last executing test programs: 21m57.52430955s ago: executing program 32 (id=1222): openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) mmap$auto(0x0, 0x4020009, 0x7, 0xeb1, 0x400, 0x8000) socket(0x2, 0x5, 0x0) move_pages$auto(0x1, 0x20007, 0x0, 0x0, 0x0, 0x8000000000000000) setsockopt$auto(0x3, 0x10000000084, 0x14, 0x0, 0x8) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) ioctl$auto(0x3, 0x400454ca, 0x38) close_range$auto(0x2, 0x8, 0x0) 21m52.555758605s ago: executing program 33 (id=1238): mmap$auto(0x0, 0x4020009, 0x4000000000df, 0x800000000eb1, 0x6, 0x8000) move_pages$auto(0x1, 0x100000008001, 0x0, 0x0, 0x0, 0x8000000000000000) socket(0x1d, 0x1, 0x7fff) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000240)='/proc/irq/13/effective_affinity\x00', 0x400, 0x0) r2 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/tracing/set_event\x00', 0xc0040, 0x0) r3 = fcntl$auto_F_WRLCK(r2, 0x2, 0x1) pread64$auto(r1, 0x0, 0x100000001, 0x2000006) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x2000008000) close_range$auto(r0, 0x8, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/mm/ksm/pages_scanned\x00', 0x42000, 0x0) r4 = socket(0x2, 0x2, 0x0) r5 = syz_genetlink_get_family_id$auto_net_dm(&(0x7f00000002c0), r3) sendmsg$auto_NET_DM_CMD_STATS_GET(r4, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="350000004be68e3511dd2c568edd6b31d8dd31de677ba7867ece44202839613798080efa9269d376cc17dbd12253fbd9e94d5d2709c1829013d76c6a9e20757da1089e804ca805f50624d0415fb12b2190bc", @ANYRES16=r5, @ANYBLOB="000829bd7000fcdbdf2508000000080009000f00000002001500080009000800000004001400"], 0x2c}, 0x1, 0x0, 0x0, 0x2000c8c4}, 0x20000000) socket(0x2, 0x1, 0x0) close_range$auto(0x2, 0x8, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r6, 0x0, 0x20) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x100000000}, 0x410000003) r7 = openat$auto_aoe_fops_aoechr(0xffffffffffffff9c, &(0x7f0000000000)='/dev/etherd/discover\x00', 0x80101, 0x0) getsockname$auto(r1, &(0x7f0000000180)=@can, &(0x7f00000001c0)=0x7ff) writev$auto(r7, &(0x7f0000000140)={0x0, 0x36e}, 0x4) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/system/node/node1/compact\x00', 0xc2481, 0x0) r8 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/fb0\x00', 0x20401, 0x0) ioctl$auto_FBIOPUT_VSCREENINFO(r8, 0x4601, &(0x7f0000001200)="55cbf8d049cbae1ce902c4a49a31b59b8edd53e4825ea16aaa176ba980172d552af55e4e3ab551b1a618d6d897f697c9f7e490660271716e39ff788feace8599be339de401a6c8f143f90a458705dc383b66c82633c9b0e54a1683271c8a5169e8a6c00125a14180cc81fccc7b2f6bbb2426d35b60d00d73ac00d83f515b4fcca07959d973e5") connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) sendmmsg$auto(0x3, 0x0, 0x9a4, 0xffff) 21m1.365158698s ago: executing program 34 (id=1353): r0 = socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sendmsg$auto_NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x404c0c0}, 0x80) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) r1 = socket(0x15, 0x5, 0x0) bind$auto(r1, &(0x7f0000000040)=@rc={0x1f, @none, 0x5}, 0x1) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) ioctl$auto_VHOST_SET_VRING_CALL(0xffffffffffffffff, 0x4008af21, &(0x7f0000000100)={0x7, r0}) ioctl$auto_SNDRV_PCM_IOCTL_INFO(r2, 0x81204101, &(0x7f0000000280)={0xfffffff9, 0x2, 0x0, 0x1, "5b2d0d27c9efd7b884cf2e0b64feae61be7db349bb3489a6739cb4f5976b7f7c50bcff6999c4a58a59a0396500354df1b2f6a1d52403235d13be5c289030d704", "7978a65d8b188f97b2ed86ba00fb0459b6980e64116246a7c4bcb24504d566fb33ba46f216581d760e7fb4cc022eed7e8e33fc79d5d3ad122b1285b48cc404e3a1ae64e211e8ab610b73826870b2f928", "c265efb70ac19a1a4e9ab6c1ce87132174d525878a8bc826db9ce17d7a34923d", 0xfff, 0x81, 0x3, 0x0, '\x00', "cabba979970db058d60285ad1fc9085421fa2aba9303a13f74719656b6a6978692207039cac7f38148e5fa513feef5e023315cfad7ec99d4b860549bf7e570cc"}) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x9, 0x21eb, 0x6, 0xffffffff, 0xa, 0x1000009, 0x5f, 0x0, 0x3}, 0x6f3) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) ioctl$auto(0x3, 0x400454ca, 0x38) socket(0x2, 0x3, 0x2) setsockopt$auto(0x3, 0x0, 0xd1, 0xfffffffffffffffc, 0xfd72) mremap$auto(0x0, 0x7, 0x3fd6, 0x3, 0x200000) write$auto(0x3, 0x0, 0xfdf3) 17m51.667754265s ago: executing program 35 (id=2089): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000001c0), 0xffffffffffffffff) openat$auto_ext4_dir_operations_ext4(0xffffffffffffff9c, &(0x7f0000000200)='/sys/devices/virtual/mac80211_hwsim/hwsim13\x00', 0x8000, 0x0) r2 = openat$auto_kernel_debug_fops_orangefs_debugfs(0xffffffffffffff9c, &(0x7f0000000240), 0x800, 0x0) shmctl$auto_IPC_RMID(0x6, 0x0, &(0x7f0000000400)={{0x7f, 0xee01, 0xee01, 0xff, 0x2fe, 0x9, 0x6}, 0x80, 0x7, 0x0, 0x100000001, @raw=0x3, @inferred=0xffffffffffffffff, 0x819, 0x0, &(0x7f00000002c0)="7ce4d104", &(0x7f0000000300)="8eefab47cdbc0878bee243814255a806fac6304a094d45ee3cfbbefb6549889ddde3515a203147e72bb4e3af4b02bddaf14b8973ac21f67279d072612f295381fe4a174f69660a7790fdb424813e0659425cb6e5f2178004ddaadb3443999c8c83ca565ef9207b046db0669bd89f8ec7aa081266cbdb4fffbc3445936e8846d2b94777a14ada69766a3df5ae980dc98c291fc4766e54b868ce60a50fdbd70bede32f90056a8758125776cf4df1506082702ae3dcdb1e4afe4a6aab46e79b5428ca4018762efea8e3fbcdcef2af831eafb590d9dece475946043ae9"}) sendmsg$auto_NL80211_CMD_SET_TID_TO_LINK_MAPPING(r0, &(0x7f0000005280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000005240)={&(0x7f000000a0c0)=ANY=[@ANYBLOB="b84d0000", @ANYRES16=r1, @ANYBLOB="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", @ANYRES32=r4, @ANYBLOB='\b\x00 \x00', @ANYRES32, @ANYBLOB="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", @ANYRES32=r2, @ANYBLOB="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", @ANYRES32=0xee00, @ANYBLOB="08001100", @ANYRES32=r3, @ANYBLOB="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"], 0x4db8}, 0x1, 0x0, 0x0, 0x8880}, 0x48) r5 = openat$auto_dvb_dvr_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000080), 0x2003, 0x0) r6 = openat$auto_dvb_dvr_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000000), 0x20500, 0x0) read$auto_dvb_dvr_fops_dmxdev(r6, &(0x7f00000000c0)=""/175, 0xaf) process_vm_readv$auto(0x0, &(0x7f0000000000)={0x0, 0xfff}, 0x1, 0x0, 0xa, 0x0) r7 = socket(0x2, 0x5, 0x0) setsockopt$auto_SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000000)='}]\x00', 0x10) socket(0x28, 0x6d5144447e63dfd3, 0x3) mmap$auto(0x0, 0x2000d, 0x4000000200df, 0xeb1, 0x404, 0x8000) socket(0x1d, 0x1, 0x0) bpf$auto(0x5, &(0x7f0000000000)=@bpf_attr_0={0x0, 0x1, 0xff, 0x5, 0x8006, 0xffffffffffffffff, 0xfffffffb, "04007a0cd9022f362600f4f80a00", 0x0, 0xffffffffffffffff, 0x0, 0x8, 0x1, 0x7}, 0x7) r8 = socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) mmap$auto(0x3, 0x1000000e97f, 0x5, 0x40eb1, 0x401, 0x8000) sendmmsg$auto(r8, 0x0, 0x9a6, 0x7000000) socket(0x1, 0x1, 0x0) r9 = socket(0x10, 0x2, 0x4) sendmsg$auto_THERMAL_GENL_CMD_TZ_GET_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="21022cbc7000ebdbdf2501"], 0x14}, 0x1, 0x0, 0x0, 0x400c050}, 0x4000080) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c00000014"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000) write$auto(r9, &(0x7f0000000000)='-\x00', 0x2fb) getsockopt$auto(0x4, 0x200000000, 0x15, 0xfffffffffffffffc, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0xd4, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x6, 0x9) socketcall$auto_SYS_ACCEPT4(0x12, 0x0) ioctl$auto(r5, 0x6f2d, r5) 4m13.169945275s ago: executing program 6 (id=5511): close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0xc) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r1) ioctl$auto_KVM_GET_MSRS(r0, 0x4008ae89, &(0x7f00000000c0)={0xdd, 0x0, [{0x40000000, 0x400, 0x2}]}) 4m12.514297723s ago: executing program 6 (id=5516): r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/afs/addr_prefs\x00', 0x102, 0x0) writev$auto(r0, &(0x7f0000000080)={&(0x7f0000000040), 0x6}, 0x3) r1 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) execveat$auto(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r2 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x80080, 0x0) ioctl$auto_PPPIOCATTACH(r2, 0x4004743d, &(0x7f0000000040)=0xffffffff) mmap$auto(0xfffffffffffffff8, 0xef3f, 0x0, 0x17, r2, 0x7) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) ioctl$auto(r3, 0x4b47, 0x1) openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/usbmon6\x00', 0x2, 0x0) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) r4 = socket(0x2, 0x5, 0x0) connect$auto(0x3, &(0x7f0000000000)=@in={0x2, 0x0, @rand_addr=0xfffffffe}, 0x55) sendto$auto(0x3, 0x0, 0x2000f, 0x13f, &(0x7f0000000000)=@in={0x2, 0x4e22, @loopback}, 0x1c) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_wireguard(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$auto_WG_CMD_SET_DEVICE(r5, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000c40)={0x38, r6, 0x1, 0x70bd28, 0x25dfdbff, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, "7729ecac5e9239d0c4058eac0405576c2cd59ffc84b3098afa677190f34d1790"}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'veth1_macvtap\x00'}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'vlan0\x00'}) 4m11.372073256s ago: executing program 6 (id=5523): mmap$auto(0x0, 0xe983, 0x821, 0xeb1, 0x401, 0x0) r0 = socketpair$auto(0xa, 0x2, 0x8000000000000000, 0x0) preadv$auto(r0, &(0x7f0000000040)={&(0x7f0000000000)="c094c0fb882a76987935c38c0ed4dd1a54fb21e509877629c69974cd52c7590a651f83c1372b9445b4fc607330d157", 0x7e65}, 0x3, 0x80, 0x800) socket(0xa, 0x3, 0x73) setsockopt$auto(0x400000000000003, 0x29, 0x7, 0x0, 0x401) 4m10.913103519s ago: executing program 6 (id=5527): bpf$auto(0x11, &(0x7f0000000000)=@batch={0xfffffffffffffffb, 0x44, 0x2, 0x9, 0x1, 0xffffffffffffffff, 0xa, 0x6}, 0xcf) r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x2e, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200"], 0x1ac}, 0x1, 0xc3}, 0x40000) 4m10.419656131s ago: executing program 6 (id=5533): r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYBLOB="5e0027619b4e0635ecdff5757c36ca699735903afd"], 0x1ac}, 0x1, 0x0, 0x0, 0x40080}, 0x40000) read$auto(r0, &(0x7f00000000c0)='\x00', 0x2) 4m9.881217084s ago: executing program 6 (id=5536): r0 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_ASSOCIATE(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x9040ff392da23819}, 0xc, &(0x7f0000000340)={&(0x7f0000000200)={0x108, r0, 0x300, 0x70bd28, 0x25dfdbfb, {}, [@NL80211_ATTR_CNTDWN_OFFS_BEACON={0xe1, 0xba, "5d9da58458a6b4283fa44c24259954afed3b2baca7fde909e9eca395601159b0765a9ddb1999e98a85ed8c397769c0e1a0113fa900b1d9e7f4aed6b7495123d65cb8d876f268114a15045eccad9b478a5d25e596b6ab0b88cb027079fe56f2983848a4c70b44a2c553b65309e573005733c08ab18eb54a9de589645150a6a39a66d6bdc1711cd26daf535fe79365a60c58c74d018740104201ff6dfc629bd3e34f9f5729d02e97e01fc63971af5bba76609898eb988298170ebe3f0419289e03e3bc4f31414798c07b0dc4a7332079e8f5a359e589faad00a533e70a4d"}, @NL80211_ATTR_PUNCT_BITMAP={0x8, 0x142, 0xa34}, @NL80211_ATTR_SMPS_MODE={0x5, 0xd5, 0x9}]}, 0x108}, 0x1, 0x0, 0x0, 0x20008840}, 0x5) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r1 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x42802, 0x0) read$auto(r1, 0x0, 0xb4d3) r2 = socket(0x1d, 0x2, 0x6) setsockopt$auto(r2, 0x6a, 0x1, 0x0, 0xc) r3 = openat$auto_qrtr_tun_ops_tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) writev$auto(0x3, &(0x7f0000000100)={&(0x7f0000000340), 0x7111}, 0x8) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r4 = socketpair$auto(0x9, 0xa527, 0x80001, 0x0) mmap$auto(0x0, 0xff, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) r5 = pidfd_open$auto(0x1, 0x0) setns(r5, 0x60020000) newfstatat$auto(0xffffffffffffff9c, 0x0, 0x0, 0x1000) mknod$auto(0x0, 0x1081, 0x6) creat$auto(0x0, 0x1000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) timerfd_settime$auto(0xffffffffffffffff, 0x2, 0x0, 0x0) capset$auto(&(0x7f0000000180)={0x19980330}, 0x0) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/mac80211_hwsim/hwsim0/net/wlan0/threaded\x00', 0xa001, 0x0) write$auto(r6, 0x0, 0xd4d0) connect$auto(0x4, 0x0, 0x10) r7 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) execveat$auto(r7, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) rename$auto(&(0x7f0000000040)='./file0\x00', &(0x7f0000000340)='./file0\x00') rename$auto(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)='./file1\x00') sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) connect$auto(r3, 0x0, 0xf) writev$auto(r4, &(0x7f0000000100)={&(0x7f00000003c0)="16606cf5b308b97de71f404a8651725e5c5ae814cba39f8999d574cd55605b92d64248294a897c5e8723d33af6301a53e231bc64b7c63aedf540cf109adb291764f219ea7c2298d32db62b6fb65cfd99ac629d72e8ae943254d7e83c03157d7d892d1a5e2aeb92348967a6dc684c6beda4959a8864c02992ef77873a8943a9a426f7ba8cd95f32ede7a07d5f598e5b2211eeed22e8d1926bf186d0425c3eeb7a00d41e9ebde84c649c623ed3075318fd49fd6fc6c41b5dfe0ac891820b1141221e65827960e03558ae35aedf06d6484a6f98dfb543ed694bc3c50d0ca2e0b4c8dab8753c59ba3679d161568d68fb3156a3bf", 0x8}, 0x2) 3m53.22598242s ago: executing program 36 (id=5536): r0 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_ASSOCIATE(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x9040ff392da23819}, 0xc, &(0x7f0000000340)={&(0x7f0000000200)={0x108, r0, 0x300, 0x70bd28, 0x25dfdbfb, {}, [@NL80211_ATTR_CNTDWN_OFFS_BEACON={0xe1, 0xba, "5d9da58458a6b4283fa44c24259954afed3b2baca7fde909e9eca395601159b0765a9ddb1999e98a85ed8c397769c0e1a0113fa900b1d9e7f4aed6b7495123d65cb8d876f268114a15045eccad9b478a5d25e596b6ab0b88cb027079fe56f2983848a4c70b44a2c553b65309e573005733c08ab18eb54a9de589645150a6a39a66d6bdc1711cd26daf535fe79365a60c58c74d018740104201ff6dfc629bd3e34f9f5729d02e97e01fc63971af5bba76609898eb988298170ebe3f0419289e03e3bc4f31414798c07b0dc4a7332079e8f5a359e589faad00a533e70a4d"}, @NL80211_ATTR_PUNCT_BITMAP={0x8, 0x142, 0xa34}, @NL80211_ATTR_SMPS_MODE={0x5, 0xd5, 0x9}]}, 0x108}, 0x1, 0x0, 0x0, 0x20008840}, 0x5) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r1 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x42802, 0x0) read$auto(r1, 0x0, 0xb4d3) r2 = socket(0x1d, 0x2, 0x6) setsockopt$auto(r2, 0x6a, 0x1, 0x0, 0xc) r3 = openat$auto_qrtr_tun_ops_tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) writev$auto(0x3, &(0x7f0000000100)={&(0x7f0000000340), 0x7111}, 0x8) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r4 = socketpair$auto(0x9, 0xa527, 0x80001, 0x0) mmap$auto(0x0, 0xff, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) r5 = pidfd_open$auto(0x1, 0x0) setns(r5, 0x60020000) newfstatat$auto(0xffffffffffffff9c, 0x0, 0x0, 0x1000) mknod$auto(0x0, 0x1081, 0x6) creat$auto(0x0, 0x1000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) timerfd_settime$auto(0xffffffffffffffff, 0x2, 0x0, 0x0) capset$auto(&(0x7f0000000180)={0x19980330}, 0x0) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/mac80211_hwsim/hwsim0/net/wlan0/threaded\x00', 0xa001, 0x0) write$auto(r6, 0x0, 0xd4d0) connect$auto(0x4, 0x0, 0x10) r7 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) execveat$auto(r7, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) rename$auto(&(0x7f0000000040)='./file0\x00', &(0x7f0000000340)='./file0\x00') rename$auto(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)='./file1\x00') sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) connect$auto(r3, 0x0, 0xf) writev$auto(r4, &(0x7f0000000100)={&(0x7f00000003c0)="16606cf5b308b97de71f404a8651725e5c5ae814cba39f8999d574cd55605b92d64248294a897c5e8723d33af6301a53e231bc64b7c63aedf540cf109adb291764f219ea7c2298d32db62b6fb65cfd99ac629d72e8ae943254d7e83c03157d7d892d1a5e2aeb92348967a6dc684c6beda4959a8864c02992ef77873a8943a9a426f7ba8cd95f32ede7a07d5f598e5b2211eeed22e8d1926bf186d0425c3eeb7a00d41e9ebde84c649c623ed3075318fd49fd6fc6c41b5dfe0ac891820b1141221e65827960e03558ae35aedf06d6484a6f98dfb543ed694bc3c50d0ca2e0b4c8dab8753c59ba3679d161568d68fb3156a3bf", 0x8}, 0x2) 2m46.691716708s ago: executing program 7 (id=5880): mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) setresuid$auto(0x0, 0x7, 0x8080) r0 = pipe2$auto(0x0, 0x0) ioctl$auto_XFS_IOC_FREESP64(r0, 0x40305825, &(0x7f0000000000)={0x2, 0x5, 0x0, 0x100, 0xffff, 0x0}) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0x40405514, &(0x7f0000000040)={@inferred=r1, 0x9cf9, 0x10000, 0x5, "403e92aeab868151687371f036ee9b3ef1e3568274f1c3ea02867073aaa19e7ac3e698a0a5005456de6d9d01", @raw=0x8}) 2m46.053665805s ago: executing program 7 (id=5882): r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x100000a3d9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) r1 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/038/001\x00', 0x40001, 0x0) mmap$auto(0x0, 0x402000a, 0xffffffffffffffff, 0x400eb1, 0x401, 0x8000) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/virtual/block/nbd14/queue/iosched/prio_aging_expire\x00', 0x207a1, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f00000000c0)='-7', 0x2) r3 = socket(0xa, 0x5, 0x84) io_uring_setup$auto(0xa, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0x2, 0x1, 0x84) setsockopt$auto(0x3, 0x10000000084, 0x81, 0x0, 0x8) setsockopt$auto(0x3, 0x84, 0x17, 0x0, 0x27) setsockopt$auto(0x3, 0x10000000084, 0x18, 0x0, 0x8) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) setsockopt$auto(r3, 0x10000000084, 0x23, 0x0, 0x8) r4 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) write$auto(r4, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) close_range$auto(0x0, 0xfffffffffffff000, 0x2) open(&(0x7f0000000040)='.\x00', 0x100, 0x161) socket(0xa, 0x3, 0x3a) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) shmctl$auto(0x691, 0x3, 0x0) ioctl$auto(0x1, 0x86b, 0x8) madvise$auto(0x1, 0xf, 0x8) ioctl$auto_USBDEVFS_CONTROL(r1, 0xc0185500, 0x0) madvise$auto(0x0, 0x200007, 0x19) ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) 2m43.686742959s ago: executing program 7 (id=5887): io_uring_setup$auto(0x59, &(0x7f0000000000)={0x3, 0x3fd, 0x6, 0x1, 0x2, 0xa, 0xffffffffffffffff, [0x200000], {0x8, 0x1, 0xffffffff, 0x8998d5d, 0x8000100, 0x581, 0x101, 0x1000006, 0x2}, {0x9, 0x1, 0x52, 0x4, 0x3, 0x3b, 0x8, 0x7, 0x1}}) 2m43.288305583s ago: executing program 7 (id=5891): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) (async) socket(0x15, 0x5, 0x0) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) socket(0xa, 0x801, 0x84) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x1, 0x1, 0x1) (async, rerun: 32) timerfd_create$auto(0x0, 0x0) (rerun: 32) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x801, 0x84) (async, rerun: 32) socket(0x22, 0x2, 0x4) (rerun: 32) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) (async) socket(0xa, 0x2, 0x3a) r1 = io_uring_setup$auto(0x6, 0x0) r2 = socket(0xa, 0x2, 0x88) close_range$auto(0x0, 0xfffffffffffff000, 0x2) (async) bpf$auto(0x0, &(0x7f0000000000)=@link_update={r2, @new_map_fd=r0, 0x4, @old_map_fd=r1}, 0xa3) (async) bpf$auto(0x3, &(0x7f0000000040)=@query={@target_ifindex, 0x4, 0x7, 0x9, 0x7f, @prog_cnt=0x4, 0x0, 0x80000000, 0xc, 0xb, 0x5}, 0x7) sendmsg$auto_GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01002d0008000700000000000000", @ANYRES32], 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x0) (async) r3 = socket(0xa, 0x2, 0x3a) bpf$auto(0x5, &(0x7f0000000100)=@task_fd_query={0x2, r3, 0x3, 0x0, 0x85, 0x7, 0x9, 0x6, 0x8001}, 0x100) 2m42.294563052s ago: executing program 7 (id=5900): openat$auto_snd_mixer_oss_f_ops_mixer_oss(0xffffffffffffff9c, 0x0, 0x500, 0x0) mmap$auto(0x0, 0xdb3, 0xdf, 0xeb1, 0x401, 0x8000) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) ioctl$auto(0x3, 0x80085617, 0x38) 2m41.955718372s ago: executing program 7 (id=5894): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)={0x1c, r1, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NFSD_A_SERVER_THREADS={0x8, 0x1, 0x4a}]}, 0x1c}, 0x1, 0xf5ffffff}, 0x4000) 2m36.333431922s ago: executing program 8 (id=5912): r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x100000a3d9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) r1 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/038/001\x00', 0x40001, 0x0) mmap$auto(0x0, 0x402000a, 0xffffffffffffffff, 0x400eb1, 0x401, 0x8000) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/virtual/block/nbd14/queue/iosched/prio_aging_expire\x00', 0x207a1, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f00000000c0)='-7', 0x2) r3 = socket(0xa, 0x5, 0x84) io_uring_setup$auto(0xa, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0x2, 0x1, 0x84) setsockopt$auto(0x3, 0x10000000084, 0x81, 0x0, 0x8) setsockopt$auto(0x3, 0x84, 0x17, 0x0, 0x27) setsockopt$auto(0x3, 0x10000000084, 0x18, 0x0, 0x8) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) setsockopt$auto(r3, 0x10000000084, 0x23, 0x0, 0x8) r4 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) write$auto(r4, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) close_range$auto(0x0, 0xfffffffffffff000, 0x2) open(&(0x7f0000000040)='.\x00', 0x100, 0x161) socket(0xa, 0x3, 0x3a) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) shmctl$auto(0x691, 0x3, 0x0) ioctl$auto(0x1, 0x86b, 0x8) madvise$auto(0x1, 0xf, 0x8) ioctl$auto_USBDEVFS_CONTROL(r1, 0xc0185500, 0x0) madvise$auto(0x0, 0x200007, 0x19) ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) 2m34.321580806s ago: executing program 8 (id=5918): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) socket(0x2b, 0x1, 0x0) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000200)={{0x0, 0x4000, 0x0, 0x2, 0x0, 0x7, 0x4}, 0x9}, 0x7, 0x4008) setitimer$auto_ITIMER_VIRTUAL(0x1, &(0x7f0000000540)={{0x7fffffffffffffff, 0x6}, {0x1, 0x6}}, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x401bf, 0x7352, 0x2e, 0x944a, 0x1ffde, 0x7, 0x3, 0x20000002, 0x9, 0x3, 0x100000006, 0x4, 0xb4, 0x9, 0x6, 0x10003, 0x80, 0x4, 0x10000000, 0x7, 0x2000, 0x8, 0x200000, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x6, 0x401, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x9]}, 0x1ff, 0xd) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ip6gre0\x00', 0x0}) bpf$auto(0x0, &(0x7f0000000340)=@bpf_attr_5={@target_ifindex=r1, 0x7f, 0x99, 0x8, 0x1, @relative_id=0x8, 0x6}, 0x92) r4 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x20342, 0x0) ioctl$auto_SNDCTL_DSP_SYNC(r4, 0x5001, 0xfffffffffffffffc) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_fragmentation_threshold_ops_(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/ieee80211/phy11/fragmentation_threshold\x00', 0x200001, 0x0) sysfs$auto(0x2, 0x4c, 0x0) sendmsg$auto_L2TP_CMD_TUNNEL_GET(r2, &(0x7f0000000580)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000400)={0xf4, 0x0, 0x800, 0x70bd2c, 0x25dfdbff, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @local}, @L2TP_ATTR_NONE={0xc4, 0x0, "5fd75d5161f59b59e1793c370dd6c58cd53f0b14801bd06651f5e965ac33f6c2df983f2856ce489f6839f576d1deae9d4e33d429e7f54feae55f3c0bed5909b2e17c558308620ece486a2070040b3a22d14365c12faff213fb8bba00b92e6ac82f9a59823c6bbcd1ca7da4a9f27f677a07f77a48e49c02da733b4867250d8ffaeb73dcfa020fbee531bce0db65ecbae4a9ecce5fd790d4079628d3b28ece89e9a2b887163ce1bdacae3ed4fb697c688d40ff4665be827f8fbf2a9e5af951cbc6"}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}]}, 0xf4}, 0x1, 0x0, 0x0, 0x4000}, 0x4000009) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, 0x0, 0x283f4, 0x0) mknod$auto(&(0x7f0000000080)=':,\x00', 0xcb, 0xfffffffa) clone$auto(0x1, 0x40000000003e, 0x0, 0x0, 0x40000009) r5 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x2) getdents64$auto(r5, &(0x7f0000000f40)={0x309, 0x7, 0xffff, 0x7}, 0x200c8) r6 = socket(0x10, 0x2, 0x0) setsockopt$auto(r6, 0x104000000000010e, 0x1, 0x0, 0x16) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) r7 = socket(0x10, 0x2, 0x0) write$auto_rfkill_fops_core(r3, &(0x7f00000005c0)="239c2273cf65fdd3c4f206beb3d10aac08140746e67da6366a6ad519ed7bd79eb4dddd784f3f50d45ebd7a245067cc2dd0d91794f6579e92d9ff5b3dff723eeefb7e99ccc39dce4d54eab61630fd51ec89bf4ae24472f55f2cd389c3560d9105ac39f1b8deb6824bfe73104d7b53a723cf2f734400332bb3fbaa98fdcc65d22b71d355694f2d42ac9229da4ce35977557d0e30b39c61b0939f70217ba7a079d32fc8cf998c64c687c1b84659099966d561cf78f2a79525548ae9ed3cc203f737aed805a8ee20297fc0344028526a6d", 0xcf) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="10002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r8 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) ioctl$auto_KVM_GET_MSRS(r8, 0xc008ae88, &(0x7f0000000040)={0x10, 0x0, [{0x481, 0x400, 0x9}]}) sendmmsg$auto(r7, &(0x7f0000000200)={{0x0, 0x3, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xe}}, 0x6, 0x4008) 2m33.718435219s ago: executing program 8 (id=5920): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1b0026bd7000fddbdf25030000000400080014000380100003800c00098008000600", @ANYRES32=0x0, @ANYBLOB="12000100898771f1c19f17790481008286dd0000040002"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0xc800) (fail_nth: 9) 2m32.512232227s ago: executing program 8 (id=5921): mmap$auto(0x0, 0x2020005, 0x203, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xfffffffffffffffe, 0x8000) (async) ustat$auto(0x801, 0x0) (async) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) (async) madvise$auto(0x0, 0x2003f0, 0x15) (async) bpf$auto(0x5, 0x0, 0x102) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/graphics/fbcon/cursor_blink\x00', 0xa001, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x7fffffff, 0x300000000000) close_range$auto(0x2, 0x8, 0x0) (async) io_uring_setup$auto(0x6, 0x0) (async) io_uring_register$auto(0x2, 0x1c, 0x0, 0x1) (async) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f00000001c0), 0xffffffffffffffff) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/exception_policy\x00', 0xc0080, 0x0) io_uring_register$auto(0xffffffffffffffff, 0x1f, &(0x7f0000000040)="78298dc7", 0x1) read$auto(0x3, 0x0, 0x7fffffff) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r1, 0x0, 0xe8) r2 = socket(0x1d, 0x2, 0x6) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) getsockopt$auto(r2, 0x6a, 0x2, 0x0, 0x0) (async) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000001240)='/proc/thread-self/fail-nth\x00', 0xa0302, 0x0) (async) r3 = socket(0x10, 0x2, 0x4) write$auto(r3, &(0x7f0000000000)='-\x00', 0x2fb) syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'macsec0\x00'}) 2m31.552175272s ago: executing program 8 (id=5924): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop6\x00', 0x0, 0x0) r1 = openat$auto_drm_crtc_crc_data_fops_drm_debugfs_crc(0xffffffffffffff9c, &(0x7f0000000000), 0x8080, 0x0) r2 = open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x100) copy_file_range$auto(r1, 0x0, r2, 0x0, 0x21c3, 0x0) ioctl$auto_IOC_PR_CLEAR(r2, 0x401070cd, &(0x7f0000000040)={0x2, 0xb}) ioctl$auto_SG_GET_RESERVED_SIZE(r0, 0x4c09, 0xfffffffffffffffd) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000000340), 0xffffffffffffffff) r5 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000200), r3) sendmsg$auto_NL80211_CMD_SET_QOS_MAP(r3, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000240)={&(0x7f0000000740)={0x1ec, r5, 0x8, 0x70bd2b, 0x25dfdbfe, {}, [@NL80211_ATTR_MLO_TTLM_DLINK={0x46, 0x148, "dc266fcebd92e437b03d6f7bf9019872a79c693a679ed22accb537c0e7b86a6641f38fba40c4623d6f5d31e08fa592572d8f8631d0b241452f8273acea88c518c6d7"}, @NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x586}, @NL80211_ATTR_STA_EXT_CAPABILITY={0x9b, 0xac, "d5fb21b57f2aaef65f36010e3597d5a0d707fcc310c0f13f1ebf22f33ea9b602785d17a91c243cad82c39a98c0b2c14d849b4d627d5b63d863515931d690f629ad36f02ec82d5b866f3516187c3c764608ab53564ab8391b5b6ef78588cd1757d4795d34a59aa5569eb281557d56c9bee8d12c5c78e163ae057bf565ac20223d3123715a0c847638ac41ab7833bd8ce06fef549ad461d6"}, @NL80211_ATTR_USE_MFP={0x8, 0x42, 0x6}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0xc8, 0x6e, 0x0, 0x1, [@nested={0x4f, 0x13, 0x0, 0x1, [@typed={0x4, 0x6a}, @nested={0x4, 0x6b}, @typed={0x4, 0x144}, @generic="c25faa73bf97721b2e7fe95143b1df4243d7a1b6348b90f3b218e0a0770aa4e1b489e623f5ff856b54ee388a6b8dadd4eb04a8", @typed={0xc, 0x1f, 0x0, 0x0, @u64=0x7}]}, @typed={0x8, 0xb7, 0x0, 0x0, @str='nbw\x00'}, @nested={0xc, 0x82, 0x0, 0x1, [@typed={0x8, 0xba, 0x0, 0x0, @str='nbd\x00'}]}, @typed={0x8, 0x76, 0x0, 