last executing test programs: 17m11.435906925s ago: executing program 1 (id=256): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0) mknod$auto(&(0x7f0000001040)=':,\x00', 0xca, 0xfffffffa) r0 = openat$auto_rng_chrdev_ops_core(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) read$auto_rng_chrdev_ops_core(r0, &(0x7f0000000040)=""/4096, 0xfffffe82) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = mq_open$auto(&(0x7f00000000c0)='\x12\xe6D\b\x9e\x00\x80\x8d\f9w-\xbd!\x9eb\xed\xfb\x0f\xe5\x9dZ\xc2\xd1\x01wBV\x91\x8f_\xc0.\x84\xfe\x84\xd1se\x01\x06\x00\xb3\x13_Y&\xa9\x88\xe4\xa2\xb0V\x85\x92<\xb6\xdcT \\\xf2\v\xb1\xe2\xd8\xfa\xd8V\xe5\x00\xfa\xe9!\xc5<\xce\x18=\x06\xdagq\xb5\r\t\xb2\xde\x99\xd50\xbb\x192\x1c4\x86\xc0\xc1-\xd5\x10\xe3\xfc*[8\x89h\xc5\xba\xff\xc8u50xffffffffffffffff}) r4 = semctl$auto_GETPID(0x10001, 0x0, 0xb, 0x2) ioctl$auto_LOOP_CTL_REMOVE(r3, 0x4c81, r4) mremap$auto(0x0, 0x4, 0x4, 0x7, 0x100000000) r5 = openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000040), 0x2001, 0x0) ioctl$auto(r5, 0x400454ca, r5) 17m5.63575306s ago: executing program 1 (id=280): openat$auto_deferred_devs_fops_(0xffffffffffffff9c, &(0x7f00000003c0), 0x40000, 0x0) r0 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) (async) pwrite64$auto(0xc8, &(0x7f0000000040)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x86\xdde\x1cJ\x99\x00\x00\x00\x00\x00\x00\xfd\xfd\xd3\xd3\x1d\xf8\xbe\x01\x00\x00\x00\'\x03\x00\x00\x9f\x1e\xf9\xa4*\x01\x00\x00\x00^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e#\xae\xa9i8W\xe5Iq\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#)\x9b\xd0\xbdn\x1d\x00\xeb]B\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00'/223, 0xfffffffffffffffd, 0x82) (async) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x80000002, 0x1d, 0x3000, 0xfffffff8, 0x7, 0x400a, 0xffffffffffffffff, [], {0x6, 0x6, 0x6, 0x29c, 0x1, 0x7f, 0x0, 0x6, 0x1}, {0x10100, 0x1, 0x52, 0x85, 0x2, 0x1a7b870a, 0x76c5, 0x8, 0x100000000}}) (async) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) (async) r1 = socket(0x10, 0x2, 0x0) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="10002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) (async) sendmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000000)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x24, 0x4008) poll$auto(&(0x7f0000000040)={0x3, 0x1, 0x5}, 0x5, 0x80000000) (async) r2 = openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/ieee80211/phy1/aql_txq_limit\x00', 0x822, 0x0) close_range$auto(0x2, 0x8, 0x0) (async) ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000080), 0x88000, 0x0) ioctl$auto(0x3, 0xae41, r3) write$auto(r2, 0x0, 0xa50f) (async) clone$auto(0x6fc, 0x4dbb2, 0x0, 0x0, 0x4000c1a) (async) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x20100, 0x0) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) (async) openat$auto_debugfs_devm_entry_ops_file(0xffffffffffffff9c, 0x0, 0x505100, 0x0) ioctl$auto(0x3, 0x400454ca, 0x38) (async) sysfs$auto(0x2, 0x1e, 0x0) (async) ioctl$auto_TUNSETVNETLE2(r0, 0x400454dc, 0x0) write$auto(0x3, 0x0, 0xfdf3) 16m50.423153038s ago: executing program 32 (id=280): openat$auto_deferred_devs_fops_(0xffffffffffffff9c, &(0x7f00000003c0), 0x40000, 0x0) r0 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) (async) pwrite64$auto(0xc8, &(0x7f0000000040)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x86\xdde\x1cJ\x99\x00\x00\x00\x00\x00\x00\xfd\xfd\xd3\xd3\x1d\xf8\xbe\x01\x00\x00\x00\'\x03\x00\x00\x9f\x1e\xf9\xa4*\x01\x00\x00\x00^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e#\xae\xa9i8W\xe5Iq\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#)\x9b\xd0\xbdn\x1d\x00\xeb]B\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00'/223, 0xfffffffffffffffd, 0x82) (async) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x80000002, 0x1d, 0x3000, 0xfffffff8, 0x7, 0x400a, 0xffffffffffffffff, [], {0x6, 0x6, 0x6, 0x29c, 0x1, 0x7f, 0x0, 0x6, 0x1}, {0x10100, 0x1, 0x52, 0x85, 0x2, 0x1a7b870a, 0x76c5, 0x8, 0x100000000}}) (async) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) (async) r1 = socket(0x10, 0x2, 0x0) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="10002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) (async) sendmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000000)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x24, 0x4008) poll$auto(&(0x7f0000000040)={0x3, 0x1, 0x5}, 0x5, 0x80000000) (async) r2 = openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/ieee80211/phy1/aql_txq_limit\x00', 0x822, 0x0) close_range$auto(0x2, 0x8, 0x0) (async) ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000080), 0x88000, 0x0) ioctl$auto(0x3, 0xae41, r3) write$auto(r2, 0x0, 0xa50f) (async) clone$auto(0x6fc, 0x4dbb2, 0x0, 0x0, 0x4000c1a) (async) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x20100, 0x0) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) (async) openat$auto_debugfs_devm_entry_ops_file(0xffffffffffffff9c, 0x0, 0x505100, 0x0) ioctl$auto(0x3, 0x400454ca, 0x38) (async) sysfs$auto(0x2, 0x1e, 0x0) (async) ioctl$auto_TUNSETVNETLE2(r0, 0x400454dc, 0x0) write$auto(0x3, 0x0, 0xfdf3) 14m58.713343235s ago: executing program 2 (id=859): openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/irq/11/smp_affinity\x00', 0xe0182, 0x0) readv$auto(0x3, &(0x7f0000000000)={0x0, 0x10000ffff}, 0x1) unshare$auto(0x40000080) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) prctl$auto(0x2, 0x3, 0x0, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x89b0, &(0x7f0000000080)={'ip6tnl0\x00'}) mmap$auto(0x0, 0x2000d, 0x4000000000df, 0xeb1, 0x404, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x5, 0x0) r0 = openat$auto_generic(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/kpagecgroup\x00', 0x20000, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/platform/vidtv.0/i2c-0/new_device\x00', 0x4a001, 0x0) sendmsg$auto_MAC802154_HWSIM_CMD_NEW_EDGE(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40001}, 0x24040004) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/irq/8/spurious\x00', 0x0, 0x0) socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x40009, 0xfff, 0x9b72, 0xffffffffffffffff, 0x28000) io_uring_setup$auto(0x6, 0x0) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video7\x00', 0x70d902, 0x0) openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000040)='/dev/binderfs/binder1\x00', 0x189160, 0x0) openat$auto_stats_fops_(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$auto_BINDER_FREEZE(r0, 0x400c620e, 0x0) readv$auto(0x3, &(0x7f00000001c0)={0x0, 0x1000}, 0x100000007) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) lsm_get_self_attr$auto(0x68, 0x0, &(0x7f0000002440)=0x8, 0x0) getrandom$auto(0x0, 0xbe68, 0x8) listmount$auto(0xfffffffffffffffd, 0x0, 0x8, 0x0) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0x3, 0x4) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) r1 = fanotify_init$auto(0x5, 0x2000000000002) fanotify_mark$auto(r1, 0x1, 0x803a, r1, 0x0) 14m54.574541521s ago: executing program 2 (id=872): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x14fa02, 0x0) mmap$auto(0x0, 0x810004, 0x400000000ffb, 0x8000000008011, 0x3, 0x8000) mmap$auto(0x0, 0x5, 0xfff, 0x44eb2, 0x10006, 0x300000000000) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) setfsuid$auto(0xee00) r1 = pidfd_open$auto(0x1, 0x0) process_madvise$auto(r1, 0x0, 0x3, 0x3, 0x8000000000000000) ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) mprotect$auto(0x0, 0x806121, 0x6) 14m53.625571203s ago: executing program 2 (id=874): socket(0xa, 0x1, 0x10001) mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x20000008000) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x3, 0x3a) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) getsockopt$auto(0x6, 0x29, 0x7, 0xfffffffffffffffe, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x0) mmap$auto(0x0, 0x1, 0x1, 0xeb1, 0xfffffffffffffffa, 0x8000) mremap$auto(0x0, 0x7, 0x3fd6, 0x0, 0x1ffffffe) futex$auto(0x0, 0x3, 0x2, 0x0, 0x0, 0x71a8dce0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4044810}, 0x800) ioctl$auto_MON_IOCX_MFETCH(0xffffffffffffffff, 0xc0109207, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_tracing_entries_fops_trace(0xffffffffffffff9c, 0x0, 0x1, 0x0) write$auto(0xffffffffffffffff, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/system/node/node1/compact\x00', 0xc2481, 0x0) writev$auto(r0, &(0x7f0000000080)={0x0, 0x1000}, 0x3) open(&(0x7f0000000040)='./file0\x00', 0x149443, 0x0) sendmsg$auto_KSMBD_EVENT_LOGIN_RESPONSE(0xffffffffffffffff, 0x0, 0x30004850) msync$auto(0x1ffff000, 0x1800000000000fe, 0x400000004) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, 0x0, 0x40802, 0x0) 14m52.750565834s ago: executing program 2 (id=880): pipe2$auto(0x0, 0x0) (async, rerun: 64) close_range$auto(0x2, 0x8, 0x0) (rerun: 64) r0 = open(&(0x7f0000000240)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x138) open_by_handle_at$auto(r0, &(0x7f0000000040)={0x21, 0x2, '\a\x00\x00\x00\x00\x00\x00\x00'}, 0x20401) (async) socket(0xa, 0x2, 0x0) (async) socket(0x2b, 0x1, 0x1) (async) bind$auto(0x3, &(0x7f0000000040)=@generic={0xa, "0232890300"}, 0x6c) (async) r1 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000100)='/dev/bus/usb/004/001\x00', 0x80142, 0x0) ioctl$auto_USBDEVFS_CLEAR_HALT(r1, 0x80045515, &(0x7f0000000000)=0x81) (async) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) fanotify_init$auto(0x5, 0x2000000000002) (async) open(0x0, 0x12ba7e, 0x45) (async) close_range$auto(0x2, 0x8, 0x0) (async, rerun: 32) socket(0x10, 0x2, 0xc) (async, rerun: 32) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0xf026ebcd35cc7fd5, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) (async) ioctl$auto(0x3, 0xae41, r3) (async) ioctl$auto_KVM_GET_MSRS(r2, 0x4008ae89, &(0x7f00000001c0)={0xdd, 0x0, [{0x4d0, 0x400}, {0x1ff, 0xd09, 0x4}, {0x401, 0x5, 0x20}]}) 14m52.479521059s ago: executing program 2 (id=882): mkdir$auto(&(0x7f0000000140)='./file0\x00', 0xfffd) open(&(0x7f0000000080)='./file1\x00', 0x460000, 0x3) mkdir$auto(&(0x7f00000000c0)='./file1\x00', 0x9) prctl$auto_PR_SET_VMA(0x53564d41, 0x2, 0xfff, 0x7, 0x2000000) lsm_list_modules$auto(0x0, 0x0, 0x0) mkdir$auto(&(0x7f0000000000)='./file0/file0\x00', 0x54c) rename$auto(&(0x7f0000000480)='./file1\x00', &(0x7f0000000040)='./file0/file0\x00') close_range$auto(0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x11, 0x80003, 0x300) setsockopt$auto(r0, 0x107, 0x16, 0x0, 0x4) r1 = socket(0x2, 0x2, 0x1) r2 = bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_4={0x1f, r1, 0x10000}, 0x10) socket(0x2, 0x2, 0x73) r3 = socket(0x2, 0x80002, 0x73) bind$auto(r3, &(0x7f0000000340)=@l2tp={0x2, 0x0, @multicast2, 0x4}, 