last executing test programs: 16m43.465391999s ago: executing program 2 (id=1922): statmount$auto(0x0, &(0x7f0000000180)={0xa, 0x7, 0xfffffffffffffff9, 0x7, 0x3, 0x7181, 0xfffffff9, 0x7, 0x3, 0xd, 0x5, 0x80003, 0x4, 0x200000000000, 0xb4, 0x9, 0x8, 0x10006, 0x4000080, 0x0, 0x0, 0xe, 0x22010, 0x200, 0x0, 0xd363, 0x0, 0x0, 0x0, 0x0, 0x3, [0x0, 0x0, 0xf7fc, 0x0, 0x200000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000004, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xe8, 0x7, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000]}, 0x1fe, 0xd) r0 = pidfd_open$auto(0x0, 0x0) setns(r0, 0x2000000) ioctl$auto_VHOST_SET_VRING_CALL2(r0, 0x4008af21, &(0x7f0000000040)={0x6}) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x6, 0x8000) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_tracing_entries_fops_trace(0xffffffffffffff9c, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xc2481, 0x0) syz_genetlink_get_family_id$auto_smbd_genl(0x0, 0xffffffffffffffff) sendmsg$auto_KSMBD_EVENT_LOGIN_RESPONSE(r0, 0x0, 0x30004850) msync$auto(0x1ffff000, 0x1800000000000fe, 0x400000004) close_range$auto(0x2, 0x8, 0x0) setresuid$auto(0x2, 0x7, 0x8080) ioprio_get$auto(0x3, 0x2) openat$auto_ecryptfs_miscdev_fops_miscdev(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) ioctl$auto(r2, 0x4b47, 0x1) mmap$auto(0x0, 0x404005, 0xdf, 0x20000000011, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x80400, 0xb5d1af1605322ddc) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x8, 0x1, 0x15, 0x3, 0x120000000) open_by_handle_at$auto(r3, &(0x7f0000001280)={0x0, 0x2}, 0x6) openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000000180), 0x1541, 0x0) 16m42.439886538s ago: executing program 2 (id=1925): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x2062, 0x0) ioctl$auto_NS_GET_TGID_IN_PIDNS(0xffffffffffffffff, 0x8004b709, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000240)='/proc/asound/card1/pcm0p/sub0/xrun_injection\x00', 0x0, 0x0) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) clock_adjtime$auto(0x0, &(0x7f0000000040)={0xfbb, 0x0, 0x7f, 0xfffffffff7fffffe, 0x602, 0x8, 0x7, 0x0, 0x7, 0xb, 0x1, {0x3ff, 0x7}, 0xfffffffffffffffa, 0x200000a5, 0xa, 0x13c, 0x0, 0xc3, 0x7, 0x2, 0x5, 0x90, 0xfffffff5}) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0d566b3dd008e4edd9650200000000000008"], 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x200000c4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x8000}, 0x24000811) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) fsopen$auto(0x0, 0x1) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, r0, 0x8000) madvise$auto(0x0, 0xfffffffffffefffd, 0x17) madvise$auto(0x0, 0x20499d, 0x9) openat$auto_lockdown_ops_lockdown(0xffffffffffffff9c, 0x0, 0x230c41, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000440)='/sys/devices/platform/dummy_hcd.0/usb1/bConfigurationValue\x00', 0x63102, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) openat$auto_hsr_node_table_fops_(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0) sendfile$auto(r1, r1, 0x0, 0x2) 16m40.956588684s ago: executing program 2 (id=1927): r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x300c00, 0x0) ioctl$auto_TIOCGDEV2(r0, 0x80045432, &(0x7f0000000040)=0xddc) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0xa, 0x3, 0x3b) (async) socket(0xa, 0x3, 0x3b) r1 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x111b42, 0x2, 0x40}, 0x18) openat2$auto(r1, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0x8000000000000001, 0x80000000, 0x7}, 0x464) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) prctl$auto(0x4, 0xfffffffffffffffb, 0x0, 0x1, 0x1ffffffffffd) (async) r2 = prctl$auto(0x4, 0xfffffffffffffffb, 0x0, 0x1, 0x1ffffffffffd) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, r2, 0x8000) (async) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, r2, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) process_vm_readv$auto(0x0, 0x0, 0x1, 0x0, 0x6, 0x4a7) (async) process_vm_readv$auto(0x0, 0x0, 0x1, 0x0, 0x6, 0x4a7) migrate_pages$auto(0x0, 0xa, &(0x7f0000000100)=0x5, &(0x7f0000000140)=0x2) move_pages$auto(0x0, 0x1002, 0x0, &(0x7f0000001140), 0x0, 0x2) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r2, 0xc1105517, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x400008, 0xde, 0x9b72, 0x2, 0x800008000) (async) mmap$auto(0x0, 0x400008, 0xde, 0x9b72, 0x2, 0x800008000) 16m39.679454377s ago: executing program 2 (id=1933): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x10, 0x2, 0x0) openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/set_event\x00', 0x20201, 0x0) io_uring_setup$auto(0x59, 0x0) getpid() unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) listen$auto(0x3, 0x81) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) r2 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)=ANY=[@ANYRES8, @ANYRES32=r2, @ANYBLOB="010031de7000fddbdf250c000000"], 0x14}}, 0x24048084) madvise$auto(0x0, 0x200007, 0x19) getcpu$auto(0xfffffffffffffffc, 0xffffffffffffffff, 0xfffffffffffffffd) fanotify_init$auto(0x65, 0x2) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) unshare$auto(0x20000080) syz_clone3(&(0x7f0000000380)={0x2c022000, 0x0, 0x0, 0x0, {0x1f}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x101001, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000001c0), 0x101000, 0x0) sendmsg$auto_NL80211_CMD_DEL_TX_TS(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000200)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c020000", @ANYRES16=0x0, @ANYBLOB="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"], 0x24c}, 0x1, 0x0, 0x0, 0x24040081}, 0x40094) r3 = openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f0000000340), 0x80200, 0x0) pread64$auto(r3, &(0x7f0000000240)='\x03W\x96l\x15\x00\x00\x00\x00\xf4\x00'/21, 0x100000002, 0x100000001) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x101c82, 0x0) prctl$auto(0x42, 0x0, 0x0, 0x1, 0x0) 16m37.307439042s ago: executing program 2 (id=1943): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async, rerun: 32) mmap$auto(0x1, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) (async, rerun: 32) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) (async) openat$auto_bch_chardev_fops_chardev(0xffffffffffffff9c, 0x0, 0x40, 0x0) openat$auto_ftrace_set_event_notrace_pid_fops_trace_events(0xffffffffffffff9c, 0x0, 0x141f02, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) socket(0xa, 0x2, 0x88) (async, rerun: 32) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) msgctl$auto_IPC_INFO(0x1, 0x3, &(0x7f0000000840)={{0xbcc, 0x0, 0xee01, 0x101, 0x2, 0x3, 0x9}, &(0x7f00000007c0)=0x2, 0x0, 0x5, 0x3, 0x2000000000ff, 0x7fff, 0x9, 0x9, 0xfff8, 0x200, @raw=0x97a, @raw=0x1}) (rerun: 32) sendmsg$auto_MACSEC_CMD_ADD_TXSA(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYBLOB="00042cbd7000fddbdf250400000004000380080003800400738004000380"], 0x24}, 0x1, 0x0, 0x0, 0x40000d4}, 0x2404a0c1) r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/ttyS0\x00', 0xa102, 0x0) ioctl$auto_TIOCSTI2(r4, 0x5412, 0x0) bpf$auto(0x0, 0x0, 0xf) sendmmsg$auto(r2, &(0x7f0000000180)={{&(0x7f0000000000)="364ba801ae66bb", 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)="92e7e94ebb0226fb7a65ca92077db3a856801c1225bd03979744ab0bfe7f9427a1247200f60a3d241a0b3a4f03796e628367423a2a5923d0ac2fb86311f536ddc1ceb63dd676c8899479d7377b5c1128ada6105923d6d69530f2056b63e89429d2801d8751bafb68949367295789ebf8e52740b6c42d6c007aaab6edb97b059046ecb57a970b86b95a4fe7dfcd07ffae2a0bb7b8d3886e57b1ef626dadca9efc0c1ffaf038ecdd0c", 0x9}, 0xbb, 0x0, 0x0, 0x80000000}, 0x8}, 0xfffff6ca, 0xc6b0) (async, rerun: 64) socketpair$auto(0x1, 0x3, 0x8000000000000000, 0x0) (async, rerun: 64) socket$nl_generic(0x10, 0x3, 0x10) bpf$auto(0x2, 0x0, 0xc) readv$auto(0x6, 0x0, 0x1) (async, rerun: 32) setresuid$auto(0x8, 0x8, 0x0) (async, rerun: 32) setfsuid$auto(0x0) (async) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000e40)='/sys/devices/pci0000:00/0000:00:01.3/config\x00', 0x2, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r5, &(0x7f00000003c0)=""/231, 0xe7) (async, rerun: 32) sendmsg$auto_ETHTOOL_MSG_RINGS_SET(r1, 0x0, 0x0) (async, rerun: 32) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) (async) socket(0x29, 0x2, 0x0) (async) close_range$auto(0x0, 0xfffffffffffff000, 0x0) (async) syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_OVS_DP_CMD_NEW(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r3, @ANYRES64, @ANYRES32=0x4, @ANYRES16, @ANYRES32=0x9, @ANYBLOB="0800050007000000"], 0x40}, 0x1, 0x0, 0x0, 0x801}, 0x80) 16m36.091670465s ago: executing program 2 (id=1948): mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @loopback}, 0x54) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) setsockopt$auto(0x3, 0x10000000084, 0xb, 0x0, 0xc) socket(0xa, 0x1, 0x84) r0 = socket(0x2, 0x5, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x3d}}, 0x6a) mmap$auto(0x0, 0x4020009, 0xdf, 0x400000000e31, 0xffffffffffffffff, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/mm/transparent_hugepage/shmem_enabled\x00', 0xc8002, 0x0) read$auto(r1, 0x0, 0x7fff) listen$auto(0x3, 0x81) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x34000}, 0x7, 0x0, 0x2, 0xb}, 0xfff}, 0x5, 0x311) close_range$auto(0x2, 0x8000, 0x0) set_mempolicy$auto(0x4006, &(0x7f0000000040)=0xa, 0x7) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptyc4\x00', 0x0, 0x0) 16m20.905914457s ago: executing program 32 (id=1948): mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @loopback}, 0x54) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) setsockopt$auto(0x3, 0x10000000084, 0xb, 0x0, 0xc) socket(0xa, 0x1, 0x84) r0 = socket(0x2, 0x5, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x3d}}, 0x6a) mmap$auto(0x0, 0x4020009, 0xdf, 0x400000000e31, 0xffffffffffffffff, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/mm/transparent_hugepage/shmem_enabled\x00', 0xc8002, 0x0) read$auto(r1, 0x0, 0x7fff) listen$auto(0x3, 0x81) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x34000}, 0x7, 0x0, 0x2, 0xb}, 0xfff}, 0x5, 0x311) close_range$auto(0x2, 0x8000, 0x0) set_mempolicy$auto(0x4006, &(0x7f0000000040)=0xa, 0x7) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptyc4\x00', 0x0, 0x0) 11m14.827006536s ago: executing program 0 (id=2962): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/zswap/parameters/compressor\x00', 0xc0002, 0x0) write$auto_ocfs2_control_fops_stack_user(r0, &(0x7f0000003900)='\t', 0x1) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/module/nfs/parameters/delay_retrans\x00', 0x102, 0x0) sendfile$auto(r1, r1, 0x0, 0x1000000000001) (fail_nth: 6) 11m14.055658919s ago: executing program 0 (id=2966): waitid$auto(0x8, 0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000180)={{0xfffffffffffffff9, 0x80}, {0x2, 0x6}, 0x4, 0x5, 0x1, 0x3, 0x0, 0x8000, 0x80000000, 0x7, 0xb7, 0x5d9, 0x5, 0x7ff, 0x2055}) mmap$auto(0x2, 0x400008, 0xdf, 0x9b72, 0x2, 0x10000000008000) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r0 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x787b, 0x7000000) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) r1 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000200)='/dev/sg0\x00', 0x141000, 0x0) bpf$auto(0xb, &(0x7f00000000c0)=@token_create={0x7}, 0x93) ioctl$auto_SCSI_IOCTL_SEND_COMMAND2(r1, 0x1, &(0x7f00000000c0)) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/block2mtd/parameters/block2mtd\x00', 0x601, 0x0) write$auto(r2, &(0x7f0000000000)='/sys/module/block2mtd/parameters/block2mtd\x00', 0x272) pread64$auto(0xffffffffffffffff, 0x0, 0x200000000003, 0x2f4a3a23) r3 = ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r4 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x2, 0x0) writev$auto(r4, &(0x7f0000000300)={&(0x7f0000000200), 0x200}, 0x3) mmap$auto(0xfffffffffffffffe, 0xe983, 0xc, 0xebe, r0, 0x54f5cfc0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r5 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x40100, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x4610, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x100000a3d7) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sda1\x00', 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000001d00), r3) sendmsg$auto_ETHTOOL_MSG_RINGS_SET(r6, 0x0, 0x80014) syz_genetlink_get_family_id$auto_batadv(0x0, 0xffffffffffffffff) socket(0x2a, 0xa, 0x83) 11m13.142584804s ago: executing program 0 (id=2970): setresuid$auto(0x8, 0x8, 0x0) r0 = setfsuid$auto(0xee00) setreuid$auto(r0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_net_shaper(&(0x7f0000000540), r1) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) sendmsg$auto_NET_SHAPER_CMD_DELETE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3100000004dde9da93faa0ebeaee2da7aa5c48ebe8ae6a84a2e7", @ANYRES16=r2, @ANYBLOB="090027bd7000fbdbdf250300000008000800", @ANYRES32=r3, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x44000}, 0xc050) msgsnd$auto(0x2, &(0x7f0000000300)={0x4, 0x9}, 0x65, 0xfffffffd) fsconfig$auto(r1, 0x2, &(0x7f0000000180)='\x00', &(0x7f0000000580)="10ab6b39a25e5d9c4947936e05c1ebf9895356b0a5fc915241b26bebe1bf3648ecb6260c4d40bcaaf9620450e0f236d9cf2e9bfa15663032904f14a0bfebeb6f41d8f77bd0bca982dfe6b49e308e606721133b53711ed21bb9e1e32f4be7a7c60b1e11a84523b8f0f030b169292f0b65a26107a850d0b970a474f1e71b47", 0x0) r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/udp\x00', 0x80, 0x0) pread64$auto(r4, 0x0, 0x201, 0xc000) r5 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r5, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) syz_genetlink_get_family_id$auto_tipcv2(&(0x7f000000c180), 0xffffffffffffffff) openat$auto_uhid_fops_uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2800, 0x0) readv$auto(0x3, &(0x7f00000001c0)={0x0, 0x1000}, 0x100000007) waitid$auto_P_PGID(0x2, 0x0, 0x0, 0x3, &(0x7f0000000440)={{0x8, 0x6}, {0x8, 0xc5e}, 0x100000011, 0x3, 0x5, 0xf9, 0xfffffffffffffffc, 0x5, 0x6274, 0x9, 0x0, 0xb, 0x35d, 0x439c, 0x9, 0x7}) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x0, 0xfffffffffffff000, 0x0) bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0xa, 0xb8, 0x10, 0x4, 0x4, 0xffffffffffffffff, 0xa, "2af051b26b658a20d8dc6b36c83ce63f", 0x0, 0xffffffffffffffff, 0x5, 0x7, 0x7, 0x6}, 0xf) bpf$auto(0x1a, &(0x7f0000000380)=@link_create={@prog_fd, @target_ifindex=r6, 0x3, 0x81, @uprobe_multi={0x3, 0x1ff, 0x3d7e, 0x8, 0x1, 0x4}}, 0x96) 11m11.841264403s ago: executing program 0 (id=2974): mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r0 = socket(0x15, 0x5, 0x0) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, 0x0, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) recvmmsg$auto(0x3, 0x0, 0x10000, 0x6, 0x0) sendmsg$auto(r0, &(0x7f0000000180)={&(0x7f0000000040), 0x7fc, 0x0, 0x8, 0x0, 0x1, 0x4}, 0x0) 11m11.155486112s ago: executing program 0 (id=2975): mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r0 = socket(0x15, 0x5, 0x0) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, 0x0, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) recvmmsg$auto(0x3, 0x0, 0x10000, 0x6, 0x0) (fail_nth: 1) sendmsg$auto(r0, &(0x7f0000000180)={&(0x7f0000000040), 0x7fc, 0x0, 0x8, 0x0, 0x1, 0x4}, 0x0) 11m10.597229084s ago: executing program 0 (id=2979): openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x48140, 0x0) io_uring_setup$auto(0x1, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) r0 = socket(0x2, 0x1, 0x106) bind$auto(r0, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) mmap$auto(0x0, 0x30009, 0x4000000000df, 0x4000eb1, 0x401, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x10004) acct$auto(0x0) unshare$auto(0x40000080) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/conf/geneve0/disable_policy\x00', 0x40180, 0x0) semctl$auto(0xa, 0x2, 0x13, 0xde) r1 = socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) setsockopt$auto(0x3, 0x1, 0x4c, 0x0, 0x9) recvmmsg$auto(0x3, 0x0, 0x80000401, 0x4000, 0x0) r2 = socket(0x11, 0xa, 0x9) bind$auto(r2, &(0x7f0000000140)=@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x38}}, 0x9) sendmsg$auto_OVS_FLOW_CMD_SET(r1, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x90}, 0x10) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) openat$auto_generic(0xffffffffffffff9c, &(0x7f0000000000)='/proc/kpagecount\x00', 0x0, 0x0) readv$auto(0x3, &(0x7f00000001c0)={0x0, 0x1000}, 0x100000007) 10m55.47582982s ago: executing program 33 (id=2979): openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x48140, 0x0) io_uring_setup$auto(0x1, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) r0 = socket(0x2, 0x1, 0x106) bind$auto(r0, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) mmap$auto(0x0, 0x30009, 0x4000000000df, 0x4000eb1, 0x401, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x10004) acct$auto(0x0) unshare$auto(0x40000080) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/conf/geneve0/disable_policy\x00', 0x40180, 0x0) semctl$auto(0xa, 0x2, 0x13, 0xde) r1 = socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) setsockopt$auto(0x3, 0x1, 0x4c, 0x0, 0x9) recvmmsg$auto(0x3, 0x0, 0x80000401, 0x4000, 0x0) r2 = socket(0x11, 0xa, 0x9) bind$auto(r2, &(0x7f0000000140)=@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x38}}, 0x9) sendmsg$auto_OVS_FLOW_CMD_SET(r1, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x90}, 0x10) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) openat$auto_generic(0xffffffffffffff9c, &(0x7f0000000000)='/proc/kpagecount\x00', 0x0, 0x0) readv$auto(0x3, &(0x7f00000001c0)={0x0, 0x1000}, 0x100000007) 8m26.719991206s ago: executing program 3 (id=3673): arch_prctl$auto_ARCH_GET_XCOMP_SUPP(0x1021, 0x5) (async) arch_prctl$auto_ARCH_GET_XCOMP_SUPP(0x1021, 0xffffffff00000001) (async) arch_prctl$auto_ARCH_GET_XCOMP_SUPP(0x1021, 0x0) (async) arch_prctl$auto_ARCH_GET_XCOMP_SUPP(0x1021, 0x3) (async) arch_prctl$auto_ARCH_GET_XCOMP_SUPP(0x1021, 0x0) arch_prctl$auto_ARCH_GET_XCOMP_SUPP(0x1021, 0x8) (async, rerun: 64) arch_prctl$auto_ARCH_GET_XCOMP_SUPP(0x1021, 0xfffffffffffffffa) (async, rerun: 64) arch_prctl$auto_ARCH_GET_XCOMP_SUPP(0x1021, 0x7) arch_prctl$auto_ARCH_GET_XCOMP_SUPP(0x1021, 0xfffffffffffffff7) (async) arch_prctl$auto_ARCH_GET_XCOMP_SUPP(0x1021, 0x0) arch_prctl$auto_ARCH_GET_XCOMP_SUPP(0x1021, 0xfffffffffffffff8) (async, rerun: 64) arch_prctl$auto_ARCH_GET_XCOMP_SUPP(0x1021, 0x7) (async, rerun: 64) arch_prctl$auto_ARCH_GET_XCOMP_SUPP(0x1021, 0x6) (async) arch_prctl$auto_ARCH_GET_XCOMP_SUPP(0x1021, 0x7) arch_prctl$auto_ARCH_GET_XCOMP_SUPP(0x1021, 0x9) arch_prctl$auto_ARCH_GET_XCOMP_SUPP(0x1021, 0xffffffffffff8215) arch_prctl$auto_ARCH_GET_XCOMP_SUPP(0x1021, 0x5) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'vlan0\x00', 0x0}) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_MODULE_FW_FLASH_ACT(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0x100, r1, 0x300, 0x70bd29, 0x25dfdbfe, {}, [@ETHTOOL_A_MODULE_FW_FLASH_PASSWORD={0x8, 0x3, 0x3}, @ETHTOOL_A_MODULE_FW_FLASH_HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_MODULE_FW_FLASH_FILE_NAME={0x6, 0x2, '\xc1\x00'}, @ETHTOOL_A_MODULE_FW_FLASH_PASSWORD={0x8, 0x3, 0x1}, @ETHTOOL_A_MODULE_FW_FLASH_FILE_NAME={0x6, 0x2, '-\x00'}, @ETHTOOL_A_MODULE_FW_FLASH_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xfffffffb}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_MODULE_FW_FLASH_FILE_NAME={0xa, 0x2, '-/+.!\x00'}, @ETHTOOL_A_MODULE_FW_FLASH_FILE_NAME={0xb, 0x2, ',)&&#\'\x00'}, @ETHTOOL_A_MODULE_FW_FLASH_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}]}]}, 0x100}, 0x1, 0x0, 0x0, 0x4000}, 0x0) arch_prctl$auto_ARCH_GET_XCOMP_SUPP(0x1021, 0x3) (async) arch_prctl$auto_ARCH_GET_XCOMP_SUPP(0x1021, 0x7ff) r5 = ioctl$auto_TIOCGPTPEER2(0xffffffffffffffff, 0x5441, 0x0) ioctl$auto_BLKIOMIN(r5, 0x1278, 0x0) (async) arch_prctl$auto_ARCH_GET_XCOMP_SUPP(0x1021, 0x80) (async) arch_prctl$auto_ARCH_GET_XCOMP_SUPP(0x1021, 0xa) (async) arch_prctl$auto_ARCH_GET_XCOMP_SUPP(0x1021, 0x1) 8m26.591928924s ago: executing program 3 (id=3676): mmap$auto(0x0, 0x6, 0x2, 0x40eb2, 0xffffffffffffffff, 0x308000000000) r0 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/usbmon0\x00', 0x640, 0x0) read$auto_mon_fops_binary_mon_bin(r0, 0x0, 0x0) ioctl$auto_MON_IOCG_STATS(r0, 0x80089203, 0x0) r1 = socket(0xa, 0x1, 0x84) userfaultfd$auto(0x101) mmap$auto(0x0, 0x40005, 0xdd, 0x1ff, r0, 0x28008) getsockopt$auto(r1, 0x84, 0x75, 0x0, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/016/001\x00', 0x0, 0x0) 8m26.288498787s ago: executing program 3 (id=3680): setresuid$auto(0x8, 0x8, 0x0) r0 = setfsuid$auto(0xee00) setreuid$auto(r0, 0x0) syz_genetlink_get_family_id$auto_net_shaper(0x0, 0xffffffffffffffff) sendmsg$auto_NET_SHAPER_CMD_DELETE(0xffffffffffffffff, 0x0, 0xc050) fsconfig$auto(0xffffffffffffffff, 0x2, &(0x7f0000000180)='\x00', 0x0, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/udp\x00', 0x80, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) openat$auto_uhid_fops_uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2800, 0x0) readv$auto(0x3, &(0x7f00000001c0)={0x0, 0x1000}, 0x100000007) waitid$auto_P_PGID(0x2, 0x0, 0x0, 0x3, &(0x7f0000000440)={{0x8, 0x6}, {0x8, 0xc5e}, 0x100000011, 0x3, 0x5, 0xf9, 0xfffffffffffffffc, 0x5, 0x6274, 0x9, 0x0, 0xb, 0x35d, 0x439c, 0x9, 0x7}) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x0, 0xfffffffffffff000, 0x0) bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0xa, 0xb8, 0x10, 0x4, 0x4, 0xffffffffffffffff, 0xa, "2af051b26b658a20d8dc6b36c83ce63f", 0x0, 0xffffffffffffffff, 0x5, 0x7, 0x7, 0x6}, 0xf) bpf$auto(0x1a, &(0x7f0000000380)=@link_create={@prog_fd, @target_ifindex=r2, 0x3, 0x81, @uprobe_multi={0x3, 0x1ff, 0x3d7e, 0x8, 0x1, 0x4}}, 0x96) 8m25.223217777s ago: executing program 3 (id=3682): r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x20342, 0x0) ioctl$auto_SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000140)) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sda\x00', 0x8001, 0x0) ioctl$auto(r1, 0x40081271, 0xffffffffffffffff) read$auto_proc_reg_file_ops_compat_inode(0xffffffffffffffff, &(0x7f0000000280)=""/65, 0x41) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/card0/pcm0c/sub0/xrun_injection\x00', 0x129541, 0x0) write$auto(r2, 0x0, 0x9) close_range$auto(0x2, 0x8, 0x0) ioctl$auto_SNDCTL_DSP_STEREO(0xffffffffffffffff, 0xc0045003, &(0x7f0000000140)="e437d98df18054edf223b75d34f93f894eca627327f719e0d663fd6ae1c4d3f87961d9eb485b435eea8a5f914b82cf00c2657e604dac995a5307f2bdf67b5f4ecffb76c2f3502de3769462fcf66aefff29eae6750aabd83147f7b4d5c3141b836687f713cc1cb18a669495679e95b960f045ce4ee2e877d32037905b400a1edeb5787ebc2dfe5e4c1894ee446ee1") capget$auto(0x0, 0x0) 8m24.927033814s ago: executing program 3 (id=3685): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/sound/ctl-led/speaker/card2/list\x00', 0x40000, 0x0) r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/controlC0\x00', 0x115981, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000040)=0x5) r1 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC2\x00', 0x80, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, &(0x7f0000000580)={{@raw=0x7fffffff, 0xf0ee, 0x20007, 0x200, "790eaa00ffff8eac2cdafc1f64010043eeb0b053030001ffff000e00", @raw=0x1}, 0x4, 0x966, 0x3, @inferred, @reserved="e5ff93bdee524936e2c9bf22f2d93974d734be5a04de1fafaa08fa908db4e16d7ae38bc75723e3fcac344dd539f4fb63839fe6b84bdaf3358e15d043de4f1408c571863b5c75090718685bae7fde7154cde03d200b23d2bc2faa30f98a411081ed00", "6cc1294d63a4f1b4285854c5368de438f8cc142ef6df12bf3373a1183bedbd31b642b4051b078fa1c1c61c329794e5311121c760cb9611c78e6947a99807bcc1"}) close_range$auto(0x2, 0x8, 0x0) openat$auto_adf_ctl_ops_adf_ctl_drv(0xffffffffffffff9c, &(0x7f0000000000), 0x20140, 0x0) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f00000031c0)='/dev/ttyua\x00', 0x109000, 0x0) select$auto(0x8, 0x0, 0x0, &(0x7f0000000200)={[0x80000000008, 0xffffffffffffff4b, 0x100000001, 0x15, 0x8001, 0x1, 0x9, 0x5, 0x8, 0x40000000000000, 0x3, 0x8000000008, 0xfffffffffffffffa, 0xab, 0x2, 0x9]}, 0x0) close_range$auto(0x2, 0x8, 0x0) 8m24.634184853s ago: executing program 3 (id=3687): mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x1000000000) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socket(0x9, 0x3, 0x200) ioctl$auto(0xffffffffffffffff, 0x40104d01, 0xffffffffffffffff) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmsg$auto_ETHTOOL_MSG_STRSET_GET(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="00030000", @ANYRES16=0x0, @ANYBLOB="010029bd7000fcdbdf25010000000c000280080049009f98000004000300b10002806d077193745a742234d9f05d4b65b3f4139bd7d07d629173bf715670fd76fbce93a641b6d2ec2f06828f68af3707b4ffd30fee9e174d609d1dd18a23533e8a7342b450ea5aa873da98c8e7468dab3fc5923b0a1e83b964c5acb7709aea0c641614f55abae5a63a990dcc8d4237a76fc90a40922ebb0b0f354e760a59a5094bea557054cfba1a90033979ef9afd0e05066b5cb861e8f68f77fe3d7d8a3ac571da7f71d30d39f2e23312fa85d7950000000400030028000180080003000000008008000100", @ANYRES64, @ANYBLOB="1400020076657468305f766972745f77696669001800018014000200776c616e3100000000000000000000000400030004000300d901028008002d00", @ANYRES32, @ANYBLOB="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"/450], 0x300}, 0x1, 0x0, 0x0, 0x408c014}, 0x4000) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000002dc0)='/dev/adsp1\x00', 0x2401, 0x0) r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/adsp1\x00', 0x20342, 0x0) write$auto(r1, 0x0, 0x6051) readv$auto(0x3, 0x0, 0x1) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0x8, 0x0) memfd_create$auto(0x0, 0xc) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) mmap$auto(0x0, 0x810006, 0xffb, 0x8000000008011, 0x3, 0x0) msync$auto(0xb, 0xfffffffffffffff8, 0x5) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) ioctl$auto(0x3, 0x400454cc, 0x38) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) capset$auto(0x0, 0x0) write$auto(0x3, 0x0, 0xfdf3) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) 8m9.385315996s ago: executing program 34 (id=3687): mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x1000000000) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socket(0x9, 0x3, 0x200) ioctl$auto(0xffffffffffffffff, 0x40104d01, 0xffffffffffffffff) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmsg$auto_ETHTOOL_MSG_STRSET_GET(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="00030000", @ANYRES16=0x0, @ANYBLOB="010029bd7000fcdbdf25010000000c000280080049009f98000004000300b10002806d077193745a742234d9f05d4b65b3f4139bd7d07d629173bf715670fd76fbce93a641b6d2ec2f06828f68af3707b4ffd30fee9e174d609d1dd18a23533e8a7342b450ea5aa873da98c8e7468dab3fc5923b0a1e83b964c5acb7709aea0c641614f55abae5a63a990dcc8d4237a76fc90a40922ebb0b0f354e760a59a5094bea557054cfba1a90033979ef9afd0e05066b5cb861e8f68f77fe3d7d8a3ac571da7f71d30d39f2e23312fa85d7950000000400030028000180080003000000008008000100", @ANYRES64, @ANYBLOB="1400020076657468305f766972745f77696669001800018014000200776c616e3100000000000000000000000400030004000300d901028008002d00", @ANYRES32, @ANYBLOB="81aca82502f0cf82ec6558e3f2ef10265798182df0e0acba4dc1671cb8874ae650a88fe91c706fac8f9f4e8a9a27d8d9e724bccc973bacfd38a988b1d0a57eecac8800140006000000ffffac1414aa8f189204c251580ecdd8afd471d42189ea1d920925568b8bca9af2f69aaa9f51a0c3ed79b326b60dd436b2c3ed85ec12b05aa17f471f2cd27b2d8294522fcef399ddddb774b162b8ac730b61c71d06e9def181ae3b04a89928a11d9ec7d3f5f9594a5aca3167e23499a265ea2806d6e6d324cfe9fb003280c641d2aff852fce8d89e358144f47df1fe57524fdfa9b8a9faefe82eaa52048af6d8b5ccdd6c4365aab1556b869201533f814e29c5b9287e31f4d48b2abaa6eef3d5955bd43b7e853561732014c1e49bf5a8e5964b84f340ed0f2012fb0285bf87dc49592ece198fba10ecd31aca14ad6fb03db0a4b46c8bc4d661bb0d8926deff576b54fd7f8fb5da49bbc440ac5bd5a53d4487e39318ec5b69393680d8fa84089e6d3b6b81e6847f993133b76bdfe3fa95e97c31f79f03f2be31759c264ae79c25566948e333daebbd7a1dbf700e5c02f0ff1b4367682c47201684196c36db1081fae5ef7e31df1f15a5ed701e00"/450], 0x300}, 0x1, 0x0, 0x0, 0x408c014}, 0x4000) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000002dc0)='/dev/adsp1\x00', 0x2401, 0x0) r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/adsp1\x00', 0x20342, 0x0) write$auto(r1, 0x0, 0x6051) readv$auto(0x3, 0x0, 0x1) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0x8, 0x0) memfd_create$auto(0x0, 0xc) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) mmap$auto(0x0, 0x810006, 0xffb, 0x8000000008011, 0x3, 0x0) msync$auto(0xb, 