0x0, @pid}, @generic="e7fed39ede5a371933e7fd1b87624b55242ce4d8eab04a041132fca87ae98fd6f3816f22b7375da30264a7fac13ac1b2f59c9532f047221377b5a8dd820d71d88349fcb2f489f09ba9b5b50d2ab37fe61d64ed2877e38d6d"]}, @NL80211_ATTR_INACTIVITY_TIMEOUT={0x6, 0x96, 0x4}, @NL80211_ATTR_USE_MFP={0x8, 0x42, 0x7}, @NL80211_ATTR_OBSS_COLOR_BITMAP={0xc, 0x12e, 0x1}]}, 0x1ec}, 0x1, 0x0, 0x0, 0x48080}, 0x20000010) syz_genetlink_get_family_id$auto_nlbl_mgmt(0x0, r3) r6 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000001680), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000340)='/dev/sg0\x00', 0x103002, 0x0) write$auto_sg_fops_sg(r8, &(0x7f0000000140)="01000000000d0000624c492f4aa7a158ad329acb69abe1d4bbe91b3ddc84d02747403bbca33c95be8fb0", 0x2a) sendmsg$auto_ETHTOOL_MSG_LINKMODES_GET(r7, &(0x7f0000002300)={0x0, 0x0, &(0x7f00000022c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="110325bd7000fedbdf2501"], 0x14}}, 0x10040) sendmsg$auto_ETHTOOL_MSG_MM_SET(r3, &(0x7f00000003c0)={&(0x7f0000000180), 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x4c, r6, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@ETHTOOL_A_MM_TX_ENABLED={0x5, 0x3, 0x1}, @ETHTOOL_A_MM_TX_MIN_FRAG_SIZE={0x8, 0x5, 0x10}, @ETHTOOL_A_MM_VERIFY_TIME={0x8, 0x9, 0x7}, @ETHTOOL_A_MM_PMAC_ENABLED={0x5, 0x2, 0x1}, @ETHTOOL_A_MM_VERIFY_TIME={0x8, 0x9, 0xa69}, @ETHTOOL_A_MM_VERIFY_TIME={0x8}, @ETHTOOL_A_MM_VERIFY_TIME={0x8, 0x9, 0xe52}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x24009000) sendmsg$auto_NBD_CMD_CONNECT(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000000c0)={0x44, r4, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x1020}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x1}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x2}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x200}]}, 0x44}, 0x1, 0x0, 0x0, 0x40080}, 0x20040000) sendmsg$auto_NBD_CMD_DISCONNECT(r2, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, r4, 0x100, 0x70bd29, 0x25dfdbff, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x7fffffff}]}, 0x20}}, 0x20000800) 2m31.041812374s ago: executing program 8 (id=5927): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000340), r0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/virtual/block/loop5/queue/rq_affinity\x00', 0x2, 0x0) r2 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) write$auto(r2, &(0x7f0000000440)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\fo\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02G\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb', 0x98c7) sendmsg$auto_TIPC_NL_NET_SET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000007980)={&(0x7f00000005c0)={0xb8, r1, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@TIPC_NLA_UNSPEC={0xa1, 0x0, "468b8f83d3e3d9133015637bfca397994403b83b03ffb61aef8b02d97bd5f09e862722fa11e19d3aa67815dcb0bc166a79ef35d55f938acffc44361ebb5edfda7a16a94cdbc233484cd67ecbe67c53d4b8dfc689e32ce9f19defea3e1f6aaa829ffd88a398ebe4478fc77ecb9538cecdc3ca8859382df6d064cc6af957d621227c5397de7f33f768d5412163c1e7520b2493d112b22170b2f63fb06211"}]}, 0xb8}, 0x1, 0x0, 0x0, 0x40010}, 0x4002) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/system/memory/memory15/online\x00', 0xa001, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000400), r4) sendmsg$auto_NFSD_CMD_VERSION_SET(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)={0x24, r5, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@NFSD_A_SERVER_PROTO_VERSION={0x10, 0x1, 0x0, 0x1, [@NFSD_A_VERSION_ENABLED={0x4}, @NFSD_A_VERSION_MAJOR={0x8, 0x1, 0x2}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24000001}, 0x844) getsockopt$auto_SO_MEMINFO(r3, 0x5, 0x37, &(0x7f0000000240)='TIPCv2\x00', &(0x7f0000000280)=0x2) r6 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000000c0), r0) sendmsg$auto_NL80211_CMD_SET_SAR_SPECS(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="2ceb0a4c", @ANYRES16=r6, @ANYBLOB="000225bd7000fbdbdf258c000000aefe9600050000000500190000000000060066004e210000"], 0x2c}, 0x1, 0x0, 0x0, 0x20000880}, 0x20000001) close_range$auto(0x2, 0x8, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/vm/nr_overcommit_hugepages\x00', 0x100, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r7 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) close_range$auto(0x2, 0x8, 0x0) r8 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000080), 0x88000, 0x0) ioctl$auto_KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r8) ioctl$auto_KVM_GET_MSRS(r7, 0xc008ae88, &(0x7f0000000100)={0x2, 0x179, [{0xc0000100, 0x5, 0x80000000}]}) write$auto(r3, &(0x7f0000000140)='0[.[\x00', 0xcd04) 2m26.760096784s ago: executing program 37 (id=5894): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)={0x1c, r1, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NFSD_A_SERVER_THREADS={0x8, 0x1, 0x4a}]}, 0x1c}, 0x1, 0xf5ffffff}, 0x4000) 2m21.514456236s ago: executing program 5 (id=5962): msgctl$auto_MSG_INFO(0x7, 0xc, &(0x7f0000000280)={{0x9, 0x0, 0xffffffffffffffff, 0x2, 0x287f, 0x0, 0x3}, 0x0, 0x0, 0x7fffffff, 0x7, 0x8, 0xffffffff, 0xb82, 0x7fff, 0x8fc2, 0x26f, @inferred, @raw=0x9}) mmap$auto(0x0, 0x202000d, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/net/wireless\x00', 0x80, 0x0) pread64$auto(r0, 0x0, 0x201, 0xe6) openat$auto_proc_mem_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/mem\x00', 0x400001, 0x0) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/card0\x00', 0x121d02, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty38\x00', 0x50001, 0x0) ioctl$auto(0x3, 0x82045432, 0x10000000000402) mmap$auto(0x404, 0x30009, 0x4000000000df, 0x4000eb1, 0x401, 0x80008000) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x622340, 0x0) openat$auto_fuse_conn_congestion_threshold_ops_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x20040, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) memfd_secret$auto(0x0) socket(0x18, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) eventfd$auto(0x3) openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f0000002180), 0x100, 0x0) r1 = eventfd$auto(0x801) pipe$auto(0x0) socketpair$auto(0x1e, 0x1, 0x4, 0x0) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0) ioctl$auto_TIOCSETD2(r2, 0x5423, 0x0) mmap$auto(0xfffffffffffffffc, 0xffffffffffffbce1, 0xffc, 0xb37, r1, 0x7ffe) socket(0x2, 0x1, 0x106) ioctl$auto(0x3, 0x890b, 0x38) 2m21.443143687s ago: executing program 5 (id=5963): r0 = inotify_init1$auto(0x3000000000000) inotify_add_watch$auto(r0, 0x0, 0x1000e6e) openat$auto_nvram_misc_fops_nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) socket(0x1e, 0x1, 0x0) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x121900, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video54\x00', 0x42942, 0x0) pwrite64$auto(0xc8, &(0x7f0000000080)='\vX\xb5n\x91p\xe6\x15\x00p\x01\x99\x88c\x14\r>\x14\x1a\xd3\xd3\x1d\xf8?\xdb\xdb\xc1\xf5\xe3o\x8e\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02l@\x18*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\xe5}\xea\x1b\x95\xafQ;_L\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2\x10\x00\x00\x00\x00\x00/TX:\x8a\xddf\xa9H0\x06\xe7\xd2\xe2\xf6^\xfdo\x00\x9a>T\xd5\x1e\xe3\xeb\x89q\a\xd6h\xc9\xbc\x8f\x1dBk\x95\x174\xdc\x03\x05> -\xb6\x9d[\xe42(\xe4\n\x98u\xc9\xa1\xc4Zb\x04\xc2\xf1 \x8a\xbe]\xde\xfd8u\xb4\xde\xb3\xa1T/\xdfx\x14Y\xfe\x1e\x1f\x91\x19\xb7\xfc\xcd\x7fl\xb3\xa8#\xa0\xb9P\x8d\x04C\x87\xebR\x93\x12\x18H&N\x8b\'i)\xab@\xaf\xcb\xda\x00\x067\xce\xd6V4\xc2\xeeX\xb4\xe9\f\xee\xe8\xd8\x91\x1b\xcd\x00j\x14H\xcc-\x14\xde\xaaN\x87\x8d\x9b\xa05\xacHX\xc1\xce\x91\xee\xad\r\xbe\xb2&f\xa3\xe2\x8bp\xba\x8a\"\xf1\xfc\xa13\xfe\xe0JG\xe1v\x82s}v~`X%pJ\xbf\xc3`\xa9\x8f\"l\xc7XX\xa4\xb6\x0e\xbe\xa0wy\xfe\x03n+k\xf149*(\x15\xaa\xc2\x8aB\xf1\xbb$M\xfe%\xc7\x84\xf0\xa4}bd\xac\xa8T\xda\xffm\x86\xca\x80\xde3\xa7\xba\xc7Y]\xd7\xa2\xec)\xd6\xad\xbcI\x10\xa3#\xd4/J\xa8\x14\x1b<\x04\xbd\x89\xefQf\xc0Q\x92\x92\xa7\x99\xcf\xaekR\xf5\xb7\x14r[\x9fx\xaf+\xb3@\xf4\x83\xbf\xc7e\xe7\xc2\xd6\x10\x0fk\xee)\x92\bO\xa1\x1a\x9e\xef:5\x1e\x1c\"9\xd8\xdf\xa9C\xe2SHG6\xf2\xd5.\x12]\x17J\x8b\xc52\xe9\x9e\xbc\xdc\xae\xef\xed\xf9\xa6\x9e-\x92pZ\x12j/\x1dD{\xac\x17\\O\xee\x11\x10$\x12\xfc \xb0\xb7cA;\xa1,\x040\xa7\xd9\xb2\x19@1\x92\x10\xc4\xc0\x1f\x1d\xe1\xf6\x80lW\v,\xa2\x134no\xa0\x00l\xd8\xe4\xd3\x16\xd3%\x8b\xf5\x1e\x12{\xe6\xdb\xde\a\xdedH\x90\xf7\x19\xff\xcb\xacC\xeadOf\xb8\x15\xc39\xefLt\t\x11\xa1\x0e\x85\xac\xcc+\xc0\xb4.\xaa3>\xc0\x96\x84\xd5\x02\xc1\x94=\xb0\xfe\xda\x1d\xe9\xa7\xe1\xcf\x80|k\xdd\x95\xc9\xb0y\xb4\xbd\xc2W\x9c\xa4\x80\x13\xbc\x7fb=y\xdb]U\xd1HC\xe1\xa7\x94q\xb0C\xb8\x86\xd0\x9d\xe0\x8aD\x91x\'\xd6\x17\xd1\x9d\x16\xa7oZ\x8a\xce:\x9e@\xca\x17\x05f+\xee\xd8\xe6D\x9e\xb18Aw', 0xe, 0x3) write$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffffff, &(0x7f0000000380)="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", 0xf00) writev$auto(0x3, &(0x7f0000000100)={&(0x7f0000000140), 0x7111}, 0x8) select$auto(0xe98, 0x0, 0x0, 0x0, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000280)='/dev/amidi2\x00', 0x80000, 0x0) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000826bd7000fedbdf250300000008000400b70a0000060007000080000008000200", @ANYRES32=r2, @ANYBLOB="0a0005000180c200000e00000a0001000180c200000e00000a000100000000000000000008000200", @ANYRES32=r2, @ANYBLOB="060006ff05000000080003009b"], 0x68}, 0x1, 0x0, 0x0, 0x40080}, 0x40040) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x100) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x300) 2m20.584663524s ago: executing program 5 (id=5965): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x7ffe) futex$auto(0x0, 0x85, 0x5, 0x0, 0x0, 0x30000007) r0 = openat$auto_snd_mixer_oss_f_ops_mixer_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/mixer2\x00', 0x2002, 0x0) mmap$auto(0x0, 0x7, 0xfffffffffffffffe, 0x9b72, 0x2, 0x8000) r1 = socket(0xa, 0x1, 0x84) getsockopt$auto(r1, 0x9, 0x4, 0x0, &(0x7f00000000c0)=0x7f) mmap$auto(0x0, 0xdb3, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x2020005, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(r1, 0x8, 0x5) eventfd$auto(0x3) r2 = getsockopt$auto(r0, 0x4, 0xffffffff, &(0x7f0000000000)=':.\x00', &(0x7f0000000040)=0x2) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptyd9\x00', 0x0, 0x0) ioctl$auto_TUNSETDEBUG(r2, 0x400454c9, &(0x7f0000000080)=0x8) ioctl$auto(0x3, 0x40045431, 0x1) mmap$auto(0x0, 0x4020006, 0x100000000, 0xeb1, 0x401, 0x8000) sysfs$auto(0x2, 0x17, 0x0) fsopen$auto(0x0, 0x1) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/misc/rdma_cm/abi_version\x00', 0x80, 0x0) open(&(0x7f0000000800)='./file0\x00', 0x22241, 0x9c) fcntl$auto(0x3, 0x400, 0x9ec0000000000000) r4 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x80040, 0xf8, 0xe}, 0x18) fremovexattr$auto(r4, &(0x7f0000000000)='system.posix_acl_access\x00') read$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f0000000340)=""/4096, 0x1000) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x2020007, 0x4, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_console_fops_tty_io(0xffffffffffffff9c, 0x0, 0x4000, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket(0xa, 0x3, 0x3b) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) sysfs$auto(0x2, 0x23, 0x0) 2m20.493870686s ago: executing program 5 (id=5967): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) umount2$auto(&(0x7f0000000180)='\x00', 0x6) set_mempolicy$auto(0x6, &(0x7f0000000080)=0x3, 0x21) unshare$auto(0x40000080) r0 = socket(0xa, 0x5, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) msgctl$auto_IPC_RMID(0x4, 0x0, &(0x7f0000000240)={{0x0, 0xffffffffffffffff, 0xee00, 0x9, 0x5, 0x8, 0x5}, &(0x7f00000001c0)=0x6, &(0x7f0000000200)=0x1, 0x1, 0xfff, 0x0, 0x7, 0x9, 0x4, 0x9, 0xf}) r1 = prctl$auto(0x3e, 0x10000001, 0x0, 0x3, 0x7) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyprintk\x00', 0x109401, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000580)='/sys/power/disk\x00', 0xc0082, 0x0) write$auto(r1, &(0x7f0000000340)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,D\xbf&\x9eb|\n\xee\xa1Y\x94V[8\x04c\xdf:]\xd9\x94&\x81\xe2\x13\x8f\xea#\xf8F\xbb\xbb\xf9\xcdz\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x1d\x88mr\xfd\xf1\x1b\x05\x00\x00\x00\x00\x00\x00\x00\xeb_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xcbA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:kJr\x06\xeb\xf0\xc4\xcb\x10\x1f\x9f\x8d\xa1\xe3o\xb4P\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL\x15/\xf9\'\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\aA\xe9(\x00\x00\x00\x00\x00N\xb5J\xc8A\xc7m\xbf\x19\xae\x9d\xcaR\x0f\xa8\xdf\xe4M\xe1>k\x93\x01\xe5\xba(\x96K\xc1=d3\xe00u\"`]\xb3\x11a\x1cSn\xe7\x87\x84\x93\xe4\x90]\x86\x10\xe5\xacK\x99\xc1$\x91\x05\x00\x00\x00O\x01xc\xa8\x9a\x1b\x00\xf6\xa2\x8a\x7f4\f[BLH$6\xfb,\xd8\xd3\xd0\x8b\xb3yA.\xb4\xbc\td\x9d\\\xd0\xff\xd2Y\xc4\x9fT\xb2\xd5\r\xf1#\xd5\xf2\x9cU\xd1:+\xb63\xae\xc1\xf7\xe1\xd4\x879?\xdd\xd6\xd4\xa3\xc7\xd8 S\xfc:\xe1{\x16\\h\x9d\xbc#KEC\x1a\xf9KH`\x82e:_\x9b\xf1\xc1\x8e\xf0\xc46\x98\xd6u\x90\x18\x8f\xe8\xc3%\x8e9\xab\x7f\x0e\n\xb2\xa4\xef\x90\xb16\x04\xbc\xc9\xdc\xad\x1e\xcc\xad}DY\x1d\x1fv\x90\x97u\xa1\xfb\x13\xa9\x18,XJ\x84\xe3\xc1)\x98\xae5q\xa5L\x87\x1aq\x1d0\xf1\xcb\xe5\xf4F!*.\xb3\xf2\x85E5\xc3\xb5Vj\xd0\x06\xcc\xbc\xee0\x98.\xd9dC\x8e9\xfdM\\\xc5&\\\x9b\x81\x88t\xa4\x9f\xd1P\xd2e\x9c\xf9\xd2\xaf\x00\x00\x00\x00\x00\x00\x00 \x00'/476, 0x8000000000b) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x2a, 0xdf, 0x9b72, 0x1000, 0x28000) r2 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000001740)='/dev/snd/controlC0\x00', 0x2100, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_TLV_READ(r2, 0xc008551a, &(0x7f0000000380)={0x9, 0x8}) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0) io_uring_setup$auto(0x8, &(0x7f0000000100)={0xfffffffc, 0x0, 0x300, 0x3, 0xffe, 0x6, r0, [0x6d8e, 0x8, 0x4], {0x1000, 0x9, 0x8, 0x2, 0x78, 0x99, 0x8, 0x0, 0x1}, {0x5, 0x9, 0x89, 0x5, 0xfff, 0x7, 0x4, 0x1, 0x3ff}}) read$auto(r3, 0x0, 0xb4d3) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dri/card2\x00', 0xa0400, 0x0) write$auto(0x3, 0x0, 0xffd8) 2m18.011547166s ago: executing program 9 (id=5936): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop6\x00', 0x0, 0x0) r1 = openat$auto_drm_crtc_crc_data_fops_drm_debugfs_crc(0xffffffffffffff9c, &(0x7f0000000000), 0x8080, 0x0) r2 = open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x100) copy_file_range$auto(r1, 0x0, r2, 0x0, 0x21c3, 0x0) ioctl$auto_IOC_PR_CLEAR(r2, 0x401070cd, &(0x7f0000000040)={0x2, 0xb}) ioctl$auto_SG_GET_RESERVED_SIZE(r0, 0x4c09, 0xfffffffffffffffd) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000000340), 0xffffffffffffffff) r5 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000200), r3) sendmsg$auto_NL80211_CMD_SET_QOS_MAP(r3, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000240)={&(0x7f0000000740)={0x1ec, r5, 0x8, 0x70bd2b, 0x25dfdbfe, {}, [@NL80211_ATTR_MLO_TTLM_DLINK={0x46, 0x148, "dc266fcebd92e437b03d6f7bf9019872a79c693a679ed22accb537c0e7b86a6641f38fba40c4623d6f5d31e08fa592572d8f8631d0b241452f8273acea88c518c6d7"}, @NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x586}, @NL80211_ATTR_STA_EXT_CAPABILITY={0x9b, 0xac, "d5fb21b57f2aaef65f36010e3597d5a0d707fcc310c0f13f1ebf22f33ea9b602785d17a91c243cad82c39a98c0b2c14d849b4d627d5b63d863515931d690f629ad36f02ec82d5b866f3516187c3c764608ab53564ab8391b5b6ef78588cd1757d4795d34a59aa5569eb281557d56c9bee8d12c5c78e163ae057bf565ac20223d3123715a0c847638ac41ab7833bd8ce06fef549ad461d6"}, @NL80211_ATTR_USE_MFP={0x8, 0x42, 0x6}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0xc8, 0x6e, 0x0, 0x1, [@nested={0x4f, 0x13, 0x0, 0x1, [@typed={0x4, 0x6a}, @nested={0x4, 0x6b}, @typed={0x4, 0x144}, @generic="c25faa73bf97721b2e7fe95143b1df4243d7a1b6348b90f3b218e0a0770aa4e1b489e623f5ff856b54ee388a6b8dadd4eb04a8", @typed={0xc, 0x1f, 0x0, 0x0, @u64=0x7}]}, @typed={0x8, 0xb7, 0x0, 0x0, @str='nbw\x00'}, @nested={0xc, 0x82, 0x0, 0x1, [@typed={0x8, 0xba, 0x0, 0x0, @str='nbd\x00'}]}, @typed={0x8, 0x76, 0x0, 0x0, @pid}, @generic="e7fed39ede5a371933e7fd1b87624b55242ce4d8eab04a041132fca87ae98fd6f3816f22b7375da30264a7fac13ac1b2f59c9532f047221377b5a8dd820d71d88349fcb2f489f09ba9b5b50d2ab37fe61d64ed2877e38d6d"]}, @NL80211_ATTR_INACTIVITY_TIMEOUT={0x6, 0x96, 0x4}, @NL80211_ATTR_USE_MFP={0x8, 0x42, 0x7}, @NL80211_ATTR_OBSS_COLOR_BITMAP={0xc, 0x12e, 0x1}]}, 0x1ec}, 0x1, 0x0, 0x0, 0x48080}, 0x20000010) syz_genetlink_get_family_id$auto_nlbl_mgmt(0x0, r3) r6 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000001680), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000340)='/dev/sg0\x00', 0x103002, 0x0) write$auto_sg_fops_sg(r8, &(0x7f0000000140)="01000000000d0000624c492f4aa7a158ad329acb69abe1d4bbe91b3ddc84d02747403bbca33c95be8fb0", 0x2a) sendmsg$auto_ETHTOOL_MSG_LINKMODES_GET(r7, &(0x7f0000002300)={0x0, 0x0, &(0x7f00000022c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="110325bd7000fedbdf2501"], 0x14}}, 0x10040) sendmsg$auto_ETHTOOL_MSG_MM_SET(r3, &(0x7f00000003c0)={&(0x7f0000000180), 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x4c, r6, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@ETHTOOL_A_MM_TX_ENABLED={0x5, 0x3, 0x1}, @ETHTOOL_A_MM_TX_MIN_FRAG_SIZE={0x8, 0x5, 0x10}, @ETHTOOL_A_MM_VERIFY_TIME={0x8, 0x9, 0x7}, @ETHTOOL_A_MM_PMAC_ENABLED={0x5, 0x2, 0x1}, @ETHTOOL_A_MM_VERIFY_TIME={0x8, 0x9, 0xa69}, @ETHTOOL_A_MM_VERIFY_TIME={0x8}, @ETHTOOL_A_MM_VERIFY_TIME={0x8, 0x9, 0xe52}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x24009000) sendmsg$auto_NBD_CMD_CONNECT(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000000c0)={0x44, r4, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x1020}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x1}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x2}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x200}]}, 0x44}, 0x1, 0x0, 0x0, 0x40080}, 0x20040000) sendmsg$auto_NBD_CMD_DISCONNECT(r2, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, r4, 0x100, 0x70bd29, 0x25dfdbff, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x7fffffff}]}, 0x20}}, 0x20000800) 2m17.996649882s ago: executing program 5 (id=5976): r0 = syz_genetlink_get_family_id$auto_smc_gen_netlink(&(0x7f0000000e40), 0xffffffffffffffff) sendmsg$auto_SMC_NETLINK_GET_DEV_SMCR(0xffffffffffffffff, &(0x7f0000001000)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000e80)={0x108, r0, 0x4, 0x70bd27, 0x25dfdbfe, {}, "969daf4accafeec2d4749176becab176a800609f7a0fa75a481b843b54873f9c70ee1f383573a42c6f1ffea2c5bb1f9f834ce51b08eb6088dd4e233a04b5c69e843a2716c5b5134096fe8e020b46c20029cc31ee1b501e2e690ccab2592c261b677e0bb399d7405d060f16ed7ce59bcc88aacbcb917a5eceba59d0ce44812368daadba906f630dd0939fd3897a1ac8a268546de71d7a9ae0ffd9a8ad7239a3c895a74769bc346b35b532e1055434879bfb29df2dc5b90e267d23bec851a5e80df9d0e7cb1f936d0f060f3d7332814eb8400adcf2610f12477650057829b3838ddaa21e3a1a564642f26990e7c2e82563a5"}, 0x108}, 0x1, 0x0, 0x0, 0x4000}, 0x185) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, &(0x7f0000000100)={{@raw=0xb, 0x3, 0xcf, 0x8, "16a0d89bf208384515b5375a677609aa1bc737276563c3d5a2fca999d5797ab7a10a4d2bc341c4bd369ae535", @raw=0xf81a}, 0x1, @integer=@value=[0x6d, 0x7, 0x80, 0xbb, 0x4, 0x80000000, 0x1, 0x10001, 0x1, 0x9, 0xc4, 0x9bc, 0x6, 0x4, 0x3, 0x6, 0x1, 0x3, 0x5, 0x401, 0x4, 0x0, 0xa0, 0x5, 0x2, 0x9, 0x5, 0xa, 0x8, 0x1, 0x8, 0x7f, 0xffffffffffffdb78, 0x100000000, 0x3, 0x7, 0x7fffffffffffffff, 0x1, 0xd, 0x3, 0x71, 0x0, 0x8, 0x2, 0x3, 0xffffffffffffffbb, 0x2d7, 0x1, 0x5a, 0x6, 0x2, 0x7fffffffc, 0x6, 0x7, 0x0, 0x6, 0x4, 0x3, 0x40a, 0x9, 0x3ff, 0x8, 0x7, 0xffff, 0x50ce0883, 0x3d9, 0x5, 0x2, 0xd8f, 0x80000000, 0x0, 0x7, 0x46e, 0xa5cf, 0x8, 0x7, 0xc16b, 0x6, 0x9, 0x6, 0x2, 0x6, 0x1, 0x3, 0x2, 0xfffffffffffff16a, 0x6, 0xffffffffffff0001, 0x100000000, 0x4, 0x6, 0x4, 0x2, 0x3, 0xfffffffffffffffe, 0x20007cf9, 0x40, 0x2, 0x7, 0x100, 0x2, 0x2, 0x45f3, 0x2e1, 0x0, 0x4, 0x0, 0x8001, 0x0, 0x1, 0x7, 0xcf4, 0x1, 0x3, 0x0, 0x4, 0x6, 0x9, 0x25e2, 0xc9a, 0xd09, 0x40, 0x2, 0xffffffffffffff00, 0x8, 0x9, 0xfffffffffffffffb, 0x40], "f3fadb90a56b67d92a5b28b4b23f332550b1e5454e2027fb1a37efe81bbc27deaf7c3100aab088cdb3b40dad335c9174f18934845ac3152fef1e0f42b42471efc0225a4ebe7e05ce3d4ab429805d5921633ffbce8f1a82ff9dec6c288f431cb7005b85ca8633c55d49bbdf4bd9cac1046064001bca7ba37e4b5eacf1940c9a78"}) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r1 = socket(0x28, 0x1, 0x0) setsockopt$auto(r1, 0x28, 0x5, 0x0, 0x8) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) recvfrom$auto(0x4, 0x0, 0x20000000001, 0x3ffffd, 0x0, 0x0) sendmsg$auto_TIPC_NL_MON_SET(r1, &(0x7f0000000800)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000007c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="a4000000", @ANYRES16=0x0, @ANYBLOB="03082abd7000ffdbdf25110000008d00018008006f8004004180f988256a92ef6bbb7fb9cad34b60d419aa5e4beac859a98e62b13c5d757289d1f4d8df5df991c72dbe034a3bb4e01bb248863d551f445504b36f64170d681bcc7cd3da4ff912446a746c0515838ec778f74bcf0d30b326cf0f34df12253e3ddaa2fab51046a54e15d1f82e78ac163b2f73add44a7805ab75b8bd4e7ff823d6ff6f000000"], 0xa4}, 0x1, 0x0, 0x0, 0x1}, 0x8010) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/block/zram0/algorithm_params\x00', 0xa001, 0x0) mlockall$auto(0x7) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x2000040080000004, 0xe) modify_ldt$auto(0x1, 0x0, 0x10) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x82802, 0x0) mmap$auto(0x0, 0x400009, 0xffb, 0x8000000008011, 0x3, 0x0) r2 = socket(0x2b, 0x1, 0x0) sendmmsg$auto(r2, 0x0, 0x3, 0x20000000) connect$auto(0x3, 0x0, 0x55) openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0) modify_ldt$auto(0x807ff0000000000, 0x0, 0x40100000000aa) mmap$auto(0x0, 0x2020009, 0x8003, 0xeb1, 0xfffffffffffffffa, 0x8000000000008000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x480402, 0x0) r3 = epoll_create$auto(0x3a) epoll_ctl$auto(r3, 0x1, 0x8000000000000000, 0x0) syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000040), r1) msgctl$auto_MSG_INFO(0x2, 0xc, &(0x7f0000000640)={{0x0, 0xee01, 0xee01, 0x8, 0x101, 0x6, 0x4}, &(0x7f0000000080)=0x9, &(0x7f0000000600), 0x0, 0x6, 0xe, 0x7, 0xfffffffffffffffb, 0x0, 0x6, 0x4, @raw=0x6}) socket$nl_generic(0x10, 0x3, 0x10) 2m17.708858968s ago: executing program 9 (id=5968): r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) write$auto(r0, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x22b42, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_smc_pnetid(&(0x7f0000001f00), r1) mlockall$auto(0x7) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/net/nr14/proto_down\x00', 0x82942, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0xa0801, 0x0) close_range$auto(0x2, 0x8, 0x0) r3 = socketcall$auto(0x8000, 0x0) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$auto(0x3, 0xae60, 0x10000000000402) ioctl$auto(0x3, 0xae41, r3) ioctl$auto_KVM_GET_MSRS(r2, 0x4008ae89, &(0x7f00000000c0)={0xdd, 0x0, [{0x40000072, 0x400, 0x2}]}) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x2000040080000004, 0xe) modify_ldt$auto(0x1, 0x0, 0x10) modify_ldt$auto(0x807ff0000000000, 0x0, 0x40100000000aa) bpf$auto_BPF_PROG_LOAD(0x5, &(0x7f0000000340)=@test={r0, 0x4, 0x9, 0x8, 0x1ff, 0xffffffff, 0x5, 0x2, 0x8, 0x8, 0x0, 0x7, 0xdf9, 0x1, 0x5}, 0x1000) 2m17.708558163s ago: executing program 5 (id=5970): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002a40), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_LISTENER_SET(r0, &(0x7f00000050c0)={0x0, 0x0, &(0x7f0000005080)={&(0x7f0000002a80)={0x14, r1, 0x1, 0x70bd25, 0x25dfdbfb}, 0x14}, 0x1, 0xf4, 0x0, 0x20000000}, 0x20008050) 2m16.462517677s ago: executing program 9 (id=5973): mount$auto(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)='nfsd\x00\xee\x1a\x8fg\x1b\x04\xad>\x96\xe9IG\xbe\xc8\x12\xae\xc3\xc0@[\x99\xec\xbf(\xec\xc3\xb2\xf2\x15Zi\xc4S6\'\x14\x05\t\x8c\xd5?\xa0\x00\xd8\xe4\xafW\xcc\xa3\xce\t\xf8p\xc6\x00\x00\x00\x00\xb9\xac\xde\x0e\x90\x18\xf1?I\x95\xe12\xaclJ\xba\xeb\xe4\x83Z\xaev\xd7\xd9\xdd\x14\x81\xbe\xab\xed\xd5MI\x830_\xc2\x14O\x84\xaa\x13W\xb7\x06\'fvQ\x95\xc5\xd1\x98\xe3T\xees\xf0\xc2\xad\xae\x99\xeb\xc5\xf0\"\x92\xcdfk\xc7\xe9\x96\r\x91\xb0\xc46\xf2\xfc\xef\xfe\xa0\xc9d\xb3h$\xeb\xad\xa4P\x8f\xc3bM{4RQ\x00\x9d)_\xd81(\x03\xca1\x88|\xe5\x1e\x10\x89X\x01\xe9\xf6g\x95xx\xaf\xa9~m\x05\xa2\xe4\x81\xb9\x92\xda\x13\xfe5\xfb\xc6\xd8>\x01\xd4\x14\x94o\x1b[\xa8]\x9b\x03\x95\xc3\xad\xad\x1d#oi|\x04\x93N\xfa\x17\xf3b\xf6\x00\x00\x00', 0x0, 0x0) 2m16.385281615s ago: executing program 9 (id=5974): mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/midiC2D3\x00', 0x400000, 0x0) r0 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x82802, 0x0) ioctl$auto(r0, 0x2270, 0x38) 2m15.741793385s ago: executing program 38 (id=5927): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000340), r0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/virtual/block/loop5/queue/rq_affinity\x00', 0x2, 0x0) r2 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) write$auto(r2, &(0x7f0000000440)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\fo\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02G\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb', 0x98c7) sendmsg$auto_TIPC_NL_NET_SET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000007980)={&(0x7f00000005c0)={0xb8, r1, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@TIPC_NLA_UNSPEC={0xa1, 0x0, "468b8f83d3e3d9133015637bfca397994403b83b03ffb61aef8b02d97bd5f09e862722fa11e19d3aa67815dcb0bc166a79ef35d55f938acffc44361ebb5edfda7a16a94cdbc233484cd67ecbe67c53d4b8dfc689e32ce9f19defea3e1f6aaa829ffd88a398ebe4478fc77ecb9538cecdc3ca8859382df6d064cc6af957d621227c5397de7f33f768d5412163c1e7520b2493d112b22170b2f63fb06211"}]}, 0xb8}, 0x1, 0x0, 0x0, 0x40010}, 0x4002) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/system/memory/memory15/online\x00', 0xa001, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000400), r4) sendmsg$auto_NFSD_CMD_VERSION_SET(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)={0x24, r5, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@NFSD_A_SERVER_PROTO_VERSION={0x10, 0x1, 0x0, 0x1, [@NFSD_A_VERSION_ENABLED={0x4}, @NFSD_A_VERSION_MAJOR={0x8, 0x1, 0x2}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24000001}, 0x844) getsockopt$auto_SO_MEMINFO(r3, 0x5, 0x37, &(0x7f0000000240)='TIPCv2\x00', &(0x7f0000000280)=0x2) r6 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000000c0), r0) sendmsg$auto_NL80211_CMD_SET_SAR_SPECS(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="2ceb0a4c", @ANYRES16=r6, @ANYBLOB="000225bd7000fbdbdf258c000000aefe9600050000000500190000000000060066004e210000"], 0x2c}, 0x1, 0x0, 0x0, 0x20000880}, 0x20000001) close_range$auto(0x2, 0x8, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/vm/nr_overcommit_hugepages\x00', 0x100, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r7 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) close_range$auto(0x2, 0x8, 0x0) r8 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000080), 0x88000, 0x0) ioctl$auto_KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r8) ioctl$auto_KVM_GET_MSRS(r7, 0xc008ae88, &(0x7f0000000100)={0x2, 0x179, [{0xc0000100, 0x5, 0x80000000}]}) write$auto(r3, &(0x7f0000000140)='0[.[\x00', 0xcd04) 2m2.607920653s ago: executing program 39 (id=5970): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002a40), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_LISTENER_SET(r0, &(0x7f00000050c0)={0x0, 0x0, &(0x7f0000005080)={&(0x7f0000002a80)={0x14, r1, 0x1, 0x70bd25, 0x25dfdbfb}, 0x14}, 0x1, 0xf4, 0x0, 0x20000000}, 0x20008050) 2m1.372328042s ago: executing program 40 (id=5974): mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/midiC2D3\x00', 0x400000, 0x0) r0 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x82802, 0x0) ioctl$auto(r0, 0x2270, 0x38) 1m46.664614498s ago: executing program 2 (id=6036): pwrite64$auto(0xc8, &(0x7f0000000080)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x00\rB\x1c\a\x00\x00v\xb7\xb33\xaf\n?