0x6b) prctl$auto_PR_SME_GET_VL(0x40, 0x4, 0xffffffffffffffff, 0x2bc670a3, 0x3) ioctl$auto_PPPIOCSCOMPRESS(r2, 0x4010744d, &(0x7f0000000040)={&(0x7f0000000000)='\x00', 0x3, 0x3}) 14m52.259994674s ago: executing program 2 (id=884): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) rt_sigprocmask$auto(0x0, &(0x7f0000000000)={0xfffffffffffffe01}, 0x0, 0x8) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/usb/usbmon/35u\x00', 0x20100, 0x0) r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x202002, 0x0) r1 = socket(0x10, 0x2, 0x4) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0xc) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYRES8, @ANYRES32=0x0, @ANYRES8=r0], 0x18}, 0x1, 0x0, 0x0, 0x2400c0c0}, 0x2004c802) write$auto(r1, &(0x7f0000000000)='-\x00', 0xfdef) mmap$auto(0x0, 0x3, 0xfff, 0x9b72, 0xffffffffffffffff, 0x0) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0xa, 0x1, 0x84) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) setsockopt$auto(0x3, 0x10000000084, 0x77, 0x0, 0xc) syz_genetlink_get_family_id$auto_ipvs(0x0, 0xffffffffffffffff) madvise$auto(0x108000, 0x800032, 0x4) 14m36.86513882s ago: executing program 33 (id=884): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) rt_sigprocmask$auto(0x0, &(0x7f0000000000)={0xfffffffffffffe01}, 0x0, 0x8) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/usb/usbmon/35u\x00', 0x20100, 0x0) r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x202002, 0x0) r1 = socket(0x10, 0x2, 0x4) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0xc) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYRES8, @ANYRES32=0x0, @ANYRES8=r0], 0x18}, 0x1, 0x0, 0x0, 0x2400c0c0}, 0x2004c802) write$auto(r1, &(0x7f0000000000)='-\x00', 0xfdef) mmap$auto(0x0, 0x3, 0xfff, 0x9b72, 0xffffffffffffffff, 0x0) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0xa, 0x1, 0x84) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) setsockopt$auto(0x3, 0x10000000084, 0x77, 0x0, 0xc) syz_genetlink_get_family_id$auto_ipvs(0x0, 0xffffffffffffffff) madvise$auto(0x108000, 0x800032, 0x4) 7m59.823128014s ago: executing program 5 (id=2740): r0 = open(&(0x7f0000000000)='./file0\x00', 0x4242, 0xe1d2b27bdc14aabc) fallocate$auto(r0, 0x0, 0x7, 0x4cbd5d) lchown$auto(&(0x7f0000000080)='./file0\x00', 0xee01, 0xee00) write$auto(0x3, 0x0, 0x100082) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.pressure\x00', 0x42802, 0x0) write$auto(r1, &(0x7f0000000200)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94&\x81\xe2\x13\x8f\xea#\xf8F\xbbOO]e[\xabxo\xd9\x90\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\b\xc1\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xcbA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xa5\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5Y\a\xc1\xe9(\x85R\x96\xe4\x86\\\x13\xa9\x1a&\x19\x8a9\x82\xf0\x83\f\xf7\xeb\x00\x00\x00\x00\x00\x00\x00\x00v\x92\xfc\xf3\x1a/\x99dcA\xf4B\xf3\xba\x17\xea', 0x9) r2 = openat$auto_rng_chrdev_ops_core(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) read$auto_rng_chrdev_ops_core(r2, &(0x7f0000000040)=""/4096, 0xfffffe82) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) sendto$auto(0x3, 0x0, 0x2000f, 0x101, 0x0, 0x1c) ioctl$auto(0xffffffffffffffff, 0x800064d1, 0xffffffffffffffff) r3 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, 0x0, 0x480080, 0x0) read$auto_v4l2_fops_v4l2_dev(r3, 0x0, 0x0) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) r4 = open(0x0, 0x0, 0x101) setsockopt$auto(r3, 0x4, 0x7, &(0x7f0000001040)='/dev/hwrng\x00', 0x7ff) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) mremap$auto(0x110c230000, 0x0, 0x101, 0x3, 0x0) r5 = socket(0x10, 0x1, 0x0) sendmmsg$auto(r5, &(0x7f0000000200)={{0x0, 0x2000000, &(0x7f0000000080)={0x0, 0xfc0}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) syz_genetlink_get_family_id$auto_seg6(&(0x7f00000010c0), r4) syz_clone3(&(0x7f0000002240)={0x28400, &(0x7f0000001100), 0x0, 0x0, {0x2c}, 0x0, 0x0, 0x0, 0x0, 0x0, {r2}}, 0x58) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r6 = socket(0x2, 0x2, 0x1) r7 = bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_4={0x1f, r6, 0x90000, 0xffffffffffffffff}, 0x10) bpf$auto(0x3, &(0x7f0000000240)=@bpf_attr_5={@target_fd=r7, 0xffffffffffffffff, 0xc000, 0x9, 0xffffffffffffffff, @relative_fd=r8, 0x40}, 0x5) r9 = setfsuid$auto(0xee01) keyctl$auto(0xb, 0xffffffffffffffff, r9, 0x0, 0x7a) 7m58.741143211s ago: executing program 5 (id=2749): mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) (async) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video40\x00', 0x101, 0x0) socket(0x2, 0x1, 0x106) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000600), 0xffffffffffffffff) (async) r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000600), 0xffffffffffffffff) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) (async) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000900), 0x20000, 0x0) (async) openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000900), 0x20000, 0x0) openat$auto_nvram_misc_fops_nvram(0xffffffffffffff9c, 0x0, 0x3bf400, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) ioctl$auto(r3, 0x4b49, 0x9) sysfs$auto(0x2, 0x4c, 0x0) r4 = fsopen$auto(0x0, 0x1) r5 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/event0\x00', 0x2f01, 0x0) write$auto(0x3, 0x0, 0xfffffdef) (async) write$auto(0x3, 0x0, 0xfffffdef) fsconfig$auto(r4, 0x3, 0x0, &(0x7f0000000040)='+', 0x0) r6 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/conf/virt_wifi0/route_localnet\x00', 0x2202, 0x0) sendfile$auto(r6, r6, 0x0, 0x7fffe000) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) socket(0x11, 0x80003, 0x300) select$auto(0x9, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0x3, 0x1, 0x948b, 0x9, 0x15f4da07, 0x6, 0x2, 0x64, 0x80000020, 0x1000, 0xb, 0x9, 0x2, 0xd8]}, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x8000000000001fe, 0x20000000007, 0x4, 0x1000000000000bc3, 0x800, 0x6, 0xff, 0x10002, 0x400000000003, 0x3, 0xfffffffffffffffc, 0xfffffffffffffffe, 0x80000000, 0x9, 0xffffdfffffffff81, 0x4]}, 0x0) (async) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x8000000000001fe, 0x20000000007, 0x4, 0x1000000000000bc3, 0x800, 0x6, 0xff, 0x10002, 0x400000000003, 0x3, 0xfffffffffffffffc, 0xfffffffffffffffe, 0x80000000, 0x9, 0xffffdfffffffff81, 0x4]}, 0x0) r7 = socket(0xa, 0x2, 0x0) sendto$auto(r7, 0x0, 0x402, 0xacf8, &(0x7f0000000040)=@generic={0xa, "e2e18340cba8fe8000"}, 0x1c) sendmsg$auto_ETHTOOL_MSG_MODULE_FW_FLASH_ACT(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010000000000fcdbdf252c00000005000200000000005a5356ca8e8906cb7e97297d508a66b61ad4"], 0x1c}, 0x1, 0x1000000, 0x0, 0x40}, 0x2c000094) (async) sendmsg$auto_ETHTOOL_MSG_MODULE_FW_FLASH_ACT(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010000000000fcdbdf252c00000005000200000000005a5356ca8e8906cb7e97297d508a66b61ad4"], 0x1c}, 0x1, 0x1000000, 0x0, 0x40}, 0x2c000094) bind$auto(r5, &(0x7f0000000040)=@in={0x2, 0x1, @empty}, 0x8) (async) bind$auto(r5, &(0x7f0000000040)=@in={0x2, 0x1, @empty}, 0x8) listen$auto(0x3, 0x83) 7m57.608030494s ago: executing program 5 (id=2752): r0 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/bus/usb/026/001\x00', 0xa901, 0x0) ioctl$auto_USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000280)={0x2, 0x81, 0x10001, 0x52000000, &(0x7f0000000000), 0x5, 0xffffffff, 0x2, @number_of_packets, 0x7, 0x476, 0x0, [{0x0, 0x2, 0x2}, {0xf00, 0x101}]}) keyctl$auto(0x2000000000000016, 0xffffffffffffffff, 0xfffffffe, 0x0, 0x404e) keyctl$auto_KEYCTL_ASSUME_AUTHORITY(0x10, 0x8000, 0x8, 0x7, 0x3) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_OVS_DP_CMD_NEW(r1, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x14, r2, 0x419, 0x2070bd22, 0x25dfdbfe}, 0x14}, 0x1, 0x300, 0x0, 0x2004c011}, 0x2084) r3 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000240)='/dev/sg0\x00', 0x141040, 0x0) ioctl$auto_SCSI_IOCTL_PROBE_HOST(r3, 0x5385, &(0x7f0000000280)) write$auto(0xffffffffffffffff, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) mmap$auto(0x0, 0x2020209, 0x1, 0xeb1, 0xfffffffffffffffa, 0x8000) r4 = socket(0x2, 0x801, 0x106) setsockopt$auto(r4, 0x0, 0x13, 0x0, 0x8009) r5 = socket(0x1d, 0x2, 0x7) r6 = openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f0000003b80)='/dev/snd/pcmC0D0c\x00', 0x8100, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) sysfs$auto(0x2, 0xe, 0x0) lsm_list_modules$auto(0x0, 0x0, 0x0) ioctl$auto_SNDRV_PCM_IOCTL_HW_REFINE2(r6, 0xc2604110, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$auto(0x3, &(0x7f0000000040)=@can={0x1d, r7, 0xfd}, 0x6a) close_range$auto(0x2, 0x8, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_TIPC_NL_PEER_REMOVE(r8, &(0x7f00000110c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f000000e000)={0x18, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x104}, 0x40) unshare$auto(0x40000080) 7m56.737527401s ago: executing program 5 (id=2760): close_range$auto(0x2, 0x8, 0x0) open(&(0x7f00000001c0)='./file0\x00', 0x60142, 0x130) mmap$auto(0x0, 0x2000d, 0x4000000000e3, 0xeb1, 0x401, 0x8000) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) r0 = open(0x0, 0x261c2, 0x84) openat$auto_dfs_global_fops_debug(0xffffffffffffff9c, 0x0, 0xa42, 0x0) r1 = openat$auto_ipsec_dbg_fops_ipsec(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/netdevsim/netdevsim3/ports/3/ipsec\x00', 0x0, 0x0) bpf$auto(0x8, &(0x7f0000000280)=@raw_tracepoint={0x9, r1, 0x0, 0x7fff}, 0x0) r2 = userfaultfd$auto(0x1) statx$auto(r2, 0x0, 0x1000, 0x8, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/system/node/node1/compact\x00', 0xc2481, 0x0) writev$auto(r3, &(0x7f0000000080)={&(0x7f0000000040), 0x1000}, 0x3) close_range$auto(0x2, r0, 0xffffff59) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x2, 0x88) r4 = socket$nl_generic(0x10, 0x3, 0x10) bpf$auto(0x0, &(0x7f0000000340)=@bpf_attr_5={@target_fd=r2, r4, 0x8, 0x5, 0xffffffffffffffff, @relative_id=0x6, 0xe600}, 0xf) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0) chdir$auto(&(0x7f0000000000)='}[,&*}\x00') r5 = open(&(0x7f0000000100)='.