0xfffffffffffffff8, 0x5) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) ioctl$auto(0x3, 0x400454cc, 0x38) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) capset$auto(0x0, 0x0) write$auto(0x3, 0x0, 0xfdf3) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) 6m3.636802492s ago: executing program 1 (id=4330): mknod$auto(&(0x7f0000000100)='./file0\x00', 0x1001, 0x4) open(0x0, 0x40a783, 0x10) r0 = open$dir(&(0x7f00000001c0)='./file0\x00', 0x201, 0x14) fstat$auto(r0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x4242, 0xe1d2b27bdc14aabc) 6m3.432059625s ago: executing program 1 (id=4332): mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r1, &(0x7f0000004240)={0x0, 0x0, &(0x7f0000004200)={&(0x7f0000000140)={0x28, r0, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@HWSIM_ATTR_PMSR_SUPPORT={0x14, 0x1a, 0x0, 0x1, [@NL80211_PMSR_ATTR_TYPE_CAPA={0x10, 0x4, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_CAPA_ATTR_PREAMBLES={0x8, 0x5, 0x2}]}]}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x40c8}, 0x4048000) write$auto(0xffffffffffffffff, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r2 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000000)='/dev/binderfs/binder1\x00', 0x1, 0x0) ioctl$auto(r2, 0x4018620d, 0x9) openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000000)='/dev/binderfs/binder1\x00', 0x1, 0x0) socket(0x10, 0x2, 0x6) socketpair$auto(0x5, 0x5, 0x6, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x55) socket(0x2, 0x3, 0xa) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x8) connect$auto(0x3, &(0x7f00000018c0)=@l2tp={0x2, 0x0, @multicast1}, 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0xe000) write$auto(0x3, 0x0, 0x800) setrlimit$auto(0xb, 0x0) getpid() openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/platform/dummy_hcd.2/usb3/3-0:1.0/authorized\x00', 0x220080, 0x0) close_range$auto(0x0, 0xffffffffffffffff, 0x2) fanotify_init$auto(0x400, 0x2000000000002) r3 = open(&(0x7f0000000000)='./file0\x00', 0x165b42, 0xe1d2b27bdc14aa98) fanotify_mark$auto(0x400000000000, 0x105, 0xf2b, r3, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x40342, 0x22) 6m2.710905216s ago: executing program 1 (id=4341): r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) bind$auto(0x3, &(0x7f0000000040)=@ethernet={0x1, @multicast}, 0x6a) ioctl$auto(0x3, 0x89e0, 0x38) r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)={0x34, r1, 0x1, 0x70bd31, 0x25dfdbfc, {}, [@ETHTOOL_A_FEATURES_WANTED={0x8, 0x3, 0x0, 0x1, [@nested={0x4, 0x1}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}]}, 0x34}}, 0x24048004) r2 = openat$auto_proc_mountstats_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f00000000c0), 0x123400, 0x0) close_range$auto(r2, r0, 0x4000000000002) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16, @ANYBLOB="1b0026bd7000fddbdf250300000004000800100003800c000b8008001c"], 0x4c}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'veth1_macvtap\x00', 0x0}) r4 = prctl$auto_PR_SCHED_CORE_GET(0x1, 0x0, 0xffffffffffffffff, 0x7, 0x2172) readahead$auto(r4, 0xe, 0x1) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_seg6(&(0x7f0000001980), 0xffffffffffffffff) sendmsg$auto_SEG6_CMD_GET_TUNSRC(r5, &(0x7f0000001b80)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f00000019c0)={0x14, r6, 0x103, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x8000) r7 = openat$auto_vcs_fops_vc_screen(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcsa1\x00', 0x240000, 0x0) r8 = socket(0x1d, 0x2, 0x2) sendmsg$auto_HSR_C_GET_NODE_STATUS(r8, &(0x7f0000000240)={&(0x7f0000000000)={0x1d, 0x0, 0x1000000, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, 0x0, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@HSR_A_NODE_ADDR_B={0xa}, @HSR_A_IF1_SEQ={0x6, 0x6, 0x3}, @HSR_A_IFINDEX={0x8}, @HSR_A_IF2_AGE={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) bpf$auto_BPF_MAP_DELETE_ELEM(0x3, &(0x7f00000002c0)=@bpf_attr_5={@target_ifindex=r3, r5, 0x4, 0x401, r7, @relative_fd=r8, 0x10000}, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1000"], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) r9 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r9, &(0x7f0000000200)={{0x0, 0xfffffffe, &(0x7f0000000100)={&(0x7f0000000080), 0xfbe}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x4008) 6m2.527147371s ago: executing program 1 (id=4342): setsockopt$auto(0xffffffffffffffff, 0x6, 0x21, 0x0, 0x10) close_range$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r1 = socket(0x11, 0x3, 0x9) syslog$auto(0x9, &(0x7f0000000080)='..\x00k\xac\x8c\x1d\x0e\x98\x80\xd2\xaf\xa1\xf2\x1e\xe1R1\xa2\x8e\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\xa6\xf4#+\xfa\xd7\x01\xb9j<\v\xf47\n\xa7\xd2\x8b\x11e1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\xa1q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa2', 0x7) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)) getdents64$auto(r2, 0x0, 0x18) r3 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$auto_VHOST_SET_OWNER(r3, 0xaf01, 0x5) ioctl$auto(r0, 0x4008af03, 0x0) r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000140), r1) sendmsg$auto_NL80211_CMD_GET_SURVEY(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800008}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r4, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@NL80211_ATTR_TDLS_INITIATOR={0x4}, @NL80211_ATTR_WIPHY_TX_POWER_LEVEL={0x8, 0x62, 0xfacc}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x40011}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000003140), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_PHY_GET(r5, &(0x7f0000003200)={0x0, 0x0, &(0x7f00000031c0)={&(0x7f0000000000)={0x14, r6, 0x301, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x1000000, 0x0, 0x2404c012}, 0x80) ioctl$auto_VHOST_NET_SET_BACKEND(r3, 0x4008af30, 0x0) 6m2.320841445s ago: executing program 1 (id=4343): rseq$auto(0x0, 0x584, 0x1, 0x2) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000002180)='/dev/snd/pcmC0D0p\x00', 0x0, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x60742, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000002940)='/dev/fb0\x00', 0x841, 0x0) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, 0x0, 0x40000, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/platform/dummy_udc.2/udc/dummy_udc.2/a_alt_hnp_support\x00', 0x2000, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000001c00)=""/4111, 0x100f) bind$auto(0x3, 0x0, 0x6a) pread64$auto(0xffffffffffffffff, 0x0, 0x100000007, 0xffffffffffffff16) fsconfig$auto_FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, &(0x7f0000000240), 0x61fbd03e) select$auto(0x9, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0x0, 0x1, 0x948b, 0x9, 0x15f4da07, 0x6, 0x10, 0x64, 0x80000020, 0x1000, 0xb, 0x9, 0x2, 0x8]}, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x8000000000001ff, 0x20000000007, 0x5, 0x1000000000000bc3, 0x800, 0x3, 0xff, 0x10001, 0x400000000003, 0x3, 0xfffffffffffffffc, 0xfffffffffffffffe, 0x80000000, 0x9, 0xffffdfffffffff81, 0x4]}, 0x0) mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000) close_range$auto(0x2, 0x8, 0x0) ioctl$auto(0xffffffffffffffff, 0x8941, 0x8) msync$auto(0x200000, 0x2000000005, 0x6) socket(0x1e, 0x1, 0x0) 6m2.13229154s ago: executing program 1 (id=4344): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) listen$auto(0x3, 0x81) mmap$auto(0x0, 0x2020009, 0x9, 0xeb1, 0xffffffffffffffff, 0x8000) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) madvise$auto(0x0, 0x2003f2, 0x15) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff) r3 = openat$auto_proc_uid_map_operations_base(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/uid_map\x00', 0x200000, 0x0) write$auto_proc_uid_map_operations_base(r3, 0x0, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB="a8000000", @ANYRES16=r2, @ANYBLOB="01002cbd7000fddbdf2502000000810004006e66736600d8efe42d132b72f30c54315aa74a5b8103cf2ddf901f8fc81365e252374483326ace7da356b7a16f5ce613bc0ce3aeb87ed3d22b4a27c3ecc90c70c861befe60a7a9414b446427a001f61379e8caf4519e032a5dda1e1174e2d575772b93fc046cd3a674866b80d91473ece248c03d28f9398a63a785998700000008000300850000000800010002000000"], 0xa8}}, 0x4000) memfd_create$auto(&(0x7f0000000040)='A^^\x02\x00\xef\x97\x8aY\x00\x00\xd2\x8c\xb05\x03\\\xb2\xbf247{\xde\t8\f\x00\x00\v\x00\x82\xcc\"K\xe1IIT\x00'/54, 0x5) fallocate$auto(0x3, 0x8000, 0xe, 0x800000000008ecd) mmap$auto(0x0, 0xe983, 0x3, 0x6b1, 0xffffffffffffffff, 0x8000) read$auto(0x3, 0x0, 0xfdef) madvise$auto(0x0, 0x200007, 0x19) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/thread-self/pagemap\x00', 0x404001, 0x0) mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0xb74, 0x66a) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x2000040080000000, 0xe) mmap$auto(0x3fe1, 0x3, 0x10, 0xffff, 0xffffffffffffffff, 0x80000000007ffe) madvise$auto(0x0, 0x8, 0xe) socket(0x26, 0x80805, 0x0) 5m46.846861676s ago: executing program 35 (id=4344): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) listen$auto(0x3, 0x81) mmap$auto(0x0, 0x2020009, 0x9, 0xeb1, 0xffffffffffffffff, 0x8000) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) madvise$auto(0x0, 0x2003f2, 0x15) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff) r3 = openat$auto_proc_uid_map_operations_base(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/uid_map\x00', 0x200000, 0x0) write$auto_proc_uid_map_operations_base(r3, 0x0, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB="a8000000", @ANYRES16=r2, @ANYBLOB="01002cbd7000fddbdf2502000000810004006e66736600d8efe42d132b72f30c54315aa74a5b8103cf2ddf901f8fc81365e252374483326ace7da356b7a16f5ce613bc0ce3aeb87ed3d22b4a27c3ecc90c70c861befe60a7a9414b446427a001f61379e8caf4519e032a5dda1e1174e2d575772b93fc046cd3a674866b80d91473ece248c03d28f9398a63a785998700000008000300850000000800010002000000"], 0xa8}}, 0x4000) memfd_create$auto(&(0x7f0000000040)='A^^\x02\x00\xef\x97\x8aY\x00\x00\xd2\x8c\xb05\x03\\\xb2\xbf247{\xde\t8\f\x00\x00\v\x00\x82\xcc\"K\xe1IIT\x00'/54, 0x5) fallocate$auto(0x3, 0x8000, 0xe, 0x800000000008ecd) mmap$auto(0x0, 0xe983, 0x3, 0x6b1, 0xffffffffffffffff, 0x8000) read$auto(0x3, 0x0, 0xfdef) madvise$auto(0x0, 0x200007, 0x19) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/thread-self/pagemap\x00', 0x404001, 0x0) mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0xb74, 0x66a) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x2000040080000000, 0xe) mmap$auto(0x3fe1, 0x3, 0x10, 0xffff, 0xffffffffffffffff, 0x80000000007ffe) madvise$auto(0x0, 0x8, 0xe) socket(0x26, 0x80805, 0x0) 2m32.935196386s ago: executing program 7 (id=5225): rseq$auto(0x0, 0x584, 0x1, 0x2) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000002180)='/dev/snd/pcmC0D0p\x00', 0x0, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x60742, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000002940)='/dev/fb0\x00', 0x841, 0x0) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f0000001c00)=""/4111, 0x100f) bind$auto(0x3, 0x0, 0x6a) pread64$auto(0xffffffffffffffff, 0x0, 0x100000007, 0xffffffffffffff16) mmap$auto(0x0, 0xe983, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000) r1 = socket(0x1d, 0x2, 0x7) getsockopt$auto(r1, 0x6b, 0xdc5a, 0xfffffffffffffffe, 0x0) fsconfig$auto_FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x61fbd03e) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000826bd7000fedbdf250300000008000400b70a0000060007000080000008000200", @ANYRES32, @ANYBLOB="0a0005000180c200000e00000a07000000000000000e00000a000100000000000000000008000200", @ANYRES32], 0x68}, 0x1, 0x0, 0x0, 0x40080}, 0x40) r2 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/bus/usb/021/001\x00', 0xa901, 0x0) ioctl$auto_USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000380)={0x2, 0x80, 0xfffffff9, 0x5, &(0x7f0000000440)='ZG', 0xc694, 0xffff, 0x80006, @stream_id=0x5833, 0x9, 0xc, 0x0}) ioctl$auto_USBDEVFS_REAPURB32(r2, 0x4004550c, &(0x7f0000000300)=0x10003fe) close_range$auto(0x2, 0x8, 0x0) 2m31.608687892s ago: executing program 7 (id=5232): r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x407, 0xffffffff, 0xd29e, 0x47, 0x1, 0x1007182, 0x2, 0x7, 0x6, 0x7, 0x89, 0x8, 0x4, 0x200000000001, 0x3, 0xfffffffffffffffa, 0x500000000000000, 0x0, 0x30, 0x0, 0x862, 0xe, 0x2, 0x9, 0x4, 0x83, 0xfffffffffffffffc, 0x0, 0x0, 0x80000000, 0x0, [0x0, 0x0, 0x0, 0x71, 0x0, 0x40000000000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3, 0x2000000000000, 0x0, 0x0, 0x0, 0xf, 0x20000004, 0x800, 0x0, 0x0, 0x4000000010001, 0x1000000000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x40000000000000, 0x0, 0x0, 0x2, 0xcc, 0x0, 0x3, 0xfffffffffffffffc, 0x1]}, 0x7, 0x9) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) bind$auto(r0, &(0x7f00000000c0)=@phonet={0x23, 0x8, 0x6, 0xf}, 0x8) sendmsg$auto_ETHTOOL_MSG_PHY_GET(0xffffffffffffffff, &(0x7f0000003200)={0x0, 0x0, &(0x7f00000031c0)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010326bd7000ffdbdf252d"], 0x20}, 0x1, 0x0, 0x0, 0x2404c012}, 0x80) r2 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r2, &(0x7f0000000200)={{0x0, 0x3f, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) syz_genetlink_get_family_id$auto_batadv(0x0, 0xffffffffffffffff) r3 = socket(0x11, 0x3, 0x0) r4 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, 0x0, 0xe0080, 0x0) ioctl$auto_UI_SET_MSCBIT(r4, 0x40045568, &(0x7f0000000040)=0x6) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0xa, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/platform/vhci_hcd.0/usbip_debug\x00', 0x8002, 0x0) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40602, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x15, 0x5, 0x0) preadv$auto(r3, &(0x7f0000000080)={0x0, 0xf15a}, 0x6, 0x8, 0x45) read$auto(0x3, 0x0, 0x8080) 2m30.143313685s ago: executing program 7 (id=5239): openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), 0xffffffffffffffff) openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000000)='/dev/binderfs/binder1\x00', 0x1, 0x0) openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000000)='/dev/binderfs/binder1\x00', 0x1, 0x0) socket(0x10, 0x2, 0x6) socketpair$auto(0x5, 0x5, 0x6, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x55) socket(0x2, 0x3, 0xa) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x8) connect$auto(0x3, &(0x7f00000018c0)=@l2tp={0x2, 0x0, @multicast1}, 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0xe000) getpid() fanotify_mark$auto(0x400000000000, 0x105, 0xf2b, 0xffffffffffffffff, 0x0) 2m29.893946811s ago: executing program 7 (id=5241): setresuid$auto(0x8, 0x8, 0x0) r0 = setfsuid$auto(0xee00) setreuid$auto(r0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_net_shaper(&(0x7f0000000540), r1) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) sendmsg$auto_NET_SHAPER_CMD_DELETE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3100000004dde9da93faa0ebeaee2da7aa5c48ebe8ae6a84a2e7", @ANYRES16=r2, @ANYBLOB="090027bd7000fbdbdf250300000008000800", @ANYRES32=r3, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x44000}, 0xc050) msgsnd$auto(0x2, &(0x7f0000000300)={0x4, 0x9}, 0x65, 0xfffffffd) fsconfig$auto(r1, 0x2, &(0x7f0000000180)='\x00', &(0x7f0000000580)="10ab6b39a25e5d9c4947936e05c1ebf9895356b0a5fc915241b26bebe1bf3648ecb6260c4d40bcaaf9620450e0f236d9cf2e9bfa15663032904f14a0bfebeb", 0x0) r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/udp\x00', 0x80, 0x0) pread64$auto(r4, 0x0, 0x201, 0xc000) r5 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r5, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) syz_genetlink_get_family_id$auto_tipcv2(&(0x7f000000c180), 0xffffffffffffffff) syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000080), r1) mmap$auto(0xc, 0x20009, 0x5, 0x14, 0xffffffffffffffff, 0x0) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) fsconfig$auto(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) openat$auto_uhid_fops_uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2800, 0x0) readv$auto(0x3, &(0x7f00000001c0)={0x0, 0x1000}, 0x100000007) waitid$auto_P_PGID(0x2, 0x0, 0x0, 0x3, &(0x7f0000000440)={{0x8, 0x6}, {0x8, 0xc5e}, 0x100000011, 0x3, 0x5, 0xf9, 0xfffffffffffffffc, 0x5, 0x6274, 0x9, 0x0, 0xb, 0x35d, 0x439c, 0x9, 0x7}) unshare$auto(0x40000080) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x0, 0xfffffffffffff000, 0x0) bpf$auto(0x1a, &(0x7f0000000380)=@link_create={@prog_fd, @target_ifindex, 0x3, 0x81, @uprobe_multi={0x3, 0x1ff, 0x3d7e, 0x8, 0x1, 0x4}}, 0x96) 2m27.891898727s ago: executing program 7 (id=5254): r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) syz_genetlink_get_family_id$auto_batadv(0x0, 0xffffffffffffffff) socket(0x11, 0x3, 0x0) r1 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, 0x0, 0xe0080, 0x0) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='}[,&*}\x00', &(0x7f0000000080)={0x220000, 0x0, 0x10}, 0x18) ioctl$auto_UI_SET_MSCBIT(r1, 0x40045568, &(0x7f0000000040)=0x6) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0xa, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r2 = socket(0x11, 0x3, 0x9) sendmmsg$auto(r2, &(0x7f0000000640)={{&(0x7f0000000000), 0x5ae, &(0x7f0000000100)={&(0x7f0000000780)="4c030000000000002106000000000000e05f", 0x49}, 0x5, 0x0, 0x5, 0x1}, 0x1}, 0x2, 0x100) close_range$auto(r2, r2, 0x5) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x5, 0x84) io_uring_setup$auto(0x8004c, 0x0) socket(0x2, 0x80002, 0x73) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00') ioctl$auto(r3, 0xa004b70a, r3) io_uring_setup$auto(0x1, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/platform/vhci_hcd.0/usbip_debug\x00', 0x8002, 0x0) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40602, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x13, 0xa, 0x0) preadv$auto(0x40000000000003, &(0x7f0000000080)={0x0, 0xf15a}, 0x6, 0x8, 0x5) ioctl$auto_BLKALIGNOFF(r0, 0x127a, 0x0) 2m26.515303412s ago: executing program 7 (id=5261): ioctl$auto(0x3, 0xae41, 0xffffffffffffffff) setresuid$auto(0xffffffffffffffff, 0x0, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x123002, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, 0x0, 0x10) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x100) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4004c18}, 0x48880) sendmsg$auto_NETDEV_CMD_QUEUE_GET(0xffffffffffffffff, &(0x7f0000003040)={0x0, 0x0, &(0x7f0000003000)={&(0x7f0000000040)={0x14, 0x0, 0x1, 0x70bd2c, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x20008810) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB='h'], 0x1ac}, 0x1, 0x0, 0x0, 0x40814}, 0x2004c0c4) socket(0x15, 0x5, 0x0) mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) ioctl$auto(0x3, 0x89e0, 0x38) close_range$auto(0x2, 0x8, 0x0) socket(0x15, 0x5, 0x0) openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, &(0x7f0000000140)='/dev/input/mice\x00', 0x22002, 0x0) r0 = openat$auto_userio_fops_userio(0xffffffffffffff9c, &(0x7f0000000080), 0x2400, 0x0) open_by_handle_at$auto(r0, &(0x7f0000001300)={0x3, 0xff, "412df4"}, 0xff) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) write$auto(0x3, 0x0, 0x70) madvise$auto(0x0, 0xffffffffffff0005, 0x19) 2m11.264920354s ago: executing program 36 (id=5261): ioctl$auto(0x3, 0xae41, 0xffffffffffffffff) setresuid$auto(0xffffffffffffffff, 0x0, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x123002, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, 0x0, 0x10) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x100) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4004c18}, 0x48880) sendmsg$auto_NETDEV_CMD_QUEUE_GET(0xffffffffffffffff, &(0x7f0000003040)={0x0, 0x0, &(0x7f0000003000)={&(0x7f0000000040)={0x14, 0x0, 0x1, 0x70bd2c, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x20008810) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB='h'], 0x1ac}, 0x1, 0x0, 0x0, 0x40814}, 0x2004c0c4) socket(0x15, 0x5, 0x0) mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) ioctl$auto(0x3, 0x89e0, 0x38) close_range$auto(0x2, 0x8, 0x0) socket(0x15, 0x5, 0x0) openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, &(0x7f0000000140)='/dev/input/mice\x00', 0x22002, 0x0) r0 = openat$auto_userio_fops_userio(0xffffffffffffff9c, &(0x7f0000000080), 0x2400, 0x0) open_by_handle_at$auto(r0, &(0x7f0000001300)={0x3, 0xff, "412df4"}, 0xff) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) write$auto(0x3, 0x0, 0x70) madvise$auto(0x0, 0xffffffffffff0005, 0x19) 51.815493361s ago: executing program 8 (id=5652): connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) 51.528496045s ago: executing program 8 (id=5653): r0 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) write$auto_console_fops_tty_io(r0, &(0x7f0000000000)="c80d1b5d399b5b", 0xfdef) geteuid() getsockopt$auto_SO_RCVPRIORITY(0xffffffffffffffff, 0xa0, 0x52, 0x0, &(0x7f00000000c0)=0x4) ioctl$auto_XFS_IOC_ALLOCSP(0xffffffffffffffff, 0x4030580a, 0x0) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) write$auto(r1, &(0x7f0000000100)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/conf/vxcan1/bc_forwarding\x00', 0x202, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/veth1_macvtap/ioam6_id_wide\x00', 0x169002, 0x0) read$auto(r2, 0x0, 0xffffffffffffffff) syslog$auto(0x3, &(0x7f0000000080)='..\x00k\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\x00\x80\x00\x00\x00\x00\x00\x00j<\v\xf47\n\xa7\xd2\x8b\x11e1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\xa1q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa2', 0x5) r3 = getpid() r4 = syz_open_procfs$namespace(r3, &(0x7f0000000080)) fchdir$auto(r4) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/power/resume\x00', 0x189002, 0x0) sendfile$auto(r5, r5, 0x0, 0x3) madvise$auto(0x0, 0xffffffffffff0001, 0x15) write$auto(r2, 0x0, 0x15) msync$auto(0x4a36, 0x7, 0x3) syz_clone3(&(0x7f0000000780)={0x40000000, 0x0, 0x0, 0x0, {0x2c}, 0x0, 0x0, 0x0, 0x0}, 0x58) 48.89382522s ago: executing program 8 (id=5661): mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r0, &(0x7f0000004240)={0x0, 0x0, &(0x7f0000004200)={&(0x7f0000000140)={0x28, 0x0, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@HWSIM_ATTR_PMSR_SUPPORT={0x14, 0x1a, 0x0, 0x1, [@NL80211_PMSR_ATTR_TYPE_CAPA={0x10, 0x4, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_CAPA_ATTR_PREAMBLES={0x8, 0x5, 0x2}]}]}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x40c8}, 0x4048000) write$auto(0xffffffffffffffff, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r1 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000000)='/dev/binderfs/binder1\x00', 0x1, 0x0) ioctl$auto(r1, 0x4018620d, 0x9) openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000000)='/dev/binderfs/binder1\x00', 0x1, 0x0) socket(0x10, 0x2, 0x6) socketpair$auto(0x5, 0x5, 0x6, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x55) socket(0x2, 0x3, 0xa) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x8) connect$auto(0x3, &(0x7f00000018c0)=@l2tp={0x2, 0x0, @multicast1}, 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0xe000) setrlimit$auto(0xb, 0x0) getpid() openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/platform/dummy_hcd.2/usb3/3-0:1.0/authorized\x00', 0x220080, 0x0) close_range$auto(0x0, 0xffffffffffffffff, 0x2) fanotify_init$auto(0x400, 0x2000000000002) r2 = open(&(0x7f0000000000)='./file0\x00', 0x165b42, 0xe1d2b27bdc14aa98) fanotify_mark$auto(0x400000000000, 0x105, 0xf2b, r2, 0x0) 47.814213563s ago: executing program 8 (id=5663): setresuid$auto(0x8, 0x8, 0x0) r0 = setfsuid$auto(0xee00) setreuid$auto(r0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_net_shaper(&(0x7f0000000540), r1) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) sendmsg$auto_NET_SHAPER_CMD_DELETE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3100000004dde9da93faa0ebeaee2da7aa5c48ebe8ae6a84a2e7", @ANYRES16=r2, @ANYBLOB="090027bd7000fbdbdf250300000008000800", @ANYRES32=r3, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x44000}, 0xc050) msgsnd$auto(0x2, &(0x7f0000000300)={0x4, 0x9}, 0x65, 0xfffffffd) fsconfig$auto(r1, 0x2, &(0x7f0000000180)='\x00', &(0x7f0000000580)="10ab6b39a25e5d9c4947936e05c1ebf9895356b0a5fc915241b26bebe1bf3648ecb6260c4d40bcaaf9620450e0f236d9cf2e9bfa15663032904f14a0bfebeb6f41d8f77bd0bca982dfe6b49e308e606721133b53711ed21bb9e1e32f4be7a7c60b1e11a84523b8f0f030b169292f0b65a26107a850d0b970a474f1e71b47", 0x0) r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/udp\x00', 0x80, 0x0) pread64$auto(r4, 0x0, 0x201, 0xc000) r5 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r5, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) syz_genetlink_get_family_id$auto_tipcv2(&(0x7f000000c180), 0xffffffffffffffff) syz_genetlink_get_family_id$auto_macsec(0x0, r1) mmap$auto(0xc, 0x20009, 0x5, 0x14, 0xffffffffffffffff, 0x0) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) fsconfig$auto(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) openat$auto_uhid_fops_uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2800, 0x0) readv$auto(0x3, &(0x7f00000001c0)={0x0, 0x1000}, 0x100000007) waitid$auto_P_PGID(0x2, 0x0, 0x0, 0x3, &(0x7f0000000440)={{0x8, 0x6}, {0x8, 0xc5e}, 0x100000011, 0x3, 0x5, 0xf9, 0xfffffffffffffffc, 0x5, 0x6274, 0x9, 0x0, 0xb, 0x35d, 0x439c, 0x9, 0x7}) unshare$auto(0x40000080) close_range$auto(0x0, 0xfffffffffffff000, 0x0) bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0xa, 0xb8, 0x10, 0x4, 0x4, 0xffffffffffffffff, 0xa, "2af051b26b658a20d8dc6b36c83ce63f", 0x0, 0xffffffffffffffff, 0x5, 0x7, 0x7, 0x6}, 0xf) bpf$auto(0x1a, &(0x7f0000000380)=@link_create={@prog_fd, @target_ifindex=r6, 0x3, 0x81, @uprobe_multi={0x3, 0x1ff, 0x3d7e, 0x8, 0x1, 0x4}}, 0x96) 45.51887613s ago: executing program 8 (id=5667): mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_short_retry_limit_ops_(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/ieee80211/phy10/short_retry_limit\x00', 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x1000000003, 0xebd, r0, 0x8000) r1 = socket(0x29, 0x2, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0) chdir$auto(&(0x7f0000000000)='}[,&*}\x00') r2 = open(&(0x7f0000000100)='.\x00', 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) ioctl$auto_FS_IOC_SETFLAGS(r2, 0x40086602, 0x4) lsm_list_modules$auto(0x0, 0x0, 0x0) r3 = socket(0x2, 0x801, 0x106) r4 = getsockopt$auto(r3, 0x11c, 0x3, 0x0, 0x0) close_range$auto(0x0, 0xffffffffffffffff, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x101840, 0x0) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) ioctl$auto(r4, 0x541c, r4) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) ioctl$auto(r1, 0x8919, 0x24) io_uring_setup$auto(0x59, 0x0) 44.984424198s ago: executing program 8 (id=5670): rseq$auto(0x0, 0x584, 0x1, 0x2) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000002180)='/dev/snd/pcmC0D0p\x00', 0x0, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x60742, 0x0) openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, 0x0, 0x841, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x2000, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtdblock0\x00', 0x14f602, 0x0) mmap$auto(0x0, 0x2020009, 0x8000000000000003, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) pwrite64$auto(0xc8, &(0x7f0000000480)='\vX\xb5n\x91p\xe6\x1eRN8\x99C\x05e\x1cJ\x99\x00:c\x14\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#\x1c\x9b\x17\x82\xd7\xee\xd1\b2[\x05\xbdn\x1d\x00\xeb]B\xa0\x99\xb0B\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a0\xeb\xbf\xcfwU&[\xde?