\x17\xd3\x1d\xf8\xbebZ\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\bV\xc0\x93\xdaG\x02So=C\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2\x00\x00\x00\x00\x00\x00\x00\x00`\x00\x00\x00\x00\x00\x00', 0x4e, 0x1) 1m46.406760345s ago: executing program 2 (id=6037): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/mm/transparent_hugepage/khugepaged/pages_to_scan\x00', 0x1e2102, 0x0) mmap$auto(0xfffffffffffffffe, 0x20009, 0x400000000000da, 0xeb1, r0, 0x8000) (async) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) (async) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram9\x00', 0x1a442, 0x0) bpf$auto(0x4, &(0x7f00000001c0)=@task_fd_query={0x9, 0x21eb, 0x7ff, 0x6, 0x7, 0x0, 0x5f, 0x0, 0x3}, 0x6f3) (async) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kmsg_fops_printk(0xffffffffffffff9c, &(0x7f0000000100), 0x80840, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x1, 0x0) pipe$auto(&(0x7f0000000280)) (async) r2 = socket(0x22, 0x2, 0x4) (async) memfd_create$auto(&(0x7f00000000c0)='\xc4--:\xdd:,./-${\x00', 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, 0x0, 0x106, 0x0, 0x1, 0x3}, 0xed7138c}, 0x7, 0x2) r4 = socket(0xa, 0x2, 0x88) bpf$auto(0x0, &(0x7f0000000380)=@link_update={r4, @new_map_fd=r2, 0x1, @old_prog_fd=r1}, 0x23) (async) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x4}, 0x8) (async) mmap$auto(0x80000001, 0x8000128009, 0x2, 0xeb1, 0x401, 0x8000) (async) io_uring_setup$auto(0x6, 0x0) (async) r5 = socket(0x10, 0x80002, 0x0) (async) mmap$auto(0x7ffc, 0x40, 0x4000000001dc, 0x210, r3, 0x8) (async) close_range$auto(0x2, 0x8000, 0x0) (async) io_uring_setup$auto(0x6, 0x0) getsockopt$auto_SO_BUSY_POLL(r0, 0x893a, 0x2e, &(0x7f00000006c0)='\x00\x00\x82\xb6X\xe9\x9eZ\x83\xc5\r\xa3\xf3\a\xc1\b\xa2Rb\x9fS>\x9a\xdd\x83|LH\xb9\xfdZP\xaa#\xb8\")v(\xac\xdb\xffH\xdb\xd3EG+\xba\xb0\xe0T\xdd\xd73\xe0_\xff\xcc#C;\xa4\xc2m\x04\xf1m\xb3\t\xfb\xd4ng\x1a.\xa6\xcb\xea\x0f`kS\xaenK\xc4\x135fA\x92\x82\x9c2\x12\xbd\n\xe3\xbc\x9b\xbeU\xbd\x995\xee\xf2\x97\x92\x156\x19\xc8>\xca\x0f\xb6\xc0\xb8\xc0\xa8\xaf\xfc\xb2\xbeh]\xd1y1#r\xc9\xc5r\xad{F6\xdet\x03\x10\xe2\xfb\xc2\xd31G\x97\xfdL\x15Js\xcc\x02\xd4\x8e\x9a\t\x9ab\xc4\xe1\xfb!\xbf^\xf7\xbfc\x98&IO\x86\xf0o)\xb3\x01\xaa\x82\x12\xad\xc1\xa4\xd6\x9c\xf5\xc4\xbcgs\xdfW\xbe\xd0\xab\x95\xa0\xc1q\xce\x91\xce\x0f\ty UXn\x845\xd7W\x9e\xe5\x86\xe0\xca\x05\xb1Sbr\xc3\xfe&n\xb8\x8a:\x9d\x0e\xd8$\xfe\x94\xc0\x80\xe1\xce\xab\xe6\xb5\xaa_\xdf\xe2\xf6/\xf0\xa8x\"\xfaiW\xb9i\x12\t@\x81\x90\x06E\xf0\xde\x94L\\\xcc\x05\xec\xbb\xc5|.\bK)\xc6Mc\xf0\xf0A\xfbV\xd8=\x80S\x01\xb3\x927\n1\xb3X(\x01\xf0\x97\x87x\xa5B\x12\xd6ET\xd4m\xb0\xd0\x1ck\xfe\xca`\xad!$\x11\xa8X\xb7c*=\x8a\xb6,\xcc\xf2\xe8\xb1k\x1eCu\x06J7\xb8\xfe+T{\x97\xd9\xf7\x8fx\x1a\xb6\xb1\x9b\f\xef$n:m\xbc\xb7.]iH-Z\x99\xe0fG\xe0\x97\xff\x18\x06\xb1\xadp\x9cU~\x16B\x0e\xaa2\x11\xbd\x8b\xb8\"L\x05\x03l\x9e\x06u\xf9^?\xd6Gl-\x15nY\xee\x8d\xbaC', &(0x7f0000000000)=0x10000) (async) timerfd_create$auto(0x7, 0x0) (async) timerfd_settime$auto(r5, 0x0, 0x0, &(0x7f0000000080)={{0x1cf, 0x4}, {0x8, 0x9}}) (async) close_range$auto(r0, r5, 0x0) 1m46.068293212s ago: executing program 2 (id=6038): r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/net/rpc/gss_krb5_enctypes\x00', 0x1c9180, 0x0) read$auto_tracing_stats_fops_trace(r0, 0x0, 0x0) mmap$auto(0x0, 0x2000c, 0xffff, 0x20eb1, 0x40000000000a5, 0x8000) r1 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000140), 0x2002, 0x0) r2 = openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cmdline\x00', 0x80, 0x0) finit_module$auto(r2, 0x0, 0x1) r3 = socket(0x1f, 0x1, 0x3) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/tty/tty45/power/autosuspend_delay_ms\x00', 0x0, 0x0) pread64$auto(r4, 0x0, 0x3ff, 0x8) fcntl$auto_F_GETOWN(r2, 0x9, 0x8001) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x48041, 0x0) close_range$auto(0x2, 0x8, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) set_mempolicy$auto(0x8003, &(0x7f0000000280)=0x7b, 0x4) r5 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000000180), 0x1541, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0xa, 0x1, 0x44b, 0xce8, 0x5, 0x1007181, 0xd1, 0x7, 0x7, 0x7ff, 0x800c, 0x80000005, 0x4, 0x80200000000001, 0x381, 0xde3, 0x800000000008, 0x0, 0x2, 0x4, 0x39, 0xe, 0x22000, 0x1fc, 0x0, 0xc3f, 0x287f, 0x2, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x104, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44cd98b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, 0x0, 0x0, 0x1, 0x0, 0x2, 0x3, 0x0, 0xfff]}, 0xa, 0xd) ioctl$auto__ctl_fops_dm_ioctl(r5, 0xfffffffffffffd02, &(0x7f00000001c0)) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000003c0)={'ip6tnl0\x00'}) socket(0x2, 0x1, 0x0) select$auto(0x8, 0x0, 0x0, 0x0, 0x0) getpid() socket(0x2, 0x80802, 0x0) recvfrom$auto(r1, &(0x7f0000000280)="973ecb1e15088a1017ab31ece9568551121945ff7eb6028fbf813dcff0", 0x0, 0xd5, &(0x7f0000000340)=@phonet={0x23, 0x20, 0x9, 0x6}, &(0x7f0000000380)=0x800) 1m45.02834461s ago: executing program 2 (id=6041): prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x100000a3d9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) r0 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/038/001\x00', 0x40001, 0x0) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) write$auto(r1, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) ioctl$auto_USBDEVFS_CONTROL(r0, 0xc0185500, 0x0) madvise$auto(0x0, 0x1, 0x7fbfffff) ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 1m42.883848551s ago: executing program 2 (id=6046): openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, 0x0, 0x242d00, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0xc, 0x9c0b, 0x44eb2, 0xffffffffffffffff, 0x300000000000) removexattr$auto(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='\x00') r0 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/usbmon0\x00', 0x0, 0x0) ioctl$auto_MON_IOCX_MFETCH(r0, 0xc0109207, 0x0) mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) ioctl$auto_SNDCTL_DSP_SYNC(0xffffffffffffffff, 0x5001, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_ep0_operations_inode(0xffffffffffffff9c, &(0x7f0000000000), 0x8a001, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001080)='/sys/devices/platform/vivid.0/cec2/uevent\x00', 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$auto(0xffffffffffffffff, &(0x7f0000000040)=@can={0x1d, r3, 0xfd}, 0x6a) syz_genetlink_get_family_id$auto_macsec(0x0, 0xffffffffffffffff) setrlimit$auto(0x1000000007, 0x0) sendmsg$auto_MACSEC_CMD_UPD_RXSA(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x1f4, &(0x7f00000003c0)={0x0, 0x18}, 0x1, 0xe8030000, 0x0, 0x14}, 0x800) io_uring_setup$auto(0x9f6, 0x0) write$auto(r1, 0x0, 0x1000) 1m41.839112181s ago: executing program 2 (id=6051): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)={0x1c, r1, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NFSD_A_SERVER_THREADS={0x8, 0x1, 0x4a}]}, 0x1c}, 0x1, 0xfffffff5}, 0x4000) 1m25.968931635s ago: executing program 41 (id=6051): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)={0x1c, r1, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NFSD_A_SERVER_THREADS={0x8, 0x1, 0x4a}]}, 0x1c}, 0x1, 0xfffffff5}, 0x4000) 4.903780839s ago: executing program 0 (id=6513): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = socket(0x2, 0x5, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_CTRL_CMD_GETPOLICY(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)={0x1c, r4, 0x301, 0x70b52c, 0x25dfdbfb, {}, [@CTRL_ATTR_FAMILY_ID={0x6, 0x1, 0x17}]}, 0x1c}, 0x1, 0x0, 0x0, 0x400c01d}, 0x0) r5 = syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000080), r3) sendmsg$auto_MACSEC_CMD_UPD_TXSA(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002dbd7000fbdbdf250600000008000100", @ANYRES32=0x0, @ANYBLOB="2e453b2b86eb6609ac6b21859c95ef1c4960514a70c8613b16ee0a1d9d07d2fe7286fdd02c7145b82ccedbe325c98b019cf0fe4866fabde884a9e94061d34e65ee55d80c6cb3dc6493676626e1014705804fa60887b6f97ef95b7f74d7f7fb5cd2"], 0x24}, 0x1, 0x0, 0x0, 0x4008000}, 0x400c8d4) sendmsg$auto_MACSEC_CMD_UPD_OFFLOAD(r0, &(0x7f0000000300)={&(0x7f0000000100), 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x20, r5, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@MACSEC_ATTR_OFFLOAD={0xc, 0x9, 0x0, 0x1, [@typed={0x8, 0x12c, 0x0, 0x0, @pid}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x1) setsockopt$auto(0x3, 0x1, 0x21, 0x0, 0x9) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_SMC_PNETID_ADD(r6, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x70, 0x0, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@SMC_PNETID_ETHNAME={0xb, 0x2, 'nlctrl\x00'}, @SMC_PNETID_IBNAME={0x5, 0x3, '\x00'}, @SMC_PNETID_NAME={0x13, 0x1, '^#\x99!-@[,+. (%}\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0xe4}, @SMC_PNETID_ETHNAME={0x6, 0x2, '$\x00'}, @SMC_PNETID_IBNAME={0x11, 0x3, '.((!$@K:/[]#\x00'}, @SMC_PNETID_ETHNAME={0x5, 0x2, '\x00'}, @SMC_PNETID_NAME={0x5, 0x1, '\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x40}, 0x4040080) sendmmsg$auto(r2, &(0x7f0000000140)={{&(0x7f0000000040), 0x13, &(0x7f00000000c0)={0x0, 0x1a000}, 0x7, 0x0, 0x2, 0x2}, 0x1002}, 0x739618ce, 0x311) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_SMC_NETLINK_GET_DEV_SMCD(r7, &(0x7f0000004380)={0x0, 0x0, &(0x7f0000004340)={&(0x7f0000004300)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB='\v'], 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x810) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), r7) read$auto(r7, &(0x7f0000000000)='\x00', 0x91e2) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x100) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1b0026bd7000fddbdf25030000000400080014000380100003800c00098008000600", @ANYRES32=0x0, @ANYBLOB="12000100898771f1c19f17790481008286dd0000040002"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0xc800) syz_genetlink_get_family_id$auto_cifs(&(0x7f00000000c0), r0) 4.873391346s ago: executing program 1 (id=6514): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4ea2, @remote}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0x101}, 0x8}, 0x7, 0x20020000) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x161342, 0x130) bind$auto(r1, &(0x7f0000000040)=@in={0x2, 0x4e20, @remote}, 0x6a) mmap$auto(0x0, 0x2020009, 0x7, 0xeb1, 0xfffffffffffffffa, 0x8000) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) ioctl$auto_USB_RAW_IOCTL_EPS_INFO(r1, 0x83c0550b, &(0x7f00000003c0)={[{"41ac7a2c9c03bbea1b9bc5af2371b761", 0xfffffff8, {0x1, 0x0, 0x0, 0x1}, {0x8000, 0x9, 0xf7}}, {"4be7c8c45265bf03db97f91e9b68710c", 0x1, {0x1, 0x1, 0x0, 0x1}, {0x3, 0x1, 0x5}}, {"58080ca78179a10bf038e648207afcec", 0x5e, {0x0, 0x1, 0x0, 0x0, 0x1}, {0x92dd, 0x1, 0x4}}, {"fe501a9c74d51595e85d19cbebb5b253", 0x5, {0x0, 0x0, 0x1, 0x0, 0x1, 0x1}, {0x4, 0x400, 0x2}}, {"f294e47bfbb9be061da59906e540cef4", 0x2, {0x0, 0x1, 0x0, 0x0, 0x1, 0x1}, {0x88e6, 0x2, 0xa9}}, {"6ebc301bb2cb50e5577e65b750978828", 0x79c, {0x0, 0x1, 0x1, 0x1, 0x1}, {0xb5, 0x3}}, {"9ffb6735ad4e54dbbcaac1fa47bfd810", 0xfff, {0x1, 0x1, 0x1, 0x0, 0x1}, {0x2, 0xfff9, 0x8}}, {"c65743ffdf18cca8ec28d194ca7153ce", 0xd2be, {0x0, 0x1, 0x1, 0x0, 0x1, 0x1}, {0x8, 0x3, 0x56ae}}, {"2e0620e18badb00192969b6edf4afb5f", 0x5, {0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x800, 0x3, 0x62f8}}, {"cce8b976e17656af15027d598ffc0b6b", 0x3, {0x0, 0x1}, {0x0, 0x0, 0xd6d8}}, {"0ace1798e2b1d8104e3f2044d3a38494", 0x400000, {0x1, 0x1, 0x0, 0x0, 0x1, 0x1}, {0x1c09, 0x0, 0x3}}, {"ed5773d5d50c55e0a5c34d914ed270fd", 0x1, {0x0, 0x1, 0x1, 0x1, 0x1, 0x1}, {0x5, 0xd, 0x9}}, {"29600df0ad63e08ca650c60b13dc4277", 0x1e8ecf6e, {0x0, 0x0, 0x0, 0x0, 0x1}, {0x8, 0x8, 0x336}}, {"5edf301ef6bc0b881dad5f6c1933bc27", 0xffffffff, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0xd679, 0xfff7, 0x1c}}, {"dcbdabdf9c8ef848be4992fe3af38b71", 0xd060, {0x0, 0x1, 0x0, 0x1, 0x0, 0x1}, {0x7, 0x2, 0x2}}, {"8e17df0461a544d461082dc093b551b7", 0xd3f7, {0x0, 0x0, 0x1}, {0xfffb, 0x3, 0x7}}, {"b700ff6a1d72bfa5ee4ccf556ba4da52", 0x3, {0x0, 0x0, 0x1, 0x0, 0x1, 0x1}, {0x0, 0x1fb, 0xa1}}, {"813b0a656f76f748329b7eb5792d686a", 0x0, {0x0, 0x0, 0x0, 0x0, 0x1}, {0x2, 0x0, 0x7}}, {"05cc9723d17dcd8b9e45182935e09ecf", 0x8, {0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, {0x3, 0x0, 0xcf}}, {"d359d8a9959abc34db7484e500", 0x10, {0x0, 0x0, 0x0, 0x1}, {0x5, 0x1, 0x8}}, {"aaee063b6a38948bc5d79f01682954db", 0xffff0359, {0x1, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x2, 0x5, 0x8}}, {"951bb7dcc772bc0ef0ffd9c22930bafe", 0x3, {0x0, 0x0, 0x0, 0x1, 0x1}, {0x5, 0x5, 0x7}}, {"8a62bacb6ba1803e20d1040551bc7ccc", 0x4, {0x1, 0x0, 0x1}, {0x4, 0x7, 0x8}}, {"ff45cd4447424c41c48ca63ab7e851e0", 0x73b, {0x0, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x5, 0x7, 0x6}}, {"c55e0da5e379973f600927158222aba0", 0x634, {0x1, 0x0, 0x1, 0x1, 0x1, 0x1}, {0xca7, 0xfffe, 0x6}}, {"4211db8b4a678a000000009100", 0x0, {0x1}, {0xf, 0x1, 0x8b8}}, {"9106000000000000acf0b72a76cb4f88", 0x40000003, {0x1, 0x0, 0x1, 0x1, 0x0, 0x1}, {0xb, 0x8, 0x1ff}}, {"f2654e62c46c7ec3336d71c0b9d8e9c2", 0x400, {0x0, 0x0, 0x0, 0x0, 0x1}, {0xfa17, 0x8, 0x9}}, {"c852a485f25cc9c71c8cb127a6ba8776", 0x9, {0x0, 0x1}, {0x3, 0xf7, 0x8}}, {"60d20d0000238e0300000000000000a0", 0xf, {0x0, 0x0, 0x1, 0x1, 0x0, 0x1}, {0xfffb, 0xf, 0x8}}]}) read$auto_mon_fops_binary_mon_bin(r1, &(0x7f0000000000)=""/198, 0xc6) sendmsg$auto_NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000828bd7000fedbdf258100000006001401761300000800db00"/42, @ANYRES32=r1, @ANYBLOB="05006000fb00000008009e00090000000400670004002101080035000300000005008900c6000000"], 0x5c}, 0x1, 0x0, 0x0, 0x20048084}, 0x40080) write$auto(0x3, 0x0, 0x7fffffff) getsockopt$auto(0x3, 0x6, 0xb, 0x0, 0x0) 4.420495654s ago: executing program 0 (id=6516): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) socket(0x2b, 0x1, 0x0) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000200)={{0x0, 0x4000, 0x0, 0x2, 0x0, 0x7, 0x4}, 0x9}, 0x7, 0x4008) setitimer$auto_ITIMER_VIRTUAL(0x1, &(0x7f0000000540)={{0x7fffffffffffffff, 0x6}, {0x1, 0x6}}, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x401bf, 0x7352, 0x2e, 0x944a, 0x1ffde, 0x7, 0x3, 0x20000002, 0x9, 0x3, 0x100000006, 0x4, 0xb4, 0x9, 0x6, 0x10003, 0x80, 0x4, 0x10000000, 0x7, 0x2000, 0x8, 0x200000, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x6, 0x401, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x9]}, 0x1ff, 0xd) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ip6gre0\x00', 0x0}) syz_genetlink_get_family_id$auto_nfsd(&(0x7f00000005c0), 0xffffffffffffffff) bpf$auto(0x0, &(0x7f0000000340)=@bpf_attr_5={@target_ifindex=r1, 0x7f, 0x99, 0x8, 0x1, @relative_id=0x8, 0x6}, 0x92) r3 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x20342, 0x0) ioctl$auto_SNDCTL_DSP_SYNC(r3, 0x5001, 0xfffffffffffffffc) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_fragmentation_threshold_ops_(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/ieee80211/phy11/fragmentation_threshold\x00', 0x200001, 0x0) sysfs$auto(0x2, 0x4c, 0x0) sendmsg$auto_L2TP_CMD_TUNNEL_GET(r2, &(0x7f0000000580)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000400)={0xf4, 0x0, 0x800, 0x70bd2c, 0x25dfdbff, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @local}, @L2TP_ATTR_NONE={0xc4, 0x0, "5fd75d5161f59b59e1793c370dd6c58cd53f0b14801bd06651f5e965ac33f6c2df983f2856ce489f6839f576d1deae9d4e33d429e7f54feae55f3c0bed5909b2e17c558308620ece486a2070040b3a22d14365c12faff213fb8bba00b92e6ac82f9a59823c6bbcd1ca7da4a9f27f677a07f77a48e49c02da733b4867250d8ffaeb73dcfa020fbee531bce0db65ecbae4a9ecce5fd790d4079628d3b28ece89e9a2b887163ce1bdacae3ed4fb697c688d40ff4665be827f8fbf2a9e5af951cbc6"}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}]}, 0xf4}, 0x1, 0x0, 0x0, 0x4000}, 0x4000009) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, 0x0, 0x283f4, 0x0) mknod$auto(&(0x7f0000000080)=':,\x00', 0xcb, 0xfffffffa) clone$auto(0x1, 0x40000000003e, 0x0, 0x0, 0x40000009) r4 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x2) getdents64$auto(r4, &(0x7f0000000f40)={0x309, 0x7, 0xffff, 0x7}, 0x200c8) r5 = socket(0x10, 0x2, 0x0) setsockopt$auto(r5, 0x104000000000010e, 0x1, 0x0, 0x16) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) r6 = socket(0x10, 0x2, 0x0) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="10002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r7 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) ioctl$auto_KVM_GET_MSRS(r7, 0xc008ae88, &(0x7f0000000040)={0x10, 0x0, [{0x481, 0x400, 0x9}]}) sendmmsg$auto(r6, &(0x7f0000000200)={{0x0, 0x3, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xe}}, 0x6, 0x4008) 3.735344185s ago: executing program 1 (id=6518): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) fcntl$auto(0x3, 0x4, 0xa553) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) syslog$auto(0x1, 0x0, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) close_range$auto(0x0, 0xfffffffffffff001, 0x2) r2 = socket(0x2b, 0x1, 0x0) r3 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/video33\x00', 0x80382, 0x0) ioctl$auto(r3, 0xc0045627, r2) socket(0x10, 0x2, 0x0) write$auto_vhost_vsock_fops_vsock(r1, &(0x7f0000000140)="02bb8ef511fa03b1347eedcf8c868e131161b74323f94a8a4e09f710d97f153ddfc9afc83b3608b85b02577d8aa0eb8d052b0598e33a36b7571d386ebafce775a656abbca8f3bf57459ec9428b4583e70e17", 0x52) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x1ff) socket(0x11, 0xa, 0x300) r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000240)='/proc/thread-self/net/ptype\x00', 0x0, 0x0) pread64$auto(r4, &(0x7f0000000100)='veth1\x00E\xd9\'bV\x9dD\x0f\x7f\xf0\x00_.\'\xfe\x85\xbe+\xefb\x01\r\xb0\xdeY\x93\x109\xc5\xd2\xff)\x01\xc6\xf3O}\"\xee\x98\x1fr\xf4\x19\xcbY\x8c\xb7C\xa8;\xec\b)\x13\xa4\xc0\xb5\xac\xe7fw+b\xaav\x15\x7f\xd3\xf6\xec\xa8\xa0\xd9\xb9\x11\xcc\xf2\xf5z\xe0#\xf5h\n\xe1\xc5R\a\x02\xf1r\xd5W\xa6\\\x8a0\x19\x87\xd1\x1a\xdeI\xf7\xe4/\xa1\xd5}\xd2B\xeb\x8e\xcc\x86\xd3\xcb\xee5\xcc+l\xd2\t\x80', 0x208000000004, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000db, 0xeb1, 0x401, 0x8000) unshare$auto(0x40000080) set_tid_address$auto(0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x89fc, 0x0) move_pages$auto(0x0, 0x1002, 0x0, 0x0, 0x0, 0x2) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='}[,&*}\x00', &(0x7f0000000080)={0x220000, 0x0, 0x10}, 0x18) ptrace$auto(0x10, r0, 0x4, 0x4) 3.698433746s ago: executing program 0 (id=6519): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)={0x30, r1, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@ETHTOOL_A_COALESCE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_RX={0x5, 0x19, 0x1}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES_HIGH={0x8, 0x16, 0xd}]}, 0x30}, 0x1, 0x0, 0xd000000, 0x1}, 0x810) 3.342921373s ago: executing program 4 (id=6522): mmap$auto(0x0, 0x2000a, 0x7e, 0xeb2, 0x401, 0x8000) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0xd, 0x2, 0x6, 0x7, 0x8, 0xffffffffffffffff, [], {0x6, 0x6, 0x1, 0x1ff, 0x100, 0x83, 0x101, 0x6, 0x6}, {0x100, 0x1, 0x52, 0x5, 0x1, 0x40, 0x876c5, 0x8, 0x100000000}}) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) mmap$auto(0x0, 0x9, 0xffb, 0x8000000008011, 0x3, 0x0) syz_clone(0x23926000, 0x0, 0x0, 0x0, 0x0, 0x0) pipe$auto(0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda\x00', 0x14f602, 0x0) mlock$auto(0xfbe8, 0x4) ioctl$auto_BLKFRASET(r0, 0x1264, 0x0) keyctl$auto(0x2000001f, 0x1, 0x6, 0x3, 0x8000) madvise$auto(0x0, 0x240007, 0x1d) ioctl$auto_BLKROSET(r0, 0x125d, 0x0) migrate_pages$auto(0x0, 0xa, &(0x7f0000000100)=0x5, &(0x7f0000000140)=0x2) madvise$auto(0x4ad9, 0x318, 0x4) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/fib_trie\x00', 0x0, 0x0) pread64$auto(r1, 0x0, 0x8, 0x7fff) madvise$auto(0x0, 0x400053, 0x9) mlockall$auto(0x7) 3.315486895s ago: executing program 3 (id=6523): mmap$auto(0x0, 0x2000c, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x9, 0x6, 0x63, 0x0, 0x0, 0x0, 0xac, 0x200, 0x2, 0x40000402, 0x9, 0x9, 0xffffffffffffffff, 0x6, 0x6, 0x200000100103}) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0f"], 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x708d16542a322ad5) r0 = socket(0x10, 0x2, 0x6) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}, 0x1, 0x300000000000000, 0x0, 0x2000c000}, 0x4004) 3.214954775s ago: executing program 0 (id=6524): mmap$auto(0x0, 0xc, 0x9c0b, 0x44eb2, 0xffffffffffffffff, 0x300000000000) close_range$auto(0x2, 0x8, 0x0) openat$auto_ep0_operations_inode(0xffffffffffffff9c, 0x0, 0x8a001, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001080)='/sys/devices/platform/vivid.0/cec2/uevent\x00', 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x1d, 0x2, 0x6) r2 = socket(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$auto(r1, &(0x7f0000000040)=@can={0x1d, r3, 0xfd}, 0x6a) syz_genetlink_get_family_id$auto_macsec(0x0, r1) setrlimit$auto(0x1000000007, 0x0) sendmsg$auto_MACSEC_CMD_UPD_RXSA(r1, &(0x7f0000000400)={0x0, 0x1f4, &(0x7f00000003c0)={0x0, 0x18}, 0x1, 0xe8030000, 0x0, 0x14}, 0x800) io_uring_setup$auto(0x9f6, 0x0) write$auto(r0, 0x0, 0x1000) 3.062279661s ago: executing program 3 (id=6525): r0 = socket(0xa, 0x2, 0x0) sendto$auto(r0, 0x0, 0x402, 0xacf8, &(0x7f0000000040)=@generic={0xa, "8340cba8fe800000003f00"}, 0x1c) 2.87383208s ago: executing program 3 (id=6526): shmat$auto(0x0, &(0x7f0000000580)='(\x00', 0xfffffffa) mmap$auto(0x3, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) openat$auto_ecryptfs_miscdev_fops_miscdev(0xffffffffffffff9c, &(0x7f000000e680), 0x2, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x0) mkdir$auto(&(0x7f00000001c0)='}[,&*}\x00', 0xc001) statx$auto(0xffffffffffffff9c, &(0x7f0000000040)='}[,&*}\x00', 0x0, 0x45d9, 0x0) clock_settime$auto(0xa, 0x0) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) madvise$auto(0xfeffffffeffffffb, 0x7ff, 0x5e) r3 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv6/conf/all/addr_gen_mode\x00', 0xa0202, 0x0) sendfile$auto(r3, r3, 0x0, 0x7fffe000) openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r4 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000240)='/dev/binderfs/binder1\x00', 0x0, 0x0) ioctl$auto_BINDER_FREEZE(r4, 0x400c620e, &(0x7f0000000280)="76b05564633541a23dbf855bef245273fae3b77cd64ce202add4a2218ee944ad9f3ded0c800e3b9ebc496de46c10263bd535d578b02292de1ee61272055339e7adff54f5d4f665048bc2efc69fb002c9cf60f772e4ce44329fc3dafb3a29d454792abb54b4dc1d674547b89b49de1fa8fb6d54aad380e550b613319e91ca1580ecba4260fe4d") readv$auto(0x3, 0x0, 0x8000000000004) syz_genetlink_get_family_id$auto_thermal(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_THERMAL_GENL_CMD_TZ_GET_TRIP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc000}, 0x4) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, 0x0, 0x82000, 0x0) read$auto(0x3, 0x0, 0x80) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002abd7000fddbdf251500000008000300", @ANYRES32=r6, @ANYBLOB='\b\x00'], 0x24}, 0x1, 0x0, 0x0, 0x404c0c0}, 0x80) r7 = ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$auto(r7, 0x4008ae6a, r8) utimensat$auto(r7, &(0x7f0000000080)='}[,&*}\x00', &(0x7f0000000140)={0x2, 0xfd9d000000000000}, 0x9) 2.484586785s ago: executing program 4 (id=6527): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4ea2, @remote}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0x101}, 0x8}, 0x7, 0x20020000) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x161342, 0x130) bind$auto(r1, &(0x7f0000000040)=@in={0x2, 0x4e20, @remote}, 0x6a) mmap$auto(0x0, 0x2020009, 0x7, 0xeb1, 0xfffffffffffffffa, 0x8000) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) ioctl$auto_USB_RAW_IOCTL_EPS_INFO(r1, 0x83c0550b, &(0x7f00000003c0)={[{"41ac7a2c9c03bbea1b9bc5af2371b761", 0xfffffff8, {0x1, 0x0, 0x0, 0x1}, {0x8000, 0x9, 0xf7}}, {"4be7c8c45265bf03db97f91e9b68710c", 0x1, {0x1, 0x1, 0x0, 0x1}, {0x3, 0x1, 0x5}}, {"58080ca78179a10bf038e648207afcec", 0x5e, {0x0, 0x1, 0x0, 0x0, 0x1}, {0x92dd, 0x1, 0x4}}, {"fe501a9c74d51595e85d19cbebb5b253", 0x5, {0x0, 0x0, 0x1, 0x0, 0x1, 0x1}, {0x4, 0x400, 0x2}}, {"f294e47bfbb9be061da59906e540cef4", 0x2, {0x0, 0x1, 0x0, 0x0, 0x1, 0x1}, {0x88e6, 0x2, 0xa9}}, {"6ebc301bb2cb50e5577e65b750978828", 0x79c, {0x0, 0x1, 0x1, 0x1, 0x1}, {0xb5, 0x3}}, {"9ffb6735ad4e54dbbcaac1fa47bfd810", 0xfff, {0x1, 0x1, 0x1, 0x0, 0x1}, {0x2, 0xfff9, 0x8}}, {"c65743ffdf18cca8ec28d194ca7153ce", 0xd2be, {0x0, 0x1, 0x1, 0x0, 0x1, 0x1}, {0x8, 0x3, 0x56ae}}, {"2e0620e18badb00192969b6edf4afb5f", 0x5, {0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x800, 0x3, 0x62f8}}, {"cce8b976e17656af15027d598ffc0b6b", 0x3, {0x0, 0x1}, {0x0, 0x0, 0xd6d8}}, {"0ace1798e2b1d8104e3f2044d3a38494", 0x400000, {0x1, 0x1, 0x0, 0x0, 0x1, 0x1}, {0x1c09, 0x0, 0x3}}, {"ed5773d5d50c55e0a5c34d914ed270fd", 0x1, {0x0, 0x1, 0x1, 0x1, 0x1, 0x1}, {0x5, 0xd, 0x9}}, {"29600df0ad63e08ca650c60b13dc4277", 0x1e8ecf6e, {0x0, 0x0, 0x0, 0x0, 0x1}, {0x8, 0x8, 0x336}}, {"5edf301ef6bc0b881dad5f6c1933bc27", 0xffffffff, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0xd679, 0xfff7, 0x1c}}, {"dcbdabdf9c8ef848be4992fe3af38b71", 0xd060, {0x0, 0x1, 0x0, 0x1, 0x0, 0x1}, {0x7, 0x2, 0x2}}, {"8e17df0461a544d461082dc093b551b7", 0xd3f7, {0x0, 0x0, 0x1}, {0xfffb, 0x3, 0x7}}, {"b700ff6a1d72bfa5ee4ccf556ba4da52", 0x3, {0x0, 0x0, 0x1, 0x0, 0x1, 0x1}, {0x0, 0x1fb, 0xa1}}, {"813b0a656f76f748329b7eb5792d686a", 0x0, {0x0, 0x0, 0x0, 0x0, 0x1}, {0x2, 0x0, 0x7}}, {"05cc9723d17dcd8b9e45182935e09ecf", 0x8, {0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, {0x3, 0x0, 0xcf}}, {"d359d8a9959abc34db7484e500", 0x10, {0x0, 0x0, 0x0, 0x1}, {0x5, 0x1, 0x8}}, {"aaee063b6a38948bc5d79f01682954db", 0xffff0359, {0x1, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x2, 0x5, 0x8}}, {"951bb7dcc772bc0ef0ffd9c22930bafe", 0x3, {0x0, 0x0, 0x0, 0x1, 0x1}, {0x5, 0x5, 0x7}}, {"8a62bacb6ba1803e20d1040551bc7ccc", 0x4, {0x1, 0x0, 0x1}, {0x4, 0x7, 0x8}}, {"ff45cd4447424c41c48ca63ab7e851e0", 0x73b, {0x0, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x5, 0x7, 0x6}}, {"c55e0da5e379973f600927158222aba0", 0x634, {0x1, 0x0, 0x1, 0x1, 0x1, 0x1}, {0xca7, 0xfffe, 0x6}}, {"4211db8b4a678a000000009100", 0x0, {0x1}, {0xf, 0x1, 0x8b8}}, {"9106000000000000acf0b72a76cb4f88", 0x40000003, {0x1, 0x0, 0x1, 0x1, 0x0, 0x1}, {0xb, 0x8, 0x1ff}}, {"f2654e62c46c7ec3336d71c0b9d8e9c2", 0x400, {0x0, 0x0, 0x0, 0x0, 0x1}, {0xfa17, 0x8, 0x9}}, {"c852a485f25cc9c71c8cb127a6ba8776", 0x9, {0x0, 0x1}, {0x3, 0xf7, 0x8}}, {"60d20d0000238e0300000000000000a0", 0xf, {0x0, 0x0, 0x1, 0x1, 0x0, 0x1}, {0xfffb, 0xf, 0x8}}]}) read$auto_mon_fops_binary_mon_bin(r1, &(0x7f0000000000)=""/198, 0xc6) sendmsg$auto_NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000828bd7000fedbdf258100000006001401761300000800db00"/42, @ANYRES32=r1, @ANYBLOB="05006000fb00000008009e00090000000400670004002101080035000300000005008900c6000000"], 0x5c}, 0x1, 0x0, 0x0, 0x20048084}, 0x40080) write$auto(0x3, 0x0, 0x7fffffff) getsockopt$auto(0x3, 0x6, 0xb, 0x0, 0x0) 2.418794234s ago: executing program 1 (id=6528): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2b, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @remote}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000000)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xfffffffd}, 0x10001}, 0x5, 0x20000000) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) sendmsg$auto_NLBL_CIPSOV4_C_LIST(r0, &(0x7f0000001bc0)={0x0, 0x0, &(0x7f0000001b80)={&(0x7f00000003c0)={0x14, 0x0, 0x100, 0x70bd29, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0xa00000000000000, 0x840}, 0x8011) select$auto(0x804, 0x0, &(0x7f0000000100)={[0x9, 0x281400, 0x0, 0x80000300, 0x1, 0x0, 0x2, 0x3, 0x81, 0x10000005e58296b, 0x1e, 0x9, 0x7ff, 0x200, 0x20000000008, 0x4000000000006]}, 0x0, 0x0) 2.181536278s ago: executing program 1 (id=6529): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1b0026bd7000fddbdf2503000000040058001400038010000c800c00098008000600", @ANYRES32=0x0, @ANYBLOB="12000100898771f1c19f17790481008286dd0000040002"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0xc800) 2.023169054s ago: executing program 0 (id=6530): unshare$auto(0x40000080) (async, rerun: 32) mmap$auto(0x0, 0x20009, 0x7, 0x12, 0xffffffffffffffff, 0xf4e) (async, rerun: 32) mmap$auto(0xa182, 0x2000d, 0x200, 0x100000000eb1, 0xffffffffffffffff, 0x10008008) (async) r0 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) write$auto_console_fops_tty_io(r0, &(0x7f0000001bc0)="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", 0xd4f) (async) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r2 = prctl$auto(0x3c, 0x101, 0x0, 0x0, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) (async, rerun: 32) close_range$auto(0x2, 0x8, 0x0) (async, rerun: 32) io_uring_register$auto(0x2, 0xe, 0x0, 0x20) (async) ioctl$auto_IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, 0x0) (async) shmctl$auto(0x0, 0x9, 0x0) (async) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0xb9442, 0x0) (async, rerun: 32) close_range$auto(0x2, 0x8, 0x0) (async, rerun: 32) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x800, 0x0) mknod$auto(&(0x7f0000000040)='\xfd\x90\x8f2\x14\x92\x00\xbf\xdf\xcf\x9a\xae}\xd9\xf95\xc5gV\x82\f\xe5h\xfe\x83\xe4\xbe\x8c\x1f\xa5\xf1_T\xde\xf7\xd4\x83D\x9eXS\xd6\x90T\xc1v\xad#\xc4q\x8b\xed2\xadW:0\xef\x9c.