\x00', 0x0, 0x0) getdents$auto(r5, 0x0, 0x62d4) r6 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0xd97f760c479e8c8e, 0x0) pread64$auto(r6, 0x0, 0x3, 0x1000007ffe) bpf$auto(0x4, &(0x7f00000001c0)=@raw_tracepoint={0x5, r0, 0x0, 0x2}, 0xc) 7m55.774470661s ago: executing program 5 (id=2763): close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48004}, 0x4050) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3) r0 = socket(0x10, 0x3, 0x6) r1 = io_uring_setup$auto(0x1d48, &(0x7f0000000340)={0x7fffffff, 0x10, 0x2, 0x6, 0x7, 0x8, 0xffffffffffffffff, [], {0x6, 0x88, 0x1, 0x80000000, 0x10000100, 0x83, 0x101, 0x6, 0x8000000000000001}, {0x100, 0x1, 0x10000052, 0x5, 0x11, 0x101, 0x876c5, 0xc9, 0x3}}) io_uring_register$auto(r1, 0x17, 0x0, 0x9) r2 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$auto_NETDEV_CMD_PAGE_POOL_GET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x50, r2, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@NETDEV_A_PAGE_POOL_ID={0xc, 0x1, 0x7}, @NETDEV_A_PAGE_POOL_ID={0xc, 0x1, 0x4}, @NETDEV_A_PAGE_POOL_ID={0xc, 0x1, 0x40}, @NETDEV_A_PAGE_POOL_ID={0xc, 0x1, 0x4}, @NETDEV_A_PAGE_POOL_ID={0xc, 0x1, 0x2000000}]}, 0x50}, 0x1, 0x0, 0x0, 0x4048081}, 0x0) 7m54.119166596s ago: executing program 5 (id=2771): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) waitid$auto_P_PID(0x1, 0x0, 0x0, 0x0, &(0x7f0000000240)={{0x2, 0x34}, {0x9c, 0x3}, 0x779c, 0x3ff, 0x2, 0x0, 0x8, 0x8a, 0x3, 0x1, 0x100, 0x6, 0x5, 0x47, 0x80000000, 0x40000}) socket$nl_generic(0x10, 0x3, 0x10) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x800, 0x0) ioctl$auto(r1, 0x4b71, 0x1) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x2000c000}, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x4, 0x0) get_robust_list$auto(0x0, 0x0, 0x0) setsockopt$auto(r2, 0x10f, 0x87, 0x0, 0x14) setsockopt$auto(0x3, 0x10f, 0x87, 0x0, 0x14) recvmmsg$auto(r2, &(0x7f0000000200)={{0x0, 0x2, &(0x7f0000000140)={0x0, 0x4da}, 0x6, 0x0, 0x8, 0x7ff}, 0x1000}, 0xffffffff, 0x4, 0x0) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) setgroups$auto(0xe32, 0x0) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) r3 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/mnt\x00') ioctl$NS_GET_PARENT(r3, 0xb701, 0x0) 7m53.474854337s ago: executing program 34 (id=2771): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) waitid$auto_P_PID(0x1, 0x0, 0x0, 0x0, &(0x7f0000000240)={{0x2, 0x34}, {0x9c, 0x3}, 0x779c, 0x3ff, 0x2, 0x0, 0x8, 0x8a, 0x3, 0x1, 0x100, 0x6, 0x5, 0x47, 0x80000000, 0x40000}) socket$nl_generic(0x10, 0x3, 0x10) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x800, 0x0) ioctl$auto(r1, 0x4b71, 0x1) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x2000c000}, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x4, 0x0) get_robust_list$auto(0x0, 0x0, 0x0) setsockopt$auto(r2, 0x10f, 0x87, 0x0, 0x14) setsockopt$auto(0x3, 0x10f, 0x87, 0x0, 0x14) recvmmsg$auto(r2, &(0x7f0000000200)={{0x0, 0x2, &(0x7f0000000140)={0x0, 0x4da}, 0x6, 0x0, 0x8, 0x7ff}, 0x1000}, 0xffffffff, 0x4, 0x0) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) setgroups$auto(0xe32, 0x0) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) r3 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/mnt\x00') ioctl$NS_GET_PARENT(r3, 0xb701, 0x0) 4m41.049379315s ago: executing program 0 (id=3521): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/virtual/net/dummy0/netdev_group\x00', 0x82, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000100)='8', 0x1) (async) unshare$auto(0x40000080) (async) close_range$auto(0x2, 0x8, 0x0) (async) ioctl$auto_BLKTRACESETUP2(0xffffffffffffffff, 0xc0481273, &(0x7f0000000300)={"3cbaef38c2291a07e381cefc27c8884a0095257b09753199fe0c58e183b8a795", 0x7f, 0x5, 0x3ff, 0x1, 0x40, 0x0}) (async) sigaltstack$auto(0x0, &(0x7f00000003c0)={&(0x7f0000000180)="69cc8d0de6b41511259c289f8eba5cd9efe7b46018e5bfce1b542499858929869392667f4a67831f37b948cef0c793b831f019cb998179b02af53526d479eaa474255b4bad7cce70b58305c3c789dddea82c3a78568db57899f6372003e4f0fe7c68c3e6b59956bfca", 0x9, 0x8}) (async) open(&(0x7f0000000280)='\x00', 0x159442, 0x8e) (async) ppoll$auto(0x0, 0x7f, 0x0, &(0x7f00000001c0)={0x5}, 0x8) (async) mount$auto(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='nfs\x00\x00', 0x200, &(0x7f00000001c0)) (async) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x4, 0xdf, 0x9b72, 0xffffffffffffffff, 0x28000) (async) madvise$auto(0x0, 0xffffffffffff0001, 0x15) (async) prctl$auto(0x3c, 0x1, r1, 0x1005, 0x7) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffff7ffffffffffa, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) (async) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f00000000c0), 0x141401, 0x0) r2 = socket(0xa, 0x1, 0x84) (async) mmap$auto(0x0, 0xe, 0x3, 0xeb1, 0x3ff, 0x8000) (async) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0x52000, 0x0) setsockopt$auto(0x3, 0x10000000084, 0x81, 0x0, 0x8) (async) mmap$auto(0x8, 0x20009, 0x10000000000df, 0xeb2, 0x401, 0x8000) (async) getsockopt$auto(r2, 0x84, 0x1b, 0x0, &(0x7f0000000040)=0x400) (async) r3 = epoll_create$auto(0x8) write$auto_rfkill_fops_core(r3, &(0x7f0000000180)="da1a7e624a10260ea1e4099494f84c088905e99c93a17dad106dc46366518f169e8c8d20adda9553c37074023717a6c5d6d932673d3eb05b4bc620f39ed7523f3738366479aa10f1f12bc8bdccb1962b71f6eccf14b3d8af177ae5fc0f2a1e5e2ad4fc4eec6e2543140afc8468cf892c60ae56441971408b42daa24217ea7b975ee0606e511d772b6d6d6db26b0cad1fa0c01f3d1cd3755c449be8305066a402e4cc02d2ee51b4b242db948b14343b8cb968e08cc0e925af507babd2cf54dc5efc77619c6976008875b0dccb0d5881a6d9329969215a11167bf72d3dbf7c7a2046a255caeed3af52981c4a32d5d55b76ef00ec2cc5c77ffd", 0xf8) (async) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) (async) socket(0x2, 0x80002, 0x73) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) (async) ioctl$auto(0x3, 0x807f, 0x38) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) 4m39.595685526s ago: executing program 0 (id=3523): mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) unshare$auto(0x40000080) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16, @ANYBLOB="05"], 0x28}, 0x1, 0x0, 0x0, 0x4004044}, 0x8000) recvmmsg$auto(r0, &(0x7f0000000180)={{0x0, 0x5, 0x0, 0x0, 0x0, 0x2, 0x6}, 0x803}, 0x10a, 0x6, 0x0) close_range$auto(0x2, 0x8, 0x0) userfaultfd$auto(0x1) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video1\x00', 0xc0400, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x2020009, 0x2, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x10, 0x2, 0x14) r2 = socket(0x1d, 0x2, 0x7) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000003000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000000a14af"], 0x14}, 0x1, 0x0, 0x0, 0x80c3}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYRES8=r2], 0x1ac}}, 0x20008041) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4c084}, 0x51) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0xd}, 0x2}, 0x3, 0x0) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r3) ioctl$auto_KVM_GET_MSRS(r1, 0x4138ae84, &(0x7f0000000140)={0x7}) write$auto(0xffffffffffffffff, 0x0, 0xc8) syz_clone3(&(0x7f0000000400)={0x208000, 0x0, 0x0, &(0x7f00000000c0), {0x3c}, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6}, 0x58) madvise$auto(0x0, 0x2003f2, 0x15) 4m37.462751259s ago: executing program 0 (id=3528): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sysfs$auto(0xffffff70, 0x1, 0x0) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ram7\x00', 0xa741, 0x0) ioctl$auto(r0, 0xab02, r0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mlock$auto(0xfff, 0xde7f) mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb2, 0x8000000401, 0x8000) io_uring_setup$auto(0x1, 0x0) r1 = getsockopt$auto(0xffffffffffffffff, 0x0, 0x32, 0x0, 0x0) futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0x80000001) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x2020009, 0x6, 0xeb1, 0xfffffffffffffffa, 0x8000) write$auto(0x3, 0x0, 0x100082) ioctl$auto_AUTOFS_IOC_SETTIMEOUT32(r1, 0xc0049364, &(0x7f0000000100)=0x2) rseq$auto(0x0, 0x8000, 0x0, 0x6) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/i8042/serio0/scroll\x00', 0x2062, 0x0) write$auto(r2, &(0x7f00000001c0)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, r2, 0x8000) io_uring_setup$auto(0x6, 0x0) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/devices\x00', 0x40e00, 0x0) pread64$auto(r3, 0x0, 0x3, 0x5ef6) msync$auto(0x1ffff000, 0x1820000000000ff, 0x400000004) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000080), 0xffffffffffffffff) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/mm/transparent_hugepage/hugepages-1024kB/stats/anon_fault_fallback\x00', 0x0, 0x0) prctl$auto(0x59616d61, 0xdafffffffffffffd, 0x1, 0x4, 0x2) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/fail-nth\x00', 0xc8200, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0xffffffffffffffff, 0x40000008000) io_uring_setup$auto(0x1, 0x0) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000140)='/dev/radio28\x00', 0x80000, 0x0) 4m34.434758684s ago: executing program 0 (id=3534): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket(0x15, 0x5, 0x0) setsockopt$auto(r0, 0x114, 0x5, 0x0, 0x7) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) r1 = openat$auto_dynamic_events_ops_trace_dynevent(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/tracing/dynamic_events\x00', 0x80442, 0x0) write$auto_dynamic_events_ops_trace_dynevent(r1, &(0x7f0000000540)='eI\f/', 0x4) r2 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000) ioctl$auto_VHOST_SET_VRING_CALL(r2, 0x4008af21, &(0x7f0000000040)={0x2, r1}) madvise$auto(0x0, 0xffffffffffff0005, 0x19) getgroups$auto(0x7fd, 0x0) openat$auto_buffer_subbuf_size_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/buffer_subbuf_size_kb\x00', 0x8100, 0x0) 4m32.12919893s ago: executing program 0 (id=3540): mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) r0 = socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) statx$auto(r0, 0x0, 0x401006, 0x4015, 0x0) (async) r1 = socket(0xa, 0x2, 0x0) sendto$auto(r0, &(0x7f0000000400)="9381f8e6315c9b38a54b8de7a1004f7aa40943b6b49bca54af37e5f33e414cddd7be0d547e2573662f087a7f075b407834bc107095705d1a94b9457013774eb6be98279527440449b71b046cebc5790a7509703daaf13acbbe6a339efa8213a5b179cc80bb7348f8d371dd7b8d52a125a7f2f4858750ef69f26ff82aeccc7df89f2347429bdd2e19d22ab53a25e4e05aa82e9d89895dbb24c9eede539346ffe421f9374d54f7b4cab8f24887e1e4d03d25d47c9ba1d2baa259751c57169a7ef46b430e01e49a3f", 0x101, 0xffffffff, &(0x7f0000000500)=@sco={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x5) (async) setsockopt$auto(r1, 0x29, 0x30, 0x0, 0x56b) (async, rerun: 64) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async, rerun: 64) close_range$auto(0x2, 0x8, 0x0) (async, rerun: 32) openat$auto_adf_ctl_ops_adf_ctl_drv(0xffffffffffffff9c, &(0x7f0000000000), 0x20140, 0x0) (rerun: 32) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptyua\x00', 0x20804, 0x0) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f00000031c0)='/dev/ttyua\x00', 0x109000, 0x0) (async) select$auto(0x8, 0x0, 0x0, &(0x7f0000000200)={[0x80000000008, 0xffffffffffffff4b, 0x100000001, 0x15, 0x8001, 0x1, 0x9, 0x5, 0x8, 0x40000000000000, 0x3, 0x8000000008, 0xfffffffffffffffa, 0xab, 0x2, 0x9]}, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) (async) socket(0x10, 0x2, 0x0) (async) statmount$auto(0x0, &(0x7f0000000040)={0x1, 0x0, 0x36, 0x828, 0x9, 0x8000000000000000, 0x9f, 0x7, 0x9, 0x8, 0x2, 0x9, 