\x81\x9a@\xb8h\xc0\x88_\xa0u\xa2\xddH\xde8\xf7\xc1\xaf\n1\x80\x1a\xbc_\xef\x8b\t\xcc\xa6\xf2\xc1\"\xact\xee\xc9', 0xe, 0x10000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000200)='/dev/sda\x00', 0x14fa02, 0x0) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop6\x00', 0x101202, 0x0) ioctl$auto_SG_GET_RESERVED_SIZE(r0, 0x4c00, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x1, 0x84) r1 = socket(0x10, 0x2, 0x0) statmount$auto(0x0, &(0x7f0000000440)={0xb, 0x1, 0x28, 0x7, 0x3e, 0xfffffffffffffffa, 0x1ffda, 0x0, 0xa, 0x5, 0x9, 0x9, 0x2, 0x4, 0xfffffffffffffff8, 0x9, 0x2, 0x10000, 0x7e, 0x7, 0x0, 0x7, 0x2000, 0x7fff, 0x0, 0x84, 0x0, 0x0, 0x0, 0x0, 0x2, [0x0, 0x0, 0x0, 0x6ec, 0xadd, 0xe9, 0x0, 0x0, 0x1, 0x9, 0x0, 0x2, 0xd2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x10000000000000, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x1, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0xfffffffffffffffa, 0xfffffffffffffffd, 0x0, 0x0, 0x1000000000000000, 0x0, 0x0, 0x80000000], "315ce1df6482fb16fbc067715e68fa7278c14ddc0d4735"}, 0x1ff, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1e00df45"], 0x1ac}}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) recvmmsg$auto(r1, &(0x7f0000000100)={{0x0, 0x4, &(0x7f0000000080)={&(0x7f0000000040), 0xcb}, 0x3, 0x0, 0x80000000, 0x6}, 0x9}, 0x7, 0x6, 0x0) set_mempolicy$auto(0x5, &(0x7f0000000400)=0xfffffffffffffffd, 0x3b) sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1c"], 0x1ac}}, 0x40000) ioctl$auto_IOC_PR_REGISTER(r0, 0x401870c8, &(0x7f0000000140)={0x3, 0x80000001, 0x5}) close_range$auto(0x2, 0xa, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x5, 0x0) setsockopt$auto(0x3, 0x10000000084, 0x7b, 0x0, 0x2) 29.767543076s ago: executing program 37 (id=5670): rseq$auto(0x0, 0x584, 0x1, 0x2) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000002180)='/dev/snd/pcmC0D0p\x00', 0x0, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x60742, 0x0) openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, 0x0, 0x841, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x2000, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtdblock0\x00', 0x14f602, 0x0) mmap$auto(0x0, 0x2020009, 0x8000000000000003, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) pwrite64$auto(0xc8, &(0x7f0000000480)='\vX\xb5n\x91p\xe6\x1eRN8\x99C\x05e\x1cJ\x99\x00:c\x14\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#\x1c\x9b\x17\x82\xd7\xee\xd1\b2[\x05\xbdn\x1d\x00\xeb]B\xa0\x99\xb0B\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a0\xeb\xbf\xcfwU&[\xde?\x81\x9a@\xb8h\xc0\x88_\xa0u\xa2\xddH\xde8\xf7\xc1\xaf\n1\x80\x1a\xbc_\xef\x8b\t\xcc\xa6\xf2\xc1\"\xact\xee\xc9', 0xe, 0x10000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000200)='/dev/sda\x00', 0x14fa02, 0x0) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop6\x00', 0x101202, 0x0) ioctl$auto_SG_GET_RESERVED_SIZE(r0, 0x4c00, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x1, 0x84) r1 = socket(0x10, 0x2, 0x0) statmount$auto(0x0, &(0x7f0000000440)={0xb, 0x1, 0x28, 0x7, 0x3e, 0xfffffffffffffffa, 0x1ffda, 0x0, 0xa, 0x5, 0x9, 0x9, 0x2, 0x4, 0xfffffffffffffff8, 0x9, 0x2, 0x10000, 0x7e, 0x7, 0x0, 0x7, 0x2000, 0x7fff, 0x0, 0x84, 0x0, 0x0, 0x0, 0x0, 0x2, [0x0, 0x0, 0x0, 0x6ec, 0xadd, 0xe9, 0x0, 0x0, 0x1, 0x9, 0x0, 0x2, 0xd2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x10000000000000, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x1, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0xfffffffffffffffa, 0xfffffffffffffffd, 0x0, 0x0, 0x1000000000000000, 0x0, 0x0, 0x80000000], "315ce1df6482fb16fbc067715e68fa7278c14ddc0d4735"}, 0x1ff, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1e00df45"], 0x1ac}}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) recvmmsg$auto(r1, &(0x7f0000000100)={{0x0, 0x4, &(0x7f0000000080)={&(0x7f0000000040), 0xcb}, 0x3, 0x0, 0x80000000, 0x6}, 0x9}, 0x7, 0x6, 0x0) set_mempolicy$auto(0x5, &(0x7f0000000400)=0xfffffffffffffffd, 0x3b) sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1c"], 0x1ac}}, 0x40000) ioctl$auto_IOC_PR_REGISTER(r0, 0x401870c8, &(0x7f0000000140)={0x3, 0x80000001, 0x5}) close_range$auto(0x2, 0xa, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x5, 0x0) setsockopt$auto(0x3, 0x10000000084, 0x7b, 0x0, 0x2) 11.569076767s ago: executing program 6 (id=5774): socket$nl_generic(0x10, 0x3, 0x10) ioctl$auto_dma_heap_fops_dma_heap(0xffffffffffffffff, 0xffffffffffdffe00, &(0x7f0000000140)) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x7, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda1\x00', 0xa4e00, 0x0) socket(0xa, 0x801, 0x84) openat$auto_tracing_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/trace\x00', 0x2, 0x0) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x8c00, 0x0) statx$auto(0xffffff9c, 0x0, 0x1000, 0x803, 0x0) r1 = openat$auto_iommufd_fops_main(0xffffffffffffff9c, &(0x7f0000000400), 0x80001, 0x0) ioctl$auto(r1, 0x3b8e, r0) statmount$auto(0x0, &(0x7f0000000400)={0x8, 0x1, 0x9, 0x3, 0xb, 0x944, 0x1ffde, 0x3, 0x6, 0xf, 0x9, 0x5, 0x3, 0x4, 0xb0, 0x7, 0x6, 0x3, 0x5, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1000000000000000]}, 0x1fe, 0x83) ppoll$auto(&(0x7f0000000140)={0xffffffffffffffff, 0x3ff, 0x4}, 0x7f, 0x0, 0x0, 0x8) r2 = openat$auto_rng_chrdev_ops_core(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) writev$auto(0xffffffffffffffff, &(0x7f00000010c0)={&(0x7f0000001080)="3e9e6579c305df845f3a59e6d3d30a85262e8e557131a58bac55d639", 0x6}, 0x4) read$auto_rng_chrdev_ops_core(r2, &(0x7f0000000040)=""/4096, 0xfffffe82) 10.335489023s ago: executing program 6 (id=5777): r0 = prctl$auto(0x3a, 0x2, 0x0, 0x800000000000001, 0x0) mmap$auto(0x0, 0x2020009, 0x7, 0x800000000000eb1, r0, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x17) syz_genetlink_get_family_id$auto_batadv(0x0, 0xffffffffffffffff) fsconfig$auto_SHMEM_HUGE_ADVISE(r0, 0x8, &(0x7f0000000080)='/dev/uinput\x00', &(0x7f00000000c0)="2068f44524472945573730e8cf4f096c7e8cd1cdfbded2be246fe5d3724d4e11046f7f6a6dc4", 0x3) socket(0x11, 0x3, 0x0) mmap$auto(0x200000000, 0x5, 0x200009, 0x40009b76, 0x2, 0x8000) r1 = io_uring_setup$auto(0x89, 0x0) openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0xe0080, 0x0) ioctl$auto_UI_SET_MSCBIT(r0, 0x40045568, &(0x7f0000000040)=0x20000006) syz_genetlink_get_family_id$auto_nl80211(0x0, r1) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x408, 0x0) socket(0x27, 0xa, 0x2) socket(0x10, 0x2, 0x0) socket(0x2, 0x3, 0x2) socket(0x22, 0x3, 0x104) mmap$auto(0x0, 0x4020005, 0xdf, 0xeb1, 0x401, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) umount2$auto(0x0, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x3, 0x5, 0x7, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x5, 0x0) socket(0xa, 0x801, 0x84) connect$auto(0x3, 0x0, 0x55) listen$auto(0x3, 0x81) 9.30769472s ago: executing program 5 (id=5786): mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r0, &(0x7f0000004240)={0x0, 0x0, &(0x7f0000004200)={&(0x7f0000000140)={0x14, 0x0, 0x1, 0x70bd25, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40c8}, 0x4048000) write$auto(0xffffffffffffffff, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r1 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000000)='/dev/binderfs/binder1\x00', 0x1, 0x0) ioctl$auto(r1, 0x4018620d, 0x9) openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000000)='/dev/binderfs/binder1\x00', 0x1, 0x0) socket(0x10, 0x2, 0x6) socketpair$auto(0x5, 0x5, 0x6, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x55) socket(0x2, 0x3, 0xa) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x8) connect$auto(0x3, &(0x7f00000018c0)=@l2tp={0x2, 0x0, @multicast1}, 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0xe000) setrlimit$auto(0xb, 0x0) getpid() openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/platform/dummy_hcd.2/usb3/3-0:1.0/authorized\x00', 0x220080, 0x0) close_range$auto(0x0, 0xffffffffffffffff, 0x2) fanotify_init$auto(0x400, 0x2000000000002) r2 = open(&(0x7f0000000000)='./file0\x00', 0x165b42, 0xe1d2b27bdc14aa98) fanotify_mark$auto(0x400000000000, 0x105, 0xf2b, r2, 0x0) 8.373955758s ago: executing program 5 (id=5779): setresuid$auto(0x8, 0x8, 0x0) r0 = setfsuid$auto(0xee00) setreuid$auto(r0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_net_shaper(&(0x7f0000000540), r1) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) sendmsg$auto_NET_SHAPER_CMD_DELETE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3100000004dde9da93faa0ebeaee2da7aa5c48ebe8ae6a84a2e7", @ANYRES16=r2, @ANYBLOB="090027bd7000fbdbdf250300000008000800", @ANYRES32=r3, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x44000}, 0xc050) msgsnd$auto(0x2, &(0x7f0000000300)={0x4, 0x9}, 0x65, 0xfffffffd) fsconfig$auto(r1, 0x2, &(0x7f0000000180)='\x00', &(0x7f0000000580)="10ab6b39a25e5d9c4947936e05c1ebf9895356b0a5fc915241b26bebe1bf3648ecb6260c4d40bcaaf9620450e0f236d9cf2e9bfa15663032904f14a0bfebeb6f41d8f77bd0bca982dfe6b49e308e606721133b53711ed21bb9e1e32f4be7a7c60b1e11a84523b8f0f030b169292f0b65a26107a850d0b970a474f1e71b47", 0x0) r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/udp\x00', 0x80, 0x0) pread64$auto(r4, 0x0, 0x201, 0xc000) r5 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r5, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) syz_genetlink_get_family_id$auto_tipcv2(&(0x7f000000c180), 0xffffffffffffffff) syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000080), r1) mmap$auto(0xc, 0x20009, 0x5, 0x14, 0xffffffffffffffff, 0x0) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) fsconfig$auto(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) openat$auto_uhid_fops_uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2800, 0x0) readv$auto(0x3, &(0x7f00000001c0)={0x0, 0x1000}, 0x100000007) waitid$auto_P_PGID(0x2, 0x0, 0x0, 0x3, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x0, 0xfffffffffffff000, 0x0) bpf$auto(0x1a, &(0x7f0000000380)=@link_create={@prog_fd, @target_ifindex, 0x3, 0x81, @uprobe_multi={0x3, 0x1ff, 0x3d7e, 0x8, 0x1, 0x4}}, 0x96) 7.076596468s ago: executing program 5 (id=5783): setresuid$auto(0x8, 0x8, 0x0) r0 = setfsuid$auto(0xee00) setreuid$auto(r0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_net_shaper(&(0x7f0000000540), r1) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) sendmsg$auto_NET_SHAPER_CMD_DELETE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3100000004dde9da93faa0ebeaee2da7aa5c48ebe8ae6a84a2e7", @ANYRES16=r2, @ANYBLOB="090027bd7000fbdbdf250300000008000800", @ANYRES32=r3, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x44000}, 0xc050) msgsnd$auto(0x2, &(0x7f0000000300)={0x4, 0x9}, 0x65, 0xfffffffd) fsconfig$auto(r1, 0x2, &(0x7f0000000180)='\x00', &(0x7f0000000580)="10ab6b39a25e5d9c4947936e05c1ebf9895356b0a5fc915241b26bebe1bf3648ecb6260c4d40bcaaf9620450e0f236d9cf2e9bfa15663032904f14a0bfebeb6f41d8f77bd0bca982dfe6b49e308e606721133b53711ed21bb9e1e32f4be7a7c60b1e11a84523b8f0f030b169292f0b65a26107a850d0b970a474f1e71b47", 0x0) r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/udp\x00', 0x80, 0x0) pread64$auto(r4, 0x0, 0x201, 0xc000) r5 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r5, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) syz_genetlink_get_family_id$auto_tipcv2(&(0x7f000000c180), 0xffffffffffffffff) syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000080), r1) mmap$auto(0xc, 0x20009, 0x5, 0x14, 0xffffffffffffffff, 0x0) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) fsconfig$auto(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) openat$auto_uhid_fops_uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2800, 0x0) readv$auto(0x3, &(0x7f00000001c0)={0x0, 0x1000}, 0x100000007) waitid$auto_P_PGID(0x2, 0x0, 0x0, 0x3, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x0, 0xfffffffffffff000, 0x0) bpf$auto(0x1a, &(0x7f0000000380)=@link_create={@prog_fd, @target_ifindex, 0x3, 0x81, @uprobe_multi={0x3, 0x1ff, 0x3d7e, 0x8, 0x1, 0x4}}, 0x96) 5.239933572s ago: executing program 5 (id=5788): mlockall$auto(0x7) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x100) socket(0x840000000002, 0x3, 0xff) connect$auto(0x3, &(0x7f00000000c0)=@in={0x2, 0x0, @local}, 0x55) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ram7\x00', 0x14fa02, 0x0) sendfile$auto(0x3, r0, 0x0, 0x400000000006) r1 = getpid() r2 = gettid() r3 = open(&(0x7f0000000000)='./file0\x00', 0x4242, 0xe1d2b27bdc14aab4) flock$auto(r3, 0x1) r4 = open(&(0x7f0000000040)='./file0\x00', 0x4242, 0x40) flock$auto(r4, 0x2) rt_tgsigqueueinfo$auto(r1, r2, 0x21, &(0x7f0000000400)={@siginfo_0_0={0x3, 0x1c51, 0xfffffffe, @_kill={r1}}}) close_range$auto(0x2, 0x8, 0x0) 4.239523848s ago: executing program 5 (id=5792): unshare$auto(0x8) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) prctl$auto_PR_SET_VMA(0x53564d41, 0x0, 0x0, 0x8000, 0xe9) prctl$auto_PR_SET_VMA(0x53564d41, 0x0, 0x0, 0x8002, 0x2) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000140), 0x8f80, 0x0) mremap$auto(0xfffff000, 0x4, 0x4, 0x7, 0x1001ff000) bpf$auto(0xa, &(0x7f00000000c0)=@query={@target_fd, 0x4, 0x20, 0xffff, 0x3, @prog_cnt=0xc, 0x0, 0xd8, 0x2, 0x4, 0x1}, 0x95) fsopen$auto(0x0, 0x1) prctl$auto(0x1000000003b, 0x1, 0x4, 0xd73, 0xb) madvise$auto(0xfffffffffffffffa, 0x7f, 0x10) madvise$auto(0x0, 0x2003f2, 0x15) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20006, 0x4000000000df, 0xeb1, 0x4, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) syz_genetlink_get_family_id$auto_l2tp(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) mmap$auto(0x0, 0xa00006, 0x400002, 0x40eb1, 0x602, 0x300000000000) mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x1000000406, 0x200002) munlock$auto(0xf800000000000000, 0x100) r3 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000000), r2) sendmsg$auto_OVS_DP_CMD_SET(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r3, 0x1, 0x70bd28, 0x25dfdb7d, {}, [@OVS_DP_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) syz_genetlink_get_family_id$auto_ethtool(0x0, r1) socket(0x1d, 0x3, 0x1) 3.968076706s ago: executing program 4 (id=5794): rseq$auto(0x0, 0x584, 0x1, 0x2) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000002180)='/dev/snd/pcmC0D0p\x00', 0x0, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/fcloop/ctl/add_local_port\x00', 0xa001, 0x0) write$auto(r0, &(0x7f0000000000)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k\x92\xa3\x99\xc4 \xbcr^\x9f\x8a\a\xd7\x19\xb8k\xa2\xce\xdb\xab?\xecZ\xb4\x068\xae\b\x1e~\xe0{\x1f\xf6^\x92\xdfDng', 0x80) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x60742, 0x0) openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, 0x0, 0x841, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x2000, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtdblock0\x00', 0x14f602, 0x0) socket(0x29, 0x2, 0x0) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ram5\x00', 0x121200, 0x0) r2 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/controlC0\x00', 0x8100, 0x0) rseq$auto(&(0x7f0000000280)={0xdc3, 0x1ff, 0x8, 0xf, 0x9, 0x3, "e9278b7f3eed9c88a95444ff348b91e18d976a621a3482d078eb3b2303f5ac1509a524a5971ec49409b27cf30fa506888aeaed002615b7deccfda15a72a183b5a299150731e72e2b1f52fc0bef37f79aadd8395a15309e24e56de73e8a49c3bc277ea2e9e2cbdbc0865428de120f76a279ff9e266c83e8c42f37df9ba1e263453124a97d8df52dab"}, 0xb112, 0x5, 0x1) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_INFO(r2, 0xc1105511, &(0x7f0000000080)={{@raw=0x7, 0x5, 0xfffff7bb, 0x2f, "984e784f697ebcc30053822c357eb55df43e9e037b650dfc7a3df9aa20e32749384f515111de5da4403cab68", @raw=0x7}, 0x200000, 0x1, 0x4, @raw=0x3, @enumerated={0x8, 0x0, "3544fac47a801d819cb534605db6a893115890fe4787b893bf2d3f312883af26fc4d92993388bae934e26fa2157468e873f1359a98377e7310a5f19b224938a6", 0xf}, "b210e8ae72f3052d09004297cc39fbd4fe51f972eb62ed41cec2ea5c1e45264907d818e9711e2b57cd159b796ab9e6c81a2f47680e3d2a7f677dccfd260d82fe"}) sendfile$auto(0x3, r1, 0x0, 0x400000000006) 3.765080519s ago: executing program 6 (id=5795): openat$auto_adf_ctl_ops_adf_ctl_drv(0xffffffffffffff9c, 0x0, 0x20140, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x2020009, 0x8000000000000003, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) landlock_create_ruleset$auto(&(0x7f0000000000)={0xd1d, 0x3, 0x7}, 0x0, 0x10000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x1000) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x5) 3.12258085s ago: executing program 9 (id=5796): socket$nl_generic(0x10, 0x3, 0x10) ioctl$auto_dma_heap_fops_dma_heap(0xffffffffffffffff, 0xffffffffffdffe00, &(0x7f0000000140)) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x7, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda1\x00', 0xa4e00, 0x0) socket(0xa, 0x801, 0x84) openat$auto_tracing_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/trace\x00', 0x2, 0x0) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x8c00, 0x0) statx$auto(0xffffff9c, 0x0, 0x1000, 0x803, 0x0) r1 = openat$auto_iommufd_fops_main(0xffffffffffffff9c, &(0x7f0000000400), 0x80001, 0x0) ioctl$auto(r1, 0x3b8e, r0) statmount$auto(0x0, &(0x7f0000000400)={0x8, 0x1, 0x9, 0x3, 0xb, 0x944, 0x1ffde, 0x3, 0x6, 0xf, 0x9, 0x5, 0x3, 0x4, 0xb0, 0x7, 0x6, 0x3, 0x5, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1000000000000000]}, 0x1fe, 0x83) r2 = openat$auto_rng_chrdev_ops_core(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) writev$auto(0xffffffffffffffff, &(0x7f00000010c0)={&(0x7f0000001080)="3e9e6579c305df845f3a59e6d3d30a85262e8e557131a58bac55d639", 0x6}, 0x4) read$auto_rng_chrdev_ops_core(r2, &(0x7f0000000040)=""/4096, 0xfffffe82) 2.995488015s ago: executing program 4 (id=5797): socket$nl_generic(0x10, 0x3, 0x10) ioctl$auto_dma_heap_fops_dma_heap(0xffffffffffffffff, 0xffffffffffdffe00, &(0x7f0000000140)) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x7, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda1\x00', 0xa4e00, 0x0) socket(0xa, 0x801, 0x84) openat$auto_tracing_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/trace\x00', 0x2, 0x0) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x8c00, 0x0) statx$auto(0xffffff9c, 0x0, 0x1000, 0x803, 0x0) r1 = openat$auto_iommufd_fops_main(0xffffffffffffff9c, &(0x7f0000000400), 0x80001, 0x0) ioctl$auto(r1, 0x3b8e, r0) statmount$auto(0x0, &(0x7f0000000400)={0x8, 0x1, 0x9, 0x3, 0xb, 0x944, 0x1ffde, 0x3, 0x6, 0xf, 0x9, 0x5, 0x3, 0x4, 0xb0, 0x7, 0x6, 0x3, 0x5, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1000000000000000]}, 0x1fe, 0x83) r2 = openat$auto_rng_chrdev_ops_core(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) writev$auto(0xffffffffffffffff, &(0x7f00000010c0)={&(0x7f0000001080)="3e9e6579c305df845f3a59e6d3d30a85262e8e557131a58bac55d639", 0x6}, 0x4) read$auto_rng_chrdev_ops_core(r2, &(0x7f0000000040)=""/4096, 0xfffffe82) 2.687789044s ago: executing program 9 (id=5798): openat$auto_adf_ctl_ops_adf_ctl_drv(0xffffffffffffff9c, 0x0, 0x20140, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x2020009, 0x8000000000000003, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) landlock_create_ruleset$auto(&(0x7f0000000000)={0xd1d, 0x3, 0x7}, 0x0, 0x10000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x1000) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x5) 2.672933765s ago: executing program 6 (id=5799): mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r0, &(0x7f0000004240)={0x0, 0x0, &(0x7f0000004200)={&(0x7f0000000140)={0x18, 0x0, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@HWSIM_ATTR_PMSR_SUPPORT={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x40c8}, 0x4048000) write$auto(0xffffffffffffffff, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r1 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000000)='/dev/binderfs/binder1\x00', 0x1, 0x0) ioctl$auto(r1, 0x4018620d, 0x9) openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000000)='/dev/binderfs/binder1\x00', 0x1, 0x0) socket(0x10, 0x2, 0x6) socketpair$auto(0x5, 0x5, 0x6, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x55) socket(0x2, 0x3, 0xa) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x8) connect$auto(0x3, &(0x7f00000018c0)=@l2tp={0x2, 0x0, @multicast1}, 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0xe000) setrlimit$auto(0xb, 0x0) getpid() openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/platform/dummy_hcd.2/usb3/3-0:1.0/authorized\x00', 0x220080, 0x0) close_range$auto(0x0, 0xffffffffffffffff, 0x2) fanotify_init$auto(0x400, 0x2000000000002) r2 = open(&(0x7f0000000000)='./file0\x00', 0x165b42, 0xe1d2b27bdc14aa98) fanotify_mark$auto(0x400000000000, 0x105, 0xf2b, r2, 0x0) 2.369973759s ago: executing program 9 (id=5800): mlockall$auto(0x7) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x100) socket(0x840000000002, 0x3, 0xff) connect$auto(0x3, &(0x7f00000000c0)=@in={0x2, 0x0, @local}, 0x55) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ram7\x00', 0x14fa02, 0x0) r0 = getpid() r1 = gettid() r2 = open(&(0x7f0000000000)='./file0\x00', 0x4242, 0xe1d2b27bdc14aab4) flock$auto(r2, 0x1) r3 = open(&(0x7f0000000040)='./file0\x00', 0x4242, 0x40) flock$auto(r3, 0x2) rt_tgsigqueueinfo$auto(r0, r1, 0x21, &(0x7f0000000400)={@siginfo_0_0={0x3, 0x1c51, 0xfffffffe, @_kill={r0}}}) close_range$auto(0x2, 0x8, 0x0) 2.203986848s ago: executing program 4 (id=5801): mmap$auto(0x0, 0x400008, 0x36, 0x1009b72, 0x2, 0x8000) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptya1\x00', 0x20080, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x1000, 0x0) ioctl$auto(0x3, 0x5420, 0x38) ioctl$auto_SNDCTL_TMR_CONTINUE(r0, 0x5407, 0x0) 2.027587475s ago: executing program 9 (id=5802): mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r0, &(0x7f0000004240)={0x0, 0x0, &(0x7f0000004200)={&(0x7f0000000140)={0x18, 0x0, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@HWSIM_ATTR_PMSR_SUPPORT={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x40c8}, 0x4048000) write$auto(0xffffffffffffffff, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r1 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000000)='/dev/binderfs/binder1\x00', 0x1, 0x0) ioctl$auto(r1, 0x4018620d, 0x9) openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000000)='/dev/binderfs/binder1\x00', 0x1, 0x0) socket(0x10, 0x2, 0x6) socketpair$auto(0x5, 0x5, 0x6, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x55) socket(0x2, 0x3, 0xa) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x8) connect$auto(0x3, &(0x7f00000018c0)=@l2tp={0x2, 0x0, @multicast1}, 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0xe000) setrlimit$auto(0xb, 0x0) getpid() openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/platform/dummy_hcd.2/usb3/3-0:1.0/authorized\x00', 0x220080, 0x0) close_range$auto(0x0, 0xffffffffffffffff, 0x2) fanotify_init$auto(0x400, 0x2000000000002) r2 = open(&(0x7f0000000000)='./file0\x00', 0x165b42, 0xe1d2b27bdc14aa98) fanotify_mark$auto(0x400000000000, 0x105, 0xf2b, r2, 0x0) 1.976766256s ago: executing program 4 (id=5803): close_range$auto(0x2, 0xa, 0x0) socket(0xa, 0x1, 0x84) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/block/nbd15/queue/scheduler\x00', 0x103a42, 0x0) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) lseek$auto(0x3, 0x7fffffffffffffff, 0x0) timer_create$auto(0x0, 0x0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) readv$auto(0x3, 0x0, 0x1) io_uring_register$auto(0x2, 0x11, 0x0, 0x83) ioctl$auto(0x1, 0x890c, 0x8) fcntl$auto_F_DUPFD(r0, 0x0, r0) wait4$auto(0xffffffffffffffff, 0x0, 0x2, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000012c0)='/sys/devices/virtual/block/ram7/queue/iostats\x00', 0x48542, 0x0) write$auto(r1, &(0x7f0000000100)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xcbA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3C', 0x4) openat$auto_mon_fops_stat_usb_mon(0xffffffffffffff9c, 0x0, 0x80000, 0x0) getdents$auto(r0, &(0x7f0000000080)={0x9d, 0xe, 0x5, "d7af3165706d62c3d026ed46fa4a4917a08142d2a43d2d1626e1720eab19f3a161eae229bc8db02574b99e2bb4b02f66b4cdf2281ba8b1ae149b75891d8d9d5fb357b0d4f4607b6f3e82e8dbefbb5c18c48b91"}, 0x9) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x20b42, 0x0) 1.682067106s ago: executing program 6 (id=5804): setresuid$auto(0x8, 0x8, 0x0) r0 = setfsuid$auto(0xee00) setreuid$auto(r0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_net_shaper(&(0x7f0000000540), r1) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) sendmsg$auto_NET_SHAPER_CMD_DELETE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3100000004dde9da93faa0ebeaee2da7aa5c48ebe8ae6a84a2e7", @ANYRES16=r2, @ANYBLOB="090027bd7000fbdbdf250300000008000800", @ANYRES32=r3, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x44000}, 0xc050) msgsnd$auto(0x2, &(0x7f0000000300)={0x4, 0x9}, 0x65, 0xfffffffd) fsconfig$auto(r1, 0x2, &(0x7f0000000180)='\x00', &(0x7f0000000580)="10ab6b39a25e5d9c4947936e05c1ebf9895356b0a5fc915241b26bebe1bf3648ecb6260c4d40bcaaf9620450e0f236d9cf2e9bfa15663032904f14a0bfebeb6f41d8f77bd0bca982dfe6b49e308e606721133b53711ed21bb9e1e32f4be7a7c60b1e11a84523b8f0f030b169292f0b65a26107a850d0b970a474f1e71b47", 0x0) r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/udp\x00', 0x80, 0x0) pread64$auto(r4, 0x0, 0x201, 0xc000) r5 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r5, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) syz_genetlink_get_family_id$auto_tipcv2(&(0x7f000000c180), 0xffffffffffffffff) syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000080), r1) mmap$auto(0xc, 0x20009, 0x5, 0x14, 0xffffffffffffffff, 0x0) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) fsconfig$auto(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) openat$auto_uhid_fops_uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2800, 0x0) readv$auto(0x3, &(0x7f00000001c0)={0x0, 0x1000}, 0x100000007) waitid$auto_P_PGID(0x2, 0x0, 0x0, 0x3, &(0x7f0000000440)={{0x8, 0x6}, {0x8, 0xc5e}, 0x100000011, 0x3, 0x5, 0xf9, 0xfffffffffffffffc, 0x5, 0x6274, 0x9, 0x0, 0xb, 0x35d, 0x439c, 0x9, 0x7}) unshare$auto(0x40000080) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x0, 0xfffffffffffff000, 0x0) bpf$auto(0x1a, 0x0, 0x96) 1.628068197s ago: executing program 4 (id=5805): openat$auto_proc_mem_operations_base(0xffffffffffffff9c, 0x0, 0x40, 0x0) mmap$auto(0x0, 0x1, 0xb, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x1, 0x106) r1 = epoll_create$auto(0x3e) epoll_ctl$auto(r1, 0x1, r0, 0x0) connect$auto(0x3, 0x0, 0x54) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_taskstats(&(0x7f0000000140), r2) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/devices/system/node/node1/meminfo\x00', 0x145001, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r4, &(0x7f0000000300)=""/126, 0x7e) r5 = getpgrp(0x0) sendmsg$auto_TASKSTATS_CMD_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001580)=ANY=[@ANYBLOB="1c000000", @ANYBLOB="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", @ANYRESOCT=r3, @ANYRES32=r5, @ANYBLOB="9d37d6813d0232dd3b437463d5ca5050471009129ae15b035fdf7573e5b11458ba9f2c4c4c0caac28090bb942327a2835481945a76dedc57cef39a8f6571b73ee4627b2007ce112f756fc0160ae3c5acbfc05fbb37bc309e188064158f4f68a5ad07e8ce4db2985a526537f20d880f70ae94a10041a6144a908d4ec0631008c031b1685468df5f4cfdeb952048e8702efb43288a3038eab46c3fb9395c96af13fb395f0a880000"], 0x1c}, 0x1, 0x0, 0x0, 0x4001}, 0x20000000) madvise$auto(0xfffffffffffffffd, 0xffffffffffff0001, 0x15) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/tracing/events/vmalloc/filter\x00', 0x2, 0x0) unshare$auto(0x40000080) r6 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000300)='/dev/mtd0\x00', 0x28082, 0x0) ioctl$auto(r6, 0x4d13, r6) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D2\x00', 0x1, 0x0) socket(0x2, 0x2, 0x88) readv$auto(0x3, &(0x7f00000001c0)={0x0, 0x7ffff7ffefff}, 0x8000000000000001) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) mmap$auto(0x0, 0x2020009, 0x9, 0xeb1, 0xffffffffffffffff, 0x8000) openat$auto_tracing_fops_trace(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/tracing/trace\x00', 0x705040, 0x0) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) write$auto(0x3, 0x0, 0xffd8) 1.31971524s ago: executing program 5 (id=5806): rseq$auto(0x0, 0x584, 0x1, 0x2) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000002180)='/dev/snd/pcmC0D0p\x00', 0x0, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x60742, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, 0x0, 0x841, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/platform/dummy_udc.2/udc/dummy_udc.2/a_alt_hnp_support\x00', 0x2000, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000001c00)=""/4111, 0x100f) bind$auto(0x3, 0x0, 0x6a) close_range$auto(0x2, 0x8, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtdblock0\x00', 0x14f602, 0x0) socket(0x29, 0x2, 0x0) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ram5\x00', 0x121200, 0x0) sendfile$auto(0x3, r2, 0x0, 0x400000000006) 1.036113089s ago: executing program 4 (id=5807): openat$auto_proc_mem_operations_base(0xffffffffffffff9c, 0x0, 0x40, 0x0) mmap$auto(0x0, 0x1, 0xb, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x1, 0x106) r1 = epoll_create$auto(0x3e) epoll_ctl$auto(r1, 0x1, r0, 0x0) connect$auto(0x3, 0x0, 0x54) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_taskstats(&(0x7f0000000140), r2) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/devices/system/node/node1/meminfo\x00', 