=\xba\x0fy\x8f\xcd\xd6\xde\xa9i\xec\xe8\xca\x9f\xf3\x82b\xa2y\xa87J\xfc \xc5\xd8\x80\xba\xaaV\x8f{\x1f\x1b\xb0\n\x97\\\xa7\xe3\xdf\xc29-*;#r\xc8\xd1\x14RcF\x87\xe4\x1c\x1fGL\xa5\x19\x90\xd6\x8d*\xe6\b(\x1a\xea\x95\xdc\xa6)5\xae&yAl\x1e\xe3j Lp\x91\r\xed%\xafZ\xf8w\xf2}\xcdGS\xce\xb9\xdck\x86\x00.6\xe6{\xc1\x00\x1bW5\x81\xda!\xcb.O\xa9\xf3\xa7\x88+\xb9\xf3\x9a7\xa4\xe6)<\xa79\xa4\x87\\\xb4\xbf\v\x03\x87\xac\x87r\x02\x05\xdb\xe4\xde,V\xb6G\xba.WR\xe2<~\xdd\xb2\xe53hj_;\xa5qm\x92\xc7P\xc9.\x82w8\x1f\xfcX\xe4\x14\xc72cC\xd3\x00'/263, 0x1, 0x4) (async) getsockopt$auto_SO_LINGER(r2, 0x6d, 0xd, &(0x7f0000000180)='\x00', &(0x7f00000001c0)=0x2fb) (async, rerun: 64) lstat$auto(&(0x7f0000000200)='\xfd\x90\x8f2\x14\x92\x00\xbf\xdf\xcf\x9a\xae}\xd9\xf95\xc5gV\x82\f\xe5h\xfe\x83\xe4\xbe\x8c\x1f\xa5\xf1_T\xde\xf7\xd4\x83D\x9eXS\xd6\x90T\xc1v\xad#\xc4q\x8b\xed2\xadW:0\xef\x9c.=\xba\x0fy\x8f\xcd\xd6\xde\xa9i\xec\xe8\xca\x9f\xf3\x82b\xa2y\xa87J\xfc \xc5\xd8\x80\xba\xaaV\x8f{\x1f\x1b\xb0\n\x97\\\xa7\xe3\xdf\xc29-*;#r\xc8\xd1\x14RcF\x87\xe4\x1c\x1fGL\xa5\x19\x90\xd6\x8d*\xe6\b(\x1a\xea\x95\xdc\xa6)5\xae&yAl\x1e\xe3j Lp\x91\r\xed%\xafZ\xf8w\xf2}\xcdGS\xce\xb9\xdck\x86\x00.6\xe6{\xc1\x00\x1bW5\x81\xda!\xcb.O\xa9\xf3\xa7\x88+\xb9\xf3\x9a7\xa4\xe6)<\xa79\xa4\x87\\\xb4\xbf\v\x03\x87\xac\x87r\x02\x05\xdb\xe4\xde,V\xb6G\xba.WR\xe2<~\xdd\xb2\xe53hj_;\xa5qm\x92\xc7P\xc9.\x82w8\x1f\xfcX\xe4\x14\xc72cC\xd3\x00', 0x0) (rerun: 64) ioctl$auto(0x3, 0x40104d06, 0x5) mremap$auto(0x110c230000, 0x7fffffffe000, 0x101, 0x3, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/module/nfs/parameters/delay_retrans\x00', 0x102, 0x0) write$auto(0x3, 0x0, 0xffd8) (async) fcntl$auto(0xffffffffffffffff, 0x409, 0x40003f) (async) semctl$auto(0x201, 0x2, 0x13, 0x1) signalfd4$auto(0xffffffff, 0x0, 0x8, 0x0) (async) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x6ab82, 0x0) 1.974258707s ago: executing program 1 (id=6531): mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000380)='/proc/fs/cifs/cifsFYI\x00', 0x88400, 0x0) r0 = openat$auto_sco_debugfs_fops_(0xffffffffffffff9c, 0x0, 0x242, 0x0) setresuid$auto(0x0, 0x7, 0x8080) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) timerfd_create$auto_CLOCK_REALTIME(0x0, 0x1) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) io_uring_setup$auto(0x5, 0x0) openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000000)='/dev/binderfs/binder1\x00', 0x2a2900, 0x0) mmap$auto(0x0, 0x4000000400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x4000000, 0xffffffffffff0085, 0x1004) r1 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0xfffffffffffffffd, 0x80040000d, 0x5, 0x9b72, r1, 0x8000) dup$auto(0xffffffffffffffff) socket(0x2, 0x1, 0x106) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0x4, 0xda, 0x7, 0xfffffffffffffffc, 0x95f4da0a, 0xffffffffffffffff, 0x3, 0x62, 0xa0000005, 0x7, 0x4, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) write$auto(r2, &(0x7f0000000040)='/d\xd79\x91P1\xddr\x96\xf7e\xd4\xcd\xf3a\xb3\xb6\x8b\x94\x14\x00k\xa1\xa9\xb2/6R\x1e\xfb:\x8a\xa4\x17AF\xe6\xaeI\x19\xa9C(\xfdR\xad\x19\xbc&\x11\x83\xfb\x8e\x18]\x94\xa9\x06GB\b', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x958b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x40008000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x10000]}, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/bus/pci/resource_alignment\x00', 0x8ea182, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f0000000480)="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"/336, 0x150) unshare$auto(0x40000080) close_range$auto(r1, r0, 0x9) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x156) r4 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/locks\x00', 0x0, 0x0) read$auto_proc_iter_file_ops_compat_inode(r4, &(0x7f0000000180)=""/250, 0xfa) 1.85065877s ago: executing program 3 (id=6532): mlockall$auto(0x7) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) ioctl$auto(0x3, 0x540f, 0x38) 1.671880489s ago: executing program 3 (id=6533): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/schedstat\x00', 0x101200, 0x0) socket(0xa, 0x5, 0x84) r0 = socket(0xa, 0x2, 0x88) openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/block/nbd8/hctx0/ctx_map\x00', 0x300, 0x0) socket(0x2, 0x5, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000200), r0) sendmsg$auto_BATADV_CMD_TP_METER(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x34, r3, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_TT_VID={0x6, 0x14, 0x9e}, @BATADV_ATTR_TQ={0x5}, @BATADV_ATTR_BANDWIDTH_UP={0x8, 0x1b, 0x7fff}, @BATADV_ATTR_BLA_OWN={0x4}, @BATADV_ATTR_BLA_OWN={0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008041) fcntl$auto_F_GETOWN(r1, 0x9, 0x9) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/platform/mac802154_hwsim/ieee802154/phy1/name\x00', 0x82180, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptyy1\x00', 0x101000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x11, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) io_uring_setup$auto(0x6, 0x0) socketpair$auto(0xc6, 0x3, 0xfff, &(0x7f0000000000)=0x1) close_range$auto(0x2, 0x8, 0x0) r4 = socket(0x11, 0x3, 0x9) close_range$auto(0x2, r4, 0x0) r5 = socket(0x11, 0x80003, 0x300) setsockopt$auto(r5, 0x107, 0x14, 0x0, 0x4) sendmmsg$auto(r4, &(0x7f0000000040)={{&(0x7f0000000000), 0x205aa, &(0x7f0000000100)={0x0, 0x4b}, 0x1, 0x0, 0x4, 0x1060}, 0x5}, 0x3, 0x100) 1.416173036s ago: executing program 3 (id=6534): r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="72010000", @ANYBLOB="120027", @ANYBLOB="5de1523353782950330a"], 0x1ac}, 0x1, 0x0, 0x0, 0x4004800}, 0x40000) recvmmsg$auto(r0, &(0x7f0000000100)={{0x0, 0x4, &(0x7f0000000080)={&(0x7f00000002c0), 0xcb}, 0x6, 0x0, 0x80000000, 0x7}, 0x80010009}, 0x7, 0x200, 0x0) r1 = ioctl$auto_TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f0000000080)=0x7) mmap$auto(0x1, 0x4000000402000c, 0xdf, 0x10, r1, 0x8003) io_uring_setup$auto(0x1, 0x0) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000001180)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) r2 = socket(0x18, 0x805, 0x2) ioctl$sock_SIOCGIFINDEX(r2, 0x40047452, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nbd5\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x2020009, 0x4, 0xeb1, 0xfffffffffffffffa, 0x8000) io_pgetevents$auto(0x8, 0xfffffffffffffffe, 0x4000003ff, 0x0, 0x0, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x182b02, 0x0) sendfile$auto(r3, r3, 0x0, 0x3) mknod$auto(&(0x7f0000001040)=':,\x00', 0xca, 0xfffffffa) r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="280cb901", @ANYRES16=r4, @ANYBLOB="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"], 0x128}, 0x1, 0x0, 0x0, 0x40000}, 0x50e70b289d29da2f) sendmsg$auto_NL80211_CMD_GET_MPATH(r1, &(0x7f0000001200)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000011c0)={&(0x7f00000010c0)={0xbc, r4, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1f}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0x2b}, @NL80211_ATTR_CENTER_FREQ1_OFFSET={0x8, 0x123, 0x3}, @NL80211_ATTR_FILS_KEK={0x25, 0xf2, "fad4d1ace00131f2f09ec9fc63bfb3254e59a2e05cdc704dcaa0fadc598c83b3d0"}, @NL80211_ATTR_MLO_TTLM_ULINK={0x58, 0x149, "55bf8a01d55edda2f472f4658d30b9dc87a673dbded2a003d6d08efe97d9f1c92703dff3f965ec7752a75adfcfefbf90b23a9258b662c296732814d0b1ad45f384d7f647830c654869b7208e2c162a243f492b29"}, @NL80211_ATTR_TDLS_SUPPORT={0x4}, @NL80211_ATTR_MLO_SUPPORT={0x4}, @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x7}]}, 0xbc}, 0x1, 0x0, 0x0, 0x40001}, 0x20004844) r5 = openat$auto_rng_chrdev_ops_core(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) pwrite64$auto(0xc8, &(0x7f0000000540)='\vX5n\x91p\xe6\x1eRN8\x99C\x05\x06\x00J\x99\x00:\x00!\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02l@\x18*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\x01\x0e\xa4\xdf\xdav\x1cC\x8a\v\x00\x00\x00\x00\x00\x00\x00X\xb9_\xdd*\xd1\x14^\xbe\xa2\x00'/97, 0xd12, 0x4000005) read$auto_rng_chrdev_ops_core(r5, &(0x7f0000000040)=""/4096, 0xfffffe82) execve$auto(&(0x7f0000000040)=':,\x00', 0x0, &(0x7f0000000200)=&(0x7f00000001c0)=':,\x00') setuid$auto(0xe) prctl$auto(0x1000000001c, 0x800, 0x8, 0x9, 0x38000000) r6 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) prctl$auto(0x4e, 0x2, 0x0, 0x100, 0x2) ioctl$auto_TIOCSETD2(r6, 0x5423, 0x0) r7 = openat$auto_lowpan_enable_fops_(0xffffffffffffff9c, &(0x7f0000000000), 0x109500, 0x0) read$auto(r7, &(0x7f0000000040)='(-{%\x00', 0x4b) ioctl$auto_FS_IOC_FSSETXATTR(r6, 0x401c5820, 0x35c) 1.263831461s ago: executing program 4 (id=6535): pwrite64$auto(0xc8, &(0x7f0000000000)='\vX\xb5n\x91p\xe6\x1eRNM\x99\x86\xdde\x1cJ\x99\x00\x00\x00\x00\x00\xfc\xfd\xfd\xd3\xd3\x1d\xf8\xbe\x01\x00\x00\x00\'\x03\x00\x00\x9f\x1e\xf9\xa4*\x01\x00\x00\x00^B\xb8\xe4j\t3\xe4\x90\xcc\x9d\xc5\x0fo\x84\xf4\x89\v\xea\x1b\x95\xafQ;CL\"\x01@\x00\x00\x00\x00\f\x00\xc0\x13\xc8\xe2\xae\xf5\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8d\x81\x81O*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,8\x93\xba\x88\x93\x9d\xb6\x1a\x7f\xc0%\xb0\x83ROJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd6eWj\xdc\xac\x88\xf0\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\xfb\xba\xb2.$\'\x1e\x82\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00\x00\xff\xff\x00'/250, 0xfdf3, 0x39) 1.051674495s ago: executing program 4 (id=6536): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xfffffffffffffe70, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4004810}, 0x4000800) close_range$auto(0x2, 0x8000, 0x0) io_uring_setup$auto(0x6, 0x0) r0 = openat$auto_percpu_stats_fops_(0xffffffffffffff9c, &(0x7f0000000040), 0x40040, 0x0) readv$auto(r0, &(0x7f0000000140)={&(0x7f0000000200), 0x7}, 0x1000000000000008) io_uring_register$auto(0x2, 0x23, &(0x7f00000000c0), 0x0) 980.560546ms ago: executing program 1 (id=6537): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/platform/dummy_hcd.7/usb8/ltm_capable\x00', 0x181800, 0x0) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/platform/dummy_hcd.7/usb8/ltm_capable\x00', 0x181800, 0x0) socket(0x2, 0x2, 0x88) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) ioctl$auto(0x4000000000000c8, 0x800454cf, 0x3) (async) ioctl$auto(0x4000000000000c8, 0x800454cf, 0x3) r0 = socket(0x1f, 0x2, 0x36f6) r1 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="80040000", @ANYRES16=r1, @ANYBLOB="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"], 0x480}, 0x1, 0x0, 0x0, 0x20000}, 0x8044) socket(0x11, 0x80003, 0x300) (async) r2 = socket(0x11, 0x80003, 0x300) setsockopt$auto(r2, 0x107, 0x12, 0x0, 0x4) (async) setsockopt$auto(r2, 0x107, 0x12, 0x0, 0x4) statmount$auto(0x0, 0x0, 0x9, 0xd) ioctl$auto__ctl_fops_dm_ioctl(0xffffffffffffffff, 0xfffffff7effffd04, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/net/sit0/ifindex\x00', 0x80000, 0x0) read$auto(r3, 0x0, 0x20) r4 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x202, 0x0) writev$auto(r4, &(0x7f0000000200)={0x0, 0x7}, 0x3) mknod$auto(&(0x7f0000000180)=':,\x00', 0xcb, 0xfffffffa) (async) mknod$auto(&(0x7f0000000180)=':,\x00', 0xcb, 0xfffffffa) execve$auto(&(0x7f0000000000)=':,\x00', 0x0, 0x0) (async) execve$auto(&(0x7f0000000000)=':,\x00', 0x0, 0x0) r5 = socket(0x11, 0x80003, 0x300) mmap$auto(0x3, 0x8001, 0x62, 0x10, r2, 0x7) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) (async) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mmap$auto(0x0, 0x9, 0xdf, 0xeb1, 0x1, 0x8000) move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) (async) move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) mmap$auto(0x0, 0x20009, 0xe3, 0x100000eb2, 0x40000000000a1, 0x8000) setsockopt$auto(r5, 0x107, 0x12, 0x0, 0x4) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) (async) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) mmap$auto(0x0, 0x400008, 0xfffffffffffffff9, 0x9b72, 0x2, 0x8000) (async) mmap$auto(0x0, 0x400008, 0xfffffffffffffff9, 0x9b72, 0x2, 0x8000) write$auto(0x3, 0x0, 0xfdf3) 713.039563ms ago: executing program 4 (id=6538): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1b0026bd7000fddbdf2503000000040008001400038010000c800c00068008000600", @ANYRES32=0x0, @ANYBLOB="12000100898771f1c19f17790481008286dd0000040002"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0xc800) 155.501µs ago: executing program 4 (id=6539): mmap$auto(0x0, 0xc, 0x9c0b, 0x44eb2, 0xffffffffffffffff, 0x300000000000) close_range$auto(0x2, 0x8, 0x0) openat$auto_ep0_operations_inode(0xffffffffffffff9c, &(0x7f0000000000), 0x8a001, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x1d, 0x2, 0x6) r2 = socket(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$auto(r1, &(0x7f0000000040)=@can={0x1d, r3, 0xfd}, 0x6a) syz_genetlink_get_family_id$auto_macsec(0x0, r1) setrlimit$auto(0x1000000007, 0x0) sendmsg$auto_MACSEC_CMD_UPD_RXSA(r1, &(0x7f0000000400)={0x0, 0x1f4, &(0x7f00000003c0)={0x0, 0x18}, 0x1, 0xe8030000, 0x0, 0x14}, 0x800) io_uring_setup$auto(0x9f6, 0x0) write$auto(r0, 0x0, 0x1000) 0s ago: executing program 0 (id=6540): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x100000000000003, 0xeb1, 0xfffffffffffffffa, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x1, 0x0) io_uring_setup$auto(0x2, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "abe6de3d6468fe8000"}, 0x55) kernel console output (not intermixed with test programs): .575143][T27547] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1528.575152][T27547] R13: 00007f48161e6128 R14: 00007f48161e6090 R15: 00007ffcc8bbe008 [ 1528.575172][T27547] [ 1529.092113][ T5914] usb usb38-port5: attempt power cycle [ 1529.226311][ T52] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 1529.316180][ T52] Bluetooth: hci4: command 0x040f tx timeout [ 1529.388179][T27553] netlink: 244 bytes leftover after parsing attributes in process `syz.8.5898'. [ 1529.646506][T27549] netlink: 354 bytes leftover after parsing attributes in process `syz.1.5897'. [ 1529.659582][T27556] netlink: 36 bytes leftover after parsing attributes in process `syz.8.5899'. [ 1529.755501][ T5914] usb usb38-port5: unable to enumerate USB device [ 1530.211325][T27566] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5902'. [ 1531.330280][ T52] Bluetooth: hci4: command 0x040f tx timeout [ 1531.667835][T27594] ERROR: Out of memory at tomoyo_memory_ok. [ 1531.719568][T27596] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5910'. [ 1531.851228][T27601] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5910'. [ 1531.922913][T27596] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5910'. [ 1532.099494][T27611] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5910'. [ 1532.160399][T27603] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5910'. [ 1532.180313][T27616] FAULT_INJECTION: forcing a failure. [ 1532.180313][T27616] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1532.272846][T27616] CPU: 0 UID: 0 PID: 27616 Comm: syz.8.5912 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 1532.272881][T27616] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 1532.272889][T27616] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1532.272898][T27616] Call Trace: [ 1532.272903][T27616] [ 1532.272909][T27616] dump_stack_lvl+0x16c/0x1f0 [ 1532.272931][T27616] should_fail_ex+0x512/0x640 [ 1532.272956][T27616] strncpy_from_user+0x3b/0x2e0 [ 1532.272978][T27616] getname_flags.part.0+0x8f/0x550 [ 1532.273009][T27616] getname_flags+0x93/0xf0 [ 1532.273025][T27616] do_sys_openat2+0xb8/0x1d0 [ 1532.273046][T27616] ? __pfx_do_sys_openat2+0x10/0x10 [ 1532.273065][T27616] ? find_held_lock+0x2b/0x80 [ 1532.273087][T27616] __x64_sys_open+0x153/0x1e0 [ 1532.273107][T27616] ? __pfx___x64_sys_open+0x10/0x10 [ 1532.273131][T27616] ? rcu_is_watching+0x12/0xc0 [ 1532.273148][T27616] do_syscall_64+0xcd/0xfa0 [ 1532.273166][T27616] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1532.273181][T27616] RIP: 0033:0x7fa662d8f6c9 [ 1532.273193][T27616] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1532.273206][T27616] RSP: 002b:00007fa663c09038 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 1532.273220][T27616] RAX: ffffffffffffffda RBX: 00007fa662fe6090 RCX: 00007fa662d8f6c9 [ 1532.273230][T27616] RDX: 0000000000000161 RSI: 0000000000000100 RDI: 0000200000000040 [ 1532.273239][T27616] RBP: 00007fa662e11f91 R08: 0000000000000000 R09: 0000000000000000 [ 1532.273247][T27616] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1532.273256][T27616] R13: 00007fa662fe6128 R14: 00007fa662fe6090 R15: 00007fff68f70e88 [ 1532.273275][T27616] [ 1533.223645][T23944] usb usb38-port5: attempt power cycle [ 1533.419132][ T52] Bluetooth: hci4: command 0x040f tx timeout [ 1533.827646][T23944] usb usb38-port5: unable to enumerate USB device [ 1534.309414][T27642] netlink: 28 bytes leftover after parsing attributes in process `syz.8.5918'. [ 1534.729715][T27650] FAULT_INJECTION: forcing a failure. [ 1534.729715][T27650] name failslab, interval 1, probability 0, space 0, times 0 [ 1534.843391][T27650] CPU: 0 UID: 0 PID: 27650 Comm: syz.8.5920 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 1534.843424][T27650] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 1534.843432][T27650] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1534.843441][T27650] Call Trace: [ 1534.843446][T27650] [ 1534.843452][T27650] dump_stack_lvl+0x16c/0x1f0 [ 1534.843474][T27650] should_fail_ex+0x512/0x640 [ 1534.843496][T27650] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 1534.843514][T27650] should_failslab+0xc2/0x120 [ 1534.843534][T27650] kmem_cache_alloc_noprof+0x75/0x6e0 [ 1534.843548][T27650] ? ovs_flow_alloc+0x1e/0x210 [ 1534.843566][T27650] ? ovs_flow_alloc+0x1e/0x210 [ 1534.843577][T27650] ovs_flow_alloc+0x1e/0x210 [ 1534.843591][T27650] ovs_packet_cmd_execute+0x5cc/0x1670 [ 1534.843611][T27650] ? __pfx_ovs_packet_cmd_execute+0x10/0x10 [ 1534.843630][T27650] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 1534.843651][T27650] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 1534.843679][T27650] genl_family_rcv_msg_doit+0x209/0x2f0 [ 1534.843699][T27650] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1534.843724][T27650] ? bpf_lsm_capable+0x9/0x10 [ 1534.843743][T27650] ? security_capable+0x7e/0x260 [ 1534.843764][T27650] ? ns_capable+0xd7/0x110 [ 1534.843781][T27650] genl_rcv_msg+0x55c/0x800 [ 1534.843802][T27650] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1534.843820][T27650] ? __pfx_ovs_packet_cmd_execute+0x10/0x10 [ 1534.843844][T27650] netlink_rcv_skb+0x158/0x420 [ 1534.843859][T27650] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1534.843879][T27650] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1534.843903][T27650] ? netlink_deliver_tap+0x1ae/0xd30 [ 1534.843921][T27650] genl_rcv+0x28/0x40 [ 1534.843936][T27650] netlink_unicast+0x5aa/0x870 [ 1534.843955][T27650] ? __pfx_netlink_unicast+0x10/0x10 [ 1534.843978][T27650] netlink_sendmsg+0x8c8/0xdd0 [ 1534.843997][T27650] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1534.844015][T27650] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 1534.844040][T27650] ____sys_sendmsg+0xa98/0xc70 [ 1534.844059][T27650] ? copy_msghdr_from_user+0x10a/0x160 [ 1534.844074][T27650] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1534.844101][T27650] ___sys_sendmsg+0x134/0x1d0 [ 1534.844117][T27650] ? __pfx____sys_sendmsg+0x10/0x10 [ 1534.844130][T27650] ? __lock_acquire+0x622/0x1c90 [ 1534.844174][T27650] __sys_sendmsg+0x16d/0x220 [ 1534.844189][T27650] ? __pfx___sys_sendmsg+0x10/0x10 [ 1534.844216][T27650] do_syscall_64+0xcd/0xfa0 [ 1534.844235][T27650] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1534.844250][T27650] RIP: 0033:0x7fa662d8f6c9 [ 1534.844262][T27650] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1534.844276][T27650] RSP: 002b:00007fa663c2a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1534.844291][T27650] RAX: ffffffffffffffda RBX: 00007fa662fe5fa0 RCX: 00007fa662d8f6c9 [ 1534.844301][T27650] RDX: 000000000000c800 RSI: 0000200000000000 RDI: 0000000000000003 [ 1534.844310][T27650] RBP: 00007fa663c2a090 R08: 0000000000000000 R09: 0000000000000000 [ 1534.844319][T27650] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1534.844328][T27650] R13: 00007fa662fe6038 R14: 00007fa662fe5fa0 R15: 00007fff68f70e88 [ 1534.844348][T27650] [ 1535.169395][ C0] vkms_vblank_simulate: vblank timer overrun [ 1540.332986][T27692] netlink: 4880 bytes leftover after parsing attributes in process `syz.5.5932'. [ 1541.584074][T27703] netlink: 186 bytes leftover after parsing attributes in process `syz.5.5938'. [ 1541.884786][T27711] FAULT_INJECTION: forcing a failure. [ 1541.884786][T27711] name failslab, interval 1, probability 0, space 0, times 0 [ 1541.948731][T27711] CPU: 0 UID: 0 PID: 27711 Comm: syz.1.5941 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 1541.948769][T27711] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 1541.948783][T27711] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1541.948792][T27711] Call Trace: [ 1541.948798][T27711] [ 1541.948805][T27711] dump_stack_lvl+0x16c/0x1f0 [ 1541.948827][T27711] should_fail_ex+0x512/0x640 [ 1541.948848][T27711] ? kmem_cache_alloc_lru_noprof+0x66/0x6e0 [ 1541.948866][T27711] should_failslab+0xc2/0x120 [ 1541.948887][T27711] kmem_cache_alloc_lru_noprof+0x79/0x6e0 [ 1541.948901][T27711] ? __pfx___might_resched+0x10/0x10 [ 1541.948917][T27711] ? sock_alloc_inode+0x25/0x1c0 [ 1541.948938][T27711] ? __pfx_sock_alloc_inode+0x10/0x10 [ 1541.948953][T27711] ? sock_alloc_inode+0x25/0x1c0 [ 1541.948969][T27711] sock_alloc_inode+0x25/0x1c0 [ 1541.948985][T27711] alloc_inode+0x64/0x240 [ 1541.949005][T27711] sock_alloc+0x40/0x280 [ 1541.949021][T27711] __sock_create+0xc1/0x8d0 [ 1541.949043][T27711] __sys_socket+0x14d/0x260 [ 1541.949060][T27711] ? __x64_sys_openat+0x174/0x210 [ 1541.949081][T27711] ? __pfx___sys_socket+0x10/0x10 [ 1541.949099][T27711] ? xfd_validate_state+0x61/0x180 [ 1541.949124][T27711] __x64_sys_socket+0x72/0xb0 [ 1541.949141][T27711] ? lockdep_hardirqs_on+0x7c/0x110 [ 1541.949158][T27711] do_syscall_64+0xcd/0xfa0 [ 1541.949177][T27711] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1541.949191][T27711] RIP: 0033:0x7f79e7f8f6c9 [ 1541.949204][T27711] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1541.949218][T27711] RSP: 002b:00007f79e8f0c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1541.949233][T27711] RAX: ffffffffffffffda RBX: 00007f79e81e5fa0 RCX: 00007f79e7f8f6c9 [ 1541.949243][T27711] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 1541.949252][T27711] RBP: 00007f79e8011f91 R08: 0000000000000000 R09: 0000000000000000 [ 1541.949261][T27711] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1541.949269][T27711] R13: 00007f79e81e6038 R14: 00007f79e81e5fa0 R15: 00007fff4e8a7708 [ 1541.949290][T27711] [ 1541.950422][T27711] socket: no more sockets [ 1542.635324][T15900] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1542.689529][T15900] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1542.739704][T15900] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1542.825718][T15900] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1542.854452][T15900] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1542.862371][T27717] can: request_module (can-proto-0) failed. [ 1543.177138][T27731] No such timeout policy "" [ 1543.190711][T27731] netlink: Failed to associated timeout policy '' [ 1543.724137][T27712] chnl_net:caif_netlink_parms(): no params data found [ 1543.829375][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 1543.835796][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1544.211420][T27712] bridge0: port 1(bridge_slave_0) entered blocking state [ 1544.250649][T27712] bridge0: port 1(bridge_slave_0) entered disabled state [ 1544.288631][T27712] bridge_slave_0: entered allmulticast mode [ 1544.348352][T27754] netlink: Conntrack attr has 12 unknown bytes [ 1544.389345][T27712] bridge_slave_0: entered promiscuous mode [ 1544.475907][T27712] bridge0: port 2(bridge_slave_1) entered blocking state [ 1544.531670][T27712] bridge0: port 2(bridge_slave_1) entered disabled state [ 1544.538834][T27712] bridge_slave_1: entered allmulticast mode [ 1544.668424][T27712] bridge_slave_1: entered promiscuous mode [ 1544.939308][T15900] Bluetooth: hci5: command tx timeout [ 1545.227178][T27712] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1545.352551][T27712] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1545.398305][T27765] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5954'. [ 1545.619436][T27712] team0: Port device team_slave_0 added [ 1545.719081][T27712] team0: Port device team_slave_1 added [ 1545.927843][T27712] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1545.997962][T27774] FAULT_INJECTION: forcing a failure. [ 1545.997962][T27774] name failslab, interval 1, probability 0, space 0, times 0 [ 1546.013892][T27774] CPU: 0 UID: 0 PID: 27774 Comm: syz.5.5958 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 1546.013926][T27774] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 1546.013935][T27774] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1546.013944][T27774] Call Trace: [ 1546.013949][T27774] [ 1546.013955][T27774] dump_stack_lvl+0x16c/0x1f0 [ 1546.013979][T27774] should_fail_ex+0x512/0x640 [ 1546.014000][T27774] ? kmem_cache_alloc_lru_noprof+0x66/0x6e0 [ 1546.014019][T27774] should_failslab+0xc2/0x120 [ 1546.014038][T27774] kmem_cache_alloc_lru_noprof+0x79/0x6e0 [ 1546.014052][T27774] ? __pfx___might_resched+0x10/0x10 [ 1546.014068][T27774] ? sock_alloc_inode+0x25/0x1c0 [ 1546.014089][T27774] ? __pfx_sock_alloc_inode+0x10/0x10 [ 1546.014105][T27774] ? sock_alloc_inode+0x25/0x1c0 [ 1546.014120][T27774] sock_alloc_inode+0x25/0x1c0 [ 1546.014136][T27774] alloc_inode+0x64/0x240 [ 1546.014156][T27774] sock_alloc+0x40/0x280 [ 1546.014172][T27774] __sock_create+0xc1/0x8d0 [ 1546.014194][T27774] __sys_socket+0x14d/0x260 [ 1546.014211][T27774] ? __x64_sys_openat+0x174/0x210 [ 1546.014232][T27774] ? __pfx___sys_socket+0x10/0x10 [ 1546.014251][T27774] ? xfd_validate_state+0x61/0x180 [ 1546.014276][T27774] __x64_sys_socket+0x72/0xb0 [ 1546.014293][T27774] ? lockdep_hardirqs_on+0x7c/0x110 [ 1546.014336][T27774] do_syscall_64+0xcd/0xfa0 [ 1546.014356][T27774] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1546.014371][T27774] RIP: 0033:0x7f4815f8f6c9 [ 1546.014384][T27774] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1546.014398][T27774] RSP: 002b:00007f4816ea7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1546.014413][T27774] RAX: ffffffffffffffda RBX: 00007f48161e5fa0 RCX: 00007f4815f8f6c9 [ 1546.014423][T27774] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 1546.014432][T27774] RBP: 00007f4816011f91 R08: 0000000000000000 R09: 0000000000000000 [ 1546.014440][T27774] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1546.014448][T27774] R13: 00007f48161e6038 R14: 00007f48161e5fa0 R15: 00007ffcc8bbe008 [ 1546.014468][T27774] [ 1546.014475][T27774] socket: no more sockets [ 1546.242446][T27712] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1546.362964][T27712] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1546.441520][T27712] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1546.448467][T27712] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1546.712816][T27712] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1546.907010][T27789] netlink: 330 bytes leftover after parsing attributes in process `syz.5.5963'. [ 1547.008728][T15900] Bluetooth: hci5: command tx timeout [ 1547.079462][T27712] hsr_slave_0: entered promiscuous mode [ 1547.102433][T27712] hsr_slave_1: entered promiscuous mode [ 1547.124908][T27712] debugfs: 'hsr0' already exists in 'hsr' [ 1547.147296][T27712] Cannot create hsr debugfs directory [ 1547.526727][T27791] netlink: 'syz.1.5964': attribute type 11 has an invalid length. [ 1547.563850][T27791] netlink: 'syz.1.5964': attribute type 11 has an invalid length. [ 1547.609906][T27791] netlink: 'syz.1.5964': attribute type 11 has an invalid length. [ 1547.728549][T27712] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1547.835572][T27712] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1547.923428][T27712] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1547.945047][T27801] No such timeout policy "" [ 1547.969413][T27801] netlink: Failed to associated timeout policy '' [ 1547.992027][T27712] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1548.375199][T27712] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1548.426717][T27712] 8021q: adding VLAN 0 to HW filter on device team0 [ 1548.472079][T27154] bridge0: port 1(bridge_slave_0) entered blocking state [ 1548.479161][T27154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1548.515671][T27154] bridge0: port 2(bridge_slave_1) entered blocking state [ 1548.522803][T27154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1548.609197][T27712] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1548.661741][T27712] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1549.010983][T27712] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1549.078270][T15900] Bluetooth: hci5: command tx timeout [ 1549.531229][T27712] veth0_vlan: entered promiscuous mode [ 1549.588276][T27712] veth1_vlan: entered promiscuous mode [ 1549.646776][T27712] veth0_macvtap: entered promiscuous mode [ 1549.682890][T27712] veth1_macvtap: entered promiscuous mode [ 1549.724056][T27712] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1549.768339][T27712] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1549.840019][T22902] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1549.855243][T22902] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1549.899661][T22902] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1549.933750][T22902] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1550.043062][T22902] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1550.050965][T22902] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1550.139525][T27154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1550.164762][T27154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1550.683095][T27831] FAULT_INJECTION: forcing a failure. [ 1550.683095][T27831] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1550.760388][T27831] CPU: 0 UID: 0 PID: 27831 Comm: syz.9.5968 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 1550.760423][T27831] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 1550.760432][T27831] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1550.760441][T27831] Call Trace: [ 1550.760446][T27831] [ 1550.760453][T27831] dump_stack_lvl+0x16c/0x1f0 [ 1550.760476][T27831] should_fail_ex+0x512/0x640 [ 1550.760500][T27831] get_futex_key+0x1d0/0x1560 [ 1550.760522][T27831] ? __pfx_get_futex_key+0x10/0x10 [ 1550.760540][T27831] ? stack_depot_save_flags+0x29/0x9c0 [ 1550.760562][T27831] ? __lock_acquire+0xb8a/0x1c90 [ 1550.760585][T27831] futex_wait_setup+0x9d/0x550 [ 1550.760604][T27831] __futex_wait+0x193/0x2f0 [ 1550.760618][T27831] ? __pfx___futex_wait+0x10/0x10 [ 1550.760635][T27831] ? __pfx_futex_wake_mark+0x10/0x10 [ 1550.760667][T27831] ? futex_hash+0x2c5/0x380 [ 1550.760688][T27831] ? futex_private_hash_put+0xd5/0x190 [ 1550.760709][T27831] futex_wait+0xe8/0x380 [ 1550.760722][T27831] ? __pfx_futex_wait+0x10/0x10 [ 1550.760743][T27831] ? getname_flags.part.0+0x376/0x550 [ 1550.760764][T27831] ? getname_flags.part.0+0x1c5/0x550 [ 1550.760787][T27831] do_futex+0x229/0x350 [ 1550.760806][T27831] ? __pfx_do_futex+0x10/0x10 [ 1550.760830][T27831] __x64_sys_futex+0x1e0/0x4c0 [ 1550.760850][T27831] ? __x64_sys_openat+0x174/0x210 [ 1550.760871][T27831] ? __pfx___x64_sys_futex+0x10/0x10 [ 1550.760897][T27831] do_syscall_64+0xcd/0xfa0 [ 1550.760916][T27831] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1550.760931][T27831] RIP: 0033:0x7fd834b8f6c9 [ 1550.760944][T27831] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1550.760958][T27831] RSP: 002b:00007fd835a430e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1550.760973][T27831] RAX: ffffffffffffffda RBX: 00007fd834de5fa8 RCX: 00007fd834b8f6c9 [ 1550.760983][T27831] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fd834de5fa8 [ 1550.760992][T27831] RBP: 00007fd834de5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 1550.761001][T27831] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1550.761010][T27831] R13: 00007fd834de6038 R14: 00007ffee39a81b0 R15: 00007ffee39a8298 [ 1550.761030][T27831] [ 1550.993357][ C0] vkms_vblank_simulate: vblank timer overrun [ 1551.393504][T15900] Bluetooth: hci5: command tx timeout [ 1553.038161][T27853] No such timeout policy "" [ 1553.063028][T27853] netlink: Failed to associated timeout policy '' [ 1553.234895][T15900] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1553.244069][T15900] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1553.252258][T15900] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1553.260035][T15900] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1553.267833][T15900] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1553.665039][T27859] netlink: 252 bytes leftover after parsing attributes in process `syz.1.5982'. [ 1553.724111][T27863] netlink: 252 bytes leftover after parsing attributes in process `syz.1.5982'. [ 1553.886477][T27854] chnl_net:caif_netlink_parms(): no params data found [ 1554.162142][T27854] bridge0: port 1(bridge_slave_0) entered blocking state [ 1554.169229][T27854] bridge0: port 1(bridge_slave_0) entered disabled state [ 1554.231098][T27854] bridge_slave_0: entered allmulticast mode [ 1554.262133][T27854] bridge_slave_0: entered promiscuous mode [ 1554.282532][T27854] bridge0: port 2(bridge_slave_1) entered blocking state [ 1554.290555][T27854] bridge0: port 2(bridge_slave_1) entered disabled state [ 1554.297675][T27854] bridge_slave_1: entered allmulticast mode [ 1554.374282][T27854] bridge_slave_1: entered promiscuous mode [ 1554.515314][T27854] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1554.586467][T27854] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1554.712350][T27854] team0: Port device team_slave_0 added [ 1554.749253][T27854] team0: Port device team_slave_1 added [ 1554.883848][T27854] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1554.912983][T27854] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1554.938864][ C0] vkms_vblank_simulate: vblank timer overrun [ 1555.039131][T27854] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1555.078931][T27854] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1555.085892][T27854] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1555.196191][T27854] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1555.290968][ T52] Bluetooth: hci6: command tx timeout [ 1555.319479][T27854] hsr_slave_0: entered promiscuous mode [ 1555.346960][T27854] hsr_slave_1: entered promiscuous mode [ 1555.352938][T27854] debugfs: 'hsr0' already exists in 'hsr' [ 1555.385046][T27854] Cannot create hsr debugfs directory [ 1556.347467][T27854] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1556.392241][T27854] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1556.437168][T27854] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1556.494112][T27854] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1556.751348][T27854] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1556.823911][T27854] 8021q: adding VLAN 0 to HW filter on device team0 [ 1556.883682][T22896] bridge0: port 1(bridge_slave_0) entered blocking state [ 1556.890816][T22896] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1556.936594][T22896] bridge0: port 2(bridge_slave_1) entered blocking state [ 1556.943713][T22896] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1557.092510][T27854] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1557.355076][T15900] Bluetooth: hci6: command tx timeout [ 1557.618881][T27854] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1557.754416][T27854] veth0_vlan: entered promiscuous mode [ 1557.806255][T27854] veth1_vlan: entered promiscuous mode [ 1557.902294][T27854] veth0_macvtap: entered promiscuous mode [ 1557.954550][T27854] veth1_macvtap: entered promiscuous mode [ 1558.023830][T27854] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1558.078722][T27854] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1558.170038][T25395] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1558.200174][T25395] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1558.208873][T25395] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1558.302538][T25395] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1558.499376][T25405] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1558.507191][T25405] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1558.597317][T25390] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1558.637241][T25390] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1558.835719][T27922] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5991'. [ 1559.057214][T27928] FAULT_INJECTION: forcing a failure. [ 1559.057214][T27928] name failslab, interval 1, probability 0, space 0, times 0 [ 1559.165932][T27928] CPU: 0 UID: 0 PID: 27928 Comm: syz.2.5984 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 1559.165977][T27928] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 1559.165985][T27928] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1559.165994][T27928] Call Trace: [ 1559.166000][T27928] [ 1559.166007][T27928] dump_stack_lvl+0x16c/0x1f0 [ 1559.166029][T27928] should_fail_ex+0x512/0x640 [ 1559.166052][T27928] ? kmem_cache_alloc_lru_noprof+0x66/0x6e0 [ 1559.166070][T27928] should_failslab+0xc2/0x120 [ 1559.166090][T27928] kmem_cache_alloc_lru_noprof+0x79/0x6e0 [ 1559.166104][T27928] ? __pfx___might_resched+0x10/0x10 [ 1559.166120][T27928] ? sock_alloc_inode+0x25/0x1c0 [ 1559.166141][T27928] ? __pfx_sock_alloc_inode+0x10/0x10 [ 1559.166163][T27928] ? sock_alloc_inode+0x25/0x1c0 [ 1559.166180][T27928] sock_alloc_inode+0x25/0x1c0 [ 1559.166197][T27928] alloc_inode+0x64/0x240 [ 1559.166218][T27928] sock_alloc+0x40/0x280 [ 1559.166234][T27928] __sock_create+0xc1/0x8d0 [ 1559.166256][T27928] __sys_socket+0x14d/0x260 [ 1559.166273][T27928] ? __x64_sys_openat+0x174/0x210 [ 1559.166294][T27928] ? __pfx___sys_socket+0x10/0x10 [ 1559.166312][T27928] ? xfd_validate_state+0x61/0x180 [ 1559.166337][T27928] __x64_sys_socket+0x72/0xb0 [ 1559.166355][T27928] ? lockdep_hardirqs_on+0x7c/0x110 [ 1559.166372][T27928] do_syscall_64+0xcd/0xfa0 [ 1559.166390][T27928] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1559.166405][T27928] RIP: 0033:0x7fde36f8f6c9 [ 1559.166417][T27928] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1559.166431][T27928] RSP: 002b:00007fde37df9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1559.166446][T27928] RAX: ffffffffffffffda RBX: 00007fde371e5fa0 RCX: 00007fde36f8f6c9 [ 1559.166455][T27928] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 1559.166464][T27928] RBP: 00007fde37011f91 R08: 0000000000000000 R09: 0000000000000000 [ 1559.166473][T27928] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1559.166481][T27928] R13: 00007fde371e6038 R14: 00007fde371e5fa0 R15: 00007ffecd2e7b38 [ 1559.166501][T27928] [ 1559.166508][T27928] socket: no more sockets [ 1559.543315][T15900] Bluetooth: hci6: command tx timeout [ 1560.563216][T27945] netlink: 342 bytes leftover after parsing attributes in process `syz.1.5987'. [ 1561.025771][T27952] ima: policy update failed [ 1561.075471][ T30] audit: type=1802 audit(4294986002.530:86): pid=27952 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.5988" res=0 errno=0 [ 1561.455759][T27963] kafs: addr_prefs: Invalid Command [ 1561.573671][T15900] Bluetooth: hci6: command tx timeout [ 1562.338525][T27979] FAULT_INJECTION: forcing a failure. [ 1562.338525][T27979] name failslab, interval 1, probability 0, space 0, times 0 [ 1562.449249][T27979] CPU: 0 UID: 0 PID: 27979 Comm: syz.1.5994 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 1562.449285][T27979] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 1562.449293][T27979] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1562.449302][T27979] Call Trace: [ 1562.449308][T27979] [ 1562.449314][T27979] dump_stack_lvl+0x16c/0x1f0 [ 1562.449337][T27979] should_fail_ex+0x512/0x640 [ 1562.449359][T27979] ? kmem_cache_alloc_node_noprof+0x65/0x770 [ 1562.449377][T27979] should_failslab+0xc2/0x120 [ 1562.449397][T27979] kmem_cache_alloc_node_noprof+0x78/0x770 [ 1562.449412][T27979] ? __alloc_skb+0x2b2/0x380 [ 1562.449438][T27979] ? __alloc_skb+0x2b2/0x380 [ 1562.449457][T27979] __alloc_skb+0x2b2/0x380 [ 1562.449477][T27979] ? __pfx___alloc_skb+0x10/0x10 [ 1562.449503][T27979] ? netlink_has_listeners+0x20f/0x430 [ 1562.449521][T27979] alloc_uevent_skb+0x7d/0x210 [ 1562.449544][T27979] kobject_uevent_env+0xca4/0x1870 [ 1562.449568][T27979] ? queue_work_on+0x12a/0x1f0 [ 1562.449581][T27979] ? bus_to_subsys+0x131/0x160 [ 1562.449599][T27979] driver_bound+0x164/0x230 [ 1562.449620][T27979] device_bind_driver+0x3a/0x70 [ 1562.449638][T27979] mac80211_hwsim_new_radio+0x3e8/0x50b0 [ 1562.449664][T27979] ? __asan_memset+0x23/0x50 [ 1562.449680][T27979] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 1562.449702][T27979] hwsim_new_radio_nl+0xba2/0x1330 [ 1562.449720][T27979] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1562.449742][T27979] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 1562.449761][T27979] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 1562.449784][T27979] genl_family_rcv_msg_doit+0x209/0x2f0 [ 1562.449804][T27979] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1562.449829][T27979] ? bpf_lsm_capable+0x9/0x10 [ 1562.449846][T27979] ? security_capable+0x7e/0x260 [ 1562.449868][T27979] ? ns_capable+0xd7/0x110 [ 1562.449885][T27979] genl_rcv_msg+0x55c/0x800 [ 1562.449905][T27979] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1562.449923][T27979] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1562.449945][T27979] netlink_rcv_skb+0x158/0x420 [ 1562.449961][T27979] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1562.449980][T27979] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1562.450004][T27979] ? netlink_deliver_tap+0x1ae/0xd30 [ 1562.450026][T27979] genl_rcv+0x28/0x40 [ 1562.450041][T27979] netlink_unicast+0x5aa/0x870 [ 1562.450060][T27979] ? __pfx_netlink_unicast+0x10/0x10 [ 1562.450084][T27979] netlink_sendmsg+0x8c8/0xdd0 [ 1562.450103][T27979] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1562.450122][T27979] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 1562.450146][T27979] ____sys_sendmsg+0xa98/0xc70 [ 1562.450166][T27979] ? copy_msghdr_from_user+0x10a/0x160 [ 1562.450180][T27979] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1562.450203][T27979] ? __pfx_futex_wake_mark+0x10/0x10 [ 1562.450228][T27979] ___sys_sendmsg+0x134/0x1d0 [ 1562.450255][T27979] ? __pfx____sys_sendmsg+0x10/0x10 [ 1562.450268][T27979] ? __lock_acquire+0x622/0x1c90 [ 1562.450319][T27979] __sys_sendmsg+0x16d/0x220 [ 1562.450334][T27979] ? __pfx___sys_sendmsg+0x10/0x10 [ 1562.450349][T27979] ? __x64_sys_futex+0x1e0/0x4c0 [ 1562.450382][T27979] do_syscall_64+0xcd/0xfa0 [ 1562.450402][T27979] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1562.450417][T27979] RIP: 0033:0x7f79e7f8f6c9 [ 1562.450430][T27979] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1562.450445][T27979] RSP: 002b:00007f79e8f0c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1562.450459][T27979] RAX: ffffffffffffffda RBX: 00007f79e81e5fa0 RCX: 00007f79e7f8f6c9 [ 1562.450470][T27979] RDX: 0000000000008000 RSI: 0000200000000200 RDI: 0000000000000007 [ 1562.450478][T27979] RBP: 00007f79e8011f91 R08: 0000000000000000 R09: 0000000000000000 [ 1562.450488][T27979] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1562.450497][T27979] R13: 00007f79e81e6038 R14: 00007f79e81e5fa0 R15: 00007fff4e8a7708 [ 1562.450518][T27979] [ 1565.482668][T28028] No such timeout policy "" [ 1565.522598][T28028] netlink: Failed to associated timeout policy '' [ 1566.920728][ T52] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1566.935932][ T52] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1566.943808][ T52] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1566.952033][ T52] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1566.965083][ T52] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1567.017129][T28048] netlink: 48 bytes leftover after parsing attributes in process `syz.1.6004'. [ 1567.920164][T28053] chnl_net:caif_netlink_parms(): no params data found [ 1568.045594][ T52] Bluetooth: hci2: unexpected event 0x35 length: 13 > 6 [ 1568.088456][T28071] netlink: 11 bytes leftover after parsing attributes in process `syz.1.6009'. [ 1568.353540][T15900] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1568.362937][T15900] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1568.370922][T15900] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1568.378879][T15900] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1568.388065][T15900] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1569.057716][ T52] Bluetooth: hci7: command tx timeout [ 1569.326357][T28053] bridge0: port 1(bridge_slave_0) entered blocking state [ 1569.369193][T28053] bridge0: port 1(bridge_slave_0) entered disabled state [ 1569.419341][T28053] bridge_slave_0: entered allmulticast mode [ 1569.466544][T28053] bridge_slave_0: entered promiscuous mode [ 1569.710489][T28053] bridge0: port 2(bridge_slave_1) entered blocking state [ 1569.747924][T28053] bridge0: port 2(bridge_slave_1) entered disabled state [ 1569.790075][T28053] bridge_slave_1: entered allmulticast mode [ 1569.797026][T28053] bridge_slave_1: entered promiscuous mode [ 1570.186471][T28053] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1570.409124][ T52] Bluetooth: hci8: command tx timeout [ 1570.467640][T28053] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1570.836014][T28053] team0: Port device team_slave_0 added [ 1571.065894][T28053] team0: Port device team_slave_1 added [ 1571.130276][ T52] Bluetooth: hci7: command tx timeout [ 1571.647903][T28121] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6013'. [ 1571.883773][T28053] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1571.924743][T28053] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1572.081822][T28053] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1572.157355][T28121] bridge_slave_1: left allmulticast mode [ 1572.189364][T28121] bridge_slave_1: left promiscuous mode [ 1572.195066][T28121] bridge0: port 2(bridge_slave_1) entered disabled state [ 1572.416943][T28121] bridge_slave_0: left allmulticast mode [ 1572.427562][T28121] bridge_slave_0: left promiscuous mode [ 1572.433247][T28121] bridge0: port 1(bridge_slave_0) entered disabled state [ 1572.477411][ T52] Bluetooth: hci8: command tx timeout [ 1572.911351][T28053] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1572.961656][T28053] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1573.157027][T28053] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1573.196281][T15900] Bluetooth: hci7: command tx timeout [ 1573.267716][T28077] chnl_net:caif_netlink_parms(): no params data found [ 1574.175535][T28053] hsr_slave_0: entered promiscuous mode [ 1574.215195][T28053] hsr_slave_1: entered promiscuous mode [ 1574.277151][T28053] debugfs: 'hsr0' already exists in 'hsr' [ 1574.293732][T28053] Cannot create hsr debugfs directory [ 1574.545542][T15900] Bluetooth: hci8: command tx timeout [ 1574.672440][T28163] netlink: 342 bytes leftover after parsing attributes in process `syz.2.6016'. [ 1574.734370][T28163] IPv6: NLM_F_CREATE should be specified when creating new route [ 1574.742365][T28163] IPv6: Can't replace route, no match found [ 1574.794761][T28164] netlink: 342 bytes leftover after parsing attributes in process `syz.2.6016'. [ 1574.968314][T28077] bridge0: port 1(bridge_slave_0) entered blocking state [ 1574.992926][T28077] bridge0: port 1(bridge_slave_0) entered disabled state [ 1575.028289][T28077] bridge_slave_0: entered allmulticast mode [ 1575.056778][T28077] bridge_slave_0: entered promiscuous mode [ 1575.112696][T28077] bridge0: port 2(bridge_slave_1) entered blocking state [ 1575.119777][T28077] bridge0: port 2(bridge_slave_1) entered disabled state [ 1575.192016][T28077] bridge_slave_1: entered allmulticast mode [ 1575.224226][T28077] bridge_slave_1: entered promiscuous mode [ 1575.266822][T15900] Bluetooth: hci7: command tx timeout [ 1575.382647][T28077] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1575.616699][T28077] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1575.764212][T28077] team0: Port device team_slave_0 added [ 1575.824692][T28077] team0: Port device team_slave_1 added [ 1576.147769][T28077] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1576.183639][T28077] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1576.306583][T28077] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1576.428862][T28077] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1576.488187][T28077] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1576.615966][T15900] Bluetooth: hci8: command tx timeout [ 1576.649691][T28077] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1577.171007][T28077] hsr_slave_0: entered promiscuous mode [ 1577.199572][T28077] hsr_slave_1: entered promiscuous mode [ 1577.206653][T28192] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6021'. [ 1577.251962][T28077] debugfs: 'hsr0' already exists in 'hsr' [ 1577.257690][T28077] Cannot create hsr debugfs directory [ 1577.325012][T28192] ipvlan0: entered promiscuous mode [ 1577.330231][T28192] ipvlan0: entered allmulticast mode [ 1577.397379][T28192] veth0_vlan: entered allmulticast mode [ 1578.183771][T28053] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1578.254779][T28053] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1578.301596][T28053] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1578.409009][T28053] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1578.828162][T28077] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1578.906224][T28077] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1578.960940][T28077] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1579.127516][T28077] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1579.313887][T28053] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1579.573685][T28053] 8021q: adding VLAN 0 to HW filter on device team0 [ 1579.629829][T28253] netlink: 17 bytes leftover after parsing attributes in process `syz.1.6030'. [ 1579.673082][T28077] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1579.705982][T28253] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6030'. [ 1579.759749][T25395] bridge0: port 1(bridge_slave_0) entered blocking state [ 1579.766862][T25395] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1579.813899][T28256] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6030'. [ 1579.871439][T25390] bridge0: port 2(bridge_slave_1) entered blocking state [ 1579.878570][T25390] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1579.937994][T28256] ipvlan0: entered promiscuous mode [ 1579.975408][T28256] ipvlan0: entered allmulticast mode [ 1579.992637][T28256] veth0_vlan: entered allmulticast mode [ 1580.074085][T28077] 8021q: adding VLAN 0 to HW filter on device team0 [ 1580.340987][T25390] bridge0: port 1(bridge_slave_0) entered blocking state [ 1580.348108][T25390] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1580.458159][T25390] bridge0: port 2(bridge_slave_1) entered blocking state [ 1580.465275][T25390] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1581.559985][ T52] Bluetooth: hci0: command 0x0406 tx timeout [ 1581.833788][T28053] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1582.020783][T28077] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1582.180751][T28053] veth0_vlan: entered promiscuous mode [ 1582.261632][T28053] veth1_vlan: entered promiscuous mode [ 1582.380779][T28315] Invalid ELF header magic: != ELF [ 1582.448406][T28053] veth0_macvtap: entered promiscuous mode [ 1582.565723][T28053] veth1_macvtap: entered promiscuous mode [ 1582.670601][T28053] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1582.769667][T28053] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1582.874655][T25395] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1582.943142][T25395] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1583.027370][T25395] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1583.085345][T25395] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1583.348212][T28077] veth0_vlan: entered promiscuous mode [ 1583.411423][T28334] FAULT_INJECTION: forcing a failure. [ 1583.411423][T28334] name failslab, interval 1, probability 0, space 0, times 0 [ 1583.515431][T28077] veth1_vlan: entered promiscuous mode [ 1583.528617][T28334] CPU: 0 UID: 0 PID: 28334 Comm: syz.2.6041 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 1583.528653][T28334] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 1583.528662][T28334] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1583.528672][T28334] Call Trace: [ 1583.528678][T28334] [ 1583.528685][T28334] dump_stack_lvl+0x16c/0x1f0 [ 1583.528709][T28334] should_fail_ex+0x512/0x640 [ 1583.528731][T28334] ? fs_reclaim_acquire+0xae/0x150 [ 1583.528753][T28334] should_failslab+0xc2/0x120 [ 1583.528773][T28334] __kmalloc_noprof+0xdd/0x880 [ 1583.528795][T28334] ? find_held_lock+0x2b/0x80 [ 1583.528809][T28334] ? usb_alloc_urb+0x66/0xa0 [ 1583.528830][T28334] ? usb_alloc_urb+0x66/0xa0 [ 1583.528847][T28334] usb_alloc_urb+0x66/0xa0 [ 1583.528865][T28334] do_proc_control+0x2ef/0x10a0 [ 1583.528885][T28334] ? __might_fault+0x13b/0x190 [ 1583.528900][T28334] ? __pfx_do_proc_control+0x10/0x10 [ 1583.528925][T28334] usbdev_ioctl+0x22ff/0x4070 [ 1583.528946][T28334] ? __pfx_usbdev_ioctl+0x10/0x10 [ 1583.528969][T28334] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1583.528994][T28334] ? do_vfs_ioctl+0x128/0x14f0 [ 1583.529024][T28334] ? find_held_lock+0x2b/0x80 [ 1583.529038][T28334] ? hook_file_ioctl_common+0x145/0x410 [ 1583.529058][T28334] ? __fget_files+0x20e/0x3c0 [ 1583.529075][T28334] ? __pfx_usbdev_ioctl+0x10/0x10 [ 1583.529095][T28334] __x64_sys_ioctl+0x18e/0x210 [ 1583.529117][T28334] do_syscall_64+0xcd/0xfa0 [ 1583.529136][T28334] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1583.529150][T28334] RIP: 0033:0x7fde36f8f6c9 [ 1583.529163][T28334] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1583.529177][T28334] RSP: 002b:00007fde37df9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1583.529191][T28334] RAX: ffffffffffffffda RBX: 00007fde371e5fa0 RCX: 00007fde36f8f6c9 [ 1583.529200][T28334] RDX: 0000000000000000 RSI: 00000000c0185500 RDI: 0000000000000003 [ 1583.529209][T28334] RBP: 00007fde37011f91 R08: 0000000000000000 R09: 0000000000000000 [ 1583.529217][T28334] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1583.529225][T28334] R13: 00007fde371e6038 R14: 00007fde371e5fa0 R15: 00007ffecd2e7b38 [ 1583.529246][T28334] [ 1584.093821][T25405] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1584.130926][T25405] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1584.330554][T22896] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1584.368077][T28077] veth0_macvtap: entered promiscuous mode [ 1584.393490][T22896] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1584.417044][T28077] veth1_macvtap: entered promiscuous mode [ 1584.481793][T28077] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1584.547833][T28077] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1584.660561][T25395] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1584.673795][T28336] usb usb38-port5: attempt power cycle [ 1584.713368][T25395] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1584.787216][T25395] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1584.817760][T25395] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1584.863946][T15900] Bluetooth: hci7: unexpected subevent 0x01 length: 123 > 18 [ 1585.061978][T25390] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1585.122149][T25390] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1585.260168][T28336] usb usb38-port5: unable to enumerate USB device [ 1585.285223][T25405] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1585.332963][T25405] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1586.884671][ T52] Bluetooth: hci7: command tx timeout [ 1587.853671][T28424] serio: Serial port pty6 [ 1589.102911][T28447] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1590.098549][T28481] FAULT_INJECTION: forcing a failure. [ 1590.098549][T28481] name failslab, interval 1, probability 0, space 0, times 0 [ 1590.192013][T28481] CPU: 0 UID: 0 PID: 28481 Comm: syz.3.6067 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 1590.192047][T28481] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 1590.192055][T28481] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1590.192064][T28481] Call Trace: [ 1590.192070][T28481] [ 1590.192076][T28481] dump_stack_lvl+0x16c/0x1f0 [ 1590.192100][T28481] should_fail_ex+0x512/0x640 [ 1590.192123][T28481] ? fs_reclaim_acquire+0xae/0x150 [ 1590.192147][T28481] should_failslab+0xc2/0x120 [ 1590.192167][T28481] __kmalloc_noprof+0xdd/0x880 [ 1590.192190][T28481] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 1590.192212][T28481] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 1590.192228][T28481] tomoyo_realpath_from_path+0xc2/0x6e0 [ 1590.192246][T28481] ? tomoyo_profile+0x47/0x60 [ 1590.192267][T28481] tomoyo_path_number_perm+0x245/0x580 [ 1590.192288][T28481] ? tomoyo_path_number_perm+0x237/0x580 [ 1590.192312][T28481] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1590.192336][T28481] ? find_held_lock+0x2b/0x80 [ 1590.192369][T28481] ? find_held_lock+0x2b/0x80 [ 1590.192383][T28481] ? hook_file_ioctl_common+0x145/0x410 [ 1590.192403][T28481] ? __fget_files+0x20e/0x3c0 [ 1590.192421][T28481] security_file_ioctl+0x9b/0x240 [ 1590.192436][T28481] __x64_sys_ioctl+0xb7/0x210 [ 1590.192459][T28481] do_syscall_64+0xcd/0xfa0 [ 1590.192478][T28481] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1590.192493][T28481] RIP: 0033:0x7f87e958f6c9 [ 1590.192505][T28481] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1590.192519][T28481] RSP: 002b:00007f87e77f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1590.192534][T28481] RAX: ffffffffffffffda RBX: 00007f87e97e6090 RCX: 00007f87e958f6c9 [ 1590.192544][T28481] RDX: 0000000000000038 RSI: 0000000080085617 RDI: 0000000000000003 [ 1590.192553][T28481] RBP: 00007f87e77f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1590.192561][T28481] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1590.192570][T28481] R13: 00007f87e97e6128 R14: 00007f87e97e6090 R15: 00007ffecd88c4c8 [ 1590.192590][T28481] [ 1590.192596][T28481] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1590.908059][T28490] netlink: 338 bytes leftover after parsing attributes in process `syz.4.6069'. [ 1591.681382][T28509] futex_wake_op: syz.3.6073 tries to shift op by -2048; fix this program [ 1591.748608][T28509] futex_wake_op: syz.3.6073 tries to shift op by -2048; fix this program [ 1592.107219][T28521] futex_wake_op: syz.3.6073 tries to shift op by -2048; fix this program [ 1593.867454][T28572] FAULT_INJECTION: forcing a failure. [ 1593.867454][T28572] name failslab, interval 1, probability 0, space 0, times 0 [ 1593.984309][T28572] CPU: 0 UID: 0 PID: 28572 Comm: syz.1.6084 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 1593.984350][T28572] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 1593.984359][T28572] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1593.984368][T28572] Call Trace: [ 1593.984373][T28572] [ 1593.984380][T28572] dump_stack_lvl+0x16c/0x1f0 [ 1593.984402][T28572] should_fail_ex+0x512/0x640 [ 1593.984424][T28572] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 1593.984442][T28572] should_failslab+0xc2/0x120 [ 1593.984461][T28572] kmem_cache_alloc_noprof+0x75/0x6e0 [ 1593.984476][T28572] ? ovs_flow_alloc+0x1e/0x210 [ 1593.984494][T28572] ? ovs_flow_alloc+0x1e/0x210 [ 1593.984506][T28572] ovs_flow_alloc+0x1e/0x210 [ 1593.984520][T28572] ovs_packet_cmd_execute+0x5cc/0x1670 [ 1593.984540][T28572] ? __pfx_ovs_packet_cmd_execute+0x10/0x10 [ 1593.984559][T28572] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 1593.984580][T28572] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 1593.984603][T28572] genl_family_rcv_msg_doit+0x209/0x2f0 [ 1593.984623][T28572] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1593.984648][T28572] ? bpf_lsm_capable+0x9/0x10 [ 1593.984666][T28572] ? security_capable+0x7e/0x260 [ 1593.984687][T28572] ? ns_capable+0xd7/0x110 [ 1593.984705][T28572] genl_rcv_msg+0x55c/0x800 [ 1593.984725][T28572] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1593.984743][T28572] ? __pfx_ovs_packet_cmd_execute+0x10/0x10 [ 1593.984767][T28572] netlink_rcv_skb+0x158/0x420 [ 1593.984782][T28572] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1593.984801][T28572] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1593.984825][T28572] ? netlink_deliver_tap+0x1ae/0xd30 [ 1593.984843][T28572] genl_rcv+0x28/0x40 [ 1593.984858][T28572] netlink_unicast+0x5aa/0x870 [ 1593.984876][T28572] ? __pfx_netlink_unicast+0x10/0x10 [ 1593.984899][T28572] netlink_sendmsg+0x8c8/0xdd0 [ 1593.984918][T28572] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1593.984936][T28572] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 1593.984961][T28572] ____sys_sendmsg+0xa98/0xc70 [ 1593.984981][T28572] ? copy_msghdr_from_user+0x10a/0x160 [ 1593.984995][T28572] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1593.985023][T28572] ___sys_sendmsg+0x134/0x1d0 [ 1593.985039][T28572] ? __pfx____sys_sendmsg+0x10/0x10 [ 1593.985051][T28572] ? __lock_acquire+0x622/0x1c90 [ 1593.985095][T28572] __sys_sendmsg+0x16d/0x220 [ 1593.985110][T28572] ? __pfx___sys_sendmsg+0x10/0x10 [ 1593.985137][T28572] do_syscall_64+0xcd/0xfa0 [ 1593.985156][T28572] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1593.985171][T28572] RIP: 0033:0x7f79e7f8f6c9 [ 1593.985182][T28572] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1593.985197][T28572] RSP: 002b:00007f79e8f0c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1593.985212][T28572] RAX: ffffffffffffffda RBX: 00007f79e81e5fa0 RCX: 00007f79e7f8f6c9 [ 1593.985222][T28572] RDX: 000000000000c800 RSI: 0000200000000000 RDI: 0000000000000003 [ 1593.985231][T28572] RBP: 00007f79e8f0c090 R08: 0000000000000000 R09: 0000000000000000 [ 1593.985240][T28572] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1593.985249][T28572] R13: 00007f79e81e6038 R14: 00007f79e81e5fa0 R15: 00007fff4e8a7708 [ 1593.985269][T28572] [ 1594.931659][T28575] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6083'. [ 1597.005682][ T52] Bluetooth: hci2: unexpected event 0x20 length: 123 > 7 [ 1598.133765][T28635] netlink: 186 bytes leftover after parsing attributes in process `syz.4.6096'. [ 1598.922214][T28657] netlink: 342 bytes leftover after parsing attributes in process `syz.4.6098'. [ 1599.794746][T28670] netlink: 178 bytes leftover after parsing attributes in process `syz.4.6102'. [ 1599.904831][T28672] No such timeout policy "" [ 1599.953763][T28672] netlink: Failed to associated timeout policy '' [ 1600.268141][T28677] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !PjE r҄y*"l-y– [ 1600.636757][T28683] bond0: option all_slaves_active: invalid value () [ 1600.868423][T28690] netlink: Conntrack attr has 12 unknown bytes [ 1601.231326][T28694] FAULT_INJECTION: forcing a failure. [ 1601.231326][T28694] name failslab, interval 1, probability 0, space 0, times 0 [ 1601.433866][T28694] CPU: 0 UID: 0 PID: 28694 Comm: syz.4.6111 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 1601.433901][T28694] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 1601.433909][T28694] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1601.433918][T28694] Call Trace: [ 1601.433924][T28694] [ 1601.433930][T28694] dump_stack_lvl+0x16c/0x1f0 [ 1601.433952][T28694] should_fail_ex+0x512/0x640 [ 1601.433974][T28694] ? __kmalloc_noprof+0xca/0x880 [ 1601.433999][T28694] should_failslab+0xc2/0x120 [ 1601.434019][T28694] __kmalloc_noprof+0xdd/0x880 [ 1601.434041][T28694] ? lsm_blob_alloc+0x68/0x90 [ 1601.434062][T28694] ? lsm_blob_alloc+0x68/0x90 [ 1601.434079][T28694] lsm_blob_alloc+0x68/0x90 [ 1601.434097][T28694] security_sk_alloc+0x30/0x270 [ 1601.434119][T28694] sk_prot_alloc+0xfb/0x2a0 [ 1601.434139][T28694] sk_alloc+0x36/0xc20 [ 1601.434161][T28694] inet_create+0x3a1/0x1040 [ 1601.434182][T28694] ? inet_create+0x93/0x1040 [ 1601.434205][T28694] __sock_create+0x338/0x8d0 [ 1601.434228][T28694] mptcp_subflow_create_socket+0xec/0xa10 [ 1601.434250][T28694] ? __pfx_mptcp_subflow_create_socket+0x10/0x10 [ 1601.434277][T28694] __mptcp_nmpc_sk+0x182/0x890 [ 1601.434299][T28694] ? __pfx___mptcp_nmpc_sk+0x10/0x10 [ 1601.434322][T28694] ? __local_bh_enable_ip+0xa4/0x120 [ 1601.434343][T28694] mptcp_bind+0xa3/0x1e0 [ 1601.434364][T28694] __sys_bind+0x1a7/0x260 [ 1601.434384][T28694] ? __pfx___sys_bind+0x10/0x10 [ 1601.434418][T28694] ? syscall_user_dispatch+0x78/0x140 [ 1601.434437][T28694] __x64_sys_bind+0x72/0xb0 [ 1601.434457][T28694] do_syscall_64+0xcd/0xfa0 [ 1601.434476][T28694] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1601.434491][T28694] RIP: 0033:0x7f94d918f6c9 [ 1601.434504][T28694] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1601.434519][T28694] RSP: 002b:00007f94d9fa0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 1601.434533][T28694] RAX: ffffffffffffffda RBX: 00007f94d93e5fa0 RCX: 00007f94d918f6c9 [ 1601.434543][T28694] RDX: 000000000000006a RSI: 0000200000000000 RDI: 0000000000000005 [ 1601.434552][T28694] RBP: 00007f94d9211f91 R08: 0000000000000000 R09: 0000000000000000 [ 1601.434561][T28694] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1601.434569][T28694] R13: 00007f94d93e6038 R14: 00007f94d93e5fa0 R15: 00007fffe149cd98 [ 1601.434589][T28694] [ 1603.416909][T15900] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 1603.428556][T15900] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 1603.438146][T15900] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 1603.448333][T15900] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 1603.455876][T15900] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 1603.796657][T28723] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6121'. [ 1603.852211][T28727] netlink: 354 bytes leftover after parsing attributes in process `syz.1.6121'. [ 1604.195621][T28718] chnl_net:caif_netlink_parms(): no params data found [ 1604.583932][T28738] No such timeout policy "" [ 1604.588555][T28738] netlink: Failed to associated timeout policy '' [ 1604.709554][T28718] bridge0: port 1(bridge_slave_0) entered blocking state [ 1604.726812][T28718] bridge0: port 1(bridge_slave_0) entered disabled state [ 1604.794030][T28718] bridge_slave_0: entered allmulticast mode [ 1604.835203][T28718] bridge_slave_0: entered promiscuous mode [ 1604.883929][T28718] bridge0: port 2(bridge_slave_1) entered blocking state [ 1604.940258][T28718] bridge0: port 2(bridge_slave_1) entered disabled state [ 1604.965613][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 1604.975392][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1605.035647][T28718] bridge_slave_1: entered allmulticast mode [ 1605.054338][T28718] bridge_slave_1: entered promiscuous mode [ 1605.292652][T28718] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1605.363746][T28718] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1605.504606][T15900] Bluetooth: hci9: command tx timeout [ 1605.738451][T28718] team0: Port device team_slave_0 added [ 1605.794844][T28718] team0: Port device team_slave_1 added [ 1606.005658][T28718] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1606.055614][T28718] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1606.214220][T28718] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1606.336764][T28718] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1606.384242][T28718] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1606.551297][T28718] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1607.059639][T28718] hsr_slave_0: entered promiscuous mode [ 1607.091559][T28767] No such timeout policy "" [ 1607.100970][T28718] hsr_slave_1: entered promiscuous mode [ 1607.131858][T28718] debugfs: 'hsr0' already exists in 'hsr' [ 1607.153938][T28767] netlink: Failed to associated timeout policy '' [ 1607.174914][T28718] Cannot create hsr debugfs directory [ 1607.573687][T15900] Bluetooth: hci9: command tx timeout [ 1607.878701][T28776] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6135'. [ 1608.281518][T28776] bridge_slave_1: left allmulticast mode [ 1608.287182][T28776] bridge_slave_1: left promiscuous mode [ 1608.409240][T28776] bridge0: port 2(bridge_slave_1) entered disabled state [ 1608.635238][T28776] bridge_slave_0: left allmulticast mode [ 1608.716883][T28776] bridge_slave_0: left promiscuous mode [ 1608.810702][T28776] bridge0: port 1(bridge_slave_0) entered disabled state [ 1609.115978][T28778] kexec: Could not allocate control_code_buffer [ 1609.555709][ T30] audit: type=1800 audit(4294988099.270:87): pid=28792 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.6140" name="members" dev="configfs" ino=124617 res=0 errno=0 [ 1609.608772][T28718] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1609.644933][T15900] Bluetooth: hci9: command tx timeout [ 1609.724542][T28789] ima: policy update failed [ 1609.762241][ T30] audit: type=1802 audit(4294988099.471:88): pid=28789 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.4.6139" res=0 errno=0 [ 1610.101487][T28718] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1610.312705][T28718] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1610.364951][T28804] FAULT_INJECTION: forcing a failure. [ 1610.364951][T28804] name failslab, interval 1, probability 0, space 0, times 0 [ 1610.490037][T28804] CPU: 0 UID: 0 PID: 28804 Comm: syz.1.6145 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 1610.490073][T28804] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 1610.490081][T28804] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1610.490090][T28804] Call Trace: [ 1610.490096][T28804] [ 1610.490103][T28804] dump_stack_lvl+0x16c/0x1f0 [ 1610.490126][T28804] should_fail_ex+0x512/0x640 [ 1610.490148][T28804] ? __kmalloc_noprof+0xca/0x880 [ 1610.490174][T28804] should_failslab+0xc2/0x120 [ 1610.490193][T28804] __kmalloc_noprof+0xdd/0x880 [ 1610.490216][T28804] ? kobject_get_path+0xd2/0x2a0 [ 1610.490237][T28804] ? kobject_get_path+0xd2/0x2a0 [ 1610.490254][T28804] kobject_get_path+0xd2/0x2a0 [ 1610.490285][T28804] kobject_uevent_env+0x289/0x1870 [ 1610.490306][T28804] ? __pfx_dev_uevent_name+0x10/0x10 [ 1610.490327][T28804] ? queue_work_on+0x12a/0x1f0 [ 1610.490339][T28804] ? bus_to_subsys+0x131/0x160 [ 1610.490357][T28804] driver_bound+0x164/0x230 [ 1610.490377][T28804] device_bind_driver+0x3a/0x70 [ 1610.490395][T28804] mac80211_hwsim_new_radio+0x3e8/0x50b0 [ 1610.490421][T28804] ? __asan_memset+0x23/0x50 [ 1610.490437][T28804] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 1610.490459][T28804] hwsim_new_radio_nl+0xba2/0x1330 [ 1610.490477][T28804] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1610.490499][T28804] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 1610.490519][T28804] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 1610.490541][T28804] genl_family_rcv_msg_doit+0x209/0x2f0 [ 1610.490561][T28804] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1610.490586][T28804] ? bpf_lsm_capable+0x9/0x10 [ 1610.490604][T28804] ? security_capable+0x7e/0x260 [ 1610.490625][T28804] ? ns_capable+0xd7/0x110 [ 1610.490642][T28804] genl_rcv_msg+0x55c/0x800 [ 1610.490662][T28804] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1610.490680][T28804] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1610.490703][T28804] netlink_rcv_skb+0x158/0x420 [ 1610.490718][T28804] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1610.490736][T28804] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1610.490760][T28804] ? netlink_deliver_tap+0x1ae/0xd30 [ 1610.490778][T28804] genl_rcv+0x28/0x40 [ 1610.490793][T28804] netlink_unicast+0x5aa/0x870 [ 1610.490812][T28804] ? __pfx_netlink_unicast+0x10/0x10 [ 1610.490835][T28804] netlink_sendmsg+0x8c8/0xdd0 [ 1610.490853][T28804] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1610.490871][T28804] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 1610.490896][T28804] ____sys_sendmsg+0xa98/0xc70 [ 1610.490915][T28804] ? copy_msghdr_from_user+0x10a/0x160 [ 1610.490930][T28804] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1610.490952][T28804] ? __pfx_futex_wake_mark+0x10/0x10 [ 1610.490977][T28804] ___sys_sendmsg+0x134/0x1d0 [ 1610.490993][T28804] ? __pfx____sys_sendmsg+0x10/0x10 [ 1610.491006][T28804] ? __lock_acquire+0x622/0x1c90 [ 1610.491049][T28804] __sys_sendmsg+0x16d/0x220 [ 1610.491064][T28804] ? __pfx___sys_sendmsg+0x10/0x10 [ 1610.491078][T28804] ? __x64_sys_futex+0x1e0/0x4c0 [ 1610.491109][T28804] do_syscall_64+0xcd/0xfa0 [ 1610.491128][T28804] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1610.491143][T28804] RIP: 0033:0x7f79e7f8f6c9 [ 1610.491156][T28804] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1610.491171][T28804] RSP: 002b:00007f79e8f0c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1610.491186][T28804] RAX: ffffffffffffffda RBX: 00007f79e81e5fa0 RCX: 00007f79e7f8f6c9 [ 1610.491196][T28804] RDX: 0000000000008000 RSI: 0000200000000200 RDI: 0000000000000007 [ 1610.491205][T28804] RBP: 00007f79e8011f91 R08: 0000000000000000 R09: 0000000000000000 [ 1610.491214][T28804] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1610.491223][T28804] R13: 00007f79e81e6038 R14: 00007f79e81e5fa0 R15: 00007fff4e8a7708 [ 1610.491244][T28804] [ 1611.554768][T28718] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1611.740207][T28718] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1611.774136][T15900] Bluetooth: hci9: command tx timeout [ 1611.869224][T28718] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1611.982839][T28718] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1612.614519][T28718] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1612.709265][T28718] 8021q: adding VLAN 0 to HW filter on device team0 [ 1612.765928][T28841] No such timeout policy "" [ 1612.830172][T25405] bridge0: port 1(bridge_slave_0) entered blocking state [ 1612.837297][T25405] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1612.865345][T28841] netlink: Failed to associated timeout policy '' [ 1612.909842][T25405] bridge0: port 2(bridge_slave_1) entered blocking state [ 1612.916963][T25405] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1613.806084][T28718] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1614.060169][T28718] veth0_vlan: entered promiscuous mode [ 1614.121548][T28718] veth1_vlan: entered promiscuous mode [ 1614.257330][T28718] veth0_macvtap: entered promiscuous mode [ 1614.321685][T28718] veth1_macvtap: entered promiscuous mode [ 1614.416673][T28718] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1614.486289][T28718] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1614.574059][T22891] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1614.640203][T22891] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1614.813570][T22891] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1614.876737][T22891] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1615.182478][T22896] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1615.237896][T22896] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1615.490614][T22887] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1615.531872][T22887] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1616.469625][T28911] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(320.8192.0), cmd(6) [ 1616.953980][T28921] __vm_enough_memory: pid: 28921, comm: syz.0.6173, bytes: 8589938688 not enough memory for the allocation [ 1617.703883][T28933] futex_wake_op: syz.1.6176 tries to shift op by -2048; fix this program [ 1617.754087][T28933] futex_wake_op: syz.1.6176 tries to shift op by -2048; fix this program [ 1617.808366][ T30] audit: type=1800 audit(4294988107.563:89): pid=28936 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.6176" name="features" dev="configfs" ino=125996 res=0 errno=0 [ 1618.026056][T28940] nbd: must specify a size in bytes for the device [ 1618.291703][T28945] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1618.623114][T28963] Invalid ELF header magic: != ELF [ 1619.716763][T28987] ERROR: Out of memory at tomoyo_memory_ok. [ 1619.814213][T28987] FAULT_INJECTION: forcing a failure. [ 1619.814213][T28987] name failslab, interval 1, probability 0, space 0, times 0 [ 1619.902824][T28987] CPU: 0 UID: 0 PID: 28987 Comm: syz.1.6197 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 1619.902859][T28987] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 1619.902868][T28987] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1619.902877][T28987] Call Trace: [ 1619.902883][T28987] [ 1619.902890][T28987] dump_stack_lvl+0x16c/0x1f0 [ 1619.902913][T28987] should_fail_ex+0x512/0x640 [ 1619.902935][T28987] ? __kmalloc_noprof+0xca/0x880 [ 1619.902960][T28987] should_failslab+0xc2/0x120 [ 1619.902979][T28987] __kmalloc_noprof+0xdd/0x880 [ 1619.903002][T28987] ? __register_sysctl_table+0xe8e/0x1900 [ 1619.903022][T28987] ? __register_sysctl_table+0xea2/0x1900 [ 1619.903046][T28987] ? __register_sysctl_table+0xea2/0x1900 [ 1619.903066][T28987] __register_sysctl_table+0xea2/0x1900 [ 1619.903091][T28987] ? __pfx___register_sysctl_table+0x10/0x10 [ 1619.903111][T28987] ? is_module_address+0x69/0xf0 [ 1619.903138][T28987] ? register_net_sysctl_sz+0x228/0x3e0 [ 1619.903164][T28987] __addrconf_sysctl_register+0x1a2/0x360 [ 1619.903185][T28987] ? __pfx___addrconf_sysctl_register+0x10/0x10 [ 1619.903207][T28987] ? __asan_memcpy+0x3c/0x60 [ 1619.903223][T28987] addrconf_init_net+0x50c/0x8e0 [ 1619.903242][T28987] ? __pfx_addrconf_init_net+0x10/0x10 [ 1619.903259][T28987] ops_init+0x1e2/0x5f0 [ 1619.903277][T28987] setup_net+0x100/0x390 [ 1619.903293][T28987] ? __pfx_setup_net+0x10/0x10 [ 1619.903308][T28987] ? debug_mutex_init+0x37/0x70 [ 1619.903326][T28987] copy_net_ns+0x2f8/0x690 [ 1619.903345][T28987] create_new_namespaces+0x3ea/0xa90 [ 1619.903367][T28987] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 1619.903385][T28987] ksys_unshare+0x45b/0xa40 [ 1619.903404][T28987] ? __pfx_ksys_unshare+0x10/0x10 [ 1619.903423][T28987] ? xfd_validate_state+0x61/0x180 [ 1619.903449][T28987] __x64_sys_unshare+0x31/0x40 [ 1619.903467][T28987] do_syscall_64+0xcd/0xfa0 [ 1619.903485][T28987] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1619.903500][T28987] RIP: 0033:0x7f79e7f8f6c9 [ 1619.903512][T28987] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1619.903526][T28987] RSP: 002b:00007f79e8f0c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1619.903540][T28987] RAX: ffffffffffffffda RBX: 00007f79e81e5fa0 RCX: 00007f79e7f8f6c9 [ 1619.903550][T28987] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 1619.903559][T28987] RBP: 00007f79e8011f91 R08: 0000000000000000 R09: 0000000000000000 [ 1619.903567][T28987] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1619.903576][T28987] R13: 00007f79e81e6038 R14: 00007f79e81e5fa0 R15: 00007fff4e8a7708 [ 1619.903596][T28987] [ 1619.903603][T28987] sysctl could not get directory: /net/ipv6/conf/all -12 [ 1622.114421][T29028] netlink: 206 bytes leftover after parsing attributes in process `syz.0.6209'. [ 1623.539616][T29062] netlink: NAT attribute type 6 has unexpected length (4 != 2) [ 1624.214499][T29074] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6220'. [ 1624.265805][T29074] bond0: entered allmulticast mode [ 1624.299627][T29074] bond_slave_0: entered allmulticast mode [ 1624.331720][T29074] bond_slave_1: entered allmulticast mode [ 1624.568317][T29085] FAULT_INJECTION: forcing a failure. [ 1624.568317][T29085] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1624.666795][T29085] CPU: 0 UID: 0 PID: 29085 Comm: syz.3.6223 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 1624.666830][T29085] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 1624.666838][T29085] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1624.666848][T29085] Call Trace: [ 1624.666854][T29085] [ 1624.666860][T29085] dump_stack_lvl+0x16c/0x1f0 [ 1624.666883][T29085] should_fail_ex+0x512/0x640 [ 1624.666908][T29085] should_fail_alloc_page+0xe7/0x130 [ 1624.666930][T29085] prepare_alloc_pages+0x3c2/0x610 [ 1624.666950][T29085] ? rcu_is_watching+0x12/0xc0 [ 1624.666968][T29085] __alloc_frozen_pages_noprof+0x18b/0x2470 [ 1624.666986][T29085] ? rcu_is_watching+0x12/0xc0 [ 1624.667001][T29085] ? trace_mm_page_alloc+0x11f/0x1a0 [ 1624.667020][T29085] ? __alloc_frozen_pages_noprof+0x292/0x2470 [ 1624.667035][T29085] ? stack_trace_save+0x8e/0xc0 [ 1624.667053][T29085] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1624.667075][T29085] ? kmem_cache_alloc_node_noprof+0x28a/0x770 [ 1624.667089][T29085] ? __get_vm_area_node+0x1ca/0x330 [ 1624.667107][T29085] ? __vmalloc_node_noprof+0xad/0xf0 [ 1624.667125][T29085] ? __snd_dma_alloc_pages+0x53/0x90 [ 1624.667139][T29085] ? snd_dma_alloc_dir_pages+0x151/0x240 [ 1624.667152][T29085] ? do_alloc_pages+0x136/0x2d0 [ 1624.667171][T29085] ? snd_pcm_lib_malloc_pages+0x3df/0x980 [ 1624.667184][T29085] ? snd_pcm_hw_params+0x1656/0x1ba0 [ 1624.667196][T29085] ? snd_pcm_kernel_ioctl+0x147/0x2e0 [ 1624.667211][T29085] ? task_work_run+0x150/0x240 [ 1624.667232][T29085] ? exit_to_user_mode_loop+0xec/0x130 [ 1624.667251][T29085] ? do_syscall_64+0x426/0xfa0 [ 1624.667267][T29085] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1624.667285][T29085] alloc_pages_bulk_noprof+0x71c/0x1410 [ 1624.667300][T29085] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1624.667325][T29085] ? policy_nodemask+0xea/0x4e0 [ 1624.667346][T29085] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 1624.667362][T29085] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1624.667389][T29085] kasan_populate_vmalloc+0x112/0x2d0 [ 1624.667405][T29085] ? alloc_vmap_area+0x8b5/0x29e0 [ 1624.667426][T29085] alloc_vmap_area+0x960/0x29e0 [ 1624.667453][T29085] ? __pfx_alloc_vmap_area+0x10/0x10 [ 1624.667476][T29085] __get_vm_area_node+0x1ca/0x330 [ 1624.667499][T29085] __vmalloc_node_range_noprof+0x271/0x1480 [ 1624.667520][T29085] ? __snd_dma_alloc_pages+0x53/0x90 [ 1624.667536][T29085] ? __pfx___mutex_trylock_common+0x10/0x10 [ 1624.667558][T29085] ? __snd_dma_alloc_pages+0x53/0x90 [ 1624.667571][T29085] ? rcu_is_watching+0x12/0xc0 [ 1624.667594][T29085] ? trace_contention_end+0xdd/0x130 [ 1624.667618][T29085] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1624.667644][T29085] ? __mutex_unlock_slowpath+0x161/0x7b0 [ 1624.667665][T29085] ? __snd_dma_alloc_pages+0x53/0x90 [ 1624.667679][T29085] __vmalloc_node_noprof+0xad/0xf0 [ 1624.667698][T29085] ? __snd_dma_alloc_pages+0x53/0x90 [ 1624.667712][T29085] ? __pfx_snd_dma_vmalloc_alloc+0x10/0x10 [ 1624.667728][T29085] __snd_dma_alloc_pages+0x53/0x90 [ 1624.667743][T29085] snd_dma_alloc_dir_pages+0x151/0x240 [ 1624.667759][T29085] do_alloc_pages+0x136/0x2d0 [ 1624.667784][T29085] snd_pcm_lib_malloc_pages+0x3df/0x980 [ 1624.667801][T29085] snd_pcm_hw_params+0x1656/0x1ba0 [ 1624.667819][T29085] ? __pfx_snd_pcm_hw_params+0x10/0x10 [ 1624.667831][T29085] ? snd_pcm_hw_param_near.constprop.0+0x72f/0x8e0 [ 1624.667851][T29085] ? snd_pcm_hw_param_near.constprop.0+0x734/0x8e0 [ 1624.667873][T29085] ? __pfx_snd_pcm_hw_param_near.constprop.0+0x10/0x10 [ 1624.667893][T29085] ? __asan_memset+0x23/0x50 [ 1624.667910][T29085] snd_pcm_kernel_ioctl+0x147/0x2e0 [ 1624.667925][T29085] snd_pcm_oss_change_params_locked+0x1432/0x3a30 [ 1624.667954][T29085] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 1624.667990][T29085] snd_pcm_oss_make_ready_locked+0xb7/0x130 [ 1624.668011][T29085] snd_pcm_oss_sync+0x32e/0x840 [ 1624.668032][T29085] ? __pfx_snd_pcm_oss_release+0x10/0x10 [ 1624.668051][T29085] snd_pcm_oss_release+0x28b/0x310 [ 1624.668071][T29085] ? __pfx_snd_pcm_oss_release+0x10/0x10 [ 1624.668090][T29085] __fput+0x402/0xb70 [ 1624.668113][T29085] task_work_run+0x150/0x240 [ 1624.668135][T29085] ? __pfx_task_work_run+0x10/0x10 [ 1624.668157][T29085] ? __pfx___do_sys_close_range+0x10/0x10 [ 1624.668178][T29085] exit_to_user_mode_loop+0xec/0x130 [ 1624.668199][T29085] do_syscall_64+0x426/0xfa0 [ 1624.668218][T29085] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1624.668233][T29085] RIP: 0033:0x7f87e958f6c9 [ 1624.668246][T29085] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1624.668260][T29085] RSP: 002b:00007f87ea35c038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 1624.668274][T29085] RAX: 0000000000000000 RBX: 00007f87e97e5fa0 RCX: 00007f87e958f6c9 [ 1624.668284][T29085] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000002 [ 1624.668293][T29085] RBP: 00007f87e9611f91 R08: 0000000000000000 R09: 0000000000000000 [ 1624.668302][T29085] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1624.668311][T29085] R13: 00007f87e97e6038 R14: 00007f87e97e5fa0 R15: 00007ffecd88c4c8 [ 1624.668332][T29085] [ 1624.668585][T29085] syz.3.6223: vmalloc error: size 2097152, vm_struct allocation failed, mode:0xcc0(GFP_KERNEL), nodemask=(null) [ 1625.558247][T29092] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6226'. [ 1625.882640][T29092] veth1_macvtap: left promiscuous mode [ 1626.547093][T29108] ERROR: Out of memory at tomoyo_memory_ok. [ 1627.069366][T29085] ,cpuset=/,mems_allowed=0-1 [ 1627.115311][T29085] CPU: 0 UID: 0 PID: 29085 Comm: syz.3.6223 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 1627.115347][T29085] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 1627.115355][T29085] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1627.115364][T29085] Call Trace: [ 1627.115369][T29085] [ 1627.115376][T29085] dump_stack_lvl+0x16c/0x1f0 [ 1627.115398][T29085] warn_alloc+0x248/0x3a0 [ 1627.115415][T29085] ? __pfx_warn_alloc+0x10/0x10 [ 1627.115431][T29085] ? __get_vm_area_node+0x2cd/0x330 [ 1627.115455][T29085] ? __get_vm_area_node+0x2cd/0x330 [ 1627.115473][T29085] ? __get_vm_area_node+0x1dc/0x330 [ 1627.115491][T29085] ? __get_vm_area_node+0x208/0x330 [ 1627.115515][T29085] __vmalloc_node_range_noprof+0xaf5/0x1480 [ 1627.115539][T29085] ? __pfx___mutex_trylock_common+0x10/0x10 [ 1627.115562][T29085] ? __snd_dma_alloc_pages+0x53/0x90 [ 1627.115578][T29085] ? rcu_is_watching+0x12/0xc0 [ 1627.115594][T29085] ? trace_contention_end+0xdd/0x130 [ 1627.115616][T29085] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1627.115646][T29085] ? __mutex_unlock_slowpath+0x161/0x7b0 [ 1627.115669][T29085] ? __snd_dma_alloc_pages+0x53/0x90 [ 1627.115682][T29085] __vmalloc_node_noprof+0xad/0xf0 [ 1627.115702][T29085] ? __snd_dma_alloc_pages+0x53/0x90 [ 1627.115715][T29085] ? __pfx_snd_dma_vmalloc_alloc+0x10/0x10 [ 1627.115732][T29085] __snd_dma_alloc_pages+0x53/0x90 [ 1627.115747][T29085] snd_dma_alloc_dir_pages+0x151/0x240 [ 1627.115764][T29085] do_alloc_pages+0x136/0x2d0 [ 1627.115789][T29085] snd_pcm_lib_malloc_pages+0x3df/0x980 [ 1627.115807][T29085] snd_pcm_hw_params+0x1656/0x1ba0 [ 1627.115825][T29085] ? __pfx_snd_pcm_hw_params+0x10/0x10 [ 1627.115838][T29085] ? snd_pcm_hw_param_near.constprop.0+0x72f/0x8e0 [ 1627.115858][T29085] ? snd_pcm_hw_param_near.constprop.0+0x734/0x8e0 [ 1627.115881][T29085] ? __pfx_snd_pcm_hw_param_near.constprop.0+0x10/0x10 [ 1627.115902][T29085] ? __asan_memset+0x23/0x50 [ 1627.115919][T29085] snd_pcm_kernel_ioctl+0x147/0x2e0 [ 1627.115935][T29085] snd_pcm_oss_change_params_locked+0x1432/0x3a30 [ 1627.115964][T29085] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 1627.116001][T29085] snd_pcm_oss_make_ready_locked+0xb7/0x130 [ 1627.116023][T29085] snd_pcm_oss_sync+0x32e/0x840 [ 1627.116045][T29085] ? __pfx_snd_pcm_oss_release+0x10/0x10 [ 1627.116064][T29085] snd_pcm_oss_release+0x28b/0x310 [ 1627.116085][T29085] ? __pfx_snd_pcm_oss_release+0x10/0x10 [ 1627.116104][T29085] __fput+0x402/0xb70 [ 1627.116128][T29085] task_work_run+0x150/0x240 [ 1627.116150][T29085] ? __pfx_task_work_run+0x10/0x10 [ 1627.116172][T29085] ? __pfx___do_sys_close_range+0x10/0x10 [ 1627.116193][T29085] exit_to_user_mode_loop+0xec/0x130 [ 1627.116220][T29085] do_syscall_64+0x426/0xfa0 [ 1627.116240][T29085] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1627.116255][T29085] RIP: 0033:0x7f87e958f6c9 [ 1627.116267][T29085] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1627.116282][T29085] RSP: 002b:00007f87ea35c038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 1627.116297][T29085] RAX: 0000000000000000 RBX: 00007f87e97e5fa0 RCX: 00007f87e958f6c9 [ 1627.116306][T29085] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000002 [ 1627.116314][T29085] RBP: 00007f87e9611f91 R08: 0000000000000000 R09: 0000000000000000 [ 1627.116323][T29085] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1627.116332][T29085] R13: 00007f87e97e6038 R14: 00007f87e97e5fa0 R15: 00007ffecd88c4c8 [ 1627.116352][T29085] [ 1627.116358][T29085] Mem-Info: [ 1628.365902][T29142] netlink: 186 bytes leftover after parsing attributes in process `syz.4.6241'. [ 1628.561272][T29147] futex_wake_op: syz.4.6243 tries to shift op by -2048; fix this program [ 1628.905752][T29085] active_anon:3886 inactive_anon:33031 isolated_anon:0 [ 1628.905752][T29085] active_file:21366 inactive_file:38805 isolated_file:0 [ 1628.905752][T29085] unevictable:768 dirty:416 writeback:0 [ 1628.905752][T29085] slab_reclaimable:15805 slab_unreclaimable:119579 [ 1628.905752][T29085] mapped:68309 shmem:15997 pagetables:1584 [ 1628.905752][T29085] sec_pagetables:0 bounce:0 [ 1628.905752][T29085] kernel_misc_reclaimable:0 [ 1628.905752][T29085] free:1192699 free_pcp:4632 free_cma:0 [ 1629.172919][T29085] Node 0 active_anon:15544kB inactive_anon:131864kB active_file:85464kB inactive_file:155084kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:273236kB dirty:1664kB writeback:0kB shmem:72856kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:43008kB kernel_stack:15696kB pagetables:6144kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1629.390645][T29085] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:136kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:140kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1629.588984][T29085] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1629.760706][T29085] lowmem_reserve[]: 0 2485 2487 2487 2487 [ 1629.808086][T29085] Node 0 DMA32 free:815980kB boost:0kB min:34364kB low:42952kB high:51540kB reserved_highatomic:0KB free_highatomic:0KB active_anon:15556kB inactive_anon:154388kB active_file:85464kB inactive_file:155084kB unevictable:1536kB writepending:1668kB zspages:56kB present:3129332kB managed:2545072kB mlocked:0kB bounce:0kB free_pcp:22720kB local_pcp:22720kB free_cma:0kB [ 1629.900414][T29162] No such timeout policy "" [ 1629.905026][T29162] netlink: Failed to associated timeout policy '' [ 1630.009031][T29085] lowmem_reserve[]: 0 0 1 1 1 [ 1630.031231][T29085] Node 0 Normal free:8kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1630.206633][T29085] lowmem_reserve[]: 0 0 0 0 0 [ 1630.235577][T29085] Node 1 Normal free:3911456kB boost:0kB min:55512kB low:69388kB high:83264kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:136kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:1468kB local_pcp:1468kB free_cma:0kB [ 1630.428316][T29085] lowmem_reserve[]: 0 0 0 0 0 [ 1630.474440][T29085] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1630.530809][T29085] Node 0 DMA32: 39*4kB (E) 132*8kB (E) 590*16kB (M) 1044*32kB (UME) 973*64kB (UME) 616*128kB (UME) 416*256kB (M) 302*512kB (UM) 157*1024kB (UME) 4*2048kB (UME) 45*4096kB (UM) = 799580kB [ 1630.649917][T29085] Node 0 Normal: 2*4kB (U) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 1630.723310][T29085] Node 1 Normal: 181*4kB (UME) 37*8kB (UME) 39*16kB (UME) 221*32kB (UME) 105*64kB (UME) 30*128kB (UME) 14*256kB (UM) 9*512kB (UME) 1*1024kB (M) 2*2048kB (UE) 947*4096kB (M) = 3911500kB [ 1630.834242][T29085] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1630.904823][T29085] Node 0 hugepages_total=2 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 1630.953091][T29085] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1631.012492][T29085] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1631.076044][T29085] 83686 total pagecache pages [ 1631.101118][T29085] 47 pages in swap cache [ 1631.112051][T29085] Free swap = 124600kB [ 1631.141419][T29085] Total swap = 124996kB [ 1631.160809][T29085] 2097051 pages RAM [ 1631.191033][T29085] 0 pages HighMem/MovableOnly [ 1631.222079][T29085] 428693 pages reserved [ 1631.250318][T29085] 0 pages cma reserved [ 1631.878312][T29171] netlink: ct_mark mask cannot be 0 [ 1633.664327][T29208] nvme_fabrics: missing parameter 'transport=%s' [ 1633.672293][T29215] No such timeout policy "" [ 1633.691752][T29208] nvme_fabrics: missing parameter 'nqn=%s' [ 1633.708512][T29215] netlink: Failed to associated timeout policy '' [ 1633.716686][T29217] netlink: 330 bytes leftover after parsing attributes in process `syz.1.6266'. [ 1633.943497][T29225] netlink: 342 bytes leftover after parsing attributes in process `syz.3.6268'. [ 1634.033129][T29226] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6268'. [ 1634.252438][T29226] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1634.296116][T29226] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1634.347173][T29226] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1634.410991][T29226] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1634.822738][T29248] FAULT_INJECTION: forcing a failure. [ 1634.822738][T29248] name failslab, interval 1, probability 0, space 0, times 0 [ 1634.838884][T29249] No such timeout policy "" [ 1634.866811][T29249] netlink: Failed to associated timeout policy '' [ 1634.894246][T29248] CPU: 0 UID: 0 PID: 29248 Comm: syz.1.6275 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 1634.894303][T29248] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 1634.894313][T29248] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1634.894322][T29248] Call Trace: [ 1634.894328][T29248] [ 1634.894334][T29248] dump_stack_lvl+0x16c/0x1f0 [ 1634.894357][T29248] should_fail_ex+0x512/0x640 [ 1634.894379][T29248] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 1634.894397][T29248] should_failslab+0xc2/0x120 [ 1634.894417][T29248] kmem_cache_alloc_noprof+0x75/0x6e0 [ 1634.894431][T29248] ? __anon_vma_prepare+0xae/0x5e0 [ 1634.894457][T29248] ? __anon_vma_prepare+0xae/0x5e0 [ 1634.894477][T29248] __anon_vma_prepare+0xae/0x5e0 [ 1634.894497][T29248] ? do_raw_spin_lock+0x12c/0x2b0 [ 1634.894521][T29248] __vmf_anon_prepare+0x11c/0x240 [ 1634.894541][T29248] do_huge_pmd_anonymous_page+0x161/0x1f50 [ 1634.894557][T29248] ? __pmd_alloc+0x64f/0x8b0 [ 1634.894577][T29248] __handle_mm_fault+0x1cff/0x2aa0 [ 1634.894604][T29248] ? __pfx___handle_mm_fault+0x10/0x10 [ 1634.894642][T29248] handle_mm_fault+0x589/0xd10 [ 1634.894668][T29248] __get_user_pages+0x54e/0x3530 [ 1634.894695][T29248] ? __pfx___get_user_pages+0x10/0x10 [ 1634.894720][T29248] populate_vma_page_range+0x267/0x3f0 [ 1634.894741][T29248] ? __pfx_populate_vma_page_range+0x10/0x10 [ 1634.894760][T29248] ? __pfx_find_vma_intersection+0x10/0x10 [ 1634.894780][T29248] ? do_mmap+0x69c/0x1210 [ 1634.894799][T29248] __mm_populate+0x1d8/0x380 [ 1634.894820][T29248] ? __pfx___mm_populate+0x10/0x10 [ 1634.894841][T29248] ? up_write+0x1b2/0x520 [ 1634.894864][T29248] vm_mmap_pgoff+0x37f/0x470 [ 1634.894884][T29248] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 1634.894907][T29248] ? __x64_sys_futex+0x1e0/0x4c0 [ 1634.894925][T29248] ? __x64_sys_futex+0x1e9/0x4c0 [ 1634.894946][T29248] ksys_mmap_pgoff+0x7d/0x5c0 [ 1634.894963][T29248] ? xfd_validate_state+0x61/0x180 [ 1634.894982][T29248] ? __pfx_ksys_write+0x10/0x10 [ 1634.895000][T29248] __x64_sys_mmap+0x125/0x190 [ 1634.895023][T29248] do_syscall_64+0xcd/0xfa0 [ 1634.895042][T29248] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1634.895057][T29248] RIP: 0033:0x7f79e7f8f6c9 [ 1634.895069][T29248] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1634.895083][T29248] RSP: 002b:00007f79e8f0c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1634.895097][T29248] RAX: ffffffffffffffda RBX: 00007f79e81e5fa0 RCX: 00007f79e7f8f6c9 [ 1634.895106][T29248] RDX: 00000000000000df RSI: 0000000000400008 RDI: 0000000000000000 [ 1634.895115][T29248] RBP: 00007f79e8011f91 R08: 0000000000000002 R09: 0000000800008000 [ 1634.895124][T29248] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 1634.895134][T29248] R13: 00007f79e81e6038 R14: 00007f79e81e5fa0 R15: 00007fff4e8a7708 [ 1634.895155][T29248] [ 1636.190450][T29263] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6279'. [ 1636.400226][T29269] netlink: 214 bytes leftover after parsing attributes in process `syz.1.6281'. [ 1636.462957][T29267] ima: policy update failed [ 1636.502217][ T30] audit: type=1802 audit(4294988126.330:90): pid=29267 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.1.6281" res=0 errno=0 [ 1637.517018][T29288] FAULT_INJECTION: forcing a failure. [ 1637.517018][T29288] name failslab, interval 1, probability 0, space 0, times 0 [ 1637.615745][T29288] CPU: 0 UID: 0 PID: 29288 Comm: syz.1.6288 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 1637.615780][T29288] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 1637.615789][T29288] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1637.615798][T29288] Call Trace: [ 1637.615803][T29288] [ 1637.615810][T29288] dump_stack_lvl+0x16c/0x1f0 [ 1637.615832][T29288] should_fail_ex+0x512/0x640 [ 1637.615853][T29288] ? __kmalloc_noprof+0xca/0x880 [ 1637.615878][T29288] should_failslab+0xc2/0x120 [ 1637.615898][T29288] __kmalloc_noprof+0xdd/0x880 [ 1637.615927][T29288] ? kobject_get_path+0xd2/0x2a0 [ 1637.615949][T29288] ? kobject_get_path+0xd2/0x2a0 [ 1637.615966][T29288] kobject_get_path+0xd2/0x2a0 [ 1637.615989][T29288] kobject_uevent_env+0x289/0x1870 [ 1637.616009][T29288] ? __pfx_dev_uevent_name+0x10/0x10 [ 1637.616029][T29288] ? queue_work_on+0x12a/0x1f0 [ 1637.616042][T29288] ? bus_to_subsys+0x131/0x160 [ 1637.616059][T29288] driver_bound+0x164/0x230 [ 1637.616079][T29288] device_bind_driver+0x3a/0x70 [ 1637.616097][T29288] mac80211_hwsim_new_radio+0x3e8/0x50b0 [ 1637.616123][T29288] ? __asan_memset+0x23/0x50 [ 1637.616138][T29288] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 1637.616160][T29288] hwsim_new_radio_nl+0xba2/0x1330 [ 1637.616177][T29288] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1637.616199][T29288] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 1637.616219][T29288] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 1637.616245][T29288] genl_family_rcv_msg_doit+0x209/0x2f0 [ 1637.616265][T29288] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1637.616289][T29288] ? bpf_lsm_capable+0x9/0x10 [ 1637.616308][T29288] ? security_capable+0x7e/0x260 [ 1637.616329][T29288] ? ns_capable+0xd7/0x110 [ 1637.616346][T29288] genl_rcv_msg+0x55c/0x800 [ 1637.616365][T29288] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1637.616383][T29288] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1637.616406][T29288] netlink_rcv_skb+0x158/0x420 [ 1637.616421][T29288] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1637.616440][T29288] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1637.616464][T29288] ? netlink_deliver_tap+0x1ae/0xd30 [ 1637.616481][T29288] genl_rcv+0x28/0x40 [ 1637.616496][T29288] netlink_unicast+0x5aa/0x870 [ 1637.616514][T29288] ? __pfx_netlink_unicast+0x10/0x10 [ 1637.616541][T29288] netlink_sendmsg+0x8c8/0xdd0 [ 1637.616560][T29288] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1637.616579][T29288] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 1637.616603][T29288] ____sys_sendmsg+0xa98/0xc70 [ 1637.616623][T29288] ? copy_msghdr_from_user+0x10a/0x160 [ 1637.616637][T29288] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1637.616654][T29288] ? preempt_schedule_thunk+0x16/0x30 [ 1637.616679][T29288] ? try_to_wake_up+0xa67/0x1870 [ 1637.616697][T29288] ___sys_sendmsg+0x134/0x1d0 [ 1637.616710][T29288] ? find_held_lock+0x2b/0x80 [ 1637.616726][T29288] ? __pfx____sys_sendmsg+0x10/0x10 [ 1637.616739][T29288] ? __lock_acquire+0x622/0x1c90 [ 1637.616782][T29288] __sys_sendmsg+0x16d/0x220 [ 1637.616797][T29288] ? __pfx___sys_sendmsg+0x10/0x10 [ 1637.616810][T29288] ? __x64_sys_futex+0x1e0/0x4c0 [ 1637.616842][T29288] do_syscall_64+0xcd/0xfa0 [ 1637.616861][T29288] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1637.616876][T29288] RIP: 0033:0x7f79e7f8f6c9 [ 1637.616889][T29288] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1637.616909][T29288] RSP: 002b:00007f79e8f0c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1637.616924][T29288] RAX: ffffffffffffffda RBX: 00007f79e81e5fa0 RCX: 00007f79e7f8f6c9 [ 1637.616934][T29288] RDX: 0000000000008000 RSI: 0000200000000200 RDI: 0000000000000007 [ 1637.616944][T29288] RBP: 00007f79e8011f91 R08: 0000000000000000 R09: 0000000000000000 [ 1637.616953][T29288] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1637.616961][T29288] R13: 00007f79e81e6038 R14: 00007f79e81e5fa0 R15: 00007fff4e8a7708 [ 1637.616983][T29288] [ 1639.072402][T29309] No such timeout policy "" [ 1639.091394][T29309] netlink: Failed to associated timeout policy '' [ 1639.549230][T29313] can: request_module (can-proto-4) failed. [ 1640.178611][T29299] kexec: Could not allocate control_code_buffer [ 1641.059952][T29341] FAULT_INJECTION: forcing a failure. [ 1641.059952][T29341] name failslab, interval 1, probability 0, space 0, times 0 [ 1641.166070][T29341] CPU: 0 UID: 0 PID: 29341 Comm: syz.0.6290 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 1641.166106][T29341] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 1641.166114][T29341] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1641.166123][T29341] Call Trace: [ 1641.166129][T29341] [ 1641.166135][T29341] dump_stack_lvl+0x16c/0x1f0 [ 1641.166158][T29341] should_fail_ex+0x512/0x640 [ 1641.166179][T29341] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 1641.166197][T29341] should_failslab+0xc2/0x120 [ 1641.166218][T29341] kmem_cache_alloc_noprof+0x75/0x6e0 [ 1641.166232][T29341] ? skb_clone+0x190/0x3f0 [ 1641.166250][T29341] ? skb_clone+0x190/0x3f0 [ 1641.166263][T29341] skb_clone+0x190/0x3f0 [ 1641.166278][T29341] netlink_broadcast_filtered+0xb76/0xf90 [ 1641.166302][T29341] ? __pfx_netlink_broadcast_filtered+0x10/0x10 [ 1641.166316][T29341] ? sprintf+0xcc/0x100 [ 1641.166338][T29341] ? netlink_has_listeners+0x20f/0x430 [ 1641.166355][T29341] netlink_broadcast+0x39/0x50 [ 1641.166371][T29341] kobject_uevent_env+0xc6a/0x1870 [ 1641.166396][T29341] ? bus_to_subsys+0x131/0x160 [ 1641.166414][T29341] device_add+0x10dd/0x1aa0 [ 1641.166429][T29341] ? __pfx_device_add+0x10/0x10 [ 1641.166454][T29341] ? kfree_const+0x55/0x60 [ 1641.166479][T29341] device_create_groups_vargs+0x1f8/0x270 [ 1641.166497][T29341] device_create+0xed/0x130 [ 1641.166511][T29341] ? __pfx_device_create+0x10/0x10 [ 1641.166529][T29341] ? do_init_timer+0xc9/0x110 [ 1641.166549][T29341] ? ieee80211_roc_setup+0x136/0x270 [ 1641.166565][T29341] ? ieee80211_alloc_hw_nm+0x231/0x22b0 [ 1641.166587][T29341] mac80211_hwsim_new_radio+0x36a/0x50b0 [ 1641.166613][T29341] ? __asan_memset+0x23/0x50 [ 1641.166629][T29341] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 1641.166651][T29341] hwsim_new_radio_nl+0xba2/0x1330 [ 1641.166669][T29341] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1641.166691][T29341] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 1641.166709][T29341] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 1641.166732][T29341] genl_family_rcv_msg_doit+0x209/0x2f0 [ 1641.166752][T29341] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1641.166776][T29341] ? bpf_lsm_capable+0x9/0x10 [ 1641.166794][T29341] ? security_capable+0x7e/0x260 [ 1641.166815][T29341] ? ns_capable+0xd7/0x110 [ 1641.166832][T29341] genl_rcv_msg+0x55c/0x800 [ 1641.166852][T29341] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1641.166870][T29341] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1641.166892][T29341] netlink_rcv_skb+0x158/0x420 [ 1641.166908][T29341] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1641.166926][T29341] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1641.166950][T29341] ? netlink_deliver_tap+0x1ae/0xd30 [ 1641.166968][T29341] genl_rcv+0x28/0x40 [ 1641.166983][T29341] netlink_unicast+0x5aa/0x870 [ 1641.167002][T29341] ? __pfx_netlink_unicast+0x10/0x10 [ 1641.167025][T29341] netlink_sendmsg+0x8c8/0xdd0 [ 1641.167044][T29341] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1641.167062][T29341] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 1641.167087][T29341] ____sys_sendmsg+0xa98/0xc70 [ 1641.167110][T29341] ? copy_msghdr_from_user+0x10a/0x160 [ 1641.167124][T29341] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1641.167147][T29341] ? __pfx_futex_wake_mark+0x10/0x10 [ 1641.167172][T29341] ___sys_sendmsg+0x134/0x1d0 [ 1641.167185][T29341] ? find_held_lock+0x2b/0x80 [ 1641.167201][T29341] ? __pfx____sys_sendmsg+0x10/0x10 [ 1641.167213][T29341] ? __lock_acquire+0x622/0x1c90 [ 1641.167257][T29341] __sys_sendmsg+0x16d/0x220 [ 1641.167272][T29341] ? __pfx___sys_sendmsg+0x10/0x10 [ 1641.167285][T29341] ? __x64_sys_futex+0x1e0/0x4c0 [ 1641.167316][T29341] do_syscall_64+0xcd/0xfa0 [ 1641.167335][T29341] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1641.167350][T29341] RIP: 0033:0x7f431ff8f6c9 [ 1641.167363][T29341] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1641.167378][T29341] RSP: 002b:00007f4320e1a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1641.167392][T29341] RAX: ffffffffffffffda RBX: 00007f43201e6090 RCX: 00007f431ff8f6c9 [ 1641.167403][T29341] RDX: 0000000000008000 RSI: 0000200000000200 RDI: 0000000000000008 [ 1641.167412][T29341] RBP: 00007f4320011f91 R08: 0000000000000000 R09: 0000000000000000 [ 1641.167421][T29341] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1641.167430][T29341] R13: 00007f43201e6128 R14: 00007f43201e6090 R15: 00007ffc99e62038 [ 1641.167451][T29341] [ 1643.176009][T29367] __vm_enough_memory: pid: 29367, comm: syz.1.6307, bytes: 4398046511104 not enough memory for the allocation [ 1645.012558][T29406] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6316'. [ 1645.121736][T29406] ipvlan0: entered promiscuous mode [ 1645.148500][T29406] ipvlan0: entered allmulticast mode [ 1645.184423][T29406] veth0_vlan: entered allmulticast mode [ 1645.621047][T29413] FAULT_INJECTION: forcing a failure. [ 1645.621047][T29413] name failslab, interval 1, probability 0, space 0, times 0 [ 1645.706696][T29413] CPU: 0 UID: 0 PID: 29413 Comm: syz.3.6319 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 1645.706731][T29413] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 1645.706741][T29413] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1645.706751][T29413] Call Trace: [ 1645.706756][T29413] [ 1645.706771][T29413] dump_stack_lvl+0x16c/0x1f0 [ 1645.706795][T29413] should_fail_ex+0x512/0x640 [ 1645.706818][T29413] ? kmem_cache_alloc_lru_noprof+0x66/0x6e0 [ 1645.706836][T29413] should_failslab+0xc2/0x120 [ 1645.706856][T29413] kmem_cache_alloc_lru_noprof+0x79/0x6e0 [ 1645.706870][T29413] ? __pfx___might_resched+0x10/0x10 [ 1645.706887][T29413] ? sock_alloc_inode+0x25/0x1c0 [ 1645.706913][T29413] ? __pfx_sock_alloc_inode+0x10/0x10 [ 1645.706930][T29413] ? sock_alloc_inode+0x25/0x1c0 [ 1645.706946][T29413] sock_alloc_inode+0x25/0x1c0 [ 1645.706964][T29413] alloc_inode+0x64/0x240 [ 1645.706984][T29413] sock_alloc+0x40/0x280 [ 1645.707000][T29413] __sock_create+0xc1/0x8d0 [ 1645.707022][T29413] __sys_socket+0x14d/0x260 [ 1645.707041][T29413] ? __pfx___sys_socket+0x10/0x10 [ 1645.707059][T29413] ? xfd_validate_state+0x61/0x180 [ 1645.707078][T29413] ? __pfx_do_writev+0x10/0x10 [ 1645.707096][T29413] __x64_sys_socket+0x72/0xb0 [ 1645.707114][T29413] ? lockdep_hardirqs_on+0x7c/0x110 [ 1645.707131][T29413] do_syscall_64+0xcd/0xfa0 [ 1645.707149][T29413] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1645.707164][T29413] RIP: 0033:0x7f87e958f6c9 [ 1645.707176][T29413] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1645.707189][T29413] RSP: 002b:00007f87ea35c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1645.707204][T29413] RAX: ffffffffffffffda RBX: 00007f87e97e5fa0 RCX: 00007f87e958f6c9 [ 1645.707213][T29413] RDX: 000000000000003b RSI: 0000000000000003 RDI: 000000000000000a [ 1645.707222][T29413] RBP: 00007f87e9611f91 R08: 0000000000000000 R09: 0000000000000000 [ 1645.707230][T29413] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1645.707239][T29413] R13: 00007f87e97e6038 R14: 00007f87e97e5fa0 R15: 00007ffecd88c4c8 [ 1645.707258][T29413] [ 1645.707266][T29413] socket: no more sockets [ 1648.310233][T29474] Invalid ELF header magic: != ELF [ 1650.194061][T15900] Bluetooth: hci9: unexpected event 0x3e length: 0 < 1 [ 1651.038063][T29511] input: jJǸ;9%vlQ J86 as /devices/virtual/input/input70 [ 1652.879128][T29544] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1656.111303][ T30] audit: type=1326 audit(4294988146.072:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29629 comm="syz.0.6374" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f431ff8f6c9 code=0x0 [ 1657.047596][T29638] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6376'. [ 1658.032382][T29676] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1658.049928][T29675] netlink: 186 bytes leftover after parsing attributes in process `syz.0.6388'. [ 1659.043261][T29687] zswap: compressor not available [ 1659.097969][T29690] Setting dangerous option i915.mitigations - tainting kernel [ 1659.326495][T29700] No such timeout policy "" [ 1659.355716][T29700] netlink: Failed to associated timeout policy '' [ 1659.988974][T29715] netlink: Failed to add  helper -22 [ 1662.356193][T29773] No such timeout policy "" [ 1662.475984][T29773] netlink: Failed to associated timeout policy '' [ 1663.033400][T29783] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1663.176593][T29783] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1663.235329][T29783] FAULT_INJECTION: forcing a failure. [ 1663.235329][T29783] name failslab, interval 1, probability 0, space 0, times 0 [ 1663.430041][T29783] CPU: 0 UID: 0 PID: 29783 Comm: syz.4.6414 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 1663.430076][T29783] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 1663.430085][T29783] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1663.430094][T29783] Call Trace: [ 1663.430100][T29783] [ 1663.430106][T29783] dump_stack_lvl+0x16c/0x1f0 [ 1663.430129][T29783] should_fail_ex+0x512/0x640 [ 1663.430151][T29783] ? finish_task_switch.isra.0+0x221/0xc10 [ 1663.430170][T29783] should_failslab+0xc2/0x120 [ 1663.430190][T29783] kmem_cache_alloc_node_noprof+0x78/0x770 [ 1663.430206][T29783] ? __alloc_skb+0x2b2/0x380 [ 1663.430226][T29783] ? trace_sched_exit_tp+0xd1/0x120 [ 1663.430252][T29783] ? __alloc_skb+0x2b2/0x380 [ 1663.430271][T29783] __alloc_skb+0x2b2/0x380 [ 1663.430293][T29783] ? __pfx___alloc_skb+0x10/0x10 [ 1663.430314][T29783] ? __pfx_up+0x10/0x10 [ 1663.430339][T29783] hci_cmd_sync_alloc+0x39/0x3a0 [ 1663.430362][T29783] __hci_cmd_sync_sk+0x157/0xc90 [ 1663.430383][T29783] ? __pfx___hci_cmd_sync_sk+0x10/0x10 [ 1663.430403][T29783] ? preempt_schedule_thunk+0x16/0x30 [ 1663.430435][T29783] ? vprintk_emit+0x1e6/0x680 [ 1663.430451][T29783] ? __pfx_vprintk_emit+0x10/0x10 [ 1663.430470][T29783] __hci_cmd_sync_status_sk+0x48/0x190 [ 1663.430493][T29783] hci_disconnect_sync+0x143/0x1e0 [ 1663.430509][T29783] ? __pfx_hci_disconnect_sync+0x10/0x10 [ 1663.430530][T29783] hci_abort_conn_sync+0x4f5/0xb20 [ 1663.430552][T29783] ? __pfx_hci_abort_conn_sync+0x10/0x10 [ 1663.430573][T29783] ? find_held_lock+0x2b/0x80 [ 1663.430602][T29783] ? hci_disconnect_all_sync.constprop.0+0x77/0x3c0 [ 1663.430625][T29783] ? hci_disconnect_all_sync.constprop.0+0x77/0x3c0 [ 1663.430646][T29783] hci_disconnect_all_sync.constprop.0+0x104/0x3c0 [ 1663.430671][T29783] hci_suspend_sync+0x821/0xb20 [ 1663.430691][T29783] ? __pfx_enable_work+0x10/0x10 [ 1663.430708][T29783] ? __pfx_hci_suspend_sync+0x10/0x10 [ 1663.430740][T29783] hci_suspend_dev+0x308/0x500 [ 1663.430757][T29783] ? __pfx_hci_suspend_dev+0x10/0x10 [ 1663.430772][T29783] ? rcu_barrier+0x341/0x6e0 [ 1663.430794][T29783] ? kobject_get+0xbb/0x150 [ 1663.430814][T29783] hci_suspend_notifier+0x28d/0x2f0 [ 1663.430834][T29783] notifier_call_chain+0xbc/0x410 [ 1663.430854][T29783] ? __pfx_hci_suspend_notifier+0x10/0x10 [ 1663.430876][T29783] blocking_notifier_call_chain_robust+0xc8/0x160 [ 1663.430900][T29783] ? __pfx_blocking_notifier_call_chain_robust+0x10/0x10 [ 1663.430927][T29783] pm_notifier_call_chain_robust+0x27/0x60 [ 1663.430947][T29783] snapshot_open+0x189/0x2b0 [ 1663.430964][T29783] ? __pfx_snapshot_open+0x10/0x10 [ 1663.430981][T29783] misc_open+0x26d/0x450 [ 1663.431003][T29783] ? __pfx_misc_open+0x10/0x10 [ 1663.431023][T29783] chrdev_open+0x234/0x6a0 [ 1663.431040][T29783] ? __pfx_apparmor_file_open+0x10/0x10 [ 1663.431061][T29783] ? __pfx_chrdev_open+0x10/0x10 [ 1663.431080][T29783] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 1663.431102][T29783] do_dentry_open+0x982/0x1530 [ 1663.431122][T29783] ? __pfx_chrdev_open+0x10/0x10 [ 1663.431143][T29783] vfs_open+0x82/0x3f0 [ 1663.431165][T29783] path_openat+0x1de4/0x2cb0 [ 1663.431197][T29783] ? __pfx_path_openat+0x10/0x10 [ 1663.431216][T29783] ? __lock_acquire+0xb8a/0x1c90 [ 1663.431239][T29783] do_filp_open+0x20b/0x470 [ 1663.431256][T29783] ? __pfx_do_filp_open+0x10/0x10 [ 1663.431288][T29783] ? alloc_fd+0x471/0x7d0 [ 1663.431309][T29783] do_sys_openat2+0x11b/0x1d0 [ 1663.431329][T29783] ? __pfx_do_sys_openat2+0x10/0x10 [ 1663.431350][T29783] ? __pfx___might_resched+0x10/0x10 [ 1663.431371][T29783] __x64_sys_openat+0x174/0x210 [ 1663.431392][T29783] ? __pfx___x64_sys_openat+0x10/0x10 [ 1663.431421][T29783] do_syscall_64+0xcd/0xfa0 [ 1663.431440][T29783] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1663.431454][T29783] RIP: 0033:0x7f94d918f6c9 [ 1663.431467][T29783] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1663.431481][T29783] RSP: 002b:00007f94d9f5e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1663.431497][T29783] RAX: ffffffffffffffda RBX: 00007f94d93e6180 RCX: 00007f94d918f6c9 [ 1663.431507][T29783] RDX: 0000000000000400 RSI: 0000200000000200 RDI: ffffffffffffff9c [ 1663.431517][T29783] RBP: 00007f94d9211f91 R08: 0000000000000000 R09: 0000000000000000 [ 1663.431527][T29783] R10: 000000000000003f R11: 0000000000000246 R12: 0000000000000000 [ 1663.431536][T29783] R13: 00007f94d93e6218 R14: 00007f94d93e6180 R15: 00007fffe149cd98 [ 1663.431557][T29783] [ 1664.338235][T29783] Bluetooth: hci4: no memory for command (opcode 0x0406) [ 1664.345391][T29783] Bluetooth: hci4: Opcode 0x0406 failed: -12 [ 1665.045412][T15900] Bluetooth: hci1: command 0x0c1a tx timeout [ 1665.194308][T15900] Bluetooth: hci4: command 0x040f tx timeout [ 1666.079483][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 1666.085811][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1666.636674][T29802] netlink: 330 bytes leftover after parsing attributes in process `syz.0.6420'. [ 1666.645723][T29802] mac80211_hwsim hwsim129 ": renamed from wlan0 (while UP) [ 1666.731836][T29783] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1666.888175][T29783] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1667.042783][T29783] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1667.107103][T29783] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1667.129214][T29783] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1667.178809][T29783] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1667.204695][T29783] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1667.234301][T29783] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1667.282039][T29783] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1667.324069][T29783] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1667.352453][T29783] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1667.375239][T29783] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1667.403693][T29783] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1667.417206][T29783] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1667.456638][T29783] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1667.470298][T29783] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1667.519168][T29783] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1667.531356][T29783] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1667.547856][T29783] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1667.574565][T29783] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1667.600996][T29783] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1667.620799][T29783] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1667.640624][T29783] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1667.650369][T29783] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1667.666481][T29783] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1667.686132][T29783] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1667.706244][T29783] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1667.728927][T29783] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1667.753112][T29783] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1667.766836][T29783] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1667.779452][T29783] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1667.803975][T29783] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1667.838110][T29783] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1667.853928][T29783] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1667.880505][T29783] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1667.894353][T29783] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1667.942387][T29783] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1667.962445][T29783] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 1667.985391][T29783] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 1668.002588][T29783] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 1668.039139][T29783] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 1668.065007][T29783] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 1668.081915][T29783] Bluetooth: hci7: Opcode 0x0406 failed: -4 [ 1668.105458][T29783] Bluetooth: hci7: Opcode 0x0406 failed: -4 [ 1668.161829][T29783] Bluetooth: hci7: Opcode 0x0406 failed: -4 [ 1668.198870][T29783] Bluetooth: hci8: Opcode 0x0c1a failed: -4 [ 1668.204801][T29783] Bluetooth: hci8: Opcode 0x0406 failed: -4 [ 1668.253620][T29783] Bluetooth: hci8: Opcode 0x0406 failed: -4 [ 1668.310958][T29783] Bluetooth: hci9: Opcode 0x0c1a failed: -4 [ 1668.333729][T29783] Bluetooth: hci9: Opcode 0x0406 failed: -4 [ 1668.384775][T29783] Bluetooth: hci9: Opcode 0x0406 failed: -4 [ 1668.779264][T29821] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6424'. [ 1668.855381][T15900] Bluetooth: hci4: command 0x040f tx timeout [ 1668.994398][T29823] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6426'. [ 1669.180493][T29826] netlink: 190 bytes leftover after parsing attributes in process `syz.3.6428'. [ 1669.192799][T29823] bridge_slave_1: left allmulticast mode [ 1669.254596][T29823] bridge_slave_1: left promiscuous mode [ 1669.327361][T29823] bridge0: port 2(bridge_slave_1) entered disabled state [ 1669.457956][T29823] bridge_slave_0: left allmulticast mode [ 1669.522643][T29823] bridge_slave_0: left promiscuous mode [ 1669.593716][T29823] bridge0: port 1(bridge_slave_0) entered disabled state [ 1669.635820][T29837] No such timeout policy "" [ 1669.651668][T29837] netlink: Failed to associated timeout policy '' [ 1669.891366][T15900] Bluetooth: hci0: command 0x0406 tx timeout [ 1669.897735][T29825] ima: policy update failed [ 1669.902476][ T52] Bluetooth: hci2: command 0x0c1a tx timeout [ 1669.908486][T26462] Bluetooth: hci3: command 0x0419 tx timeout [ 1669.928744][ T30] audit: type=1802 audit(4294988159.954:92): pid=29825 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.3.6428" res=0 errno=0 [ 1669.969206][T15900] Bluetooth: hci5: command 0x0406 tx timeout [ 1670.007407][T29842] ERROR: Out of memory at tomoyo_memory_ok. [ 1670.048598][T15900] Bluetooth: hci6: command 0x0c1a tx timeout [ 1670.129381][T15900] Bluetooth: hci7: command 0x0c1a tx timeout [ 1670.208552][T15900] Bluetooth: hci8: command 0x0c1a tx timeout [ 1670.367025][T15900] Bluetooth: hci9: command 0x0c1a tx timeout [ 1670.412177][T29849] FAULT_INJECTION: forcing a failure. [ 1670.412177][T29849] name failslab, interval 1, probability 0, space 0, times 0 [ 1670.492489][T29849] CPU: 0 UID: 0 PID: 29849 Comm: syz.1.6436 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 1670.492523][T29849] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 1670.492532][T29849] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1670.492541][T29849] Call Trace: [ 1670.492547][T29849] [ 1670.492553][T29849] dump_stack_lvl+0x16c/0x1f0 [ 1670.492575][T29849] should_fail_ex+0x512/0x640 [ 1670.492597][T29849] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 1670.492614][T29849] should_failslab+0xc2/0x120 [ 1670.492634][T29849] kmem_cache_alloc_noprof+0x75/0x6e0 [ 1670.492648][T29849] ? __kernfs_new_node+0xd2/0x8e0 [ 1670.492670][T29849] ? __kernfs_new_node+0xd2/0x8e0 [ 1670.492687][T29849] __kernfs_new_node+0xd2/0x8e0 [ 1670.492708][T29849] ? __pfx___kernfs_new_node+0x10/0x10 [ 1670.492731][T29849] ? find_held_lock+0x2b/0x80 [ 1670.492746][T29849] ? kernfs_root+0xee/0x2a0 [ 1670.492768][T29849] kernfs_new_node+0x13c/0x1e0 [ 1670.492792][T29849] kernfs_create_link+0xcc/0x240 [ 1670.492809][T29849] sysfs_do_create_link_sd+0x90/0x140 [ 1670.492828][T29849] sysfs_create_link+0x61/0xc0 [ 1670.492845][T29849] driver_sysfs_add+0x91/0x2d0 [ 1670.492871][T29849] device_bind_driver+0x16/0x70 [ 1670.492891][T29849] mac80211_hwsim_new_radio+0x3e8/0x50b0 [ 1670.492918][T29849] ? __asan_memset+0x23/0x50 [ 1670.492934][T29849] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 1670.492956][T29849] hwsim_new_radio_nl+0xba2/0x1330 [ 1670.492974][T29849] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1670.492996][T29849] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 1670.493015][T29849] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 1670.493038][T29849] genl_family_rcv_msg_doit+0x209/0x2f0 [ 1670.493058][T29849] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1670.493083][T29849] ? bpf_lsm_capable+0x9/0x10 [ 1670.493101][T29849] ? security_capable+0x7e/0x260 [ 1670.493121][T29849] ? ns_capable+0xd7/0x110 [ 1670.493139][T29849] genl_rcv_msg+0x55c/0x800 [ 1670.493158][T29849] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1670.493176][T29849] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1670.493198][T29849] netlink_rcv_skb+0x158/0x420 [ 1670.493214][T29849] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1670.493232][T29849] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1670.493256][T29849] ? netlink_deliver_tap+0x1ae/0xd30 [ 1670.493273][T29849] genl_rcv+0x28/0x40 [ 1670.493288][T29849] netlink_unicast+0x5aa/0x870 [ 1670.493307][T29849] ? __pfx_netlink_unicast+0x10/0x10 [ 1670.493330][T29849] netlink_sendmsg+0x8c8/0xdd0 [ 1670.493349][T29849] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1670.493367][T29849] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 1670.493391][T29849] ____sys_sendmsg+0xa98/0xc70 [ 1670.493410][T29849] ? copy_msghdr_from_user+0x10a/0x160 [ 1670.493424][T29849] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1670.493447][T29849] ? __pfx_futex_wake_mark+0x10/0x10 [ 1670.493472][T29849] ___sys_sendmsg+0x134/0x1d0 [ 1670.493487][T29849] ? __pfx____sys_sendmsg+0x10/0x10 [ 1670.493500][T29849] ? __lock_acquire+0x622/0x1c90 [ 1670.493543][T29849] __sys_sendmsg+0x16d/0x220 [ 1670.493558][T29849] ? __pfx___sys_sendmsg+0x10/0x10 [ 1670.493571][T29849] ? __x64_sys_futex+0x1e0/0x4c0 [ 1670.493602][T29849] do_syscall_64+0xcd/0xfa0 [ 1670.493621][T29849] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1670.493636][T29849] RIP: 0033:0x7f79e7f8f6c9 [ 1670.493649][T29849] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1670.493665][T29849] RSP: 002b:00007f79e8f0c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1670.493680][T29849] RAX: ffffffffffffffda RBX: 00007f79e81e5fa0 RCX: 00007f79e7f8f6c9 [ 1670.493689][T29849] RDX: 0000000000008000 RSI: 0000200000000200 RDI: 0000000000000007 [ 1670.493699][T29849] RBP: 00007f79e8011f91 R08: 0000000000000000 R09: 0000000000000000 [ 1670.493707][T29849] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1670.493716][T29849] R13: 00007f79e81e6038 R14: 00007f79e81e5fa0 R15: 00007fff4e8a7708 [ 1670.493737][T29849] [ 1671.485286][T15900] Bluetooth: hci4: command 0x040f tx timeout [ 1671.797796][T29862] i2c i2c-0: dvb_frontend_start: failed to start kthread (-4) [ 1672.005598][ T52] Bluetooth: hci0: command 0x0406 tx timeout [ 1672.079489][ T52] Bluetooth: hci5: command 0x0406 tx timeout [ 1672.137592][ T52] Bluetooth: hci6: command 0x0c1a tx timeout [ 1672.219318][ T52] Bluetooth: hci7: command 0x0c1a tx timeout [ 1672.276995][ T52] Bluetooth: hci8: command 0x0c1a tx timeout [ 1672.446179][ T52] Bluetooth: hci9: command 0x0c1a tx timeout [ 1672.487415][T29869] No such timeout policy "" [ 1672.532886][T29869] netlink: Failed to associated timeout policy '' [ 1673.420752][T29897] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6451'. [ 1673.553224][T15900] Bluetooth: hci4: command 0x040f tx timeout [ 1673.908020][T29910] Invalid ELF header magic: != ELF [ 1674.187101][T15900] Bluetooth: hci6: command 0x0c1a tx timeout [ 1674.271560][T15900] Bluetooth: hci7: command 0x0c1a tx timeout [ 1674.346413][T15900] Bluetooth: hci8: command 0x0c1a tx timeout [ 1674.506387][T15900] Bluetooth: hci9: command 0x0c1a tx timeout [ 1675.245378][T29936] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6463'. [ 1675.348997][T29934] Invalid ELF header magic: != ELF [ 1675.627212][T15900] Bluetooth: hci4: command 0x040f tx timeout [ 1676.336125][T15900] Bluetooth: hci7: command 0x0c1a tx timeout [ 1677.689725][T15900] Bluetooth: hci4: command 0x040f tx timeout [ 1677.883071][T29998] Invalid ELF header magic: != ELF [ 1679.763282][T15900] Bluetooth: hci4: command 0x040f tx timeout [ 1680.894847][T30066] FAULT_INJECTION: forcing a failure. [ 1680.894847][T30066] name failslab, interval 1, probability 0, space 0, times 0 [ 1681.059549][T30066] CPU: 0 UID: 0 PID: 30066 Comm: syz.4.6498 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 1681.059633][T30066] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 1681.059641][T30066] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1681.059654][T30066] Call Trace: [ 1681.059660][T30066] [ 1681.059666][T30066] dump_stack_lvl+0x16c/0x1f0 [ 1681.059690][T30066] should_fail_ex+0x512/0x640 [ 1681.059712][T30066] ? __kvmalloc_node_noprof+0x12e/0x9c0 [ 1681.059732][T30066] should_failslab+0xc2/0x120 [ 1681.059751][T30066] __kvmalloc_node_noprof+0x141/0x9c0 [ 1681.059770][T30066] ? __pfx_aa_file_perm+0x10/0x10 [ 1681.059788][T30066] ? seq_read_iter+0x830/0x12d0 [ 1681.059809][T30066] ? __lock_acquire+0xb8a/0x1c90 [ 1681.059831][T30066] ? seq_read_iter+0x830/0x12d0 [ 1681.059851][T30066] seq_read_iter+0x830/0x12d0 [ 1681.059881][T30066] kernfs_fop_read_iter+0x46c/0x610 [ 1681.059896][T30066] ? rw_verify_area+0xcf/0x6c0 [ 1681.059914][T30066] vfs_read+0x8bf/0xcf0 [ 1681.059932][T30066] ? __pfx___mutex_lock+0x10/0x10 [ 1681.059951][T30066] ? __pfx_vfs_read+0x10/0x10 [ 1681.059979][T30066] ksys_read+0x12a/0x250 [ 1681.059994][T30066] ? __pfx_ksys_read+0x10/0x10 [ 1681.060015][T30066] do_syscall_64+0xcd/0xfa0 [ 1681.060033][T30066] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1681.060049][T30066] RIP: 0033:0x7f94d918f6c9 [ 1681.060061][T30066] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1681.060076][T30066] RSP: 002b:00007f94d9f7f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1681.060090][T30066] RAX: ffffffffffffffda RBX: 00007f94d93e6090 RCX: 00007f94d918f6c9 [ 1681.060100][T30066] RDX: 000000000000007a RSI: 0000200000000140 RDI: 0000000000000003 [ 1681.060108][T30066] RBP: 00007f94d9211f91 R08: 0000000000000000 R09: 0000000000000000 [ 1681.060117][T30066] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1681.060125][T30066] R13: 00007f94d93e6128 R14: 00007f94d93e6090 R15: 00007fffe149cd98 [ 1681.060145][T30066] [ 1681.879252][T15900] Bluetooth: hci4: command 0x040f tx timeout [ 1683.614166][T30118] netlink: 'syz.0.6513': attribute type 27 has an invalid length. [ 1683.654638][T30118] netlink: 146 bytes leftover after parsing attributes in process `syz.0.6513'. [ 1683.897145][T15900] Bluetooth: hci4: command 0x040f tx timeout [ 1684.152864][T30131] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6516'. [ 1685.049469][T30153] netlink: 186 bytes leftover after parsing attributes in process `syz.3.6523'. [ 1685.971758][T15900] Bluetooth: hci4: command 0x040f tx timeout [ 1686.193597][T30177] No such timeout policy "" [ 1686.210775][T30177] netlink: Failed to associated timeout policy '' [ 1686.773487][T22896] Trying to write to read-only block-device sda1 [ 1687.450798][T30204] ERROR: Out of memory at tomoyo_memory_ok. [ 1687.504642][T30203] ERROR: Out of memory at tomoyo_memory_ok. [ 1687.552645][T30202] FAULT_INJECTION: forcing a failure. [ 1687.552645][T30202] name failslab, interval 1, probability 0, space 0, times 0 [ 1687.668224][T30202] CPU: 0 UID: 0 PID: 30202 Comm: syz.1.6537 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 1687.668258][T30202] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 1687.668267][T30202] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1687.668276][T30202] Call Trace: [ 1687.668281][T30202] [ 1687.668287][T30202] dump_stack_lvl+0x16c/0x1f0 [ 1687.668309][T30202] should_fail_ex+0x512/0x640 [ 1687.668332][T30202] ? __kmalloc_noprof+0xca/0x880 [ 1687.668357][T30202] should_failslab+0xc2/0x120 [ 1687.668376][T30202] __kmalloc_noprof+0xdd/0x880 [ 1687.668399][T30202] ? lsm_blob_alloc+0x68/0x90 [ 1687.668420][T30202] ? lsm_blob_alloc+0x68/0x90 [ 1687.668436][T30202] lsm_blob_alloc+0x68/0x90 [ 1687.668454][T30202] security_sk_alloc+0x30/0x270 [ 1687.668476][T30202] sk_prot_alloc+0xfb/0x2a0 [ 1687.668496][T30202] sk_alloc+0x36/0xc20 [ 1687.668519][T30202] unix_create1+0xa6/0x700 [ 1687.668540][T30202] unix_create+0x110/0x270 [ 1687.668560][T30202] __sock_create+0x338/0x8d0 [ 1687.668583][T30202] __sys_socketpair+0x1d8/0x5a0 [ 1687.668604][T30202] ? __pfx___sys_socketpair+0x10/0x10 [ 1687.668622][T30202] ? __sys_socket+0xac/0x260 [ 1687.668643][T30202] ? xfd_validate_state+0x61/0x180 [ 1687.668663][T30202] ? getname_flags.part.0+0x1c5/0x550 [ 1687.668688][T30202] __x64_sys_socketpair+0x96/0x100 [ 1687.668707][T30202] ? lockdep_hardirqs_on+0x7c/0x110 [ 1687.668731][T30202] do_syscall_64+0xcd/0xfa0 [ 1687.668750][T30202] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1687.668765][T30202] RIP: 0033:0x7f79e7f8f6c9 [ 1687.668777][T30202] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1687.668791][T30202] RSP: 002b:00007f79e8f0c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 1687.668805][T30202] RAX: ffffffffffffffda RBX: 00007f79e81e5fa0 RCX: 00007f79e7f8f6c9 [ 1687.668815][T30202] RDX: 8000000000000000 RSI: 0000000000000002 RDI: 0000000000000001 [ 1687.668824][T30202] RBP: 00007f79e8011f91 R08: 0000000000000000 R09: 0000000000000000 [ 1687.668833][T30202] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1687.668841][T30202] R13: 00007f79e81e6038 R14: 00007f79e81e5fa0 R15: 00007fff4e8a7708 [ 1687.668861][T30202] [ 1688.185065][T30208] netlink: NAT attribute type 6 has unexpected length (4 != 2) [ 1688.260581][T15900] Bluetooth: hci4: command 0x040f tx timeout [ 1688.413606][ T31] INFO: task syz.8.5927:27677 blocked for more than 143 seconds. [ 1688.421346][ T31] Tainted: G U W L XTNJ syzkaller #0 [ 1688.464825][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1688.506237][ T31] task:syz.8.5927 state:D stack:27672 pid:27677 tgid:27676 ppid:26450 task_flags:0x400140 flags:0x00080002 [ 1688.572150][ T31] Call Trace: [ 1688.581157][ T31] [ 1688.585883][ T31] __schedule+0x1190/0x5de0 [ 1688.610828][ T31] ? check_path.constprop.0+0x24/0x50 [ 1688.632844][ T31] ? __lock_acquire+0x622/0x1c90 [ 1688.651856][ T31] ? __pfx___schedule+0x10/0x10 [ 1688.680182][ T31] ? find_held_lock+0x2b/0x80 [ 1688.707121][ T31] ? schedule+0x2d7/0x3a0 [ 1688.725926][ T31] ? nfsd_nl_version_set_doit+0xc4/0x7a0 [ 1688.743486][ T31] schedule+0xe7/0x3a0 [ 1688.764479][ T31] schedule_preempt_disabled+0x13/0x30 [ 1688.794438][ T31] __mutex_lock+0x818/0x1060 [ 1688.820926][ T31] ? nfsd_nl_version_set_doit+0xc4/0x7a0 [ 1688.836740][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1688.866150][ T31] ? __nla_validate_parse+0x600/0x2880 [ 1688.894498][ T31] ? __pfx___nla_validate_parse+0x10/0x10 [ 1688.915098][ T31] ? nfsd_nl_version_set_doit+0xc4/0x7a0 [ 1688.942613][ T31] nfsd_nl_version_set_doit+0xc4/0x7a0 [ 1688.961096][ T31] ? __pfx_nfsd_nl_version_set_doit+0x10/0x10 [ 1688.993086][ T31] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 1689.026434][ T31] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 1689.062744][ T31] genl_family_rcv_msg_doit+0x209/0x2f0 [ 1689.086649][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1689.131135][ T31] ? rcu_is_watching+0x12/0xc0 [ 1689.153329][ T31] ? bpf_lsm_capable+0x9/0x10 [ 1689.174337][ T31] ? security_capable+0x7e/0x260 [ 1689.199180][ T31] genl_rcv_msg+0x55c/0x800 [ 1689.218453][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1689.249735][ T31] ? __pfx_nfsd_nl_version_set_doit+0x10/0x10 [ 1689.280631][ T31] netlink_rcv_skb+0x158/0x420 [ 1689.298160][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1689.326356][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1689.357200][ T31] ? netlink_deliver_tap+0x1ae/0xd30 [ 1689.382707][ T31] genl_rcv+0x28/0x40 [ 1689.405568][ T31] netlink_unicast+0x5aa/0x870 [ 1689.428195][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 1689.455993][ T31] ? __pfx___might_resched+0x10/0x10 [ 1689.480566][ T31] netlink_sendmsg+0x8c8/0xdd0 [ 1689.509553][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1689.527189][ T31] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 1689.560857][ T31] ____sys_sendmsg+0xa98/0xc70 [ 1689.581795][ T31] ? copy_msghdr_from_user+0x10a/0x160 [ 1689.606064][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1689.634970][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 1689.661623][ T31] ? try_to_wake_up+0xa67/0x1870 [ 1689.690797][ T31] ___sys_sendmsg+0x134/0x1d0 [ 1689.705312][ T31] ? find_held_lock+0x2b/0x80 [ 1689.729169][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 1689.751511][ T31] ? __lock_acquire+0x622/0x1c90 [ 1689.784334][ T31] __sys_sendmsg+0x16d/0x220 [ 1689.799917][ T31] ? __pfx___sys_sendmsg+0x10/0x10 [ 1689.823021][ T31] ? __x64_sys_futex+0x1e0/0x4c0 [ 1689.847888][ T31] do_syscall_64+0xcd/0xfa0 [ 1689.871560][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1689.900754][ T31] RIP: 0033:0x7fa662d8f6c9 [ 1689.922925][ T31] RSP: 002b:00007fa663c2a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1689.964407][ T31] RAX: ffffffffffffffda RBX: 00007fa662fe5fa0 RCX: 00007fa662d8f6c9 [ 1690.007768][ T31] RDX: 0000000000000844 RSI: 00002000000004c0 RDI: 0000000000000006 [ 1690.044986][ T31] RBP: 00007fa662e11f91 R08: 0000000000000000 R09: 0000000000000000 [ 1690.081517][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1690.120619][ T31] R13: 00007fa662fe6038 R14: 00007fa662fe5fa0 R15: 00007fff68f70e88 [ 1690.156804][ T31] [ 1690.170590][ T31] [ 1690.170590][ T31] Showing all locks held in the system: [ 1690.271348][ T52] Bluetooth: hci4: command 0x040f tx timeout [ 1690.322214][ T31] 1 lock held by khungtaskd/31: [ 1690.362219][ T31] #0: ffffffff8e3c45e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0 [ 1690.408709][ T31] 2 locks held by udevd/5199: [ 1690.439560][ T31] 1 lock held by syz.0.2089/13984: [ 1690.463204][ T31] 2 locks held by getty/25714: [ 1690.484531][ T31] #0: ffff88814cee50a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 1690.531316][ T31] #1: ffffc900030462f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x14f0 [ 1690.582374][ T31] 2 locks held by syz.7.5894/27534: [ 1690.604008][ T31] #0: ffffffff9018ee90 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1690.662139][ T31] #1: ffffffff8e7ed348 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x687/0xbc0 [ 1690.696400][ T31] 2 locks held by syz.8.5927/27677: [ 1690.718758][ T31] #0: ffffffff9018ee90 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1690.769025][ T31] #1: ffffffff8e7ed348 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_version_set_doit+0xc4/0x7a0 [ 1690.812707][ T31] 2 locks held by syz-executor/27712: [ 1690.832501][ T31] #0: ffff888067d700e0 (&type->s_umount_key#51){++++}-{4:4}, at: deactivate_super+0xd6/0x100 [ 1690.886506][ T31] #1: ffffffff8e7ed348 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 1690.939898][ T31] 2 locks held by syz.5.5970/27828: [ 1690.955710][ T31] #0: ffffffff9018ee90 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1690.996257][ T31] #1: ffffffff8e7ed348 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0xd5/0x1b10 [ 1691.040072][ T31] 2 locks held by syz.2.6051/28397: [ 1691.065607][ T31] #0: ffffffff9018ee90 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1691.104256][ T31] #1: ffffffff8e7ed348 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x687/0xbc0 [ 1691.153216][ T31] 1 lock held by syz.0.6516/30132: [ 1691.158334][ T31] 4 locks held by syz.3.6534/30194: [ 1691.203631][ T31] [ 1691.208183][ T31] ============================================= [ 1691.208183][ T31] [ 1691.288969][ T31] NMI backtrace for cpu 0 [ 1691.288986][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 1691.289016][ T31] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 1691.289024][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1691.289032][ T31] Call Trace: [ 1691.289037][ T31] [ 1691.289043][ T31] dump_stack_lvl+0x116/0x1f0 [ 1691.289065][ T31] nmi_cpu_backtrace+0x27b/0x390 [ 1691.289088][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1691.289110][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 1691.289134][ T31] watchdog+0xf3f/0x1170 [ 1691.289151][ T31] ? rcu_is_watching+0x12/0xc0 [ 1691.289166][ T31] ? __pfx_watchdog+0x10/0x10 [ 1691.289179][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 1691.289197][ T31] ? __kthread_parkme+0x19e/0x250 [ 1691.289216][ T31] ? __pfx_watchdog+0x10/0x10 [ 1691.289229][ T31] kthread+0x3c5/0x780 [ 1691.289250][ T31] ? __pfx_kthread+0x10/0x10 [ 1691.289277][ T31] ? rcu_is_watching+0x12/0xc0 [ 1691.289292][ T31] ? __pfx_kthread+0x10/0x10 [ 1691.289312][ T31] ret_from_fork+0x675/0x7d0 [ 1691.289334][ T31] ? __pfx_kthread+0x10/0x10 [ 1691.289354][ T31] ret_from_fork_asm+0x1a/0x30 [ 1691.289383][ T31] [ 1692.332917][ T52] Bluetooth: hci4: command 0x040f tx timeout [ 1694.402004][ T52] Bluetooth: hci4: command 0x040f tx timeout [ 1696.471184][ T52] Bluetooth: hci4: command 0x040f tx timeout