0x3, 0x8, 0x0, 0x200000000000f, 0x100, 0x1, 0x10001, 0x2cf8}, 0xe3c, 0x0) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYBLOB='N\x00\''], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40000) (async) setresuid$auto(0x2, 0x7, 0x8080) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=ANY=[@ANYRES16=r2, @ANYBLOB="ce6973eb8a6a68710372f2225b716aed2197aa7fbc6bc2d6c9f9ead872eb6636843bbd654cf9dd3948dcb6f12a8c9e7d2e59d3b3c5bdcfe3f8523c259467e3bbaef35b3ea61976866d6c89d390e20798b32b9fbd4c003f41510fff2195594a3fc303697fef6d7a367a1e9414396a74712a63eec46af996bd93745bd00154346a68ab531cea7401d8c3636f385976b161cd0ff7ddb6b74c2e21ffc793468459165e46ae78c45a7790a2da1ab4d76b911a61249a2bbb0d415c9224ff81b1bb2c325d5f0a5974644849be", @ANYBLOB="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"], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) (async) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) r3 = openat$auto_nodes_fops_netdebug(0xffffffffffffff9c, &(0x7f0000000000), 0x10040, 0x0) bpf$auto_BPF_OBJ_GET_INFO_BY_FD(0xf, &(0x7f0000000340)=@link_detach={r3}, 0x545b) 4m30.987623309s ago: executing program 0 (id=3546): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002a40), r2) sendmsg$auto_NFSD_CMD_LISTENER_SET(r2, &(0x7f00000050c0)={0x0, 0x0, &(0x7f0000005080)={&(0x7f0000000300)={0x114, r3, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@NFSD_A_SERVER_SOCK_ADDR={0xfc, 0x1, 0x0, 0x1, [@NFSD_A_SOCK_ADDR={0x93, 0x1, "f5557716f52318c8528aa5d4fbe67850e730280cc37c7005dd21fa045d3135f97699815f67bf9d00fde1a85ff27ea244c7f31181bb4c70a1b4a276f91ebad71b44ab3d3a237a8fd6811748a56f53c5924b85b817957ffa553f210e527b70f1aa74b994315d269e14001ebf2ab4f4e47083b18a9167e8b76c725519561c055c298a015da9a8857d3f0ab91ce3829179"}, @NFSD_A_SOCK_TRANSPORT_NAME={0x9, 0x2, '\xfb)]\xb1\x00'}, @NFSD_A_SOCK_TRANSPORT_NAME={0x5, 0x2, '\x00'}, @NFSD_A_SOCK_ADDR={0x4f, 0x1, "345079ec40c0979381f5125ea63eb277562f443fec86d45de5b6ede672187fc4f68fb2c5e5369f3e4385ac7eb19bb6ae1163d615bb9039395a0094125f4fe7c0e3a3176f30d90000000000"}]}, @NFSD_A_SERVER_SOCK_ADDR={0x4}]}, 0x114}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008050) sendmsg$auto_NFSD_CMD_LISTENER_SET(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="010027bd7000fba7f908a6dbdf000000000008937c2629e7c3c9c815fba419db559d5a79a10dda89afe469d8bfbe049eef0f27103489eee2535301b0e8c28186da81e45b8bb02ec771e6629d163ec50a75f459199ee5a78a02cd9df8e6d13b866ed04a27abe95d8bc2bd7ca5402eff6685bc4564713750bd47c1ab7f771cd06e68162c682c099f03ae05617a4758e3ca8ac8f029a8d8b1c4a3a925459edd1831360d00f1a31c77baeecd4a69452371425dfd923d41a6db"], 0x14}, 0x1, 0x0, 0x0, 0xeda47ee5ad433e65}, 0x20000000) socket(0xa, 0x3, 0x73) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) socket(0x10, 0x2, 0x0) socket(0x15, 0x5, 0x0) io_uring_setup$auto(0x6, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x801, 0x84) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) socket(0xa, 0x2, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) sendmsg$auto_NL80211_CMD_SET_MESH_CONFIG(r2, &(0x7f0000000500)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, 0x0, 0x100, 0x70bd25, 0x25dfdbff, {}, [@NL80211_ATTR_STA_PLINK_STATE={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x8094) socket(0xa, 0x801, 0x84) sendmsg$auto_NL80211_CMD_ADD_TX_TS(r2, &(0x7f00000007c0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000780)={&(0x7f00000005c0)={0x1b0, 0x0, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x8}, @NL80211_ATTR_HE_CAPABILITY={0x3a, 0x10d, "212333ea2ecd7c30970f4016804bd89967978ea449b8274297f8ae4043dcc6a790f841dbe5acf6afd6f476b09566fbb151915923c72b"}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x1}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x1}, @NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8, 0xcb, 0x2}, @NL80211_ATTR_SAE_PASSWORD={0x3e, 0x115, "486afe4042861582a36355e21399d012dad22d178bc7a6104504ff0c622fcd312220d4324acb792a1ec66c399dec93fa907af721aec38074a76b"}, @NL80211_ATTR_CNTDWN_OFFS_BEACON={0xfc, 0xba, "a1d99336bf1626a2eddc411db952d1712ddf5d39ac20aca9d96158b3f0fd9fc331687a596458f71cbe3145703c3fb74f80dcbed0429d0042169209b627d6e3340aab945ef62ad43af850d92a2e5f74c47e7c6539228592d17d025fbe9073266190818e077eea1673b09677ee6381705ac18ce37b4cd86d2e05bf8de6c723064729091e58d5c160ae71a6fc9f685ec4c00ffa9d3f42ffb156baf0d51ea574c6f3ed4726bf045ace665ab89786019f9ac3c5ac5ea9abcb1b40961a623be51b592fb9c67b82a6fc59689498cef717fc8b49f5b8c4998067a3b1743f76263a47bb3659c90f3755cb144ba6913930a528fee6b0a6b41c695bfa99"}, @NL80211_ATTR_HANDLE_DFS={0x4}]}, 0x1b0}, 0x1, 0x0, 0x0, 0x200100d4}, 0x40000) socket(0x1d, 0x2, 0x6) socket(0xa, 0x2, 0x3a) io_uring_setup$auto(0x6, 0x0) r5 = socket(0xa, 0x2, 0x88) close_range$auto(0x0, 0xfffffffffffff000, 0x2) bpf$auto(0x0, &(0x7f0000000000)=@link_update={r5, @new_prog_fd=0x4, 0x4, @old_prog_fd=r4}, 0xa3) bpf$auto(0x1, &(0x7f0000000040)=@query={@target_ifindex, 0x4, 0x7, 0x9, 0x7f, @prog_cnt=0x404, 0x0, 0x80000000, 0xf, 0xb, 0x5}, 0x7) r6 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000180), 0xffffffffffffffff) write$auto_seq_oss_f_ops_seq_oss(0xffffffffffffffff, 0x0, 0x0) sendmsg$auto_NFSD_CMD_LISTENER_SET(r1, &(0x7f0000003140)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000000200)={0x14, r6, 0x1, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x48080) sendmsg$auto_NFSD_CMD_LISTENER_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x14, r6, 0x2, 0x70bd2b, 0x25dfdbff}, 0x14}}, 0x50) 4m15.948254353s ago: executing program 35 (id=3546): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002a40), r2) sendmsg$auto_NFSD_CMD_LISTENER_SET(r2, &(0x7f00000050c0)={0x0, 0x0, &(0x7f0000005080)={&(0x7f0000000300)={0x114, r3, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@NFSD_A_SERVER_SOCK_ADDR={0xfc, 0x1, 0x0, 0x1, [@NFSD_A_SOCK_ADDR={0x93, 0x1, "f5557716f52318c8528aa5d4fbe67850e730280cc37c7005dd21fa045d3135f97699815f67bf9d00fde1a85ff27ea244c7f31181bb4c70a1b4a276f91ebad71b44ab3d3a237a8fd6811748a56f53c5924b85b817957ffa553f210e527b70f1aa74b994315d269e14001ebf2ab4f4e47083b18a9167e8b76c725519561c055c298a015da9a8857d3f0ab91ce3829179"}, @NFSD_A_SOCK_TRANSPORT_NAME={0x9, 0x2, '\xfb)]\xb1\x00'}, @NFSD_A_SOCK_TRANSPORT_NAME={0x5, 0x2, '\x00'}, @NFSD_A_SOCK_ADDR={0x4f, 0x1, "345079ec40c0979381f5125ea63eb277562f443fec86d45de5b6ede672187fc4f68fb2c5e5369f3e4385ac7eb19bb6ae1163d615bb9039395a0094125f4fe7c0e3a3176f30d90000000000"}]}, @NFSD_A_SERVER_SOCK_ADDR={0x4}]}, 0x114}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008050) sendmsg$auto_NFSD_CMD_LISTENER_SET(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="010027bd7000fba7f908a6dbdf000000000008937c2629e7c3c9c815fba419db559d5a79a10dda89afe469d8bfbe049eef0f27103489eee2535301b0e8c28186da81e45b8bb02ec771e6629d163ec50a75f459199ee5a78a02cd9df8e6d13b866ed04a27abe95d8bc2bd7ca5402eff6685bc4564713750bd47c1ab7f771cd06e68162c682c099f03ae05617a4758e3ca8ac8f029a8d8b1c4a3a925459edd1831360d00f1a31c77baeecd4a69452371425dfd923d41a6db"], 0x14}, 0x1, 0x0, 0x0, 0xeda47ee5ad433e65}, 0x20000000) socket(0xa, 0x3, 0x73) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) socket(0x10, 0x2, 0x0) socket(0x15, 0x5, 0x0) io_uring_setup$auto(0x6, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x801, 0x84) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) socket(0xa, 0x2, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) sendmsg$auto_NL80211_CMD_SET_MESH_CONFIG(r2, &(0x7f0000000500)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, 0x0, 0x100, 0x70bd25, 0x25dfdbff, {}, [@NL80211_ATTR_STA_PLINK_STATE={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x8094) socket(0xa, 0x801, 0x84) sendmsg$auto_NL80211_CMD_ADD_TX_TS(r2, &(0x7f00000007c0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000780)={&(0x7f00000005c0)={0x1b0, 0x0, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x8}, @NL80211_ATTR_HE_CAPABILITY={0x3a, 0x10d, "212333ea2ecd7c30970f4016804bd89967978ea449b8274297f8ae4043dcc6a790f841dbe5acf6afd6f476b09566fbb151915923c72b"}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x1}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x1}, @NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8, 0xcb, 0x2}, @NL80211_ATTR_SAE_PASSWORD={0x3e, 0x115, "486afe4042861582a36355e21399d012dad22d178bc7a6104504ff0c622fcd312220d4324acb792a1ec66c399dec93fa907af721aec38074a76b"}, @NL80211_ATTR_CNTDWN_OFFS_BEACON={0xfc, 0xba, "a1d99336bf1626a2eddc411db952d1712ddf5d39ac20aca9d96158b3f0fd9fc331687a596458f71cbe3145703c3fb74f80dcbed0429d0042169209b627d6e3340aab945ef62ad43af850d92a2e5f74c47e7c6539228592d17d025fbe9073266190818e077eea1673b09677ee6381705ac18ce37b4cd86d2e05bf8de6c723064729091e58d5c160ae71a6fc9f685ec4c00ffa9d3f42ffb156baf0d51ea574c6f3ed4726bf045ace665ab89786019f9ac3c5ac5ea9abcb1b40961a623be51b592fb9c67b82a6fc59689498cef717fc8b49f5b8c4998067a3b1743f76263a47bb3659c90f3755cb144ba6913930a528fee6b0a6b41c695bfa99"}, @NL80211_ATTR_HANDLE_DFS={0x4}]}, 0x1b0}, 0x1, 0x0, 0x0, 0x200100d4}, 0x40000) socket(0x1d, 0x2, 0x6) socket(0xa, 0x2, 0x3a) io_uring_setup$auto(0x6, 0x0) r5 = socket(0xa, 0x2, 0x88) close_range$auto(0x0, 0xfffffffffffff000, 0x2) bpf$auto(0x0, &(0x7f0000000000)=@link_update={r5, @new_prog_fd=0x4, 0x4, @old_prog_fd=r4}, 0xa3) bpf$auto(0x1, &(0x7f0000000040)=@query={@target_ifindex, 0x4, 0x7, 0x9, 0x7f, @prog_cnt=0x404, 0x0, 0x80000000, 0xf, 0xb, 0x5}, 0x7) r6 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000180), 0xffffffffffffffff) write$auto_seq_oss_f_ops_seq_oss(0xffffffffffffffff, 0x0, 0x0) sendmsg$auto_NFSD_CMD_LISTENER_SET(r1, &(0x7f0000003140)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000000200)={0x14, r6, 0x1, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x48080) sendmsg$auto_NFSD_CMD_LISTENER_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x14, r6, 0x2, 0x70bd2b, 0x25dfdbff}, 0x14}}, 0x50) 2m41.421574496s ago: executing program 3 (id=3920): openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x20881, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x401bf, 0x7352, 0x10003c, 0x1, 0x1ffde, 0x7, 0x3, 0xfffffffffffffffe, 0x9, 0x3, 0x6, 0x4, 0x7, 0x9, 0x9, 0x10005, 0x80, 0x4, 0xffefffff, 0x7, 0x2080, 0x203, 0x0, 0x20e9d17d, 0x400300000000000, 0xdb, 0x0, 0x6, 0xf04, [0xfffffffffffffffe, 0x0, 0x2, 0xfffffffffffffffd, 0x2, 0xfffffffffffffffe, 0x2, 0x6, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1000000, 0x0, 0x8f, 0x10000, 0x8000000, 0x7, 0x0, 0x1, 0xfffffffefffffffd, 0x5, 0xff5b, 0xc72, 0x0, 0x9, 0x0, 0x66, 0x3, 0x1, 0x0, 0x0, 0xfffffffffffffffb, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000003, 0x1, 0x8c]}, 0x2, 0xd) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x2062, 0x0) mkdir$auto(&(0x7f0000000040)='./file0\x00', 0x2) mkdir$auto(&(0x7f00000000c0)='./file1\x00', 