <ܳ?8hH"NJ)o%xD‘*իٞcdPan:p2 +졀4Z})wĵWPG [ 342.066288][ T9439] [U] oRx e|‹F..y3,d~ [ 342.071499][ T9439] [U] G3L֌[bhG4H9YmӠF%e<i \c.#"k0LjM$׃Dt/pu|#{sǛHi!dUrH M-X>!}3:"6 [ 342.085609][ T9439] [U] w (hK [ 342.172886][ T9439] [U] 0wN5wװ_ iW&C@8="b=rW-J%)O6⪰I*ZbMξ vI; [ 342.197427][ T9439] [U] Q`0%gb`T= $etǣ`Bڔ@E]P7|θ'F [ 342.204986][ T9439] [U] !k"JP+$kQxtXt(ĆޗGerlCs-e;I!F{]懁2`B,/a1#]zSfgJ=6ߋ0+3=UaĴrުAf| [ 342.218104][ T9439] [U] %&R.΁}';XkLP[1ĕmfYbʧS>΅aIo6D_mhua^:?) [ 342.228261][ T9439] [U] ^~'t-=6d%Uξ [ 342.233401][ T9439] [U] *MAMRѕ2z,g,yr|f>__)x,>RŜjU#^gBV$BܹZ9魋Ypa[bi(b&+#-r0'oQM9'a5^8 [ 342.247849][ T9439] [U] =J[~ [ 342.251805][ T9439] [U] <".Q$&޴jkf8%|5qy 知sdWNhwܤ.?y1ćUFe'5W8v2֯zX:jg]gh -| g=KPGFJYyl^#ΫvVzxIBcaHD ay~IN-0ػo [ 342.313895][ T9439] [U] R4@$Ɛ!?鹹Rz5o$nY~(.۫@7+ U~'6;{w` [ 342.322578][ T9439] [U] ]"ξ:,z]5_Ҟ5 rtNĜ/< [ 342.328737][ T9439] [U] Tg:{L#рzk4a1 ݰM>rq=G8~e T.t,m "1E>,=Tk[(R)ϳ.e [ 342.432747][ T9439] [U] 7YMpSŴq"ۥ/ԁ J$t\]}?r y#ɷy=6ՉUBVk&"$cL4/30XBU5hArpi~?ZL߁j4K [ 342.447513][ T9439] [U] FRm=?Y9CV8n [ 342.453019][ T9439] [U] Xy3$1Uz?QTY}JYaEZ1^v-ݹ YRVwJ.'4U^.J eJf^5EV^ [ 342.465482][ T9439] [U] 4b^_ b.!p|m$X` [ 342.471942][ T9439] [U] |=`3 [ 342.475450][ T9439] [U] +B>O}f])djM{둭 dpzio#P{':z, [ 342.483463][ T9439] [U] < [ 342.486619][ T9439] [U] qbAK!w\29v[c [ 342.490806][ T9439] [U] ^W46Ư*puu),҆ [ 342.496479][ T9439] [U] W)PR6?ho$vޣ.G c dGPV$92ù }smHH_ZrÚZ]bJ. 'xES [ 342.507612][ T9439] [U] 3.V--fT0IRG"Ee'z骴r4B޷$Ji2l+ݘf ,8wD}jr{ѸbMl#D7YKs 5 [ 342.521532][ T9439] [U] 9g5D V9f zQebJ)? [ 342.526847][ T9439] [U] ճɡJ*S=J~E> [ 342.532151][ T9439] [U] h|+t0C~T 24|R'koELVgusd,z]2#X`ܱ@N [ 342.542899][ T9439] [U] y [ 342.545943][ T9439] [U] iߜ[AV-YM6M ϻ}P.'/U~þ} m.~_%2jH [ 342.555099][ T9439] [U] Dh_%W۟@/+Ե p4ˌ{fh>K!ˈnJ [ 342.562776][ T9439] [U] N_3!$hݗՖy1iVe =*__נpj6B5,<}ui&MGf2v:z6nw=H^lH~{tUG-A[Up_2Y9 [ 342.588452][ T9439] [U] wAzu$R͆Lld6-Ob=Qg-B%8w [ 342.596404][ T9439] [U] o׭@Mѳt_V[+6z3W_\s)Яŀ?ÐJU:ͧ ;UL(]n.t6 /Hxw'yӪݎb4#RM)@׽AohoŊb#ɦ{ЯCtݟNUaߠXR5̨f> [ 342.731859][ T9429] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 342.911907][ T9447] device-mapper: ioctl: dm_ctl_ioctl: unknown command 0xfffffd1f [ 343.461194][ T9466] netlink: 342 bytes leftover after parsing attributes in process `syz.2.832'. [ 343.902627][ T9477] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input42 [ 344.106577][ T5840] Bluetooth: hci5: unexpected event 0x3e length: 0 < 1 [ 346.422996][ T9505] Console: switching to colour VGA+ 80x25 [ 346.723353][ T9477] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input43 [ 350.129241][ T9563] Console: switching to colour frame buffer device 128x48 [ 350.617303][ T9566] random: crng reseeded on system resumption [ 352.371050][ T9621] futex_wake_op: syz.5.875 tries to shift op by -2048; fix this program [ 352.420700][ T9623] FAULT_INJECTION: forcing a failure. [ 352.420700][ T9623] name failslab, interval 1, probability 0, space 0, times 0 [ 352.433202][ T9621] futex_wake_op: syz.5.875 tries to shift op by -2048; fix this program [ 352.434053][ T9623] CPU: 1 UID: 0 PID: 