last executing test programs: 12m32.279791067s ago: executing program 1 (id=884): r0 = socket(0xa, 0x5, 0x0) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop13\x00', 0x60742, 0x0) write$auto(r1, &(0x7f0000000040)='//\xf2\x00', 0x80000000) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) timer_create$auto(0x0, 0x0, 0x0) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r2, 0x0, 0x0) mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) unshare$auto(0x40000080) mmap$auto(0x0, 0x2020009, 0x2, 0xeb1, 0xfffffffffffffffa, 0x8000) r3 = socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0xd, 0x2, 0x6, 0x7, 0x8, 0xffffffffffffffff, [0x0, 0x0, 0x9], {0x6, 0x6, 0xf, 0x29f, 0x100, 0x83, 0x101, 0x6, 0x2}, {0x100, 0x1, 0x52, 0x5, 0x5, 0x40, 0x76c5, 0x8, 0x100000000}}) io_uring_register$auto(0x2, 0x11, &(0x7f0000000180), 0x83) sendmsg$auto_NL80211_CMD_LEAVE_OCB(r3, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f00000010c0)=ANY=[@ANYBLOB="300000919ca5eaf4f2e03124cb490ca7f8", @ANYRES16=0x0, @ANYBLOB="000028bd7000fcdbdf256d00000007000a00107c4c000400d1000600b400030000000500020000000000"], 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) set_mempolicy_home_node$auto(0x0, 0x2010001, 0x0, 0x0) mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000) clone$auto(0x10051c, 0x6, 0x0, 0xffffffffffffffff, 0x80000001) shutdown$auto(r0, 0xfff) socket(0x2, 0x1, 0x0) mmap$auto(0x0, 0x5, 0xfffffffffffffe01, 0x8011, 0x3, 0x8000) r4 = openat$auto_proc_pid_numa_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/numa_maps\x00', 0x22000, 0x0) read$auto_proc_sessionid_operations_base(r4, &(0x7f00000000c0)=""/4096, 0x1000) 12m30.552343296s ago: executing program 1 (id=889): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/oom_adj\x00', 0x300, 0x0) read$auto(r0, 0x0, 0x1f40) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x8002, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_TIPC_NL_SOCK_GET(r2, &(0x7f00000022c0)={0x0, 0x0, &(0x7f0000002280)={&(0x7f0000000300)={0x14, r3, 0xe77c815741d6438d, 0x70bd29, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x42010}, 0x8cc) r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000140), 0xffffffffffffffff) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$auto(0x10, r5, 0x4, 0x7ff) ptrace$auto(0xd, r5, 0x7f8, 0xd5) r6 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000840), 0x82200, 0x0) ioctl$auto_VHOST_SET_VRING_BASE(r6, 0x4008af12, &(0x7f0000000880)={0x5}) msgctl$auto_IPC_RMID(0xffff, 0x0, &(0x7f0000000200)={{0xbc89, 0xee00, 0xffffffffffffffff, 0x9, 0xf, 0x7fff, 0xf}, &(0x7f0000000180)=0x58, &(0x7f00000001c0)=0x89, 0xcad, 0x4, 0x4401, 0x4b, 0x8, 0xff1, 0x8, 0xe, @raw=0x3, @raw=0x100}) sendmsg$auto_NL80211_CMD_UPDATE_OWE_INFO(r2, &(0x7f0000000800)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000280)={0x14c, r4, 0x100, 0x70bd26, 0x25dfdbfc, {}, [@NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x100}, @NL80211_ATTR_HT_CAPABILITY={0x4}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x65206225}, @NL80211_ATTR_CENTER_FREQ1_OFFSET={0x8, 0x123, 0x9}, @NL80211_ATTR_WOWLAN_TRIGGERS={0x10e, 0x75, 0x0, 0x1, [@typed={0xc, 0x1b, 0x0, 0x0, @u64=0x9}, @nested={0x2c, 0x149, 0x0, 0x1, [@typed={0x10, 0x59, 0x0, 0x0, @str='\\@#!/*/[![&\x00'}, @typed={0x8, 0x131, 0x0, 0x0, @uid=r7}, @nested={0x4, 0x33}, @typed={0x8, 0x11b, 0x0, 0x0, @ipv4=@rand_addr=0x64010102}, @nested={0x4, 0x4d}]}, @generic="166cd7da04fc1a99d02ef3db7379cf274db6e0c468de3afc09ec66891e1d30d7d2f2c675bc09517a91293d24026a270928721bc5572bbc005e8dd4ad9a71d94b667f4d092fb20751579fa55024ad124ef4145a480991d68b113c9195dddd4aee6b61c86c2839a41db9ebe9f1b16a42c5a22699cdd2b8e14c2a92acbc5f31ce130be69ba4909d4f33f2ce891897cd7e1366984a1f3e7df6201874517899e78d853d8b6351d3d3", @nested={0x2c, 0x27, 0x0, 0x1, [@nested={0x4, 0xd2}, @generic="93f5a498b66bc2a8e00b79b63d55502fb94d14c4a1d15a315017f670d35aa9b9594978a5"]}]}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x1}, @NL80211_ATTR_MLO_SUPPORT={0x4}]}, 0x14c}, 0x1, 0x0, 0x0, 0x4040000}, 0x2008084) writev$auto(r1, &(0x7f00000000c0)={0x0, 0x7}, 0x3) set_mempolicy$auto(0x6, &(0x7f0000000080)=0x3, 0x21) unshare$auto(0x40000080) 12m25.406930546s ago: executing program 1 (id=907): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000000)='/proc/swaps\x00', 0x1a3000, 0x0) (async) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x34d802, 0x0) (async) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) (async) write$auto_seq_oss_f_ops_seq_oss(0xffffffffffffffff, &(0x7f0000000040)="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", 0x412) (async) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/nr14/proto_down\x00', 0x82942, 0x0) (async, rerun: 64) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x189401, 0x0) close_range$auto(0x2, 0x8, 0x0) r3 = socketcall$auto(0x8000, 0x0) (async) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) (async, rerun: 32) ioctl$auto(0x3, 0xae60, 0x10000000000402) (async, rerun: 32) ioctl$auto(0x3, 0xae41, r3) (async) ioctl$auto_KVM_GET_MSRS(r2, 0x4400ae8f, &(0x7f00000000c0)={0xdd}) (async) ioctl$auto_KVM_CREATE_VM(r1, 0xae80, 0x0) (async, rerun: 64) pread64$auto(r0, 0x0, 0xa8, 0x4) (rerun: 64) 12m22.174314261s ago: executing program 1 (id=921): mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) write$auto(r0, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x5) flock$auto(r0, 0x5) getsockopt$auto_SO_TXREHASH(r0, 0x8, 0x4a, &(0x7f00000001c0)='/sy\xf3/devices/\"\xd2z\xbc\xcb\xa4I\xf0\x1a\xc0platform/iC\x15\x96\x9d\xd7\xbb\xf3\v\xf8\x85oluti\xec\xed\xe9\xaf\xf5\xe61\xd5p\xf8\x10\xa5\xec3\x82\x80\xa8\x1a@\x8f\x00'/83, &(0x7f0000000040)=0x5) fsetxattr$auto(0xffffffffffffffff, 0x0, 0x0, 0x1, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sda\x00', 0x8001, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) ioctl$auto_TCSBRKP2(0xffffffffffffffff, 0x5425, 0x0) openat$auto_vhost_net_fops_net(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x20009, 0x20004000000000df, 0xeb1, 0xffffffffffffffff, 0x8000) uname$auto(0x0) r2 = socket(0xa, 0x3, 0x3a) ioctl$auto(r2, 0x890b, 0x1) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, 0x0, 0x9800, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) getxattrat$auto(0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0, 0xb91) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000180), r2) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x8000000000000003, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), 0xffffffffffffffff) 12m20.729800879s ago: executing program 1 (id=925): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/oom_adj\x00', 0x8700, 0x0) read$auto(r0, 0x0, 0x1f40) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x8002, 0x0) writev$auto(r1, &(0x7f00000000c0)={0x0, 0x7}, 0x3) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x4) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/pts/ptmx\x00', 0xc0042, 0x0) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0) ioctl$auto_TCFLSH2(r3, 0x80045439, 0x0) ioctl$auto_TIOCSETD2(r2, 0x5423, 0x0) ioctl$auto(r2, 0x8924, r2) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x10, 0x2, 0x14) socket(0x11, 0x80003, 0x300) socket(0x1d, 0x2, 0x7) openat$auto_proc_projid_map_operations_base(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/projid_map\x00', 0x2000, 0x0) socket(0x2, 0x3, 0x100) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x2, 0x4) socket(0x2, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2a, 0x2, 0x0) open(&(0x7f0000000100)='.\x00', 0x0, 0x408) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sda\x00', 0x0, 0x0) socket(0x10, 0x2, 0x0) socket(0xa, 0x2, 0x73) io_uring_setup$auto(0xa, 0x0) socket(0x1e, 0x1, 0x0) pipe$auto(0x0) socket(0x2, 0x1, 0x0) 12m19.116915835s ago: executing program 1 (id=930): r0 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) (async) ioctl$auto(r0, 0x400454ca, r0) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) (async) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) getsockopt$auto_SO_PEERPIDFD(r3, 0x5, 0x4d, &(0x7f00000000c0)='\x00', &(0x7f0000000100)) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0xc) (async, rerun: 64) socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) r6 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r6) (async) ioctl$auto_KVM_GET_MSRS(r5, 0xc008ae88, &(0x7f0000000080)={0x2, 0x0, [{0x40000070, 0x400, 0xfffffffffffffffb}]}) (async) syz_genetlink_get_family_id$auto_net_shaper(&(0x7f0000000200), r3) (async) sendmsg$auto_NL80211_CMD_SET_WIPHY(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={0x24, r2, 0x13, 0x70bd2e, 0x25dfdbdd, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r4}, @NL80211_ATTR_WIPHY_RETRY_SHORT={0x5, 0x3d, 0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4c0d4}, 0x20040894) (async, rerun: 64) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xec, r2, 0x20, 0x70bd26, 0x25dfdbfc, {}, [@NL80211_ATTR_USE_MFP={0x8, 0x42, 0x401}, @NL80211_ATTR_AUTH_DATA={0x85, 0x9c, "e27fef907652f247e186f5d01be4a3fed553a751857a370c6881c923fc46d62834234ec42d76bcc8493d885cd9f422ccd1fdf1e9f163468924fae9e8cd634481f410cef108b75b96630989f5072ff618078fd9a10d410294b36401c200e5afdc1a9c19607dee2636a03b06955fd1fff1a128cf7717f58cc2fae4172be150aa340c"}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0xfa}, @NL80211_ATTR_PMK={0x3f, 0xfe, "5dfc50a9cf13e9f2c1cf65b51332331eb2c15714b4a8a252300f154b780edd1c138911e123d9f1eb2b99ca79e8da157b3b3d303a89c628adec43cf"}]}, 0xec}, 0x1, 0x0, 0x0, 0xc840}, 0x4000040) (rerun: 64) getresuid$auto(0x0, 0x0, 0x0) 12m3.977735275s ago: executing program 32 (id=930): r0 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) (async) ioctl$auto(r0, 0x400454ca, r0) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) (async) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) getsockopt$auto_SO_PEERPIDFD(r3, 0x5, 0x4d, &(0x7f00000000c0)='\x00', &(0x7f0000000100)) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0xc) (async, rerun: 64) socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) r6 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r6) (async) ioctl$auto_KVM_GET_MSRS(r5, 0xc008ae88, &(0x7f0000000080)={0x2, 0x0, [{0x40000070, 0x400, 0xfffffffffffffffb}]}) (async) syz_genetlink_get_family_id$auto_net_shaper(&(0x7f0000000200), r3) (async) sendmsg$auto_NL80211_CMD_SET_WIPHY(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={0x24, r2, 0x13, 0x70bd2e, 0x25dfdbdd, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r4}, @NL80211_ATTR_WIPHY_RETRY_SHORT={0x5, 0x3d, 0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4c0d4}, 0x20040894) (async, rerun: 64) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xec, r2, 0x20, 0x70bd26, 0x25dfdbfc, {}, [@NL80211_ATTR_USE_MFP={0x8, 0x42, 0x401}, @NL80211_ATTR_AUTH_DATA={0x85, 0x9c, "e27fef907652f247e186f5d01be4a3fed553a751857a370c6881c923fc46d62834234ec42d76bcc8493d885cd9f422ccd1fdf1e9f163468924fae9e8cd634481f410cef108b75b96630989f5072ff618078fd9a10d410294b36401c200e5afdc1a9c19607dee2636a03b06955fd1fff1a128cf7717f58cc2fae4172be150aa340c"}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0xfa}, @NL80211_ATTR_PMK={0x3f, 0xfe, "5dfc50a9cf13e9f2c1cf65b51332331eb2c15714b4a8a252300f154b780edd1c138911e123d9f1eb2b99ca79e8da157b3b3d303a89c628adec43cf"}]}, 0xec}, 0x1, 0x0, 0x0, 0xc840}, 0x4000040) (rerun: 64) getresuid$auto(0x0, 0x0, 0x0) 3m8.597181616s ago: executing program 2 (id=4653): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/net/bond0/speed\x00', 0x0, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) read$auto(0x3, 0x0, 0x80) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xc18, 0x8000) openat$auto_ep0_operations_inode(0xffffffffffffff9c, &(0x7f0000000040), 0x82000, 0x0) close_range$auto(0x2, 0x8, 0x0) ioctl$auto_XFS_IOC_GETPARENTS(0xffffffffffffffff, 0xc028583e, &(0x7f0000000000)={{[0xfffff801, 0x8, 0x1, 0x2]}, 0x101, 0x0, 0x7f8, 0x0, 0x2}) r0 = socket(0x8, 0x800, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0xa, 0x2, 0x73) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) socket(0x1, 0x5, 0x0) bind$auto(0x3, 0x0, 0x6b) connect$auto(0x3, 0x0, 0x6b) timer_create$auto(0x3, 0x0, &(0x7f0000000280)=0x6) timer_gettime$auto(0x0, &(0x7f0000001f80)={{0x9, 0x100000001}, {0x9f9a, 0x401}}) io_uring_setup$auto(0x6, 0x0) getsockopt$auto(r0, 0x0, 0x43, 0x0, &(0x7f00000000c0)=0x1e) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/net/bond0/speed\x00', 0x0, 0x0) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) read$auto(0x3, 0x0, 0x80) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xc18, 0x8000) (async) openat$auto_ep0_operations_inode(0xffffffffffffff9c, &(0x7f0000000040), 0x82000, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) (async) ioctl$auto_XFS_IOC_GETPARENTS(0xffffffffffffffff, 0xc028583e, &(0x7f0000000000)={{[0xfffff801, 0x8, 0x1, 0x2]}, 0x101, 0x0, 0x7f8, 0x0, 0x2}) (async) socket(0x8, 0x800, 0x0) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) close_range$auto(0x0, 0xfffffffffffff000, 0x2) (async) socket(0xa, 0x2, 0x73) (async) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) (async) socket(0x1, 0x5, 0x0) (async) bind$auto(0x3, 0x0, 0x6b) (async) connect$auto(0x3, 0x0, 0x6b) (async) timer_create$auto(0x3, 0x0, &(0x7f0000000280)=0x6) (async) timer_gettime$auto(0x0, &(0x7f0000001f80)={{0x9, 0x100000001}, {0x9f9a, 0x401}}) (async) io_uring_setup$auto(0x6, 0x0) (async) getsockopt$auto(r0, 0x0, 0x43, 0x0, &(0x7f00000000c0)=0x1e) (async) 3m7.84825862s ago: executing program 2 (id=4656): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv6/conf/virt_wifi0/router_solicitations\x00', 0x101202, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/system/clocksource/clocksource0/current_clocksource\x00', 0x8502, 0x0) write$auto(r0, &(0x7f0000000140)='\x00\n\x00\x00\x00\x00\x00\x00', 0x2) mmap$auto(0x4, 0x2020009, 0x3, 0xeb0, 0xfffffffffffffffa, 0x8000) socket(0x2c, 0x3, 0x0) r1 = socket(0x2c, 0x3, 0x0) socket(0x10, 0x2, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'veth0_to_bond\x00'}) sendmsg$auto_ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x2000000, 0x28000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20004000}, 0xc831) sendmsg$auto_NFSD_CMD_THREADS_SET(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="0c0000001400c7"], 0x2c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4830) write$auto(r1, &(0x7f0000000000)='-\x00', 0x800000000002fb) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/platform/vivid.0/cec10/power/runtime_status\x00', 0x0, 0x0) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000180), 0x606800, 0x3f) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/pcm0p/oss\x00', 0xaa102, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000380)='/dev/snd/midiC2D3\x00', 0x1, 0x0) open(0x0, 0x149443, 0x8) socket(0x2a, 0x6, 0x8) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/virtual/net/lapb3/threaded\x00', 0x8a801, 0x0) write$auto(r3, &(0x7f0000000000)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@ax25={0x3, @bcast}, 0xfd) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x400, 0x40000000df, 0xeb1, 0x401, 0x8010) sendmmsg$auto(0x3, 0x0, 0x9a6, 0xa) mmap$auto(0xfffffffffffffffc, 0x2020009, 0x3, 0xeb5, 0xfffffffffffffffa, 0x8000) socket(0xa, 0x2, 0x0) openat$auto_proc_page_owner_operations_page_owner(0xffffffffffffff9c, &(0x7f0000000080), 0x2400, 0x0) 3m7.366964099s ago: executing program 2 (id=4660): socket(0x2c, 0x800, 0x0) (async) getdents$auto(0xffffffffffffffff, 0x0, 0x400018) (async) read$auto_fops_u8_(0xffffffffffffffff, &(0x7f0000000080)=""/12, 0xc) (async, rerun: 32) madvise$auto(0x8400000405, 0x200004207ff00000, 0xfff) (async, rerun: 32) get_robust_list$auto(0x0, &(0x7f0000000300)=&(0x7f0000000340)={{&(0x7f0000000440)}, 0xfffffffffffff4c5, &(0x7f0000000480)={&(0x7f0000000200)}}, &(0x7f0000000240)=0xfffffffffffffe01) (async) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.net/blkio.bfq.time_recursive\x00', 0x40880, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f00000000c0)=""/255, 0xff) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snd/controlC0\x00', 0x0, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/midiC2D2\x00', 0x401, 0x0) (async, rerun: 64) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async, rerun: 64) mmap$auto(0x0, 0x202000b, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) io_uring_setup$auto(0x9f0, 0x0) (async) close_range$auto(0x2, 0xa, 0x0) (async) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, 0x0) (async) getresuid$auto(0x0, 0x0, 0x0) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x3f) (async) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) r3 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) read$auto_drm_debugfs_entry_fops_drm_debugfs(0xffffffffffffffff, 0x0, 0x0) (async) ioctl$auto(r3, 0x5608, r3) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5\x01\x00\x00\x00\x00\x00\x00\x00\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptyzf\x00', 0x4800, 0x0) write$auto(r2, &(0x7f0000000380)=',{5,\x00', 0x4000000) (async) mmap$auto(0x0, 0x2020009, 0x3, 0x111, r4, 0x8) (async) prctl$auto(0x2, 0x1000001, 0x0, 0x5, 0x7) (async, rerun: 64) ioctl$auto_SG_GET_RESERVED_SIZE(r2, 0x2272, &(0x7f00000003c0)="a00117a08f23b2ddae179055c175ffb1cb52d3b29a7841b5f0fc9ccab7ba62857dfa3082af1f309a2290cbd947673eceeb229308a05caab1af2670acc3e970aff8ee950dae4f97052473c2676b16b6b3cea1") (rerun: 64) madvise$auto(0x4, 0xfffffffffffffffc, 0x561) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/loop6\x00', 0x1, 0x0) (async, rerun: 32) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, 0x0, 0x80002, 0x0) (rerun: 32) 3m6.942325346s ago: executing program 2 (id=4662): r0 = socket(0x15, 0x5, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x7, 0x800008000) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) setsockopt$auto(r0, 0x1, 0x21, 0x0, 0x9) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r1 = socket(0x2, 0x3, 0x6) lsm_list_modules$auto(0x0, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x401c5820, 0x0) mkdir$auto(0x0, 0x353) ustat$auto(0x801, 0x0) sendmsg$auto(r0, &(0x7f0000000180)={&(0x7f0000000040), 0x7fc, 0x0, 0x8, 0x0, 0x1, 0x4}, 0x0) mmap$auto(0x0, 0x0, 0x4, 0x52, 0xffffffffffffffff, 0x800048000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x6, 0x8000) capget$auto(0x0, 0xfffffffffffffffe) capset$auto(0x0, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) connect$auto(0x3, 0x0, 0x81) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) close_range$auto(0x2, 0x8, 0x0) pread64$auto(0xffffffffffffffff, 0x0, 0x400100000001, 0x1ff) readv$auto(0x3, 0x0, 0x4) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0xffffeffe, 0x2) io_uring_setup$auto(0x59, 0x0) 3m5.869360403s ago: executing program 2 (id=4665): openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, 0x0, 0x109001, 0x0) (async) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, 0x0, 0x109001, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000200)='/proc/bus/pci/devices\x00', 0x10b402, 0x0) pread64$auto(r0, 0x0, 0x8100000041, 0x3) fchdir$auto(0xffffffffffffffff) fcntl$auto_F_RDLCK(r0, 0xcbe, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x0, 0x0) unshare$auto(0x40000080) (async) unshare$auto(0x40000080) openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/usbmon0\x00', 0x0, 0x0) (async) r1 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/usbmon0\x00', 0x0, 0x0) ioctl$auto_MON_IOCX_MFETCH(r1, 0xc0109207, 0x0) r2 = open(&(0x7f0000000000)='./file0\x00', 0x4242, 0xe1d2b27bdc14aab4) flock$auto(r2, 0x1) ioctl$auto_MON_IOCX_MFETCH(r1, 0xc0109207, &(0x7f0000000100)={0x0, 0xe, 0x8}) pread64$auto(r1, 0x0, 0x7ff, 0xd) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000001a80)='/dev/bus/usb/001/001\x00', 0x29202, 0x0) (async) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000001a80)='/dev/bus/usb/001/001\x00', 0x29202, 0x0) 3m5.264913013s ago: executing program 2 (id=4667): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/advisor_max_cpu\x00', 0xa001, 0x0) write$auto(r0, &(0x7f0000000140)='0[.[\x00', 0xcd04) close_range$auto(0x2, 0x8, 0x0) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vbi17\x00', 0x1a9001, 0x0) epoll_create$auto(0x4) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000080), 0x801, 0x0) openat$auto_dev_fops_plock(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) openat$auto_qrtr_tun_ops_tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) capget$auto(0x0, 0xfffffffffffffffe) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/ceph/parameters/disable_send_metrics\x00', 0x305140, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) ioctl$auto_SCSI_IOCTL_SEND_COMMAND2(0xffffffffffffffff, 0x1, &(0x7f0000000000)) write$auto(r1, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) select$auto(0x5, 0x0, &(0x7f00000005c0)={[0x5, 0x80000001, 0x6, 0xffffffffffff77c8, 0x9, 0x80000001, 0x8, 0xfffffffffffffffa, 0x0, 0x5, 0x400, 0x5, 0x5, 0xfffffffffffffff4, 0xb, 0xffffffffffffffff]}, &(0x7f00000006c0)={[0x1, 0x4, 0x0, 0xffffffffffff8957, 0x7fff, 0xc9a2, 0x9, 0x2, 0x2, 0x0, 0xfffffffffffffc01, 0x3, 0x6, 0x2, 0xfffffffffffffff7, 0xfffffffffffffffc]}, 0x0) 3m4.609055864s ago: executing program 33 (id=4667): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/advisor_max_cpu\x00', 0xa001, 0x0) write$auto(r0, &(0x7f0000000140)='0[.[\x00', 0xcd04) close_range$auto(0x2, 0x8, 0x0) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vbi17\x00', 0x1a9001, 0x0) epoll_create$auto(0x4) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000080), 0x801, 0x0) openat$auto_dev_fops_plock(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) openat$auto_qrtr_tun_ops_tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) capget$auto(0x0, 0xfffffffffffffffe) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/ceph/parameters/disable_send_metrics\x00', 0x305140, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) ioctl$auto_SCSI_IOCTL_SEND_COMMAND2(0xffffffffffffffff, 0x1, &(0x7f0000000000)) write$auto(r1, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) select$auto(0x5, 0x0, &(0x7f00000005c0)={[0x5, 0x80000001, 0x6, 0xffffffffffff77c8, 0x9, 0x80000001, 0x8, 0xfffffffffffffffa, 0x0, 0x5, 0x400, 0x5, 0x5, 0xfffffffffffffff4, 0xb, 0xffffffffffffffff]}, &(0x7f00000006c0)={[0x1, 0x4, 0x0, 0xffffffffffff8957, 0x7fff, 0xc9a2, 0x9, 0x2, 0x2, 0x0, 0xfffffffffffffc01, 0x3, 0x6, 0x2, 0xfffffffffffffff7, 0xfffffffffffffffc]}, 0x0) 1m54.110414249s ago: executing program 3 (id=4873): socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa}, 0x58) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) read$auto(0x3, 0x0, 0x7) write$auto(0x3, 0x0, 0xfdef) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) r0 = openat$auto_proc_clear_refs_operations_internal(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/clear_refs\x00', 0xa401, 0x0) write$auto_proc_clear_refs_operations_internal(r0, &(0x7f0000000080)="86d7605cd177daf07fd4a498b798cc1ae81c93cc3bc56690aaabb9ab75dc109b5ac8ea8885a68e8e3ca877c2289596e3a64253af9a78d81fa503f0b9e5234e6661470c98d92e569004e4553b059cdbbbcc5440381ae318a90823bce3662dc23d736a1835aae57edaf9798247f5d2b17d57323aea7c67e98c52b3b83892e3d449354aec91ec23c5c42acec8f73493acbe14268bb38223bc0e7bd2857eba7f62e9c0dc07fb0b69e2458eb5828bd3b7aa9c2f88b5e9592ce197d382a4d2b15fbb71071b712027aa18ad97440e781912bb521c9e526f00f270bdbf033affa3c6177e7a", 0xe1) close_range$auto(0x2, 0xa, 0x0) socket(0x18, 0xa, 0x1) socket(0xa, 0x2, 0x0) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0xfdef) 1m53.498429735s ago: executing program 4 (id=4876): setresuid$auto(0xffffffffffffffff, 0x8, 0x8000) (async) r0 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/card1\x00', 0x40000, 0x0) mmap$auto_vmwgfx_driver_fops_vmwgfx_drv(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x101000000) (async) r1 = setfsuid$auto(0x0) r2 = openat$auto_proc_pid_numa_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/numa_maps\x00', 0x20000, 0x0) read$auto_proc_sessionid_operations_base(r2, 0x0, 0x0) (async) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) (async) socket(0xa, 0x2, 0x0) (async) lseek$auto(0x3, 0x7fffffffffffffff, 0x0) (async) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0xa, 0x0) (async) getresuid$auto(0x0, &(0x7f00000000c0)=0x2, 0x0) (async) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x3f) (async) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) r4 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) ioctl$auto(r3, 0x5608, r4) (async) mmap$auto(0x2, 0x810004, 0x400000000ff9, 0x8000000008011, 0x3, 0x8000) (async) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, 0x0, 0x82000, 0x0) (async) openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) getsockopt$auto_SO_RCVPRIORITY(0xffffffffffffffff, 0x2, 0x52, &(0x7f0000000080)='/dev/virtual_ncn\xdc\xdf!i\x00', 0x0) (async) r5 = setfsuid$auto(0xee00) setreuid$auto(r5, 0x0) setresuid$auto(r1, r5, 0x0) (async) sendmsg$auto_NL80211_CMD_GET_STATION(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000440)={&(0x7f0000001900)=ANY=[], 0x558}, 0x1, 0x0, 0x0, 0x20008805}, 0x200088c0) (async) close_range$auto(0x0, 0xfffffffffffff000, 0x2) openat$auto_vhci_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) socket(0x11, 0x3, 0x9) (async) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) 1m52.913928373s ago: executing program 4 (id=4879): mmap$auto(0x0, 0x20009, 0x8ca, 0xeb1, 0x401, 0x6) r0 = socket(0x2, 0x2, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) getrandom$auto(0x0, 0x6000000, 0x3) r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/neigh/vlan1/base_reachable_time\x00', 0x40400, 0x0) read$auto(r1, 0x0, 0x1ff) r2 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/maps\x00', 0x1a1000, 0x0) read$auto(r2, &(0x7f0000000100)='!