0x9) mmap$auto(0x3, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) read$auto_proc_iter_file_ops_compat_inode(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001980)={0x14, r1, 0x1b, 0x70bd26, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x50}, 0xc800) r2 = socket(0x10, 0x2, 0x0) statx$auto(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x5, 0x10001, 0x0) sendmsg$auto_NL802154_CMD_DEL_SEC_KEY(r2, 0x0, 0x48c5) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4004810}, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0x4) socket(0x10, 0x3, 0x6) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) r3 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="f0020000", @ANYRES16=r3, @ANYBLOB, @ANYRES32, @ANYBLOB="d152e64e22695352dd73864415aa8a78c65e6ab75200000000000000007d0800cdd9690cac4138553ecfbb1b32"], 0x2f0}, 0x1, 0x0, 0x0, 0x80f4}, 0xd0) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0x7}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 2m41.219265267s ago: executing program 3 (id=3921): unshare$auto(0x40000080) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) r0 = openat$auto_drm_connector_fops_drm_debugfs(0xffffffffffffff9c, &(0x7f0000000b80)='/sys/kernel/debug/dri/vkms/Writeback-1/force\x00', 0x20000, 0x0) readv$auto(r0, &(0x7f00000000c0)={&(0x7f0000000000)="7fdf050d89c0575355055578d7ef6ca46bbfa0cd1e1fd71ce052ebde96b8b46168ec83bdcbf584deaef0445cc7830cca8d5793c1219981f7f6c25ecbad916851c9aa52c3d2306d79a36405dc4edaafc3b8ea464d8d6889cc2cf75f2f4d0f6b50878dc0e7a8676c3ce52d1413ecdfdc70b6536cce328d83a7bdbd0b404a75862871fb40c41082221d75c5165f66d4550969f4650cd8b4a433ec606c8111bae04ef2619a0ef3138cda7b1289c38f", 0x6}, 0x2) syslog$auto(0x3, &(0x7f0000000080)='..\x00k\xac\x8c\x1d\x0e\x98\x80\xd2\xaf\xa1\xf2\x1e\xe1R1\xa2\x8e\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\xa6\xf4#+\xfa\xd7\x01\xb9j<\v\xf47\n\xa7\xd2\x8b\x11e1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\x84q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa24X@\xadD\xf8\x9d\xf3 \xd2]\xc4\x13G\x1d\x04!\xc1\xeb.e$\xfb\xa3KU\xcf\xc1\x7fFD\x99\xf5v\v\x9dS\xc11P\xa3\xe9\xb0SqL\x85\xea\xb2\x9cY\x83.I\xca\x92\x1c\xc4\x13CV=\x92\x17c\x87iOt\x14On\x15=\v\xf0 \xc5\x8b~\xd6\xd4\xc7\xa3a\x1c\x06\x17\xb3\x88\x8c\xf1L\xba\x89a\xfd\xa5\xc6\x7fU\x00\xe5\x9b', 0x5) fchdir$auto(0xffffffffffffffff) mmap$auto(0x0, 0x400005, 0x100000df, 0x9b72, 0x2, 0x8000) mremap$auto(0x0, 0x4, 0x4, 0x7, 0x100000000) syz_clone(0x20011, 0x0, 0x0, 0x0, 0x0, 0x0) madvise$auto(0x0, 0x200007, 0x19) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) prctl$auto_PR_SET_VMA(0x53564d41, 0x0, 0x200000001000000, 0xfffff7fffffffff7, 0x3ee) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) bpf$auto(0x6, 0xffffffffffffffff, 0x0) mmap$auto(0x0, 0x400008, 0xe4, 0x9b72, 0x2, 0x400) mmap$auto(0x0, 0x202000b, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sysfs$auto(0x2, 0x2c, 0x0) r1 = fsopen$auto(0x0, 0x1) fsconfig$auto(r1, 0x8, 0x0, 0x0, 0x0) prctl$auto_PR_SET_VMA(0x53564d41, 0x0, 0x9000, 0x8002, 0x2) mprotect$auto(0x0, 0x806121, 0x6) openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, 0x0, 0x20443, 0x0) r2 = io_uring_setup$auto(0x5, 0x0) close_range$auto(0x2, r2, 0x0) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x181881, 0x0) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sg0\x00', 0x100, 0x0) close_range$auto(0x2, 0xa, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x100, 0x0) 2m39.693545863s ago: executing program 3 (id=3931): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ovs_meter(&(0x7f0000002340), 0xffffffffffffffff) sendmsg$auto_OVS_METER_CMD_FEATURES(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x40, r1, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@OVS_METER_ATTR_USED={0xc, 0x5, 0x3}, @OVS_METER_ATTR_USED={0xc, 0x5, 0xe9}, @OVS_METER_ATTR_STATS={0x14, 0x3, {0x9, 0x45}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x20) sendmsg$auto_OVS_METER_CMD_SET(r0, &(0x7f0000002480)={0x0, 0x0, &(0x7f0000002440)={&(0x7f0000003140)={0x38, r1, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@OVS_METER_ATTR_KBPS={0x4}, @OVS_METER_ATTR_BANDS={0x4}, @OVS_METER_ATTR_ID={0x8, 0x1, 0x5}, @OVS_METER_ATTR_STATS={0x14, 0x3, {0x81, 0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) 2m39.466260217s ago: executing program 3 (id=3934): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/fs/ocfs2/active_cluster_plugin\x00', 0x22100, 0x0) mmap$auto(0x3, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x3f, 0x800, 0x4, 0x8, 0x1000007) io_uring_setup$auto(0x5, 0x0) openat$auto_proc_page_owner_operations_page_owner(0xffffffffffffff9c, &(0x7f0000000040), 0x2482, 0x0) preadv$auto(0x40000000000003, &(0x7f0000000080)={0x0, 0xfffffffd}, 0x6, 0x7fffffff, 0x3ef) mknod$auto(&(0x7f0000000580)='u[,&*}\x00\a\x00\x00\x00?\xa4\x1fN\xa1~5Z\xc7\r\f}M4\xa8m\xe6\x19[11\xab\xff-E\xac9(\xb4O\xa0t4h\x9f-gn\x1f\x01\x00\x00\x00\x00\x00\x00\x00\xaeR\x81\r_\x0e\x19\b\x85\bvv(e\xdax)\t\x15\xf6\xc8\xee\x04\x16\xc1\x9a!\x87I7\x8cD&zg\xb0a\xab|E\xde\x14\xee[\xc8\xc0\xa8Nh\x0f\xa3\xdbT\xb3\xb8\xd2F\xa0\xc4]\xaf\xc43&\xe4\x01\x05\xd2\x15\xf8\xf1!\x9d\x92\xbbH\xd3^aD\x87\xd8\xe7\xd2\xf3[r\xc5S&}D[\x97\xf1\xd9\xf8Y\x1c\x03\x84\xb4\xd7\x16\x19\xe5\x17\x10\xd8fcG:\xfbY8\x17w\x98?\x03@\xe5\x02\x05\x93h\xb9\xf7\xef\x84\x8aGlN\a\x1e\x00\x00\x00\x00\x00\x00\x00\xf1p\xeb\xe9(%\x89\xef\x85\xdfr\xce\x00\x00\x00\x00\xff\x00\xa2M\'d\x12\x1c\x12\xca\xa5_\x8d\xdf\xc5\x8d\x19?\xfc~\xb3X\x14\xa7\xa9M\x87\xfcTW\x1bR\xbci\x8d\x8aNEO\xb3~~\xa8\xa6\x894\x80;s\xb7\xa3V\x1b\x14|\x9e\xd4\x05\x85\x0f!\xab-E\'\x97Y\xb7\xe8fMv_\xf8\xa0S\xef\xb7\b\xe7!T.g\x92\x87\t$\x06\xa4\xfb\x83\x8c\x17^\x82\xe7\xd3\xf6q\x1a\xa0\xf82[W\x90\xdd\xe3\xde\xa9\xde\x94`-\x9a\x1e}\xebO*\xb85,v.\xfc5\xba?vlt\xda%\x06a\x15I\x1f\xe3\x05+\x810T2\xf9\x9b\xc7\xd1\t\x03\xf2\x8d\x8a\x90\xb54\bH<9\xf1\x91 D\x85g,\xaa\xca\xcd\xd5\xcb\x9a\xb1j\xf2F\xce\x14\x92\xf9\xd7\xec\xc5\x1e\x8aq2\xce\x881f\xd7\xd4\x9e\xf6\xb6P\x01\xe8T\xb5X\xb9d-I\xd6\x91\xc3\xe2\x88S\x82l=\x02t$p\t\x8cY\x06\r\x83\xb0\x86\xc6\x84\x1c\xce\xb6\xf0\xdfC\x9fj<\xfe\xa4\x1f\x82L\xe4\x13+H\x00\x00\x00\x00\x00\x00\x00\x01M\x16\xa0\xbeB6\xfb\xa2-\x17\x93Q\x9fKusl5\xa2$M\xb4\x18\x1db\xf3\xce\x8c\xe5Rna\xd5\xbbQ\xc7\xa7+\vH\xc1l\x1bIv\xe8_', 0x1081, 0x9) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x40000) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="10002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0xc000) r0 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000080), 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x6, 0x400a) syz_clone3(&(0x7f00000004c0)={0x2000000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) acct$auto(&(0x7f00000002c0)='u[,&*}\x00\a\x00\x00\x00\xbf\xa4\x1fN\xa1~5Z\xc7\r\f}M4\xa8m\xe6\x19[11\xab\xff-\t\x009(\xb4O\xa0t4h\x9f-gn\x1f\x0f\x18\xc5\x82-s\x83\xe6\xaeR\x81\r_\x0e\x19\x12\x85\bvf(e\xday)\t\x15\xf6\xc8\xee\x04\x16\xc1\x9a!\x87I7\x8cD&zg\xb0\t\x00\x00\x00\x00\x00\x00\x00\xc8\xc0\xa8Nh\x0f\xa3\xdbT\xb3\xb8\xd2F\xa0\xc4]\xaf\xc43&\xe4\x01\x05\xd2\x15\xf8\xf1!\x9d\x92\xbbHL9aD\xb4\x80\xed\xba>\"\xb6\x7f\xa3f\x1d\a\xa1\x87\x84uA\xd8\xe7\xd2\xf3[r\xc5S&}D[\x97\xf1\xd9\xf8Y\x03\x84\xb4\xd7\x16\x19\xe5\x17\x10\xd8fcG:\xfbY8\x17w\x98?\x03@\xe5\x02\x01\x93h\xe9`B@W\xc2B\x82\xf4\x90\xaf\x15\xb2\"i\a\au\xa1\x05\xdb\xe9N4\x8fX\xa1\x9b\xd2\xd6N\xf6\xa4\xa6\xb0K\x04;\xd8\xb8\xa3\x065G\xfb\x9fV0\xa4\xca\xf9\xb4\xf6kW\x97f\xa1\x19\xb6\x85\xc2\xc0\xffg\x00\xfd\xba\x8b\xa3\xc8\n\\\x13\xe5>\x84yb,p\x05\xb1\xb6X5\xac\x9fj\x825\'\xd7\xb7?c\'M\x8e\xff\xc6\xdd\xe3\vN\xc8|\x96\xa2\xeb9\xa4\x98*(\x12\xc8\xa8\x19\xab\xe8GD\xd0\xcf\x8ek\x98\xe0}&r\x04\x8b\nB\xee\x1e\x86\xb2a\xbfB\xb4\x9a\xed\xaf;RW\xd1\x9a\x98w\xb5\xab\xdf\v\xd7 \x81F\x05\xa1\x81\xa4k\xf1+\xd8\\\xd4\"(\x00\x00\x00\x00\x00\x00\x00\x00\xf5\x897\xce.y\x16\x1e\x10\xb0\x9b\xc0\xd2g\x1b\x01\xd3G\'\xc7CU39A\x02x\x8eA\x1f\xbb>\x00'/430) mmap$auto(0x0, 0x2020009, 0x3, 0xeb2, 0xfffffffffffffffb, 0x8000) set_mempolicy$auto(0x3, &(0x7f0000000000)=0x7, 0x9) r1 = openat$auto_binder_ctl_fops_binderfs(0xffffffffffffff9c, &(0x7f0000000200), 0xc0400, 0x0) ioctl$auto_BINDER_CTL_ADD(r1, 0xc1086201, &(0x7f0000000240)={"afc2b1ca92f66d6202000000000000000b20551d19ecba0a4aba723aa74284078ca298c23c09ce2f013cf795fb146dbb52f4c2c591720393044153446ead73a6d0d4e1aaee41af1ec4c0bf648f4702619de28dab3e030000000000000076f0e4246fa36f846c02cc2402d0fc7f8b6f84841c7bd4816934fe9754c906cf66454d154b0a198706f27ab92651e1aa6856ee9bb79124f4712e6f117b13c3b8704e9ec9344c4b59ce49bbf943968bd8bb951575d5932d08a387b96e6679d40511096c5aa292672f18a47748befa7cc5b10cc721f41e62982ebb5543972030b39cc4dea1cc387fc6ebbf4e9c917507ad84e3315313192786fde94536de560500", 0x4, 0x1}) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x40000008000) sendmsg$auto_NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc000}, 0x2404c800) kexec_load$auto(0x5, 0x2, &(0x7f0000000040)={@kbuf=0x0, 0x800c000, 0x4800c000, 0x800c000}, 0x4) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) openat$auto_tap_fops_tap(0xffffffffffffff9c, 0x0, 0x1, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x400, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x40001, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) 2m37.845102889s ago: executing program 3 (id=3944): sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000", @ANYBLOB='i\x00Q'], 0x1ac}, 0x1, 0x0, 0x0, 0x40814}, 0x2004c0c4) (async) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000200)={{0x0, 0xfffffffe, &(0x7f0000000100)={&(0x7f00000000c0)="9959af4d22d0655d4e311bd70dd55a10387c291bf6", 0xfc0}, 0xffffffffffffffff, &(0x7f00000001c0), 0x9, 0xa545}, 0x800}, 0x7, 0x4008) open(&(0x7f0000000040)='./file0\x00', 0x8040, 0x6) (async, rerun: 32) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/uvcvideo/parameters/clock\x00', 0xb02, 0x0) (async, rerun: 32) socket(0x10, 0x2, 0x8) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/controlC1\x00', 0x40000, 0x0) (async, rerun: 64) socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) socket(0x10, 0x2, 0xc) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000300)='/sys/fs/ocfs2/cluster_stack\x00', 0x88282, 0x0) (async, rerun: 32) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/disk\x00', 0xda25b84c77eeb07c, 0x0) (async, rerun: 32) fanotify_init$auto(0x65, 0x2) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/platform/dummy_hcd.7/usb8/power/wakeup_total_time_ms\x00', 0x0, 0x0) (async) socket(0x11, 0x2, 0x6) openat$auto_nvram_misc_fops_nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000140)='/dev/bus/usb/006/001\x00', 0x1, 0x0) (async, rerun: 64) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f00000000c0), 0x222680, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/009/001\x00', 