9623 Comm: syz.4.876 Not tainted syzkaller #0 PREEMPT(full) [ 352.434101][ T9623] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 352.434123][ T9623] Call Trace: [ 352.434137][ T9623] [ 352.434152][ T9623] dump_stack_lvl+0x16c/0x1f0 [ 352.434207][ T9623] should_fail_ex+0x512/0x640 [ 352.434264][ T9623] ? kmem_cache_alloc_lru_noprof+0x66/0x6e0 [ 352.434310][ T9623] should_failslab+0xc2/0x120 [ 352.434363][ T9623] kmem_cache_alloc_lru_noprof+0x79/0x6e0 [ 352.434405][ T9623] ? __d_alloc+0x32/0xae0 [ 352.434457][ T9623] ? __d_alloc+0x32/0xae0 [ 352.434497][ T9623] __d_alloc+0x32/0xae0 [ 352.434547][ T9623] d_alloc_pseudo+0x1c/0xc0 [ 352.434602][ T9623] alloc_file_pseudo+0xcf/0x230 [ 352.434657][ T9623] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 352.434710][ T9623] ? alloc_fd+0x471/0x7d0 [ 352.434756][ T9623] sock_alloc_file+0x50/0x210 [ 352.434798][ T9623] __sys_socket+0x1c0/0x260 [ 352.434852][ T9623] ? __pfx___sys_socket+0x10/0x10 [ 352.434914][ T9623] ? xfd_validate_state+0x61/0x180 [ 352.434969][ T9623] ? __pfx_ksys_write+0x10/0x10 [ 352.435020][ T9623] __x64_sys_socket+0x72/0xb0 [ 352.435069][ T9623] ? lockdep_hardirqs_on+0x7c/0x110 [ 352.435115][ T9623] do_syscall_64+0xcd/0xfa0 [ 352.435165][ T9623] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 352.435204][ T9623] RIP: 0033:0x7fc64518f749 [ 352.435234][ T9623] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 352.435272][ T9623] RSP: 002b:00007fc646096038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 352.435307][ T9623] RAX: ffffffffffffffda RBX: 00007fc6453e5fa0 RCX: 00007fc64518f749 [ 352.435333][ T9623] RDX: 0000000000000009 RSI: 0000000000000002 RDI: 0000000000000010 [ 352.435354][ T9623] RBP: 00007fc645213f91 R08: 0000000000000000 R09: 0000000000000000 [ 352.435376][ T9623] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 352.435399][ T9623] R13: 00007fc6453e6038 R14: 00007fc6453e5fa0 R15: 00007ffd57445418 [ 352.435449][ T9623] [ 352.693753][ T9621] futex_wake_op: syz.5.875 tries to shift op by -2048; fix this program [ 352.951596][ T9620] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 0 out of range (51000000..2150000000) [ 353.488131][ T9628] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 356.084347][ T9684] netlink: 186 bytes leftover after parsing attributes in process `syz.4.888'. [ 357.041934][ T9687] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 357.466013][ T9699] ALSA: mixer_oss: invalid OSS volume '' [ 358.327253][ T31] INFO: task syz.3.400:7540 blocked for more than 143 seconds. [ 358.357145][ T31] Not tainted syzkaller #0 [ 358.390538][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 358.422771][ T31] task:syz.3.400 state:D stack:27672 pid:7540 tgid:7534 ppid:5831 task_flags:0x400140 flags:0x00080002 [ 358.467811][ T31] Call Trace: [ 358.472152][ T9695] kexec: Could not allocate control_code_buffer [ 358.484149][ T31] [ 358.496619][ T31] __schedule+0x1190/0x5de0 [ 358.522753][ T31] ? check_path.constprop.0+0x24/0x50 [ 358.540918][ T31] ? __lock_acquire+0x622/0x1c90 [ 358.559470][ T31] ? __pfx___schedule+0x10/0x10 [ 358.565644][ T31] ? find_held_lock+0x2b/0x80 [ 358.570424][ T31] ? schedule+0x2d7/0x3a0 [ 358.575516][ T31] ? nfsd_nl_listener_set_doit+0xd5/0x1b10 [ 358.582147][ T31] schedule+0xe7/0x3a0 [ 358.587609][ T31] schedule_preempt_disabled+0x13/0x30 [ 358.613724][ T31] __mutex_lock+0x818/0x1060 [ 358.618428][ T31] ? ____sys_sendmsg+0xa98/0xc70 [ 358.627871][ T31] ? ___sys_sendmsg+0x134/0x1d0 [ 358.648178][ T31] ? nfsd_nl_listener_set_doit+0xd5/0x1b10 [ 358.659953][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 358.667467][ T31] ? __asan_memset+0x23/0x50 [ 358.672153][ T31] ? __nla_validate_parse+0x600/0x2880 [ 358.679266][ T31] ? nfsd_nl_listener_set_doit+0xd5/0x1b10 [ 358.685515][ T31] nfsd_nl_listener_set_doit+0xd5/0x1b10 [ 358.691235][ T31] ? rcu_is_watching+0x12/0xc0 [ 358.702732][ T31] ? __pfx_nfsd_nl_listener_set_doit+0x10/0x10 [ 358.708984][ T31] ? __nla_parse+0x40/0x60 [ 358.719363][ T31] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 358.728340][ T31] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 358.740509][ T31] genl_family_rcv_msg_doit+0x209/0x2f0 [ 358.756981][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 358.765307][ T31] ? rcu_is_watching+0x12/0xc0 [ 358.770177][ T31] ? bpf_lsm_capable+0x9/0x10 [ 358.776858][ T31] ? security_capable+0x7e/0x260 [ 358.781884][ T31] genl_rcv_msg+0x55c/0x800 [ 358.793063][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 358.798279][ T31] ? __pfx_nfsd_nl_listener_set_doit+0x10/0x10 [ 358.804684][ T31] netlink_rcv_skb+0x158/0x420 [ 358.809525][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 358.826424][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 358.831855][ T31] ? netlink_deliver_tap+0x1ae/0xd30 [ 358.837534][ T31] genl_rcv+0x28/0x40 [ 358.841595][ T31] netlink_unicast+0x5aa/0x870 [ 358.851971][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 358.852038][ T9727] usb usb2: usbfs: process 9727 (syz.5.896) did not claim interface 0 before use [ 358.857451][ T31] netlink_sendmsg+0x8c8/0xdd0 [ 358.857510][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 358.882582][ T30] audit: type=1326 audit(1763929409.659:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9725 comm="syz.5.896" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd98778f749 code=0x0 [ 358.907597][ T31] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 358.914138][ T31] ____sys_sendmsg+0xa98/0xc70 [ 358.919128][ T31] ? copy_msghdr_from_user+0x10a/0x160 [ 358.924798][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 358.930298][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 358.938940][ T31] ? try_to_wake_up+0xa67/0x1870 [ 358.945115][ T31] ___sys_sendmsg+0x134/0x1d0 [ 358.958753][ T31] ? find_held_lock+0x2b/0x80 [ 358.968301][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 358.974680][ T31] ? __lock_acquire+0x622/0x1c90 [ 358.979960][ T31] __sys_sendmsg+0x16d/0x220 [ 358.987076][ T31] ? __pfx___sys_sendmsg+0x10/0x10 [ 358.992485][ T31] ? __x64_sys_futex+0x1e0/0x4c0 [ 358.997732][ T31] do_syscall_64+0xcd/0xfa0 [ 359.002386][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 359.008631][ T31] RIP: 0033:0x7fc8f0f8f749 [ 359.015717][ T31] RSP: 002b:00007fc8ef1f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 359.025224][ T31] RAX: ffffffffffffffda RBX: 00007fc8f11e6090 RCX: 00007fc8f0f8f749 [ 359.033583][ T31] RDX: 0000000020000000 RSI: 0000200000005380 RDI: 0000000000000005 [ 359.041812][ T31] RBP: 00007fc8f1013f91 R08: 0000000000000000 R09: 0000000000000000 [ 359.058588][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 359.067005][ T31] R13: 00007fc8f11e6128 R14: 00007fc8f11e6090 R15: 00007ffe6e434698 [ 359.075513][ T31] [ 359.078759][ T31] [ 359.078759][ T31] Showing all locks held in the system: [ 359.088046][ T31] 1 lock held by khungtaskd/31: [ 359.095768][ T31] #0: ffffffff8e3c45e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0 [ 359.108047][ T31] 3 locks held by kworker/u8:5/80: [ 359.118631][ T31] 2 locks held by syz-executor/5829: [ 359.124721][ T31] #0: ffff88807e0fc0e0 (&type->s_umount_key#50){+.+.}-{4:4}, at: deactivate_super+0xd6/0x100 [ 359.137106][ T31] #1: ffffffff8e7ed348 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 359.148087][ T31] 2 locks held by syz.1.386/7491: [ 359.157608][ T31] #0: ffffffff9018f210 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 359.169751][ T31] #1: ffffffff8e7ed348 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0xd5/0x1b10 [ 359.181123][ T31] 2 locks held by syz.3.400/7540: [ 359.186616][ T31] #0: ffffffff9018f210 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 359.195488][ T31] #1: ffffffff8e7ed348 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0xd5/0x1b10 [ 359.208464][ T31] 2 locks held by getty/8997: [ 359.213588][ T31] #0: ffff888034be30a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 359.223981][ T31] #1: ffffc9000e1772f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x14f0 [ 359.332932][ T31] 1 lock held by syz.6.874/9642: [ 359.340556][ T31] 1 lock held by syz.6.895/9713: [ 359.350040][ T31] #0: ffffffff8e3cfa40 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x48/0x6e0 [ 359.388558][ T31] 1 lock held by syz.5.896/9731: [ 359.396184][ T31] [ 359.398580][ T31] ============================================= [ 359.398580][ T31] [ 359.431329][ T31] NMI backtrace for cpu 0 [ 359.431353][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 359.431389][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 359.431409][ T31] Call Trace: [ 359.431419][ T31] [ 359.431431][ T31] dump_stack_lvl+0x116/0x1f0 [ 359.431476][ T31] nmi_cpu_backtrace+0x27b/0x390 [ 359.431537][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 359.431586][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 359.431641][ T31] watchdog+0xf3f/0x1170 [ 359.431679][ T31] ? rcu_is_watching+0x12/0xc0 [ 359.431714][ T31] ? __pfx_watchdog+0x10/0x10 [ 359.431741][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 359.431784][ T31] ? __kthread_parkme+0x19e/0x250 [ 359.431826][ T31] ? __pfx_watchdog+0x10/0x10 [ 359.431856][ T31] kthread+0x3c5/0x780 [ 359.431904][ T31] ? __pfx_kthread+0x10/0x10 [ 359.431953][ T31] ? rcu_is_watching+0x12/0xc0 [ 359.431988][ T31] ? __pfx_kthread+0x10/0x10 [ 359.432036][ T31] ret_from_fork+0x675/0x7d0 [ 359.432082][ T31] ? __pfx_kthread+0x10/0x10 [ 359.432130][ T31] ret_from_fork_asm+0x1a/0x30 [ 359.432216][ T31] [ 359.432229][ T31] Sending NMI from CPU 0 to CPUs 1: [ 359.556702][ C1] NMI backtrace for cpu 1 [ 359.556722][ C1] CPU: 1 UID: 0 PID: 80 Comm: kworker/u8:5 Not tainted syzkaller #0 PREEMPT(full) [ 359.556753][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 359.556771][ C1] Workqueue: events_unbound toggle_allocation_gate [ 359.556808][ C1] RIP: 0010:arch_jump_entry_size+0x29/0x150 [ 359.556844][ C1] Code: 90 f3 0f 1e fa 41 55 41 54 49 bc 00 00 00 00 00 fc ff df 55 53 48 89 fb 48 81 ec e0 00 00 00 48 89 e5 48 c7 04 24 b3 8a b5 41 <48> c7 44 24 08 5b b4 9f 8d 48 c1 ed 03 48 c7 44 24 10 f0 43 5f 81 [ 359.556869][ C1] RSP: 0018:ffffc9000212f958 EFLAGS: 00000282 [ 359.556887][ C1] RAX: fffffffff442383c RBX: ffffffff8dd649d0 RCX: 0000000000000000 [ 359.556904][ C1] RDX: 0000000000000000 RSI: ffffffff815f456e RDI: ffffffff8dd649d0 [ 359.556921][ C1] RBP: ffffc9000212f958 R08: 0000000000000000 R09: fffffbfff210499a [ 359.556937][ C1] R10: ffffc9000212fab0 R11: 0000000000000001 R12: dffffc0000000000 [ 359.556954][ C1] R13: 0000000000000000 R14: ffffffff82187f77 R15: ffffffff8dd70460 [ 359.556970][ C1] FS: 0000000000000000(0000) GS:ffff888124b0d000(0000) knlGS:0000000000000000 [ 359.556995][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 359.557011][ C1] CR2: 0000001b32108ff8 CR3: 00000000780c8000 CR4: 00000000003526f0 [ 359.557027][ C1] Call Trace: [ 359.557035][ C1] [ 359.557049][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 359.557087][ C1] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 359.557125][ C1] ? __kmalloc_cache_noprof+0x320/0x780 [ 359.557150][ C1] __jump_label_patch+0x85/0x400 [ 359.557184][ C1] arch_jump_label_transform_queue+0x7e/0x120 [ 359.557218][ C1] ? find_held_lock+0x2b/0x80 [ 359.557315][ C1] __jump_label_update+0x125/0x420 [ 359.557355][ C1] jump_label_update+0x376/0x550 [ 359.557393][ C1] static_key_disable_cpuslocked+0x158/0x1c0 [ 359.557432][ C1] static_key_disable+0x1a/0x20 [ 359.557468][ C1] toggle_allocation_gate+0x145/0x280 [ 359.557502][ C1] ? __pfx_toggle_allocation_gate+0x10/0x10 [ 359.557538][ C1] ? rcu_is_watching+0x12/0xc0 [ 359.557568][ C1] process_one_work+0x9cf/0x1b70 [ 359.557616][ C1] ? __pfx_process_one_work+0x10/0x10 [ 359.557662][ C1] ? assign_work+0x1a0/0x250 [ 359.557706][ C1] worker_thread+0x6c8/0xf10 [ 359.557734][ C1] ? __kthread_parkme+0x19e/0x250 [ 359.557766][ C1] ? __pfx_worker_thread+0x10/0x10 [ 359.557788][ C1] kthread+0x3c5/0x780 [ 359.557825][ C1] ? __pfx_kthread+0x10/0x10 [ 359.557863][ C1] ? rcu_is_watching+0x12/0xc0 [ 359.557889][ C1] ? __pfx_kthread+0x10/0x10 [ 359.557926][ C1] ret_from_fork+0x675/0x7d0 [ 359.557964][ C1] ? __pfx_kthread+0x10/0x10 [ 359.558001][ C1] ret_from_fork_asm+0x1a/0x30 [ 359.558046][ C1]