0x145001, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r4, &(0x7f0000000300)=""/126, 0x7e) r5 = getpgrp(0x0) sendmsg$auto_TASKSTATS_CMD_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001580)=ANY=[@ANYBLOB="1c000000", @ANYBLOB="2403e26b4797ce6fc3954ed7dd7e5bd89bf28378d9b394bd7f3db9e0f7b899443911cbd6504f787850a4c938f302c966d1f8ec7326f04abf4836353214b33897ef557760088b0fc0ae31e3dc1d160257939d6b28ca4b7f3fd0a2463224b8bbc00788f9a3d184f642a64908a595cb3f0c55d43c0be49971eb38cc74b50539f9d6e1da649e71d87c0633d7976e321929e41f31920396fad7b4e57ca256499dbdd21910bf5ba24ced527c1ac9f1a7c2f8309b3be46f8d0b6ef0acd28ed0b58a5c4ed4b8bc33d87c971999fc587a5005b857d098b78d46acb18ca7d0d9da7b3a9d64f03c4da75bff7202df6857f4230d0b3d59cab9217aba655774e7688b862759bd812562c158eb8619958a3eeeb56ec48c77dcddd69ad3668fd6aa26c2174b937d639f9cdaa6fc6910f4996bf90e116205e1878952d10f6a5881eedba0b93004fc430c3b61d7fbbb9a0f90473f45af95949a4f34edd3ee3d241969d10f296922ac1a142e27bdee7321c22423da8d9b969818d67c943337f5ad818aab83c69c9a513ccb44fc21ee7d3798f788ab7136d8115646f0f3edda7d290d1ca5e420cb73ba0f860f6284438dee074bb39463d1ad2d81aeb2c09c48b541bb5c7916ee9257197883ab136ad134f921e5bc433df54396aa6a3cb350d02caa15d35b6202c7f68b71c6448d9e436d1106340324128f852ef13ffcb0b864c0a4b43ffd28ccabda72205f7254a4a9009bdf81f593a78d9a5993da011dc9a61a613b0a1b348faccfdb74bde2b269f3eea99a3434ad8173c1f995d4aa04cb477b2a0d619bd0c3f5eab92772157c2871b939df58a16551817ea3188bf6567c7f38c40aa3920fe00b3bb9977dba7b84a25d01b96740af8d8441be9e9d8c07da52abf25e7c051b9226e0d0a9e3adcce3abaf46514ac39f858f026b49293e6aed6caec66ecd2a9d5faacdc767cea6f97ffd9a2c5bf0f9c2fa232307577bafdaad03835e904d7dd84c1f92b5b67b518344928a5b8ac4010fe12e9fadedb58f90addcbc6cc6959ac27c36cb25710e09ae8bccd65f81ad418e7b2cab16bc04cada8776f8538da88a4cc2cf629e3eb19a9efda5b73dbe7e30a4eac4db76ae05ce00601399ad6d6e51ab1d04db6e12500ed99a60bfb45d93846b3947049f742c4b285e1b809579730fafe81ed8b135e27c06043e4a5a926455bfddcf334484e0948f368dc82e2147e3288dab3effc97a4c4e420399cd4f4992487da497b2967553554feb3234abe02a57fa2001a45e3b7833044362a08cca75132cf52cc15732367edb4e0331342deb7dd08a8c4678858a1666a907be57b50c704df43e68179bbb7ae7bd22b3952dff222c1dcf3d1b85a26cc820244583b4280a73e3b8aa8b330f84ba39400be63647c8ab7b80db7831b2b17e2a1455644e410cf85448226b6102f78808f5e47c2791625aefe6ba9dcb664e1e1564ff9e413dee1d6ffde34cf07137e7b2e7729938941e3742de53f95a1939d1940dbb922ab18fa0619a86d94f035eaac60bd587b9f6873230d37566b8b9e96ccc2c87ca7c98213f6d4dcaf03293346ac4e3ff99908c226ab84253a4f73538383729a8af17da8bb62705d2daca9816f45c65d4d86b7d22f44d800b707827bd493e94cc68df8eabcbbb199779083f447a7f6e6f01279a390917ae53346dae5eef9588e389d5923cfe4e2ea5d16edb06959e6e1162e9c4ec7b88aed6e5d117401c45bedb1bd6dc8ca76ddc6edaa78d7cbe741383c289cfba3153b4618e38fff3306a7f9256aad5cd57aee7c904b79ca01d2df082228feca0b7c61caff0115a81f4223551d475ea8c857df73e364ca61451a273f54d1c1a8a0eb024b35e9e74b5ca710e72369b47754dd6efcb0989eac6158e01d3502dec2ec56c860b95e2fd8f2a81268c82c94872b4de468f7a30934160641fba3055c85af1a10b8b7c8bd190da2102a17dc93577e7452ff05972f7954cd2e4971701c2f88f91961723e9a43277b410c3685dd7b76af8edf437bba186d8c9d40d40788f76caa46d4f7af60e4482c4da01d457e678093c5c3234c8fce5ecb8c3a92a6dfd1fe73d4ef71f1ebd1e0a2e6cbd5bf4314291123b444b3927672b4e7a69bc452dd6ada8123ba953db91c021149f4d389cfcaf5d150b94c4b6db41349bb4c04127a658e4f55f4f8ecd034924eb47372eff3994f52f334aac8b423f17d6cb7ed49816aa55bb12c4d9b86e3476e8f7a975268e6ec65aafe66e232eef0b7df4a87e63f3f1cdb167fdbb3a69f12ae36622913ae5820d8ef26c97da85982065a2b4142ca3629b99e45be07eb156c564bdfc6d43e6caef85587cedc2b843c1949bda11e86cb9c599284b72acc82a598d77c1c990635a2a186f6727474ef8828a987c5fe40ae73d6e53acf1a50d5205509e89d899cee3176e5e810d2b790865c47392607950314b9000296a01351c166172c005f9b347ec0f29c1b835b17a6f034428d916258f111eabbc72f670a5bf1be3494af1f992c73f8c43e99755112f9016c7e871a6145eb149794323a670c9172589537e26f58689c7ce2b9562a2b7364e31fc1b7ac242cc140462eca887fdf2f1a15a603f8486c495ba515677e248f9aa80793058e22228e8e8e66153986f9dd49f7e4bbba2d897b61e9a5b5897e1ac05f50e31f1ab9ebc7f03c719cea8cd7239189ea1b22059d9cf3001f4d053cabab1d916f75296efa3e4f7f1a38d2a5133cb3722873643a891a2b23539c2572c2cdea5aef755cfe135ae5264b672cf1e0f0d62c5d199e82ecde8833f32057271bf81f352338b70efa3eae9539e069b0b07413dc7d86096603cea7320004d0801ad787383fe8845dd04331265eaac668b326ca2ff90811e7d0555675ef8cf3a79cd5b5bd9c0bb9dff16ba83522d191aec31646dad607ae27190e6117629105f3473429287736563437ea9e68b49a0910e759242623eac8dfd87174e2bc918f70167af37ce310ee897c26de995e31798f7e747e21d76e0b6f72dbdad9ec2a28734235e16c624a4a09837e645ec9da57d8329e434f448c6e7dad1072b8f0958e57e98f00eb1b54b07db6c9ea8e97029463cc1642700a46518f19e8a521a1f9298a846dc499a167803f5108f5eed9f2aec3a924e70df937a625ed3a2462cea4e9334c1c3218e683334811229c902f188cbd62ebbee3739fd7af64820d8ac0be2c72fa7e253263491262f89875d1fe92ba796786e4103e658b25e4c6b5a5ab4e32ef024afcb870978be8dd0b2470c6b4ad48b185733f4a7a4d20c5e98c7aecc367fde5fc3c5e7fe92c67371b95112ab4526c0a634488b3bba52736d3f611b3cc30f95539e6b5988cebeaba94489459c6ed812e4b0f928c8c3d52824065780ebf546290dae2f54c38b3e6840a600d045336c9e59adb194ec192a295f0512da4e3f5db4d15ae14f6f0a09b3efd66a17389156d86f394b6ff039d2cb7127f0fe60537140e642de5758868841da8671b36db801367de55a9556b9519bab2f29ba45360c9940875da2d13e191fddd76a5ffb921b066eda62c240898d0e50432bbed24553868808d2e68acfec1eda3f117b3a3633fbfade05da5c7839b7d13bbd96e14057d3741e1c3959b639e80c9ecf10cd83013dfd86759c20f1a78b7654f17912debb940c0ca96780189376f748eb66b56741871f9d8a9d4895f2025de5da5160b446d3381ab74614819856a680a54cc7a34f4201f59efbdaa74bc40110a28214d6e8a56e3f89bae365c3ebe2a759859a06e1778d7b5c90cea6fcce4e511c29e1a467e0e1ec3424fa505da9d345915b7ae04ed24613bd20fcfc0790cb3e0233302f92bd88a6087c7dd9d194395bbdd415f94a5987c95f55380f7eb5fe87253356f5ed259493ac7f39f6518982f01bc65fc3b9357d747ca568b819ea27096773b8e011b4f77c8b170e4865f9acf92c9be8198114ebaf08774ca2c18ba82d5a310dd2df7ad744791c53606d4a4630295cc1cd7be922e4fdb0b3bc140d8b52cbba5f61b8c3001f15ded05473bab53f56e301deb4ea50fb44e364fb0edc96cff5f7487c96e96a73c3bf2f6ec47b8aba04c47c074abf427a1e9e9fc7dfe5c100db5a2ff59373f1cd7ca87399341c76481d0ecde96101fca234315eb6722184aa5625bb1ae4413a53625b2295196e889f64c86f07640e1429786fdf4cc3cbe93460cd1f8a76a170b16d45eebba8b1d455839ea20842776e81ced0405201f59a90dba8c95c225707b71d22e07677be5cff586b67c39446d2462899996420b08f94cb6a06bc778a905fc4ebaf716c08c191209f040fb980ed42ec7c51e014d7209cf88dee59596756c90761fed4e39b1219e1c8e90f085c6032d9cfd5a4fb19796fea6e92cd66bb708087cfeeccdbf2e4f5b2c64c7b67279d63e156675d62c3fde0fe282855643cf222e1ceb25119e91ba84b2f2e7c7891c76f4d1f37692596b74851e505d3dabfdd5fb37754d9afec849011a8de313290fa666a9c9a1b25aa7068c130ec897d6d0da609b449f22c69696f100b8cfda104dec5f1aaf01498775363f1c47db6db9d29cc708cf077a2694b8e8127716ecc78970ead48ed3a7fa9c176d798748aadb0b7f83bb236033ee49cf31675afabd3b0d26447ebc9dc45c6107929390fcfa37533066a22e9f60df3f620f0464b548fbe9e4d7fc1e8b7023746c3c551cf97cc4227f6bf695523754d32dd700d8638b3e131b61f3f707c8ae223384d37bdd7359df00cb113c6272d7d0a953649324b03e430ec25ef8708b703fb4b696ba75d2f5ea4297bef9fcd570ebc2a7be641a9694fecfb9a2e7174ddc11675d959010df74fd5418ba07fa5b36cc6e0a412b380bdfda4db0f673369e73a3f4f4b710a96f433af0f443af10dd5daeac64bc30ea173cd6851896daf58cec3395e67598823e60c77a1852018b490223257286dcbc8751e17476b1053d05c636a26e9b01d04e2be4513b721e12156f5f1df84a481d68baa53eb299a68a825c28ef318d18f93ec0e0335bf6981e34ace667542984174deb89fab764a6eadc2f62856ee0fd1c1f5ff700b936e7c9068d68cca626759110f3bc3f6c600bc57180fde0e863a6aa990ba984ed9ffb6e73ae7e17ba3b4fb511d07e318a64b78e6d8bc12d5ff3c06a9d69343f4d8d561f41178951ceb6e7a60de1da190a5ccd0b3a578abb4b76a409b11c019f45c9803540fefdbf73dc3680a6a5782af1161457abe2ddcb04f37df1a3c2e7d2baafe330f5bcb30f11597ec72be92969166ac9853d0d2bae8ef731873de66f04a203cbfc941ea6b848d95d600b5ae7cc5c1bc893e4a476a833d2d41a688537dcbbebfe903bce1f47ccfc7e14f95dc25afb0513c06ccc75eb310712dff4399505ca0738c95118f329ffea5cf3198cbd3f4e0af7e195a9e315739c04f1c1107850f3767c210160d85a97e5f7e9d398d0e1d5380a8fb3a2a4d6462d6f206c2c633ffa9fc03fa3bb503f48335e53d59631edf3aa2dcfbae4b610ab4b2849fc7510e4e3a904186d9cedc021c4b91956874e1c3b6c08d632b583c5a6dba0647a3061361f9fbf04501d7561cc23ea3f37d42763833cd148d373227282ffb9a9ea85a6433c2d78873f8c8c212fa8182e2ff6c1ba31b3206eb125617995dbcf51cd062bc1181057af0628dfc36cf311d82c2ca618a7991b09c8a586045dd8fa3cd4f8aef076640623dab11280f95f1aeffa42c2e8c32f129d03efb303fedd95dd58345ec6aeaa15e11e0b78da9761e12a1ccacebdaca50cc5b594bed99f986c9b63d106d5815f9630e3c8cf55a", @ANYRESOCT=r3, @ANYRES32=r5, @ANYBLOB="9d37d6813d0232dd3b437463d5ca5050471009129ae15b035fdf7573e5b11458ba9f2c4c4c0caac28090bb942327a2835481945a76dedc57cef39a8f6571b73ee4627b2007ce112f756fc0160ae3c5acbfc05fbb37bc309e188064158f4f68a5ad07e8ce4db2985a526537f20d880f70ae94a10041a6144a908d4ec0631008c031b1685468df5f4cfdeb952048e8702efb43288a3038eab46c3fb9395c96af13fb395f0a880000"], 0x1c}, 0x1, 0x0, 0x0, 0x4001}, 0x20000000) madvise$auto(0xfffffffffffffffd, 0xffffffffffff0001, 0x15) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/tracing/events/vmalloc/filter\x00', 0x2, 0x0) unshare$auto(0x40000080) r6 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000300)='/dev/mtd0\x00', 0x28082, 0x0) ioctl$auto(r6, 0x4d13, r6) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D2\x00', 0x1, 0x0) socket(0x2, 0x2, 0x88) readv$auto(0x3, &(0x7f00000001c0)={0x0, 0x7ffff7ffefff}, 0x8000000000000001) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) mmap$auto(0x0, 0x2020009, 0x9, 0xeb1, 0xffffffffffffffff, 0x8000) openat$auto_tracing_fops_trace(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/tracing/trace\x00', 0x705040, 0x0) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) write$auto(0x3, 0x0, 0xffd8) 960.545587ms ago: executing program 9 (id=5808): socket$nl_generic(0x10, 0x3, 0x10) ioctl$auto_dma_heap_fops_dma_heap(0xffffffffffffffff, 0xffffffffffdffe00, &(0x7f0000000140)) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x7, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda1\x00', 0xa4e00, 0x0) socket(0xa, 0x801, 0x84) openat$auto_tracing_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/trace\x00', 0x2, 0x0) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x8c00, 0x0) statx$auto(0xffffff9c, 0x0, 0x1000, 0x803, 0x0) r1 = openat$auto_iommufd_fops_main(0xffffffffffffff9c, &(0x7f0000000400), 0x80001, 0x0) ioctl$auto(r1, 0x3b8e, r0) r2 = openat$auto_rng_chrdev_ops_core(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) writev$auto(0xffffffffffffffff, &(0x7f00000010c0)={&(0x7f0000001080)="3e9e6579c305df845f3a59e6d3d30a85262e8e557131a58bac55d639", 0x6}, 0x4) read$auto_rng_chrdev_ops_core(r2, &(0x7f0000000040)=""/4096, 0xfffffe82) 503.230024ms ago: executing program 9 (id=5809): r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) ioctl$auto_SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000140)) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x801) sendmmsg$auto(0x3, 0x0, 0x3, 0x0) ioctl$auto(0xffffffffffffffff, 0x40081271, 0xffffffffffffffff) read$auto_proc_reg_file_ops_compat_inode(0xffffffffffffffff, 0x0, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) read$auto_snd_pcm_oss_f_reg_pcm_oss(r0, &(0x7f0000000000)=""/36, 0x24) write$auto(0xffffffffffffffff, 0x0, 0x9) capget$auto(0x0, 0x0) 0s ago: executing program 6 (id=5810): mlockall$auto(0x7) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x100) socket(0x840000000002, 0x3, 0xff) connect$auto(0x3, &(0x7f00000000c0)=@in={0x2, 0x0, @local}, 0x55) r0 = getpid() r1 = gettid() r2 = open(&(0x7f0000000000)='./file0\x00', 0x4242, 0xe1d2b27bdc14aab4) flock$auto(r2, 0x1) r3 = open(&(0x7f0000000040)='./file0\x00', 0x4242, 0x40) flock$auto(r3, 0x2) rt_tgsigqueueinfo$auto(r0, r1, 0x21, &(0x7f0000000400)={@siginfo_0_0={0x3, 0x1c51, 0xfffffffe, @_kill={r0}}}) close_range$auto(0x2, 0x8, 0x0) kernel console output (not intermixed with test programs): 1 48 [ 1379.549437][T30103] RSP: 002b:00007f0055894ef8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1379.549456][T30103] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f005499c799 [ 1379.549468][T30103] RDX: 00007f0055894f10 RSI: 0000000000000058 RDI: 00007f0055894f10 [ 1379.549480][T30103] RBP: 00007f0054a32c99 R08: 0000000000000000 R09: 0000000000000058 [ 1379.549492][T30103] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1379.549503][T30103] R13: 00007f0054c16128 R14: 00007f0054c16090 R15: 00007ffd167f4f48 [ 1379.549528][T30103] [ 1379.549693][T30103] syz.5.5317: vmalloc error: size 32768, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1379.549754][T30103] CPU: 1 UID: 0 PID: 30103 Comm: syz.5.5317 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 1379.549782][T30103] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 1379.549791][T30103] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1379.549802][T30103] Call Trace: [ 1379.549809][T30103] [ 1379.549816][T30103] dump_stack_lvl+0x100/0x190 [ 1379.549845][T30103] warn_alloc.cold+0x95/0x1c1 [ 1379.549877][T30103] ? __pfx_warn_alloc+0x10/0x10 [ 1379.549903][T30103] ? lockdep_hardirqs_on+0x78/0x100 [ 1379.549932][T30103] ? __get_vm_area_node+0x2c5/0x330 [ 1379.549958][T30103] ? __get_vm_area_node+0x208/0x330 [ 1379.549985][T30103] __vmalloc_node_range_noprof+0xbf4/0x1530 [ 1379.550009][T30103] ? find_held_lock+0x2b/0x80 [ 1379.550027][T30103] ? local_lock_release+0x99/0x130 [ 1379.550049][T30103] ? local_lock_release+0x99/0x130 [ 1379.550074][T30103] ? kernel_clone+0xfc/0x9a0 [ 1379.550096][T30103] ? find_held_lock+0x2b/0x80 [ 1379.550113][T30103] ? rcu_read_unlock+0x17/0x60 [ 1379.550142][T30103] ? rcu_read_unlock+0x17/0x60 [ 1379.550163][T30103] ? obj_cgroup_charge_account+0x46d/0x640 [ 1379.550185][T30103] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1379.550210][T30103] ? __memcg_slab_post_alloc_hook+0x51b/0x990 [ 1379.550236][T30103] ? rcu_is_watching+0x12/0xc0 [ 1379.550264][T30103] ? trace_kmem_cache_alloc+0xf3/0x120 [ 1379.550287][T30103] ? kernel_clone+0xfc/0x9a0 [ 1379.550308][T30103] __vmalloc_node_noprof+0xad/0xf0 [ 1379.550332][T30103] ? kernel_clone+0xfc/0x9a0 [ 1379.550357][T30103] copy_process+0x5ec/0x7a40 [ 1379.550378][T30103] ? futex_unqueue+0x133/0x2c0 [ 1379.550412][T30103] ? __pfx_copy_process+0x10/0x10 [ 1379.550440][T30103] ? _copy_from_user+0x59/0xd0 [ 1379.550465][T30103] kernel_clone+0xfc/0x9a0 [ 1379.550489][T30103] ? __pfx_kernel_clone+0x10/0x10 [ 1379.550517][T30103] ? __pfx_futex_wait+0x10/0x10 [ 1379.550552][T30103] __do_sys_clone3+0x214/0x290 [ 1379.550575][T30103] ? __pfx___do_sys_clone3+0x10/0x10 [ 1379.550625][T30103] do_syscall_64+0x106/0xf80 [ 1379.550652][T30103] ? clear_bhb_loop+0x40/0x90 [ 1379.550674][T30103] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1379.550694][T30103] RIP: 0033:0x7f005499c799 [ 1379.550709][T30103] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1379.550726][T30103] RSP: 002b:00007f0055894ef8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1379.550742][T30103] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f005499c799 [ 1379.550754][T30103] RDX: 00007f0055894f10 RSI: 0000000000000058 RDI: 00007f0055894f10 [ 1379.550765][T30103] RBP: 00007f0054a32c99 R08: 0000000000000000 R09: 0000000000000058 [ 1379.550776][T30103] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1379.550787][T30103] R13: 00007f0054c16128 R14: 00007f0054c16090 R15: 00007ffd167f4f48 [ 1379.550810][T30103] [ 1379.550816][T30103] Mem-Info: [ 1379.550825][T30103] active_anon:33417 inactive_anon:0 isolated_anon:0 [ 1379.550825][T30103] active_file:9185 inactive_file:50442 isolated_file:0 [ 1379.550825][T30103] unevictable:768 dirty:694 writeback:250 [ 1379.550825][T30103] slab_reclaimable:12573 slab_unreclaimable:120303 [ 1379.550825][T30103] mapped:34961 shmem:12682 pagetables:1480 [ 1379.550825][T30103] sec_pagetables:0 bounce:0 [ 1379.550825][T30103] kernel_misc_reclaimable:0 [ 1379.550825][T30103] free:1249093 free_pcp:10893 free_cma:0 [ 1379.550870][T30103] Node 0 active_anon:133668kB inactive_anon:0kB active_file:36740kB inactive_file:201608kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:107056kB dirty:2776kB writeback:1000kB shmem:49192kB shmem_thp:8192kB shmem_pmdmapped:0kB anon_thp:57344kB kernel_stack:12532kB pagetables:5772kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1379.550915][T30103] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:160kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:32788kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:148kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1379.550956][T30103] Node 0 DMA free:11264kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1379.551007][T30103] lowmem_reserve[]: 0 2477 2478 2478 2478 [ 1379.551046][T30103] Node 0 DMA32 free:1113280kB boost:0kB min:34304kB low:42880kB high:51456kB reserved_highatomic:0KB free_highatomic:0KB active_anon:133668kB inactive_anon:0kB active_file:36740kB inactive_file:201608kB unevictable:1536kB writepending:3776kB zspages:0kB present:3129332kB managed:2537340kB mlocked:0kB bounce:0kB free_pcp:43572kB local_pcp:23352kB free_cma:0kB [ 1379.551101][T30103] lowmem_reserve[]: 0 0 1 1 1 [ 1379.551144][T30103] Node 0 Normal free:12kB boost:0kB min:12kB low:12kB high:12kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1056kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1379.551194][T30103] lowmem_reserve[]: 0 0 0 0 0 [ 1379.551229][T30103] Node 1 Normal free:3871816kB boost:0kB min:55584kB low:69480kB high:83376kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:160kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1379.551280][T30103] lowmem_reserve[]: 0 0 0 0 0 [ 1379.551316][T30103] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 2*4096kB (UM) = 11264kB [ 1379.551434][T30103] Node 0 DMA32: 2196*4kB (UME) 5994*8kB (UME) 4518*16kB (UME) 325*32kB (UME) 165*64kB (UME) 555*128kB (UME) 669*256kB (UME) 336*512kB (UME) 286*1024kB (UME) 21*2048kB (UM) 52*4096kB (UM) = 1113184kB [ 1379.551624][T30103] Node 0 Normal: 1*4kB (U) 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 1379.551737][T30103] Node 1 Normal: 4*4kB (UM) 17*8kB (UM) 11*16kB (UM) 10*32kB (UM) 9*64kB (UM) 9*128kB (UM) 7*256kB (UM) 4*512kB (UM) 3*1024kB (UM) 2*2048kB (U) 942*4096kB (UM) = 3871816kB [ 1379.551891][T30103] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1379.551906][T30103] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1379.551921][T30103] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1379.551936][T30103] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1379.551951][T30103] 72308 total pagecache pages [ 1379.551959][T30103] 3 pages in swap cache [ 1379.551966][T30103] Free swap = 124984kB [ 1379.551974][T30103] Total swap = 124996kB [ 1379.551982][T30103] 2097051 pages RAM [ 1379.551989][T30103] 0 pages HighMem/MovableOnly [ 1379.551997][T30103] 430837 pages reserved [ 1379.552004][T30103] 0 pages cma reserved [ 1380.672658][T30109] netlink: 330 bytes leftover after parsing attributes in process `syz.4.5320'. [ 1382.742903][T30151] usb usb21: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1383.624149][T25399] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1383.650920][T25399] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1383.667824][T25399] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1383.676012][T25399] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1383.683663][T25399] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1384.519215][T30158] chnl_net:caif_netlink_parms(): no params data found [ 1384.890166][T30158] bridge0: port 1(bridge_slave_0) entered blocking state [ 1384.930830][T30158] bridge0: port 1(bridge_slave_0) entered disabled state [ 1384.966236][T30158] bridge_slave_0: entered allmulticast mode [ 1384.985832][T30158] bridge_slave_0: entered promiscuous mode [ 1385.027232][T30158] bridge0: port 2(bridge_slave_1) entered blocking state [ 1385.069442][T30158] bridge0: port 2(bridge_slave_1) entered disabled state [ 1385.086901][T30158] bridge_slave_1: entered allmulticast mode [ 1385.094318][T30158] bridge_slave_1: entered promiscuous mode [ 1385.141348][T30190] ubi0: attaching mtd0 [ 1385.168820][T30190] ubi0: scanning is finished [ 1385.190171][T30158] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1385.199831][T30190] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 1385.224503][T30158] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1385.356148][T30158] team0: Port device team_slave_0 added [ 1385.379232][T30190] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 1385.389623][T30158] team0: Port device team_slave_1 added [ 1385.583848][T30158] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1385.614676][T30158] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1385.708141][T25399] Bluetooth: hci3: command tx timeout [ 1385.725089][T30158] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1385.894072][T30158] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1385.913892][T30158] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1385.941487][T30158] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1386.051639][T30158] hsr_slave_0: entered promiscuous mode [ 1386.067147][T30158] hsr_slave_1: entered promiscuous mode [ 1386.073459][T30158] debugfs: 'hsr0' already exists in 'hsr' [ 1386.082361][T30158] Cannot create hsr debugfs directory [ 1386.325281][T30208] FAULT_INJECTION: forcing a failure. [ 1386.325281][T30208] name failslab, interval 1, probability 0, space 0, times 0 [ 1386.356823][T30208] CPU: 0 UID: 0 PID: 30208 Comm: syz.5.5345 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 1386.356873][T30208] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 1386.356886][T30208] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1386.356897][T30208] Call Trace: [ 1386.356904][T30208] [ 1386.356912][T30208] dump_stack_lvl+0x100/0x190 [ 1386.356945][T30208] should_fail_ex.cold+0x5/0xa [ 1386.356968][T30208] should_failslab+0xc2/0x120 [ 1386.356992][T30208] __kmalloc_cache_noprof+0x7a/0x6f0 [ 1386.357022][T30208] ? proc_thread_self_get_link+0x1a6/0x210 [ 1386.357059][T30208] proc_thread_self_get_link+0x1a6/0x210 [ 1386.357090][T30208] pick_link+0xac2/0x13c0 [ 1386.357118][T30208] ? __pfx_proc_thread_self_get_link+0x10/0x10 [ 1386.357151][T30208] step_into_slowpath+0x9ba/0xf90 [ 1386.357192][T30208] ? __pfx_step_into_slowpath+0x10/0x10 [ 1386.357226][T30208] ? lookup_fast+0x2da/0x600 [ 1386.357252][T30208] ? inode_permission+0x374/0x620 [ 1386.357280][T30208] link_path_walk+0xf28/0x1cc0 [ 1386.357318][T30208] path_openat+0x1be/0x31a0 [ 1386.357338][T30208] ? kasan_save_stack+0x3f/0x50 [ 1386.357367][T30208] ? kasan_save_stack+0x30/0x50 [ 1386.357395][T30208] ? kasan_save_track+0x14/0x30 [ 1386.357412][T30208] ? kmem_cache_alloc_noprof+0x241/0x6e0 [ 1386.357447][T30208] ? __pfx_path_openat+0x10/0x10 [ 1386.357476][T30208] do_file_open+0x20e/0x430 [ 1386.357499][T30208] ? __pfx_do_file_open+0x10/0x10 [ 1386.357537][T30208] ? alloc_fd+0x476/0x790 [ 1386.357559][T30208] ? do_getname+0x191/0x390 [ 1386.357586][T30208] do_sys_openat2+0x10d/0x1e0 [ 1386.357612][T30208] ? __pfx_do_sys_openat2+0x10/0x10 [ 1386.357648][T30208] __x64_sys_openat+0x12d/0x210 [ 1386.357677][T30208] ? __pfx___x64_sys_openat+0x10/0x10 [ 1386.357712][T30208] do_syscall_64+0x106/0xf80 [ 1386.357739][T30208] ? clear_bhb_loop+0x40/0x90 [ 1386.357762][T30208] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1386.357781][T30208] RIP: 0033:0x7f005495cfce [ 1386.357797][T30208] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1386.357815][T30208] RSP: 002b:00007f0055894f98 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1386.357833][T30208] RAX: ffffffffffffffda RBX: 00007f00558956c0 RCX: 00007f005495cfce [ 1386.357845][T30208] RDX: 0000000000000002 RSI: 00007f0054a325a0 RDI: ffffffffffffff9c [ 1386.357856][T30208] RBP: 00007f0054a32c99 R08: 0000000000000000 R09: 0000000000000000 [ 1386.357867][T30208] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1386.357878][T30208] R13: 00007f0054c16128 R14: 00007f0054c16090 R15: 00007ffd167f4f48 [ 1386.357901][T30208] [ 1386.368051][T30208] FAULT_INJECTION: forcing a failure. [ 1386.368051][T30208] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1386.646435][T30208] CPU: 1 UID: 0 PID: 30208 Comm: syz.5.5345 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 1386.646488][T30208] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 1386.646502][T30208] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1386.646520][T30208] Call Trace: [ 1386.646530][T30208] [ 1386.646542][T30208] dump_stack_lvl+0x100/0x190 [ 1386.646595][T30208] should_fail_ex.cold+0x5/0xa [ 1386.646633][T30208] _copy_from_user+0x2e/0xd0 [ 1386.646673][T30208] copy_clone_args_from_user+0x152/0x7d0 [ 1386.646709][T30208] ? find_held_lock+0x2b/0x80 [ 1386.646740][T30208] ? get_pid_task+0xfc/0x250 [ 1386.646777][T30208] ? get_pid_task+0xfc/0x250 [ 1386.646816][T30208] ? __pfx_copy_clone_args_from_user+0x10/0x10 [ 1386.646860][T30208] ? find_held_lock+0x2b/0x80 [ 1386.646900][T30208] __do_sys_clone3+0xbf/0x290 [ 1386.646938][T30208] ? __pfx___do_sys_clone3+0x10/0x10 [ 1386.647007][T30208] ? __fget_files+0x21f/0x3d0 [ 1386.647068][T30208] do_syscall_64+0x106/0xf80 [ 1386.647112][T30208] ? clear_bhb_loop+0x40/0x90 [ 1386.647151][T30208] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1386.647182][T30208] RIP: 0033:0x7f005499c799 [ 1386.647208][T30208] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1386.647236][T30208] RSP: 002b:00007f0055894ef8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1386.647265][T30208] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f005499c799 [ 1386.647285][T30208] RDX: 00007f0055894f10 RSI: 0000000000000058 RDI: 00007f0055894f10 [ 1386.647304][T30208] RBP: 00007f0055895090 R08: 0000000000000000 R09: 0000000000000058 [ 1386.647322][T30208] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1386.647340][T30208] R13: 00007f0054c16128 R14: 00007f0054c16090 R15: 00007ffd167f4f48 [ 1386.647382][T30208] [ 1386.845142][T30158] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1386.857378][T30158] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1386.866688][T30158] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1386.959631][T30220] netlink: 330 bytes leftover after parsing attributes in process `syz.6.5349'. [ 1386.965494][T30158] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1386.981754][T30221] usb usb21: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1387.263506][T30158] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1387.312036][T30158] 8021q: adding VLAN 0 to HW filter on device team0 [ 1387.550482][T21827] bridge0: port 1(bridge_slave_0) entered blocking state [ 1387.557694][T21827] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1387.610158][T21827] bridge0: port 2(bridge_slave_1) entered blocking state [ 1387.617330][T21827] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1387.786949][T25399] Bluetooth: hci3: command tx timeout [ 1388.263436][T30158] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1389.150080][T30158] veth0_vlan: entered promiscuous mode [ 1389.177696][T30158] veth1_vlan: entered promiscuous mode [ 1389.289542][T30158] veth0_macvtap: entered promiscuous mode [ 1389.349857][T30158] veth1_macvtap: entered promiscuous mode [ 1389.447956][T30158] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1389.499269][T30158] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1389.562310][T21827] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1389.609437][T21827] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1389.641541][T21827] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1389.665281][T21827] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1389.866622][T25399] Bluetooth: hci3: command tx timeout [ 1390.202142][T21827] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1390.228147][T21827] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1390.420376][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1390.438215][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1390.743901][T30292] usb usb21: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1391.947679][T25399] Bluetooth: hci3: command tx timeout [ 1394.205964][T30379] FAULT_INJECTION: forcing a failure. [ 1394.205964][T30379] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1394.206002][T30379] CPU: 