#\\,^-\x00', 0x9) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0C0F:00/status\x00', 0xa140, 0x0) r4 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x8002, 0x0) ioctl$auto_XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, &(0x7f0000000580)={{r3, &(0x7f0000000380)="7c706c71ebab40864faae77f72fd437596b0eb580f39d79f8bc663d4f10184d770949bc943e14e33fe5c4af47a802405afed0eacb6d9e29fd5d3117f3f13ac922bf91fda27174ec3c9232359676290de76a3dcb4ce431d9fcef16a57bee2a230d5a9288f40a8ef6edca221489051c41422163dd1ede37ee4e866bfe9a4ee114fbaf0e5cc78629f344f4bf08aee35cbfaf91b1e58030bccfa3153009653fcdf1716eb7254f254069306c699b22823d10536cef6fe3b92a8a6571d2ccecbbe28681db7980900ff5e426385433d2bc21b26cb2ccd07679e45855761ee32dfdefbce6bf024160ec03a1047474434cf33", 0xffff, &(0x7f0000000280)="c94d86f8c911daaecf50f6acd6674e8e5bc6a2e961e5a2b63a8caea566d4c7c097a511e0778d11f1093a", 0x949, &(0x7f00000002c0)="cd175f3354af2669bb039c6a29a1775b4c", &(0x7f0000000300)=0x60d2}, {[0xffffa5ef, 0x7, 0x7, 0x8]}, 0x5, 0x5, &(0x7f0000000480)="78df041ec7f7cebfcb66659d184bfc5b3aa1ff4950b09fe0a3900ed5a8d75bdddde7ca92e262863079f0578379afaf33a8cac2aaf2b713000fc9fe03b6ddfed9d20a686a913468d609420950c8ff5af8316625b624e32a2d351367b19a56a014c6da6849cb294dcb64e3726ef54bbb1e8a5cb2e633dbcac365e3152b9ab9025390b09c1374b3f1287ea06cd5fe66f36d7984f53b438fac5affbd30107faaf0024e6b6719fd137e3e201033070a42daae738d11a30a0c5a0bf67900ed69199e8d2f0899f3fb56ba80f52aef4bf8c4bfa0125f"}) ioctl$auto_BCH_IOCTL_DISK_ONLINE(r5, 0x4010bc06, &(0x7f0000000600)={0xffffff01, 0x0, 0x9}) writev$auto(r4, &(0x7f0000000200)={0x0, 0x7}, 0x3) sendmsg$auto_NL80211_CMD_NOTIFY_RADAR(r0, 0x0, 0x4) r6 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000180)='/dev/v4l-subdev6\x00', 0x101482, 0x0) ioctl$auto_v4l2_fops_v4l2_dev(r6, 0x80085617, 0x0) rseq$auto(0x0, 0x40, 0x0, 0x6) futex$auto(&(0x7f0000000080)=0x2, 0xa, 0x0, 0x0, 0x0, 0x440a48d2) sendmsg$auto_NL80211_CMD_AUTHENTICATE(r0, &(0x7f0000000240)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xfffffffffffffc57, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x20000000}, 0x8045) r7 = gettid() rt_tgsigqueueinfo$auto(0x0, r7, 0x21, 0x0) migrate_pages$auto(r7, 0xa, &(0x7f0000000040)=0x220, &(0x7f0000000100)=0x8) read$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f0000000140)=""/122, 0x7a) madvise$auto(0xfe, 0x6, 0x0) 1m52.867242565s ago: executing program 3 (id=4880): openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000400)='/dev/binderfs/binder0\x00', 0x40, 0x0) socket(0x2, 0x1, 0x106) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) close_range$auto(0x2, 0x8, 0x0) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) mmap$auto(0x2, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0xffffffffffffffff, 0x8, 0x10) io_uring_setup$auto(0xb, 0x0) r0 = socket(0x2, 0x5, 0x0) socket(0x2, 0x80002, 0x73) bind$auto(0x3, &(0x7f0000000040)=@l2={0x1f, 0x2, @any, 0x8001, 0x2}, 0x67) sendmmsg$auto(r0, &(0x7f0000000100)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x1a000}, 0x7, 0x0, 0x2, 0xb}, 0xfff}, 0x5, 0x311) unshare$auto(0x40000080) write$auto_ocfs2_control_fops_stack_user(0xffffffffffffffff, 0x0, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001080)='/sys/module/msr/parameters/allow_writes\x00', 0x80302, 0x0) sendfile$auto(r1, r1, 0x0, 0x7ffff000) r2 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189002, 0x0) ioctl$auto_PPPIOCSMRU(r2, 0xc004743e, 0x0) close_range$auto(0x2, 0x8, 0x0) fanotify_init$auto(0x65, 0x2) pipe$auto(0x0) write$auto(0x6, 0x0, 0x100000001) r3 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000d80), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_ETHTOOL_MSG_PLCA_SET_CFG(r4, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000001040)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002cbd7000252800001c180001801400026d793000"/34], 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x20008800) r5 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r5, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) mmap$auto(0x1007, 0x40009, 0xdf, 0x8000000000000010, r0, 0x1028000) 1m52.001830844s ago: executing program 4 (id=4882): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) write$auto(0x1, 0x0, 0x80000000) r0 = socket(0x15, 0x5, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x7, 0x800008000) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) ustat$auto(0x801, 0x0) sendmsg$auto(r0, &(0x7f0000000180)={&(0x7f0000000040), 0x7fc, 0x0, 0x8, 0x0, 0x1, 0x4}, 0x0) read$auto(0x3, 0x0, 0x80) mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff) socket(0xa, 0x5, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x109401, 0x0) close_range$auto(0x2, 0x8, 0x0) close_range$auto(0x2, 0xa, 0x0) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x101000, 0x0) 1m50.876281414s ago: executing program 4 (id=4885): r0 = socket(0x2, 0x5, 0x0) mmap$auto(0x0, 0x20009, 0xe2, 0x61f, 0x405, 0x8000) getcwd$auto(0x0, 0xffffffffffffffff) bind$auto(r0, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x2) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000440)="38ae7527943d8cfc0c9179686aae1fd17d21ac52738b82f37959a96597fd9fe7ef7850929419de4f9e5f8f143f6c0d7c87dbb64df775f7b1dcf9f8f38d23885c3dd13ccaa95d1066630e5f93e419ad1ed2b4967dd4f6cc18e704efa6816317f1aeb9313bf12b9f33fda10769d9d83d39ba1bba7582ac58ecf0228bfbd5adc598000000", 0x13, &(0x7f00000000c0)={0x0, 0x1fff8}, 0x7, 0x0, 0x7fffffff, 0xb}, 0x4}, 0x8, 0x311) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/virtual/net/bond0/bonding/arp_validate\x00', 0x2002, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nbd5\x00', 0x20000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) openat$auto_deferred_devs_fops_(0xffffffffffffff9c, &(0x7f0000000000), 0xe00, 0x0) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) openat$auto_proc_pid_cmdline_ops_base(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/cmdline\x00', 0x481, 0x0) mmap$auto(0x0, 0x8, 0xdc, 0xeb1, 0x0, 0x8002) close_range$auto(0x2, 0x8, 0x0) setresuid$auto(0x0, 0x0, 0x0) keyctl$auto_KEYCTL_GET_PERSISTENT(0x16, 0x0, 0x7fffffffffffffff, 0xffffffffffffe6d6, 0x2) sendmsg$auto_NL80211_CMD_START_SCHED_SCAN(r1, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYRESOCT=r1, @ANYRES16=0x0, @ANYBLOB="000126bd7000ffdbdf254b0000001c00e70020351644513a7bd458eecf3c840963a2350f2330419c3c40a4009d008182b2cd99554eee70979c47af537a163f65a1a5cb0dc88f31513db86fd3a37f30698be457c216b4fda8d1986eeb32c4a53d14b7071a97be6bf915335d252f3574037f42a59949294dcb3117f7ae7159f7b33e69dc43f14e7a478ad496538bad7d729784d9f4a723dcfa63ac419991a0ae50352ff4adbc282ab3f4c7f5829064548299d3bfddf89e353e057cb8c1475867107f833423a4cdf3e6f4029a9110bd0c002d8008", @ANYRES16=r2, @ANYRES32=r2], 0x59c}, 0x1, 0x0, 0x0, 0x20040084}, 0x20000000) waitid$auto_P_ALL(0x0, 0x468e, 0x0, 0x20003, &(0x7f0000000180)={{0x6, 0x20000000000005}, {0xff, 0x1000000ffe}, 0xfff7fffffffff801, 0x1, 0xfffffffffffffffa, 0x63, 0x2, 0x9, 0xaed, 0x5, 0x80000001, 0x7fffffff, 0xa, 0x6, 0x2, 0x3}) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000240)='/proc/asound/card1/pcm0p/sub0/xrun_injection\x00', 0x0, 0x0) pread64$auto(r3, 0x0, 0x8, 0x7fff) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop9\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) madvise$auto(0x1000000000b, 0x94, 0x17) madvise$auto(0x866d, 0x7fff, 0x9) madvise$auto(0x0, 0x20499d, 0x9) close_range$auto(0x2, 0x8, 0x0) ioctl$auto_FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x5) 1m49.76985161s ago: executing program 4 (id=4889): r0 = socket(0x2, 0x5, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r1, 0x0, 0x20) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r2, &(0x7f0000000200)={0x0, 0x7}, 0x3) r3 = socket(0xa, 0x3, 0x3a) mmap$auto(0x0, 0x20009, 0x6, 0xfffffffffffffffe, 0xffffffffffffffff, 0x8000) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x1feff}, 0x7, 0x0, 0x5, 0xb}, 0xfff}, 0x8, 0x311) r4 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_ETHTOOL_MSG_MODULE_EEPROM_GET(r5, &(0x7f0000000e80)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)={0x2c, r4, 0x1, 0x70bd29, 0x25dfdc02, {}, [@ETHTOOL_A_MODULE_EEPROM_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4004084}, 0x82) io_cancel$auto(0x0, &(0x7f0000000100)={0x1, 0xc18, 0xfff, 0xb0, 0x4, r5, 0x5, 0x1, 0xb, 0x0, 0xfffffff9, r3}, &(0x7f0000000180)={0x4, 0x60b1b427, 0x0, 0x7fffffffffffffff}) 1m49.177939535s ago: executing program 3 (id=4891): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x129882, 0x0) prctl$auto(0x2, 0x1, 0x0, 0xffffffffffffffff, 0x0) write$auto(0xffffffffffffffff, &(0x7f0000000180)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/system/memory/memory3/online\x00', 0x2062, 0x0) write$auto(r1, &(0x7f0000000440)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb', 0x98c7) socket(0x2, 0x3, 0x2) setsockopt$auto(r0, 0x0, 0x1, 0x0, 0x0) openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mouse0\x00', 0x181502, 0x0) mmap$auto(0x0, 0x4000b, 0x7, 0x9b72, 0x7, 0x28000) r2 = openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000300), 0x8040, 0x0) ioctl$auto_dvb_demux_fops_dmxdev(r2, 0x40146f2c, 0x0) ioctl$auto_dvb_demux_fops_dmxdev(r2, 0x140146f2c, 0x0) r3 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/dsp1\x00', 0x8c040, 0x0) getsockopt$auto_SO_TIMESTAMPING_NEW(r3, 0x5, 0x41, &(0x7f0000000100)='/dev/dvb/adapter0/demux0\x00', &(0x7f0000000240)=0x4070) ioctl$auto_SNDCTL_DSP_GETIPTR(r3, 0x800c5011, 0x0) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7ffffffc, 0x8, 0x3000, 0x6, 0x7, 0x0, 0xffffffffffffffff, [], {0x9, 0x6, 0x8c48, 0x29b, 0x9, 0x80, 0x104, 0x6, 0x4}, {0x100, 0x1, 0x101, 0x85, 0x4, 0x1a7b870a, 0x76c5, 0x5, 0x500000000}}) r4 = openat$auto_vhci_fops_hci_vhci(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$auto_vhci_fops_hci_vhci(r4, &(0x7f0000000d40)=""/16, 0x10) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000140), 0x180b03, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0xf3f7, 0xffffffffffffffff, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_nst_seq_fops_netdebug(0xffffffffffffff9c, &(0x7f0000000280), 0x111000, 0x0) pwritev2$auto(r3, &(0x7f0000000600)={&(0x7f0000000340)="c5c3856d3c1aedd9e4fbe77bd13fb60bd73fc0804be23bc853dad50e5aa55669759fc82a54e9d318d2fd97e57535d49028cfc8d2e3d81ee4046b560c7c793067da1404e8f40221a26465bbfa82650f6b5de22a53caea485c0df054b8fb414aef0b025df2796c185dbad90ccae1eda37038a43d82cb3d96fd09529766487fa0018231a0b18088d253cac45cef728163f7d8434fc2e904742654fb99c1c8705eb875b0a4a02086d04ebbbe9047ec2b0456dbcebc63d95c79f227579d836a0a14f3f5455c3f5ebd5aa65fbe6473", 0x7}, 0x4, 0x7, 0x3, 0x9) r5 = openat$auto_kmsg_fops_printk(0xffffffffffffff9c, &(0x7f0000000540), 0xa0100, 0x0) lseek$auto(r5, 0x0, 0x3) select$auto(0xe, 0x0, 0x0, &(0x7f0000000580)={[0x1f9, 0xfffffffffffeffff, 0xd, 0x1, 0x948d, 0x3, 0x15f4da0a, 0x7, 0x3, 0x2000062, 0x8000001f, 0x7, 0x6d3e, 0x800000000000000c, 0x6, 0x6]}, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/system/cpu/cpuidle/current_governor\x00', 0xa42, 0x0) socket(0x2c, 0x3, 0x0) openat$auto_uinput_fops_uinput(0xffffffffffffff9c, 0x0, 0x610841, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/pci0000:00/0000:00:01.3/rescan\x00', 0x1a1181, 0x0) 1m48.666946927s ago: executing program 4 (id=4893): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x10, 0x2, 0x14) socket(0x11, 0x80003, 0x300) socket(0x1d, 0x2, 0x7) socket(0x2, 0x1, 0x0) socket(0x10, 0x2, 0x0) socket(0x1d, 0x2, 0x7) socket(0xa, 0x2, 0x73) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_LISTENER_SET(r0, &(0x7f0000005380)={0x0, 0x0, &(0x7f0000005340)={&(0x7f0000000000)={0x38, r1, 0x1, 0x870bd2b, 0x25dfdbfc, {}, [@NFSD_A_SERVER_SOCK_ADDR={0x24, 0x1, 0x0, 0x1, [@NFSD_A_SOCK_TRANSPORT_NAME={0x19, 0x2, '/dev/cpu_dma_latency\x00'}, @NFSD_A_SOCK_ADDR={0x4}]}]}, 0x38}, 0x1, 0x0, 0x0, 0xc000}, 0x20000000) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x1, 0x0) socket(0xa, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_ETHTOOL_MSG_RINGS_SET(r2, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f0000001d80)={&(0x7f0000000040)=ANY=[@ANYRES16, @ANYBLOB="010027bd7000ffdbdf25100000000c00018008000100", @ANYRES32, @ANYBLOB="080006"], 0x28}, 0x1, 0x0, 0x0, 0x90}, 0x0) r3 = socket(0x10, 0x2, 0x14) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r3, &(0x7f0000003000)={0x0, 0x0, &(0x7f0000002fc0)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000000a14af"], 0x14}, 0x1, 0x0, 0x0, 0x80c3}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYRES8=r3], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4c084}, 0x51) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x2}, 0x3, 0x0) 1m48.533618723s ago: executing program 3 (id=4894): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/advisor_max_cpu\x00', 0xa001, 0x0) write$auto(r0, &(0x7f0000000140)='0[.[\x00', 0xcd04) close_range$auto(0x2, 0x8, 0x0) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vbi17\x00', 0x1a9001, 0x0) epoll_create$auto(0x4) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000080), 0x801, 0x0) openat$auto_dev_fops_plock(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) getsockopt$auto_SO_TIMESTAMPING_OLD(0xffffffffffffffff, 0x0, 0x25, 0x0, &(0x7f0000000240)=0x2) openat$auto_qrtr_tun_ops_tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv6/route/flush\x00', 0x80401, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000340)={[0x1ff, 0x800000000000007, 0xd3e, 0x1, 0x800000948b, 0x3, 0x95f4da0a, 0xffffffffffffffff, 0x3, 0x7, 0x80000001, 0x7, 0x6d3f, 0x9, 0x8, 0xfffffffffffffffe]}, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) write$auto(r1, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) lsm_set_self_attr$auto(0x3, 0x0, 0x7, 0x3) select$auto(0x5, 0x0, &(0x7f00000005c0)={[0x5, 0x80000001, 0x6, 0xffffffffffff77c8, 0x9, 0x80000001, 0x8, 0xfffffffffffffffa, 0x0, 0x5, 0x400, 0x5, 0x5, 0xfffffffffffffff4, 0xb, 0xffffffffffffffff]}, &(0x7f00000006c0)={[0x1, 0x4, 0x0, 0xffffffffffff8957, 0x7fff, 0xc9a2, 0x9, 0x2, 0x2, 0x0, 0xfffffffffffffc01, 0x3, 0x6, 0x2, 0xfffffffffffffff7, 0xfffffffffffffffc]}, 0x0) 1m47.473208763s ago: executing program 3 (id=4898): r0 = socket(0xa, 0x801, 0x84) getsockopt$auto(r0, 0x84, 0x6d, 0x0, &(0x7f0000000280)=0x1000c0) r1 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000000080), 0xffffffffffffffff) shmctl$auto_SHM_INFO(0x401, 0xe, &(0x7f0000000340)={{0x41ba, 0xee01, 0xee01, 0x5, 0x2, 0x40, 0x6e}, 0xc2, 0x10000, 0x1000, 0x6, @inferred, @raw=0x7f, 0x100, 0x0, &(0x7f0000000140)="d4dfecec854fddb43d91e1c665c76d302f9d1cdd96e523c693f12d64345b387313d78d6a0dbc44e12ce96e6ecbae813380fb46326308e53440face81d61641986bc1e59ca5090e0139665a603dfd2c4366400abf977352e800691096cb3ff9b3873f06e0b6ff118a145729189bd1de0eda36263e4d713437fcd0e24ad0ee27bc6fd7b389f7e1352f71d2d127d13ab07e98a9e7ab3ceca4040d1e52da1b23a66bd7d986b223f7c809305fce2448daa3d1c7cd168e8831e1e0c9f382dbb8aae5afc61fbe3233a41d46d03808223a1d78f178", &(0x7f0000000240)="7842c94dda5ae1cb05fa761f19c09c78605b3dd96762b518c447a4c65502098e63c3ea0b160b22e900b88036487ca68812ce913dd74c674cfe63288fe6a5fa608f7a2e7479151b0a8a0702684ed0652d455eac902b960c4914e21f6fd6f59598c9cb7a86cc72924237167567604012d9f3cd62d68b9ba043273f092f25f3b7583fdd031ce8cca69dd1050be673bf03381a2e5a5d2f6dda9aba23daaf912aca9f4a91608a55fdc92bc84af82ce7d6b661416a095ebbfdf9d8bb574ca347018ee7613ad70b64cd761205f9889409dcef81226137a6eae78a44c1f3868057648819ceb5fd4ad20af59ab6f06d"}) r3 = prctl$auto_PR_SET_MM_ARG_START(0x3, 0x8, 0xffffffffffffffff, 0xffff, 0x800) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/printk/parameters/ignore_loglevel\x00', 0x22000, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r4, &(0x7f0000003940)=""/4116, 0x1014) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$auto_IPVS_CMD_GET_DAEMON(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000001b80)={0x14, r7, 0x701, 0x70bd27, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x40000) msgctl$auto_IPC_STAT(0x6, 0x2, &(0x7f0000000100)={{0x3, 0x0, 0xee01, 0x6, 0x8, 0x7, 0x64c}, &(0x7f0000000080)=0x6, &(0x7f00000000c0), 0x0, 0x8000, 0x72a4, 0x3, 0x4, 0xc000, 0x7, 0x40, @raw, @raw=0x6}) shmctl$auto(0xffff, 0x3, &(0x7f0000000300)={{0x7, 0x0, 0x0, 0x1000, 0x400, 0x8, 0x2}, 0x25, 0x7, 0x6, 0x3, @raw=0x5, @raw=0x5aa1fd5a, 0xbbda, 0x0, &(0x7f0000000180)="50d1736653681f584efb60505e12555ac96fee438c12e184dc5b3304a42a2fba5387a3bd70951fa08f5c6cac7d95b2628eef2096711280dab310acceb142aef2e840e634df2dc8662236c426e0b29adc22c6ea234c380ddb15699d616756182cc5c0689eb6e1bb5a59a600f715384a60640b308c23aae8d155676b6b6d19e9f854358827416613474e18b44c2bc69253a11c8e6831c701bca33a55201349d302301353555cd6daf85a36f178d9fc2f5589132c6fdea2e38e053774e7e6dd7c4604ea31679b1b11544465aa5bd0510e09c124223e34a708d3792dd71da8c327a1db2281264de0fe96b1466a9ac779d2", &(0x7f0000000280)="7bcae40b251f9a7493f51b7706677fb58c9b5e3a061fad1d16a8bd0b4c1ab3c89448c14dbe007cb99271946681648957075e3a6921bfe4bbf9a7fef62c735a24d28fc334efdda4295113d4d67bc7ad53b4c25651a3f8aefa53b40478f2ce3d35f1eed80b27860ceda341628da5"}) r10 = setfsuid$auto(0xee00) setresuid$auto(r10, r10, r10) sendmsg$auto_IPVS_CMD_NEW_DEST(r5, &(0x7f0000000f40)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000f00)={&(0x7f0000000380)={0xa1c, r7, 0x4, 0x70bd29, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x91a}, @IPVS_CMD_ATTR_SERVICE={0x1d, 0x1, 0x0, 0x1, [@generic="9244381598bdea76c1b03b8568b6fb5d018545bb794650d01b"]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x80}, @IPVS_CMD_ATTR_SERVICE={0x3d4, 0x1, 0x0, 0x1, [@generic="0f806ef5b6d2e46a6f1bef15aa462f49f25453d9e7b9a02b4c7890dd83d41eb066b144c2dee27d28d865acc1931b0c8db03cccc8985e7f5c36a4bf65e4e68cca56e4839aec5fa55e8c1ff41bf7fdb6d93e3660f738f76f8def8483f9f50cb717dbfbc6ee1fb8af2e9c30c12bd43b8ef4e59ac7c78d83485d75e8f48fe1e04dac80e9b05e3c3df0ff62bc06b0b27515ff1f40b84c5ae5d416eda340c95d8dea55abd44336fde27af573bfc717e96ea9dc6afb7d66c210bca2463a33ea7ba1f3c98b319b11dc770c66d79aba5c56febd40b680d1ed5f27", @nested={0xb5, 0x90, 0x0, 0x1, [@typed={0x4, 0xae}, @generic="a34cec3c79444cb08332d99c4b9348f562958eedede79c05ba017bcba2ad4cb173ef3b2b1a9ce4483d70bae2ac9f2961bcebec688fb8532b32eedab33722585e4f17473cf680454edca7fd62909d62d09fc9603e5fcb28c5bb2b09a4d9638f4683cf42c80d4f74e4ea01a8193a5b9ce0ede563a630741504c47645c215de58610adfc554844ea0f93e15375278fb26ba28efc64936ad59f9c1c18ebd51f66ba2bad489c45c85104dcf6ff453c5"]}, @generic="a4b1740cb5fec957541c2f4f574515a5e90ec7b280be03a44c27641df198b635e1009faee66e08be29c722c51b046e529650a51bbe7f22d8838242b13c74c10af28d0863a546e16ff0cfece697e6a46951f12afd1e8942b3ade5c08ed4bd4782854a007de84ae6534a194035783019cf28257009e53437a2a345f2ca89e24dbf16b63167aa48058ec5845b0e457b4f2f247e28753ea1f39e1638a0d953bb509d8cf870c7961ef7c0df1c39f3974107d2fec7588d4cf3e0d5e0b45ad185fd56b4ac38283f8a8e3131f10b8faf75c8a6868ef2a905f3889894f628c6221b3f", @nested={0x161, 0x12f, 0x0, 0x1, [@nested={0x4, 0xd7}, @typed={0x8, 0x122, 0x0, 0x0, @uid=r8}, @generic="8f18e03ef597cd0325cc84336764ebd91cd64adc4655a7263500c02b663b33f5e259c6c4b8e809fcfa2c54040f46075e8860cb6d5252f4efe26c7044f14450dca7b8b84d7c9fa78d16d044204bc8f8940c73652f562dd0f5c0e6645d484e6eab778d000b45743982ce481c717cfa4914de9035f16c60b40f154646d437e1634bcb18802571338629536e7338d7098bbcb262648466b8b3c5ceeea79f28eae84d27bba27cfdd6d1e38638c65f642dece560292edc72b9f2ffcde1a93abc7df0cc964d8978001d3c524a222638c7f38b4b0a94587c54d445653440b0e356fe560ba76115538ef8e106bbd6095a", @generic="47fdfb7e195c2a75ff4795ece647f65a28e8f3ebfb74323bb22d267730b019ac4413f435d2d6abccaf04c47a6ba2702315a13f9c65e0b4a73e77da1b7fab8813b677250b023979f2fb890390f94af0b5f82e74466254f6bc46e00c6a8ece34f7fec167468c"]}]}, @IPVS_CMD_ATTR_DEST={0x2e3, 0x2, 0x0, 0x1, [@generic="42ad4ca8de5f6ffdf91b31ef499280f012f06a5889ed92334f38ff", @typed={0x14, 0x102, 0x0, 0x0, @ipv6=@empty}, @generic="762a807a846bf1d3e0c2d01321c4350956cfca6ad9ec56fcc66e8bb28d277bf49308bfc801818d2779548a7d1baf7750ee965edef1efd9a4a4183f80f177e69cc35512e7f45d70a5b7ec7a297f341d87c62115504ebf5b47cfdc4468e50fac6ec2fe4cae1fdddb1be2a871ca573750359f476133daf98052a9b5c7e1927d8df3915178c9", @nested={0x8, 0x5c, 0x0, 0x1, [@nested={0x4, 0xa}]}, @generic="bd2114f9378486e7f09fc0eb593a200899930e13dbb94cbefc1ebc7a94d2a463f81d151b0b91fe7f96c6208716a2a53b23d8c747f95c4bb592570b3819f829ee33069633f9dc5c5585c575d36cb62e1171f68e2e7c8d03c00dc1e1116f63a7f2", @typed={0x5, 0x14b, 0x0, 0x0, @str='\x00'}, @nested={0x170, 0x137, 0x0, 0x1, [@nested={0x4, 0x19}, @nested={0x4, 0xcc}, @generic="47aec442305ea4774810f5b6d8ce5375ef9558de9fb6d1aeb689fd6eefd6a6a0b89f27d0cf41df012255e7bde7d7547c330f9256a8c8a094b55646a46e80ce199633d0424182c2ae98420a347c4b747ce6ef87cc0c73c7ee26b56dac77b65d09a3db440d0e155b07de997cedf877b9688a64f217320d874eb0c3b90f85b5c6fbe989a68a80b08d51e2c1c4c88f78c9c33296b627fe329350b2ed911123861d7a1c278f7f7c873b17443314a5a1af8a7a64cf020f5877ffda76d44642760ea14c009531b69284bdc249fea12549f14863a4a8523792cdfcc3c55bbcb7b309b009308b352f3ad28142dd18", @nested={0x4, 0xb6}, @generic="1eb036ac790b4a1ca60ca9d87b9f8269126c878830d7c2d844774ee66b985d6044753416235133fd3eee4c2594ad02371c4bcbf288492a697f071f767e488488c1b66829fe32faf125d336bb31e52d1fa0a458a9418b8e4208aef1d748584487810a9d66c570904e8dbb", @typed={0x8, 0x105, 0x0, 0x0, @fd=r4}, @nested={0x4, 0xe4}]}, @typed={0x32, 0xcc, 0x0, 0x0, @str='/sys/module/printk/parameters/ignore_loglevel\x00'}, @generic="fea4b21c7e2f23170248db6b35b4ec9bfadeaf844ae726a7"]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3f7e}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xc438}, @IPVS_CMD_ATTR_SERVICE={0x154, 0x1, 0x0, 0x1, [@typed={0x8, 0x141, 0x0, 0x0, @fd=r4}, @typed={0x8, 0xf2, 0x0, 0x0, @u32=0x1}, @nested={0x140, 0xf1, 0x0, 0x1, [@typed={0x8, 0x130, 0x0, 0x0, @u32=0x953}, @typed={0x8, 0x125, 0x0, 0x0, @uid=r9}, @generic="4717fa1e436727d88281d0004251fd9b01895adf2ecf19776834e4d832dcaf58a716540fa34a95842c31e79d06520757657e168f2984ea0018628c3151a1d850576fbee24e44a29564ca855dba6e", @typed={0x7, 0x80, 0x0, 0x0, @str='/\x88\x00'}, @generic="e7558a264f7c9f479921a5617a18c8adba8d3d0399f8c19a8d02b932051423a6d38364bb77a84340bc112690e67a94ec644dffd634655a9252c5e414984dd9859729d89b1e996bf32691a9600e879e97276bbb084339cc2c05c47b76a0cd8a2a8c7c2857d0abd2fc5be85fb8595ed74da3db69487c8f6f2f970df953e90f1b9f2f0b14ae3c08164ed77c57fcea30d6d14769", @typed={0x8, 0x5, 0x0, 0x0, @uid=r10}, @typed={0x3a, 0xf, 0x0, 0x0, @binary="59866dad54168f82889bf6de85f9f13041e41027b67c2420bc13146b30a685705fa7036817fac83ee2bb0feedf8a75751ff5b83fafc3"}]}, @generic]}, @IPVS_CMD_ATTR_DAEMON={0x1bc, 0x3, 0x0, 0x1, [@nested={0x1b7, 0xb5, 0x0, 0x1, [@generic="a4143551e50bf29164636fd36162e5087f429d", @typed={0x8, 0x113, 0x0, 0x0, @fd=r4}, @nested={0x4, 0xb7}, @typed={0x8, 0xb1, 0x0, 0x0, @u32=0x400}, @generic="fdb57d40b7e8457f865b684c50c9bcf751bfdb55194cde99171900f27e1ac6ef5b43880b91d3e3292057b828bc990e9a2090c6df6cb8512b171937469a085d5e02185fbfb668f07035b3894cc51ae3fe024156ab08f18038b4d243e2f32a509b01eacd9327492422ce992ef2a368e12c59aecb9678b4d7ffc6b56a117c950285c3bf2c99380924722c5bf396957d4b3005c3fba42954ae46ac3fda9f9e1081426ad2a0cfdb8751c907c0a53a73fe90f9e0da1b3e80726973d86ac4d8e79bc803ed1d58d69cf838be75b423d0eb7b38fa19db424c17d110c3eaf1e46d", @nested={0x4, 0x68}, @generic="d6393b281ee0f45393143edadf24c412c7f342859e629c87a00688964f8e9c5f3097914476c4f5056b7dcba1712c971cf7f8b74630b982b25109348ce7b015991c806aeed9c36599a4fb71b53698ea3dc7dcddcf2c0dcdb116a8712af85d946c77c49546de5492c74e4940a011c5f34b993eaaef10fdf53d92b3fd2f5912fede6d644e0604ffd359ba5998cc07fd9019", @typed={0x8, 0xf4, 0x0, 0x0, @uid=0xee01}, @typed={0x14, 0x11c, 0x0, 0x0, @ipv6=@private2}]}]}]}, 0xa1c}, 0x1, 0x0, 0x0, 0x4000001}, 0x4000004) lstat$auto(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)={0x0, 0x6, 0x1, 0x8, 0xee01, 0xffffffffffffffff, 0x0, 0x7, 0x1, 0x5, 0xffffffff, 0x21cef533, 0x80000001, 0x8, 0x4, 0x0, 0x100000001}) r12 = setfsuid$auto(0xee01) getpriority$auto_PRIO_USER(0x2, r12) lstat$auto(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x6f, 0x1, 0x8, 0x3, r12, 0xee00, 0x0, 0x6, 0x722, 0x9, 0x7, 0x1, 0x3, 0x2c8ebe2a, 0x7c1, 0x1, 0x4}) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r0, &(0x7f0000001a00)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000019c0)={&(0x7f00000004c0)={0x14d4, r1, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@OVS_PACKET_ATTR_MRU={0x6}, @OVS_PACKET_ATTR_HASH={0xc, 0xb, 0x3}, @OVS_PACKET_ATTR_MRU={0x6, 0x9, 0x8}, @OVS_PACKET_ATTR_PACKET={0x12, 0x1, "f80f4ed525f37e5638ecb9795373"}, @OVS_PACKET_ATTR_KEY={0x18, 0x2, 0x0, 0x1, [@nested={0x8, 0x127, 0x0, 0x1, [@nested={0x4, 0x29}]}, @typed={0xc, 0x86, 0x0, 0x0, @u64=0x7}]}, @OVS_PACKET_ATTR_KEY={0x1202, 0x2, 0x0, 0x1, [@typed={0x8, 0x143, 0x0, 0x0, @pid}, @generic="6c7f14596dce4307b1477a5eb8d41ea4a03c404ee137115c4bd6fe37923d7f89112fb55b2a4545fc543c31a9f75bcfc3e4674d2346e69e75e472b710c1dddf6d5aaa2283b152db87ca9e06b21fccf21eccbb1780599914c43534d253ce5953601b0aac10ea319d9cea55413db3165d436c0b3f0d79c5045b6276c8a0f1ee5483c08b8363004c03f9507a0179f4d42681a38da9259b60de79a8419ca1e0a03590298115aa07cf7858e77eeb149d8181c13c606dc988906558c9a8aab9df0c92deac9affcea566604959be3319e35a4c9759415e12d9cb6c3677a5cee9477b9df80f6fc3eadc84da31a98d0f709777435f44", @generic="4373b5d39e325d5a08c8db2a1b2bbbec86c6fc08d80d7bb41f441f10aeb0df2a2e9d044033d2b75a585d56d83bb6fbb946e37c256e196a5db1f8b03f4803d9530900c43be7cc242a3bf99ff940df401ee156b917aa1b7fe82dc21d78cddbc2a38eca758abf52c5c48b420affac5522d60cf68e45256ed89a5afca0f4416ddfeb19d1cf0ba8fad96bfe52", @typed={0x8, 0x14, 0x0, 0x0, @uid=r2}, @typed={0x31, 0x96, 0x0, 0x0, @binary="f737921372e3978b0ef648ac1146c2c87500e1033483f997cd659f59d1e927f074d3107a166191bacd3b28f239"}, @typed={0xc, 0x77, 0x0, 0x0, @u64=0x100}, @generic="ac630f9a59a50363c435d4", @nested={0x1028, 0x4a, 0x0, 0x1, [@typed={0x8, 0x4a, 0x0, 0x0, @fd=r3}, @nested={0x4, 0x77}, @nested={0x4, 0xd9}, @generic="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", @typed={0x14, 0x14f, 0x0, 0x0, @ipv6=@mcast1}]}]}, @OVS_PACKET_ATTR_ACTIONS={0x268, 0x3, 0x0, 0x1, [@nested={0x1c, 0x44, 0x0, 0x1, [@nested={0x4, 0x75}, @nested={0x4, 0xb}, @nested={0x4, 0xfc}, @nested={0x4, 0x8b}, @typed={0x8, 0x54, 0x0, 0x0, @uid=r10}]}, @typed={0x4, 0x8e}, @generic="103972f44ee6c7eaf81ea0329e977a27f276704bfe8e2d82e237b25eae4b7403d2b65024d25ec8247ab4be8e0c2ece788a3ae85679d37b489fdf6188c00bd5a39492de82750920915a9a2e38fcf9d164e5a5420cc24dcbeac6b2d75ec07c54b6bdf0e9d9a0508f358c059367fcf4d20d0d25d19e9c0057877bc1a1274f77fa149f51abb7b56034741da0732b6cfbf7e37c82b429d4889085c980f2e9f7f1348dd2945383d67582e5813af1828d2c6d56e1bb3cdd3b9d9931584385124f73af8c60f013588b382a933958765b8e0b3334c3faf81706c171c53136aa3d24cbe1eb1c9bd87773a084d7a2a5", @nested={0xd2, 0xf2, 0x0, 0x1, [@nested={0x4, 0x14b}, @typed={0x8, 0x2, 0x0, 0x0, @uid=r11}, @nested={0x4, 0xef}, @generic="e0fb7341144dd9a5cc9ae110d39bdad1c21282e046b354c79772fd6aec176cf4538b5a39becc4ae7011e78ee18009af3742e6ccbd338f87c6058a217878e8022d2c0ca7701e804a5512fb1949cf27896b34c22f19c5f7bbd4f903d8044bd6d9fa9cae5d6ca436c08e4222516d782394fb187925b8305da34f433c4f39eb39336083112a937f6239f702cb81eff8d9767d8c1ca6fc3bc2f418ff21740181727c4528d80cdf77fbe5ecb21", @typed={0x14, 0x6e, 0x0, 0x0, @ipv6=@private1}]}, @typed={0xc, 0xdf, 0x0, 0x0, @u64=0x2}, @generic="8ca7e0def9d13ebbd758a15a6776963e1e98", @typed={0x60, 0x9f, 0x0, 0x0, @binary="eaafdcc9908686c20a84203f951698a7e1ec048aec7a80ff198798dc3ee9a72f5c3fa9beb6181f90f5f16c40d9f8168e90501fb0aebf3d8fafeeebd0e535b74c56db4b650e6161dcc68494820faa5a3421ad2a669d371d9ebf6c1bf0"}, @typed={0x8, 0xc3, 0x0, 0x0, @uid=r12}]}, @OVS_PACKET_ATTR_HASH={0xc, 0xb, 0x3}]}, 0x14d4}, 0x1, 0x0, 0x0, 0x8010}, 0x0) mmap$auto(0x3fffffffe000, 0x400005, 0x800000001, 0x3132, 0x1, 0xb2) mount$auto(&(0x7f0000000040), &(0x7f00000000c0)='.\x00', &(0x7f0000000100)='nfs\x00\x00X\xca\xd8\xce\xc1\xfc\x9f\x9f?o;\xf7\xdf\x9f\x11\xc5\xea\xd9', 0x8, 0x0) mmap$auto(0x3fffffffe000, 0x400005, 0x7fffffffffffffff, 0x3132, 0x6, 0x0) 1m47.268913395s ago: executing program 3 (id=4899): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000180), 0xffffffffffffffff) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/bus/usb/drivers/rndis_host/uevent\x00', 0x100000, 0x0) r2 = getpid() process_vm_readv$auto(r2, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000080), 0xffffffff}, 0x6, 0x0) r3 = socket(0xa, 0x1, 0x84) setsockopt$auto(r3, 0x0, 0x40, 0x0, 0x10000) sendmsg$auto_NFSD_CMD_LISTENER_SET(r0, &(0x7f0000003140)={0x0, 0x0, &(0x7f0000003100)={&(0x7f00000001c0)={0x14, r1, 0x1, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) 1m33.479893195s ago: executing program 34 (id=4893): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x10, 0x2, 0x14) socket(0x11, 0x80003, 0x300) socket(0x1d, 0x2, 0x7) socket(0x2, 0x1, 0x0) socket(0x10, 0x2, 0x0) socket(0x1d, 0x2, 0x7) socket(0xa, 0x2, 0x73) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_LISTENER_SET(r0, &(0x7f0000005380)={0x0, 0x0, &(0x7f0000005340)={&(0x7f0000000000)={0x38, r1, 0x1, 0x870bd2b, 0x25dfdbfc, {}, [@NFSD_A_SERVER_SOCK_ADDR={0x24, 0x1, 0x0, 0x1, [@NFSD_A_SOCK_TRANSPORT_NAME={0x19, 0x2, '/dev/cpu_dma_latency\x00'}, @NFSD_A_SOCK_ADDR={0x4}]}]}, 0x38}, 0x1, 0x0, 0x0, 0xc000}, 0x20000000) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x1, 0x0) socket(0xa, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_ETHTOOL_MSG_RINGS_SET(r2, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f0000001d80)={&(0x7f0000000040)=ANY=[@ANYRES16, @ANYBLOB="010027bd7000ffdbdf25100000000c00018008000100", @ANYRES32, @ANYBLOB="080006"], 0x28}, 0x1, 0x0, 0x0, 0x90}, 0x0) r3 = socket(0x10, 0x2, 0x14) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r3, &(0x7f0000003000)={0x0, 0x0, &(0x7f0000002fc0)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000000a14af"], 0x14}, 0x1, 0x0, 0x0, 0x80c3}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYRES8=r3], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4c084}, 0x51) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x2}, 0x3, 0x0) 1m32.134108757s ago: executing program 35 (id=4899): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000180), 0xffffffffffffffff) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/bus/usb/drivers/rndis_host/uevent\x00', 0x100000, 0x0) r2 = getpid() process_vm_readv$auto(r2, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000080), 0xffffffff}, 0x6, 0x0) r3 = socket(0xa, 0x1, 0x84) setsockopt$auto(r3, 0x0, 0x40, 0x0, 0x10000) sendmsg$auto_NFSD_CMD_LISTENER_SET(r0, &(0x7f0000003140)={0x0, 0x0, &(0x7f0000003100)={&(0x7f00000001c0)={0x14, r1, 0x1, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) 1m13.474365736s ago: executing program 5 (id=5008): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram2\x00', 0x10ba02, 0x0) getxattrat$auto(0xffffffffffffffff, 0x0, 0x1000, 0x0, 0x0, 0x1000) unshare$auto(0x40000080) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_kmsg_fops_printk(0xffffffffffffff9c, &(0x7f0000000000), 0x40001, 0x0) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x2, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r1 = openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x80201, 0x0) ioctl$auto_SNAPSHOT_AVAIL_SWAP_SIZE(r1, 0x80083313, 0x0) pidfd_open$auto(0x1, 0x0) openat$auto_qrtr_tun_ops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x4, 0x15f4da0a, 0x1, 0x4, 0x0, 0x80000001, 0x7, 0x6d39, 0x5, 0x2, 0x1]}, 0x0) r2 = prctl$auto(0x7, 0x2, 0x0, 0x8000001, 0xd) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r3 = epoll_create$auto(0x3e) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/vm/mmap_min_addr\x00', 0x143182, 0x0) epoll_ctl$auto(r3, 0x1, 0x8000000000000000, 0x0) write$auto(r2, 0x0, 0x100000a3d8) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) pidfd_open$auto(0x1, 0x0) write$auto(r2, 0x0, 0x9) pread64$auto(0xffffffffffffffff, 0x0, 0x5946, 0x7f) sendfile$auto(r0, 0x3, 0x0, 0x400000000006) 1m7.716505048s ago: executing program 5 (id=5017): mmap$auto(0x0, 0x20009, 0x8ca, 0xeb1, 0x401, 0x6) r0 = socket(0x2, 0x2, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) getrandom$auto(0x0, 0x6000000, 0x3) r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/neigh/vlan1/base_reachable_time\x00', 0x40400, 0x0) read$auto(r1, 0x0, 0x1ff) r2 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/maps\x00', 0x1a1000, 0x0) read$auto(r2, &(0x7f0000000100)='!