0xa101, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) (async) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/tty26\x00', 0xa0e00, 0x0) socketpair$auto(0x4004, 0x8, 0x7, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) ioctl$auto_TIOCSETD2(r1, 0x5423, 0x0) ioctl$auto_TIOCSTI2(r1, 0x5412, 0x0) (async) sendfile$auto(r0, r0, 0x0, 0x7ff) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) setresuid$auto(0x0, 0x7, 0x8080) 2m37.507915946s ago: executing program 3 (id=3946): r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x400000000000001, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x2003f2, 0x15) madvise$auto(0x0, 0x200007, 0x19) pread64$auto(0xffffffffffffffff, 0x0, 0x100000002, 0x100000001) io_setup$auto(0x1, 0x0) mmap$auto(0x0, 0x1, 0x4000000000df, 0xeb1, 0x401, 0x8000) r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) socketpair$auto(0x6517, 0xfc, 0x404, 0x0) ioctl$auto_SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000140)="3318cb") ioctl$auto_SNDCTL_DSP_CHANNELS(r1, 0xc0045006, 0x0) write$auto(0x3, 0x0, 0x7fffffff) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_VERSION_GET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r3, 0x1, 0x70bd27, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x2000c014}, 0x240480c0) openat$auto_msr_fops_msr(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cpu/0/msr\x00', 0xf82, 0x0) pipe$auto(0x0) unshare$auto(0x40000080) setsockopt$auto(0x3, 0x10000000084, 0x7b, 0x0, 0xd) 2m29.81779643s ago: executing program 7 (id=3977): mmap$auto(0x20000, 0x4020009, 0x100000000df, 0x50, 0x401, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) r0 = pidfd_open$auto(0x0, 0x1000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x6, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x40342, 0x22) r1 = open(&(0x7f0000000040)='./file0\x00', 0x22240, 0x154) fcntl$auto(r1, 0x400, 0x1) fcntl$auto(0x3, 0x400, 0x2) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) semget$auto(0x0, 0x13c, 0x1ff) semctl$auto(0x0, 0x9, 0x1, 0x2) mmap$auto(0x0, 0x2020009, 0x3, 0xcb1, 0xffffffffffffffff, 0x8000) move_pages$auto(0x1, 0x20007, 0x0, 0x0, 0x0, 0x8000000000000000) memfd_create$auto(0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) acct$auto(&(0x7f0000000100)='/dev/v4l-subdev5\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/block/nbd4/queue/max_segment_size\x00', 0x0, 0x0) r4 = openat$auto_proc_loginuid_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/loginuid\x00', 0x1a9602, 0x0) write$auto_proc_loginuid_operations_base(r4, 0x0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f0000003f40)=""/156, 0x9c) r5 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000040), r0) sendmsg$auto_TIPC_NL_MEDIA_SET(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r5, 0x1100, 0x70bd2a, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0x18, 0x2, 0x0, 0x1, [@typed={0x14, 0xcc, 0x0, 0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x1d}}]}]}, 0x2c}}, 0x4080000) 2m28.219841959s ago: executing program 7 (id=3980): r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) recvmmsg$auto(r0, &(0x7f0000000480)={{&(0x7f00000002c0)="67e75089306503f0ad91dc3e31fdefa34144f8407c549d743beab3160e90dd1234ef62a3ff31c2a70ec389e20969bb577f4d47007e4c2321b7afe3656b83c101b6d95280c0827035ef5df5ff7dfef87cc292c17c655e1c795b48b705da8a180969f0a6cd6f3d9a43338a5ffacf447dbb476fcddb5b0c2cda837ea7890f73d58a663cedb0d45c243c0319aa7689ff1ef83031f25b5aa9c3205b92a34395ed8466b71fc3eef516c0d75570ed3e4f6fb4ca2ed83dfa45950c09950efe4eeb162b87c19f6b6bddc7", 0x6, &(0x7f0000000400)={&(0x7f00000003c0)="a94386fc1ad9d2baa18d961f85677584546cb0f6b43276debc6c7bb26afb80ac0d54ee475619802098e06b3b76cd74f18dbbb1daec", 0x2}, 0xff, &(0x7f0000000440)="ce403fe76ff112c021ecda8f71f6231d0242f17c3be46e137ab4de9bb8937b0af2cace71c07e808ea07bc97a6ac54047d72dd84476e90f22eff4", 0x8, 0x4}, 0x5}, 0x15b, 0x47e7, &(0x7f00000004c0)={0x0, 0x200}) madvise$auto(0x0, 0x2003f2, 0x15) openat$auto_drm_connector_fops_drm_debugfs(0xffffffffffffff9c, &(0x7f0000000b80)='/sys/kernel/debug/dri/vkms/Writeback-1/force\x00', 0x202, 0x0) fchdir$auto(0xffffffffffffffff) mremap$auto(0x0, 0x4, 0x4, 0x7, 0x100000000) syz_clone(0x20011, 0x0, 0x0, 0x0, 0x0, 0x0) madvise$auto(0x0, 0x200007, 0x19) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC2\x00', 0x80, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_INFO(0xffffffffffffffff, 0xc1105511, &(0x7f0000000080)={{@raw=0x2, 0x7ff, 0xa, 0x7, "26d718b7d3ee69350e4ede7079dcb0c24c8aa1e3c7ee2e00308b8a7d74b0a707f7045e6d035b196ca83379bb", @raw=0x4}, 0xfffffffc, 0x3, 0x2, @raw=0x31c7bc81, @enumerated={0x0, 0x6, "ad75b255b5cdd64a6b7a755de55f8e3b81e6c4e6fbf4f15a5ca5dc29f056113e9b60cd7bd82081ec90b01a6c1ae79b9fd0930da366e011ae30c0a636577776a6", 0x3, 0xcac}, "18a801006a0900000000000000c4bd5359eeadc8357752b72fa176254d8797cdffd02555ac83a07983eeddcd24b626f54ad9d763dcdc9120af8b7c848ceb55a7"}) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) mmap$auto(0x10000, 0xa, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) bpf$auto(0x6, 0xffffffffffffffff, 0x0) mmap$auto(0x8, 0x400008, 0x28, 0x10, 0xffffffffffffffff, 0x3fd) prctl$auto_PR_SET_VMA(0x53564d41, 0x0, 0x9000, 0x6, 0x2) mprotect$auto(0x0, 0x806121, 0x6) openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, 0x0, 0x20443, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket(0x11, 0x80003, 0x300) close_range$auto(0x2, 0xffffffffffffffff, 0x0) 2m26.112910219s ago: executing program 7 (id=3988): r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x400000000000001, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x2003f2, 0x15) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) write$auto(0xffffffffffffffff, &(0x7f0000000080)='/dev/audio1\x00', 0x100000a3d9) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) (async) r1 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) fcntl$auto(r1, 0x400, 0x1) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) r2 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/locks\x00', 0x0, 0x0) execve$auto(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) read$auto_proc_iter_file_ops_compat_inode(r2, &(0x7f0000000180)=""/250, 0xfa) (async) read$auto_proc_iter_file_ops_compat_inode(r2, &(0x7f0000000180)=""/250, 0xfa) madvise$auto(0x0, 0x200007, 0x19) (async) madvise$auto(0x0, 0x200007, 0x19) pread64$auto(0xffffffffffffffff, 0x0, 0x100000002, 0x100000001) io_setup$auto(0x1, 0x0) mmap$auto(0x0, 0x1, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) (async) r3 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) socketpair$auto(0x6517, 0xfc, 0x404, 0x0) ioctl$auto_SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f0000000140)="3318cb") (async) ioctl$auto_SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f0000000140)="3318cb") ioctl$auto_SNDCTL_DSP_CHANNELS(r3, 0xc0045006, 0x0) (async) ioctl$auto_SNDCTL_DSP_CHANNELS(r3, 0xc0045006, 0x0) write$auto(0x3, 0x0, 0x7fffffff) (async) write$auto(0x3, 0x0, 0x7fffffff) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) close_range$auto(0x2, 0x8, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) socket(0xa, 0x1, 0x84) (async) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) (async) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) 2m24.735707634s ago: executing program 7 (id=3991): mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/fib_triestat\x00', 0x101400, 0x0) preadv$auto(r0, &(0x7f0000000080)={&(0x7f0000000000), 0x8}, 0x4, 0x200, 0x7990) madvise$auto(0x7, 0x9, 0x3) r1 = prctl$auto(0x6, 0x3d4, 0x4, 0x1, 0x10) madvise$auto(0x0, 0xffffffffffff0005, 0x19) r2 = syz_genetlink_get_family_id$auto_smbd_genl(&(0x7f00000000c0), r1) sendmsg$auto_KSMBD_EVENT_TREE_CONNECT_RESPONSE(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r2, 0x100, 0x70bd26, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x24004051}, 0x4000844) mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) madvise$auto(0x0, 0xffffffffffff0005, 0x17) (async) madvise$auto(0x0, 0xffffffffffff0001, 0x15) (async) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/fib_triestat\x00', 0x101400, 0x0) (async) preadv$auto(r0, &(0x7f0000000080)={&(0x7f0000000000), 0x8}, 0x4, 0x200, 0x7990) (async) madvise$auto(0x7, 0x9, 0x3) (async) prctl$auto(0x6, 0x3d4, 0x4, 0x1, 0x10) (async) madvise$auto(0x0, 0xffffffffffff0005, 0x19) (async) syz_genetlink_get_family_id$auto_smbd_genl(&(0x7f00000000c0), r1) (async) sendmsg$auto_KSMBD_EVENT_TREE_CONNECT_RESPONSE(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r2, 0x100, 0x70bd26, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x24004051}, 0x4000844) (async) 2m23.392662609s ago: executing program 7 (id=3996): close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) fanotify_init$auto(0x606, 0x1) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x8800, 0x0) timer_create$auto(0x3, 0x0, 0x0) mmap$auto(0x0, 0x202000b, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0x5, 0x14) r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) write$auto(r0, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) mbind$auto(0x0, 0x800605, 0x8003, &(0x7f0000000100)=0xfffe, 0x3, 0x3) ioctl$auto_PPPIOCSMRRU(0xffffffffffffffff, 0x4004743b, 0x0) r1 = open(&(0x7f0000000000)='./file1\x00', 0x1652c2, 0xe1d2b27bdc14aa98) fanotify_mark$auto(0x400000000000, 0x10001, 0xf2b, r1, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x12ba7e, 0x45) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000080)='/dev/radio2\x00', 0x208a06, 0x0) fanotify_mark$auto(0x0, 0x451, 0xa, r2, 0x0) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r3, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d6) ioctl$auto_SNDCTL_DSP_GETTRIGGER(0xffffffffffffffff, 0x80045010, &(0x7f0000004440)) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x163340, 0x16e) socket(0x2, 0x80802, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) connect$auto(0x3, &(0x7f0000000140)=@in={0x2, 0x4e23, @multicast2}, 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7fffffe) 2m22.377064015s ago: executing program 36 (id=3946): r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x400000000000001, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x2003f2, 0x15) madvise$auto(0x0, 0x200007, 0x19) pread64$auto(0xffffffffffffffff, 0x0, 0x100000002, 0x100000001) io_setup$auto(0x1, 0x0) mmap$auto(0x0, 0x1, 0x4000000000df, 0xeb1, 0x401, 0x8000) r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) socketpair$auto(0x6517, 0xfc, 0x404, 0x0) ioctl$auto_SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000140)="3318cb") ioctl$auto_SNDCTL_DSP_CHANNELS(r1, 0xc0045006, 0x0) write$auto(0x3, 0x0, 0x7fffffff) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_VERSION_GET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r3, 