0 UID: 0 PID: 30379 Comm: syz.8.5379 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 1394.206033][T30379] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 1394.206042][T30379] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1394.206053][T30379] Call Trace: [ 1394.206060][T30379] [ 1394.206068][T30379] dump_stack_lvl+0x100/0x190 [ 1394.206103][T30379] should_fail_ex.cold+0x5/0xa [ 1394.206124][T30379] ? prepare_alloc_pages+0x16d/0x5f0 [ 1394.206150][T30379] should_fail_alloc_page+0xeb/0x140 [ 1394.206173][T30379] prepare_alloc_pages+0x1f0/0x5f0 [ 1394.206199][T30379] __alloc_frozen_pages_noprof+0x19a/0x2ba0 [ 1394.206232][T30379] ? rcu_is_watching+0x12/0xc0 [ 1394.206261][T30379] ? trace_mm_page_alloc+0x17a/0x1d0 [ 1394.206284][T30379] ? __alloc_frozen_pages_noprof+0x2b1/0x2ba0 [ 1394.206317][T30379] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1394.206351][T30379] ? find_held_lock+0x2b/0x80 [ 1394.206369][T30379] ? is_bpf_text_address+0x8a/0x1a0 [ 1394.206399][T30379] ? is_bpf_text_address+0x8a/0x1a0 [ 1394.206430][T30379] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1394.206452][T30379] ? is_bpf_text_address+0x94/0x1a0 [ 1394.206491][T30379] ? kernel_text_address+0x8d/0x100 [ 1394.206519][T30379] ? __kernel_text_address+0xd/0x30 [ 1394.206548][T30379] ? unwind_get_return_address+0x59/0xa0 [ 1394.206575][T30379] alloc_pages_bulk_noprof+0x782/0x1490 [ 1394.206614][T30379] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 1394.206647][T30379] ? kasan_save_stack+0x30/0x50 [ 1394.206682][T30379] ? alloc_pages_noprof+0x233/0x390 [ 1394.206706][T30379] __kasan_populate_vmalloc+0xf0/0x210 [ 1394.206740][T30379] alloc_vmap_area+0x95d/0x2bd0 [ 1394.206769][T30379] ? __pfx_alloc_vmap_area+0x10/0x10 [ 1394.206795][T30379] __get_vm_area_node+0x1ca/0x330 [ 1394.206821][T30379] __vmalloc_node_range_noprof+0x213/0x1530 [ 1394.206846][T30379] ? kernel_clone+0xfc/0x9a0 [ 1394.206866][T30379] ? find_held_lock+0x2b/0x80 [ 1394.206883][T30379] ? local_lock_release+0x99/0x130 [ 1394.206905][T30379] ? local_lock_release+0x99/0x130 [ 1394.206930][T30379] ? kernel_clone+0xfc/0x9a0 [ 1394.206953][T30379] ? find_held_lock+0x2b/0x80 [ 1394.206970][T30379] ? rcu_read_unlock+0x17/0x60 [ 1394.206991][T30379] ? rcu_read_unlock+0x17/0x60 [ 1394.207011][T30379] ? obj_cgroup_charge_account+0x46d/0x640 [ 1394.207033][T30379] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1394.207060][T30379] ? __memcg_slab_post_alloc_hook+0x51b/0x990 [ 1394.207086][T30379] ? rcu_is_watching+0x12/0xc0 [ 1394.207114][T30379] ? trace_kmem_cache_alloc+0xf3/0x120 [ 1394.207137][T30379] ? kernel_clone+0xfc/0x9a0 [ 1394.207158][T30379] __vmalloc_node_noprof+0xad/0xf0 [ 1394.207181][T30379] ? kernel_clone+0xfc/0x9a0 [ 1394.207206][T30379] copy_process+0x5ec/0x7a40 [ 1394.207226][T30379] ? futex_unqueue+0x133/0x2c0 [ 1394.207259][T30379] ? __pfx_copy_process+0x10/0x10 [ 1394.207287][T30379] ? _copy_from_user+0x59/0xd0 [ 1394.207313][T30379] kernel_clone+0xfc/0x9a0 [ 1394.207337][T30379] ? __pfx_kernel_clone+0x10/0x10 [ 1394.207364][T30379] ? __pfx_futex_wait+0x10/0x10 [ 1394.207398][T30379] __do_sys_clone3+0x214/0x290 [ 1394.207421][T30379] ? __pfx___do_sys_clone3+0x10/0x10 [ 1394.207481][T30379] do_syscall_64+0x106/0xf80 [ 1394.207509][T30379] ? clear_bhb_loop+0x40/0x90 [ 1394.207533][T30379] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1394.207553][T30379] RIP: 0033:0x7fbdfa39c799 [ 1394.207570][T30379] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1394.207588][T30379] RSP: 002b:00007fbdf85d4ef8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1394.207606][T30379] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007fbdfa39c799 [ 1394.207618][T30379] RDX: 00007fbdf85d4f10 RSI: 0000000000000058 RDI: 00007fbdf85d4f10 [ 1394.207630][T30379] RBP: 00007fbdfa432c99 R08: 0000000000000000 R09: 0000000000000058 [ 1394.207641][T30379] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1394.207653][T30379] R13: 00007fbdfa616128 R14: 00007fbdfa616090 R15: 00007ffe85dec918 [ 1394.207677][T30379] [ 1394.207735][T30379] syz.8.5379: vmalloc error: size 32768, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1394.207795][T30379] CPU: 0 UID: 0 PID: 30379 Comm: syz.8.5379 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 1394.207824][T30379] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 1394.207834][T30379] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1394.207845][T30379] Call Trace: [ 1394.207851][T30379] [ 1394.207859][T30379] dump_stack_lvl+0x100/0x190 [ 1394.207888][T30379] warn_alloc.cold+0x95/0x1c1 [ 1394.207920][T30379] ? __pfx_warn_alloc+0x10/0x10 [ 1394.207947][T30379] ? lockdep_hardirqs_on+0x78/0x100 [ 1394.207976][T30379] ? __get_vm_area_node+0x2c5/0x330 [ 1394.208002][T30379] ? __get_vm_area_node+0x208/0x330 [ 1394.208028][T30379] __vmalloc_node_range_noprof+0xbf4/0x1530 [ 1394.208052][T30379] ? find_held_lock+0x2b/0x80 [ 1394.208069][T30379] ? local_lock_release+0x99/0x130 [ 1394.208091][T30379] ? local_lock_release+0x99/0x130 [ 1394.208116][T30379] ? kernel_clone+0xfc/0x9a0 [ 1394.208139][T30379] ? find_held_lock+0x2b/0x80 [ 1394.208156][T30379] ? rcu_read_unlock+0x17/0x60 [ 1394.208177][T30379] ? rcu_read_unlock+0x17/0x60 [ 1394.208198][T30379] ? obj_cgroup_charge_account+0x46d/0x640 [ 1394.208221][T30379] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1394.208247][T30379] ? __memcg_slab_post_alloc_hook+0x51b/0x990 [ 1394.208273][T30379] ? rcu_is_watching+0x12/0xc0 [ 1394.208301][T30379] ? trace_kmem_cache_alloc+0xf3/0x120 [ 1394.208323][T30379] ? kernel_clone+0xfc/0x9a0 [ 1394.208343][T30379] __vmalloc_node_noprof+0xad/0xf0 [ 1394.208366][T30379] ? kernel_clone+0xfc/0x9a0 [ 1394.208390][T30379] copy_process+0x5ec/0x7a40 [ 1394.208411][T30379] ? futex_unqueue+0x133/0x2c0 [ 1394.208444][T30379] ? __pfx_copy_process+0x10/0x10 [ 1394.208480][T30379] ? _copy_from_user+0x59/0xd0 [ 1394.208504][T30379] kernel_clone+0xfc/0x9a0 [ 1394.208528][T30379] ? __pfx_kernel_clone+0x10/0x10 [ 1394.208555][T30379] ? __pfx_futex_wait+0x10/0x10 [ 1394.208589][T30379] __do_sys_clone3+0x214/0x290 [ 1394.208613][T30379] ? __pfx___do_sys_clone3+0x10/0x10 [ 1394.208665][T30379] do_syscall_64+0x106/0xf80 [ 1394.208693][T30379] ? clear_bhb_loop+0x40/0x90 [ 1394.208716][T30379] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1394.208735][T30379] RIP: 0033:0x7fbdfa39c799 [ 1394.208750][T30379] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1394.208767][T30379] RSP: 002b:00007fbdf85d4ef8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1394.208784][T30379] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007fbdfa39c799 [ 1394.208795][T30379] RDX: 00007fbdf85d4f10 RSI: 0000000000000058 RDI: 00007fbdf85d4f10 [ 1394.208806][T30379] RBP: 00007fbdfa432c99 R08: 0000000000000000 R09: 0000000000000058 [ 1394.208818][T30379] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1394.208828][T30379] R13: 00007fbdfa616128 R14: 00007fbdfa616090 R15: 00007ffe85dec918 [ 1394.208851][T30379] [ 1394.208857][T30379] Mem-Info: [ 1394.208866][T30379] active_anon:35012 inactive_anon:0 isolated_anon:0 [ 1394.208866][T30379] active_file:9174 inactive_file:50264 isolated_file:0 [ 1394.208866][T30379] unevictable:768 dirty:324 writeback:0 [ 1394.208866][T30379] slab_reclaimable:12711 slab_unreclaimable:124266 [ 1394.208866][T30379] mapped:43450 shmem:13943 pagetables:1545 [ 1394.208866][T30379] sec_pagetables:0 bounce:0 [ 1394.208866][T30379] kernel_misc_reclaimable:0 [ 1394.208866][T30379] free:1231372 free_pcp:10682 free_cma:0 [ 1394.208916][T30379] Node 0 active_anon:140048kB inactive_anon:0kB active_file:36696kB inactive_file:200896kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:137012kB dirty:1296kB writeback:0kB shmem:54236kB shmem_thp:8192kB shmem_pmdmapped:0kB anon_thp:59392kB kernel_stack:12876kB pagetables:6032kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1394.208961][T30379] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:160kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:36788kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:148kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1394.209003][T30379] Node 0 DMA free:11264kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1394.209056][T30379] lowmem_reserve[]: 0 2477 2478 2478 2478 [ 1394.209094][T30379] Node 0 DMA32 free:1042396kB boost:0kB min:34304kB low:42880kB high:51456kB reserved_highatomic:0KB free_highatomic:0KB active_anon:140048kB inactive_anon:0kB active_file:36696kB inactive_file:200896kB unevictable:1536kB writepending:1296kB zspages:0kB present:3129332kB managed:2537340kB mlocked:0kB bounce:0kB free_pcp:42728kB local_pcp:17684kB free_cma:0kB [ 1394.209149][T30379] lowmem_reserve[]: 0 0 1 1 1 [ 1394.209184][T30379] Node 0 Normal free:12kB boost:0kB min:12kB low:12kB high:12kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1056kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1394.209234][T30379] lowmem_reserve[]: 0 0 0 0 0 [ 1394.209268][T30379] Node 1 Normal free:3871816kB boost:0kB min:55584kB low:69480kB high:83376kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:160kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1394.209341][T30379] lowmem_reserve[]: 0 0 0 0 0 [ 1394.209445][T30379] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 2*4096kB (UM) = 11264kB [ 1394.209569][T30379] Node 0 DMA32: 1045*4kB (UME) 5755*8kB (UME) 4385*16kB (UME) 225*32kB (UM) 99*64kB (UME) 525*128kB (UME) 650*256kB (UME) 334*512kB (UME) 288*1024kB (UME) 18*2048kB (UM) 42*4096kB (UM) = 1042332kB [ 1394.209731][T30379] Node 0 Normal: 1*4kB (U) 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 1394.209842][T30379] Node 1 Normal: 4*4kB (UM) 17*8kB (UM) 11*16kB (UM) 10*32kB (UM) 9*64kB (UM) 9*128kB (UM) 7*256kB (UM) 4*512kB (UM) 3*1024kB (UM) 2*2048kB (U) 942*4096kB (UM) = 3871816kB [ 1394.209996][T30379] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1394.210011][T30379] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1394.210025][T30379] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1394.210040][T30379] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1394.210055][T30379] 73380 total pagecache pages [ 1394.210062][T30379] 3 pages in swap cache [ 1394.210069][T30379] Free swap = 122908kB [ 1394.210077][T30379] Total swap = 124996kB [ 1394.210085][T30379] 2097051 pages RAM [ 1394.210092][T30379] 0 pages HighMem/MovableOnly [ 1394.210099][T30379] 430837 pages reserved [ 1394.210106][T30379] 0 pages cma reserved [ 1395.332546][T30400] usb usb21: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1398.747411][T30428] ubi0: attaching mtd0 [ 1398.762303][T30428] ubi0: scanning is finished [ 1398.777058][T30428] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 1399.004234][T30428] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 1400.768627][T30460] FAULT_INJECTION: forcing a failure. [ 1400.768627][T30460] name failslab, interval 1, probability 0, space 0, times 0 [ 1400.826947][T30460] CPU: 0 UID: 0 PID: 30460 Comm: syz.5.5396 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 1400.826982][T30460] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 1400.826991][T30460] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1400.827002][T30460] Call Trace: [ 1400.827009][T30460] [ 1400.827016][T30460] dump_stack_lvl+0x100/0x190 [ 1400.827049][T30460] should_fail_ex.cold+0x5/0xa [ 1400.827072][T30460] ? tomoyo_realpath_from_path+0xb6/0x690 [ 1400.827099][T30460] should_failslab+0xc2/0x120 [ 1400.827120][T30460] __kmalloc_noprof+0xe0/0x850 [ 1400.827152][T30460] tomoyo_realpath_from_path+0xb6/0x690 [ 1400.827183][T30460] tomoyo_path_number_perm+0x23c/0x580 [ 1400.827203][T30460] ? tomoyo_path_number_perm+0x22e/0x580 [ 1400.827226][T30460] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1400.827278][T30460] ? find_held_lock+0x2b/0x80 [ 1400.827296][T30460] ? __fget_files+0x215/0x3d0 [ 1400.827313][T30460] ? hook_file_ioctl_common+0x146/0x410 [ 1400.827340][T30460] ? __fget_files+0x21f/0x3d0 [ 1400.827361][T30460] security_file_ioctl+0xd3/0x230 [ 1400.827386][T30460] __x64_sys_ioctl+0xb7/0x210 [ 1400.827414][T30460] do_syscall_64+0x106/0xf80 [ 1400.827442][T30460] ? clear_bhb_loop+0x40/0x90 [ 1400.827464][T30460] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1400.827483][T30460] RIP: 0033:0x7f005499c799 [ 1400.827498][T30460] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1400.827515][T30460] RSP: 002b:00007f00558b6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1400.827534][T30460] RAX: ffffffffffffffda RBX: 00007f0054c15fa0 RCX: 00007f005499c799 [ 1400.827545][T30460] RDX: 0000000000000024 RSI: 0000000000008919 RDI: 0000000000000002 [ 1400.827556][T30460] RBP: 00007f00558b6090 R08: 0000000000000000 R09: 0000000000000000 [ 1400.827567][T30460] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1400.827577][T30460] R13: 00007f0054c16038 R14: 00007f0054c15fa0 R15: 00007ffd167f4f48 [ 1400.827600][T30460] [ 1400.827608][T30460] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1402.709014][T30499] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5405'. [ 1402.747776][T30499] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !PjE ûrõ£Ò„yù*›"¤l-ý¤ôy–ú„ [ 1405.588523][T30554] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5418'. [ 1405.685389][T30554] debugfs: '!PjE ûrõ£Ò„yù*›"¤l-ý¤ôy–ú„L̓÷B‡0Ó' already exists in 'ieee80211' [ 1406.338399][T30569] FAULT_INJECTION: forcing a failure. [ 1406.338399][T30569] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1406.363682][T30569] CPU: 1 UID: 0 PID: 30569 Comm: syz.4.5422 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 1406.363737][T30569] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 1406.363751][T30569] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1406.363770][T30569] Call Trace: [ 1406.363780][T30569] [ 1406.363792][T30569] dump_stack_lvl+0x100/0x190 [ 1406.363844][T30569] should_fail_ex.cold+0x5/0xa [ 1406.363883][T30569] should_fail_futex+0x4c/0x60 [ 1406.363921][T30569] __x64_sys_futex+0x1f0/0x4d0 [ 1406.363964][T30569] ? __pfx___x64_sys_futex+0x10/0x10 [ 1406.364013][T30569] do_syscall_64+0x106/0xf80 [ 1406.364051][T30569] ? clear_bhb_loop+0x40/0x90 [ 1406.364085][T30569] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1406.364113][T30569] RIP: 0033:0x7f715459c799 [ 1406.364147][T30569] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1406.364176][T30569] RSP: 002b:00007ffdbd3c4d28 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1406.364206][T30569] RAX: ffffffffffffffda RBX: 00000000001573e2 RCX: 00007f715459c799 [ 1406.364227][T30569] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f715481609c [ 1406.364246][T30569] RBP: 0000000000000032 R08: 0000000000000000 R09: 0000000000000000 [ 1406.364265][T30569] R10: 00007ffdbd3c4e30 R11: 0000000000000246 R12: 00007ffdbd3c4e50 [ 1406.364285][T30569] R13: 00007f715481609c R14: 0000000000157414 R15: 00007ffdbd3c4e30 [ 1406.364328][T30569] [ 1406.388166][T30573] ubi0: attaching mtd0 [ 1406.552595][T30573] ubi0: scanning is finished [ 1406.552666][T30573] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 1406.755833][T30573] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 1408.072780][T30616] usb usb21: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1409.863230][T30646] netlink: 202 bytes leftover after parsing attributes in process `syz.6.5442'. [ 1411.258174][T30655] ubi0: attaching mtd0 [ 1411.272794][T30655] ubi0: scanning is finished [ 1411.308548][T30655] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 1411.450905][T25399] Bluetooth: hci1: Unexpected cc 0x7c89 with no status [ 1411.538808][T30655] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 1412.060107][T30673] FAULT_INJECTION: forcing a failure. [ 1412.060107][T30673] name failslab, interval 1, probability 0, space 0, times 0 [ 1412.060155][T30673] CPU: 1 UID: 0 PID: 30673 Comm: syz.8.5450 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 1412.060199][T30673] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 1412.060211][T30673] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1412.060226][T30673] Call Trace: [ 1412.060235][T30673] [ 1412.060246][T30673] dump_stack_lvl+0x100/0x190 [ 1412.060294][T30673] should_fail_ex.cold+0x5/0xa [ 1412.060330][T30673] should_failslab+0xc2/0x120 [ 1412.060363][T30673] __kmalloc_cache_noprof+0x7a/0x6f0 [ 1412.060402][T30673] ? proc_thread_self_get_link+0x1a6/0x210 [ 1412.060455][T30673] proc_thread_self_get_link+0x1a6/0x210 [ 1412.060501][T30673] pick_link+0xac2/0x13c0 [ 1412.060543][T30673] ? __pfx_proc_thread_self_get_link+0x10/0x10 [ 1412.060593][T30673] step_into_slowpath+0x9ba/0xf90 [ 1412.060645][T30673] ? __pfx_step_into_slowpath+0x10/0x10 [ 1412.060726][T30673] ? lookup_fast+0x2da/0x600 [ 1412.060766][T30673] ? inode_permission+0x374/0x620 [ 1412.060810][T30673] link_path_walk+0xf28/0x1cc0 [ 1412.060869][T30673] path_openat+0x1be/0x31a0 [ 1412.060898][T30673] ? kasan_save_stack+0x3f/0x50 [ 1412.060943][T30673] ? kasan_save_stack+0x30/0x50 [ 1412.060986][T30673] ? kasan_save_track+0x14/0x30 [ 1412.061011][T30673] ? kmem_cache_alloc_noprof+0x241/0x6e0 [ 1412.061066][T30673] ? __pfx_path_openat+0x10/0x10 [ 1412.061112][T30673] do_file_open+0x20e/0x430 [ 1412.061147][T30673] ? __pfx_do_file_open+0x10/0x10 [ 1412.061207][T30673] ? alloc_fd+0x476/0x790 [ 1412.061241][T30673] ? do_getname+0x191/0x390 [ 1412.061282][T30673] do_sys_openat2+0x10d/0x1e0 [ 1412.061322][T30673] ? __pfx_do_sys_openat2+0x10/0x10 [ 1412.061378][T30673] __x64_sys_openat+0x12d/0x210 [ 1412.061420][T30673] ? __pfx___x64_sys_openat+0x10/0x10 [ 1412.061471][T30673] do_syscall_64+0x106/0xf80 [ 1412.061512][T30673] ? clear_bhb_loop+0x40/0x90 [ 1412.061549][T30673] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1412.061577][T30673] RIP: 0033:0x7fbdfa35cfce [ 1412.061601][T30673] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1412.061631][T30673] RSP: 002b:00007fbdf85d4f98 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1412.061659][T30673] RAX: ffffffffffffffda RBX: 00007fbdf85d56c0 RCX: 00007fbdfa35cfce [ 1412.061680][T30673] RDX: 0000000000000002 RSI: 00007fbdfa4325a0 RDI: ffffffffffffff9c [ 1412.061695][T30673] RBP: 00007fbdfa432c99 R08: 0000000000000000 R09: 0000000000000000 [ 1412.061722][T30673] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1412.061739][T30673] R13: 00007fbdfa616128 R14: 00007fbdfa616090 R15: 00007ffe85dec918 [ 1412.061779][T30673] [ 1412.062261][T30673] FAULT_INJECTION: forcing a failure. [ 1412.062261][T30673] name failslab, interval 1, probability 0, space 0, times 0 [ 1412.062323][T30673] CPU: 1 UID: 0 PID: 30673 Comm: syz.8.5450 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 1412.062370][T30673] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 1412.062384][T30673] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1412.062403][T30673] Call Trace: [ 1412.062413][T30673] [ 1412.062425][T30673] dump_stack_lvl+0x100/0x190 [ 1412.062474][T30673] should_fail_ex.cold+0x5/0xa [ 1412.062510][T30673] ? lsm_blob_alloc+0x68/0x90 [ 1412.062552][T30673] should_failslab+0xc2/0x120 [ 1412.062585][T30673] __kmalloc_noprof+0xe0/0x850 [ 1412.062630][T30673] ? trace_kmem_cache_alloc+0xf3/0x120 [ 1412.062672][T30673] lsm_blob_alloc+0x68/0x90 [ 1412.062724][T30673] security_prepare_creds+0x2d/0x290 [ 1412.062768][T30673] prepare_creds+0x5d6/0x950 [ 1412.062818][T30673] copy_creds+0xa7/0xa50 [ 1412.062869][T30673] copy_process+0x1087/0x7a40 [ 1412.062905][T30673] ? __pfx__kstrtoull+0x10/0x10 [ 1412.062969][T30673] ? __pfx_copy_process+0x10/0x10 [ 1412.063015][T30673] ? _copy_from_user+0x59/0xd0 [ 1412.063055][T30673] kernel_clone+0xfc/0x9a0 [ 1412.063087][T30673] ? get_pid_task+0xfc/0x250 [ 1412.063124][T30673] ? __pfx_kernel_clone+0x10/0x10 [ 1412.063169][T30673] ? find_held_lock+0x2b/0x80 [ 1412.063208][T30673] __do_sys_clone3+0x214/0x290 [ 1412.063243][T30673] ? __pfx___do_sys_clone3+0x10/0x10 [ 1412.063296][T30673] ? __fget_files+0x21f/0x3d0 [ 1412.063357][T30673] do_syscall_64+0x106/0xf80 [ 1412.063401][T30673] ? clear_bhb_loop+0x40/0x90 [ 1412.063435][T30673] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1412.063464][T30673] RIP: 0033:0x7fbdfa39c799 [ 1412.063486][T30673] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1412.063513][T30673] RSP: 002b:00007fbdf85d4ef8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1412.063541][T30673] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007fbdfa39c799 [ 1412.063561][T30673] RDX: 00007fbdf85d4f10 RSI: 0000000000000058 RDI: 00007fbdf85d4f10 [ 1412.063578][T30673] RBP: 00007fbdf85d5090 R08: 0000000000000000 R09: 0000000000000058 [ 1412.063596][T30673] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1412.063613][T30673] R13: 00007fbdfa616128 R14: 00007fbdfa616090 R15: 00007ffe85dec918 [ 1412.063651][T30673] [ 1414.640518][T30724] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1414.669956][T30723] netlink: 338 bytes leftover after parsing attributes in process `syz.8.5463'. [ 1415.004865][T30726] FAULT_INJECTION: forcing a failure. [ 1415.004865][T30726] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1415.040575][T30726] CPU: 0 UID: 0 PID: 30726 Comm: syz.8.5465 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 1415.040619][T30726] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 1415.040628][T30726] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1415.040644][T30726] Call Trace: [ 1415.040652][T30726] [ 1415.040659][T30726] dump_stack_lvl+0x100/0x190 [ 1415.040693][T30726] should_fail_ex.cold+0x5/0xa [ 1415.040716][T30726] _copy_from_user+0x2e/0xd0 [ 1415.040740][T30726] get_user_ifreq+0x77/0x1c0 [ 1415.040763][T30726] inet_ioctl+0x292/0x3f0 [ 1415.040846][T30726] ? __pfx_inet_ioctl+0x10/0x10 [ 1415.040872][T30726] ? tomoyo_path_number_perm+0x46d/0x580 [ 1415.040910][T30726] ? lockdep_hardirqs_on+0x78/0x100 [ 1415.040967][T30726] ? tomoyo_path_number_perm+0x188/0x580 [ 1415.040996][T30726] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1415.041021][T30726] sock_do_ioctl+0x118/0x280 [ 1415.041041][T30726] ? __pfx_sock_do_ioctl+0x10/0x10 [ 1415.041065][T30726] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1415.041100][T30726] sock_ioctl+0x599/0x6b0 [ 1415.041123][T30726] ? __pfx_sock_ioctl+0x10/0x10 [ 1415.041143][T30726] ? hook_file_ioctl_common+0x146/0x410 [ 1415.041169][T30726] ? __fget_files+0x21f/0x3d0 [ 1415.041191][T30726] ? __pfx_sock_ioctl+0x10/0x10 [ 1415.041214][T30726] __x64_sys_ioctl+0x18e/0x210 [ 1415.041249][T30726] do_syscall_64+0x106/0xf80 [ 1415.041276][T30726] ? clear_bhb_loop+0x40/0x90 [ 1415.041299][T30726] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1415.041318][T30726] RIP: 0033:0x7fbdfa39c799 [ 1415.041334][T30726] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1415.041353][T30726] RSP: 002b:00007fbdf85f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1415.041371][T30726] RAX: ffffffffffffffda RBX: 00007fbdfa615fa0 RCX: 00007fbdfa39c799 [ 1415.041383][T30726] RDX: 0000000000000024 RSI: 0000000000008919 RDI: 0000000000000002 [ 1415.041393][T30726] RBP: 00007fbdf85f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1415.041404][T30726] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1415.041414][T30726] R13: 00007fbdfa616038 R14: 00007fbdfa615fa0 R15: 00007ffe85dec918 [ 1415.041437][T30726] [ 1415.456474][T30733] ubi0: attaching mtd0 [ 1415.484630][T30733] ubi0: scanning is finished [ 1415.517156][T30733] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 1415.685696][T30733] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 1416.509745][T30759] FAULT_INJECTION: forcing a failure. [ 1416.509745][T30759] name failslab, interval 1, probability 0, space 0, times 0 [ 1416.529324][T30759] CPU: 1 UID: 0 PID: 30759 Comm: syz.8.5473 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 1416.529380][T30759] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 1416.529394][T30759] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1416.529412][T30759] Call Trace: [ 1416.529423][T30759] [ 1416.529435][T30759] dump_stack_lvl+0x100/0x190 [ 1416.529489][T30759] should_fail_ex.cold+0x5/0xa [ 1416.529525][T30759] ? copy_splice_read+0x1a3/0xb90 [ 1416.529555][T30759] should_failslab+0xc2/0x120 [ 1416.529585][T30759] __kmalloc_noprof+0xe0/0x850 [ 1416.529636][T30759] copy_splice_read+0x1a3/0xb90 [ 1416.529670][T30759] ? pipe_lock+0x69/0x80 [ 1416.529704][T30759] ? __pfx_copy_splice_read+0x10/0x10 [ 1416.529754][T30759] ? __fget_files+0x215/0x3d0 [ 1416.529788][T30759] ? __pfx_copy_splice_read+0x10/0x10 [ 1416.529818][T30759] do_splice_read+0x285/0x370 [ 1416.529854][T30759] splice_file_to_pipe+0x82/0x120 [ 1416.529889][T30759] do_sendfile+0x366/0xe20 [ 1416.529945][T30759] ? __pfx_do_sendfile+0x10/0x10 [ 1416.529992][T30759] ? __fget_files+0x21f/0x3d0 [ 1416.530034][T30759] __x64_sys_sendfile64+0x1d8/0x220 [ 1416.530089][T30759] ? ksys_write+0x1ac/0x250 [ 1416.530118][T30759] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 1416.530173][T30759] do_syscall_64+0x106/0xf80 [ 1416.530218][T30759] ? clear_bhb_loop+0x40/0x90 [ 1416.530256][T30759] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1416.530287][T30759] RIP: 0033:0x7fbdfa39c799 [ 1416.530313][T30759] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1416.530341][T30759] RSP: 002b:00007fbdf85f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1416.530371][T30759] RAX: ffffffffffffffda RBX: 00007fbdfa615fa0 RCX: 00007fbdfa39c799 [ 1416.530391][T30759] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000001 [ 1416.530409][T30759] RBP: 00007fbdf85f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1416.530426][T30759] R10: 000000007ffff000 R11: 0000000000000246 R12: 0000000000000001 [ 1416.530444][T30759] R13: 00007fbdfa616038 R14: 00007fbdfa615fa0 R15: 00007ffe85dec918 [ 1416.530486][T30759] [ 1417.169570][T30770] usb usb21: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1418.462679][T30788] FAULT_INJECTION: forcing a failure. [ 1418.462679][T30788] name failslab, interval 1, probability 0, space 0, times 0 [ 1418.494389][T30788] CPU: 1 UID: 0 PID: 30788 Comm: syz.4.5482 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 1418.494440][T30788] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 1418.494452][T30788] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1418.494469][T30788] Call Trace: [ 1418.494480][T30788] [ 1418.494492][T30788] dump_stack_lvl+0x100/0x190 [ 1418.494536][T30788] should_fail_ex.cold+0x5/0xa [ 1418.494559][T30788] should_failslab+0xc2/0x120 [ 1418.494579][T30788] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1418.494615][T30788] ? dst_alloc+0x99/0x1a0 [ 1418.494734][T30788] ? find_held_lock+0x2b/0x80 [ 1418.494752][T30788] ? ip_check_mc_rcu+0x60e/0x780 [ 1418.494811][T30788] dst_alloc+0x99/0x1a0 [ 1418.494836][T30788] rt_dst_alloc+0x35/0x3a0 [ 1418.494856][T30788] ip_route_output_key_hash_rcu+0x87a/0x2870 [ 1418.494887][T30788] ip_route_output_key_hash+0x118/0x2b0 [ 1418.494911][T30788] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 1418.494934][T30788] ? __pfx___might_resched+0x10/0x10 [ 1418.494967][T30788] ? find_held_lock+0x2b/0x80 [ 1418.494988][T30788] ip_route_output_flow+0x27/0x150 [ 1418.495012][T30788] raw_sendmsg+0xb1d/0x35f0 [ 1418.495056][T30788] ? __pfx_raw_sendmsg+0x10/0x10 [ 1418.495077][T30788] ? __lock_acquire+0x4a5/0x2630 [ 1418.495109][T30788] ? __lock_acquire+0x4a5/0x2630 [ 1418.495153][T30788] ? __import_iovec+0x1d2/0x640 [ 1418.495179][T30788] ? __pfx_raw_sendmsg+0x10/0x10 [ 1418.495201][T30788] inet_sendmsg+0x11c/0x140 [ 1418.495224][T30788] ____sys_sendmsg+0x98d/0xb70 [ 1418.495243][T30788] ? __pfx_inet_sendmsg+0x10/0x10 [ 1418.495265][T30788] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1418.495289][T30788] ? __pfx__kstrtoull+0x10/0x10 [ 1418.495321][T30788] ___sys_sendmsg+0x190/0x1e0 [ 1418.495345][T30788] ? __pfx____sys_sendmsg+0x10/0x10 [ 1418.495377][T30788] ? find_held_lock+0x2b/0x80 [ 1418.495410][T30788] __sys_sendmmsg+0x205/0x430 [ 1418.495440][T30788] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1418.495476][T30788] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1418.495535][T30788] ? fput+0x79/0x100 [ 1418.495569][T30788] ? ksys_write+0x1ac/0x250 [ 1418.495590][T30788] ? __pfx_ksys_write+0x10/0x10 [ 1418.495619][T30788] __x64_sys_sendmmsg+0x9c/0x100 [ 1418.495647][T30788] ? lockdep_hardirqs_on+0x78/0x100 [ 1418.495674][T30788] do_syscall_64+0x106/0xf80 [ 1418.495701][T30788] ? clear_bhb_loop+0x40/0x90 [ 1418.495724][T30788] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1418.495743][T30788] RIP: 0033:0x7f715459c799 [ 1418.495760][T30788] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1418.495778][T30788] RSP: 002b:00007f71553dc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1418.495797][T30788] RAX: ffffffffffffffda RBX: 00007f7154815fa0 RCX: 00007f715459c799 [ 1418.495809][T30788] RDX: 00000000000009a6 RSI: 0000000000000000 RDI: 0000000000000003 [ 1418.495820][T30788] RBP: 00007f71553dc090 R08: 0000000000000000 R09: 0000000000000000 [ 1418.495830][T30788] R10: 000000000000e000 R11: 0000000000000246 R12: 0000000000000001 [ 1418.495841][T30788] R13: 00007f7154816038 R14: 00007f7154815fa0 R15: 00007ffdbd3c4bc8 [ 1418.495864][T30788] [ 1420.181768][T30822] usb usb21: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1421.097698][T30831] FAULT_INJECTION: forcing a failure. [ 1421.097698][T30831] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1421.165923][T30831] CPU: 1 UID: 0 PID: 30831 Comm: syz.8.5491 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 1421.165959][T30831] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 1421.165967][T30831] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1421.165978][T30831] Call Trace: [ 1421.165985][T30831] [ 1421.165992][T30831] dump_stack_lvl+0x100/0x190 [ 1421.166027][T30831] should_fail_ex.cold+0x5/0xa [ 1421.166050][T30831] get_futex_key+0x295/0x1620 [ 1421.166080][T30831] ? __pfx_get_futex_key+0x10/0x10 [ 1421.166101][T30831] ? lock_acquire+0x1cf/0x380 [ 1421.166132][T30831] futex_wake+0xea/0x530 [ 1421.166163][T30831] ? __pfx_futex_wake+0x10/0x10 [ 1421.166191][T30831] ? exit_mm_release+0x19/0x30 [ 1421.166220][T30831] do_futex+0x32b/0x350 [ 1421.166245][T30831] ? __pfx_do_futex+0x10/0x10 [ 1421.166268][T30831] ? __might_fault+0xc5/0x140 [ 1421.166300][T30831] mm_release+0x24a/0x2f0 [ 1421.166320][T30831] do_exit+0x704/0x2b60 [ 1421.166348][T30831] ? __pfx_do_exit+0x10/0x10 [ 1421.166373][T30831] ? do_raw_spin_lock+0x128/0x260 [ 1421.166400][T30831] ? find_held_lock+0x2b/0x80 [ 1421.166417][T30831] ? get_signal+0x7e0/0x21e0 [ 1421.166439][T30831] do_group_exit+0xd5/0x2a0 [ 1421.166466][T30831] get_signal+0x1ec7/0x21e0 [ 1421.166494][T30831] ? __pfx_get_signal+0x10/0x10 [ 1421.166515][T30831] ? do_futex+0x192/0x350 [ 1421.166542][T30831] arch_do_signal_or_restart+0x91/0x770 [ 1421.166575][T30831] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1421.166605][T30831] ? __pfx___x64_sys_futex+0x10/0x10 [ 1421.166635][T30831] exit_to_user_mode_loop+0x86/0x4a0 [ 1421.166662][T30831] do_syscall_64+0x668/0xf80 [ 1421.166690][T30831] ? clear_bhb_loop+0x40/0x90 [ 1421.166712][T30831] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1421.166731][T30831] RIP: 0033:0x7fbdfa39c799 [ 1421.166747][T30831] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1421.166764][T30831] RSP: 002b:00007fbdf85d50e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1421.166783][T30831] RAX: fffffffffffffe00 RBX: 00007fbdfa616098 RCX: 00007fbdfa39c799 [ 1421.166794][T30831] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fbdfa616098 [ 1421.166805][T30831] RBP: 00007fbdfa616090 R08: 0000000000000000 R09: 0000000000000000 [ 1421.166815][T30831] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1421.166826][T30831] R13: 00007fbdfa616128 R14: 00007ffe85dec830 R15: 00007ffe85dec918 [ 1421.166849][T30831] [ 1421.599595][T30837] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5493'. [ 1421.667637][T30842] netlink: 330 bytes leftover after parsing attributes in process `syz.8.5496'. [ 1421.757394][T30842] gretap0: refused to change device tx_queue_len [ 1423.632554][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.639280][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1424.877018][T30909] usb usb21: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1426.577494][T30913] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1426.585102][T30913] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1426.605715][T30913] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1426.623793][T30913] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1426.650699][T30913] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1426.657904][T30913] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1426.690335][T30913] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1426.698256][T30913] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 1426.743083][T30913] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1426.755197][T30913] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1426.789490][T30913] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1427.945728][T25399] Bluetooth: hci4: command 0x0c1a tx timeout [ 1428.586639][T25399] Bluetooth: hci1: command 0x2016 tx timeout [ 1428.665784][T25399] Bluetooth: hci2: command 0x0406 tx timeout [ 1428.765702][T25399] Bluetooth: hci3: command 0x0c1a tx timeout [ 1428.771927][T25399] Bluetooth: hci5: command 0x0406 tx timeout [ 1430.675694][T25399] Bluetooth: hci1: command 0x2016 tx timeout [ 1430.746301][T25399] Bluetooth: hci2: command 0x0406 tx timeout [ 1430.825923][T25399] Bluetooth: hci3: command 0x0c1a tx timeout [ 1430.830253][T18283] Bluetooth: hci5: command 0x0406 tx timeout [ 1432.746085][T18283] Bluetooth: hci1: command 0x2016 tx timeout [ 1432.907528][T18283] Bluetooth: hci3: command 0x0c1a tx timeout [ 1433.596895][T31027] FAULT_INJECTION: forcing a failure. [ 1433.596895][T31027] name failslab, interval 1, probability 0, space 0, times 0 [ 1433.596932][T31027] CPU: 0 UID: 0 PID: 31027 Comm: syz.5.5539 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 1433.596962][T31027] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 1433.596971][T31027] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1433.596983][T31027] Call Trace: [ 1433.596989][T31027] [ 1433.596997][T31027] dump_stack_lvl+0x100/0x190 [ 1433.597031][T31027] should_fail_ex.cold+0x5/0xa [ 1433.597055][T31027] should_failslab+0xc2/0x120 [ 1433.597077][T31027] kmem_cache_alloc_node_noprof+0x81/0x6f0 [ 1433.597108][T31027] ? alloc_vmap_area+0x186c/0x2bd0 [ 1433.597132][T31027] alloc_vmap_area+0x186c/0x2bd0 [ 1433.597161][T31027] ? __pfx_alloc_vmap_area+0x10/0x10 [ 1433.597188][T31027] __get_vm_area_node+0x1ca/0x330 [ 1433.597224][T31027] __vmalloc_node_range_noprof+0x213/0x1530 [ 1433.597249][T31027] ? kernel_clone+0xfc/0x9a0 [ 1433.597271][T31027] ? find_held_lock+0x2b/0x80 [ 1433.597290][T31027] ? local_lock_release+0x99/0x130 [ 1433.597313][T31027] ? local_lock_release+0x99/0x130 [ 1433.597339][T31027] ? kernel_clone+0xfc/0x9a0 [ 1433.597362][T31027] ? find_held_lock+0x2b/0x80 [ 1433.597380][T31027] ? rcu_read_unlock+0x17/0x60 [ 1433.597400][T31027] ? rcu_read_unlock+0x17/0x60 [ 1433.597421][T31027] ? obj_cgroup_charge_account+0x46d/0x640 [ 1433.597444][T31027] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1433.597470][T31027] ? __memcg_slab_post_alloc_hook+0x51b/0x990 [ 1433.597495][T31027] ? rcu_is_watching+0x12/0xc0 [ 1433.597524][T31027] ? trace_kmem_cache_alloc+0xf3/0x120 [ 1433.597547][T31027] ? kernel_clone+0xfc/0x9a0 [ 1433.597568][T31027] __vmalloc_node_noprof+0xad/0xf0 [ 1433.597591][T31027] ? kernel_clone+0xfc/0x9a0 [ 1433.597615][T31027] copy_process+0x5ec/0x7a40 [ 1433.597636][T31027] ? futex_unqueue+0x133/0x2c0 [ 1433.597669][T31027] ? __pfx_copy_process+0x10/0x10 [ 1433.597700][T31027] ? _copy_from_user+0x59/0xd0 [ 1433.597727][T31027] kernel_clone+0xfc/0x9a0 [ 1433.597753][T31027] ? __pfx_kernel_clone+0x10/0x10 [ 1433.597796][T31027] ? __pfx_futex_wait+0x10/0x10 [ 1433.597850][T31027] __do_sys_clone3+0x214/0x290 [ 1433.597885][T31027] ? __pfx___do_sys_clone3+0x10/0x10 [ 1433.597975][T31027] do_syscall_64+0x106/0xf80 [ 1433.598012][T31027] ? clear_bhb_loop+0x40/0x90 [ 1433.598035][T31027] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1433.598055][T31027] RIP: 0033:0x7f005499c799 [ 1433.598072][T31027] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1433.598090][T31027] RSP: 002b:00007f0055894ef8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1433.598118][T31027] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f005499c799 [ 1433.598138][T31027] RDX: 00007f0055894f10 RSI: 0000000000000058 RDI: 00007f0055894f10 [ 1433.598156][T31027] RBP: 00007f0054a32c99 R08: 0000000000000000 R09: 0000000000000058 [ 1433.598176][T31027] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1433.598204][T31027] R13: 00007f0054c16128 R14: 00007f0054c16090 R15: 00007ffd167f4f48 [ 1433.598240][T31027] [ 1436.291460][T31062] usb usb21: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1438.276523][T31088] FAULT_INJECTION: forcing a failure. [ 1438.276523][T31088] name failslab, interval 1, probability 0, space 0, times 0 [ 1438.304228][T31088] CPU: 0 UID: 0 PID: 31088 Comm: syz.8.5557 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 1438.304283][T31088] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 1438.304298][T31088] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1438.304316][T31088] Call Trace: [ 1438.304327][T31088] [ 1438.304339][T31088] dump_stack_lvl+0x100/0x190 [ 1438.304392][T31088] should_fail_ex.cold+0x5/0xa [ 1438.304430][T31088] should_failslab+0xc2/0x120 [ 1438.304465][T31088] __kvmalloc_node_noprof+0xfa/0xa00 [ 1438.304512][T31088] ? seq_read_iter+0x819/0x1270 [ 1438.304570][T31088] seq_read_iter+0x819/0x1270 [ 1438.304618][T31088] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 1438.304681][T31088] kernfs_fop_read_iter+0x46c/0x610 [ 1438.304727][T31088] copy_splice_read+0x4ba/0xb90 [ 1438.304770][T31088] ? __pfx_copy_splice_read+0x10/0x10 [ 1438.304819][T31088] ? __fget_files+0x215/0x3d0 [ 1438.304854][T31088] ? __pfx_copy_splice_read+0x10/0x10 [ 1438.304885][T31088] do_splice_read+0x285/0x370 [ 1438.304921][T31088] splice_file_to_pipe+0x82/0x120 [ 1438.304959][T31088] do_sendfile+0x366/0xe20 [ 1438.305016][T31088] ? __pfx_do_sendfile+0x10/0x10 [ 1438.305064][T31088] ? __fget_files+0x21f/0x3d0 [ 1438.305105][T31088] __x64_sys_sendfile64+0x1d8/0x220 [ 1438.305141][T31088] ? ksys_write+0x1ac/0x250 [ 1438.305170][T31088] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 1438.305228][T31088] do_syscall_64+0x106/0xf80 [ 1438.305273][T31088] ? clear_bhb_loop+0x40/0x90 [ 1438.305312][T31088] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1438.305341][T31088] RIP: 0033:0x7fbdfa39c799 [ 1438.305366][T31088] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1438.305394][T31088] RSP: 002b:00007fbdf85f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1438.305424][T31088] RAX: ffffffffffffffda RBX: 00007fbdfa615fa0 RCX: 00007fbdfa39c799 [ 1438.305444][T31088] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000001 [ 1438.305462][T31088] RBP: 00007fbdf85f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1438.305484][T31088] R10: 000000007ffff000 R11: 0000000000000246 R12: 0000000000000001 [ 1438.305501][T31088] R13: 00007fbdfa616038 R14: 00007fbdfa615fa0 R15: 00007ffe85dec918 [ 1438.305540][T31088] [ 1438.578203][ T30] audit: type=1800 audit(4295007993.402:22): pid=31092 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.5559" name="version" dev="configfs" ino=265312 res=0 errno=0 [ 1439.181374][T31113] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5564'. [ 1439.940044][T31136] usb usb21: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1440.262694][T31140] FAULT_INJECTION: forcing a failure. [ 1440.262694][T31140] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1440.287293][T31140] CPU: 1 UID: 0 PID: 31140 Comm: syz.8.5570 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 1440.287327][T31140] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 1440.287336][T31140] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1440.287346][T31140] Call Trace: [ 1440.287353][T31140] [ 1440.287360][T31140] dump_stack_lvl+0x100/0x190 [ 1440.287393][T31140] should_fail_ex.cold+0x5/0xa [ 1440.287416][T31140] get_futex_key+0x1d2/0x1620 [ 1440.287442][T31140] ? __pfx_get_futex_key+0x10/0x10 [ 1440.287467][T31140] ? irqentry_exit+0x180/0x670 [ 1440.287500][T31140] futex_wake+0xea/0x530 [ 1440.287530][T31140] ? __pfx_futex_wake+0x10/0x10 [ 1440.287559][T31140] ? exit_mm_release+0x19/0x30 [ 1440.287588][T31140] do_futex+0x32b/0x350 [ 1440.287622][T31140] ? __pfx_do_futex+0x10/0x10 [ 1440.287645][T31140] ? __might_fault+0xc5/0x140 [ 1440.287678][T31140] mm_release+0x24a/0x2f0 [ 1440.287698][T31140] do_exit+0x704/0x2b60 [ 1440.287725][T31140] ? __pfx_do_exit+0x10/0x10 [ 1440.287750][T31140] ? do_raw_spin_lock+0x128/0x260 [ 1440.287777][T31140] ? find_held_lock+0x2b/0x80 [ 1440.287794][T31140] ? get_signal+0x7e0/0x21e0 [ 1440.287816][T31140] do_group_exit+0xd5/0x2a0 [ 1440.287843][T31140] get_signal+0x1ec7/0x21e0 [ 1440.287871][T31140] ? __pfx_get_signal+0x10/0x10 [ 1440.287893][T31140] ? do_futex+0x192/0x350 [ 1440.287919][T31140] arch_do_signal_or_restart+0x91/0x770 [ 1440.287944][T31140] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1440.287978][T31140] ? __pfx___x64_sys_futex+0x10/0x10 [ 1440.288008][T31140] exit_to_user_mode_loop+0x86/0x4a0 [ 1440.288035][T31140] do_syscall_64+0x668/0xf80 [ 1440.288062][T31140] ? clear_bhb_loop+0x40/0x90 [ 1440.288084][T31140] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1440.288104][T31140] RIP: 0033:0x7fbdfa39c799 [ 1440.288120][T31140] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1440.288139][T31140] RSP: 002b:00007fbdf85d50e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1440.288157][T31140] RAX: fffffffffffffe00 RBX: 00007fbdfa616098 RCX: 00007fbdfa39c799 [ 1440.288169][T31140] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fbdfa616098 [ 1440.288179][T31140] RBP: 00007fbdfa616090 R08: 0000000000000000 R09: 0000000000000000 [ 1440.288190][T31140] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1440.288201][T31140] R13: 00007fbdfa616128 R14: 00007ffe85dec830 R15: 00007ffe85dec918 [ 1440.288223][T31140] [ 1441.695699][T31176] FAULT_INJECTION: forcing a failure. [ 1441.695699][T31176] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1441.712799][T31176] CPU: 1 UID: 0 PID: 31176 Comm: syz.4.5579 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 1441.712852][T31176] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 1441.712866][T31176] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1441.712884][T31176] Call Trace: [ 1441.712896][T31176] [ 1441.712908][T31176] dump_stack_lvl+0x100/0x190 [ 1441.712961][T31176] should_fail_ex.cold+0x5/0xa [ 1441.713000][T31176] _copy_to_user+0x32/0xd0 [ 1441.713042][T31176] simple_read_from_buffer+0xcb/0x170 [ 1441.713094][T31176] proc_fail_nth_read+0x1af/0x230 [ 1441.713132][T31176] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1441.713173][T31176] ? rw_verify_area+0xce/0x6d0 [ 1441.713213][T31176] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1441.713260][T31176] vfs_read+0x1e4/0xb30 [ 1441.713296][T31176] ? __pfx_vfs_read+0x10/0x10 [ 1441.713323][T31176] ? __fget_files+0x215/0x3d0 [ 1441.713364][T31176] ? __fget_files+0x21f/0x3d0 [ 1441.713406][T31176] ksys_read+0x12a/0x250 [ 1441.713434][T31176] ? __pfx_ksys_read+0x10/0x10 [ 1441.713474][T31176] do_syscall_64+0x106/0xf80 [ 1441.713518][T31176] ? clear_bhb_loop+0x40/0x90 [ 1441.713556][T31176] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1441.713587][T31176] RIP: 0033:0x7f715455cfce [ 1441.713613][T31176] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1441.713641][T31176] RSP: 002b:00007f71553dbfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1441.713669][T31176] RAX: ffffffffffffffda RBX: 00007f71553dc6c0 RCX: 00007f715455cfce [ 1441.713689][T31176] RDX: 000000000000000f RSI: 00007f71553dc0a0 RDI: 0000000000000004 [ 1441.713706][T31176] RBP: 00007f71553dc090 R08: 0000000000000000 R09: 0000000000000000 [ 1441.713724][T31176] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1441.713739][T31176] R13: 00007f7154816038 R14: 00007f7154815fa0 R15: 00007ffdbd3c4bc8 [ 1441.713782][T31176] [ 1443.411964][T31209] netlink: 350 bytes leftover after parsing attributes in process `syz.6.5590'. [ 1444.148847][T31229] FAULT_INJECTION: forcing a failure. [ 1444.148847][T31229] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1444.239032][T31229] CPU: 0 UID: 0 PID: 31229 Comm: syz.5.5592 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 1444.239077][T31229] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 1444.239086][T31229] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1444.239096][T31229] Call Trace: [ 1444.239103][T31229] [ 1444.239111][T31229] dump_stack_lvl+0x100/0x190 [ 1444.239144][T31229] should_fail_ex.cold+0x5/0xa [ 1444.239166][T31229] _copy_to_user+0x32/0xd0 [ 1444.239191][T31229] simple_read_from_buffer+0xcb/0x170 [ 1444.239222][T31229] proc_fail_nth_read+0x1af/0x230 [ 1444.239247][T31229] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1444.239272][T31229] ? rw_verify_area+0xce/0x6d0 [ 1444.239298][T31229] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1444.239321][T31229] vfs_read+0x1e4/0xb30 [ 1444.239341][T31229] ? __pfx_vfs_read+0x10/0x10 [ 1444.239358][T31229] ? __fget_files+0x215/0x3d0 [ 1444.239380][T31229] ? __fget_files+0x21f/0x3d0 [ 1444.239404][T31229] ksys_read+0x12a/0x250 [ 1444.239421][T31229] ? __pfx_ksys_read+0x10/0x10 [ 1444.239445][T31229] do_syscall_64+0x106/0xf80 [ 1444.239474][T31229] ? clear_bhb_loop+0x40/0x90 [ 1444.239498][T31229] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1444.239516][T31229] RIP: 0033:0x7f005495cfce [ 1444.239532][T31229] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1444.239549][T31229] RSP: 002b:00007f0055894fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1444.239567][T31229] RAX: ffffffffffffffda RBX: 00007f00558956c0 RCX: 00007f005495cfce [ 1444.239579][T31229] RDX: 000000000000000f RSI: 00007f00558950a0 RDI: 0000000000000004 [ 1444.239589][T31229] RBP: 00007f0055895090 R08: 0000000000000000 R09: 0000000000000000 [ 1444.239599][T31229] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1444.239610][T31229] R13: 00007f0054c16128 R14: 00007f0054c16090 R15: 00007ffd167f4f48 [ 1444.239633][T31229] [ 1444.664171][T31237] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5596'. [ 1446.431170][T31278] FAULT_INJECTION: forcing a failure. [ 1446.431170][T31278] name failslab, interval 1, probability 0, space 0, times 0 [ 1446.531811][T31278] CPU: 0 UID: 0 PID: 31278 Comm: syz.8.5603 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 1446.531847][T31278] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 1446.531856][T31278] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1446.531877][T31278] Call Trace: [ 1446.531884][T31278] [ 1446.531892][T31278] dump_stack_lvl+0x100/0x190 [ 1446.531925][T31278] should_fail_ex.cold+0x5/0xa [ 1446.531947][T31278] should_failslab+0xc2/0x120 [ 1446.531972][T31278] __kmalloc_cache_noprof+0x7a/0x6f0 [ 1446.531997][T31278] ? snd_hrtimer_open+0x43/0xf0 [ 1446.532082][T31278] ? __pfx_snd_hrtimer_open+0x10/0x10 [ 1446.532106][T31278] snd_hrtimer_open+0x43/0xf0 [ 1446.532132][T31278] snd_timer_open+0xb0b/0x1020 [ 1446.532158][T31278] ? __pfx_snd_timer_open+0x10/0x10 [ 1446.532184][T31278] ? kstrdup+0xb3/0xe0 [ 1446.532205][T31278] snd_seq_timer_open+0x289/0x600 [ 1446.532236][T31278] ? __pfx_snd_seq_timer_open+0x10/0x10 [ 1446.532272][T31278] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1446.532299][T31278] ? lockdep_hardirqs_on+0x78/0x100 [ 1446.532327][T31278] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1446.532356][T31278] queue_use+0xdc/0x1f0 [ 1446.532387][T31278] snd_seq_queue_alloc+0x2e5/0x590 [ 1446.532432][T31278] snd_seq_ioctl_create_queue+0xa9/0x370 [ 1446.532488][T31278] call_seq_client_ctl+0xa3/0x130 [ 1446.532509][T31278] snd_seq_kernel_client_ctl+0x77/0xd0 [ 1446.532530][T31278] alloc_seq_queue+0xdb/0x180 [ 1446.532550][T31278] ? __pfx_alloc_seq_queue+0x10/0x10 [ 1446.532583][T31278] ? mark_held_locks+0x40/0x70 [ 1446.532607][T31278] ? _raw_spin_unlock_irq+0x23/0x50 [ 1446.532631][T31278] ? lockdep_hardirqs_on+0x78/0x100 [ 1446.532661][T31278] snd_seq_oss_open+0x2b2/0xa10 [ 1446.532686][T31278] odev_open+0x79/0xc0 [ 1446.532703][T31278] ? __pfx_odev_open+0x10/0x10 [ 1446.532721][T31278] soundcore_open+0x2e3/0x5a0 [ 1446.532748][T31278] ? __pfx_soundcore_open+0x10/0x10 [ 1446.532767][T31278] chrdev_open+0x234/0x6a0 [ 1446.532787][T31278] ? __pfx_apparmor_file_open+0x10/0x10 [ 1446.532808][T31278] ? __pfx_chrdev_open+0x10/0x10 [ 1446.532829][T31278] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 1446.532855][T31278] do_dentry_open+0x6d8/0x1660 [ 1446.532874][T31278] ? __pfx_chrdev_open+0x10/0x10 [ 1446.532900][T31278] vfs_open+0x82/0x3f0 [ 1446.532926][T31278] path_openat+0x208c/0x31a0 [ 1446.532954][T31278] ? __pfx_path_openat+0x10/0x10 [ 1446.532983][T31278] do_file_open+0x20e/0x430 [ 1446.533005][T31278] ? __pfx_do_file_open+0x10/0x10 [ 1446.533042][T31278] ? alloc_fd+0x476/0x790 [ 1446.533064][T31278] ? do_getname+0x191/0x390 [ 1446.533090][T31278] do_sys_openat2+0x10d/0x1e0 [ 1446.533115][T31278] ? __pfx_do_sys_openat2+0x10/0x10 [ 1446.533149][T31278] __x64_sys_openat+0x12d/0x210 [ 1446.533175][T31278] ? __pfx___x64_sys_openat+0x10/0x10 [ 1446.533210][T31278] do_syscall_64+0x106/0xf80 [ 1446.533236][T31278] ? clear_bhb_loop+0x40/0x90 [ 1446.533259][T31278] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1446.533279][T31278] RIP: 0033:0x7fbdfa39c799 [ 1446.533296][T31278] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1446.533313][T31278] RSP: 002b:00007fbdf85d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1446.533332][T31278] RAX: ffffffffffffffda RBX: 00007fbdfa616090 RCX: 00007fbdfa39c799 [ 1446.533344][T31278] RDX: 0000000000000001 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 1446.533354][T31278] RBP: 00007fbdfa432c99 R08: 0000000000000000 R09: 0000000000000000 [ 1446.533365][T31278] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1446.533375][T31278] R13: 00007fbdfa616128 R14: 00007fbdfa616090 R15: 00007ffe85dec918 [ 1446.533399][T31278] [ 1447.124046][T25399] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1447.226720][T25399] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1447.321173][T25399] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1447.356295][T25399] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1447.425576][T25399] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1448.214560][T31279] chnl_net:caif_netlink_parms(): no params data found [ 1449.024993][T31279] bridge0: port 1(bridge_slave_0) entered blocking state [ 1449.045813][T31279] bridge0: port 1(bridge_slave_0) entered disabled state [ 1449.056338][T31279] bridge_slave_0: entered allmulticast mode [ 1449.074546][T31279] bridge_slave_0: entered promiscuous mode [ 1449.137137][T31279] bridge0: port 2(bridge_slave_1) entered blocking state [ 1449.150558][T31279] bridge0: port 2(bridge_slave_1) entered disabled state [ 1449.268046][T31279] bridge_slave_1: entered allmulticast mode [ 1449.278130][T31279] bridge_slave_1: entered promiscuous mode [ 1449.484248][T25399] Bluetooth: hci6: command tx timeout [ 1449.528429][T31279] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1449.554067][T31279] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1449.710684][T31279] team0: Port device team_slave_0 added [ 1449.726430][T31279] team0: Port device team_slave_1 added [ 1449.798290][T31279] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1449.798308][T31279] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1449.798332][T31279] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1449.805080][T31279] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1449.805097][T31279] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1449.805120][T31279] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1449.900832][T31279] hsr_slave_0: entered promiscuous mode [ 1449.902694][T31279] hsr_slave_1: entered promiscuous mode [ 1449.903663][T31279] debugfs: 'hsr0' already exists in 'hsr' [ 1449.903690][T31279] Cannot create hsr debugfs directory [ 1450.293767][T31316] FAULT_INJECTION: forcing a failure. [ 1450.293767][T31316] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1450.320487][T31316] CPU: 1 UID: 0 PID: 31316 Comm: syz.4.5610 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 1450.320522][T31316] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 1450.320531][T31316] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1450.320542][T31316] Call Trace: [ 1450.320549][T31316] [ 1450.320572][T31316] dump_stack_lvl+0x100/0x190 [ 1450.320605][T31316] should_fail_ex.cold+0x5/0xa [ 1450.320628][T31316] get_futex_key+0x1d2/0x1620 [ 1450.320654][T31316] ? __pfx_get_futex_key+0x10/0x10 [ 1450.320675][T31316] ? lock_acquire+0x1cf/0x380 [ 1450.320706][T31316] futex_wake+0xea/0x530 [ 1450.320736][T31316] ? __pfx_futex_wake+0x10/0x10 [ 1450.320765][T31316] ? exit_mm_release+0x19/0x30 [ 1450.320794][T31316] do_futex+0x32b/0x350 [ 1450.320819][T31316] ? __pfx_do_futex+0x10/0x10 [ 1450.320841][T31316] ? __might_fault+0xc5/0x140 [ 1450.320878][T31316] mm_release+0x24a/0x2f0 [ 1450.320898][T31316] do_exit+0x704/0x2b60 [ 1450.320925][T31316] ? __pfx_do_exit+0x10/0x10 [ 1450.320950][T31316] ? do_raw_spin_lock+0x128/0x260 [ 1450.320976][T31316] ? find_held_lock+0x2b/0x80 [ 1450.320993][T31316] ? get_signal+0x7e0/0x21e0 [ 1450.321015][T31316] do_group_exit+0xd5/0x2a0 [ 1450.321042][T31316] get_signal+0x1ec7/0x21e0 [ 1450.321070][T31316] ? __pfx_get_signal+0x10/0x10 [ 1450.321091][T31316] ? do_futex+0x192/0x350 [ 1450.321118][T31316] arch_do_signal_or_restart+0x91/0x770 [ 1450.321142][T31316] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1450.321172][T31316] ? __pfx___x64_sys_futex+0x10/0x10 [ 1450.321202][T31316] exit_to_user_mode_loop+0x86/0x4a0 [ 1450.321229][T31316] do_syscall_64+0x668/0xf80 [ 1450.321257][T31316] ? clear_bhb_loop+0x40/0x90 [ 1450.321279][T31316] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1450.321298][T31316] RIP: 0033:0x7f715459c799 [ 1450.321314][T31316] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1450.321331][T31316] RSP: 002b:00007f71553bb0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1450.321349][T31316] RAX: fffffffffffffe00 RBX: 00007f7154816098 RCX: 00007f715459c799 [ 1450.321361][T31316] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f7154816098 [ 1450.321379][T31316] RBP: 00007f7154816090 R08: 0000000000000000 R09: 0000000000000000 [ 1450.321389][T31316] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1450.321399][T31316] R13: 00007f7154816128 R14: 00007ffdbd3c4ae0 R15: 00007ffdbd3c4bc8 [ 1450.321422][T31316] [ 1450.953218][T31279] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1451.156707][T31279] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1451.374433][T31279] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1451.545966][T25399] Bluetooth: hci6: command tx timeout [ 1451.653643][T31279] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1452.189792][T31279] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1452.260174][T31279] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1452.373210][T31279] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1452.388533][T31279] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1453.387216][T31373] FAULT_INJECTION: forcing a failure. [ 1453.387216][T31373] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1453.410459][T31279] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1453.427066][T31373] CPU: 1 UID: 0 PID: 31373 Comm: syz.4.5619 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 1453.427121][T31373] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 1453.427135][T31373] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1453.427154][T31373] Call Trace: [ 1453.427165][T31373] [ 1453.427177][T31373] dump_stack_lvl+0x100/0x190 [ 1453.427229][T31373] should_fail_ex.cold+0x5/0xa [ 1453.427266][T31373] get_futex_key+0x1d2/0x1620 [ 1453.427309][T31373] ? __pfx_get_futex_key+0x10/0x10 [ 1453.427342][T31373] ? lock_acquire+0x1cf/0x380 [ 1453.427406][T31373] futex_wake+0xea/0x530 [ 1453.427455][T31373] ? __pfx_futex_wake+0x10/0x10 [ 1453.427501][T31373] ? exit_mm_release+0x19/0x30 [ 1453.427551][T31373] do_futex+0x32b/0x350 [ 1453.427591][T31373] ? __pfx_do_futex+0x10/0x10 [ 1453.427628][T31373] ? __might_fault+0xc5/0x140 [ 1453.427683][T31373] mm_release+0x24a/0x2f0 [ 1453.427717][T31373] do_exit+0x704/0x2b60 [ 1453.427763][T31373] ? __pfx_do_exit+0x10/0x10 [ 1453.427803][T31373] ? do_raw_spin_lock+0x128/0x260 [ 1453.427846][T31373] ? find_held_lock+0x2b/0x80 [ 1453.427874][T31373] ? get_signal+0x7e0/0x21e0 [ 1453.427911][T31373] do_group_exit+0xd5/0x2a0 [ 1453.427955][T31373] get_signal+0x1ec7/0x21e0 [ 1453.428003][T31373] ? __pfx_get_signal+0x10/0x10 [ 1453.428039][T31373] ? do_futex+0x192/0x350 [ 1453.428082][T31373] arch_do_signal_or_restart+0x91/0x770 [ 1453.428121][T31373] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1453.428171][T31373] ? __pfx___x64_sys_futex+0x10/0x10 [ 1453.428221][T31373] exit_to_user_mode_loop+0x86/0x4a0 [ 1453.428265][T31373] do_syscall_64+0x668/0xf80 [ 1453.428309][T31373] ? clear_bhb_loop+0x40/0x90 [ 1453.428345][T31373] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1453.428384][T31373] RIP: 0033:0x7f715459c799 [ 1453.428409][T31373] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1453.428438][T31373] RSP: 002b:00007f71553bb0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1453.428469][T31373] RAX: fffffffffffffe00 RBX: 00007f7154816098 RCX: 00007f715459c799 [ 1453.428489][T31373] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f7154816098 [ 1453.428508][T31373] RBP: 00007f7154816090 R08: 0000000000000000 R09: 0000000000000000 [ 1453.428527][T31373] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1453.428546][T31373] R13: 00007f7154816128 R14: 00007ffdbd3c4ae0 R15: 00007ffdbd3c4bc8 [ 1453.428587][T31373] [ 1453.721323][T25399] Bluetooth: hci6: command tx timeout [ 1453.813236][T31279] 8021q: adding VLAN 0 to HW filter on device team0 [ 1453.851591][T19698] bridge0: port 1(bridge_slave_0) entered blocking state [ 1453.858862][T19698] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1453.906331][T21829] bridge0: port 2(bridge_slave_1) entered blocking state [ 1453.913565][T21829] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1454.648489][T31279] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1455.100639][T31411] usb usb21: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1455.169862][T31279] veth0_vlan: entered promiscuous mode [ 1455.272971][T31279] veth1_vlan: entered promiscuous mode [ 1455.368516][T31279] veth0_macvtap: entered promiscuous mode [ 1455.421332][T31279] veth1_macvtap: entered promiscuous mode [ 1455.448932][T31413] FAULT_INJECTION: forcing a failure. [ 1455.448932][T31413] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1455.489766][T31413] CPU: 0 UID: 0 PID: 31413 Comm: syz.8.5627 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 1455.489820][T31413] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 1455.489833][T31413] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1455.489850][T31413] Call Trace: [ 1455.489860][T31413] [ 1455.489872][T31413] dump_stack_lvl+0x100/0x190 [ 1455.489923][T31413] should_fail_ex.cold+0x5/0xa [ 1455.489958][T31413] _copy_from_user+0x2e/0xd0 [ 1455.489990][T31413] copy_msghdr_from_user+0x9f/0x4f0 [ 1455.490028][T31413] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1455.490066][T31413] ? rcu_is_watching+0x12/0xc0 [ 1455.490110][T31413] ? ___sys_sendmsg+0x19d/0x1e0 [ 1455.490141][T31413] ? kfree+0x2ec/0x6b0 [ 1455.490185][T31413] ___sys_sendmsg+0x106/0x1e0 [ 1455.490223][T31413] ? __pfx____sys_sendmsg+0x10/0x10 [ 1455.490293][T31413] ? __pfx___might_resched+0x10/0x10 [ 1455.490344][T31413] __sys_sendmmsg+0x205/0x430 [ 1455.490394][T31413] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1455.490460][T31413] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1455.490524][T31413] ? fput+0x79/0x100 [ 1455.490560][T31413] ? ksys_write+0x1ac/0x250 [ 1455.490588][T31413] ? __pfx_ksys_write+0x10/0x10 [ 1455.490621][T31413] __x64_sys_sendmmsg+0x9c/0x100 [ 1455.490660][T31413] ? lockdep_hardirqs_on+0x78/0x100 [ 1455.490701][T31413] do_syscall_64+0x106/0xf80 [ 1455.490740][T31413] ? clear_bhb_loop+0x40/0x90 [ 1455.490775][T31413] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1455.490804][T31413] RIP: 0033:0x7fbdfa39c799 [ 1455.490828][T31413] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1455.490854][T31413] RSP: 002b:00007fbdf85f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1455.490881][T31413] RAX: ffffffffffffffda RBX: 00007fbdfa615fa0 RCX: 00007fbdfa39c799 [ 1455.490902][T31413] RDX: 00000000000009a6 RSI: 0000000000000000 RDI: 0000000000000003 [ 1455.490921][T31413] RBP: 00007fbdf85f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1455.490938][T31413] R10: 000000000000e000 R11: 0000000000000246 R12: 0000000000000001 [ 1455.490955][T31413] R13: 00007fbdfa616038 R14: 00007fbdfa615fa0 R15: 00007ffe85dec918 [ 1455.490996][T31413] [ 1455.492166][T31279] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1455.779357][T31279] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1455.795742][T25399] Bluetooth: hci6: command tx timeout [ 1455.816515][ T7750] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1455.828115][ T7750] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1455.868234][ T7750] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1455.881438][ T7750] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1456.122967][T21827] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1456.157289][T21827] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1456.351074][T19698] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1456.381103][T19698] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1456.456542][T31432] FAULT_INJECTION: forcing a failure. [ 1456.456542][T31432] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1456.515931][T31432] CPU: 0 UID: 0 PID: 31432 Comm: syz.5.5632 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 1456.515986][T31432] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 1456.516000][T31432] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1456.516016][T31432] Call Trace: [ 1456.516026][T31432] [ 1456.516038][T31432] dump_stack_lvl+0x100/0x190 [ 1456.516092][T31432] should_fail_ex.cold+0x5/0xa [ 1456.516132][T31432] get_futex_key+0x1d2/0x1620 [ 1456.516176][T31432] ? __pfx_get_futex_key+0x10/0x10 [ 1456.516210][T31432] ? lock_acquire+0x1cf/0x380 [ 1456.516272][T31432] futex_wake+0xea/0x530 [ 1456.516321][T31432] ? __pfx_futex_wake+0x10/0x10 [ 1456.516368][T31432] ? exit_mm_release+0x19/0x30 [ 1456.516418][T31432] do_futex+0x32b/0x350 [ 1456.516458][T31432] ? __pfx_do_futex+0x10/0x10 [ 1456.516496][T31432] ? __might_fault+0xc5/0x140 [ 1456.516550][T31432] mm_release+0x24a/0x2f0 [ 1456.516583][T31432] do_exit+0x704/0x2b60 [ 1456.516630][T31432] ? __pfx_do_exit+0x10/0x10 [ 1456.516670][T31432] ? do_raw_spin_lock+0x128/0x260 [ 1456.516713][T31432] ? find_held_lock+0x2b/0x80 [ 1456.516742][T31432] ? get_signal+0x7e0/0x21e0 [ 1456.516776][T31432] do_group_exit+0xd5/0x2a0 [ 1456.516820][T31432] get_signal+0x1ec7/0x21e0 [ 1456.516869][T31432] ? __pfx_get_signal+0x10/0x10 [ 1456.516905][T31432] ? do_futex+0x192/0x350 [ 1456.516950][T31432] arch_do_signal_or_restart+0x91/0x770 [ 1456.516991][T31432] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1456.517041][T31432] ? __pfx___x64_sys_futex+0x10/0x10 [ 1456.517088][T31432] exit_to_user_mode_loop+0x86/0x4a0 [ 1456.517132][T31432] do_syscall_64+0x668/0xf80 [ 1456.517175][T31432] ? clear_bhb_loop+0x40/0x90 [ 1456.517210][T31432] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1456.517235][T31432] RIP: 0033:0x7f005499c799 [ 1456.517255][T31432] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1456.517290][T31432] RSP: 002b:00007f00558950e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1456.517314][T31432] RAX: fffffffffffffe00 RBX: 00007f0054c16098 RCX: 00007f005499c799 [ 1456.517330][T31432] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f0054c16098 [ 1456.517344][T31432] RBP: 00007f0054c16090 R08: 0000000000000000 R09: 0000000000000000 [ 1456.517358][T31432] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1456.517372][T31432] R13: 00007f0054c16128 R14: 00007ffd167f4e60 R15: 00007ffd167f4f48 [ 1456.517403][T31432] [ 1457.815319][T31459] netlink: 186 bytes leftover after parsing attributes in process `syz.6.5637'. [ 1458.605081][T31467] ima: policy update failed [ 1458.635909][ T30] audit: type=1802 audit(4295008013.462:23): pid=31467 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.4.5638" res=0 errno=0 [ 1459.182654][T31477] ubi0: attaching mtd0 [ 1459.197141][T31477] ubi0: scanning is finished [ 1459.236799][T31477] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 1459.436666][T31477] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 1460.033386][T18283] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1460.056056][T18283] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1460.071546][T18283] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1460.082804][T18283] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1460.091326][T18283] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1461.005387][T21829] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1461.183235][T21829] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1461.340300][T21829] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1461.521213][T21829] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1461.715354][T31494] chnl_net:caif_netlink_parms(): no params data found [ 1462.195692][T25399] Bluetooth: hci7: command tx timeout [ 1463.260388][T31546] FAULT_INJECTION: forcing a failure. [ 1463.260388][T31546] name failslab, interval 1, probability 0, space 0, times 0 [ 1463.260453][T31546] CPU: 0 UID: 0 PID: 31546 Comm: syz.8.5653 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 1463.260483][T31546] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 1463.260492][T31546] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1463.260503][T31546] Call Trace: [ 1463.260510][T31546] [ 1463.260517][T31546] dump_stack_lvl+0x100/0x190 [ 1463.260552][T31546] should_fail_ex.cold+0x5/0xa [ 1463.260575][T31546] should_failslab+0xc2/0x120 [ 1463.260597][T31546] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 1463.260627][T31546] ? proc_alloc_inode+0x25/0x200 [ 1463.260655][T31546] ? find_held_lock+0x2b/0x80 [ 1463.260675][T31546] ? __pfx_proc_alloc_inode+0x10/0x10 [ 1463.260704][T31546] proc_alloc_inode+0x25/0x200 [ 1463.260731][T31546] alloc_inode+0x68/0x250 [ 1463.260766][T31546] new_inode+0x22/0x1c0 [ 1463.260797][T31546] ? proc_sys_lookup+0x266/0x430 [ 1463.260828][T31546] proc_sys_make_inode+0x47/0x5c0 [ 1463.260859][T31546] proc_sys_lookup+0x307/0x430 [ 1463.260890][T31546] ? __pfx_proc_sys_lookup+0x10/0x10 [ 1463.260922][T31546] ? lockdep_init_map_type+0x5c/0x250 [ 1463.260949][T31546] ? lockdep_init_map_type+0x5c/0x250 [ 1463.260980][T31546] __lookup_slow+0x251/0x460 [ 1463.261006][T31546] ? __pfx___lookup_slow+0x10/0x10 [ 1463.261043][T31546] ? __d_lookup+0x266/0x4a0 [ 1463.261075][T31546] lookup_slow+0x50/0x70 [ 1463.261100][T31546] link_path_walk+0x1377/0x1cc0 [ 1463.261137][T31546] path_openat+0x1be/0x31a0 [ 1463.261156][T31546] ? kasan_save_stack+0x3f/0x50 [ 1463.261183][T31546] ? kasan_save_stack+0x30/0x50 [ 1463.261210][T31546] ? kasan_save_track+0x14/0x30 [ 1463.261227][T31546] ? kmem_cache_alloc_noprof+0x241/0x6e0 [ 1463.261261][T31546] ? __pfx_path_openat+0x10/0x10 [ 1463.261294][T31546] do_file_open+0x20e/0x430 [ 1463.261315][T31546] ? __pfx_do_file_open+0x10/0x10 [ 1463.261352][T31546] ? alloc_fd+0x476/0x790 [ 1463.261374][T31546] ? do_getname+0x191/0x390 [ 1463.261420][T31546] do_sys_openat2+0x10d/0x1e0 [ 1463.261446][T31546] ? __pfx_do_sys_openat2+0x10/0x10 [ 1463.261480][T31546] __x64_sys_openat+0x12d/0x210 [ 1463.261507][T31546] ? __pfx___x64_sys_openat+0x10/0x10 [ 1463.261542][T31546] do_syscall_64+0x106/0xf80 [ 1463.261571][T31546] ? clear_bhb_loop+0x40/0x90 [ 1463.261594][T31546] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1463.261614][T31546] RIP: 0033:0x7fbdfa39c799 [ 1463.261630][T31546] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1463.261648][T31546] RSP: 002b:00007fbdf85d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1463.261667][T31546] RAX: ffffffffffffffda RBX: 00007fbdfa616090 RCX: 00007fbdfa39c799 [ 1463.261680][T31546] RDX: 0000000000000202 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 1463.261692][T31546] RBP: 00007fbdfa432c99 R08: 0000000000000000 R09: 0000000000000000 [ 1463.261704][T31546] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1463.261715][T31546] R13: 00007fbdfa616128 R14: 00007fbdfa616090 R15: 00007ffe85dec918 [ 1463.261739][T31546] [ 1463.439121][T21829] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1463.477359][T21829] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1463.479532][T21829] bond0 (unregistering): Released all slaves [ 1463.734014][T21829] tipc: Left network mode [ 1463.822876][T31494] bridge0: port 1(bridge_slave_0) entered blocking state [ 1463.858216][T31494] bridge0: port 1(bridge_slave_0) entered disabled state [ 1463.858489][T31494] bridge_slave_0: entered allmulticast mode [ 1463.860821][T31494] bridge_slave_0: entered promiscuous mode [ 1463.901039][T31494] bridge0: port 2(bridge_slave_1) entered blocking state [ 1463.901167][T31494] bridge0: port 2(bridge_slave_1) entered disabled state [ 1463.901439][T31494] bridge_slave_1: entered allmulticast mode [ 1463.903679][T31494] bridge_slave_1: entered promiscuous mode [ 1464.073924][T31494] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1464.078799][T31494] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1464.275688][T25399] Bluetooth: hci7: command tx timeout [ 1464.316890][T31494] team0: Port device team_slave_0 added [ 1464.330252][T31494] team0: Port device team_slave_1 added [ 1464.528649][T31494] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1464.528675][T31494] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1464.528711][T31494] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1464.544224][T31494] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1464.544249][T31494] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1464.544286][T31494] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1464.834814][T31494] hsr_slave_0: entered promiscuous mode [ 1464.849800][T31494] hsr_slave_1: entered promiscuous mode [ 1464.864364][T31494] debugfs: 'hsr0' already exists in 'hsr' [ 1464.864388][T31494] Cannot create hsr debugfs directory [ 1465.579970][T31586] usb usb21: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1466.014803][T31588] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1466.357298][T25399] Bluetooth: hci7: command tx timeout [ 1467.682993][T31494] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1468.037849][T31494] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1468.285623][T31494] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1468.304156][T31625] program syz.6.5664 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1468.391943][T31494] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1468.428548][T25399] Bluetooth: hci7: command tx timeout [ 1469.323823][T31494] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1469.467695][T31494] 8021q: adding VLAN 0 to HW filter on device team0 [ 1469.620146][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 1469.627407][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1469.684628][T21828] bridge0: port 2(bridge_slave_1) entered blocking state [ 1469.691888][T21828] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1470.277988][T31494] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1471.123327][T31494] veth0_vlan: entered promiscuous mode [ 1471.209889][T31494] veth1_vlan: entered promiscuous mode [ 1471.511225][T31494] veth0_macvtap: entered promiscuous mode [ 1471.561759][T31494] veth1_macvtap: entered promiscuous mode [ 1471.681754][T31494] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1471.786922][T31494] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1471.850155][T21829] hsr_slave_0: left promiscuous mode [ 1471.863410][T21829] hsr_slave_1: left promiscuous mode [ 1471.881598][T21829] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1471.900112][T21829] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1471.927461][T21829] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1471.955849][T21829] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1471.996538][T21829] veth1_macvtap: left promiscuous mode [ 1472.009608][T21829] veth0_macvtap: left promiscuous mode [ 1472.029299][T21829] veth1_vlan: left promiscuous mode [ 1472.034648][T21829] veth0_vlan: left promiscuous mode [ 1472.429593][T21829] team0 (unregistering): Port device team_slave_1 removed [ 1472.462377][T21829] team0 (unregistering): Port device team_slave_0 removed [ 1472.709719][T21827] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1472.725106][T21827] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1472.768317][T21827] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1472.788338][T21827] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1473.142548][T19701] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1473.165617][T19701] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1473.230768][T19701] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1473.245779][T19701] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1477.573893][T31755] program syz.4.5686 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1478.303599][T31787] usb usb21: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1478.740731][T31795] FAULT_INJECTION: forcing a failure. [ 1478.740731][T31795] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1478.764859][T31795] CPU: 1 UID: 0 PID: 31795 Comm: syz.4.5695 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 1478.764910][T31795] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 1478.764924][T31795] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1478.764941][T31795] Call Trace: [ 1478.764951][T31795] [ 1478.764962][T31795] dump_stack_lvl+0x100/0x190 [ 1478.765021][T31795] should_fail_ex.cold+0x5/0xa [ 1478.765056][T31795] get_futex_key+0x1d2/0x1620 [ 1478.765096][T31795] ? __pfx_get_futex_key+0x10/0x10 [ 1478.765127][T31795] ? lock_acquire+0x1cf/0x380 [ 1478.765177][T31795] futex_wake+0xea/0x530 [ 1478.765228][T31795] ? __pfx_futex_wake+0x10/0x10 [ 1478.765271][T31795] ? exit_mm_release+0x19/0x30 [ 1478.765318][T31795] do_futex+0x32b/0x350 [ 1478.765356][T31795] ? __pfx_do_futex+0x10/0x10 [ 1478.765391][T31795] ? __might_fault+0xc5/0x140 [ 1478.765441][T31795] mm_release+0x24a/0x2f0 [ 1478.765473][T31795] do_exit+0x704/0x2b60 [ 1478.765515][T31795] ? __pfx_do_exit+0x10/0x10 [ 1478.765551][T31795] ? do_raw_spin_lock+0x128/0x260 [ 1478.765591][T31795] ? find_held_lock+0x2b/0x80 [ 1478.765618][T31795] ? get_signal+0x7e0/0x21e0 [ 1478.765654][T31795] do_group_exit+0xd5/0x2a0 [ 1478.765697][T31795] get_signal+0x1ec7/0x21e0 [ 1478.765746][T31795] ? __pfx_get_signal+0x10/0x10 [ 1478.765780][T31795] ? do_futex+0x192/0x350 [ 1478.765823][T31795] arch_do_signal_or_restart+0x91/0x770 [ 1478.765858][T31795] ? ktime_get+0x1a7/0x300 [ 1478.765886][T31795] ? find_held_lock+0x2b/0x80 [ 1478.765916][T31795] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1478.765965][T31795] ? __pfx___x64_sys_futex+0x10/0x10 [ 1478.766026][T31795] exit_to_user_mode_loop+0x86/0x4a0 [ 1478.766068][T31795] do_syscall_64+0x668/0xf80 [ 1478.766109][T31795] ? clear_bhb_loop+0x40/0x90 [ 1478.766147][T31795] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1478.766179][T31795] RIP: 0033:0x7f715459c799 [ 1478.766205][T31795] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1478.766234][T31795] RSP: 002b:00007f71553bb0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1478.766264][T31795] RAX: fffffffffffffe00 RBX: 00007f7154816098 RCX: 00007f715459c799 [ 1478.766283][T31795] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f7154816098 [ 1478.766302][T31795] RBP: 00007f7154816090 R08: 0000000000000000 R09: 0000000000000000 [ 1478.766320][T31795] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1478.766337][T31795] R13: 00007f7154816128 R14: 00007ffdbd3c4ae0 R15: 00007ffdbd3c4bc8 [ 1478.766377][T31795] [ 1479.488573][T31797] hub 1-0:1.0: USB hub found [ 1479.494612][T31797] hub 1-0:1.0: 1 port detected [ 1479.949305][T31816] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1480.744717][T31827] FAULT_INJECTION: forcing a failure. [ 1480.744717][T31827] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1480.760013][T31827] CPU: 0 UID: 0 PID: 31827 Comm: syz.5.5706 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 1480.760069][T31827] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 1480.760084][T31827] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1480.760102][T31827] Call Trace: [ 1480.760113][T31827] [ 1480.760125][T31827] dump_stack_lvl+0x100/0x190 [ 1480.760179][T31827] should_fail_ex.cold+0x5/0xa [ 1480.760210][T31827] ? rcu_is_watching+0x12/0xc0 [ 1480.760263][T31827] get_futex_key+0x107c/0x1620 [ 1480.760306][T31827] ? __pfx_get_futex_key+0x10/0x10 [ 1480.760342][T31827] ? lock_acquire+0x1cf/0x380 [ 1480.760395][T31827] futex_wake+0xea/0x530 [ 1480.760445][T31827] ? __pfx_futex_wake+0x10/0x10 [ 1480.760493][T31827] ? exit_mm_release+0x19/0x30 [ 1480.760544][T31827] do_futex+0x32b/0x350 [ 1480.760587][T31827] ? __pfx_do_futex+0x10/0x10 [ 1480.760624][T31827] ? __might_fault+0xc5/0x140 [ 1480.760681][T31827] mm_release+0x24a/0x2f0 [ 1480.760715][T31827] do_exit+0x704/0x2b60 [ 1480.760764][T31827] ? __pfx_do_exit+0x10/0x10 [ 1480.760806][T31827] ? do_raw_spin_lock+0x128/0x260 [ 1480.760861][T31827] ? find_held_lock+0x2b/0x80 [ 1480.760891][T31827] ? get_signal+0x7e0/0x21e0 [ 1480.760930][T31827] do_group_exit+0xd5/0x2a0 [ 1480.760977][T31827] get_signal+0x1ec7/0x21e0 [ 1480.761028][T31827] ? __pfx_get_signal+0x10/0x10 [ 1480.761065][T31827] ? do_futex+0x192/0x350 [ 1480.761127][T31827] arch_do_signal_or_restart+0x91/0x770 [ 1480.761169][T31827] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1480.761221][T31827] ? __pfx___x64_sys_futex+0x10/0x10 [ 1480.761273][T31827] exit_to_user_mode_loop+0x86/0x4a0 [ 1480.761319][T31827] do_syscall_64+0x668/0xf80 [ 1480.761363][T31827] ? clear_bhb_loop+0x40/0x90 [ 1480.761401][T31827] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1480.761433][T31827] RIP: 0033:0x7f4d3439c799 [ 1480.761460][T31827] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1480.761489][T31827] RSP: 002b:00007f4d325f60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1480.761518][T31827] RAX: fffffffffffffe00 RBX: 00007f4d34616098 RCX: 00007f4d3439c799 [ 1480.761539][T31827] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f4d34616098 [ 1480.761558][T31827] RBP: 00007f4d34616090 R08: 0000000000000000 R09: 0000000000000000 [ 1480.761576][T31827] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1480.761595][T31827] R13: 00007f4d34616128 R14: 00007ffe9f37f6f0 R15: 00007ffe9f37f7d8 [ 1480.761636][T31827] [ 1483.073948][T31865] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888078006858 pfn:0x78000 [ 1483.220291][T31865] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1483.255697][T31865] flags: 0xfff00000000240(workingset|head|node=0|zone=1|lastcpupid=0x7ff) [ 1483.279109][T31865] page_type: f5(slab) [ 1483.283156][T31865] raw: 00fff00000000240 ffff88801ce8f8c0 ffffea0001e00210 ffffea0001e1fe10 [ 1483.358987][T31865] raw: ffff888078006858 0000000800190005 00000000f5000000 0000000000000000 [ 1483.396888][T31865] head: 00fff00000000240 ffff88801ce8f8c0 ffffea0001e00210 ffffea0001e1fe10 [ 1483.440978][T31865] head: ffff888078006858 0000000800190005 00000000f5000000 0000000000000000 [ 1483.474960][T31865] head: 00fff00000000003 ffffea0001e00001 00000000ffffffff 00000000ffffffff [ 1483.504887][T31865] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 1483.535073][T31865] page dumped because: unmovable page [ 1483.552071][T31865] page_owner tracks the page as allocated [ 1483.572224][T31865] page last allocated via order 3, migratetype Reclaimable, gfp_mask 0xd20d0(__GFP_RECLAIMABLE|__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5207, tgid 5207 (udevadm), ts 35657796543, free_ts 27782758786 [ 1483.630879][T31865] post_alloc_hook+0x153/0x170 [ 1483.642102][T31865] get_page_from_freelist+0x111d/0x3140 [ 1483.660318][T31865] __alloc_frozen_pages_noprof+0x27c/0x2ba0 [ 1483.695845][T31865] new_slab+0xa6/0x6b0 [ 1483.700959][T31865] refill_objects+0x26b/0x400 [ 1483.711459][T31865] __pcs_replace_empty_main+0x1ab/0x660 [ 1483.728150][T31865] kmem_cache_alloc_lru_noprof+0x485/0x6e0 [ 1483.745750][T31865] alloc_inode+0x183/0x250 [ 1483.762827][T31865] iget_locked+0x1d9/0x6d0 [ 1483.789043][T31865] kernfs_get_inode+0x46/0x470 [ 1483.793914][T31865] kernfs_iop_lookup+0x1a7/0x2d0 [ 1483.826310][T31865] __lookup_slow+0x251/0x460 [ 1483.830956][T31865] lookup_slow+0x50/0x70 [ 1483.846159][T31865] link_path_walk+0x1377/0x1cc0 [ 1483.851819][T31865] path_lookupat+0x74/0xc40 [ 1483.856921][T31865] filename_lookup+0x202/0x590 [ 1483.878113][T31865] page last free pid 1 tgid 1 stack trace: [ 1483.884159][T31865] __free_frozen_pages+0x7e1/0x10d0 [ 1483.930245][T31865] free_contig_range+0xde/0x1d0 [ 1483.953771][T31865] destroy_args+0xa8/0x7a0 [ 1483.981962][T31865] debug_vm_pgtable+0x1b66/0x34c0 [ 1483.999580][T31865] do_one_initcall+0x11d/0x760 [ 1484.004383][T31865] kernel_init_freeable+0x6e5/0x7a0 [ 1484.034811][T31878] usb usb21: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1484.045649][T31865] kernel_init+0x1f/0x1e0 [ 1484.060259][T31865] ret_from_fork+0x754/0xd80 [ 1484.088478][T31865] ret_from_fork_asm+0x1a/0x30 syzkaller syzkaller login: [ 1485.081205][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1485.087567][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1485.235416][T18283] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1485.249530][T18283] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1485.267451][T18283] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1485.277986][T18283] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1485.287901][T18283] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1486.375048][T31889] chnl_net:caif_netlink_parms(): no params data found [ 1487.395818][T25399] Bluetooth: hci0: command tx timeout [ 1487.425771][T31889] bridge0: port 1(bridge_slave_0) entered blocking state [ 1487.482742][T31889] bridge0: port 1(bridge_slave_0) entered disabled state [ 1487.498933][T31889] bridge_slave_0: entered allmulticast mode [ 1487.518465][T31889] bridge_slave_0: entered promiscuous mode [ 1487.543023][T31889] bridge0: port 2(bridge_slave_1) entered blocking state [ 1487.596246][T31889] bridge0: port 2(bridge_slave_1) entered disabled state [ 1487.616160][T31889] bridge_slave_1: entered allmulticast mode [ 1487.628475][T31889] bridge_slave_1: entered promiscuous mode [ 1487.767296][T31928] usb usb21: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1488.062195][T31889] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1488.094295][T31889] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1488.210025][T31889] team0: Port device team_slave_0 added [ 1488.261787][T31889] team0: Port device team_slave_1 added [ 1488.312899][ T5913] Process accounting resumed [ 1488.355930][T31889] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1488.363172][T31889] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1488.399337][T31889] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1488.423931][T31889] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1488.436023][T31889] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1488.472382][T31889] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1488.554842][T31889] hsr_slave_0: entered promiscuous mode [ 1488.581877][T31889] hsr_slave_1: entered promiscuous mode [ 1488.610869][T31889] debugfs: 'hsr0' already exists in 'hsr' [ 