#\\,^-\x00', 0x9) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0C0F:00/status\x00', 0xa140, 0x0) r4 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x8002, 0x0) ioctl$auto_XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, &(0x7f0000000580)={{r3, &(0x7f0000000380)="7c706c71ebab40864faae77f72fd437596b0eb580f39d79f8bc663d4f10184d770949bc943e14e33fe5c4af47a802405afed0eacb6d9e29fd5d3117f3f13ac922bf91fda27174ec3c9232359676290de76a3dcb4ce431d9fcef16a57bee2a230d5a9288f40a8ef6edca221489051c41422163dd1ede37ee4e866bfe9a4ee114fbaf0e5cc78629f344f4bf08aee35cbfaf91b1e58030bccfa3153009653fcdf1716eb7254f254069306c699b22823d10536cef6fe3b92a8a6571d2ccecbbe28681db7980900ff5e426385433d2bc21b26cb2ccd07679e45855761ee32dfdefbce6bf024160ec03a1047474434cf33", 0xffff, &(0x7f0000000280)="c94d86f8c911daaecf50f6acd6674e8e5bc6a2e961e5a2b63a8caea566d4c7c097a511e0778d11f1093a", 0x949, &(0x7f00000002c0)="cd175f3354af2669bb039c6a29a1775b4c", &(0x7f0000000300)=0x60d2}, {[0xffffa5ef, 0x7, 0x7, 0x8]}, 0x5, 0x5, &(0x7f0000000480)="78df041ec7f7cebfcb66659d184bfc5b3aa1ff4950b09fe0a3900ed5a8d75bdddde7ca92e262863079f0578379afaf33a8cac2aaf2b713000fc9fe03b6ddfed9d20a686a913468d609420950c8ff5af8316625b624e32a2d351367b19a56a014c6da6849cb294dcb64e3726ef54bbb1e8a5cb2e633dbcac365e3152b9ab9025390b09c1374b3f1287ea06cd5fe66f36d7984f53b438fac5affbd30107faaf0024e6b6719fd137e3e201033070a42daae738d11a30a0c5a0bf67900ed69199e8d2f0899f3fb56ba80f52aef4bf8c4bfa0125f"}) ioctl$auto_BCH_IOCTL_DISK_ONLINE(r5, 0x4010bc06, &(0x7f0000000600)={0xffffff01, 0x0, 0x9}) writev$auto(r4, &(0x7f0000000200)={0x0, 0x7}, 0x3) sendmsg$auto_NL80211_CMD_NOTIFY_RADAR(r0, 0x0, 0x4) r6 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000180)='/dev/v4l-subdev6\x00', 0x101482, 0x0) ioctl$auto_v4l2_fops_v4l2_dev(r6, 0x80085617, 0x0) rseq$auto(0x0, 0x40, 0x0, 0x6) futex$auto(&(0x7f0000000080)=0x2, 0xa, 0x0, 0x0, 0x0, 0x440a48d2) sendmsg$auto_NL80211_CMD_AUTHENTICATE(r0, &(0x7f0000000240)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xfffffffffffffc57, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x20000000}, 0x8045) r7 = gettid() rt_tgsigqueueinfo$auto(0x0, r7, 0x21, 0x0) migrate_pages$auto(r7, 0xa, &(0x7f0000000040)=0x220, &(0x7f0000000100)=0x8) read$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f0000000140)=""/122, 0x7a) madvise$auto(0xfe, 0x6, 0x0) 1m6.912665822s ago: executing program 5 (id=5021): mmap$auto(0x0, 0x400008, 0x36, 0x1009b72, 0x2, 0x8000) (async, rerun: 32) r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio1\x00', 0x8000, 0x0) (rerun: 32) read$auto(r0, 0x0, 0x8) (async) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000300)='/sys/devices/virtual/net/bond0/bonding/arp_ip_target\x00', 0x80000, 0x0) read$auto(r1, 0x0, 0x3) (async) socket(0x1e, 0x805, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/snd/controlC1\x00', 0x802, 0x0) (async) r2 = pidfd_getfd$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x15) ioctl$auto_dma_heap_fops_dma_heap(r2, 0xff7ffffffedffdfc, 0x0) (async, rerun: 64) r3 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/card0\x00', 0x0, 0x0) (rerun: 64) ioctl$auto_PPPIOCSPASS(r2, 0x40107447, &(0x7f0000000100)={0x9, &(0x7f0000000080)={0xc, 0x6, 0x0, @inferred=r3}}) (async) ioctl$auto(0x3, 0x40045532, 0x38) (async) openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/pcmC1D0c\x00', 0x88c00, 0x0) 1m5.39282608s ago: executing program 5 (id=5026): close_range$auto(0xffffffffffffffff, 0xa, 0x6) socket(0xa, 0x2, 0x0) r0 = socket(0xa, 0x3, 0x3) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) r1 = io_uring_setup$auto(0xfff, 0x0) socket(0xa, 0x1, 0x6) r2 = socket(0x11, 0x80003, 0x300) r3 = socket(0x10, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), r2) sendmsg$auto_L2TP_CMD_SESSION_GET(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x24, r5, 0x1, 0x74bd2b, 0x25dfdbfc, {}, [@L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x1}, @L2TP_ATTR_CONN_ID={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x2400c800}, 0x20000044) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x34d802, 0x0) r6 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, r6, 0x0) r7 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000080), 0x88000, 0x0) ioctl$auto_KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r7) ioctl$auto_KVM_GET_MSRS(r6, 0xc008ae88, &(0x7f0000000100)={0x3, 0x0, [{0x4d0, 0x10, 0x1}]}) sendmsg$auto_L2TP_CMD_TUNNEL_GET(r3, &(0x7f00000001c0)={&(0x7f0000000100), 0xc, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c777230603e06e04292", @ANYRES16=r5, @ANYBLOB="200026bd7000fedbdf250400000006001b004e20000008001800070000000500040000000000050006001000000006000e00a9000000"], 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x9010) ioctl$auto_TIOCCONS2(r1, 0x541d, &(0x7f0000000000)="f5a1f05c9669f3103cfaa009e29577065320ec1690398f9ab0c9307f39acd722390716103d729722e3ba0cd2ad54bbcf70d7e6e3e9135af1fe7e8285d193d6cecc55fbcdb7406ebeba25fe0615f3f9f3ee1db71b4575c62d5baf9fbf4518e88b3bdd37845e1c7866766d6178b1e89dde54b4f8160a6909b097aa79c2a0a11c4e78a0efe7b48c70eb15177d8d74fb61561a2ba597023b76a692d2c9c97e6c0b5c6a47f99ec760d911dc2a855e8950df73f6bf743364afc0d6420f253d1bdf6ecf80ef7e55c36cd73df6497c2ad6e0437006b5ae72fb8883180a3b3a63a1d1696c7f2bf7ccd9") socket(0x2, 0x3, 0x2) socket(0x2, 0x3, 0x104) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, 0x0, 0x40, 0x0) socketpair$auto(0x1ff, 0x8, 0xb, 0x0) connect$auto(r0, 0x0, 0x55) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000300), r3) socket(0x2d, 0x2, 0x0) 1m4.791391764s ago: executing program 5 (id=5029): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) (async) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0) (async, rerun: 32) chdir$auto(&(0x7f0000000000)='}[,&*}\x00') (rerun: 32) r0 = open(&(0x7f0000000100)='.\x00', 0x0, 0x0) ioctl$auto_FS_IOC_FSSETXATTR(r0, 0x401c5820, 0x9) mmap$auto(0x0, 0x3, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) (async) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0x4) (async) socket(0x10, 0x3, 0x6) (async, rerun: 64) setgroups$auto(0x0, &(0x7f0000000100)) (async, rerun: 64) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/system/memory/auto_online_blocks\x00', 0x400, 0x0) (async) socket(0x1e, 0x1, 0x0) (async) r1 = socket(0x10, 0x2, 0x4) (async) r2 = socket(0x10, 0x3, 0x6) (async) r3 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)=ANY=[@ANYBLOB="f0020000", @ANYRES16=r3, @ANYBLOB="01002dbd7000fedbdf2505000000da0203800800c000e000000204002a000400110008002e00", @ANYRES32, @ANYBLOB="d152e64e22695352dd73864415aa8a78c65e6ab752fb4d469a47a092ae7d5061cdd9690cac4138553ecfbb1b32dd7c33b14cc842bc1e2a5da4203e64ceaa9db5223aa655b6313c011b3e73a75f1aa1f7b2ea43344b15bd494886e355cf6d92c8fe670a42bc677830013e9c4aa4fa30c3e6630bf0ed13206d5a18f6813c6fb03466112aedf5d67bb5b99fe96a6dcd279916b0bce029925b63c48d41ca8a76e46c6014100005800c00c50003000000000000000c02368008027a8087010c800800e800", @ANYRES32=r1, @ANYBLOB="0800fb00", @ANYRES32=r2], 0x2f0}, 0x1, 0x0, 0x0, 0x40000}, 0x50) (async) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) r4 = openat2$auto(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x5, 0x4b, 0x4}, 0x8) mmap$auto(0x0, 0xaaf, 0x4000000000df, 0x40000000000eb1, r4, 0x8000) (async, rerun: 64) socket(0x2, 0x2, 0x0) (async, rerun: 64) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) (async) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x70007fc) 1m3.830380383s ago: executing program 5 (id=5033): r0 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) write$auto_console_fops_tty_io(r0, &(0x7f0000000000)="4c91f2c388274610e12c861bb2bfd9800e9b396d", 0x14) msync$auto(0x1ffff000, 0x1800000000000fe, 0x1) 48.502974567s ago: executing program 36 (id=5033): r0 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) write$auto_console_fops_tty_io(r0, &(0x7f0000000000)="4c91f2c388274610e12c861bb2bfd9800e9b396d", 0x14) msync$auto(0x1ffff000, 0x1800000000000fe, 0x1) 5.114300321s ago: executing program 0 (id=5198): r0 = openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) socketpair$auto(0x100, 0x4, 0x3, &(0x7f00000000c0)=0x2) cachestat$auto(r0, &(0x7f0000000040)={0x4, 0x96cd}, &(0x7f0000000080)={0x5, 0xffff, 0x1ff, 0x4, 0xf}, 0xfffffc61) socket(0xa, 0x3, 0x3b) setsockopt$auto(0x400000000000003, 0x9, 0x16, 0x0, 0x20056b) 4.806408561s ago: executing program 0 (id=5201): mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) mmap$auto(0x200000005, 0x400008, 0x2000000000dd, 0x9b72, 0xffffffffffffffff, 0x1) bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x9, 0x21eb, 0x7ff, 0x6, 0xa, 0x1000009, 0x5f, 0x0, 0xffffffffffffffff}, 0x6f3) mmap$auto(0x0, 0x400008, 0xdf, 0x100000009b72, 0x2, 0x8000) setsockopt$auto(0x3, 0x0, 0x20, 0x0, 0x28) openat$auto_urandom_fops_random(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$auto_NET_SHAPER_CMD_GROUP(0xffffffffffffffff, 0x0, 0x14) openat$auto_tap_fops_tap(0xffffffffffffff9c, 0x0, 0x1, 0x0) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000380), r0) sendmsg$auto_NL80211_CMD_DEL_PMK(r0, &(0x7f0000000680)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2005000}, 0xc, &(0x7f0000000640)={&(0x7f00000006c0)=ANY=[@ANYBLOB="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", @ANYRES16=r1, @ANYBLOB="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"], 0x25c}, 0x1, 0x0, 0x0, 0x890}, 0x80) openat$auto_trace_time_stamp_mode_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/timestamp_mode\x00', 0x101800, 0x0) lseek$auto(0x3, 0x7fffffffffffffff, 0x1) ioctl$auto_UDMABUF_CREATE_LIST(0xffffffffffffffff, 0x40087543, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) sendmsg$auto_NL80211_CMD_SET_QOS_MAP(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000003c0)={&(0x7f0000000b00)={0x810, r1, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [@NL80211_ATTR_BSS_BASIC_RATES={0xe, 0x24, "296c339057aca9dcf56d"}, @NL80211_ATTR_FREQ_FIXED={0x4}, @NL80211_ATTR_BEACON_HEAD={0x7ae, 0xe, "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"}, @NL80211_ATTR_HE_BSS_COLOR={0x2c, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x6}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x62}]}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x9}, @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}]}, 0x810}, 0x1, 0x0, 0x0, 0x8000081}, 0x20000041) mmap$auto(0x0, 0x2020009, 0x3, 0xeb2, 0xfffffffffffffffb, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/neigh/dummy0/proxy_qlen\x00', 0x2000, 0x0) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mtrr\x00', 0xc0001, 0x0) ioctl$auto(0x3, 0xc0104d03, r3) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0x8, 0x0, 0x0, &(0x7f0000000300)={[0x8, 0x5, 0x5, 0xffffffffffffffd1, 0x948b, 0x3, 0x15f4da0e, 0x5, 0x4, 0xaef6, 0x80000001, 0x10001, 0x200000000004, 0x5, 0x20000000001, 0x1]}, 0x0) write$auto(r2, &(0x7f0000000240)='//ev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x5014c0, 0x0) lstat$auto(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x6f, 0x1, 0x8, 0x3, 0x0, 0xee00, 0x0, 0x6, 0x722, 0x9, 0x7, 0x1, 0x3, 0x9, 0x7c1, 0x1, 0x4}) msync$auto(0x1ffff000, 0x1800000000000fe, 0x400000004) close_range$auto(0x0, 0xe903, 0x2) socket(0x1e, 0x4, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020007, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) 4.61436374s ago: executing program 6 (id=5202): close_range$auto(0x2, 0x8, 0x0) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vbi17\x00', 0x1a9001, 0x0) epoll_create$auto(0x4) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, 0x0, 0x801, 0x0) openat$auto_dev_fops_plock(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) openat$auto_qrtr_tun_ops_tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) capget$auto(0x0, 0xfffffffffffffffe) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) write$auto(r0, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) lsm_set_self_attr$auto(0x3, 0x0, 0x7, 0x3) select$auto(0x5, 0x0, &(0x7f00000005c0)={[0x5, 0x80000001, 0x6, 0xffffffffffff77c8, 0x9, 0x80000001, 0x8, 0xfffffffffffffffa, 0x0, 0x5, 0x400, 0x5, 0x5, 0xfffffffffffffff4, 0xb, 0xffffffffffffffff]}, &(0x7f00000006c0)={[0x1, 0x4, 0x0, 0xffffffffffff8957, 0x7fff, 0xc9a2, 0x9, 0xfffffffffffffdfe, 0x2, 0x0, 0xfffffffffffffc01, 0x3, 0x6, 0x2, 0xfffffffffffffff7, 0xfffffffffffffffc]}, 0x0) 4.314652953s ago: executing program 7 (id=5204): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/ati_remote2/parameters/channel_mask\x00', 0x1e1842, 0x0) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) write$auto(0x3, 0x0, 0xfdef) (async) mmap$auto(0x0, 0x10001, 0x36, 0x1009b72, 0x2, 0x8000) (async) r0 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0) read$auto(r0, 0x0, 0x1f40) (async) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, 0x0, 0x80802, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/fs/cifs/SecurityFlags\x00', 0x48041, 0x0) (async, rerun: 64) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) (async) r1 = signalfd4$auto(0xffffffff, 0x0, 0x8, 0x0) (async) ppoll$auto(0x0, 0x3, 0x0, 0x0, 0x8) (async) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x2, 0x1) (async) socketpair$auto(0x1e, 0x1000, 0x0, 0x0) (async) io_uring_setup$auto(0x2, 0x0) (async) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x101982, 0x0) (async, rerun: 64) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) (async, rerun: 64) ioctl$auto_TUNSETNOCSUM(r1, 0x400454c8, &(0x7f0000000100)=0x7) bpf$auto_BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000140)=@bpf_attr_11={0x3, 0x8, 0x84, 0xb, 0x7, 0x0, 0x0, r2}, 0x4) (async) ioctl$auto_TIOCSETD2(r2, 0x5423, 0x0) (async) socketpair$auto(0x5b, 0x1, 0x420000, 0x0) (async, rerun: 64) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000200)='/dev/tty45\x00', 0x540, 0x0) (async, rerun: 64) bpf$auto_BPF_OBJ_GET_INFO_BY_FD(0xf, &(0x7f0000000240)=@link_detach, 0x1) (async) ioctl$auto_TIOCVHANGUP2(r2, 0x5437, 0x0) (async) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r3, &(0x7f00000000c0)={0x0, 0xffffffff}, 0x6) (async) openat$auto_ns_file_operations_nsfs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/thread-self/ns/cgroup\x00', 0x80, 0x0) 3.718533452s ago: executing program 0 (id=5205): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x20202, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2a, 0x3, 0x2) r0 = socket(0x2, 0x3, 0xa) connect$auto(0xffffffffffffffff, &(0x7f0000000080)=@l2tp={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x2}, 0x54) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) recvmmsg$auto(r0, 0x0, 0x400fffd, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x6, 0x7000000) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) bpf$auto(0x5, &(0x7f00000001c0)=@bpf_attr_7={@prog_id=0xc, 0x92f1, 0x4}, 0xa) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x2, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0xe986, 0xdb, 0xeb1, 0x401, 0xa) socket(0x10, 0x2, 0x4) socket(0x1d, 0x2, 0x7) socket(0x2, 0x1, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) r2 = socket(0x10, 0x2, 0x4) close_range$auto(0x2, 0x8, 0x0) r3 = socket(0x10, 0x2, 0xc) sendmsg$auto_TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000003740)={&(0x7f0000000000)=ANY=[@ANYBLOB="b1000000", @ANYRES16, @ANYBLOB="01"], 0x20}, 0x1, 0x0, 0x0, 0x41}, 0x40080) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYRES8=r3, @ANYBLOB="18000000", @ANYRES8=r1], 0x18}, 0x1, 0x0, 0x0, 0x60008004}, 0x40000f0) write$auto(r2, &(0x7f0000000000)='-\x00', 0x30) 3.71647731s ago: executing program 6 (id=5206): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) ustat$auto(0x801, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @loopback}, 0x6a) r2 = socket(0x2, 0x5, 0x0) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, 0x0, 0x7, 0x0, 0x2, 0xb}, 0xfff}, 0x5, 0x311) sendmmsg$auto(r2, &(0x7f0000000100)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0xff80}, 0x7, 0x0, 0x4, 0xb}, 0x8}, 0x5, 0x7fffffff) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)={0x40, r1, 0x1b, 0x74bd26, 0x25dfdbfd, {}, [@OVS_PACKET_ATTR_PROBE={0x4}, @OVS_PACKET_ATTR_ACTIONS={0x10, 0x3, 0x0, 0x1, [@nested={0xc, 0x6, 0x0, 0x1, [@typed={0x8, 0x2f, 0x0, 0x0, @fd}]}]}, @OVS_PACKET_ATTR_PACKET={0x12, 0x1, "898771f1c19f17790485908286dd"}, @OVS_PACKET_ATTR_KEY={0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000041}, 0xc000) 3.6163439s ago: executing program 6 (id=5207): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket(0x2, 0x1, 0x106) bind$auto(0x3, &(0x7f0000000000)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) sendmsg$auto_NCSI_CMD_SET_INTERFACE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x4000010}, 0x1) setsockopt$auto(r0, 0x1, 0x12, 0x0, 0xeb66) (async) setsockopt$auto(r0, 0x1, 0x12, 0x0, 0xeb66) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nbd8\x00', 0x0, 0x0) bpf$auto_BPF_BTF_LOAD(0x12, &(0x7f0000000040)=@bpf_attr_7={@btf_id=0x2e9, 0x9, 0x9, r1}, 0x9) (async) bpf$auto_BPF_BTF_LOAD(0x12, &(0x7f0000000040)=@bpf_attr_7={@btf_id=0x2e9, 0x9, 0x9, r1}, 0x9) ioctl$auto(r1, 0xab07, 0xffffffffffffffff) (async) ioctl$auto(r1, 0xab07, 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), r2) open(&(0x7f0000000040)='./file0\x00', 0x149443, 0x0) (async) open(&(0x7f0000000040)='./file0\x00', 0x149443, 0x0) mq_getsetattr$auto(0xd, &(0x7f0000000200)={0x0, 0x5, 0x7f, 0x10}, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_7={@link_id=0x1, 0x3, 0x3}, 0x6f3) (async) bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_7={@link_id=0x1, 0x3, 0x3}, 0x6f3) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) (async) io_uring_setup$auto(0x6, 0x0) socket(0xa, 0x3, 0x6) (async) socket(0xa, 0x3, 0x6) socket(0x11, 0x80003, 0x300) socket(0x10, 0x2, 0x0) socket(0x2, 0x3, 0x2) socket(0x2, 0x3, 0x104) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, 0x0, 0x40, 0x0) (async) openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, 0x0, 0x40, 0x0) socketpair$auto(0x3, 0x5, 0x7, 0x0) mount$auto(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='nfs4\x00', 0x200, &(0x7f00000001c0)) sendmsg$auto_NFSD_CMD_RPC_STATUS_GET(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000006c0)={0x14, r4, 0x309, 0x70bd27, 0x25dedbfc}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) 3.326223392s ago: executing program 8 (id=5208): mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) (async) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0x6, 0x4) (async) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0xfffffdcb, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x200040c4}, 0x440c5) (async) setfsuid$auto(0xee00) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) mmap$auto(0x0, 0x400, 0xdf, 0xeb1, 0x1272, 0x8000) (async) socket(0x2, 0x801, 0x106) (async) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, &(0x7f0000000100)={{@raw=0xb, 0x3, 0xcf, 0x8, "16a0d89bf208384515b5375a677609aa1bc737276563c3d5a2fca999d5797ab7a10a4d2bc341c4bd369ae535", @raw=0xfffffffe}, 0x1, @integer=@value=[0x6d, 0x7, 0x0, 0xbb, 0x4, 0x80000000, 0x1, 0x7ff, 0x1, 0x400000000009, 0xc4, 0x9, 0x6, 0x4, 0x3, 0x6, 0x1, 0x3, 0x4, 0x401, 0x6, 0x0, 0xa0, 0x5, 0x2, 0x3, 0x5, 0xa, 0x8, 0x1, 0x8, 0x7f, 0xffffffffffffdb75, 0x100000000, 0x3, 0x7, 0x7fffffffffffffff, 0x1, 0xd, 0x1, 0x71, 0x0, 0x8, 0x2, 0x3, 0xffffffffffffffff, 0x2d7, 0x1, 0x1, 0x6, 0x2, 0x800000001, 0x6, 0x7, 0x0, 0x6, 0x4, 0x3, 0x40a, 0xd, 0x3fd, 0x8, 0x7, 0xffff, 0x50ce0883, 0xbd9, 0x5, 0x2, 0xd8f, 0x80000000, 0x0, 0x1, 0x46e, 0xa5cf, 0x8, 0x7, 0xc16b, 0x6, 0x9, 0x6, 0x8000002, 0x8, 0x1, 0x3, 0x3, 0x5, 0x6, 0xffffffffffff0001, 0x100000000, 0x4, 0x8, 0x4, 0x2, 0x2000000003, 0xfffffffffffffffe, 0x20007cf9, 0x40, 0x2, 0x7, 0x100, 0x14b, 0x2, 0x45f3, 0x0, 0x0, 0x4, 0x100, 0x8001, 0x0, 0x1, 0x7, 0x9, 0x1, 0x3, 0x0, 0x4, 0x7, 0x6, 0x25e2, 0xc9a, 0xd09, 0x40, 0x2, 0xffffffffffffff00, 0x7, 0x9, 0xfffffffffffffff8, 0x40], "f3fadb90a56b67d92a5b28b4b23f332550b1e5454e2027fb1a37efe81bbc27deaf7c3100aab088cdb3b40dad335c9174f18934845ac3152fef1e0f42b42471efc0225a4ebe7e05ce3d4ab429805d5921633ffbce8f1a82ff9dec6c288f431cb7005b85ca8633c55d49bbdf4bd9cac1046064001bca7ba37e4b5eacf1940c9a78"}) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) (async) io_uring_setup$auto(0x8, &(0x7f0000000140)={0x0, 0x1, 0x9, 0x210001, 0xc, 0xc05, 0xffffffffffffffff, [0x7fd, 0x1001, 0x3], {0x9, 0x3, 0x6, 0x0, 0x4, 0x895, 0x3fdc, 0x6, 0x5}, {0x2, 0x1d11, 0x54ed, 0x0, 0x101, 0xff, 0x7, 0xa, 0xb}}) sendmsg$auto_NL802154_CMD_SET_CHANNEL(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16, @ANYBLOB="000329bd7000fedbdf250900000008000c000100008008000300", @ANYRES32, @ANYBLOB="08002c000001000008001d"], 0x3c}, 0x1, 0x0, 0x0, 0x20000828}, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22040, 0x75) (async) r2 = socket(0x10, 0x2, 0x0) sendmsg$auto_HWSIM_CMD_DEL_RADIO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="01eb"], 0x14}, 0x1, 0x0, 0x0, 0x20040800}, 0x24004000) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)=ANY=[@ANYRESOCT=r2, @ANYRES64=r0], 0x1ac}}, 0x40000) (async) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x3}, 0x3ef3}, 0x3, 0x0) syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000040), 0xffffffffffffffff) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'veth0\x00'}) (async) r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS1\x00', 0x20000, 0x0) ioctl$auto_TIOCSTI2(r4, 0x5412, &(0x7f0000000080)="8ce968f6d33e1d1a4f6a2f12f470f8cdb7dfeaf02768589362668247de44a359e8d9c13d4e52cc42ef43f1d4c965d3d505ad05f2c97a5541863adc5154e4028bdf351c0900000421cd3d73083f859a25a8b713916bb90e14883914f1b33ebd88ce433cff55ac") r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000cc0), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_MPATH(r5, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="01032dbd707224000010"], 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x4048090) (async) mmap$auto(0x0, 0x400008, 0x4, 0xa910, 0xffffffffffffffff, 0x8000) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) io_uring_setup$auto(0x6, 0x0) 3.321287105s ago: executing program 6 (id=5209): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) write$auto(0x1, 0x0, 0x80000000) socket(0x15, 0x5, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) ustat$auto(0x801, 0x0) mmap$auto(0x0, 0x9, 0xffb, 0x8000000008011, 0x3, 0x0) read$auto(0x3, 0x0, 0x80) mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) syz_genetlink_get_family_id$auto_l2tp(0x0, 0xffffffffffffffff) socket(0xa, 0x5, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x109401, 0x0) close_range$auto(0x2, 0x8, 0x0) close_range$auto(0x2, 0xa, 0x0) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x101000, 0x0) 2.999774205s ago: executing program 8 (id=5210): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/virtual/block/nbd5/integrity/read_verify\x00', 0x0, 0x0) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/lru_gen\x00', 0x155cd11c0a84d595, 0x0) read$auto(r0, 0x0, 0xacf) 2.91384941s ago: executing program 7 (id=5211): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram13\x00', 0x14fa02, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/pci0000:00/pci_bus/0000:00/rescan\x00', 0xa001, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) unshare$auto(0x5) r0 = socket$nl_generic(0x10, 0x3, 0x10) pwrite64$auto(0xc8, &(0x7f0000000000)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x00\rs\x1cJ\x99\x00:c\x14\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02l@\x18*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2', 0x4e, 0x1) close_range$auto(0x0, 0xfffffffffffff000, 0x2) bpf$auto(0x0, &(0x7f0000000100)=@bpf_attr_5={@target_fd=0x5, 0x7f, 0x9c, 0x7b2, 0x1, @relative_fd=0x2, 0x80}, 0x96) bpf$auto(0x18, &(0x7f0000000040)=@raw_tracepoint={0x0, 0xffffffffffffffff, 0x0, 0x800}, 0x92) r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000002a80), r0) sendmsg$auto_ETHTOOL_MSG_MODULE_SET(r0, &(0x7f0000002b80)={0x0, 0x0, &(0x7f0000002b40)={&(0x7f0000000200)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010028bd7000fddbdf25230000001000018014003b17cc5771010040e65a5f62726964676500050002000100000051ef09369f31674974e60530ebe9583719a83c32ddee3d73f2f97b9c05373daadbb09139430a586d049e734bcaf620051520ae91d813a0ff2fb5c7b96527b863edea9b54ee0b4699c2c1c6112235d0f2bed9c1b52f797da7ab56f9cd9fff8d990783600d6e99198ec4e46fd0d4b335cc8792"], 0x34}, 0x1, 0x0, 0x0, 0x881}, 0xc810) r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/ip6frag_low_thresh\x00', 0x42000, 0x0) read$auto(r2, 0x0, 0x201) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) mmap$auto(0x0, 0x810004, 0x400000000ffb, 0x8000000008011, 0x3, 0x8000) mknod$auto(&(0x7f0000000000)='}[,&*}\x00', 0x1, 0x4) unlink$auto(&(0x7f00000001c0)='}[,&*}\x00') r3 = openat$auto_evm_xattr_ops_evm_secfs(0xffffffffffffff9c, &(0x7f0000000140), 0x189000, 0x0) r4 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) sendmsg$auto_THERMAL_GENL_CMD_THRESHOLD_FLUSH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001bc0)=ANY=[@ANYRESDEC=r4, @ANYBLOB="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"], 0x2bc4}, 0x1, 0x0, 0x0, 0x20008010}, 0x24000080) write$auto_console_fops_tty_io(r4, &(0x7f0000000440)="671d2647dd69b6440843b6e6688a2b5ad9df2669e6f9cd2365", 0xfdef) readv$auto(r3, &(0x7f00000018c0)={0x0, 0x1}, 0x9) madvise$auto(0x7, 0xf340, 0x6) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) write$auto(0x3, 0x0, 0xfffffdef) 2.662831539s ago: executing program 8 (id=5212): setresuid$auto(0x2, 0x7, 0x8080) r0 = getpid() r1 = pidfd_open$auto(r0, 0x0) setns(r1, 0x20000000) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x50000, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) fanotify_init$auto(0x6a1, 0x2000000000002) socket(0x26, 0x80805, 0x0) statmount$auto(0x0, &(0x7f0000000040)={0x0, 0x2, 0x5ae, 0x5, 0xb, 0x6, 0xfffd, 0x1, 0xa, 0x8, 0x6, 0x9, 0x7, 0x4, 0x1ff, 0x2, 0x8, 0x7, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x8000000000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xf]}, 0x6, 0x1000000) bpf$auto(0x12, &(0x7f0000000040)=@link_detach, 0x26) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x11, 0x3, 0x9) mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb2, 0x401, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) close_range$auto(0x2, 0xffffffffffffffff, 0x0) open(0x0, 0x261c2, 0x84) r2 = socket(0x18, 0x2, 0x0) close_range$auto(0x0, 0xffffffffffffffff, 0x2) socket(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x18, 0x5, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_smc_gen_netlink(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$auto_SMC_NETLINK_FLUSH_UEID(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000800)={0x14, r3, 0x1, 0x70bd2a, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20008041}, 0x80) unshare$auto(0x40000080) sendmsg$auto_NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x40000c8) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="54eb157a", @ANYRES16=r5, @ANYBLOB="010025bd7000f7dbdf250100003f0600020001000000050007005800000008000a000800000014001f000000000000000000000000000000000114002000fe8000000000000000000000000000bb"], 0x54}, 0x1, 0x0, 0x0, 0x44000}, 0x0) socket(0x19, 0xa, 0x8) 2.588320603s ago: executing program 0 (id=5213): socket(0xa, 0x80000, 0x84) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) bind$auto(0x3, &(0x7f0000000140)=@in={0x2, 0x3, @empty}, 0x6a) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/system/cpu/cpu1/power/pm_qos_resume_latency_us\x00', 0x183042, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000000)="4f72b0", 0x3) r1 = openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/status\x00', 0x2, 0x0) connect$auto(r1, &(0x7f0000000080)=@llc={0x1a, 0xff3658dd164fbed0, 0x8, 0x74, 0x1, 0xd}, 0xd4) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000600)='/sys/devices/virtual/net/nr11/queues/rx-0/rps_flow_cnt\x00', 0x20681, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) futex$auto(0x0, 0x3, 0x2, 0x0, &(0x7f0000002440)=0x8, 0x71a8dce0) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/admmidi2\x00', 0x3, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r3, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) socket(0x5, 0x5, 0x8000) close_range$auto(0x2, 0x8, 0x0) r4 