0x1, 0x70bd27, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x2000c014}, 0x240480c0) openat$auto_msr_fops_msr(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cpu/0/msr\x00', 0xf82, 0x0) pipe$auto(0x0) unshare$auto(0x40000080) setsockopt$auto(0x3, 0x10000000084, 0x7b, 0x0, 0xd) 2m21.864729953s ago: executing program 7 (id=4001): r0 = ioctl$auto_TUNGETVNETHDRSZ2(0xffffffffffffffff, 0x800454d7, &(0x7f00000000c0)=0x5) ioctl$auto_TIOCCONS2(r0, 0x541d, &(0x7f0000000180)="64685983fc4757d224b4e1c96133818a4244b01e8ed1624d03553b087f66f4d61ed65a3dc4d4faca31f7b9b513b6330e0f123bd2405147c442a99e1792cbfa4a1c3cff00608aada79528f5984cfc4910bc647daf48e6c1") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000004440), 0xffffffffffffffff) sendmsg$auto_OVS_DP_CMD_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000004540)={&(0x7f0000000140)={0x1c, r4, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@OVS_DP_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x2000000) sendmsg$auto_NFSD_CMD_THREADS_SET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x24, r2, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@NFSD_A_SERVER_THREADS={0x8, 0x1, 0xfffffffc}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0xffff}]}, 0x24}, 0x1, 0x0, 0x0, 0x4002000}, 0x40010) 2m6.841789469s ago: executing program 37 (id=4001): r0 = ioctl$auto_TUNGETVNETHDRSZ2(0xffffffffffffffff, 0x800454d7, &(0x7f00000000c0)=0x5) ioctl$auto_TIOCCONS2(r0, 0x541d, &(0x7f0000000180)="64685983fc4757d224b4e1c96133818a4244b01e8ed1624d03553b087f66f4d61ed65a3dc4d4faca31f7b9b513b6330e0f123bd2405147c442a99e1792cbfa4a1c3cff00608aada79528f5984cfc4910bc647daf48e6c1") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000004440), 0xffffffffffffffff) sendmsg$auto_OVS_DP_CMD_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000004540)={&(0x7f0000000140)={0x1c, r4, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@OVS_DP_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x2000000) sendmsg$auto_NFSD_CMD_THREADS_SET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x24, r2, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@NFSD_A_SERVER_THREADS={0x8, 0x1, 0xfffffffc}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0xffff}]}, 0x24}, 0x1, 0x0, 0x0, 0x4002000}, 0x40010) 30.299089236s ago: executing program 9 (id=4337): r0 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x20881, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x401bf, 0x7352, 0x10003c, 0x1, 0x1ffde, 0x7, 0x3, 0xfffffffffffffffe, 0x9, 0x3, 0x6, 0x4, 0x7, 0x9, 0x9, 0x10005, 0x80, 0x4, 0xffefffff, 0x7, 0x2080, 0x203, 0x0, 0x20e9d17d, 0x400300000000000, 0xdb, 0x0, 0x6, 0xf04, [0xfffffffffffffffe, 0x0, 0x2, 0xfffffffffffffffd, 0x2, 0xfffffffffffffffe, 0x2, 0x6, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1000000, 0x0, 0x8f, 0x10000, 0x8000000, 0x7, 0x0, 0x1, 0xfffffffefffffffd, 0x5, 0xff5b, 0xc72, 0x0, 0x9, 0x0, 0x66, 0x3, 0x1, 0x0, 0x0, 0xfffffffffffffffb, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000003, 0x1, 0x8c]}, 0x2, 0xd) r1 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/diskstats\x00', 0x141100, 0x0) read$auto(r1, &(0x7f0000000000)='vdpa\x00', 0x8000) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x2062, 0x0) mkdir$auto(&(0x7f0000000040)='./file0\x00', 0x2) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/mpls/platform_labels\x00', 0x202, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) mkdir$auto(&(0x7f00000000c0)='./file1\x00', 0x9) mmap$auto(0x3, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) read$auto_proc_iter_file_ops_compat_inode(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYRESHEX=r2, @ANYRES16=r4, @ANYBLOB="1b0026bd7000fddbdf2503000000"], 0x14}, 0x1, 0x0, 0x0, 0x50}, 0xc800) r5 = socket(0x10, 0x2, 0x0) statx$auto(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x5, 0x10001, 0x0) sendmsg$auto_NL802154_CMD_DEL_SEC_KEY(r5, 0x0, 0x48c5) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4004810}, 0x0) close_range$auto(0x2, 0x8, 0x0) setsockopt$auto_SO_TXTIME(r0, 0x5, 0x3d, &(0x7f0000000400)='5\x00', 0xbb18) socket(0x10, 0x2, 0x4) socket(0x10, 0x3, 0x6) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) r6 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="f0020000", @ANYRES16=r6, @ANYBLOB="01002dbd7000fedbdf2505000000da0203800800c000e000000204002a000400110008002e00", @ANYRES32, @ANYBLOB="d152e64e22695352dd73864415aa8a78c65e6ab75200000000000000007d0800cdd9690cac4138553ecfbb1b32"], 0x2f0}, 0x1, 0x0, 0x0, 0x80f4}, 0xd0) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0x7}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 29.740622123s ago: executing program 9 (id=4339): r0 = openat$auto_l2cap_debugfs_fops_(0xffffffffffffff9c, &(0x7f0000000040), 0x135800, 0x0) ppoll$auto(&(0x7f0000000080)={r0, 0x8, 0x8}, 0x7, &(0x7f0000000000)={0x4000000000800, 0x3}, &(0x7f0000000400)={0x401}, 0x8) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) setuid$auto(0x800000000008) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) pwrite64$auto(r1, &(0x7f00000000c0)='@\x11]=$].^*}\x00', 0x10, 0x8000000000000001) 28.506476065s ago: executing program 9 (id=4343): openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/ping_group_range\x00', 0x202, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/bus/usb-serial/drivers/ti_usb_3410_5052_1/new_id\x00', 0xc0082, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000080)='7', 0x1) timer_create$auto_CLOCK_TAI(0xb, 0x0, &(0x7f0000000200)=0xfb) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x40000008000) r1 = openat$auto_ftrace_set_event_pid_fops_trace_events(0xffffffffffffff9c, &(0x7f0000002640)='/sys/kernel/debug/tracing/set_event_pid\x00', 0x2002, 0x0) setsockopt$auto_SO_BUSY_POLL(r1, 0x7, 0x2e, &(0x7f00000000c0)='\x00', 0x6) add_key$auto_KEY_SPEC_GROUP_KEYRING(&(0x7f0000001240)='.)},]+o)@}/^p,/\x00', 0x0, 0x0, 0x3, 0xfffffffffffffffa) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/veth1_macvtap/ioam6_id_wide\x00', 0x169002, 0x0) read$auto(r2, 0x0, 0x1ff) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) get_robust_list$auto(0x0, &(0x7f0000000200)=&(0x7f00000001c0)={{}, 0x8, &(0x7f0000000180)={&(0x7f0000000140)}}, 0x0) 27.00340954s ago: executing program 9 (id=4348): mmap$auto(0x0, 0x4000b, 0x7, 0x9b72, 0x7, 0x28000) r0 = socket(0x2, 0x1, 0x0) getsockopt$auto(r0, 0x6, 0x19, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/block/nbd13/trace/pid\x00', 0x62142, 0x0) write$auto(r1, &(0x7f0000000040)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) getrandom$auto(0x0, 0xa, 0x3) mmap$auto(0x0, 0x9, 0xfc, 0x1000000eb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) symlink$auto(&(0x7f00000000c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000010c0)='./file0\x00') readlinkat$auto(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='\\\x00', 0x80) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) r3 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) getrandom$auto(0x0, 0x3, 0x2000000) write$auto_console_fops_tty_io(r3, &(0x7f0000000000)="c80d1b5d399b39", 0xfdef) ioctl$auto(r2, 0x4b66, 0x1) 26.070998674s ago: executing program 9 (id=4350): mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) bpf$auto(0x6, &(0x7f0000000200)=@bpf_attr_3={0x8, 0x400, 0x0, 0x101, 0x9, 0x6, 0x8, 0x40, 0x9, "954b1d1077dd1120339584229d66e6c7", 0x0, 0x8, 0xffffffffffffffff, 0x100, 0xb, 0xffff1ce9, 0xfffffff7, 0x9, 0x7, 0x2, @attach_prog_fd, 0x4, 0x5, 0xe5, 0x80ae, 0xeeb, 0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = syz_genetlink_get_family_id$auto_ovs_vport(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$auto_OVS_VPORT_CMD_DEL(r1, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="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", @ANYRES16=r2, @ANYBLOB="200026bd7000fbdbdf2502000000050003000000000008000900080000000800090006090000"], 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x24000010) close_range$auto(0x2, 0x8, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/module/zswap/parameters/compressor\x00', 0x80002, 0x0) r5 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000080), 0x8202, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_GPARAMS(r5, 0x40485404, &(0x7f00000000c0)={{0x1, 0x40, 0x4202, 0x3}, 0x2, 0x0, "72e00d838b24ff6fd5411f4330fd8fa23cf2b9541bbae501c8312f5733753466"}) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYBLOB='_\x00\''], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40000) r6 = socket(0x21, 0x2, 0x0) sendmmsg$auto(r6, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x8) r7 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/apparmor/parameters/mode\x00', 0x121102, 0x0) read$auto(r7, &(0x7f0000000100)='!U\x10', 0x7fff) sendmsg$auto_NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="08ffffff7f00000000006d0020ffffe20500c20004e00040"], 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x801) r8 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/system/node/node0/hugepages/hugepages-1048576kB/nr_hugepages\x00', 0xe8202, 0x0) write$auto(r8, &(0x7f0000000080)='\x00', 0x10) r9 = socket(0x2b, 0x1, 0x0) sendmmsg$auto(r9, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, 0x0, 0x9, 0x0, 0x1f, 0x9}, 0x800009}, 0x7, 0x20000000) r10 = syz_genetlink_get_family_id$auto_nfc(&(0x7f0000000080), r9) sendmsg$auto_NFC_CMD_FW_DOWNLOAD(0xffffffffffffffff, &(0x7f0000002700)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000026c0)={&(0x7f0000000440)=ANY=[@ANYBLOB='g\"\x00\x00', @ANYRES16=r10], 0x2270}, 0x1, 0x0, 0x0, 0x804}, 0x4) sendmsg$auto_NL802154_CMD_DEL_SEC_DEV(r0, &(0x7f00000005c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00012abd7000fcdbdf251b00000014002f80100065008e4ee7ed0100000000000000"], 0x28}}, 0x404c094) fadvise64$auto_POSIX_FADV_NORMAL(r9, 0x5, 0x8, 0x0) sendmsg$auto_NFC_CMD_START_POLL(r3, &(0x7f00000004c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000440)={&(0x7f0000000180)=ANY=[@ANYBLOB="02000000", @ANYRES16=r10, @ANYBLOB="00012cbd7000fedbdf2506000000050010000b00000005001000fe0000000c000200d73a26403a23245e06001100050000000800020021282823"], 0x40}, 0x1, 0x0, 0x0, 0x4001}, 0x4000001) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8000, 0x0) sysfs$auto(0x2, 0x10000000000002c, 0x0) fsopen$auto(0x0, 0x1) 25.79523836s ago: executing program 9 (id=4352): close_range$auto(0x2, 0x8, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_STOP_SCHED_SCAN(r0, &(0x7f0000000580)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x900400}, 0xc, &(0x7f0000000540)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) mmap$auto(0x0, 0x2, 0x80000000df, 0x14, 0x401, 0x8000) epoll_ctl$auto(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0x7ff, 0x401, 0x8000) r1 = socket(0x11, 