1488.630456][T31889] Cannot create hsr debugfs directory [ 1489.465927][T25399] Bluetooth: hci0: command tx timeout [ 1489.528073][ T30] audit: type=1800 audit(4295008044.352:24): pid=31945 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.5733" name="members" dev="configfs" ino=269821 res=0 errno=0 [ 1489.746142][T31889] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1489.961322][T31889] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1490.015264][T31889] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1490.086211][T31889] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1490.755136][T31889] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1490.843915][T31889] 8021q: adding VLAN 0 to HW filter on device team0 [ 1490.980840][T21829] bridge0: port 1(bridge_slave_0) entered blocking state [ 1490.988109][T21829] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1491.030753][T21829] bridge0: port 2(bridge_slave_1) entered blocking state [ 1491.038032][T21829] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1491.558667][T25399] Bluetooth: hci0: command tx timeout [ 1491.958352][T31889] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1492.918793][T31889] veth0_vlan: entered promiscuous mode [ 1492.944564][T31889] veth1_vlan: entered promiscuous mode [ 1493.412574][T31889] veth0_macvtap: entered promiscuous mode [ 1493.449564][T31889] veth1_macvtap: entered promiscuous mode [ 1493.625703][T25399] Bluetooth: hci0: command tx timeout [ 1493.648026][T31889] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1493.703377][T31889] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1493.856059][ T7750] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1493.870465][ T7750] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1493.931634][ T7750] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1493.955654][ T7750] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1494.493024][T19698] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1494.522536][T19698] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1495.164030][T19702] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1495.204243][T19702] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1498.630866][T15083] Process accounting resumed [ 1502.197108][T32135] netlink: 186 bytes leftover after parsing attributes in process `syz.5.5769'. [ 1502.327170][T32123] FAULT_INJECTION: forcing a failure. [ 1502.327170][T32123] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1502.516694][T32123] CPU: 0 UID: 0 PID: 32123 Comm: syz.9.5768 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 1502.516753][T32123] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 1502.516769][T32123] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1502.516786][T32123] Call Trace: [ 1502.516797][T32123] [ 1502.516809][T32123] dump_stack_lvl+0x100/0x190 [ 1502.516865][T32123] should_fail_ex.cold+0x5/0xa [ 1502.516899][T32123] ? prepare_alloc_pages+0x16d/0x5f0 [ 1502.516942][T32123] should_fail_alloc_page+0xeb/0x140 [ 1502.516981][T32123] prepare_alloc_pages+0x1f0/0x5f0 [ 1502.517023][T32123] __alloc_frozen_pages_noprof+0x19a/0x2ba0 [ 1502.517073][T32123] ? rcu_is_watching+0x12/0xc0 [ 1502.517117][T32123] ? trace_mm_page_alloc+0x17a/0x1d0 [ 1502.517148][T32123] ? __alloc_frozen_pages_noprof+0x2b1/0x2ba0 [ 1502.517191][T32123] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1502.517235][T32123] ? find_held_lock+0x2b/0x80 [ 1502.517260][T32123] ? is_bpf_text_address+0x8a/0x1a0 [ 1502.517299][T32123] ? is_bpf_text_address+0x8a/0x1a0 [ 1502.517340][T32123] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1502.517368][T32123] ? is_bpf_text_address+0x94/0x1a0 [ 1502.517406][T32123] ? kernel_text_address+0x8d/0x100 [ 1502.517442][T32123] ? __kernel_text_address+0xd/0x30 [ 1502.517478][T32123] ? unwind_get_return_address+0x59/0xa0 [ 1502.517514][T32123] alloc_pages_bulk_noprof+0x782/0x1490 [ 1502.517575][T32123] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 1502.517617][T32123] ? kasan_save_stack+0x30/0x50 [ 1502.517662][T32123] ? alloc_pages_noprof+0x233/0x390 [ 1502.517693][T32123] __kasan_populate_vmalloc+0xf0/0x210 [ 1502.517740][T32123] alloc_vmap_area+0x95d/0x2bd0 [ 1502.517783][T32123] ? __pfx_alloc_vmap_area+0x10/0x10 [ 1502.517818][T32123] __get_vm_area_node+0x1ca/0x330 [ 1502.517854][T32123] __vmalloc_node_range_noprof+0x213/0x1530 [ 1502.517888][T32123] ? kernel_clone+0xfc/0x9a0 [ 1502.517915][T32123] ? find_held_lock+0x2b/0x80 [ 1502.517938][T32123] ? local_lock_release+0x99/0x130 [ 1502.517966][T32123] ? local_lock_release+0x99/0x130 [ 1502.518000][T32123] ? kernel_clone+0xfc/0x9a0 [ 1502.518030][T32123] ? find_held_lock+0x2b/0x80 [ 1502.518053][T32123] ? rcu_read_unlock+0x17/0x60 [ 1502.518080][T32123] ? rcu_read_unlock+0x17/0x60 [ 1502.518107][T32123] ? obj_cgroup_charge_account+0x46d/0x640 [ 1502.518136][T32123] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1502.518170][T32123] ? __memcg_slab_post_alloc_hook+0x51b/0x990 [ 1502.518204][T32123] ? rcu_is_watching+0x12/0xc0 [ 1502.518240][T32123] ? trace_kmem_cache_alloc+0xf3/0x120 [ 1502.518270][T32123] ? kernel_clone+0xfc/0x9a0 [ 1502.518297][T32123] __vmalloc_node_noprof+0xad/0xf0 [ 1502.518328][T32123] ? kernel_clone+0xfc/0x9a0 [ 1502.518360][T32123] copy_process+0x5ec/0x7a40 [ 1502.518387][T32123] ? futex_unqueue+0x133/0x2c0 [ 1502.518433][T32123] ? __pfx_copy_process+0x10/0x10 [ 1502.518470][T32123] ? _copy_from_user+0x59/0xd0 [ 1502.518507][T32123] kernel_clone+0xfc/0x9a0 [ 1502.518546][T32123] ? __pfx_kernel_clone+0x10/0x10 [ 1502.518581][T32123] ? __pfx_futex_wait+0x10/0x10 [ 1502.518627][T32123] __do_sys_clone3+0x214/0x290 [ 1502.518657][T32123] ? __pfx___do_sys_clone3+0x10/0x10 [ 1502.518730][T32123] do_syscall_64+0x106/0xf80 [ 1502.518769][T32123] ? clear_bhb_loop+0x40/0x90 [ 1502.518800][T32123] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1502.518826][T32123] RIP: 0033:0x7fd4b839c799 [ 1502.518848][T32123] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1502.518872][T32123] RSP: 002b:00007fd4b917cef8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1502.518898][T32123] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007fd4b839c799 [ 1502.518915][T32123] RDX: 00007fd4b917cf10 RSI: 0000000000000058 RDI: 00007fd4b917cf10 [ 1502.518930][T32123] RBP: 00007fd4b8432c99 R08: 0000000000000000 R09: 0000000000000058 [ 1502.518945][T32123] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1502.518960][T32123] R13: 00007fd4b8616038 R14: 00007fd4b8615fa0 R15: 00007fffc396f088 [ 1502.518995][T32123] [ 1502.519093][T32123] syz.9.5768: vmalloc error: size 32768, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1503.093943][T32123] CPU: 0 UID: 0 PID: 32123 Comm: syz.9.5768 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 1503.094010][T32123] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 1503.094027][T32123] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1503.094046][T32123] Call Trace: [ 1503.094057][T32123] [ 1503.094069][T32123] dump_stack_lvl+0x100/0x190 [ 1503.094127][T32123] warn_alloc.cold+0x95/0x1c1 [ 1503.094183][T32123] ? __pfx_warn_alloc+0x10/0x10 [ 1503.094230][T32123] ? lockdep_hardirqs_on+0x78/0x100 [ 1503.094285][T32123] ? __get_vm_area_node+0x2c5/0x330 [ 1503.094332][T32123] ? __get_vm_area_node+0x208/0x330 [ 1503.094379][T32123] __vmalloc_node_range_noprof+0xbf4/0x1530 [ 1503.094422][T32123] ? find_held_lock+0x2b/0x80 [ 1503.094455][T32123] ? local_lock_release+0x99/0x130 [ 1503.094492][T32123] ? local_lock_release+0x99/0x130 [ 1503.094537][T32123] ? kernel_clone+0xfc/0x9a0 [ 1503.094577][T32123] ? find_held_lock+0x2b/0x80 [ 1503.094607][T32123] ? rcu_read_unlock+0x17/0x60 [ 1503.094643][T32123] ? rcu_read_unlock+0x17/0x60 [ 1503.094679][T32123] ? obj_cgroup_charge_account+0x46d/0x640 [ 1503.094718][T32123] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1503.094764][T32123] ? __memcg_slab_post_alloc_hook+0x51b/0x990 [ 1503.094809][T32123] ? rcu_is_watching+0x12/0xc0 [ 1503.094859][T32123] ? trace_kmem_cache_alloc+0xf3/0x120 [ 1503.094899][T32123] ? kernel_clone+0xfc/0x9a0 [ 1503.094936][T32123] __vmalloc_node_noprof+0xad/0xf0 [ 1503.094985][T32123] ? kernel_clone+0xfc/0x9a0 [ 1503.095028][T32123] copy_process+0x5ec/0x7a40 [ 1503.095064][T32123] ? futex_unqueue+0x133/0x2c0 [ 1503.095124][T32123] ? __pfx_copy_process+0x10/0x10 [ 1503.095176][T32123] ? _copy_from_user+0x59/0xd0 [ 1503.095221][T32123] kernel_clone+0xfc/0x9a0 [ 1503.095263][T32123] ? __pfx_kernel_clone+0x10/0x10 [ 1503.095312][T32123] ? __pfx_futex_wait+0x10/0x10 [ 1503.095374][T32123] __do_sys_clone3+0x214/0x290 [ 1503.095415][T32123] ? __pfx___do_sys_clone3+0x10/0x10 [ 1503.095507][T32123] do_syscall_64+0x106/0xf80 [ 1503.095548][T32123] ? clear_bhb_loop+0x40/0x90 [ 1503.095585][T32123] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1503.095617][T32123] RIP: 0033:0x7fd4b839c799 [ 1503.095645][T32123] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1503.095674][T32123] RSP: 002b:00007fd4b917cef8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1503.095704][T32123] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007fd4b839c799 [ 1503.095724][T32123] RDX: 00007fd4b917cf10 RSI: 0000000000000058 RDI: 00007fd4b917cf10 [ 1503.095742][T32123] RBP: 00007fd4b8432c99 R08: 0000000000000000 R09: 0000000000000058 [ 1503.095761][T32123] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1503.095779][T32123] R13: 00007fd4b8616038 R14: 00007fd4b8615fa0 R15: 00007fffc396f088 [ 1503.095820][T32123] [ 1503.886952][T32123] Mem-Info: [ 1503.890335][T32123] active_anon:72363 inactive_anon:0 isolated_anon:0 [ 1503.890335][T32123] active_file:8791 inactive_file:50237 isolated_file:0 [ 1503.890335][T32123] unevictable:768 dirty:621 writeback:0 [ 1503.890335][T32123] slab_reclaimable:12702 slab_unreclaimable:124627 [ 1503.890335][T32123] mapped:66928 shmem:50064 pagetables:1699 [ 1503.890335][T32123] sec_pagetables:0 bounce:0 [ 1503.890335][T32123] kernel_misc_reclaimable:0 [ 1503.890335][T32123] free:1162346 free_pcp:17789 free_cma:0 [ 1503.936254][T32123] Node 0 active_anon:289452kB inactive_anon:0kB active_file:35164kB inactive_file:200772kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:234112kB dirty:2484kB writeback:0kB shmem:198720kB shmem_thp:8192kB shmem_pmdmapped:0kB anon_thp:61440kB kernel_stack:13704kB pagetables:6648kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1504.095578][T32123] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:176kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:32900kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:148kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1504.232781][T32123] Node 0 DMA free:11264kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1504.332815][T32163] FAULT_INJECTION: forcing a failure. [ 1504.332815][T32163] name failslab, interval 1, probability 0, space 0, times 0 [ 1504.332866][T32163] CPU: 0 UID: 0 PID: 32163 Comm: syz.5.5776 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 1504.332915][T32163] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 1504.332928][T32163] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1504.332946][T32163] Call Trace: [ 1504.332956][T32163] [ 1504.332968][T32163] dump_stack_lvl+0x100/0x190 [ 1504.333018][T32163] should_fail_ex.cold+0x5/0xa [ 1504.333052][T32163] ? lsm_blob_alloc+0x68/0x90 [ 1504.333093][T32163] should_failslab+0xc2/0x120 [ 1504.333128][T32163] __kmalloc_noprof+0xe0/0x850 [ 1504.333171][T32163] ? audit_alloc+0xa2/0x7b0 [ 1504.333210][T32163] lsm_blob_alloc+0x68/0x90 [ 1504.333249][T32163] security_task_alloc+0x2a/0x260 [ 1504.333286][T32163] copy_process+0x258f/0x7a40 [ 1504.333316][T32163] ? futex_unqueue+0x133/0x2c0 [ 1504.333367][T32163] ? __pfx_copy_process+0x10/0x10 [ 1504.333409][T32163] ? _copy_from_user+0x59/0xd0 [ 1504.333448][T32163] kernel_clone+0xfc/0x9a0 [ 1504.333485][T32163] ? __pfx_kernel_clone+0x10/0x10 [ 1504.333525][T32163] ? __pfx_futex_wait+0x10/0x10 [ 1504.333589][T32163] __do_sys_clone3+0x214/0x290 [ 1504.333623][T32163] ? __pfx___do_sys_clone3+0x10/0x10 [ 1504.333704][T32163] do_syscall_64+0x106/0xf80 [ 1504.333744][T32163] ? clear_bhb_loop+0x40/0x90 [ 1504.333779][T32163] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1504.333807][T32163] RIP: 0033:0x7f4d3439c799 [ 1504.333832][T32163] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1504.333861][T32163] RSP: 002b:00007f4d325f5ef8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1504.333889][T32163] RAX: ffffffffffffffda RBX: 0000000000000057 RCX: 00007f4d3439c799 [ 1504.333908][T32163] RDX: 00007f4d325f5f10 RSI: 0000000000000057 RDI: 00007f4d325f5f10 [ 1504.333927][T32163] RBP: 00007f4d34432c99 R08: 0000000000000000 R09: 0000000000000057 [ 1504.333945][T32163] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1504.333963][T32163] R13: 00007f4d34616128 R14: 00007f4d34616090 R15: 00007ffe9f37f7d8 [ 1504.334004][T32163] [ 1504.618210][T32123] lowmem_reserve[]: 0 2477 2478 2478 2478 [ 1504.992692][T32123] Node 0 DMA32 free:757112kB boost:0kB min:34304kB low:42880kB high:51456kB reserved_highatomic:0KB free_highatomic:0KB active_anon:308128kB inactive_anon:0kB active_file:35164kB inactive_file:200772kB unevictable:1536kB writepending:2588kB zspages:0kB present:3129332kB managed:2537340kB mlocked:0kB bounce:0kB free_pcp:62776kB local_pcp:35284kB free_cma:0kB [ 1505.146173][T32123] lowmem_reserve[]: 0 0 1 1 1 [ 1505.151299][T32123] Node 0 Normal free:12kB boost:0kB min:12kB low:12kB high:12kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1056kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1505.215637][T32123] lowmem_reserve[]: 0 0 0 0 0 [ 1505.220447][T32123] Node 1 Normal free:3871800kB boost:0kB min:55584kB low:69480kB high:83376kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:176kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 1505.370720][T32123] lowmem_reserve[]: 0 0 0 0 0 [ 1505.375824][T32123] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 2*4096kB (UM) = 11264kB [ 1505.452305][T32123] Node 0 DMA32: 883*4kB (UME) 4362*8kB (UME) 4283*16kB (UME) 165*32kB (UME) 77*64kB (UME) 392*128kB (UME) 627*256kB (UME) 349*512kB (UME) 257*1024kB (UME) 11*2048kB (UM) 0*4096kB = 792236kB [ 1505.565611][T32123] Node 0 Normal: 1*4kB (U) 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 1505.631394][T32123] Node 1 Normal: 4*4kB (UM) 15*8kB (U) 11*16kB (UM) 10*32kB (UM) 9*64kB (UM) 9*128kB (UM) 7*256kB (UM) 4*512kB (UM) 3*1024kB (UM) 2*2048kB (U) 942*4096kB (UM) = 3871800kB [ 1505.750563][T32123] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1505.841251][T32123] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1505.874370][T32123] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1505.925700][T32123] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1505.966601][T32123] 97386 total pagecache pages [ 1506.005668][T32123] 2 pages in swap cache [ 1506.015685][T32123] Free swap = 108452kB [ 1506.019911][T32123] Total swap = 124996kB [ 1506.024110][T32123] 2097051 pages RAM [ 1506.047003][T32123] 0 pages HighMem/MovableOnly [ 1506.066620][T32123] 430837 pages reserved [ 1506.070931][T32123] 0 pages cma reserved [ 1507.525709][T32196] netlink: 186 bytes leftover after parsing attributes in process `syz.4.5782'. [ 1509.862564][T32224] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1510.731510][T32240] nvme_fcloop: unknown parameter or missing value '7' [ 1511.779441][T32238] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5792'. [ 1514.506121][ T31] INFO: task syz-executor:25832 blocked for more than 143 seconds. [ 1514.523623][ T31] Tainted: G U I L syzkaller #0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1514.556365][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1514.581077][ T31] task:syz-executor state:D stack:23496 pid:25832 tgid:25832 ppid:1 task_flags:0x400140 flags:0x00080002 [ 1514.643786][ T31] Call Trace: [ 1514.655736][ T31] [ 1514.658760][ T31] __schedule+0xfee/0x6120 [ 1514.663243][ T31] ? __lock_acquire+0x4a5/0x2630 [ 1514.669347][ T31] ? __pfx___schedule+0x10/0x10 [ 1514.674757][ T31] ? find_held_lock+0x2b/0x80 [ 1514.691215][ T31] ? schedule+0x2bf/0x390 [ 1514.705918][ T31] schedule+0xdd/0x390 [ 1514.717317][ T31] schedule_preempt_disabled+0x13/0x30 [ 1514.732906][ T31] __mutex_lock+0xc9a/0x1b90 [ 1514.757046][ T31] ? nfsd_shutdown_threads+0x5b/0xf0 [ 1514.835683][ T31] ? __lock_acquire+0x4a5/0x2630 [ 1514.849766][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1514.868883][ T31] ? net_generic+0xea/0x2a0 [ 1514.881971][ T31] ? net_generic+0xea/0x2a0 [ 1514.901325][ T31] ? nfsd_shutdown_threads+0x5b/0xf0 [ 1514.972451][ T31] nfsd_shutdown_threads+0x5b/0xf0 [ 1515.009677][ T31] nfsd_umount+0x3b/0x60 [ 1515.013982][ T31] deactivate_locked_super+0xc1/0x1b0 [ 1515.066013][ T31] deactivate_super+0xe7/0x110 [ 1515.070995][ T31] cleanup_mnt+0x21f/0x450 [ 1515.115596][ T31] task_work_run+0x150/0x240 [ 1515.120287][ T31] ? __pfx_task_work_run+0x10/0x10 [ 1515.141580][ T31] exit_to_user_mode_loop+0x100/0x4a0 [ 1515.149404][ T31] do_syscall_64+0x668/0xf80 [ 1515.154075][ T31] ? clear_bhb_loop+0x40/0x90 [ 1515.162670][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1515.169646][ T31] RIP: 0033:0x7f59e439d9d7 [ 1515.174202][ T31] RSP: 002b:00007fff7bed2fe8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 1515.183214][ T31] RAX: 0000000000000000 RBX: 00007f59e4432050 RCX: 00007f59e439d9d7 [ 1515.192228][ T31] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff7bed30a0 [ 1515.200725][ T31] RBP: 00007fff7bed30a0 R08: 00007fff7bed40a0 R09: 00000000ffffffff [ 1515.219836][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff7bed4130 [ 1515.228261][ T31] R13: 00007f59e4432050 R14: 000000000014dcbe R15: 00007fff7bed4170 [ 1515.238184][ T31] [ 1515.241383][ T31] [ 1515.241383][ T31] Showing all locks held in the system: [ 1515.283669][ T31] 3 locks held by kworker/1:1/29: [ 1515.297715][ T31] #0: ffff88813fe63148 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x1310/0x19a0 [ 1515.322332][ T31] #1: ffffc90000a47d08 ((fqdir_free_work).work){+.+.}-{0:0}, at: process_one_work+0x988/0x19a0 [ 1515.365628][ T31] #2: ffffffff8e7f3200 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x48/0x6d0 [ 1515.386460][ T31] 1 lock held by khungtaskd/31: [ 1515.396233][ T31] #0: ffffffff8e7e7720 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 1515.435565][ T31] 4 locks held by kworker/u8:8/19702: [ 1515.441002][ T31] #0: ffff88801c6ae948 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x1310/0x19a0 [ 1515.525609][ T31] #1: ffffc90004b3fd08 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x988/0x19a0 [ 1515.575508][ T31] #2: ffffffff905fca90 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xb8/0x920 [ 1515.584941][ T31] #3: ffffffff8e7f3338 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x19e/0x3c0 [ 1515.655621][ T31] 2 locks held by syz.1.4344/25515: [ 1515.667399][ T31] #0: ffffffff906c1610 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1515.702440][T25820] EXT4-fs error (device sda1): ext4_validate_block_bitmap:423: comm syz-executor: bg 1: bad block bitmap checksum [ 1515.705698][ T31] #1: ffffffff8ec585a8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x6c1/0xc00 [ 1515.769295][T25820] EXT4-fs error (device sda1) in ext4_mb_clear_bb:6685: Filesystem failed CRC [ 1515.790263][ T31] 3 locks held by syz-executor/25820: [ 1515.796899][ T31] 2 locks held by syz-executor/25825: [ 1515.815856][ T31] #0: ffff88803b6100e0 (&type->s_umount_key#52){++++}-{4:4}, at: deactivate_super+0xdf/0x110 [ 1515.845562][ T31] #1: ffffffff8ec585a8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 1515.865774][ T31] 2 locks held by syz-executor/25832: [ 1515.871204][ T31] #0: ffff888089d780e0 (&type->s_umount_key#52){++++}-{4:4}, at: deactivate_super+0xdf/0x110 [ 1515.895550][ T31] #1: ffffffff8ec585a8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 1515.915526][ T31] 3 locks held by kworker/1:2/26005: [ 1515.920867][ T31] #0: ffff88813fe63148 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x1310/0x19a0 [ 1515.955590][ T31] #1: ffffc9000217fd08 (free_ipc_work){+.+.}-{0:0}, at: process_one_work+0x988/0x19a0 [ 1515.967715][ T31] #2: ffffffff8e7f3338 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x27f/0x3c0 [ 1515.977851][ T31] 2 locks held by syz.6.4583/26685: [ 1515.983266][ T31] #0: ffff88807c3980e0 (&type->s_umount_key#52){++++}-{4:4}, at: deactivate_super+0xdf/0x110 [ 1515.994864][ T31] #1: ffffffff8ec585a8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 1516.004907][ T31] 2 locks held by syz-executor/30158: [ 1516.010532][ T31] #0: ffff8880516f60e0 (&type->s_umount_key#52){++++}-{4:4}, at: deactivate_super+0xdf/0x110 [ 1516.021053][ T31] #1: ffffffff8ec585a8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 1516.033544][ T31] 2 locks held by getty/31879: [ 1516.038483][ T31] #0: ffff8880382710a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 1516.048645][ T31] #1: ffffc90006c9d2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x1500 [ 1516.059097][ T31] 4 locks held by syz.5.5806/32293: [ 1516.064297][ T31] #0: ffff88806920cec0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_dev_do_close+0x26/0xb0 [ 1516.074109][ T31] #1: ffff88806920c0c0 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x35c/0x1240 [ 1516.083965][ T31] #2: ffffffff908adf88 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xbb/0x280 [ 1516.094264][ T31] #3: ffff88805b00d2f8 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x80/0x770 [ 1516.103742][ T31] 3 locks held by syz.9.5809/32304: [ 1516.109540][ T31] #0: ffff8880775c4ec0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_dev_do_close+0x26/0xb0 [ 1516.119399][ T31] #1: ffff8880775c40c0 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x35c/0x1240 [ 1516.129231][ T31] #2: ffffffff908adf88 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xbb/0x280 [ 1516.141252][ T31] 3 locks held by syz.6.5810/32307: [ 1516.146588][ T31] #0: ffff8880371c0ec0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_dev_do_close+0x26/0xb0 [ 1516.156417][ T31] #1: ffff8880371c00c0 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x35c/0x1240 [ 1516.166598][ T31] #2: ffffffff908adf88 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xbb/0x280 [ 1516.178032][ T31] [ 1516.180424][ T31] ============================================= [ 1516.180424][ T31] [ 1516.213692][ T31] NMI backtrace for cpu 1 [ 1516.213720][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G U I L syzkaller #0 PREEMPT(full) [ 1516.213767][ T31] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 1516.213781][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1516.213798][ T31] Call Trace: [ 1516.213809][ T31] [ 1516.213819][ T31] dump_stack_lvl+0x100/0x190 [ 1516.213860][ T31] nmi_cpu_backtrace.cold+0x12d/0x151 [ 1516.213899][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1516.213935][ T31] nmi_trigger_cpumask_backtrace+0x1d7/0x230 [ 1516.213969][ T31] sys_info+0x141/0x190 [ 1516.214063][ T31] watchdog+0xd25/0x1050 [ 1516.214096][ T31] ? __pfx_watchdog+0x10/0x10 [ 1516.214120][ T31] ? __kthread_parkme+0x18c/0x230 [ 1516.214151][ T31] ? kthread+0x13a/0x450 [ 1516.214180][ T31] ? __pfx_watchdog+0x10/0x10 [ 1516.214201][ T31] kthread+0x370/0x450 [ 1516.214230][ T31] ? __pfx_kthread+0x10/0x10 [ 1516.214262][ T31] ret_from_fork+0x754/0xd80 [ 1516.214298][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1516.214335][ T31] ? __switch_to+0x7b4/0x1120 [ 1516.214361][ T31] ? __pfx_kthread+0x10/0x10 [ 1516.214402][ T31] ret_from_fork_asm+0x1a/0x30 [ 1516.214443][ T31] [ 1516.214457][ T31] Sending NMI from CPU 1 to CPUs 0: [ 1516.348373][ C0] NMI backtrace for cpu 0 [ 1516.348399][ C0] CPU: 0 UID: 0 PID: 7750 Comm: kworker/u8:10 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 1516.348440][ C0] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 1516.348450][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1516.348465][ C0] Workqueue: bat_events batadv_iv_send_outstanding_bat_ogm_packet [ 1516.348592][ C0] RIP: 0010:validate_xmit_skb+0xab3/0x1590 [ 1516.348625][ C0] Code: 80 00 00 00 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 0f b6 04 02 84 c0 74 06 0f 8e 6a 09 00 00 0f b6 ab 80 00 00 00 60 00 00 00 83 e5 60 89 ee e8 0e 1e a8 f8 40 80 fd 60 0f 84 06 [ 1516.348648][ C0] RSP: 0018:ffffc900044df890 EFLAGS: 00000246 [ 1516.348667][ C0] RAX: 0000000000000000 RBX: ffff88805b1303c0 RCX: ffffffff89600865 [ 1516.348684][ C0] RDX: 1ffff1100b626088 RSI: ffffffff89600926 RDI: ffff88805b130440 [ 1516.348701][ C0] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000 [ 1516.348716][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: ffff88805c204800 [ 1516.348731][ C0] R13: 0000000000000000 R14: ffff88805b130444 R15: ffff88807cf6a000 [ 1516.348748][ C0] FS: 0000000000000000(0000) GS:ffff888124346000(0000) knlGS:0000000000000000 [ 1516.348773][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1516.348790][ C0] CR2: 00007f7155347e20 CR3: 000000000e598000 CR4: 00000000003526f0 [ 1516.348807][ C0] Call Trace: [ 1516.348815][ C0] [ 1516.348831][ C0] __dev_queue_xmit+0x1de8/0x4800 [ 1516.348861][ C0] ? rcu_is_watching+0x12/0xc0 [ 1516.348904][ C0] ? trace_kmalloc+0x101/0x130 [ 1516.348929][ C0] ? __kasan_kmalloc+0xaa/0xb0 [ 1516.348970][ C0] ? __kmalloc_node_track_caller_noprof+0x321/0x850 [ 1516.349007][ C0] ? __pfx___dev_queue_xmit+0x10/0x10 [ 1516.349035][ C0] ? skb_release_data+0x6f0/0x9d0 [ 1516.349070][ C0] ? kmalloc_reserve+0xf9/0x350 [ 1516.349096][ C0] ? skb_headers_offset_update+0x129/0x260 [ 1516.349120][ C0] ? pskb_expand_head+0x5c0/0xfe0 [ 1516.349156][ C0] ? __pfx_pskb_expand_head+0x10/0x10 [ 1516.349189][ C0] ? rcu_is_watching+0x12/0xc0 [ 1516.349224][ C0] ? skb_push+0x9a/0xc0 [ 1516.349249][ C0] batadv_send_skb_packet+0x53e/0x6e0 [ 1516.349306][ C0] batadv_iv_send_outstanding_bat_ogm_packet+0x677/0x860 [ 1516.349347][ C0] process_one_work+0xa23/0x19a0 [ 1516.349387][ C0] ? __pfx_process_one_work+0x10/0x10 [ 1516.349426][ C0] ? __pfx_batadv_iv_send_outstanding_bat_ogm_packet+0x10/0x10 [ 1516.349463][ C0] worker_thread+0x5ef/0xe50 [ 1516.349501][ C0] ? kthread+0x13a/0x450 [ 1516.349529][ C0] ? __pfx_worker_thread+0x10/0x10 [ 1516.349559][ C0] kthread+0x370/0x450 [ 1516.349589][ C0] ? __pfx_kthread+0x10/0x10 [ 1516.349620][ C0] ret_from_fork+0x754/0xd80 [ 1516.349655][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1516.349690][ C0] ? __switch_to+0x7b4/0x1120 [ 1516.349718][ C0] ? __pfx_kthread+0x10/0x10 [ 1516.349749][ C0] ret_from_fork_asm+0x1a/0x30 [ 1516.349784][ C0] [ 1516.696738][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 1516.703660][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G U I L syzkaller #0 PREEMPT(full) [ 1516.714396][ T31] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 1516.721791][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1516.731887][ T31] Call Trace: [ 1516.735169][ T31] [ 1516.738098][ T31] dump_stack_lvl+0x100/0x190 [ 1516.742790][ T31] vpanic+0x552/0x970 [ 1516.746773][ T31] ? __pfx_vpanic+0x10/0x10 [ 1516.751283][ T31] ? nmi_trigger_cpumask_backtrace+0x182/0x230 [ 1516.757449][ T31] panic+0xd1/0xe0 [ 1516.761172][ T31] ? __pfx_panic+0x10/0x10 [ 1516.765609][ T31] ? nmi_trigger_cpumask_backtrace+0x1b5/0x230 [ 1516.771824][ T31] ? nmi_trigger_cpumask_backtrace+0x1f6/0x230 [ 1516.778120][ T31] ? nmi_trigger_cpumask_backtrace+0x200/0x230 [ 1516.784393][ T31] ? watchdog.cold+0x198/0x1ca [ 1516.789275][ T31] ? watchdog+0xd35/0x1050 [ 1516.793712][ T31] watchdog.cold+0x1a9/0x1ca [ 1516.798343][ T31] ? __pfx_watchdog+0x10/0x10 [ 1516.803038][ T31] ? __kthread_parkme+0x18c/0x230 [ 1516.808077][ T31] ? kthread+0x13a/0x450 [ 1516.812342][ T31] ? __pfx_watchdog+0x10/0x10 [ 1516.817026][ T31] kthread+0x370/0x450 [ 1516.821104][ T31] ? __pfx_kthread+0x10/0x10 [ 1516.825729][ T31] ret_from_fork+0x754/0xd80 [ 1516.830364][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1516.835494][ T31] ? __switch_to+0x7b4/0x1120 [ 1516.840195][ T31] ? __pfx_kthread+0x10/0x10 [ 1516.844790][ T31] ret_from_fork_asm+0x1a/0x30 [ 1516.849679][ T31] [ 1516.853100][ T31] Kernel Offset: disabled [ 1516.857426][ T31] Rebooting in 86400 seconds..