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/interrupts\x00', 0x18b202, 0x0) pread64$auto(r4, 0x0, 0x6, 0x1ff) readv$auto(0x3, 0x0, 0x4) unshare$auto(0x40000080) r5 = open(0x0, 0x161342, 0x130) write$auto_dynamic_events_ops_trace_dynevent(0xffffffffffffffff, 0x0, 0x0) fallocate$auto(0x8000000000000003, 0x0, 0x9, 0x4cbd5d) mmap$auto(0xf22, 0x6, 0xfd5, 0x1e, r5, 0x0) writev$auto(0x3, &(0x7f0000004100)={0x0, 0x2000000b}, 0x3ff) mmap$auto(0x0, 0x40000a, 0xdf, 0x9b74, 0x2, 0x8004) setfsuid$auto(0xee00) fchmod$auto(r2, 0x6) socket(0x10, 0x2, 0xc) socket$nl_generic(0x10, 0x3, 0x10) 2.150933116s ago: executing program 6 (id=5214): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x2, 0x12, 0x93f, 0x1fee1, 0x3, 0xa, 0xfffffffffffffffe, 0x9, 0x5, 0x8005, 0xf, 0xb0, 0x9, 0x5, 0x3, 0x8, 0x4, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, [0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xfffffffffffffffc, 0x0, 0x7fffffffffff, 0x9, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xed, 0x0, 0x0, 0x0, 0x1]}, 0x1fe, 0x82) r0 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/038/001\x00', 0x882, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x5, 0x14, 0x944, 0x1ffe0, 0x8, 0x6, 0x4000007, 0x9, 0x400005, 0x4000fff, 0x8000007, 0x8001, 0x3, 0x5, 0x3, 0x40, 0x7, 0x1d, 0x309, 0x6, 0x4, 0x7fffffff, 0x3, 0x0, 0x0, 0xffffffff, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0, 0x2839bf5c, 0x4000000000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x800000000002, 0x9, 0x100000000000, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x10, 0xfffffffffffffffe, 0x0, 0x19d, 0x0, 0x0, 0x2961]}, 0x1fb, 0x81) mmap$auto(0x0, 0x20009, 0x4000000000d9, 0xeb1, 0x401, 0x7ffc) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x40881}, 0x24044855) socket(0x10, 0x2, 0x0) sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x1f00, &(0x7f0000000100)={0x0, 0xb}, 0x5, 0x0, 0x20d, 0x4}, 0x200800}, 0xa9e8, 0x4208) r1 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0xb0681, 0x0) mmap$auto(0x2, 0x207, 0x7, 0x80000011, r1, 0x2000000000009) ioctl$auto_MON_IOCQ_RING_SIZE(0xffffffffffffffff, 0x9205, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000080), r2) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/irq/2/hwirq\x00', 0x0, 0x0) read$auto(r0, 0x0, 0x2) mmap$auto(0x0, 0x2020009, 0x3, 0x80000000000eb1, 0xfffffffffffffffa, 0x8000) name_to_handle_at$auto(0xffffffffffffffff, &(0x7f0000000480)='/\x00', &(0x7f0000000280)={0xc, 0x200, "970bde1fcf44aca36348351c"}, 0x0, 0x1001) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}, 0x1, 0x0, 0x0, 0x4008040}, 0x40800) unshare$auto(0x40000080) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = set_tid_address$auto(0x0) syz_open_procfs$namespace(r3, &(0x7f0000000080)) syz_clone(0x124a000, 0x0, 0x0, 0x0, 0x0, 0x0) read$auto(0xffffffffffffffff, 0x0, 0xea) r4 = openat$auto_bm_register_operations_binfmt_misc(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) write$auto(r4, 0x0, 0xff) read$auto(0xffffffffffffffff, 0x0, 0x0) writev$auto(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x7}, 0x20000003) madvise$auto(0xfffffffffffffffe, 0x100000, 0x17) 2.078997277s ago: executing program 8 (id=5215): r0 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/024/001\x00', 0x40001, 0x0) ioctl$auto_USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x80, 0x6, 0x302, 0x3, 0x3, 0x4000002, &(0x7f0000000140)}) epoll_create$auto(0x4) flistxattr$auto(0x3, 0x0, 0x3) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) setreuid$auto(0x3, 0x7) sched_setaffinity$auto(0x1, 0x1, 0x0) mmap$auto(0x0, 0x9, 0xdf, 0x1000000eb1, 0x401, 0x8000) r1 = io_uring_setup$auto(0x2, 0x0) ioctl$auto_SG_SET_RESERVED_SIZE2(r1, 0x2275, &(0x7f0000000440)="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") epoll_create$auto(0x4) rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x0, 0x6, 0xffffffff, 0x2}, 0x8000, 0x0, 0x6) rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x0, 0x6, 0xffffffff, 0x2}, 0x8000, 0x0, 0x6) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) ioctl$auto_TIOCSETD2(r2, 0x5423, 0x0) 1.881701893s ago: executing program 7 (id=5216): r0 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/015/001\x00', 0xa901, 0x0) ioctl$auto_USBDEVFS_BULK(r0, 0xc0185502, &(0x7f0000000200)={0x81, 0x7fffff3e, 0x2, 0x0}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000000), r1) sendmsg$auto_ETHTOOL_MSG_LINKINFO_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)={0x3c, r2, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKINFO_PORT={0x5}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000840}, 0x2000c840) r3 = socket(0x10, 0x2, 0x0) r4 = syz_genetlink_get_family_id$auto_ovs_meter(&(0x7f00000004c0), r1) sendmsg$auto_OVS_METER_CMD_GET(r3, &(0x7f0000000ac0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x34, r4, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@OVS_METER_ATTR_USED={0xc, 0x5, 0x8000000000000000}, @OVS_METER_ATTR_USED={0xc, 0x5, 0x7e}, @OVS_METER_ATTR_MAX_BANDS={0x8, 0x8, 0x10001}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x24008044) r5 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_NL802154_CMD_NEW_INTERFACE(r3, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, &(0x7f0000000140)={&(0x7f0000000300)={0x14, r5, 0x1, 0x1, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0xc810}, 0x40) waitid$auto_P_PGID(0x2, 0x0, &(0x7f0000000140)={@siginfo_0_0={0x5, 0x4, 0xfffffff7, @_timer={0xffffffffffffffff, 0x0, @sival_int=0x4, 0x9}}}, 0x6, &(0x7f0000000240)={{0x9, 0x400}, {0x2, 0x8}, 0x5, 0x7ff, 0x5, 0x4, 0x2, 0xaf9, 0xffff, 0x7a71, 0xfff, 0x8001, 0x0, 0xc, 0x7, 0x6}) statx$auto(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x2, 0xd3, &(0x7f0000000300)={0x100, 0x1, 0x0, 0x7, 0x0, 0xee01, 0x4, 0x2, 0x2, 0x6, 0x2, 0x3, {0x7}, {0x2b261904, 0xf0a}, {0x1, 0x7}, {0x9aa0, 0x2}, 0x9, 0x81, 0x2, 0x0, 0xfffffffffffffffc, 0x9, 0x2, 0x8, 0x34b7, 0x67a2, 0x8, 0xfe000000, [0x5, 0x68000000000000, 0x2, 0x6, 0x8000, 0x7, 0x1, 0xffffffff, 0x8000000000000000]}) sendmsg$auto_NL802154_CMD_NEW_INTERFACE(r1, &(0x7f0000000440)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000400)={&(0x7f0000000580)={0x500, r5, 0x4, 0x70bd27, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_TX_POWER={0x8, 0xb, 0x9e63}, @NL802154_ATTR_SEC_DEVKEY={0x2b1, 0x2f, 0x0, 0x1, [@typed={0xfa, 0x0, 0x0, 0x0, @binary="08464fdb5dc98079fe7f92169a3112f4e0903ca05dea06413d5357c43b9ff4ac9b4c0c7364cedf79bf7f134b275ea0841719053f971f9b9cd63f7c42eba5707a22f0a45db996a709501dc3760737e97b582083ecd348b2e89a17c9c790aa73a9b11212b2d403d6966878b8a9c63fee58a75d0e9264cfb3d75ba1fd2b479e36442a4f24ac6d9ff3d86b28cdcea3dcd74dbd7ae117d4fe2b86b5ce8307b4402a70cb070040ca1da6e5a1a1d190b294e71a5e3d8b791aa1a8c44e1329a9e8239bbfe5e85477c88ffd85c2f8806318c019c91091a4e6e160867f121127ea3e66e252f997b9bcbee54ad58c26b8d56e75e77f497e3cb3f4a3"}, @typed={0x19, 0x55, 0x0, 0x0, @str='/dev/bus/usb/015/001\x00'}, @typed={0x8, 0x11d, 0x0, 0x0, @pid=r6}, @generic="6a13fa3d6be9fed79641004e7ac2e06a959dc16d37ea4fe29a97aa95ab9d6301b5d2c73184929e48b44180f410b14bb65d40f3b3a94d47e4a437b90997bea46de2a44ac03cf43823501823b23cc84d4fc34e4d2be05262abd2aed33ea9bc8af98254ef4f1e682f3e4d109bbe91b9352482e066d59b", @generic="ecc77a6575d3d04c57402ab6f76b8047f5b83dd4c6b65826491115add3177a3ad80949b3860624ae9881ece3f5d752954a6da521dc5b8d0d0e2774db1e79141871625388bb82852eb9a900d2481b7fed6f85274fdea9c2fc2e545e2839325d3853b8b4764232eae159502f1f445cd7b45ab53980ba3215f8e027cc1e3401df64bb5c1984cee5ed679b1680cfba15a0f7d794ffd6fd6da47b283f16d1d4d361b7805c81eea7221feefcfa6c7545938c4c0ee236e1d9d6ec87ad2371bb0af0bb6b16571e5842ce2c2ccd313f1e3a5e1ccbeb5977e47a63", @typed={0x8, 0xa8, 0x0, 0x0, @u32=0xb949}, @nested={0x24, 0xa3, 0x0, 0x1, [@nested={0x4, 0xee}, @typed={0xc, 0x122, 0x0, 0x0, @str='+\'/}$:-\x00'}, @nested={0x4, 0xe}, @typed={0x8, 0x1f, 0x0, 0x0, @fd=r0}, @nested={0x4, 0xbc}]}, @generic="0bf4b7accf9a0dd00d518455882dcf2696a4df6c9559"]}, @NL802154_ATTR_COORDINATOR={0x20c, 0x1e, 0x0, 0x1, [@nested={0x4e, 0x51, 0x0, 0x1, [@typed={0x8, 0xad, 0x0, 0x0, @uid=r7}, @typed={0x8, 0x106, 0x0, 0x0, @ipv4=@rand_addr=0x64010100}, @nested={0x4, 0xa8}, @typed={0xc, 0x13d, 0x0, 0x0, @u64}, @typed={0x4, 0xf6}, @typed={0x4, 0x151}, @nested={0x4, 0x145}, @nested={0x4, 0x19}, @generic="2539828b4283235b0ff16d67367a91128d1885e4b9bdd1476045"]}, @nested={0x1af, 0xdc, 0x0, 0x1, [@typed={0x14, 0x9f, 0x0, 0x0, @ipv6=@local}, @generic="6d8b20e35ae02953f9e93d7e22f386593add406d107a9cb0930025da5a1c514958677daa845eae29e2028afaee447c3ffece5ae5fe4ae306f27928d5d41e58c516ae60448cc8fda673cdc4fee141a29d0a3995f5add074ab1300aa797ca3d5ff0bf5a64afde8aff17b6f61621c4a11160b8a72ab6bb7b004bb13982ba6e0028d63a6062a1e31be327e529146551002e1b2b4939b169fc2f37cb0d71dbcdd88faf3cee35f1615cfea33b69a867d8b0b74cafd92b89e76a83b5aee57", @nested={0x4, 0x76}, @generic="00e1495a60c9376371141eb4a8a76657ddf9c8744fd2f43d7f0295229024b03a8f4c0b80a441b30d9132e0787b2d7099c8af6b736f5828b7dd2d698ba26a637c87c69a8337d50c1066c46c3f06a1e556ac54a761cd4470318e4b2cf218bc9fc32d03640fdd15c3bab77888cc58b8d4920212ba32e41c1e20f42a1a0f362618910c8eefb221fcfe97d716d25f9409d55f36ce7efc7b4ac114c6202cb84f8f374803bb1ba89166de72915b02217ec3040ccdc89cb5387fb3d5bdeddbb2c1d7a45163b3f7c0943c902499ec625f2937ffac853150e51411b98c"]}, @typed={0x8, 0xc5, 0x0, 0x0, @ipv4=@multicast1}]}, @NL802154_ATTR_WPAN_PHY_NAME={0x19, 0x2, '/dev/bus/usb/015/001\x00'}]}, 0x500}, 0x1, 0x0, 0x0, 0xc008000}, 0x8800) 1.712603037s ago: executing program 8 (id=5217): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/ati_remote2/parameters/channel_mask\x00', 0x1e1842, 0x0) write$auto(r0, &(0x7f0000000180)='7\x00\x00\xec\x007\xfe(\xbd\xb0\x86\xe0K\xcf\xcf\x8d\xf2S6\x9e\x81\xcdc\xd7\x19-7\xc2\x89\x9d\x8cR`\xab6F\xd6O\x8b[\"\x80\xd0\xd2!\xc5\xdf\x8c&\xbd\x12\xb0\xa9v\vK\xfe+\xfb4\x02l\t5:a\xbf\xaf\xe3VX\x8d/l\f\xef\x1c\xc9\x13\xf6\x86\xb9N\xeeq\'\xb8\xb0\xa4\xd8\x94\xb8\xbc\b1\xc5\xb7\xca\x8e\x94\x0e\xc9\x99C\x97\xc2]\x80,\xaa\xf5\x17\xacnQ>\aH\xf6\xd6`/f\xcf\x8d\xaa\x00\xd5\x91\x9f\x96\xc6\xa4\'N\xebE\x8b', 0x400000000003) r1 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000240)='/dev/mtd0\x00', 0x80200, 0x0) ioctl$auto_OTPGETREGIONINFO(r1, 0x400c4d0f, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) futex_waitv$auto(&(0x7f0000000000)={0x0, 0x1c380, 0x82}, 0x1, 0x0, 0x0, 0x623d) 1.444637671s ago: executing program 7 (id=5218): openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/v4l-subdev5\x00', 0x280, 0x0) mprotect$auto(0x200000000000, 0x806121, 0x4) newfstatat$auto(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0, 0x7fffffff) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) connect$auto(0x3, &(0x7f0000000080)=@nl=@proc={0x10, 0x0, 0x25dfdbfe, 0x4}, 0x81) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/interrupts\x00', 0x18b202, 0x0) pread64$auto(r1, 0x0, 0x400100000001, 0x1ff) readv$auto(0x3, 0x0, 0x4) unshare$auto(0x40000080) r2 = open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x130) fallocate$auto(0x8000000000000003, 0x0, 0x2, 0x4cbd5d) ptrace$auto(0x5, 0x0, 0xfffffffffffffffa, 0x8) mmap$auto(0xf22, 0x6, 0xfd5, 0x9d, r2, 0x0) openat$auto_ht40allow_map_ops_debugfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/debug/ieee80211/phy7/ht40allow_map\x00', 0x20000, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x1d, 0x3, 0x1) setsockopt$auto(r2, 0x67, 0x1000, 0x0, 0x5) syz_genetlink_get_family_id$auto_taskstats(&(0x7f0000000080), 0xffffffffffffffff) r3 = getpid() process_vm_readv$auto(r3, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000080), 0xffffffff}, 0x6, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/kallsyms\x00', 0x20100, 0x0) close_range$auto(0x2, 0x8000, 0x0) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x1b, &(0x7f0000000000), 0x1) set_mempolicy$auto(0x2, &(0x7f0000000080)=0x3, 0x5) 853.222231ms ago: executing program 0 (id=5219): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x15, 0x80804, 0x10001) clone$auto(0x20003b46, 0x6, 0x0, 0x0, 0x8) setsockopt$auto(r0, 0x6, 0x1e, 0x0, 0xa1) 732.005259ms ago: executing program 7 (id=5220): mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/fs/ext4/sda1/mb_groups\x00', 0x109180, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/net/bond0/bonding/all_slaves_active\x00', 0xb02, 0x0) sendmsg$auto_NL80211_CMD_ABORT_SCAN(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001980)=ANY=[@ANYBLOB="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"], 0x7ec}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'pimreg0\x00', 0x0}) r1 = syz_genetlink_get_family_id$auto_net_shaper(&(0x7f0000001500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000001540)={'netdevsim0\x00', 0x0}) sendmsg$auto_NET_SHAPER_CMD_GROUP(0xffffffffffffffff, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000000240)={0x14, r1, 0x1, 0x70bd29, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x44000}, 0x14) sendmsg$auto_ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000004c0)={&(0x7f00000009c0)={0xf4, 0x0, 0x800, 0x70bd25, 0x25dfdbff, {}, [@ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x2, 0xa}, @ETHTOOL_A_PAUSE_HEADER={0x74, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x173b}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_PAUSE_HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xba6c}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x8a81}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0x5}, @ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0xfc}, @ETHTOOL_A_PAUSE_TX={0x5, 0x4, 0x8}, @ETHTOOL_A_PAUSE_TX={0x5, 0x4, 0xd9}, @ETHTOOL_A_PAUSE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}]}]}, 0xf4}}, 0x8000) write$auto(0xca, &(0x7f0000000140)='\x04>\x01\x01\x00\x00\x00\x00\x01_\x9e\x99:\x06F\x96\b\'\x02\xb0\x93l\xeb\x87\r\b\x87\x14\xf8e6\x9c%\xb6\x9a\\S\xa2(Q\xcc', 0x7f) r3 = openat$auto_proc_pid_numa_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000003640)='/proc/self/numa_maps\x00', 0x40080, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xc, 0x800008000) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) lseek$auto(r3, 0x7ff, 0x1) r4 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/per_cpu/cpu1/trace_pipe_raw\x00', 0x1000, 0x0) mmap$auto_tracing_buffers_fops_trace(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x9, 0x11, r4, 0x0) mmap$auto(0x0, 0x6, 0x2, 0x40eb2, 0xffffffffffffffff, 0x308000000000) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) r5 = syz_clone(0x8000, 0x0, 0x0, 0x0, 0x0, 0x0) move_pages$auto(r5, 0x1002, 0x0, 0x0, 0x0, 0x2) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttynull\x00', 0x0, 0x0) read$auto(0x3, 0x0, 0x7fffffff) readv$auto(0x3, 0x0, 0x7) mbind$auto(0xb6, 0x2, 0x7, 0x0, 0x59f, 0x5) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x40000) write$auto(0x3, 0x0, 0xfffffdef) ioctl$auto(0x3, 0x402c542b, 0x38) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) capset$auto(&(0x7f0000000180)={0x19980330}, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/sda\x00', 0x84100, 0x0) 554.775815ms ago: executing program 8 (id=5221): close_range$auto(0x2, 0x8, 0x0) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vbi17\x00', 0x1a9001, 0x0) epoll_create$auto(0x4) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x8800, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000080), r0) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="6833399166000000", @ANYRES16=r1, @ANYBLOB="01002abd7000fbdbdf25040000002d0011002f50136a450cf972f5a3d28479f92a9b221ca46c2d19fda4f47902c296fa844c12cd83f712d3c41e5d0000002c001a800800010087030000200004801c000180050007000900000004000a00040004000400020004000400"], 0x70}, 0x1, 0x0, 0x0, 0x4008040}, 0x40800) sendmsg$auto_ETHTOOL_MSG_FEC_SET(0xffffffffffffffff, 0x0, 0x20004000) unshare$auto(0x40000080) ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/usb/usbmon/0u\x00', 0x22202, 0x0) pread64$auto(r2, 0x0, 0x0, 0x9) read$auto_mon_fops_text_t_mon_text(r2, 0x0, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/bus/usb/037/001\x00', 0x80082, 0x0) prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x8, 0x3, 0x0, 0x0, 0x2) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r4 = socket(0xa, 0x2, 0x88) setsockopt$auto_SO_MARK(r4, 0x0, 0x24, &(0x7f0000000040)='/dev/ram9\x00', 0x1f) write$auto(r3, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x1dfbdb30) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sg1\x00', 0x646502, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x4242, 0xe1d2b27bdc14aabc) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/LNXSYSTM:00/LNXPWRBN:00/input/input0/inhibited\x00', 0x20b42, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x15, 0x5, 0x0) socket(0x11, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffff7, 0x8000) 471.947782ms ago: executing program 6 (id=5222): mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000140), 0x2002, 0x0) socket(0x29, 0x2, 0x0) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f0000000400)='\x00\x00\x00\x00', 0x100000a3d9) mremap$auto(0x0, 0x4000007, 0x3fd7, 0x0, 0x20000020000000) process_vm_readv$auto(0x0, &(0x7f0000000000)={0x0, 0xfff}, 0x40000000001, 0x0, 0xa, 0x0) ioctl$auto(0x3, 0x400454ca, 0x38) close_range$auto(r0, 0xffffffffffffffff, 0x7) r3 = memfd_create$auto(0x0, 0xe) r4 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), r2) write$auto(r4, &(0x7f0000000000)='//\xf2\x00', 0x80000000) r5 = ioctl$auto_NS_GET_TGID_IN_PIDNS(r3, 0x8004b709, &(0x7f00000000c0)=0xb) prctl$auto(0x1, 0x8, r5, 0xb117, 0xd) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) r6 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/025/001\x00', 0x8901, 0x0) ioctl$auto(r6, 0x5522, r6) socket(0x2, 0x2, 0x0) recvmmsg$auto(0xffffffffffffffff, 0x0, 0x6, 0x700, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x0, 0x5, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) r7 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/tty12\x00', 0x101840, 0x0) r8 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) ioctl$auto(r7, 0x541c, r8) sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x4) 413.241485ms ago: executing program 0 (id=5223): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) write$auto(0x1, 0x0, 0x80000000) socket(0x15, 0x5, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) ustat$auto(0x801, 0x0) mmap$auto(0x0, 0x9, 0xffb, 0x8000000008011, 0x3, 0x0) read$auto(0x3, 0x0, 0x80) mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) syz_genetlink_get_family_id$auto_l2tp(0x0, 0xffffffffffffffff) socket(0xa, 0x5, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x109401, 0x0) close_range$auto(0x2, 0x8, 0x0) close_range$auto(0x2, 0xa, 0x0) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x101000, 0x0) 0s ago: executing program 7 (id=5224): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/net/protocols\x00', 0x100, 0x0) pread64$auto(r0, 0x0, 0x40000000f42c, 0x585) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x80002, 0x73) bind$auto(0x3, &(0x7f0000000140)=@in={0x2, 0x3, @broadcast}, 0x6a) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/pci/00/04.0\x00', 0x121002, 0x0) write$auto(r1, 0x0, 0x100) close_range$auto(r1, r1, 0x3) r2 = socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) ioctl$auto(0x3, 0xc0585609, r2) read$auto_minstrel_ht_stat_fops_rc80211_minstrel_ht_debugfs(r2, &(0x7f0000000180)=""/244, 0xf4) kernel console output (not intermixed with test programs): ute Engine, BIOS Google 10/25/2025 [ 954.586380][T21163] Call Trace: [ 954.586391][T21163] [ 954.586402][T21163] dump_stack_lvl+0x16c/0x1f0 [ 954.586437][T21163] should_fail_ex+0x512/0x640 [ 954.586479][T21163] get_futex_key+0x1d0/0x1560 [ 954.586516][T21163] ? __pfx_get_futex_key+0x10/0x10 [ 954.586550][T21163] ? __pfx_core_sys_select+0x10/0x10 [ 954.586580][T21163] futex_wake+0xea/0x530 [ 954.586622][T21163] ? __pfx_futex_wake+0x10/0x10 [ 954.586666][T21163] ? poll_select_finish+0x376/0x6b0 [ 954.586693][T21163] do_futex+0x1e3/0x350 [ 954.586727][T21163] ? __pfx_do_futex+0x10/0x10 [ 954.586769][T21163] __x64_sys_futex+0x1e0/0x4c0 [ 954.586807][T21163] ? __pfx___x64_sys_futex+0x10/0x10 [ 954.586843][T21163] ? xfd_validate_state+0x61/0x180 [ 954.586887][T21163] ? __pfx_ksys_write+0x10/0x10 [ 954.586927][T21163] do_syscall_64+0xcd/0xfa0 [ 954.586960][T21163] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 954.586986][T21163] RIP: 0033:0x7f4eef58f6c9 [ 954.587006][T21163] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 954.587031][T21163] RSP: 002b:00007f4ef04350e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 954.587054][T21163] RAX: ffffffffffffffda RBX: 00007f4eef7e5fa8 RCX: 00007f4eef58f6c9 [ 954.587071][T21163] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f4eef7e5fac [ 954.587087][T21163] RBP: 00007f4eef7e5fa0 R08: 00007f4ef0436000 R09: 0000000000000000 [ 954.587104][T21163] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 954.587121][T21163] R13: 00007f4eef7e6038 R14: 00007ffea9935de0 R15: 00007ffea9935ec8 [ 954.587174][T21163] [ 954.955992][T20983] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 955.155991][T20983] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 955.202821][T20983] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 955.293195][T20983] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 955.472710][T21183] random: crng reseeded on system resumption [ 955.896613][T20983] 8021q: adding VLAN 0 to HW filter on device bond0 [ 956.028747][T20983] 8021q: adding VLAN 0 to HW filter on device team0 [ 956.105364][T21204] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [0] [ 956.115847][ T852] usb usb38-port5: attempt power cycle [ 956.150380][ T7037] bridge0: port 1(bridge_slave_0) entered blocking state [ 956.157720][ T7037] bridge0: port 1(bridge_slave_0) entered forwarding state [ 956.245390][ T7037] bridge0: port 2(bridge_slave_1) entered blocking state [ 956.252936][ T7037] bridge0: port 2(bridge_slave_1) entered forwarding state [ 956.682578][ T852] usb usb38-port5: unable to enumerate USB device [ 956.764905][T21225] netlink: 'syz.0.4704': attribute type 1 has an invalid length. [ 957.696383][T21241] FAULT_INJECTION: forcing a failure. [ 957.696383][T21241] name failslab, interval 1, probability 0, space 0, times 0 [ 957.780636][T20983] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 957.812315][T21241] CPU: 0 UID: 0 PID: 21241 Comm: syz.4.4707 Tainted: G U syzkaller #0 PREEMPT(full) [ 957.812355][T21241] Tainted: [U]=USER [ 957.812363][T21241] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 957.812378][T21241] Call Trace: [ 957.812387][T21241] [ 957.812397][T21241] dump_stack_lvl+0x16c/0x1f0 [ 957.812432][T21241] should_fail_ex+0x512/0x640 [ 957.812470][T21241] ? fs_reclaim_acquire+0xae/0x150 [ 957.812507][T21241] should_failslab+0xc2/0x120 [ 957.812541][T21241] kmem_cache_alloc_noprof+0x75/0x6e0 [ 957.812567][T21241] ? __pfx_map_id_range_down+0x10/0x10 [ 957.812618][T21241] ? security_inode_alloc+0x3b/0x2b0 [ 957.812664][T21241] ? security_inode_alloc+0x3b/0x2b0 [ 957.812701][T21241] security_inode_alloc+0x3b/0x2b0 [ 957.812741][T21241] inode_init_always_gfp+0xce4/0x1030 [ 957.812774][T21241] alloc_inode+0x86/0x240 [ 957.812808][T21241] new_inode+0x22/0x1c0 [ 957.812840][T21241] ? proc_lookup_de+0x201/0x360 [ 957.812887][T21241] proc_get_inode+0x1d/0x780 [ 957.812924][T21241] proc_lookup_de+0x236/0x360 [ 957.812962][T21241] ? __pfx_proc_tgid_net_lookup+0x10/0x10 [ 957.813001][T21241] proc_tgid_net_lookup+0x75/0x120 [ 957.813041][T21241] lookup_open.isra.0+0x4da/0x1580 [ 957.813087][T21241] ? __pfx_lookup_open.isra.0+0x10/0x10 [ 957.813144][T21241] ? lookup_fast+0x156/0x610 [ 957.813170][T21241] path_openat+0x893/0x2cb0 [ 957.813206][T21241] ? __pfx_path_openat+0x10/0x10 [ 957.813240][T21241] ? __lock_acquire+0xb8a/0x1c90 [ 957.813278][T21241] do_filp_open+0x20b/0x470 [ 957.813306][T21241] ? __pfx_do_filp_open+0x10/0x10 [ 957.813344][T21241] ? __pfx_kfree_link+0x10/0x10 [ 957.813389][T21241] ? alloc_fd+0x471/0x7d0 [ 957.813422][T21241] do_sys_openat2+0x11b/0x1d0 [ 957.813458][T21241] ? __pfx_do_sys_openat2+0x10/0x10 [ 957.813496][T21241] ? __sys_sendmsg+0x18c/0x220 [ 957.813529][T21241] __x64_sys_openat+0x174/0x210 [ 957.813579][T21241] ? __pfx___x64_sys_openat+0x10/0x10 [ 957.813635][T21241] do_syscall_64+0xcd/0xfa0 [ 957.813668][T21241] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 957.813694][T21241] RIP: 0033:0x7f4eef58f6c9 [ 957.813714][T21241] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 957.813738][T21241] RSP: 002b:00007f4ef0435038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 957.813761][T21241] RAX: ffffffffffffffda RBX: 00007f4eef7e5fa0 RCX: 00007f4eef58f6c9 [ 957.813778][T21241] RDX: 0000000000001900 RSI: 0000200000000140 RDI: ffffffffffffff9c [ 957.813794][T21241] RBP: 00007f4eef611f91 R08: 0000000000000000 R09: 0000000000000000 [ 957.813809][T21241] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 957.813824][T21241] R13: 00007f4eef7e6038 R14: 00007f4eef7e5fa0 R15: 00007ffea9935ec8 [ 957.813859][T21241] [ 959.455425][T21283] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(7) [ 959.710461][T20983] veth0_vlan: entered promiscuous mode [ 959.773066][T20983] veth1_vlan: entered promiscuous mode [ 959.898941][T20983] veth0_macvtap: entered promiscuous mode [ 959.997046][T20983] veth1_macvtap: entered promiscuous mode [ 960.057076][T21287] input: jJǸ-9%vlQ J8fi as /devices/virtual/input/input18 [ 960.107632][T21292] netlink: 268 bytes leftover after parsing attributes in process `syz.0.4713'. [ 960.118939][T20983] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 960.169907][T20983] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 960.235392][ T7039] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 960.335554][T21295] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(1937339183.1919249199.795633006), cmd(15) [ 960.372107][ T7039] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 960.408678][ T7039] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 960.499836][ T7039] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 961.004269][ T7039] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 961.034352][ T7039] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 961.179202][ T8298] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 961.218265][ T8298] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 962.129661][ T30] audit: type=1800 audit(4294968825.227:27): pid=21316 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.4669" name="features" dev="configfs" ino=97793 res=0 errno=0 Ijn9_UVQ8j@:Un M%Ux0 [ 965.681431][T21404] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 966.415336][T21421] binder: 21420:21421 ioctl c0306201 0 returned -14 [ 967.202757][T21436] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 968.430338][T21453] netlink: 25 bytes leftover after parsing attributes in process `syz.5.4749'. [ 968.968242][T21459] random: crng reseeded on system resumption [ 968.979196][T21460] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4752'. [ 970.445357][T21498] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4752'. [ 974.271016][T21563] netlink: 342 bytes leftover after parsing attributes in process `syz.0.4766'. [ 974.559624][T21565] FAULT_INJECTION: forcing a failure. [ 974.559624][T21565] name failslab, interval 1, probability 0, space 0, times 0 [ 974.636428][T21565] CPU: 0 UID: 0 PID: 21565 Comm: syz.3.4767 Tainted: G U syzkaller #0 PREEMPT(full) [ 974.636467][T21565] Tainted: [U]=USER [ 974.636475][T21565] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 974.636491][T21565] Call Trace: [ 974.636499][T21565] [ 974.636509][T21565] dump_stack_lvl+0x16c/0x1f0 [ 974.636543][T21565] should_fail_ex+0x512/0x640 [ 974.636582][T21565] ? __kmalloc_cache_noprof+0x5f/0x780 [ 974.636610][T21565] should_failslab+0xc2/0x120 [ 974.636644][T21565] __kmalloc_cache_noprof+0x72/0x780 [ 974.636669][T21565] ? __vb2_init_fileio+0x253/0x1100 [ 974.636714][T21565] ? __vb2_init_fileio+0x253/0x1100 [ 974.636754][T21565] __vb2_init_fileio+0x253/0x1100 [ 974.636804][T21565] vb2_core_poll+0x486/0x700 [ 974.636828][T21565] vb2_poll+0x4b/0xe0 [ 974.636868][T21565] vb2_fop_poll+0x10f/0x2c0 [ 974.636905][T21565] ? __pfx_vb2_fop_poll+0x10/0x10 [ 974.636940][T21565] v4l2_poll+0x163/0x320 [ 974.636968][T21565] ? __pfx_v4l2_poll+0x10/0x10 [ 974.636994][T21565] do_select+0xd3d/0x17e0 [ 974.637040][T21565] ? __pfx_do_select+0x10/0x10 [ 974.637063][T21565] ? finish_task_switch.isra.0+0x21c/0xc10 [ 974.637098][T21565] ? __pfx_pollwake+0x10/0x10 [ 974.637172][T21565] ? find_held_lock+0x2b/0x80 [ 974.637196][T21565] ? __might_fault+0xe3/0x190 [ 974.637221][T21565] ? __might_fault+0xe3/0x190 [ 974.637244][T21565] ? __might_fault+0x13b/0x190 [ 974.637284][T21565] ? core_sys_select+0x453/0xc20 [ 974.637306][T21565] core_sys_select+0x453/0xc20 [ 974.637338][T21565] ? __pfx_core_sys_select+0x10/0x10 [ 974.637368][T21565] ? futex_wait+0x120/0x380 [ 974.637414][T21565] ? __pfx_do_futex+0x10/0x10 [ 974.637456][T21565] kern_select+0x15d/0x1e0 [ 974.637480][T21565] ? __pfx_kern_select+0x10/0x10 [ 974.637508][T21565] ? xfd_validate_state+0x61/0x180 [ 974.637543][T21565] ? __pfx_ksys_write+0x10/0x10 [ 974.637575][T21565] __x64_sys_select+0xbd/0x160 [ 974.637598][T21565] ? do_syscall_64+0x91/0xfa0 [ 974.637628][T21565] ? lockdep_hardirqs_on+0x7c/0x110 [ 974.637657][T21565] do_syscall_64+0xcd/0xfa0 [ 974.637689][T21565] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 974.637714][T21565] RIP: 0033:0x7f96bdb8f6c9 [ 974.637735][T21565] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 974.637758][T21565] RSP: 002b:00007f96be985038 EFLAGS: 00000246 ORIG_RAX: 0000000000000017 [ 974.637781][T21565] RAX: ffffffffffffffda RBX: 00007f96bdde5fa0 RCX: 00007f96bdb8f6c9 [ 974.637797][T21565] RDX: 00002000000005c0 RSI: 0000000000000000 RDI: 0000000000000005 [ 974.637812][T21565] RBP: 00007f96bdc11f91 R08: 0000000000000000 R09: 0000000000000000 [ 974.637827][T21565] R10: 00002000000006c0 R11: 0000000000000246 R12: 0000000000000000 [ 974.637842][T21565] R13: 00007f96bdde6038 R14: 00007f96bdde5fa0 R15: 00007ffe468bf7b8 [ 974.637874][T21565] [ 975.982640][T21583] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4772'. [ 976.796193][T21597] FAULT_INJECTION: forcing a failure. [ 976.796193][T21597] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 976.840578][T21593] zswap: compressor not available [ 976.919356][T21597] CPU: 0 UID: 0 PID: 21597 Comm: syz.3.4775 Tainted: G U syzkaller #0 PREEMPT(full) [ 976.919398][T21597] Tainted: [U]=USER [ 976.919408][T21597] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 976.919423][T21597] Call Trace: [ 976.919432][T21597] [ 976.919442][T21597] dump_stack_lvl+0x16c/0x1f0 [ 976.919481][T21597] should_fail_ex+0x512/0x640 [ 976.919525][T21597] _copy_from_user+0x2e/0xd0 [ 976.919566][T21597] snd_rawmidi_kernel_write1+0x50a/0x8a0 [ 976.919614][T21597] snd_rawmidi_write+0x26e/0xc10 [ 976.919659][T21597] ? __pfx_snd_rawmidi_write+0x10/0x10 [ 976.919697][T21597] ? __pfx_default_wake_function+0x10/0x10 [ 976.919726][T21597] ? bpf_lsm_file_permission+0x9/0x10 [ 976.919759][T21597] ? security_file_permission+0x71/0x210 [ 976.919788][T21597] ? rw_verify_area+0xcf/0x6c0 [ 976.919814][T21597] ? __pfx_snd_rawmidi_write+0x10/0x10 [ 976.919849][T21597] vfs_write+0x2a0/0x11d0 [ 976.919882][T21597] ? __pfx_vfs_write+0x10/0x10 [ 976.919907][T21597] ? find_held_lock+0x2b/0x80 [ 976.919933][T21597] ? __fget_files+0x204/0x3c0 [ 976.919962][T21597] ? __fget_files+0x20e/0x3c0 [ 976.919998][T21597] ksys_write+0x1f8/0x250 [ 976.920025][T21597] ? __pfx_ksys_write+0x10/0x10 [ 976.920060][T21597] do_syscall_64+0xcd/0xfa0 [ 976.920093][T21597] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 976.920120][T21597] RIP: 0033:0x7f96bdb8f6c9 [ 976.920140][T21597] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 976.920172][T21597] RSP: 002b:00007f96be985038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 976.920196][T21597] RAX: ffffffffffffffda RBX: 00007f96bdde5fa0 RCX: 00007f96bdb8f6c9 [ 976.920212][T21597] RDX: 000000100000a3d9 RSI: 00002000000000c0 RDI: 0000000000000007 [ 976.920229][T21597] RBP: 00007f96bdc11f91 R08: 0000000000000000 R09: 0000000000000000 [ 976.920245][T21597] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 976.920261][T21597] R13: 00007f96bdde6038 R14: 00007f96bdde5fa0 R15: 00007ffe468bf7b8 [ 976.920295][T21597] [ 977.779651][T21618] ima: policy update failed [ 977.939067][ T30] audit: type=1802 audit(4294968840.947:28): pid=21618 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.4.4777" res=0 errno=0 [ 978.001681][T21612] can: request_module (can-proto-0) failed. [ 980.905551][T21684] FAULT_INJECTION: forcing a failure. [ 980.905551][T21684] name failslab, interval 1, probability 0, space 0, times 0 [ 980.992785][T21684] CPU: 0 UID: 0 PID: 21684 Comm: syz.5.4790 Tainted: G U syzkaller #0 PREEMPT(full) [ 980.992826][T21684] Tainted: [U]=USER [ 980.992835][T21684] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 980.992850][T21684] Call Trace: [ 980.992859][T21684] [ 980.992869][T21684] dump_stack_lvl+0x16c/0x1f0 [ 980.992908][T21684] should_fail_ex+0x512/0x640 [ 980.992952][T21684] ? __kmalloc_cache_noprof+0x5f/0x780 [ 980.992981][T21684] should_failslab+0xc2/0x120 [ 980.993016][T21684] __kmalloc_cache_noprof+0x72/0x780 [ 980.993042][T21684] ? kernfs_fop_open+0x244/0xda0 [ 980.993072][T21684] ? kernfs_fop_open+0x244/0xda0 [ 980.993095][T21684] kernfs_fop_open+0x244/0xda0 [ 980.993127][T21684] do_dentry_open+0x982/0x1530 [ 980.993159][T21684] ? __pfx_kernfs_fop_open+0x10/0x10 [ 980.993191][T21684] vfs_open+0x82/0x3f0 [ 980.993232][T21684] path_openat+0x1de4/0x2cb0 [ 980.993271][T21684] ? __pfx_path_openat+0x10/0x10 [ 980.993302][T21684] ? __lock_acquire+0xb8a/0x1c90 [ 980.993343][T21684] do_filp_open+0x20b/0x470 [ 980.993373][T21684] ? __pfx_do_filp_open+0x10/0x10 [ 980.993433][T21684] ? alloc_fd+0x471/0x7d0 [ 980.993470][T21684] do_sys_openat2+0x11b/0x1d0 [ 980.993509][T21684] ? __pfx_do_sys_openat2+0x10/0x10 [ 980.993561][T21684] __x64_sys_openat+0x174/0x210 [ 980.993601][T21684] ? __pfx___x64_sys_openat+0x10/0x10 [ 980.993653][T21684] do_syscall_64+0xcd/0xfa0 [ 980.993689][T21684] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 980.993716][T21684] RIP: 0033:0x7f449238f6c9 [ 980.993736][T21684] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 980.993762][T21684] RSP: 002b:00007f44931b4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 980.993786][T21684] RAX: ffffffffffffffda RBX: 00007f44925e5fa0 RCX: 00007f449238f6c9 [ 980.993802][T21684] RDX: 0000000000000000 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 980.993818][T21684] RBP: 00007f4492411f91 R08: 0000000000000000 R09: 0000000000000000 [ 980.993834][T21684] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 980.993849][T21684] R13: 00007f44925e6038 R14: 00007f44925e5fa0 R15: 00007ffd01e690b8 [ 980.993882][T21684] [ 981.873925][T21693] FAULT_INJECTION: forcing a failure. [ 981.873925][T21693] name failslab, interval 1, probability 0, space 0, times 0 [ 981.939973][T21693] CPU: 0 UID: 0 PID: 21693 Comm: syz.4.4793 Tainted: G U syzkaller #0 PREEMPT(full) [ 981.940012][T21693] Tainted: [U]=USER [ 981.940021][T21693] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 981.940036][T21693] Call Trace: [ 981.940044][T21693] [ 981.940053][T21693] dump_stack_lvl+0x16c/0x1f0 [ 981.940088][T21693] should_fail_ex+0x512/0x640 [ 981.940126][T21693] ? __kmalloc_cache_noprof+0x5f/0x780 [ 981.940153][T21693] should_failslab+0xc2/0x120 [ 981.940187][T21693] __kmalloc_cache_noprof+0x72/0x780 [ 981.940211][T21693] ? __vb2_init_fileio+0x253/0x1100 [ 981.940256][T21693] ? __vb2_init_fileio+0x253/0x1100 [ 981.940296][T21693] __vb2_init_fileio+0x253/0x1100 [ 981.940356][T21693] vb2_core_poll+0x486/0x700 [ 981.940380][T21693] vb2_poll+0x4b/0xe0 [ 981.940415][T21693] vb2_fop_poll+0x10f/0x2c0 [ 981.940453][T21693] ? __pfx_vb2_fop_poll+0x10/0x10 [ 981.940488][T21693] v4l2_poll+0x163/0x320 [ 981.940517][T21693] ? __pfx_v4l2_poll+0x10/0x10 [ 981.940543][T21693] do_select+0xd3d/0x17e0 [ 981.940589][T21693] ? __pfx_do_select+0x10/0x10 [ 981.940612][T21693] ? finish_task_switch.isra.0+0x21c/0xc10 [ 981.940646][T21693] ? __pfx_pollwake+0x10/0x10 [ 981.940714][T21693] ? find_held_lock+0x2b/0x80 [ 981.940738][T21693] ? __might_fault+0xe3/0x190 [ 981.940762][T21693] ? __might_fault+0xe3/0x190 [ 981.940785][T21693] ? __might_fault+0x13b/0x190 [ 981.940819][T21693] ? core_sys_select+0x453/0xc20 [ 981.940841][T21693] core_sys_select+0x453/0xc20 [ 981.940872][T21693] ? __pfx_core_sys_select+0x10/0x10 [ 981.940902][T21693] ? futex_wait+0x120/0x380 [ 981.940964][T21693] ? __pfx_do_futex+0x10/0x10 [ 981.941008][T21693] kern_select+0x15d/0x1e0 [ 981.941032][T21693] ? __pfx_kern_select+0x10/0x10 [ 981.941058][T21693] ? xfd_validate_state+0x61/0x180 [ 981.941092][T21693] ? __pfx_ksys_write+0x10/0x10 [ 981.941124][T21693] __x64_sys_select+0xbd/0x160 [ 981.941147][T21693] ? do_syscall_64+0x91/0xfa0 [ 981.941175][T21693] ? lockdep_hardirqs_on+0x7c/0x110 [ 981.941204][T21693] do_syscall_64+0xcd/0xfa0 [ 981.941236][T21693] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 981.941261][T21693] RIP: 0033:0x7f4eef58f6c9 [ 981.941280][T21693] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 981.941303][T21693] RSP: 002b:00007f4ef0414038 EFLAGS: 00000246 ORIG_RAX: 0000000000000017 [ 981.941332][T21693] RAX: ffffffffffffffda RBX: 00007f4eef7e6090 RCX: 00007f4eef58f6c9 [ 981.941348][T21693] RDX: 00002000000005c0 RSI: 0000000000000000 RDI: 0000000000000005 [ 981.941363][T21693] RBP: 00007f4eef611f91 R08: 0000000000000000 R09: 0000000000000000 [ 981.941378][T21693] R10: 00002000000006c0 R11: 0000000000000246 R12: 0000000000000000 [ 981.941393][T21693] R13: 00007f4eef7e6128 R14: 00007f4eef7e6090 R15: 00007ffea9935ec8 [ 981.941426][T21693] [ 982.779929][T21700] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4794'. [ 982.875926][T21695] Process accounting resumed [ 984.019692][T21718] 4fRd: entered promiscuous mode [ 984.059592][T21714] zswap: compressor aut not available [ 984.325547][T21714] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4798'. [ 984.747596][T21737] netlink: 9 bytes leftover after parsing attributes in process `syz.4.4799'. [ 985.125358][T21741] input: f as /devices/virtual/input/input19 [ 987.416069][T21786] FAULT_INJECTION: forcing a failure. [ 987.416069][T21786] name failslab, interval 1, probability 0, space 0, times 0 [ 987.632674][T21786] CPU: 0 UID: 0 PID: 21786 Comm: syz.5.4807 Tainted: G U syzkaller #0 PREEMPT(full) [ 987.632714][T21786] Tainted: [U]=USER [ 987.632722][T21786] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 987.632738][T21786] Call Trace: [ 987.632747][T21786] [ 987.632757][T21786] dump_stack_lvl+0x16c/0x1f0 [ 987.632791][T21786] should_fail_ex+0x512/0x640 [ 987.632830][T21786] ? __kmalloc_cache_noprof+0x5f/0x780 [ 987.632857][T21786] should_failslab+0xc2/0x120 [ 987.632902][T21786] __kmalloc_cache_noprof+0x72/0x780 [ 987.632927][T21786] ? __vb2_init_fileio+0x253/0x1100 [ 987.632973][T21786] ? __vb2_init_fileio+0x253/0x1100 [ 987.633013][T21786] __vb2_init_fileio+0x253/0x1100 [ 987.633062][T21786] vb2_core_poll+0x486/0x700 [ 987.633086][T21786] vb2_poll+0x4b/0xe0 [ 987.633121][T21786] vb2_fop_poll+0x10f/0x2c0 [ 987.633158][T21786] ? __pfx_vb2_fop_poll+0x10/0x10 [ 987.633194][T21786] v4l2_poll+0x163/0x320 [ 987.633222][T21786] ? __pfx_v4l2_poll+0x10/0x10 [ 987.633248][T21786] do_select+0xd3d/0x17e0 [ 987.633294][T21786] ? __pfx_do_select+0x10/0x10 [ 987.633318][T21786] ? finish_task_switch.isra.0+0x21c/0xc10 [ 987.633353][T21786] ? __pfx_pollwake+0x10/0x10 [ 987.633421][T21786] ? find_held_lock+0x2b/0x80 [ 987.633445][T21786] ? __might_fault+0xe3/0x190 [ 987.633469][T21786] ? __might_fault+0xe3/0x190 [ 987.633492][T21786] ? __might_fault+0x13b/0x190 [ 987.633527][T21786] ? core_sys_select+0x453/0xc20 [ 987.633549][T21786] core_sys_select+0x453/0xc20 [ 987.633581][T21786] ? __pfx_core_sys_select+0x10/0x10 [ 987.633611][T21786] ? futex_wait+0x120/0x380 [ 987.633656][T21786] ? __pfx_do_futex+0x10/0x10 [ 987.633703][T21786] kern_select+0x15d/0x1e0 [ 987.633726][T21786] ? __pfx_kern_select+0x10/0x10 [ 987.633754][T21786] ? xfd_validate_state+0x61/0x180 [ 987.633789][T21786] ? __pfx_ksys_write+0x10/0x10 [ 987.633822][T21786] __x64_sys_select+0xbd/0x160 [ 987.633845][T21786] ? do_syscall_64+0x91/0xfa0 [ 987.633880][T21786] ? lockdep_hardirqs_on+0x7c/0x110 [ 987.633910][T21786] do_syscall_64+0xcd/0xfa0 [ 987.633942][T21786] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 987.633967][T21786] RIP: 0033:0x7f449238f6c9 [ 987.633986][T21786] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 987.634011][T21786] RSP: 002b:00007f44931b4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000017 [ 987.634034][T21786] RAX: ffffffffffffffda RBX: 00007f44925e5fa0 RCX: 00007f449238f6c9 [ 987.634050][T21786] RDX: 00002000000005c0 RSI: 0000000000000000 RDI: 0000000000000005 [ 987.634066][T21786] RBP: 00007f4492411f91 R08: 0000000000000000 R09: 0000000000000000 [ 987.634082][T21786] R10: 00002000000006c0 R11: 0000000000000246 R12: 0000000000000000 [ 987.634097][T21786] R13: 00007f44925e6038 R14: 00007f44925e5fa0 R15: 00007ffd01e690b8 [ 987.634129][T21786] [ 987.924056][ C0] vkms_vblank_simulate: vblank timer overrun [ 988.353661][T21804] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input20 [ 988.759059][T21805] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input21 [ 990.329589][T21841] netlink: ct_mark mask cannot be 0 [ 991.491961][T21867] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4824'. [ 991.907804][T21874] FAULT_INJECTION: forcing a failure. [ 991.907804][T21874] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 992.078495][T21874] CPU: 0 UID: 0 PID: 21874 Comm: syz.5.4827 Tainted: G U syzkaller #0 PREEMPT(full) [ 992.078547][T21874] Tainted: [U]=USER [ 992.078558][T21874] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 992.078578][T21874] Call Trace: [ 992.078586][T21874] [ 992.078597][T21874] dump_stack_lvl+0x16c/0x1f0 [ 992.078635][T21874] should_fail_ex+0x512/0x640 [ 992.078678][T21874] strncpy_from_user+0x3b/0x2e0 [ 992.078718][T21874] getname_flags.part.0+0x8f/0x550 [ 992.078759][T21874] getname_flags+0x93/0xf0 [ 992.078784][T21874] do_sys_openat2+0xb8/0x1d0 [ 992.078820][T21874] ? __pfx_do_sys_openat2+0x10/0x10 [ 992.078858][T21874] ? fd_install+0x244/0x750 [ 992.078894][T21874] __x64_sys_openat+0x174/0x210 [ 992.078931][T21874] ? __pfx___x64_sys_openat+0x10/0x10 [ 992.078982][T21874] do_syscall_64+0xcd/0xfa0 [ 992.079015][T21874] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 992.079040][T21874] RIP: 0033:0x7f449238f6c9 [ 992.079060][T21874] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 992.079084][T21874] RSP: 002b:00007f44931b4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 992.079107][T21874] RAX: ffffffffffffffda RBX: 00007f44925e5fa0 RCX: 00007f449238f6c9 [ 992.079123][T21874] RDX: 0000000000000080 RSI: 0000200000000300 RDI: ffffffffffffff9c [ 992.079138][T21874] RBP: 00007f4492411f91 R08: 0000000000000000 R09: 0000000000000000 [ 992.079153][T21874] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 992.079168][T21874] R13: 00007f44925e6038 R14: 00007f44925e5fa0 R15: 00007ffd01e690b8 [ 992.079199][T21874] [ 992.672969][T21880] FAULT_INJECTION: forcing a failure. [ 992.672969][T21880] name fail_futex, interval 1, probability 0, space 0, times 0 [ 992.705422][T21880] CPU: 0 UID: 0 PID: 21880 Comm: syz.4.4829 Tainted: G U syzkaller #0 PREEMPT(full) [ 992.705473][T21880] Tainted: [U]=USER [ 992.705482][T21880] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 992.705496][T21880] Call Trace: [ 992.705505][T21880] [ 992.705515][T21880] dump_stack_lvl+0x16c/0x1f0 [ 992.705549][T21880] should_fail_ex+0x512/0x640 [ 992.705593][T21880] get_futex_key+0x1d0/0x1560 [ 992.705636][T21880] ? __pfx_get_futex_key+0x10/0x10 [ 992.705671][T21880] ? __pfx_core_sys_select+0x10/0x10 [ 992.705701][T21880] futex_wake+0xea/0x530 [ 992.705743][T21880] ? __pfx_futex_wake+0x10/0x10 [ 992.705789][T21880] ? poll_select_finish+0x376/0x6b0 [ 992.705816][T21880] do_futex+0x1e3/0x350 [ 992.705849][T21880] ? __pfx_do_futex+0x10/0x10 [ 992.705891][T21880] __x64_sys_futex+0x1e0/0x4c0 [ 992.705929][T21880] ? __pfx___x64_sys_futex+0x10/0x10 [ 992.705963][T21880] ? xfd_validate_state+0x61/0x180 [ 992.705998][T21880] ? __pfx_ksys_write+0x10/0x10 [ 992.706033][T21880] do_syscall_64+0xcd/0xfa0 [ 992.706066][T21880] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 992.706090][T21880] RIP: 0033:0x7f4eef58f6c9 [ 992.706109][T21880] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 992.706134][T21880] RSP: 002b:00007f4ef04350e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 992.706157][T21880] RAX: ffffffffffffffda RBX: 00007f4eef7e5fa8 RCX: 00007f4eef58f6c9 [ 992.706173][T21880] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f4eef7e5fac [ 992.706189][T21880] RBP: 00007f4eef7e5fa0 R08: 00007f4ef0436000 R09: 0000000000000000 [ 992.706204][T21880] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 992.706219][T21880] R13: 00007f4eef7e6038 R14: 00007ffea9935de0 R15: 00007ffea9935ec8 [ 992.706250][T21880] [ 995.912785][T21922] futex_atomic_op_inuser: 23 callbacks suppressed [ 995.912807][T21922] futex_wake_op: syz.3.4836 tries to shift op by -2048; fix this program [ 996.496858][T21925] Per memcg swappiness does not exist in cgroup v2. See memory.reclaim or memory.swap.max there [ 996.496858][T21925] [ 997.198471][T21934] vhci_hcd: invalid port number 9 [ 997.376984][T21934] vhci_hcd: USB_PORT_FEAT_LINK_STATE req not supported for USB 2.0 roothub [ 1003.832270][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 1003.839064][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 1005.696099][T22079] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4862'. [ 1005.888019][T22081] FAULT_INJECTION: forcing a failure. [ 1005.888019][T22081] name failslab, interval 1, probability 0, space 0, times 0 [ 1005.908072][T22079] __vm_enough_memory: pid: 22079, comm: syz.3.4862, bytes: 4398046511104 not enough memory for the allocation [ 1006.016066][T22081] CPU: 0 UID: 0 PID: 22081 Comm: syz.4.4861 Tainted: G U syzkaller #0 PREEMPT(full) [ 1006.016128][T22081] Tainted: [U]=USER [ 1006.016137][T22081] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1006.016153][T22081] Call Trace: [ 1006.016162][T22081] [ 1006.016172][T22081] dump_stack_lvl+0x16c/0x1f0 [ 1006.016211][T22081] should_fail_ex+0x512/0x640 [ 1006.016251][T22081] ? __kmalloc_cache_noprof+0x5f/0x780 [ 1006.016280][T22081] should_failslab+0xc2/0x120 [ 1006.016323][T22081] __kmalloc_cache_noprof+0x72/0x780 [ 1006.016348][T22081] ? __vb2_init_fileio+0x253/0x1100 [ 1006.016396][T22081] ? __vb2_init_fileio+0x253/0x1100 [ 1006.016437][T22081] __vb2_init_fileio+0x253/0x1100 [ 1006.016487][T22081] vb2_core_poll+0x486/0x700 [ 1006.016511][T22081] vb2_poll+0x4b/0xe0 [ 1006.016546][T22081] vb2_fop_poll+0x10f/0x2c0 [ 1006.016584][T22081] ? __pfx_vb2_fop_poll+0x10/0x10 [ 1006.016619][T22081] v4l2_poll+0x163/0x320 [ 1006.016648][T22081] ? __pfx_v4l2_poll+0x10/0x10 [ 1006.016675][T22081] do_select+0xd3d/0x17e0 [ 1006.016733][T22081] ? __pfx_do_select+0x10/0x10 [ 1006.016757][T22081] ? finish_task_switch.isra.0+0x21c/0xc10 [ 1006.016794][T22081] ? __pfx_pollwake+0x10/0x10 [ 1006.016864][T22081] ? find_held_lock+0x2b/0x80 [ 1006.016890][T22081] ? __might_fault+0xe3/0x190 [ 1006.016915][T22081] ? __might_fault+0xe3/0x190 [ 1006.016937][T22081] ? __might_fault+0x13b/0x190 [ 1006.016972][T22081] ? core_sys_select+0x453/0xc20 [ 1006.016993][T22081] core_sys_select+0x453/0xc20 [ 1006.017025][T22081] ? __pfx_core_sys_select+0x10/0x10 [ 1006.017055][T22081] ? futex_wait+0x120/0x380 [ 1006.017103][T22081] ? __pfx_do_futex+0x10/0x10 [ 1006.017144][T22081] kern_select+0x15d/0x1e0 [ 1006.017168][T22081] ? __pfx_kern_select+0x10/0x10 [ 1006.017195][T22081] ? xfd_validate_state+0x61/0x180 [ 1006.017231][T22081] ? __pfx_ksys_write+0x10/0x10 [ 1006.017263][T22081] __x64_sys_select+0xbd/0x160 [ 1006.017286][T22081] ? do_syscall_64+0x91/0xfa0 [ 1006.017322][T22081] ? lockdep_hardirqs_on+0x7c/0x110 [ 1006.017352][T22081] do_syscall_64+0xcd/0xfa0 [ 1006.017383][T22081] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1006.017411][T22081] RIP: 0033:0x7f4eef58f6c9 [ 1006.017432][T22081] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1006.017456][T22081] RSP: 002b:00007f4ef0414038 EFLAGS: 00000246 ORIG_RAX: 0000000000000017 [ 1006.017479][T22081] RAX: ffffffffffffffda RBX: 00007f4eef7e6090 RCX: 00007f4eef58f6c9 [ 1006.017496][T22081] RDX: 00002000000005c0 RSI: 0000000000000000 RDI: 0000000000000005 [ 1006.017511][T22081] RBP: 00007f4eef611f91 R08: 0000000000000000 R09: 0000000000000000 [ 1006.017526][T22081] R10: 00002000000006c0 R11: 0000000000000246 R12: 0000000000000000 [ 1006.017542][T22081] R13: 00007f4eef7e6128 R14: 00007f4eef7e6090 R15: 00007ffea9935ec8 [ 1006.017575][T22081] [ 1006.901562][T22091] FAULT_INJECTION: forcing a failure. [ 1006.901562][T22091] name failslab, interval 1, probability 0, space 0, times 0 [ 1006.961379][T22091] CPU: 0 UID: 0 PID: 22091 Comm: syz.4.4865 Tainted: G U syzkaller #0 PREEMPT(full) [ 1006.961426][T22091] Tainted: [U]=USER [ 1006.961437][T22091] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1006.961452][T22091] Call Trace: [ 1006.961461][T22091] [ 1006.961471][T22091] dump_stack_lvl+0x16c/0x1f0 [ 1006.961509][T22091] should_fail_ex+0x512/0x640 [ 1006.961549][T22091] ? __kmalloc_cache_noprof+0x5f/0x780 [ 1006.961577][T22091] should_failslab+0xc2/0x120 [ 1006.961614][T22091] __kmalloc_cache_noprof+0x72/0x780 [ 1006.961639][T22091] ? __vb2_init_fileio+0x253/0x1100 [ 1006.961686][T22091] ? __vb2_init_fileio+0x253/0x1100 [ 1006.961726][T22091] __vb2_init_fileio+0x253/0x1100 [ 1006.961777][T22091] vb2_core_poll+0x486/0x700 [ 1006.961801][T22091] vb2_poll+0x4b/0xe0 [ 1006.961836][T22091] vb2_fop_poll+0x10f/0x2c0 [ 1006.961874][T22091] ? __pfx_vb2_fop_poll+0x10/0x10 [ 1006.961910][T22091] v4l2_poll+0x163/0x320 [ 1006.961939][T22091] ? __pfx_v4l2_poll+0x10/0x10 [ 1006.961966][T22091] do_select+0xd3d/0x17e0 [ 1006.962013][T22091] ? __pfx_do_select+0x10/0x10 [ 1006.962036][T22091] ? finish_task_switch.isra.0+0x21c/0xc10 [ 1006.962072][T22091] ? __pfx_pollwake+0x10/0x10 [ 1006.962140][T22091] ? find_held_lock+0x2b/0x80 [ 1006.962165][T22091] ? __might_fault+0xe3/0x190 [ 1006.962198][T22091] ? __might_fault+0xe3/0x190 [ 1006.962220][T22091] ? __might_fault+0x13b/0x190 [ 1006.962255][T22091] ? core_sys_select+0x453/0xc20 [ 1006.962279][T22091] core_sys_select+0x453/0xc20 [ 1006.962311][T22091] ? __pfx_core_sys_select+0x10/0x10 [ 1006.962342][T22091] ? futex_wait+0x120/0x380 [ 1006.962388][T22091] ? __pfx_do_futex+0x10/0x10 [ 1006.962430][T22091] kern_select+0x15d/0x1e0 [ 1006.962454][T22091] ? __pfx_kern_select+0x10/0x10 [ 1006.962482][T22091] ? xfd_validate_state+0x61/0x180 [ 1006.962518][T22091] ? __pfx_ksys_write+0x10/0x10 [ 1006.962550][T22091] __x64_sys_select+0xbd/0x160 [ 1006.962573][T22091] ? do_syscall_64+0x91/0xfa0 [ 1006.962603][T22091] ? lockdep_hardirqs_on+0x7c/0x110 [ 1006.962634][T22091] do_syscall_64+0xcd/0xfa0 [ 1006.962666][T22091] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1006.962693][T22091] RIP: 0033:0x7f4eef58f6c9 [ 1006.962712][T22091] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1006.962736][T22091] RSP: 002b:00007f4ef0435038 EFLAGS: 00000246 ORIG_RAX: 0000000000000017 [ 1006.962760][T22091] RAX: ffffffffffffffda RBX: 00007f4eef7e5fa0 RCX: 00007f4eef58f6c9 [ 1006.962777][T22091] RDX: 00002000000005c0 RSI: 0000000000000000 RDI: 0000000000000005 [ 1006.962793][T22091] RBP: 00007f4eef611f91 R08: 0000000000000000 R09: 0000000000000000 [ 1006.962810][T22091] R10: 00002000000006c0 R11: 0000000000000246 R12: 0000000000000000 [ 1006.962825][T22091] R13: 00007f4eef7e6038 R14: 00007f4eef7e5fa0 R15: 00007ffea9935ec8 [ 1006.962860][T22091] [ 1007.636503][T22096] futex_wake_op: syz.0.4866 tries to shift op by -2048; fix this program [ 1011.341680][ T5840] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 1012.194251][T22149] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1012.231550][T22149] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1012.272038][T22149] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1012.292649][T22149] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1012.323673][T22149] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1012.399916][T22149] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1013.002778][T22164] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input22 [ 1013.492402][T22166] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input23 [ 1014.115589][T22179] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4880'. [ 1014.188828][T22172] Process accounting paused [ 1014.223114][ T5840] Bluetooth: hci0: command 0x0c1a tx timeout [ 1014.301640][ T5840] Bluetooth: hci2: command 0x0c1a tx timeout [ 1014.308063][T15590] Bluetooth: hci3: command 0x0419 tx timeout [ 1014.314667][ T5832] Bluetooth: hci1: command 0x0c1a tx timeout [ 1015.426855][T22205] tty tty8: ldisc open failed (-12), clearing slot 7 [ 1016.382553][ T5840] Bluetooth: hci2: command 0x0c1a tx timeout [ 1016.481491][T22220] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x18000 [ 1016.504545][T22220] flags: 0xfff00000002000(reserved|node=0|zone=1|lastcpupid=0x7ff) [ 1016.524964][T22220] raw: 00fff00000002000 ffffea0000600008 ffffea0000600008 0000000000000000 [ 1016.540004][T22220] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 1016.584821][T22220] page dumped because: unmovable page [ 1016.615022][T22220] page_owner info is not present (never set?) [ 1016.638306][T22227] random: crng reseeded on system resumption [ 1017.165165][T22241] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4893'. [ 1017.213851][T22241] netlink: 'syz.4.4893': attribute type 1 has an invalid length. [ 1017.325498][T22248] FAULT_INJECTION: forcing a failure. [ 1017.325498][T22248] name failslab, interval 1, probability 0, space 0, times 0 [ 1017.393630][T22248] CPU: 0 UID: 0 PID: 22248 Comm: syz.3.4894 Tainted: G U syzkaller #0 PREEMPT(full) [ 1017.393672][T22248] Tainted: [U]=USER [ 1017.393681][T22248] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1017.393695][T22248] Call Trace: [ 1017.393704][T22248] [ 1017.393715][T22248] dump_stack_lvl+0x16c/0x1f0 [ 1017.393755][T22248] should_fail_ex+0x512/0x640 [ 1017.393794][T22248] ? __kmalloc_cache_noprof+0x5f/0x780 [ 1017.393823][T22248] should_failslab+0xc2/0x120 [ 1017.393859][T22248] __kmalloc_cache_noprof+0x72/0x780 [ 1017.393883][T22248] ? __vb2_init_fileio+0x253/0x1100 [ 1017.393929][T22248] ? __vb2_init_fileio+0x253/0x1100 [ 1017.393968][T22248] __vb2_init_fileio+0x253/0x1100 [ 1017.394017][T22248] vb2_core_poll+0x486/0x700 [ 1017.394041][T22248] vb2_poll+0x4b/0xe0 [ 1017.394076][T22248] vb2_fop_poll+0x10f/0x2c0 [ 1017.394116][T22248] ? __pfx_vb2_fop_poll+0x10/0x10 [ 1017.394152][T22248] v4l2_poll+0x163/0x320 [ 1017.394181][T22248] ? __pfx_v4l2_poll+0x10/0x10 [ 1017.394207][T22248] do_select+0xd3d/0x17e0 [ 1017.394261][T22248] ? __pfx_do_select+0x10/0x10 [ 1017.394285][T22248] ? finish_task_switch.isra.0+0x21c/0xc10 [ 1017.394321][T22248] ? __pfx_pollwake+0x10/0x10 [ 1017.394390][T22248] ? find_held_lock+0x2b/0x80 [ 1017.394416][T22248] ? __might_fault+0xe3/0x190 [ 1017.394440][T22248] ? __might_fault+0xe3/0x190 [ 1017.394461][T22248] ? __might_fault+0x13b/0x190 [ 1017.394496][T22248] ? core_sys_select+0x453/0xc20 [ 1017.394518][T22248] core_sys_select+0x453/0xc20 [ 1017.394548][T22248] ? __pfx_core_sys_select+0x10/0x10 [ 1017.394582][T22248] ? futex_wait+0x120/0x380 [ 1017.394628][T22248] ? __pfx_do_futex+0x10/0x10 [ 1017.394669][T22248] kern_select+0x15d/0x1e0 [ 1017.394692][T22248] ? __pfx_kern_select+0x10/0x10 [ 1017.394719][T22248] ? xfd_validate_state+0x61/0x180 [ 1017.394753][T22248] ? __pfx_ksys_write+0x10/0x10 [ 1017.394785][T22248] __x64_sys_select+0xbd/0x160 [ 1017.394808][T22248] ? do_syscall_64+0x91/0xfa0 [ 1017.394837][T22248] ? lockdep_hardirqs_on+0x7c/0x110 [ 1017.394866][T22248] do_syscall_64+0xcd/0xfa0 [ 1017.394898][T22248] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1017.394924][T22248] RIP: 0033:0x7f96bdb8f6c9 [ 1017.394943][T22248] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1017.394967][T22248] RSP: 002b:00007f96be964038 EFLAGS: 00000246 ORIG_RAX: 0000000000000017 [ 1017.394991][T22248] RAX: ffffffffffffffda RBX: 00007f96bdde6090 RCX: 00007f96bdb8f6c9 [ 1017.395007][T22248] RDX: 00002000000005c0 RSI: 0000000000000000 RDI: 0000000000000005 [ 1017.395023][T22248] RBP: 00007f96bdc11f91 R08: 0000000000000000 R09: 0000000000000000 [ 1017.395052][T22248] R10: 00002000000006c0 R11: 0000000000000246 R12: 0000000000000000 [ 1017.395071][T22248] R13: 00007f96bdde6128 R14: 00007f96bdde6090 R15: 00007ffe468bf7b8 [ 1017.395104][T22248] [ 1017.774353][T22253] IPVS: length: 131 != 8 [ 1018.467436][ T5840] Bluetooth: hci2: command 0x0c1a tx timeout [ 1020.174302][T22279] FAULT_INJECTION: forcing a failure. [ 1020.174302][T22279] name failslab, interval 1, probability 0, space 0, times 0 [ 1020.207274][T22279] CPU: 0 UID: 0 PID: 22279 Comm: syz.5.4906 Tainted: G U syzkaller #0 PREEMPT(full) [ 1020.207314][T22279] Tainted: [U]=USER [ 1020.207322][T22279] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1020.207337][T22279] Call Trace: [ 1020.207345][T22279] [ 1020.207355][T22279] dump_stack_lvl+0x16c/0x1f0 [ 1020.207392][T22279] should_fail_ex+0x512/0x640 [ 1020.207432][T22279] ? __kmalloc_noprof+0xca/0x880 [ 1020.207476][T22279] should_failslab+0xc2/0x120 [ 1020.207511][T22279] __kmalloc_noprof+0xdd/0x880 [ 1020.207552][T22279] ? vb2_core_allocated_buffers_storage+0xc4/0x220 [ 1020.207599][T22279] ? vb2_core_allocated_buffers_storage+0xc4/0x220 [ 1020.207637][T22279] vb2_core_allocated_buffers_storage+0xc4/0x220 [ 1020.207679][T22279] vb2_core_reqbufs+0x398/0xfe0 [ 1020.207725][T22279] ? __pfx_vb2_core_reqbufs+0x10/0x10 [ 1020.207780][T22279] __vb2_init_fileio+0x3f1/0x1100 [ 1020.207838][T22279] vb2_core_poll+0x486/0x700 [ 1020.207862][T22279] vb2_poll+0x4b/0xe0 [ 1020.207898][T22279] vb2_fop_poll+0x10f/0x2c0 [ 1020.207936][T22279] ? __pfx_vb2_fop_poll+0x10/0x10 [ 1020.207971][T22279] v4l2_poll+0x163/0x320 [ 1020.208000][T22279] ? __pfx_v4l2_poll+0x10/0x10 [ 1020.208026][T22279] do_select+0xd3d/0x17e0 [ 1020.208073][T22279] ? __pfx_do_select+0x10/0x10 [ 1020.208097][T22279] ? lock_acquire+0x179/0x350 [ 1020.208138][T22279] ? __pfx_pollwake+0x10/0x10 [ 1020.208206][T22279] ? find_held_lock+0x2b/0x80 [ 1020.208230][T22279] ? __might_fault+0xe3/0x190 [ 1020.208256][T22279] ? __might_fault+0xe3/0x190 [ 1020.208278][T22279] ? __might_fault+0x13b/0x190 [ 1020.208313][T22279] ? core_sys_select+0x453/0xc20 [ 1020.208335][T22279] core_sys_select+0x453/0xc20 [ 1020.208366][T22279] ? __pfx_core_sys_select+0x10/0x10 [ 1020.208408][T22279] ? futex_wake+0x1ad/0x530 [ 1020.208473][T22279] ? __pfx_do_futex+0x10/0x10 [ 1020.208515][T22279] kern_select+0x15d/0x1e0 [ 1020.208539][T22279] ? __pfx_kern_select+0x10/0x10 [ 1020.208567][T22279] ? xfd_validate_state+0x61/0x180 [ 1020.208603][T22279] ? __pfx_ksys_write+0x10/0x10 [ 1020.208636][T22279] __x64_sys_select+0xbd/0x160 [ 1020.208659][T22279] ? do_syscall_64+0x91/0xfa0 [ 1020.208689][T22279] ? lockdep_hardirqs_on+0x7c/0x110 [ 1020.208719][T22279] do_syscall_64+0xcd/0xfa0 [ 1020.208751][T22279] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1020.208777][T22279] RIP: 0033:0x7f449238f6c9 [ 1020.208796][T22279] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1020.208826][T22279] RSP: 002b:00007f44931b4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000017 [ 1020.208850][T22279] RAX: ffffffffffffffda RBX: 00007f44925e5fa0 RCX: 00007f449238f6c9 [ 1020.208867][T22279] RDX: 00002000000005c0 RSI: 0000000000000000 RDI: 0000000000000005 [ 1020.208881][T22279] RBP: 00007f4492411f91 R08: 0000000000000000 R09: 0000000000000000 [ 1020.208897][T22279] R10: 00002000000006c0 R11: 0000000000000246 R12: 0000000000000000 [ 1020.208912][T22279] R13: 00007f44925e6038 R14: 00007f44925e5fa0 R15: 00007ffd01e690b8 [ 1020.208944][T22279] [ 1022.222491][T22298] device-mapper: ioctl: device name cannot contain '/' [ 1024.009082][T22316] netlink: 'syz.5.4915': attribute type 1 has an invalid length. [ 1030.732318][T22398] zswap: compressor 000 not available [ 1031.529421][T22405] delete_channel: no stack [ 1033.084846][T15590] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1033.099706][T15590] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1033.111431][T15590] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1033.119386][T15590] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1033.140968][T15590] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1034.095723][T22432] chnl_net:caif_netlink_parms(): no params data found [ 1034.532827][ T5840] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1034.547439][ T5840] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1034.560210][ T5840] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1034.568896][ T5840] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1034.578214][ T5840] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1034.614848][T22432] bridge0: port 1(bridge_slave_0) entered blocking state [ 1034.638047][T22432] bridge0: port 1(bridge_slave_0) entered disabled state [ 1034.671523][T22432] bridge_slave_0: entered allmulticast mode [ 1034.702360][T22432] bridge_slave_0: entered promiscuous mode [ 1034.762730][T22432] bridge0: port 2(bridge_slave_1) entered blocking state [ 1034.783344][T22432] bridge0: port 2(bridge_slave_1) entered disabled state [ 1034.790640][T22432] bridge_slave_1: entered allmulticast mode [ 1034.843359][T22432] bridge_slave_1: entered promiscuous mode [ 1034.985376][T22432] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1035.023965][T22432] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1035.182873][ T5840] Bluetooth: hci4: command tx timeout [ 1035.209348][T22432] team0: Port device team_slave_0 added [ 1035.255244][T22432] team0: Port device team_slave_1 added [ 1035.371717][T22432] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1035.393385][T22432] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1035.454259][T22432] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1035.503209][T22432] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1035.523807][T22432] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1035.585889][T22432] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1035.833616][T22432] hsr_slave_0: entered promiscuous mode [ 1035.840618][T22432] hsr_slave_1: entered promiscuous mode [ 1035.856787][T22432] debugfs: 'hsr0' already exists in 'hsr' [ 1035.869850][T22432] Cannot create hsr debugfs directory [ 1036.621503][ T5840] Bluetooth: hci5: command tx timeout [ 1036.669269][T22458] chnl_net:caif_netlink_parms(): no params data found [ 1037.261316][ T5840] Bluetooth: hci4: command tx timeout [ 1037.442971][T22458] bridge0: port 1(bridge_slave_0) entered blocking state [ 1037.456470][T22458] bridge0: port 1(bridge_slave_0) entered disabled state [ 1037.474380][T22458] bridge_slave_0: entered allmulticast mode [ 1037.488359][T22458] bridge_slave_0: entered promiscuous mode [ 1037.504577][T22432] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1037.521498][T22458] bridge0: port 2(bridge_slave_1) entered blocking state [ 1037.534738][T22458] bridge0: port 2(bridge_slave_1) entered disabled state [ 1037.548642][T22458] bridge_slave_1: entered allmulticast mode [ 1037.558240][T22458] bridge_slave_1: entered promiscuous mode [ 1037.566187][T22432] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1037.658701][T22432] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1037.690210][T22432] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1037.774595][T22458] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1037.836993][T22458] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1038.189935][T22458] team0: Port device team_slave_0 added [ 1038.287581][T22458] team0: Port device team_slave_1 added [ 1038.465898][T22458] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1038.481878][T22458] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1038.550803][T22458] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1038.614902][T22458] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1038.633657][T22458] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1038.697735][T22458] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1038.708983][ T5840] Bluetooth: hci5: command tx timeout [ 1039.065026][T22458] hsr_slave_0: entered promiscuous mode [ 1039.079356][T22458] hsr_slave_1: entered promiscuous mode [ 1039.093636][T22458] debugfs: 'hsr0' already exists in 'hsr' [ 1039.107740][T22458] Cannot create hsr debugfs directory [ 1039.341634][ T5840] Bluetooth: hci4: command tx timeout [ 1039.360470][T22532] netlink: 326 bytes leftover after parsing attributes in process `syz.0.4968'. [ 1039.449787][T22432] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1039.618718][T22432] 8021q: adding VLAN 0 to HW filter on device team0 [ 1039.664801][ T1314] bridge0: port 1(bridge_slave_0) entered blocking state [ 1039.672048][ T1314] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1039.766148][ T1314] bridge0: port 2(bridge_slave_1) entered blocking state [ 1039.773477][ T1314] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1040.039319][T22458] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1040.091570][T22458] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1040.137419][T22458] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1040.212354][T22458] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1040.551912][T22552] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(7) [ 1040.782978][ T5840] Bluetooth: hci5: command tx timeout [ 1040.928459][T22458] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1040.949018][T22558] input: jJǸ-9%vlQ J8fi as /devices/virtual/input/input24 [ 1041.058903][T22432] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1041.096597][T22458] 8021q: adding VLAN 0 to HW filter on device team0 [ 1041.190776][T21967] bridge0: port 1(bridge_slave_0) entered blocking state [ 1041.198012][T21967] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1041.273327][T21967] bridge0: port 2(bridge_slave_1) entered blocking state [ 1041.280584][T21967] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1041.421866][ T5840] Bluetooth: hci4: command tx timeout [ 1042.286560][T22458] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1042.495801][T22432] veth0_vlan: entered promiscuous mode [ 1042.562036][T22432] veth1_vlan: entered promiscuous mode [ 1042.715405][T22432] veth0_macvtap: entered promiscuous mode [ 1042.769453][T22432] veth1_macvtap: entered promiscuous mode [ 1042.862192][ T5840] Bluetooth: hci5: command tx timeout [ 1043.200930][T22432] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1043.293740][T22432] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1043.340480][T21965] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1043.381489][T21965] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1043.390261][T21965] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1043.469260][T21965] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1043.496405][T22600] delete_channel: no stack [ 1043.747864][T22458] veth0_vlan: entered promiscuous mode [ 1043.841672][T21966] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1043.849546][T21966] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1043.863212][T22458] veth1_vlan: entered promiscuous mode [ 1044.004164][T22458] veth0_macvtap: entered promiscuous mode [ 1044.050714][T22458] veth1_macvtap: entered promiscuous mode [ 1044.110964][T21967] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1044.149094][T21967] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1044.214078][T22458] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1044.227712][T22605] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4980'. [ 1044.292838][T22458] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1044.349148][T22605] veth0_macvtap: left promiscuous mode [ 1044.372903][T22605] macvtap0: entered promiscuous mode [ 1044.389351][T22605] macvtap0: entered allmulticast mode [ 1044.448330][T21955] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1044.495455][T21955] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1044.577837][T21955] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1044.651719][T21955] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1045.150279][T21965] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1045.203256][T21965] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1045.363509][ T1314] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1045.400453][ T1314] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1046.268732][T22642] futex_wake_op: syz.7.4949 tries to shift op by -2048; fix this program [ 1046.395075][T22642] futex_wake_op: syz.7.4949 tries to shift op by -2048; fix this program [ 1046.940760][T22631] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1052.399237][T22730] random: crng reseeded on system resumption [ 1061.092230][T22814] netlink: 'syz.5.5029': attribute type 37 has an invalid length. [ 1061.250762][T22812] netlink: 'syz.5.5029': attribute type 37 has an invalid length. [ 1061.702356][T22828] IPVS: length: 131 != 8 [ 1063.422268][T22847] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1065.267796][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 1065.275489][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 1065.658239][T22861] kexec: Could not allocate control_code_buffer [ 1066.396324][T22873] binder: 22872:22873 ioctl c018620c 0 returned -1 [ 1066.452207][T22877] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5042'. [ 1067.522183][T22816] delete_channel: no stack [ 1068.090092][T22905] netlink: 13 bytes leftover after parsing attributes in process `syz.0.5051'. [ 1069.546395][T22919] random: crng reseeded on system resumption [ 1070.112426][T22926] : Can't lookup blockdev [ 1071.293570][T22933] FAULT_INJECTION: forcing a failure. [ 1071.293570][T22933] name failslab, interval 1, probability 0, space 0, times 0 [ 1071.341470][T22933] CPU: 0 UID: 0 PID: 22933 Comm: syz.6.5059 Tainted: G U syzkaller #0 PREEMPT(full) [ 1071.341513][T22933] Tainted: [U]=USER [ 1071.341522][T22933] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1071.341538][T22933] Call Trace: [ 1071.341548][T22933] [ 1071.341559][T22933] dump_stack_lvl+0x16c/0x1f0 [ 1071.341608][T22933] should_fail_ex+0x512/0x640 [ 1071.341649][T22933] ? __kmalloc_noprof+0xca/0x880 [ 1071.341695][T22933] should_failslab+0xc2/0x120 [ 1071.341731][T22933] __kmalloc_noprof+0xdd/0x880 [ 1071.341773][T22933] ? __vb2_queue_alloc+0x23e/0x1280 [ 1071.341816][T22933] ? __vb2_queue_alloc+0x23e/0x1280 [ 1071.341852][T22933] __vb2_queue_alloc+0x23e/0x1280 [ 1071.341890][T22933] ? trace_kmalloc+0x2b/0xd0 [ 1071.341924][T22933] ? vb2_core_allocated_buffers_storage+0xc4/0x220 [ 1071.341974][T22933] vb2_core_reqbufs+0xa90/0xfe0 [ 1071.342020][T22933] ? __pfx_vb2_core_reqbufs+0x10/0x10 [ 1071.342075][T22933] __vb2_init_fileio+0x3f1/0x1100 [ 1071.342126][T22933] vb2_core_poll+0x486/0x700 [ 1071.342149][T22933] vb2_poll+0x4b/0xe0 [ 1071.342185][T22933] vb2_fop_poll+0x10f/0x2c0 [ 1071.342222][T22933] ? __pfx_vb2_fop_poll+0x10/0x10 [ 1071.342264][T22933] v4l2_poll+0x163/0x320 [ 1071.342294][T22933] ? __pfx_v4l2_poll+0x10/0x10 [ 1071.342323][T22933] do_select+0xd3d/0x17e0 [ 1071.342370][T22933] ? __pfx_do_select+0x10/0x10 [ 1071.342394][T22933] ? lock_acquire+0x179/0x350 [ 1071.342436][T22933] ? __pfx_pollwake+0x10/0x10 [ 1071.342504][T22933] ? find_held_lock+0x2b/0x80 [ 1071.342527][T22933] ? __might_fault+0xe3/0x190 [ 1071.342552][T22933] ? __might_fault+0xe3/0x190 [ 1071.342574][T22933] ? __might_fault+0x13b/0x190 [ 1071.342609][T22933] ? core_sys_select+0x453/0xc20 [ 1071.342631][T22933] core_sys_select+0x453/0xc20 [ 1071.342662][T22933] ? __pfx_core_sys_select+0x10/0x10 [ 1071.342692][T22933] ? futex_wake+0x1ad/0x530 [ 1071.342754][T22933] ? __pfx_do_futex+0x10/0x10 [ 1071.342796][T22933] kern_select+0x15d/0x1e0 [ 1071.342819][T22933] ? __pfx_kern_select+0x10/0x10 [ 1071.342847][T22933] ? xfd_validate_state+0x61/0x180 [ 1071.342881][T22933] ? __pfx_ksys_write+0x10/0x10 [ 1071.342914][T22933] __x64_sys_select+0xbd/0x160 [ 1071.342937][T22933] ? do_syscall_64+0x91/0xfa0 [ 1071.342967][T22933] ? lockdep_hardirqs_on+0x7c/0x110 [ 1071.342997][T22933] do_syscall_64+0xcd/0xfa0 [ 1071.343037][T22933] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1071.343064][T22933] RIP: 0033:0x7f3480b8f6c9 [ 1071.343091][T22933] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1071.343116][T22933] RSP: 002b:00007f348198c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000017 [ 1071.343141][T22933] RAX: ffffffffffffffda RBX: 00007f3480de5fa0 RCX: 00007f3480b8f6c9 [ 1071.343158][T22933] RDX: 00002000000005c0 RSI: 0000000000000000 RDI: 0000000000000005 [ 1071.343173][T22933] RBP: 00007f3480c11f91 R08: 0000000000000000 R09: 0000000000000000 [ 1071.343188][T22933] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1071.343203][T22933] R13: 00007f3480de6038 R14: 00007f3480de5fa0 R15: 00007ffd9dee9c58 [ 1071.343240][T22933] [ 1073.394206][T22941] FAULT_INJECTION: forcing a failure. [ 1073.394206][T22941] name failslab, interval 1, probability 0, space 0, times 0 [ 1073.503140][T22941] CPU: 0 UID: 0 PID: 22941 Comm: syz.6.5062 Tainted: G U syzkaller #0 PREEMPT(full) [ 1073.503181][T22941] Tainted: [U]=USER [ 1073.503190][T22941] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1073.503206][T22941] Call Trace: [ 1073.503215][T22941] [ 1073.503225][T22941] dump_stack_lvl+0x16c/0x1f0 [ 1073.503263][T22941] should_fail_ex+0x512/0x640 [ 1073.503305][T22941] ? __kmalloc_noprof+0xca/0x880 [ 1073.503357][T22941] should_failslab+0xc2/0x120 [ 1073.503393][T22941] __kmalloc_noprof+0xdd/0x880 [ 1073.503431][T22941] ? lockdep_init_map_type+0x5c/0x280 [ 1073.503468][T22941] ? udp_init_sock+0x24e/0x450 [ 1073.503497][T22941] ? udp_init_sock+0x24e/0x450 [ 1073.503517][T22941] udp_init_sock+0x24e/0x450 [ 1073.503543][T22941] udplite_sk_init+0x15/0x60 [ 1073.503574][T22941] ? __pfx_udplite_sk_init+0x10/0x10 [ 1073.503605][T22941] inet_create+0x939/0x1040 [ 1073.503643][T22941] ? inet_create+0x93/0x1040 [ 1073.503683][T22941] __sock_create+0x338/0x8d0 [ 1073.503723][T22941] __sys_socket+0x14d/0x260 [ 1073.503757][T22941] ? __pfx___sys_socket+0x10/0x10 [ 1073.503791][T22941] ? xfd_validate_state+0x61/0x180 [ 1073.503827][T22941] ? __pfx_ksys_write+0x10/0x10 [ 1073.503860][T22941] __x64_sys_socket+0x72/0xb0 [ 1073.503893][T22941] ? lockdep_hardirqs_on+0x7c/0x110 [ 1073.503923][T22941] do_syscall_64+0xcd/0xfa0 [ 1073.503956][T22941] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1073.503981][T22941] RIP: 0033:0x7f3480b8f6c9 [ 1073.504002][T22941] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1073.504026][T22941] RSP: 002b:00007f348198c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1073.504057][T22941] RAX: ffffffffffffffda RBX: 00007f3480de5fa0 RCX: 00007f3480b8f6c9 [ 1073.504073][T22941] RDX: 0000000000000088 RSI: 0000000000000002 RDI: 0000000000000002 [ 1073.504088][T22941] RBP: 00007f3480c11f91 R08: 0000000000000000 R09: 0000000000000000 [ 1073.504104][T22941] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1073.504119][T22941] R13: 00007f3480de6038 R14: 00007f3480de5fa0 R15: 00007ffd9dee9c58 [ 1073.504151][T22941] [ 1078.187026][T22993] netlink: 268 bytes leftover after parsing attributes in process `syz.6.5072'. [ 1078.601641][T15590] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1078.616446][T15590] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1078.625094][T15590] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1078.642853][T15590] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1078.650612][T15590] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1079.442061][T23015] FAULT_INJECTION: forcing a failure. [ 1079.442061][T23015] name failslab, interval 1, probability 0, space 0, times 0 [ 1079.518096][T23015] CPU: 0 UID: 0 PID: 23015 Comm: syz.6.5079 Tainted: G U syzkaller #0 PREEMPT(full) [ 1079.518137][T23015] Tainted: [U]=USER [ 1079.518146][T23015] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1079.518162][T23015] Call Trace: [ 1079.518172][T23015] [ 1079.518182][T23015] dump_stack_lvl+0x16c/0x1f0 [ 1079.518220][T23015] should_fail_ex+0x512/0x640 [ 1079.518263][T23015] ? __kmalloc_cache_noprof+0x5f/0x780 [ 1079.518291][T23015] should_failslab+0xc2/0x120 [ 1079.518329][T23015] __kmalloc_cache_noprof+0x72/0x780 [ 1079.518363][T23015] ? kvm_set_irq_routing+0x24f/0x970 [ 1079.518410][T23015] ? kvm_set_irq_routing+0x24f/0x970 [ 1079.518449][T23015] kvm_set_irq_routing+0x24f/0x970 [ 1079.518499][T23015] kvm_arch_vm_ioctl+0x934/0x18b0 [ 1079.518535][T23015] ? __pfx_kvm_arch_vm_ioctl+0x10/0x10 [ 1079.518571][T23015] ? __lock_acquire+0x622/0x1c90 [ 1079.518612][T23015] ? __lock_acquire+0x622/0x1c90 [ 1079.518655][T23015] ? __lock_acquire+0x622/0x1c90 [ 1079.518697][T23015] ? __lock_acquire+0x622/0x1c90 [ 1079.518751][T23015] ? bpf_ksym_find+0x124/0x1c0 [ 1079.518780][T23015] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1079.518812][T23015] ? is_bpf_text_address+0x94/0x1a0 [ 1079.518848][T23015] ? kernel_text_address+0x8d/0x100 [ 1079.518870][T23015] ? widen_string+0xdc/0x2d0 [ 1079.518909][T23015] ? __kernel_text_address+0xd/0x40 [ 1079.518931][T23015] ? unwind_get_return_address+0x59/0xa0 [ 1079.518959][T23015] ? arch_stack_walk+0xa6/0x100 [ 1079.518997][T23015] ? stack_trace_save+0x8e/0xc0 [ 1079.519026][T23015] ? __pfx_stack_trace_save+0x10/0x10 [ 1079.519057][T23015] ? stack_depot_save_flags+0x29/0x9c0 [ 1079.519098][T23015] ? __lock_acquire+0xb8a/0x1c90 [ 1079.519135][T23015] ? kasan_save_stack+0x42/0x60 [ 1079.519164][T23015] ? kasan_save_stack+0x33/0x60 [ 1079.519192][T23015] ? kasan_save_track+0x14/0x30 [ 1079.519220][T23015] ? __kasan_save_free_info+0x3b/0x60 [ 1079.519242][T23015] ? __kasan_slab_free+0x5f/0x80 [ 1079.519273][T23015] ? kfree+0x2b8/0x6d0 [ 1079.519292][T23015] ? tomoyo_path_number_perm+0x470/0x580 [ 1079.519338][T23015] kvm_vm_ioctl+0x1a91/0x3fd0 [ 1079.519384][T23015] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 1079.519431][T23015] ? kasan_quarantine_put+0x10a/0x240 [ 1079.519461][T23015] ? lockdep_hardirqs_on+0x7c/0x110 [ 1079.519496][T23015] ? find_held_lock+0x2b/0x80 [ 1079.519524][T23015] ? tomoyo_path_number_perm+0x295/0x580 [ 1079.519571][T23015] ? tomoyo_path_number_perm+0x18d/0x580 [ 1079.519616][T23015] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1079.519670][T23015] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1079.519715][T23015] ? do_vfs_ioctl+0x128/0x14f0 [ 1079.519754][T23015] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1079.519802][T23015] ? find_held_lock+0x2b/0x80 [ 1079.519827][T23015] ? hook_file_ioctl_common+0x145/0x410 [ 1079.519861][T23015] ? __fget_files+0x20e/0x3c0 [ 1079.519891][T23015] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 1079.519920][T23015] __x64_sys_ioctl+0x18e/0x210 [ 1079.519961][T23015] do_syscall_64+0xcd/0xfa0 [ 1079.519995][T23015] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1079.520021][T23015] RIP: 0033:0x7f3480b8f6c9 [ 1079.520042][T23015] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1079.520067][T23015] RSP: 002b:00007f348196b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1079.520092][T23015] RAX: ffffffffffffffda RBX: 00007f3480de6090 RCX: 00007f3480b8f6c9 [ 1079.520109][T23015] RDX: 0010000000000402 RSI: 000000000000ae60 RDI: 0000000000000003 [ 1079.520125][T23015] RBP: 00007f3480c11f91 R08: 0000000000000000 R09: 0000000000000000 [ 1079.520141][T23015] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1079.520156][T23015] R13: 00007f3480de6128 R14: 00007f3480de6090 R15: 00007ffd9dee9c58 [ 1079.520189][T23015] [ 1080.714939][T22997] chnl_net:caif_netlink_parms(): no params data found [ 1080.783033][T15590] Bluetooth: hci6: command tx timeout [ 1080.971576][T23026] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5082'. [ 1081.433016][T22997] bridge0: port 1(bridge_slave_0) entered blocking state [ 1081.465604][T22997] bridge0: port 1(bridge_slave_0) entered disabled state [ 1081.498055][T22997] bridge_slave_0: entered allmulticast mode [ 1081.538590][T22997] bridge_slave_0: entered promiscuous mode [ 1081.752178][T22997] bridge0: port 2(bridge_slave_1) entered blocking state [ 1081.769873][T22997] bridge0: port 2(bridge_slave_1) entered disabled state [ 1081.801937][T22997] bridge_slave_1: entered allmulticast mode [ 1081.838997][T22997] bridge_slave_1: entered promiscuous mode [ 1082.109201][T22997] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1082.174080][T22997] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1082.417208][T22997] team0: Port device team_slave_0 added [ 1082.480251][T22997] team0: Port device team_slave_1 added [ 1082.584894][T23050] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(7) [ 1082.861542][T15590] Bluetooth: hci6: command tx timeout [ 1082.943639][T22997] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1082.973970][T22997] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1083.063884][T22997] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1083.126535][T22997] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1083.146679][T22997] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1083.174377][ C0] vkms_vblank_simulate: vblank timer overrun [ 1083.232564][T22997] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1083.461754][T22997] hsr_slave_0: entered promiscuous mode [ 1083.483570][T22997] hsr_slave_1: entered promiscuous mode [ 1083.503480][T22997] debugfs: 'hsr0' already exists in 'hsr' [ 1083.513903][T22997] Cannot create hsr debugfs directory [ 1083.985328][T23067] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5090'. [ 1084.057226][T23069] FAULT_INJECTION: forcing a failure. [ 1084.057226][T23069] name failslab, interval 1, probability 0, space 0, times 0 [ 1084.139616][T23069] CPU: 0 UID: 0 PID: 23069 Comm: syz.7.5089 Tainted: G U syzkaller #0 PREEMPT(full) [ 1084.139662][T23069] Tainted: [U]=USER [ 1084.139671][T23069] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1084.139688][T23069] Call Trace: [ 1084.139697][T23069] [ 1084.139707][T23069] dump_stack_lvl+0x16c/0x1f0 [ 1084.139748][T23069] should_fail_ex+0x512/0x640 [ 1084.139789][T23069] ? __kmalloc_cache_noprof+0x5f/0x780 [ 1084.139819][T23069] should_failslab+0xc2/0x120 [ 1084.139855][T23069] __kmalloc_cache_noprof+0x72/0x780 [ 1084.139881][T23069] ? __vb2_init_fileio+0x253/0x1100 [ 1084.139928][T23069] ? __vb2_init_fileio+0x253/0x1100 [ 1084.139969][T23069] __vb2_init_fileio+0x253/0x1100 [ 1084.140030][T23069] vb2_core_poll+0x486/0x700 [ 1084.140058][T23069] vb2_poll+0x4b/0xe0 [ 1084.140097][T23069] vb2_fop_poll+0x10f/0x2c0 [ 1084.140138][T23069] ? __pfx_vb2_fop_poll+0x10/0x10 [ 1084.140174][T23069] v4l2_poll+0x163/0x320 [ 1084.140205][T23069] ? __pfx_v4l2_poll+0x10/0x10 [ 1084.140232][T23069] do_select+0xd3d/0x17e0 [ 1084.140280][T23069] ? __pfx_do_select+0x10/0x10 [ 1084.140305][T23069] ? finish_task_switch.isra.0+0x21c/0xc10 [ 1084.140341][T23069] ? __pfx_pollwake+0x10/0x10 [ 1084.140411][T23069] ? find_held_lock+0x2b/0x80 [ 1084.140437][T23069] ? __might_fault+0xe3/0x190 [ 1084.140462][T23069] ? __might_fault+0xe3/0x190 [ 1084.140486][T23069] ? __might_fault+0x13b/0x190 [ 1084.140523][T23069] ? core_sys_select+0x453/0xc20 [ 1084.140546][T23069] core_sys_select+0x453/0xc20 [ 1084.140578][T23069] ? __pfx_core_sys_select+0x10/0x10 [ 1084.140610][T23069] ? futex_wait+0x120/0x380 [ 1084.140656][T23069] ? __pfx_do_futex+0x10/0x10 [ 1084.140699][T23069] kern_select+0x15d/0x1e0 [ 1084.140724][T23069] ? __pfx_kern_select+0x10/0x10 [ 1084.140753][T23069] ? xfd_validate_state+0x61/0x180 [ 1084.140789][T23069] ? __pfx_ksys_write+0x10/0x10 [ 1084.140823][T23069] __x64_sys_select+0xbd/0x160 [ 1084.140847][T23069] ? do_syscall_64+0x91/0xfa0 [ 1084.140878][T23069] ? lockdep_hardirqs_on+0x7c/0x110 [ 1084.140909][T23069] do_syscall_64+0xcd/0xfa0 [ 1084.140943][T23069] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1084.140971][T23069] RIP: 0033:0x7fc407b8f6c9 [ 1084.140993][T23069] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1084.141028][T23069] RSP: 002b:00007fc40899e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000017 [ 1084.141054][T23069] RAX: ffffffffffffffda RBX: 00007fc407de5fa0 RCX: 00007fc407b8f6c9 [ 1084.141080][T23069] RDX: 00002000000005c0 RSI: 0000000000000000 RDI: 0000000000000005 [ 1084.141097][T23069] RBP: 00007fc407c11f91 R08: 0000000000000000 R09: 0000000000000000 [ 1084.141114][T23069] R10: 00002000000006c0 R11: 0000000000000246 R12: 0000000000000000 [ 1084.141131][T23069] R13: 00007fc407de6038 R14: 00007fc407de5fa0 R15: 00007ffdecb2dc38 [ 1084.141167][T23069] [ 1084.422891][ C0] vkms_vblank_simulate: vblank timer overrun [ 1084.446874][T23072] FAULT_INJECTION: forcing a failure. [ 1084.446874][T23072] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1084.460371][T23072] CPU: 0 UID: 0 PID: 23072 Comm: syz.6.5091 Tainted: G U syzkaller #0 PREEMPT(full) [ 1084.460412][T23072] Tainted: [U]=USER [ 1084.460426][T23072] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1084.460443][T23072] Call Trace: [ 1084.460454][T23072] [ 1084.460465][T23072] dump_stack_lvl+0x16c/0x1f0 [ 1084.460505][T23072] should_fail_ex+0x512/0x640 [ 1084.460549][T23072] should_fail_alloc_page+0xe7/0x130 [ 1084.460589][T23072] prepare_alloc_pages+0x3c2/0x610 [ 1084.460623][T23072] ? rcu_is_watching+0x12/0xc0 [ 1084.460654][T23072] __alloc_frozen_pages_noprof+0x18b/0x2470 [ 1084.460689][T23072] ? stack_trace_save+0x8e/0xc0 [ 1084.460717][T23072] ? __pfx_stack_trace_save+0x10/0x10 [ 1084.460748][T23072] ? stack_depot_save_flags+0x29/0x9c0 [ 1084.460787][T23072] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1084.460816][T23072] ? kasan_save_stack+0x42/0x60 [ 1084.460844][T23072] ? kasan_save_stack+0x33/0x60 [ 1084.460871][T23072] ? kasan_save_track+0x14/0x30 [ 1084.460898][T23072] ? __kasan_kmalloc+0xaa/0xb0 [ 1084.460924][T23072] ? mon_bin_open+0x1a8/0x4a0 [ 1084.460958][T23072] ? do_sys_openat2+0x11b/0x1d0 [ 1084.460993][T23072] ? __x64_sys_openat+0x174/0x210 [ 1084.461029][T23072] ? do_syscall_64+0xcd/0xfa0 [ 1084.461061][T23072] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1084.461099][T23072] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1084.461146][T23072] ? policy_nodemask+0xea/0x4e0 [ 1084.461184][T23072] alloc_pages_mpol+0x1fb/0x550 [ 1084.461220][T23072] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1084.461263][T23072] alloc_pages_noprof+0x131/0x390 [ 1084.461298][T23072] get_zeroed_page_noprof+0x18/0xb0 [ 1084.461337][T23072] mon_alloc_buff+0xce/0x1b0 [ 1084.461367][T23072] ? kasan_save_track+0x14/0x30 [ 1084.461400][T23072] mon_bin_open+0x207/0x4a0 [ 1084.461433][T23072] ? __pfx_mon_bin_open+0x10/0x10 [ 1084.461464][T23072] chrdev_open+0x234/0x6a0 [ 1084.461493][T23072] ? __pfx_apparmor_file_open+0x10/0x10 [ 1084.461531][T23072] ? __pfx_chrdev_open+0x10/0x10 [ 1084.461563][T23072] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 1084.461596][T23072] do_dentry_open+0x982/0x1530 [ 1084.461626][T23072] ? __pfx_chrdev_open+0x10/0x10 [ 1084.461662][T23072] vfs_open+0x82/0x3f0 [ 1084.461702][T23072] path_openat+0x1de4/0x2cb0 [ 1084.461739][T23072] ? __pfx_path_openat+0x10/0x10 [ 1084.461768][T23072] ? __lock_acquire+0xb8a/0x1c90 [ 1084.461805][T23072] do_filp_open+0x20b/0x470 [ 1084.461833][T23072] ? __pfx_do_filp_open+0x10/0x10 [ 1084.461881][T23072] ? alloc_fd+0x471/0x7d0 [ 1084.461914][T23072] do_sys_openat2+0x11b/0x1d0 [ 1084.461951][T23072] ? __pfx_do_sys_openat2+0x10/0x10 [ 1084.461999][T23072] __x64_sys_openat+0x174/0x210 [ 1084.462036][T23072] ? __pfx___x64_sys_openat+0x10/0x10 [ 1084.462085][T23072] do_syscall_64+0xcd/0xfa0 [ 1084.462117][T23072] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1084.462142][T23072] RIP: 0033:0x7f3480b8f6c9 [ 1084.462163][T23072] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1084.462187][T23072] RSP: 002b:00007f348198c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1084.462212][T23072] RAX: ffffffffffffffda RBX: 00007f3480de5fa0 RCX: 00007f3480b8f6c9 [ 1084.462229][T23072] RDX: 0000000000121200 RSI: 00002000000001c0 RDI: ffffffffffffff9c [ 1084.462246][T23072] RBP: 00007f3480c11f91 R08: 0000000000000000 R09: 0000000000000000 [ 1084.462261][T23072] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1084.462277][T23072] R13: 00007f3480de6038 R14: 00007f3480de5fa0 R15: 00007ffd9dee9c58 [ 1084.462316][T23072] [ 1084.813760][ C0] vkms_vblank_simulate: vblank timer overrun [ 1084.885533][T22997] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1084.950544][T22997] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1085.020935][T22997] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1085.033625][T22997] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1085.230750][T15590] Bluetooth: hci6: command tx timeout [ 1085.995710][T22997] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1086.174179][T22997] 8021q: adding VLAN 0 to HW filter on device team0 [ 1086.219440][T21966] bridge0: port 1(bridge_slave_0) entered blocking state [ 1086.226702][T21966] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1086.298710][T21966] bridge0: port 2(bridge_slave_1) entered blocking state [ 1086.306526][T21966] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1087.096641][T22997] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1087.261914][T15590] Bluetooth: hci6: command tx timeout [ 1087.399111][T22997] veth0_vlan: entered promiscuous mode [ 1087.413699][T22997] veth1_vlan: entered promiscuous mode [ 1087.452656][T22997] veth0_macvtap: entered promiscuous mode [ 1087.495191][T22997] veth1_macvtap: entered promiscuous mode [ 1087.599767][T22997] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1087.644928][T22997] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1087.748966][T21965] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1087.784175][T21965] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1087.858263][T21965] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1087.920480][T21965] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1088.398931][T23135] zswap: compressor not available [ 1088.679357][T21966] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1088.741306][T21966] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1088.876278][ T2915] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1088.893555][ T2915] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1089.219413][T23158] debugfs: '!PjE r҄y*"l-y–L̓]' already exists in 'ieee80211' [ 1090.938209][T23182] FAULT_INJECTION: forcing a failure. [ 1090.938209][T23182] name failslab, interval 1, probability 0, space 0, times 0 [ 1091.006366][T23182] CPU: 0 UID: 0 PID: 23182 Comm: syz.7.5110 Tainted: G U syzkaller #0 PREEMPT(full) [ 1091.006411][T23182] Tainted: [U]=USER [ 1091.006420][T23182] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1091.006443][T23182] Call Trace: [ 1091.006453][T23182] [ 1091.006465][T23182] dump_stack_lvl+0x16c/0x1f0 [ 1091.006506][T23182] should_fail_ex+0x512/0x640 [ 1091.006546][T23182] ? __kmalloc_cache_noprof+0x5f/0x780 [ 1091.006574][T23182] should_failslab+0xc2/0x120 [ 1091.006610][T23182] __kmalloc_cache_noprof+0x72/0x780 [ 1091.006634][T23182] ? __vb2_init_fileio+0x253/0x1100 [ 1091.006681][T23182] ? __vb2_init_fileio+0x253/0x1100 [ 1091.006720][T23182] __vb2_init_fileio+0x253/0x1100 [ 1091.006770][T23182] vb2_core_poll+0x486/0x700 [ 1091.006795][T23182] vb2_poll+0x4b/0xe0 [ 1091.006831][T23182] vb2_fop_poll+0x10f/0x2c0 [ 1091.006868][T23182] ? __pfx_vb2_fop_poll+0x10/0x10 [ 1091.006904][T23182] v4l2_poll+0x163/0x320 [ 1091.006933][T23182] ? __pfx_v4l2_poll+0x10/0x10 [ 1091.006959][T23182] do_select+0xd3d/0x17e0 [ 1091.007007][T23182] ? __pfx_do_select+0x10/0x10 [ 1091.007030][T23182] ? finish_task_switch.isra.0+0x21c/0xc10 [ 1091.007064][T23182] ? __pfx_pollwake+0x10/0x10 [ 1091.007133][T23182] ? find_held_lock+0x2b/0x80 [ 1091.007158][T23182] ? __might_fault+0xe3/0x190 [ 1091.007182][T23182] ? __might_fault+0xe3/0x190 [ 1091.007205][T23182] ? __might_fault+0x13b/0x190 [ 1091.007240][T23182] ? core_sys_select+0x453/0xc20 [ 1091.007261][T23182] core_sys_select+0x453/0xc20 [ 1091.007293][T23182] ? __pfx_core_sys_select+0x10/0x10 [ 1091.007329][T23182] ? futex_wait+0x120/0x380 [ 1091.007375][T23182] ? __pfx_do_futex+0x10/0x10 [ 1091.007416][T23182] kern_select+0x15d/0x1e0 [ 1091.007447][T23182] ? __pfx_kern_select+0x10/0x10 [ 1091.007475][T23182] ? xfd_validate_state+0x61/0x180 [ 1091.007511][T23182] ? __pfx_ksys_write+0x10/0x10 [ 1091.007545][T23182] __x64_sys_select+0xbd/0x160 [ 1091.007569][T23182] ? do_syscall_64+0x91/0xfa0 [ 1091.007599][T23182] ? lockdep_hardirqs_on+0x7c/0x110 [ 1091.007630][T23182] do_syscall_64+0xcd/0xfa0 [ 1091.007662][T23182] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1091.007687][T23182] RIP: 0033:0x7fc407b8f6c9 [ 1091.007709][T23182] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1091.007734][T23182] RSP: 002b:00007fc40899e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000017 [ 1091.007759][T23182] RAX: ffffffffffffffda RBX: 00007fc407de5fa0 RCX: 00007fc407b8f6c9 [ 1091.007776][T23182] RDX: 00002000000005c0 RSI: 0000000000000000 RDI: 0000000000000005 [ 1091.007791][T23182] RBP: 00007fc407c11f91 R08: 0000000000000000 R09: 0000000000000000 [ 1091.007806][T23182] R10: 00002000000006c0 R11: 0000000000000246 R12: 0000000000000000 [ 1091.007821][T23182] R13: 00007fc407de6038 R14: 00007fc407de5fa0 R15: 00007ffdecb2dc38 [ 1091.007853][T23182] [ 1091.363388][T23180] FAULT_INJECTION: forcing a failure. [ 1091.363388][T23180] name failslab, interval 1, probability 0, space 0, times 0 [ 1091.377558][T23180] CPU: 0 UID: 0 PID: 23180 Comm: syz.8.5108 Tainted: G U syzkaller #0 PREEMPT(full) [ 1091.377601][T23180] Tainted: [U]=USER [ 1091.377617][T23180] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1091.377632][T23180] Call Trace: [ 1091.377640][T23180] [ 1091.377650][T23180] dump_stack_lvl+0x16c/0x1f0 [ 1091.377689][T23180] should_fail_ex+0x512/0x640 [ 1091.377727][T23180] ? __kmalloc_cache_noprof+0x5f/0x780 [ 1091.377755][T23180] should_failslab+0xc2/0x120 [ 1091.377791][T23180] __kmalloc_cache_noprof+0x72/0x780 [ 1091.377816][T23180] ? __vb2_init_fileio+0x253/0x1100 [ 1091.377862][T23180] ? __vb2_init_fileio+0x253/0x1100 [ 1091.377902][T23180] __vb2_init_fileio+0x253/0x1100 [ 1091.377952][T23180] vb2_core_poll+0x486/0x700 [ 1091.377975][T23180] vb2_poll+0x4b/0xe0 [ 1091.378011][T23180] vb2_fop_poll+0x10f/0x2c0 [ 1091.378048][T23180] ? __pfx_vb2_fop_poll+0x10/0x10 [ 1091.378084][T23180] v4l2_poll+0x163/0x320 [ 1091.378112][T23180] ? __pfx_v4l2_poll+0x10/0x10 [ 1091.378139][T23180] do_select+0xd3d/0x17e0 [ 1091.378186][T23180] ? __pfx_do_select+0x10/0x10 [ 1091.378209][T23180] ? finish_task_switch.isra.0+0x21c/0xc10 [ 1091.378245][T23180] ? __pfx_pollwake+0x10/0x10 [ 1091.378313][T23180] ? find_held_lock+0x2b/0x80 [ 1091.378338][T23180] ? __might_fault+0xe3/0x190 [ 1091.378363][T23180] ? __might_fault+0xe3/0x190 [ 1091.378386][T23180] ? __might_fault+0x13b/0x190 [ 1091.378422][T23180] ? core_sys_select+0x453/0xc20 [ 1091.378444][T23180] core_sys_select+0x453/0xc20 [ 1091.378475][T23180] ? __pfx_core_sys_select+0x10/0x10 [ 1091.378506][T23180] ? futex_wait+0x120/0x380 [ 1091.378552][T23180] ? __pfx_do_futex+0x10/0x10 [ 1091.378594][T23180] kern_select+0x15d/0x1e0 [ 1091.378625][T23180] ? __pfx_kern_select+0x10/0x10 [ 1091.378654][T23180] ? xfd_validate_state+0x61/0x180 [ 1091.378691][T23180] ? __pfx_ksys_write+0x10/0x10 [ 1091.378725][T23180] __x64_sys_select+0xbd/0x160 [ 1091.378749][T23180] ? do_syscall_64+0x91/0xfa0 [ 1091.378779][T23180] ? lockdep_hardirqs_on+0x7c/0x110 [ 1091.378809][T23180] do_syscall_64+0xcd/0xfa0 [ 1091.378840][T23180] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1091.378866][T23180] RIP: 0033:0x7ff2d0f8f6c9 [ 1091.378887][T23180] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1091.378912][T23180] RSP: 002b:00007ff2d1d43038 EFLAGS: 00000246 ORIG_RAX: 0000000000000017 [ 1091.378935][T23180] RAX: ffffffffffffffda RBX: 00007ff2d11e6090 RCX: 00007ff2d0f8f6c9 [ 1091.378953][T23180] RDX: 00002000000005c0 RSI: 0000000000000000 RDI: 0000000000000005 [ 1091.378969][T23180] RBP: 00007ff2d1011f91 R08: 0000000000000000 R09: 0000000000000000 [ 1091.378984][T23180] R10: 00002000000006c0 R11: 0000000000000246 R12: 0000000000000000 [ 1091.379000][T23180] R13: 00007ff2d11e6128 R14: 00007ff2d11e6090 R15: 00007fffdfb6c0a8 [ 1091.379032][T23180] [ 1092.263832][T23192] FAULT_INJECTION: forcing a failure. [ 1092.263832][T23192] name failslab, interval 1, probability 0, space 0, times 0 [ 1092.290016][T23192] CPU: 0 UID: 0 PID: 23192 Comm: syz.8.5114 Tainted: G U syzkaller #0 PREEMPT(full) [ 1092.290063][T23192] Tainted: [U]=USER [ 1092.290072][T23192] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1092.290088][T23192] Call Trace: [ 1092.290097][T23192] [ 1092.290108][T23192] dump_stack_lvl+0x16c/0x1f0 [ 1092.290151][T23192] should_fail_ex+0x512/0x640 [ 1092.290200][T23192] ? __kmalloc_noprof+0xca/0x880 [ 1092.290246][T23192] should_failslab+0xc2/0x120 [ 1092.290281][T23192] __kmalloc_noprof+0xdd/0x880 [ 1092.290323][T23192] ? vb2_core_allocated_buffers_storage+0xc4/0x220 [ 1092.290371][T23192] ? vb2_core_allocated_buffers_storage+0xc4/0x220 [ 1092.290411][T23192] vb2_core_allocated_buffers_storage+0xc4/0x220 [ 1092.290454][T23192] vb2_core_reqbufs+0x398/0xfe0 [ 1092.290500][T23192] ? __pfx_vb2_core_reqbufs+0x10/0x10 [ 1092.290565][T23192] __vb2_init_fileio+0x3f1/0x1100 [ 1092.290620][T23192] vb2_core_poll+0x486/0x700 [ 1092.290646][T23192] vb2_poll+0x4b/0xe0 [ 1092.290683][T23192] vb2_fop_poll+0x10f/0x2c0 [ 1092.290722][T23192] ? __pfx_vb2_fop_poll+0x10/0x10 [ 1092.290758][T23192] v4l2_poll+0x163/0x320 [ 1092.290787][T23192] ? __pfx_v4l2_poll+0x10/0x10 [ 1092.290815][T23192] do_select+0xd3d/0x17e0 [ 1092.290863][T23192] ? __pfx_do_select+0x10/0x10 [ 1092.290887][T23192] ? lock_acquire+0x179/0x350 [ 1092.290930][T23192] ? __pfx_pollwake+0x10/0x10 [ 1092.291004][T23192] ? find_held_lock+0x2b/0x80 [ 1092.291029][T23192] ? __might_fault+0xe3/0x190 [ 1092.291056][T23192] ? __might_fault+0xe3/0x190 [ 1092.291080][T23192] ? __might_fault+0x13b/0x190 [ 1092.291117][T23192] ? core_sys_select+0x453/0xc20 [ 1092.291140][T23192] core_sys_select+0x453/0xc20 [ 1092.291172][T23192] ? __pfx_core_sys_select+0x10/0x10 [ 1092.291212][T23192] ? futex_wake+0x1ad/0x530 [ 1092.291281][T23192] ? __pfx_do_futex+0x10/0x10 [ 1092.291324][T23192] kern_select+0x15d/0x1e0 [ 1092.291348][T23192] ? __pfx_kern_select+0x10/0x10 [ 1092.291377][T23192] ? xfd_validate_state+0x61/0x180 [ 1092.291413][T23192] ? __pfx_ksys_write+0x10/0x10 [ 1092.291447][T23192] __x64_sys_select+0xbd/0x160 [ 1092.291470][T23192] ? do_syscall_64+0x91/0xfa0 [ 1092.291501][T23192] ? lockdep_hardirqs_on+0x7c/0x110 [ 1092.291532][T23192] do_syscall_64+0xcd/0xfa0 [ 1092.291571][T23192] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1092.291601][T23192] RIP: 0033:0x7ff2d0f8f6c9 [ 1092.291623][T23192] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1092.291649][T23192] RSP: 002b:00007ff2d1d64038 EFLAGS: 00000246 ORIG_RAX: 0000000000000017 [ 1092.291675][T23192] RAX: ffffffffffffffda RBX: 00007ff2d11e5fa0 RCX: 00007ff2d0f8f6c9 [ 1092.291693][T23192] RDX: 00002000000005c0 RSI: 0000000000000000 RDI: 0000000000000005 [ 1092.291710][T23192] RBP: 00007ff2d1011f91 R08: 0000000000000000 R09: 0000000000000000 [ 1092.291725][T23192] R10: 00002000000006c0 R11: 0000000000000246 R12: 0000000000000000 [ 1092.291741][T23192] R13: 00007ff2d11e6038 R14: 00007ff2d11e5fa0 R15: 00007fffdfb6c0a8 [ 1092.291774][T23192] [ 1093.015685][T23196] netlink: set zone limit has 8 unknown bytes [ 1093.814310][T23218] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1093.837222][T23210] zswap: compressor not available [ 1093.848030][T23218] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1093.926068][T23218] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1093.932384][T23218] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1093.934608][T23218] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1093.935105][T23218] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1093.995921][T23218] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1094.177597][T23218] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1094.177762][T23218] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 1094.281245][T23218] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 1094.362545][T23218] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 1094.362667][T23218] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 1094.470031][T23218] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 1095.822149][T15590] Bluetooth: hci0: command 0x0c1a tx timeout [ 1095.907447][T15590] Bluetooth: hci1: command 0x0c1a tx timeout [ 1096.005750][T15590] Bluetooth: hci4: command 0x0c1a tx timeout [ 1096.013750][T15590] Bluetooth: hci2: command 0x0c1a tx timeout [ 1096.019833][T15590] Bluetooth: hci3: command 0x0419 tx timeout [ 1096.221223][ T5832] Bluetooth: hci5: command 0x0c1a tx timeout [ 1096.384336][ T5832] Bluetooth: hci6: command 0x0c1a tx timeout [ 1098.065108][ T5832] Bluetooth: hci4: command 0x0c1a tx timeout [ 1098.301401][ T5832] Bluetooth: hci5: command 0x0c1a tx timeout [ 1098.461743][ T5832] Bluetooth: hci6: command 0x0c1a tx timeout [ 1098.468689][T23286] HfR: entered promiscuous mode [ 1098.874812][T23299] Invalid ELF header magic: != ELF [ 1098.978154][T23301] FAULT_INJECTION: forcing a failure. [ 1098.978154][T23301] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1099.067408][T23301] CPU: 0 UID: 0 PID: 23301 Comm: syz.8.5137 Tainted: G U syzkaller #0 PREEMPT(full) [ 1099.067509][T23301] Tainted: [U]=USER [ 1099.067517][T23301] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1099.067533][T23301] Call Trace: [ 1099.067543][T23301] [ 1099.067553][T23301] dump_stack_lvl+0x16c/0x1f0 [ 1099.067592][T23301] should_fail_ex+0x512/0x640 [ 1099.067645][T23301] _copy_from_user+0x2e/0xd0 [ 1099.067688][T23301] core_sys_select+0x315/0xc20 [ 1099.067722][T23301] ? __pfx_core_sys_select+0x10/0x10 [ 1099.067752][T23301] ? futex_wait+0x120/0x380 [ 1099.067798][T23301] ? __pfx_do_futex+0x10/0x10 [ 1099.067835][T23301] ? find_held_lock+0x2b/0x80 [ 1099.067864][T23301] kern_select+0x15d/0x1e0 [ 1099.067888][T23301] ? __pfx_kern_select+0x10/0x10 [ 1099.067914][T23301] ? xfd_validate_state+0x61/0x180 [ 1099.067956][T23301] __x64_sys_select+0xbd/0x160 [ 1099.067978][T23301] ? do_syscall_64+0x91/0xfa0 [ 1099.068008][T23301] ? lockdep_hardirqs_on+0x7c/0x110 [ 1099.068038][T23301] do_syscall_64+0xcd/0xfa0 [ 1099.068069][T23301] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1099.068094][T23301] RIP: 0033:0x7ff2d0f8f6c9 [ 1099.068114][T23301] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1099.068139][T23301] RSP: 002b:00007ff2d1d64038 EFLAGS: 00000246 ORIG_RAX: 0000000000000017 [ 1099.068163][T23301] RAX: ffffffffffffffda RBX: 00007ff2d11e5fa0 RCX: 00007ff2d0f8f6c9 [ 1099.068179][T23301] RDX: 00002000000005c0 RSI: 0000000000000000 RDI: 0000000000000005 [ 1099.068194][T23301] RBP: 00007ff2d1011f91 R08: 0000000000000000 R09: 0000000000000000 [ 1099.068208][T23301] R10: 00002000000006c0 R11: 0000000000000246 R12: 0000000000000000 [ 1099.068224][T23301] R13: 00007ff2d11e6038 R14: 00007ff2d11e5fa0 R15: 00007fffdfb6c0a8 [ 1099.068256][T23301] [ 1099.427043][T23307] futex_wake_op: syz.8.5139 tries to shift op by -9; fix this program [ 1099.571923][T23313] random: crng reseeded on system resumption [ 1099.625226][T23314] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1099.784422][T23314] [U] [ 1099.787274][T23314] [U] [ 1099.790173][T23314] [U] [ 1099.792883][T23314] [U] [ 1099.832157][T23314] [U] [ 1099.834929][T23314] [U] [ 1099.837649][T23314] [U] [ 1099.840358][T23314] [U] [ 1099.876107][T23314] [U] [ 1099.878991][T23314] [U] [ 1099.881724][T23314] [U] [ 1099.884561][T23314] [U] [ 1100.047836][T23314] [U] [ 1100.050589][T23314] [U] ܸK>>/qg99(v>c~~PkLzPe- [ 1100.057801][T23314] [U] gZvznkگaVo!e"45 p <8ڜjDH=L~qp\׮x3G [ 1100.067381][T23314] [U] 4-}sUc [ 1100.071408][T23314] [U] th:N/-_[lɣ [ 1100.075953][T23314] [U] a6D9gƨcY$GiIr.BxS, VӶNОlqI{KcB沫YIo7y\/: [ 1100.168005][T23314] [U] tZS ~:3ZzwR] 씞ގ-}),B [ 1100.174542][T23314] [U]  [ 1100.177514][T23314] [U] gׁ.(V#GB [ 1100.181733][ C0] vkms_vblank_simulate: vblank timer overrun [ 1100.320078][ T5832] Bluetooth: hci4: command 0x0c1a tx timeout [ 1100.419613][ T5832] Bluetooth: hci5: command 0x0c1a tx timeout [ 1100.441242][T23326] netlink: 'syz.6.5143': attribute type 1 has an invalid length. [ 1100.547677][ T5832] Bluetooth: hci6: command 0x0c1a tx timeout [ 1101.094129][T23314] [U] A0R[pMZB@v.&Hl?)5ad yZ]ex@ucB$ڹ[pn;rBZH\0cx0 Y>D[7Z !(ZK4S⫧"i*bQ 5tpY9$jy0tYZ[F,/UDqp씘y5C P)<]N`4"d [ 1101.786265][ T30] audit: type=1800 audit(4294968964.887:29): pid=23342 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.5147" name="lu_gp_id" dev="configfs" ino=108559 res=0 errno=0 [ 1101.856377][T15590] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1101.880570][T15590] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1101.914713][T15590] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1101.924782][T15590] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1101.934244][T15590] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1102.946676][T23364] Console: switching to colour frame buffer device 128x48 [ 1103.800182][T23347] chnl_net:caif_netlink_parms(): no params data found [ 1104.062172][T15590] Bluetooth: hci7: command tx timeout [ 1104.165932][T23347] bridge0: port 1(bridge_slave_0) entered blocking state [ 1104.186113][T23347] bridge0: port 1(bridge_slave_0) entered disabled state [ 1104.206052][T23347] bridge_slave_0: entered allmulticast mode [ 1104.238982][T23347] bridge_slave_0: entered promiscuous mode [ 1104.272630][T23347] bridge0: port 2(bridge_slave_1) entered blocking state [ 1104.300224][T23347] bridge0: port 2(bridge_slave_1) entered disabled state [ 1104.325050][T23347] bridge_slave_1: entered allmulticast mode [ 1104.340141][T23381] FAULT_INJECTION: forcing a failure. [ 1104.340141][T23381] name failslab, interval 1, probability 0, space 0, times 0 [ 1104.353939][T23347] bridge_slave_1: entered promiscuous mode [ 1104.371573][T23381] CPU: 0 UID: 0 PID: 23381 Comm: syz.6.5153 Tainted: G U syzkaller #0 PREEMPT(full) [ 1104.371614][T23381] Tainted: [U]=USER [ 1104.371623][T23381] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1104.371638][T23381] Call Trace: [ 1104.371647][T23381] [ 1104.371657][T23381] dump_stack_lvl+0x16c/0x1f0 [ 1104.371695][T23381] should_fail_ex+0x512/0x640 [ 1104.371735][T23381] ? __kmalloc_noprof+0xca/0x880 [ 1104.371783][T23381] should_failslab+0xc2/0x120 [ 1104.371819][T23381] __kmalloc_noprof+0xdd/0x880 [ 1104.371859][T23381] ? vb2_core_allocated_buffers_storage+0xc4/0x220 [ 1104.371906][T23381] ? vb2_core_allocated_buffers_storage+0xc4/0x220 [ 1104.371943][T23381] vb2_core_allocated_buffers_storage+0xc4/0x220 [ 1104.371987][T23381] vb2_core_reqbufs+0x398/0xfe0 [ 1104.372032][T23381] ? __pfx_vb2_core_reqbufs+0x10/0x10 [ 1104.372092][T23381] __vb2_init_fileio+0x3f1/0x1100 [ 1104.372142][T23381] vb2_core_poll+0x486/0x700 [ 1104.372165][T23381] vb2_poll+0x4b/0xe0 [ 1104.372206][T23381] vb2_fop_poll+0x10f/0x2c0 [ 1104.372244][T23381] ? __pfx_vb2_fop_poll+0x10/0x10 [ 1104.372281][T23381] v4l2_poll+0x163/0x320 [ 1104.372311][T23381] ? __pfx_v4l2_poll+0x10/0x10 [ 1104.372338][T23381] do_select+0xd3d/0x17e0 [ 1104.372386][T23381] ? __pfx_do_select+0x10/0x10 [ 1104.372409][T23381] ? lock_acquire+0x179/0x350 [ 1104.372451][T23381] ? __pfx_pollwake+0x10/0x10 [ 1104.372521][T23381] ? find_held_lock+0x2b/0x80 [ 1104.372545][T23381] ? __might_fault+0xe3/0x190 [ 1104.372569][T23381] ? __might_fault+0xe3/0x190 [ 1104.372592][T23381] ? __might_fault+0x13b/0x190 [ 1104.372628][T23381] ? core_sys_select+0x453/0xc20 [ 1104.372650][T23381] core_sys_select+0x453/0xc20 [ 1104.372681][T23381] ? __pfx_core_sys_select+0x10/0x10 [ 1104.372711][T23381] ? futex_wake+0x1ad/0x530 [ 1104.372773][T23381] ? __pfx_do_futex+0x10/0x10 [ 1104.372815][T23381] kern_select+0x15d/0x1e0 [ 1104.372839][T23381] ? __pfx_kern_select+0x10/0x10 [ 1104.372867][T23381] ? xfd_validate_state+0x61/0x180 [ 1104.372903][T23381] ? __pfx_ksys_write+0x10/0x10 [ 1104.372936][T23381] __x64_sys_select+0xbd/0x160 [ 1104.372959][T23381] ? do_syscall_64+0x91/0xfa0 [ 1104.372989][T23381] ? lockdep_hardirqs_on+0x7c/0x110 [ 1104.373019][T23381] do_syscall_64+0xcd/0xfa0 [ 1104.373051][T23381] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1104.373077][T23381] RIP: 0033:0x7f3480b8f6c9 [ 1104.373097][T23381] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1104.373125][T23381] RSP: 002b:00007f348198c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000017 [ 1104.373154][T23381] RAX: ffffffffffffffda RBX: 00007f3480de5fa0 RCX: 00007f3480b8f6c9 [ 1104.373171][T23381] RDX: 00002000000005c0 RSI: 0000000000000000 RDI: 0000000000000005 [ 1104.373193][T23381] RBP: 00007f3480c11f91 R08: 0000000000000000 R09: 0000000000000000 [ 1104.373208][T23381] R10: 00002000000006c0 R11: 0000000000000246 R12: 0000000000000000 [ 1104.373223][T23381] R13: 00007f3480de6038 R14: 00007f3480de5fa0 R15: 00007ffd9dee9c58 [ 1104.373259][T23381] [ 1104.681528][ C0] vkms_vblank_simulate: vblank timer overrun [ 1105.805883][T23347] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1106.005478][T23347] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1106.144958][T15590] Bluetooth: hci7: command tx timeout [ 1106.395575][T23347] team0: Port device team_slave_0 added [ 1106.473051][T23347] team0: Port device team_slave_1 added [ 1106.724464][T23347] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1106.761263][T23347] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1106.934039][T23347] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1107.017614][T23347] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1107.043730][T23403] can: request_module (can-proto-0) failed. [ 1107.053847][T23347] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1107.171930][T23347] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1107.478209][T23407] vhci_hcd: SetHubDepth req not supported for USB 2.0 roothub [ 1107.639076][T23347] hsr_slave_0: entered promiscuous mode [ 1107.673559][T23347] hsr_slave_1: entered promiscuous mode [ 1107.710397][T23347] debugfs: 'hsr0' already exists in 'hsr' [ 1107.733496][T23347] Cannot create hsr debugfs directory [ 1108.222549][T15590] Bluetooth: hci7: command tx timeout [ 1108.411877][T23410] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input27 [ 1108.913575][T23411] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input28 [ 1108.953675][T23347] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1109.352806][T23347] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1109.687982][T23347] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1110.088778][T23433] futex_wake_op: syz.6.5163 tries to shift op by -2048; fix this program [ 1110.244618][T23433] futex_wake_op: syz.6.5163 tries to shift op by -2048; fix this program [ 1110.311566][T15590] Bluetooth: hci7: command tx timeout [ 1110.444375][T23435] queue_state_write: operation too long [ 1110.544435][T23435] queue_state_write: use 'run', 'start' or 'kick' [ 1110.610774][T23347] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1110.726217][T23347] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1110.787247][T23347] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1110.858536][T23347] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1111.376899][T23347] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1111.475833][T15590] Bluetooth: hci4: unexpected event 0x3e length: 726 > 260 [ 1111.475867][T15590] Bluetooth: hci4: unexpected subevent 0x0e length: 725 > 15 [ 1111.491906][T15590] Bluetooth: hci4: Unable to find connection for dst 00:a2:f2:94:be:c8 sid 0x4f [ 1111.530716][T23347] 8021q: adding VLAN 0 to HW filter on device team0 [ 1111.661126][T21965] bridge0: port 1(bridge_slave_0) entered blocking state [ 1111.668590][T21965] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1111.763243][T21965] bridge0: port 2(bridge_slave_1) entered blocking state [ 1111.770876][T21965] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1112.732993][T23486] FAULT_INJECTION: forcing a failure. [ 1112.732993][T23486] name failslab, interval 1, probability 0, space 0, times 0 [ 1112.831835][T23486] CPU: 0 UID: 0 PID: 23486 Comm: syz.6.5174 Tainted: G U syzkaller #0 PREEMPT(full) [ 1112.831885][T23486] Tainted: [U]=USER [ 1112.831895][T23486] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1112.831911][T23486] Call Trace: [ 1112.831919][T23486] [ 1112.831929][T23486] dump_stack_lvl+0x16c/0x1f0 [ 1112.831966][T23486] should_fail_ex+0x512/0x640 [ 1112.832008][T23486] ? fs_reclaim_acquire+0xae/0x150 [ 1112.832046][T23486] should_failslab+0xc2/0x120 [ 1112.832081][T23486] kmem_cache_alloc_noprof+0x75/0x6e0 [ 1112.832109][T23486] ? ima_inode_get+0x120/0x580 [ 1112.832152][T23486] ? ima_inode_get+0x120/0x580 [ 1112.832186][T23486] ima_inode_get+0x120/0x580 [ 1112.832225][T23486] process_measurement+0x585/0x23e0 [ 1112.832279][T23486] ? __lock_acquire+0x622/0x1c90 [ 1112.832316][T23486] ? __pfx_process_measurement+0x10/0x10 [ 1112.832354][T23486] ? __kasan_slab_alloc+0x89/0x90 [ 1112.832387][T23486] ? security_file_alloc+0x34/0x2b0 [ 1112.832415][T23486] ? alloc_empty_file+0x73/0x1e0 [ 1112.832451][T23486] ? alloc_file_pseudo+0x13a/0x230 [ 1112.832493][T23486] ? find_held_lock+0x2b/0x80 [ 1112.832554][T23486] ima_file_mmap+0x1b1/0x1d0 [ 1112.832590][T23486] ? __pfx_ima_file_mmap+0x10/0x10 [ 1112.832633][T23486] security_mmap_file+0x88c/0x990 [ 1112.832661][T23486] vm_mmap_pgoff+0xec/0x470 [ 1112.832697][T23486] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 1112.832727][T23486] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 1112.832765][T23486] ? hugetlbfs_get_inode+0x31f/0x730 [ 1112.832804][T23486] ksys_mmap_pgoff+0x1c8/0x5c0 [ 1112.832842][T23486] __x64_sys_mmap+0x125/0x190 [ 1112.832884][T23486] do_syscall_64+0xcd/0xfa0 [ 1112.832917][T23486] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1112.832943][T23486] RIP: 0033:0x7f3480b8f6c9 [ 1112.832963][T23486] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1112.832990][T23486] RSP: 002b:00007f348194a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1112.833013][T23486] RAX: ffffffffffffffda RBX: 00007f3480de6180 RCX: 00007f3480b8f6c9 [ 1112.833029][T23486] RDX: 00004000000000df RSI: 0000000000000004 RDI: 0000000000000000 [ 1112.833044][T23486] RBP: 00007f3480c11f91 R08: 0000000000000005 R09: 0000300000000000 [ 1112.833060][T23486] R10: 0000000000040eb1 R11: 0000000000000246 R12: 0000000000000000 [ 1112.833077][T23486] R13: 00007f3480de6218 R14: 00007f3480de6180 R15: 00007ffd9dee9c58 [ 1112.833109][T23486] [ 1113.356947][T23347] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1113.464029][T23347] veth0_vlan: entered promiscuous mode [ 1113.550739][T23347] veth1_vlan: entered promiscuous mode [ 1113.908003][T23495] FAULT_INJECTION: forcing a failure. [ 1113.908003][T23495] name failslab, interval 1, probability 0, space 0, times 0 [ 1113.929918][T23347] veth0_macvtap: entered promiscuous mode [ 1113.995481][T23347] veth1_macvtap: entered promiscuous mode [ 1114.011797][T23495] CPU: 0 UID: 0 PID: 23495 Comm: syz.8.5175 Tainted: G U syzkaller #0 PREEMPT(full) [ 1114.011844][T23495] Tainted: [U]=USER [ 1114.011858][T23495] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1114.011874][T23495] Call Trace: [ 1114.011882][T23495] [ 1114.011893][T23495] dump_stack_lvl+0x16c/0x1f0 [ 1114.011932][T23495] should_fail_ex+0x512/0x640 [ 1114.011973][T23495] ? __kmalloc_noprof+0xca/0x880 [ 1114.012018][T23495] should_failslab+0xc2/0x120 [ 1114.012052][T23495] __kmalloc_noprof+0xdd/0x880 [ 1114.012096][T23495] ? vb2_core_allocated_buffers_storage+0xc4/0x220 [ 1114.012143][T23495] ? vb2_core_allocated_buffers_storage+0xc4/0x220 [ 1114.012181][T23495] vb2_core_allocated_buffers_storage+0xc4/0x220 [ 1114.012223][T23495] vb2_core_reqbufs+0x398/0xfe0 [ 1114.012282][T23495] ? __pfx_vb2_core_reqbufs+0x10/0x10 [ 1114.012341][T23495] __vb2_init_fileio+0x3f1/0x1100 [ 1114.012393][T23495] vb2_core_poll+0x486/0x700 [ 1114.012419][T23495] vb2_poll+0x4b/0xe0 [ 1114.012454][T23495] vb2_fop_poll+0x10f/0x2c0 [ 1114.012491][T23495] ? __pfx_vb2_fop_poll+0x10/0x10 [ 1114.012528][T23495] v4l2_poll+0x163/0x320 [ 1114.012558][T23495] ? __pfx_v4l2_poll+0x10/0x10 [ 1114.012585][T23495] do_select+0xd3d/0x17e0 [ 1114.012632][T23495] ? __pfx_do_select+0x10/0x10 [ 1114.012655][T23495] ? lock_acquire+0x179/0x350 [ 1114.012697][T23495] ? __pfx_pollwake+0x10/0x10 [ 1114.012786][T23495] ? find_held_lock+0x2b/0x80 [ 1114.012811][T23495] ? __might_fault+0xe3/0x190 [ 1114.012836][T23495] ? __might_fault+0xe3/0x190 [ 1114.012859][T23495] ? __might_fault+0x13b/0x190 [ 1114.012895][T23495] ? core_sys_select+0x453/0xc20 [ 1114.012918][T23495] core_sys_select+0x453/0xc20 [ 1114.012950][T23495] ? __pfx_core_sys_select+0x10/0x10 [ 1114.012980][T23495] ? futex_wake+0x1ad/0x530 [ 1114.013044][T23495] ? __pfx_do_futex+0x10/0x10 [ 1114.013086][T23495] kern_select+0x15d/0x1e0 [ 1114.013111][T23495] ? __pfx_kern_select+0x10/0x10 [ 1114.013139][T23495] ? xfd_validate_state+0x61/0x180 [ 1114.013174][T23495] ? __pfx_ksys_write+0x10/0x10 [ 1114.013208][T23495] __x64_sys_select+0xbd/0x160 [ 1114.013231][T23495] ? do_syscall_64+0x91/0xfa0 [ 1114.013269][T23495] ? lockdep_hardirqs_on+0x7c/0x110 [ 1114.013301][T23495] do_syscall_64+0xcd/0xfa0 [ 1114.013335][T23495] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1114.013363][T23495] RIP: 0033:0x7ff2d0f8f6c9 [ 1114.013384][T23495] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1114.013409][T23495] RSP: 002b:00007ff2d1d64038 EFLAGS: 00000246 ORIG_RAX: 0000000000000017 [ 1114.013433][T23495] RAX: ffffffffffffffda RBX: 00007ff2d11e5fa0 RCX: 00007ff2d0f8f6c9 [ 1114.013449][T23495] RDX: 00002000000005c0 RSI: 0000000000000000 RDI: 0000000000000005 [ 1114.013464][T23495] RBP: 00007ff2d1011f91 R08: 0000000000000000 R09: 0000000000000000 [ 1114.013499][T23495] R10: 00002000000006c0 R11: 0000000000000246 R12: 0000000000000000 [ 1114.013515][T23495] R13: 00007ff2d11e6038 R14: 00007ff2d11e5fa0 R15: 00007fffdfb6c0a8 [ 1114.013549][T23495] [ 1114.694756][T23347] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1114.723689][T23347] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1115.118049][ T2915] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1115.158728][ T2915] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1115.245198][ T2915] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1115.307877][ T2915] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1115.582088][ T2915] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1115.589967][ T2915] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1115.786204][ T1314] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1115.809334][ T1314] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1116.681867][T23516] FAULT_INJECTION: forcing a failure. [ 1116.681867][T23516] name failslab, interval 1, probability 0, space 0, times 0 [ 1116.729049][T23516] CPU: 0 UID: 0 PID: 23516 Comm: syz.0.5180 Tainted: G U syzkaller #0 PREEMPT(full) [ 1116.729131][T23516] Tainted: [U]=USER [ 1116.729140][T23516] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1116.729155][T23516] Call Trace: [ 1116.729164][T23516] [ 1116.729174][T23516] dump_stack_lvl+0x16c/0x1f0 [ 1116.729210][T23516] should_fail_ex+0x512/0x640 [ 1116.729251][T23516] ? __kmalloc_cache_noprof+0x5f/0x780 [ 1116.729284][T23516] should_failslab+0xc2/0x120 [ 1116.729319][T23516] __kmalloc_cache_noprof+0x72/0x780 [ 1116.729344][T23516] ? __vb2_init_fileio+0x253/0x1100 [ 1116.729391][T23516] ? __vb2_init_fileio+0x253/0x1100 [ 1116.729431][T23516] __vb2_init_fileio+0x253/0x1100 [ 1116.729481][T23516] vb2_core_poll+0x486/0x700 [ 1116.729505][T23516] vb2_poll+0x4b/0xe0 [ 1116.729541][T23516] vb2_fop_poll+0x10f/0x2c0 [ 1116.729579][T23516] ? __pfx_vb2_fop_poll+0x10/0x10 [ 1116.729614][T23516] v4l2_poll+0x163/0x320 [ 1116.729643][T23516] ? __pfx_v4l2_poll+0x10/0x10 [ 1116.729669][T23516] do_select+0xd3d/0x17e0 [ 1116.729716][T23516] ? __pfx_do_select+0x10/0x10 [ 1116.729739][T23516] ? finish_task_switch.isra.0+0x21c/0xc10 [ 1116.729775][T23516] ? __pfx_pollwake+0x10/0x10 [ 1116.729843][T23516] ? find_held_lock+0x2b/0x80 [ 1116.729876][T23516] ? __might_fault+0xe3/0x190 [ 1116.729901][T23516] ? __might_fault+0xe3/0x190 [ 1116.729924][T23516] ? __might_fault+0x13b/0x190 [ 1116.729959][T23516] ? core_sys_select+0x453/0xc20 [ 1116.729981][T23516] core_sys_select+0x453/0xc20 [ 1116.730013][T23516] ? __pfx_core_sys_select+0x10/0x10 [ 1116.730043][T23516] ? futex_wait+0x120/0x380 [ 1116.730090][T23516] ? __pfx_do_futex+0x10/0x10 [ 1116.730134][T23516] kern_select+0x15d/0x1e0 [ 1116.730158][T23516] ? __pfx_kern_select+0x10/0x10 [ 1116.730186][T23516] ? xfd_validate_state+0x61/0x180 [ 1116.730222][T23516] ? __pfx_ksys_write+0x10/0x10 [ 1116.730255][T23516] __x64_sys_select+0xbd/0x160 [ 1116.730277][T23516] ? do_syscall_64+0x91/0xfa0 [ 1116.730308][T23516] ? lockdep_hardirqs_on+0x7c/0x110 [ 1116.730339][T23516] do_syscall_64+0xcd/0xfa0 [ 1116.730371][T23516] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1116.730396][T23516] RIP: 0033:0x7fc115f8f6c9 [ 1116.730416][T23516] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1116.730440][T23516] RSP: 002b:00007fc116ee0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000017 [ 1116.730464][T23516] RAX: ffffffffffffffda RBX: 00007fc1161e5fa0 RCX: 00007fc115f8f6c9 [ 1116.730480][T23516] RDX: 00002000000005c0 RSI: 0000000000000000 RDI: 0000000000000005 [ 1116.730495][T23516] RBP: 00007fc116011f91 R08: 0000000000000000 R09: 0000000000000000 [ 1116.730510][T23516] R10: 00002000000006c0 R11: 0000000000000246 R12: 0000000000000000 [ 1116.730525][T23516] R13: 00007fc1161e6038 R14: 00007fc1161e5fa0 R15: 00007ffef0baafc8 [ 1116.730558][T23516] [ 1117.021365][ C0] vkms_vblank_simulate: vblank timer overrun [ 1117.283329][T23532] FAULT_INJECTION: forcing a failure. [ 1117.283329][T23532] name failslab, interval 1, probability 0, space 0, times 0 [ 1117.283410][T23532] CPU: 0 UID: 0 PID: 23532 Comm: syz.0.5184 Tainted: G U syzkaller #0 PREEMPT(full) [ 1117.283445][T23532] Tainted: [U]=USER [ 1117.283454][T23532] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1117.283469][T23532] Call Trace: [ 1117.283477][T23532] [ 1117.283487][T23532] dump_stack_lvl+0x16c/0x1f0 [ 1117.283522][T23532] should_fail_ex+0x512/0x640 [ 1117.283559][T23532] ? __kmalloc_noprof+0xca/0x880 [ 1117.283602][T23532] should_failslab+0xc2/0x120 [ 1117.283635][T23532] __kmalloc_noprof+0xdd/0x880 [ 1117.283671][T23532] ? ima_eventdigest_init_common+0x154/0x430 [ 1117.283702][T23532] ? ima_write_template_field_data+0x5d/0x1f0 [ 1117.283735][T23532] ? ima_write_template_field_data+0x5d/0x1f0 [ 1117.283762][T23532] ima_write_template_field_data+0x5d/0x1f0 [ 1117.283796][T23532] ima_eventname_init_common+0x1b8/0x260 [ 1117.283830][T23532] ? __pfx_ima_eventname_init_common+0x10/0x10 [ 1117.283864][T23532] ? __kmalloc_noprof+0x34f/0x880 [ 1117.283902][T23532] ? ima_alloc_init_template+0x19d/0x720 [ 1117.283953][T23532] ima_alloc_init_template+0x3a0/0x720 [ 1117.283999][T23532] ima_store_measurement+0x1eb/0x5c0 [ 1117.284024][T23532] ? __pfx_ima_store_measurement+0x10/0x10 [ 1117.284049][T23532] ? vfs_getxattr_alloc+0xec/0x350 [ 1117.284082][T23532] ? __pfx_ima_get_hash_algo+0x10/0x10 [ 1117.284120][T23532] process_measurement+0x1ddb/0x23e0 [ 1117.284164][T23532] ? __lock_acquire+0x622/0x1c90 [ 1117.284197][T23532] ? __pfx_process_measurement+0x10/0x10 [ 1117.284232][T23532] ? __kasan_slab_alloc+0x89/0x90 [ 1117.284262][T23532] ? security_file_alloc+0x34/0x2b0 [ 1117.284288][T23532] ? alloc_empty_file+0x73/0x1e0 [ 1117.284321][T23532] ? alloc_file_pseudo+0x13a/0x230 [ 1117.284361][T23532] ? find_held_lock+0x2b/0x80 [ 1117.284420][T23532] ima_file_mmap+0x1b1/0x1d0 [ 1117.284454][T23532] ? __pfx_ima_file_mmap+0x10/0x10 [ 1117.284496][T23532] security_mmap_file+0x88c/0x990 [ 1117.284522][T23532] vm_mmap_pgoff+0xec/0x470 [ 1117.284557][T23532] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 1117.284585][T23532] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 1117.284622][T23532] ? hugetlbfs_get_inode+0x31f/0x730 [ 1117.284660][T23532] ksys_mmap_pgoff+0x1c8/0x5c0 [ 1117.284696][T23532] __x64_sys_mmap+0x125/0x190 [ 1117.284737][T23532] do_syscall_64+0xcd/0xfa0 [ 1117.284769][T23532] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1117.284794][T23532] RIP: 0033:0x7fc115f8f6c9 [ 1117.284814][T23532] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1117.284837][T23532] RSP: 002b:00007fc116ebf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1117.284860][T23532] RAX: ffffffffffffffda RBX: 00007fc1161e6090 RCX: 00007fc115f8f6c9 [ 1117.284876][T23532] RDX: 0000000000009c0f RSI: 000000000000000c RDI: 0000000000000000 [ 1117.284891][T23532] RBP: 00007fc116011f91 R08: ffffffffffffffff R09: 0000300000000000 [ 1117.284907][T23532] R10: 0000000000044eb2 R11: 0000000000000246 R12: 0000000000000000 [ 1117.284922][T23532] R13: 00007fc1161e6128 R14: 00007fc1161e6090 R15: 00007ffef0baafc8 [ 1117.284958][T23532] [ 1117.452190][ T30] audit: type=1804 audit(4294968980.387:30): pid=23532 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=add_template_measure cause=ENOMEM comm="syz.0.5184" name="anon_hugepage" dev="hugetlbfs" ino=110091 res=0 errno=0 [ 1117.882816][T23542] Invalid ELF header magic: != ELF [ 1117.921407][T23542] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5187'. [ 1117.964738][T23544] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5187'. [ 1117.966199][T23543] Invalid ELF header magic: != ELF [ 1118.207730][T23547] netlink: 330 bytes leftover after parsing attributes in process `syz.6.5188'. [ 1118.783497][T23553] FAULT_INJECTION: forcing a failure. [ 1118.783497][T23553] name failslab, interval 1, probability 0, space 0, times 0 [ 1118.783574][T23553] CPU: 0 UID: 0 PID: 23553 Comm: syz.6.5190 Tainted: G U syzkaller #0 PREEMPT(full) [ 1118.783609][T23553] Tainted: [U]=USER [ 1118.783617][T23553] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1118.783632][T23553] Call Trace: [ 1118.783640][T23553] [ 1118.783650][T23553] dump_stack_lvl+0x16c/0x1f0 [ 1118.783687][T23553] should_fail_ex+0x512/0x640 [ 1118.783727][T23553] ? __kmalloc_noprof+0xca/0x880 [ 1118.783771][T23553] should_failslab+0xc2/0x120 [ 1118.783807][T23553] __kmalloc_noprof+0xdd/0x880 [ 1118.783846][T23553] ? vb2_core_allocated_buffers_storage+0xc4/0x220 [ 1118.783906][T23553] ? vb2_core_allocated_buffers_storage+0xc4/0x220 [ 1118.783946][T23553] vb2_core_allocated_buffers_storage+0xc4/0x220 [ 1118.783989][T23553] vb2_core_reqbufs+0x398/0xfe0 [ 1118.784046][T23553] ? __pfx_vb2_core_reqbufs+0x10/0x10 [ 1118.784103][T23553] __vb2_init_fileio+0x3f1/0x1100 [ 1118.784152][T23553] vb2_core_poll+0x486/0x700 [ 1118.784176][T23553] vb2_poll+0x4b/0xe0 [ 1118.784213][T23553] vb2_fop_poll+0x10f/0x2c0 [ 1118.784249][T23553] ? __pfx_vb2_fop_poll+0x10/0x10 [ 1118.784284][T23553] v4l2_poll+0x163/0x320 [ 1118.784313][T23553] ? __pfx_v4l2_poll+0x10/0x10 [ 1118.784339][T23553] do_select+0xd3d/0x17e0 [ 1118.784385][T23553] ? __pfx_do_select+0x10/0x10 [ 1118.784409][T23553] ? lock_acquire+0x179/0x350 [ 1118.784450][T23553] ? __pfx_pollwake+0x10/0x10 [ 1118.784518][T23553] ? find_held_lock+0x2b/0x80 [ 1118.784543][T23553] ? __might_fault+0xe3/0x190 [ 1118.784569][T23553] ? __might_fault+0xe3/0x190 [ 1118.784592][T23553] ? __might_fault+0x13b/0x190 [ 1118.784628][T23553] ? core_sys_select+0x453/0xc20 [ 1118.784650][T23553] core_sys_select+0x453/0xc20 [ 1118.784682][T23553] ? __pfx_core_sys_select+0x10/0x10 [ 1118.784712][T23553] ? futex_wake+0x1ad/0x530 [ 1118.784776][T23553] ? __pfx_do_futex+0x10/0x10 [ 1118.784818][T23553] kern_select+0x15d/0x1e0 [ 1118.784842][T23553] ? __pfx_kern_select+0x10/0x10 [ 1118.784870][T23553] ? xfd_validate_state+0x61/0x180 [ 1118.784970][T23553] ? __pfx_ksys_write+0x10/0x10 [ 1118.785003][T23553] __x64_sys_select+0xbd/0x160 [ 1118.785027][T23553] ? do_syscall_64+0x91/0xfa0 [ 1118.785058][T23553] ? lockdep_hardirqs_on+0x7c/0x110 [ 1118.785088][T23553] do_syscall_64+0xcd/0xfa0 [ 1118.785123][T23553] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1118.785148][T23553] RIP: 0033:0x7f3480b8f6c9 [ 1118.785168][T23553] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1118.785193][T23553] RSP: 002b:00007f348198c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000017 [ 1118.785219][T23553] RAX: ffffffffffffffda RBX: 00007f3480de5fa0 RCX: 00007f3480b8f6c9 [ 1118.785236][T23553] RDX: 00002000000005c0 RSI: 0000000000000000 RDI: 0000000000000005 [ 1118.785251][T23553] RBP: 00007f3480c11f91 R08: 0000000000000000 R09: 0000000000000000 [ 1118.785268][T23553] R10: 00002000000006c0 R11: 0000000000000246 R12: 0000000000000000 [ 1118.785283][T23553] R13: 00007f3480de6038 R14: 00007f3480de5fa0 R15: 00007ffd9dee9c58 [ 1118.785316][T23553] [ 1119.096110][ C0] vkms_vblank_simulate: vblank timer overrun [ 1119.918109][T23526] tty tty45: ldisc open failed (-12), clearing slot 44 [ 1119.930254][T23554] ttyS ttyS2: ldisc open failed (-12), clearing slot 2 [ 1119.985689][T23555] tty tty15: ldisc open failed (-12), clearing slot 14 [ 1120.808305][T23595] netlink: 28 bytes leftover after parsing attributes in process `syz.8.5200'. [ 1120.938032][T23598] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1120.995743][T23606] netlink: 28 bytes leftover after parsing attributes in process `syz.8.5200'. [ 1121.124449][T23608] FAULT_INJECTION: forcing a failure. [ 1121.124449][T23608] name failslab, interval 1, probability 0, space 0, times 0 [ 1121.268440][T23608] CPU: 0 UID: 0 PID: 23608 Comm: syz.6.5202 Tainted: G U syzkaller #0 PREEMPT(full) [ 1121.268484][T23608] Tainted: [U]=USER [ 1121.268493][T23608] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1121.268509][T23608] Call Trace: [ 1121.268518][T23608] [ 1121.268530][T23608] dump_stack_lvl+0x16c/0x1f0 [ 1121.268571][T23608] should_fail_ex+0x512/0x640 [ 1121.268611][T23608] ? __kmalloc_cache_noprof+0x5f/0x780 [ 1121.268641][T23608] should_failslab+0xc2/0x120 [ 1121.268676][T23608] __kmalloc_cache_noprof+0x72/0x780 [ 1121.268701][T23608] ? __vb2_init_fileio+0x253/0x1100 [ 1121.268748][T23608] ? __vb2_init_fileio+0x253/0x1100 [ 1121.268792][T23608] __vb2_init_fileio+0x253/0x1100 [ 1121.268842][T23608] vb2_core_poll+0x486/0x700 [ 1121.268870][T23608] vb2_poll+0x4b/0xe0 [ 1121.268913][T23608] vb2_fop_poll+0x10f/0x2c0 [ 1121.268951][T23608] ? __pfx_vb2_fop_poll+0x10/0x10 [ 1121.268988][T23608] v4l2_poll+0x163/0x320 [ 1121.269018][T23608] ? __pfx_v4l2_poll+0x10/0x10 [ 1121.269046][T23608] do_select+0xd3d/0x17e0 [ 1121.269095][T23608] ? __pfx_do_select+0x10/0x10 [ 1121.269119][T23608] ? finish_task_switch.isra.0+0x21c/0xc10 [ 1121.269154][T23608] ? __pfx_pollwake+0x10/0x10 [ 1121.269222][T23608] ? find_held_lock+0x2b/0x80 [ 1121.269247][T23608] ? __might_fault+0xe3/0x190 [ 1121.269272][T23608] ? __might_fault+0xe3/0x190 [ 1121.269295][T23608] ? __might_fault+0x13b/0x190 [ 1121.269330][T23608] ? core_sys_select+0x453/0xc20 [ 1121.269352][T23608] core_sys_select+0x453/0xc20 [ 1121.269388][T23608] ? __pfx_core_sys_select+0x10/0x10 [ 1121.269419][T23608] ? futex_wait+0x120/0x380 [ 1121.269466][T23608] ? __pfx_do_futex+0x10/0x10 [ 1121.269507][T23608] kern_select+0x15d/0x1e0 [ 1121.269531][T23608] ? __pfx_kern_select+0x10/0x10 [ 1121.269559][T23608] ? xfd_validate_state+0x61/0x180 [ 1121.269597][T23608] ? __pfx_ksys_write+0x10/0x10 [ 1121.269629][T23608] __x64_sys_select+0xbd/0x160 [ 1121.269652][T23608] ? do_syscall_64+0x91/0xfa0 [ 1121.269683][T23608] ? lockdep_hardirqs_on+0x7c/0x110 [ 1121.269713][T23608] do_syscall_64+0xcd/0xfa0 [ 1121.269746][T23608] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1121.269772][T23608] RIP: 0033:0x7f3480b8f6c9 [ 1121.269792][T23608] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1121.269816][T23608] RSP: 002b:00007f348198c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000017 [ 1121.269841][T23608] RAX: ffffffffffffffda RBX: 00007f3480de5fa0 RCX: 00007f3480b8f6c9 [ 1121.269857][T23608] RDX: 00002000000005c0 RSI: 0000000000000000 RDI: 0000000000000005 [ 1121.269873][T23608] RBP: 00007f3480c11f91 R08: 0000000000000000 R09: 0000000000000000 [ 1121.269888][T23608] R10: 00002000000006c0 R11: 0000000000000246 R12: 0000000000000000 [ 1121.269909][T23608] R13: 00007f3480de6038 R14: 00007f3480de5fa0 R15: 00007ffd9dee9c58 [ 1121.269941][T23608] [ 1122.268106][T23633] netlink: 25 bytes leftover after parsing attributes in process `syz.0.5205'. [ 1123.827194][T23668] usb usb15: usbfs: process 23668 (syz.7.5216) did not claim interface 0 before use [ 1124.234390][ T10] usb usb38-port5: attempt power cycle [ 1124.822204][ T10] usb usb38-port5: unable to enumerate USB device [ 1125.058301][ T5832] Bluetooth: hci5: unexpected subevent 0x01 length: 123 > 18 [ 1126.724212][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 1126.730576][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 1127.101673][ T5832] Bluetooth: hci5: command 0x0c1a tx timeout [ 1128.356230][T23735] FAULT_INJECTION: forcing a failure. [ 1128.356230][T23735] name failslab, interval 1, probability 0, space 0, times 0 [ 1128.468488][T23735] CPU: 0 UID: 0 PID: 23735 Comm: syz.0.5232 Tainted: G U syzkaller #0 PREEMPT(full) [ 1128.468531][T23735] Tainted: [U]=USER [ 1128.468543][T23735] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1128.468559][T23735] Call Trace: [ 1128.468568][T23735] [ 1128.468579][T23735] dump_stack_lvl+0x16c/0x1f0 [ 1128.468618][T23735] should_fail_ex+0x512/0x640 [ 1128.468658][T23735] ? __kmalloc_noprof+0xca/0x880 [ 1128.468704][T23735] should_failslab+0xc2/0x120 [ 1128.468739][T23735] __kmalloc_noprof+0xdd/0x880 [ 1128.468779][T23735] ? vb2_core_allocated_buffers_storage+0xc4/0x220 [ 1128.468826][T23735] ? vb2_core_allocated_buffers_storage+0xc4/0x220 [ 1128.468865][T23735] vb2_core_allocated_buffers_storage+0xc4/0x220 [ 1128.468907][T23735] vb2_core_reqbufs+0x398/0xfe0 [ 1128.468959][T23735] ? __pfx_vb2_core_reqbufs+0x10/0x10 [ 1128.469017][T23735] __vb2_init_fileio+0x3f1/0x1100 [ 1128.469068][T23735] vb2_core_poll+0x486/0x700 [ 1128.469093][T23735] vb2_poll+0x4b/0xe0 [ 1128.469130][T23735] vb2_fop_poll+0x10f/0x2c0 [ 1128.469168][T23735] ? __pfx_vb2_fop_poll+0x10/0x10 [ 1128.469204][T23735] v4l2_poll+0x163/0x320 [ 1128.469233][T23735] ? __pfx_v4l2_poll+0x10/0x10 [ 1128.469259][T23735] do_select+0xd3d/0x17e0 [ 1128.469307][T23735] ? __pfx_do_select+0x10/0x10 [ 1128.469330][T23735] ? lock_acquire+0x179/0x350 [ 1128.469373][T23735] ? __pfx_pollwake+0x10/0x10 [ 1128.469442][T23735] ? find_held_lock+0x2b/0x80 [ 1128.469467][T23735] ? __might_fault+0xe3/0x190 [ 1128.469491][T23735] ? __might_fault+0xe3/0x190 [ 1128.469514][T23735] ? __might_fault+0x13b/0x190 [ 1128.469554][T23735] ? core_sys_select+0x453/0xc20 [ 1128.469576][T23735] core_sys_select+0x453/0xc20 [ 1128.469607][T23735] ? __pfx_core_sys_select+0x10/0x10 [ 1128.469636][T23735] ? futex_wake+0x1ad/0x530 [ 1128.469698][T23735] ? __pfx_do_futex+0x10/0x10 [ 1128.469739][T23735] kern_select+0x15d/0x1e0 [ 1128.469763][T23735] ? __pfx_kern_select+0x10/0x10 [ 1128.469790][T23735] ? xfd_validate_state+0x61/0x180 [ 1128.469824][T23735] ? __pfx_ksys_write+0x10/0x10 [ 1128.469857][T23735] __x64_sys_select+0xbd/0x160 [ 1128.469879][T23735] ? do_syscall_64+0x91/0xfa0 [ 1128.469910][T23735] ? lockdep_hardirqs_on+0x7c/0x110 [ 1128.469949][T23735] do_syscall_64+0xcd/0xfa0 [ 1128.469981][T23735] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1128.470007][T23735] RIP: 0033:0x7fc115f8f6c9 [ 1128.470027][T23735] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1128.470053][T23735] RSP: 002b:00007fc116ee0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000017 [ 1128.470077][T23735] RAX: ffffffffffffffda RBX: 00007fc1161e5fa0 RCX: 00007fc115f8f6c9 [ 1128.470093][T23735] RDX: 00002000000005c0 RSI: 0000000000000000 RDI: 0000000000000005 [ 1128.470108][T23735] RBP: 00007fc116011f91 R08: 0000000000000000 R09: 0000000000000000 [ 1128.470123][T23735] R10: 00002000000006c0 R11: 0000000000000246 R12: 0000000000000000 [ 1128.470139][T23735] R13: 00007fc1161e6038 R14: 00007fc1161e5fa0 R15: 00007ffef0baafc8 [ 1128.470171][T23735] [ 1163.822343][ T31] INFO: task syz.3.4899:22260 blocked for more than 143 seconds. [ 1163.830174][ T31] Tainted: G U syzkaller #0 [ 1163.837751][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1163.847191][ T31] task:syz.3.4899 state:D stack:27448 pid:22260 tgid:22259 ppid:14916 task_flags:0x400140 flags:0x00080002 [ 1163.863191][ T31] Call Trace: [ 1163.867607][ T31] [ 1163.870676][ T31] __schedule+0x1190/0x5de0 [ 1163.885271][ T31] ? check_path.constprop.0+0x24/0x50 [ 1163.890826][ T31] ? __lock_acquire+0x622/0x1c90 [ 1163.897390][ T31] ? __pfx___schedule+0x10/0x10 [ 1163.902593][ T31] ? find_held_lock+0x2b/0x80 [ 1163.907307][ T31] ? schedule+0x2d7/0x3a0 [ 1163.912458][ T31] ? nfsd_nl_listener_set_doit+0xd5/0x1b10 [ 1163.918399][ T31] schedule+0xe7/0x3a0 [ 1163.923193][ T31] schedule_preempt_disabled+0x13/0x30 [ 1163.928691][ T31] __mutex_lock+0x818/0x1060 [ 1163.933812][ T31] ? ____sys_sendmsg+0xa98/0xc70 [ 1163.938789][ T31] ? ___sys_sendmsg+0x134/0x1d0 [ 1163.944165][ T31] ? nfsd_nl_listener_set_doit+0xd5/0x1b10 [ 1163.950037][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1163.958978][ T31] ? __asan_memset+0x23/0x50 [ 1163.964108][ T31] ? __nla_validate_parse+0x600/0x2880 [ 1163.969920][ T31] ? nfsd_nl_listener_set_doit+0xd5/0x1b10 [ 1163.979278][ T31] nfsd_nl_listener_set_doit+0xd5/0x1b10 [ 1163.989034][ T31] ? rcu_is_watching+0x12/0xc0 [ 1163.997831][ T31] ? __pfx_nfsd_nl_listener_set_doit+0x10/0x10 [ 1164.004359][ T31] ? __nla_parse+0x40/0x60 [ 1164.008986][ T31] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 1164.016961][ T31] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 1164.024980][ T31] genl_family_rcv_msg_doit+0x209/0x2f0 [ 1164.030577][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1164.037308][ T31] ? rcu_is_watching+0x12/0xc0 [ 1164.042519][ T31] ? bpf_lsm_capable+0x9/0x10 [ 1164.047361][ T31] ? security_capable+0x7e/0x260 [ 1164.053023][ T31] genl_rcv_msg+0x55c/0x800 [ 1164.061862][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1164.066971][ T31] ? __pfx_nfsd_nl_listener_set_doit+0x10/0x10 [ 1164.073806][ T31] netlink_rcv_skb+0x158/0x420 [ 1164.080214][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1164.085767][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1164.094336][ T31] ? netlink_deliver_tap+0x1ae/0xd30 [ 1164.099874][ T31] genl_rcv+0x28/0x40 [ 1164.108850][ T31] netlink_unicast+0x5aa/0x870 [ 1164.114134][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 1164.119509][ T31] netlink_sendmsg+0x8c8/0xdd0 [ 1164.124976][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1164.130333][ T31] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 1164.137701][ T31] ____sys_sendmsg+0xa98/0xc70 [ 1164.143234][ T31] ? copy_msghdr_from_user+0x10a/0x160 [ 1164.148831][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1164.154838][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 1164.164148][ T31] ? try_to_wake_up+0xa67/0x1870 [ 1164.169260][ T31] ___sys_sendmsg+0x134/0x1d0 [ 1164.174512][ T31] ? find_held_lock+0x2b/0x80 [ 1164.180952][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 1164.186808][ T31] ? __lock_acquire+0x622/0x1c90 [ 1164.192501][ T31] __sys_sendmsg+0x16d/0x220 [ 1164.197165][ T31] ? __pfx___sys_sendmsg+0x10/0x10 [ 1164.205920][ T31] ? __x64_sys_futex+0x1e0/0x4c0 [ 1164.210952][ T31] do_syscall_64+0xcd/0xfa0 [ 1164.220917][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1164.227787][ T31] RIP: 0033:0x7f96bdb8f6c9 [ 1164.232742][ T31] RSP: 002b:00007f96be985038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1164.242139][ T31] RAX: ffffffffffffffda RBX: 00007f96bdde5fa0 RCX: 00007f96bdb8f6c9 [ 1164.250172][ T31] RDX: 0000000000000000 RSI: 0000200000003140 RDI: 0000000000000003 [ 1164.258835][ T31] RBP: 00007f96bdc11f91 R08: 0000000000000000 R09: 0000000000000000 [ 1164.270602][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1164.279098][ T31] R13: 00007f96bdde6038 R14: 00007f96bdde5fa0 R15: 00007ffe468bf7b8 [ 1164.289109][ T31] [ 1164.292585][ T31] [ 1164.292585][ T31] Showing all locks held in the system: [ 1164.300369][ T31] 1 lock held by khungtaskd/31: [ 1164.306312][ T31] #0: ffffffff8e3c45e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0 [ 1164.320303][ T31] 2 locks held by getty/18659: [ 1164.329062][ T31] #0: ffff8880343db0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 1164.339434][ T31] #1: ffffc900030f42f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x14f0 [ 1164.350099][ T31] 2 locks held by syz-executor/20983: [ 1164.356257][ T31] #0: ffff88806216c0e0 (&type->s_umount_key#52){++++}-{4:4}, at: deactivate_super+0xd6/0x100 [ 1164.370792][ T31] #1: ffffffff8e7ed248 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 1164.381645][ T31] 2 locks held by syz.4.4893/22235: [ 1164.388653][ T31] #0: ffffffff9018ebd0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1164.397690][ T31] #1: ffffffff8e7ed248 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0xd5/0x1b10 [ 1164.408700][ T31] 2 locks held by syz.3.4899/22260: [ 1164.414904][ T31] #0: ffffffff9018ebd0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1164.426647][ T31] #1: ffffffff8e7ed248 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0xd5/0x1b10 [ 1164.442250][ T31] [ 1164.444622][ T31] ============================================= [ 1164.444622][ T31] [ 1164.453788][ T31] NMI backtrace for cpu 0 [ 1164.453811][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G U syzkaller #0 PREEMPT(full) [ 1164.453843][ T31] Tainted: [U]=USER [ 1164.453851][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1164.453865][ T31] Call Trace: [ 1164.453873][ T31] [ 1164.453882][ T31] dump_stack_lvl+0x116/0x1f0 [ 1164.453920][ T31] nmi_cpu_backtrace+0x27b/0x390 [ 1164.453957][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1164.453993][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 1164.454032][ T31] watchdog+0xf3f/0x1170 [ 1164.454060][ T31] ? rcu_is_watching+0x12/0xc0 [ 1164.454086][ T31] ? __pfx_watchdog+0x10/0x10 [ 1164.454106][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 1164.454137][ T31] ? __kthread_parkme+0x19e/0x250 [ 1164.454169][ T31] ? __pfx_watchdog+0x10/0x10 [ 1164.454194][ T31] kthread+0x3c5/0x780 [ 1164.454229][ T31] ? __pfx_kthread+0x10/0x10 [ 1164.454275][ T31] ? rcu_is_watching+0x12/0xc0 [ 1164.454300][ T31] ? __pfx_kthread+0x10/0x10 [ 1164.454335][ T31] ret_from_fork+0x675/0x7d0 [ 1164.454371][ T31] ? __pfx_kthread+0x10/0x10 [ 1164.454406][ T31] ret_from_fork_asm+0x1a/0x30 [ 1164.454455][ T31]