0x3, 0xfffff958) fremovexattr$auto(0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) recvmmsg$auto(0xffffffffffffffff, &(0x7f0000000040)={{0x0, 0x5, 0x0, 0x5, 0x0, 0x200002, 0x12}, 0x1000803}, 0xfffffff9, 0x10, 0x0) bpf$auto(0x0, &(0x7f0000000040)=@bpf_attr_5={@target_ifindex=r3, 0x7f, 0x99, 0x8, 0x1, @relative_fd, 0xd}, 0x92) r4 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/snd/controlC2\x00', 0x8100, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_LIST(r4, 0xc0505510, &(0x7f00000001c0)={0x0, 0x8, 0x5, @raw=0x80, 0x0, "5059d005d689f01a18c00f29b5fa494a0200f0fced42bcfab54dc63a1562e39e060000007c7fd574bccc61a93bf6de84233c"}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x24, r6, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@NFSD_A_SERVER_GRACETIME={0x8, 0x2, 0x800}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x93b}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x90) sendmsg$auto_NFSD_CMD_VERSION_GET(r1, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r6, 0x1, 0x70bd25, 0x25dfdbfd, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4004804}, 0x800) r7 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x2a742, 0x0) mmap$auto(0x0, 0x10000, 0xde, 0x11, r7, 0x28000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x81) r8 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000280), 0x2000, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_INFO(r8, 0x80e85411, &(0x7f0000000340)={0x2, 0x2a, "46aacd273ed060556fb66e4a9d1960e2aff7f9db9329c987a7a820dbbfd259f55d7c5dbca1aff7151cf35ce4abdfb1a76614537c56daf81da83d9fc637a47d21", "ab580266ce6f3eb8ee353900a2e5c2dd858a1a5f3004101e56533c6e2ed9e3df0afd7ff825ca19fd263d429b98071b46838f23a23af204aa995b7165dc10e94dbb5beea7d2fd3a33a042de6215868fd0", 0x29d0, 0x81, "93505ceae2affaa520e0519ea2ca6a725ecdc1cff11e60cb14365ad1db3b6dc9141e487478c535cbe935e9e81643e04079ae6eea40e16d2f649711f7fe7f3e02"}) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/workqueue/nf_ft_offload_stats/affinity_scope\x00', 0x2, 0x0) read$auto(0x3, 0x0, 0x20f34) write$auto(0x3, 0x0, 0xfffffdf2) 10.554860226s ago: executing program 38 (id=4352): close_range$auto(0x2, 0x8, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_STOP_SCHED_SCAN(r0, &(0x7f0000000580)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x900400}, 0xc, &(0x7f0000000540)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) mmap$auto(0x0, 0x2, 0x80000000df, 0x14, 0x401, 0x8000) epoll_ctl$auto(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0x7ff, 0x401, 0x8000) r1 = socket(0x11, 0x3, 0xfffff958) fremovexattr$auto(0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) recvmmsg$auto(0xffffffffffffffff, &(0x7f0000000040)={{0x0, 0x5, 0x0, 0x5, 0x0, 0x200002, 0x12}, 0x1000803}, 0xfffffff9, 0x10, 0x0) bpf$auto(0x0, &(0x7f0000000040)=@bpf_attr_5={@target_ifindex=r3, 0x7f, 0x99, 0x8, 0x1, @relative_fd, 0xd}, 0x92) r4 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/snd/controlC2\x00', 0x8100, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_LIST(r4, 0xc0505510, &(0x7f00000001c0)={0x0, 0x8, 0x5, @raw=0x80, 0x0, "5059d005d689f01a18c00f29b5fa494a0200f0fced42bcfab54dc63a1562e39e060000007c7fd574bccc61a93bf6de84233c"}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x24, r6, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@NFSD_A_SERVER_GRACETIME={0x8, 0x2, 0x800}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x93b}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x90) sendmsg$auto_NFSD_CMD_VERSION_GET(r1, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r6, 0x1, 0x70bd25, 0x25dfdbfd, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4004804}, 0x800) r7 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x2a742, 0x0) mmap$auto(0x0, 0x10000, 0xde, 0x11, r7, 0x28000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x81) r8 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000280), 0x2000, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_INFO(r8, 0x80e85411, &(0x7f0000000340)={0x2, 0x2a, "46aacd273ed060556fb66e4a9d1960e2aff7f9db9329c987a7a820dbbfd259f55d7c5dbca1aff7151cf35ce4abdfb1a76614537c56daf81da83d9fc637a47d21", "ab580266ce6f3eb8ee353900a2e5c2dd858a1a5f3004101e56533c6e2ed9e3df0afd7ff825ca19fd263d429b98071b46838f23a23af204aa995b7165dc10e94dbb5beea7d2fd3a33a042de6215868fd0", 0x29d0, 0x81, "93505ceae2affaa520e0519ea2ca6a725ecdc1cff11e60cb14365ad1db3b6dc9141e487478c535cbe935e9e81643e04079ae6eea40e16d2f649711f7fe7f3e02"}) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/workqueue/nf_ft_offload_stats/affinity_scope\x00', 0x2, 0x0) read$auto(0x3, 0x0, 0x20f34) write$auto(0x3, 0x0, 0xfffffdf2) 5.836058671s ago: executing program 6 (id=4416): r0 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) adjtimex$auto(&(0x7f0000000040)={0xec44, 0x0, 0x7, 0x100000000, 0x1, 0x7fffffff, 0xd, 0x0, 0x0, 0x10001, 0x100000001, {0x1, 0x8000000000000001}, 0x500000000000000, 0x8, 0xfffffffffffffff9, 0x7, 0x0, 0x8, 0x9bc0b22, 0x1, 0x32a, 0x5, 0x138}) ioctl$auto_IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, 0x6) ioctl$auto_IOCTL_VMCI_QUEUEPAIR_SETVA(r0, 0x7a4, 0x0) fcntl$auto_F_SETOWN_EX(r0, 0xf, 0x6) mmap$auto(0x0, 0x6, 0x2, 0x40eb2, 0xffffffffffffffff, 0x308000000000) r1 = openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/pcmC0D0p\x00', 0x0, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/block/loop5/queue/discard_max_bytes\x00', 0x2, 0x0) sendfile$auto(r2, r2, 0x0, 0x3) ioctl$auto_SNDRV_PCM_IOCTL_FORWARD(r1, 0x40084149, 0x0) 5.616500523s ago: executing program 6 (id=4417): r0 = openat$auto_uprobe_events_ops_trace_uprobe(0xffffffffffffff9c, 0x0, 0x1, 0x0) writev$auto(r0, &(0x7f0000000bc0)={0x0, 0x81}, 0x3) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/platform/mac802154_hwsim/ieee802154/phy1/net/wpan1/statistics/rx_packets\x00', 0x244100, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r1, 0x0, 0x0) sendmsg$auto_NFC_CMD_LLC_GET_PARAMS(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000440)={&(0x7f00000002c0)={0x34, 0x0, 0xaa0c1ae6162733c5, 0x70bd2a, 0x25dfdbfc, {}, [@NFC_ATTR_LLC_PARAM_MIUX={0x6, 0x11, 0x1}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, 0x200}, @NFC_ATTR_LLC_PARAM_MIUX={0x6, 0x11, 0x400}, @NFC_ATTR_COMM_MODE={0x5, 0xa, 0x4f}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x44000) write$auto_cachefiles_daemon_fops_internal(0xffffffffffffffff, &(0x7f0000000300)="a04f", 0x2) ioctl$auto_NS_GET_TGID_IN_PIDNS(0xffffffffffffffff, 0x8004b709, &(0x7f0000000040)=0x5) r2 = openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/ieee80211/phy3/netdev:wlan0/stations/08:02:11:00:00:01/he_capa\x00', 0xa0080, 0x0) read$auto_debugfs_full_proxy_file_operations_internal(r2, 0x0, 0x0) unshare$auto(0x40000080) openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/tracing/set_event\x00', 0x101901, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/block/nbd15/queue/scheduler\x00', 0x103a42, 0x0) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r4 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$auto_IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, 0x0) write$auto(r3, &(0x7f0000000400)='/dev/\x98@dio1\x00', 0x100000a3d9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80802, 0x0) sendmsg$auto_NL80211_CMD_ADD_LINK(r4, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB="14850a00", @ANYRES16], 0x14}, 0x1, 0x0, 0x0, 0x4010}, 0x44) r5 = socket(0x2b, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x11}}, 0x6a) sendmmsg$auto(r5, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x3, 0x20000000) sendfile$auto(0x1, 0x3, 0x0, 0x7ff) sendto$auto(0x3, 0x0, 0x2000f, 0x101, 0x0, 0x1c) recvmmsg$auto(0x3, 0x0, 0xfffe, 0x6, 0x0) openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000000)='/dev/usbmon11\x00', 0x203c0, 0x0) mmap$auto(0x0, 0x4000002, 0xfffffffffffffe01, 0x8051, 0x3, 0x0) syz_clone(0x5004000, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) 5.372593192s ago: executing program 8 (id=4418): r0 = epoll_create1$auto(0x0) mmap$auto(0x5, 0x4, 0x2dba0fb4, 0x577, r0, 0x5) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000003180), r1) sendmsg$auto_ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000003400)={0x0, 0x0, &(0x7f00000033c0)={&(0x7f0000000000)={0x14, r2, 0x301, 0x70bd29, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) (async) r3 = getpgid(0x0) prlimit64$auto(r3, 0x4, 0x0, 0x0) (async) syz_open_procfs$namespace(r3, &(0x7f0000000280)='ns/time\x00') (async) mmap$auto(0x0, 0x20009, 0xe3, 0x100000eb4, 0x40000000000a1, 0x8000) (async) r4 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nbd8\x00', 0x20000, 0x0) ioctl$auto(r4, 0xab00, 0xffffffffffffffff) read$auto(r1, &(0x7f0000000080)='\x00', 0xff09) (async) r5 = openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/ieee80211/phy0/rate_ctrl_alg\x00', 0x20800, 0x0) read$auto_debugfs_full_proxy_file_operations_internal(r5, &(0x7f00000000c0)=""/17, 0x11) sendmsg$auto_ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r2, 0x608, 0x70bd2b, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x8000) (async) openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/neigh/bridge_slave_0/base_reachable_time\x00', 0x480002, 0x0) 4.696056098s ago: executing program 4 (id=4419): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000) mmap$auto(0x0, 0x202000b, 0x8, 0x17, 0xfffffffffffffffa, 0xffff) socket(0x10, 0x2, 0x0) openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/set_event\x00', 0x22a01, 0x0) r0 = io_uring_setup$auto(0x403, 0x0) getpid() unshare$auto(0x40000080) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) listen$auto(0x3, 0x81) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) r2 = getpid() process_vm_readv$auto(r2, &(0x7f0000000000)={0x0, 0xfff}, 0x40000000001, &(0x7f0000000180)={&(0x7f0000000140), 0x40000000001243}, 0xa, 0x0) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) close_range$auto(0x2, 0x8, 0x0) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(r0, r1, 0x0) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000001c0), 0x5a2f57f10eede95a, 0x0) ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r1) ioctl$auto_KVM_GET_MSRS(r3, 0x4008ae89, &(0x7f00000000c0)={0xdd, 0x0, [{0x40000073, 0xc00, 0xfff}]}) openat$auto_dfs_global_fops_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/ubifs/chk_general\x00', 0x381400, 0x0) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000080)={{0x0, 0x3000000, 0x0, 0x40000000001, 0x0, 0x10000000000000}, 0xfffffffd}, 0x7, 0x0) fanotify_init$auto(0x65, 0x2) 4.440244037s ago: executing program 8 (id=4420): syslog$auto(0x3, &(0x7f0000000080)='..\x00k\xac\x8c\x1d\x0e\x98\x80\xd2\xaf\xa1\xf2\x1e\xe1R1\xa2\x8e\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\xa6\xf4#+\xfa\xd7\x01\xb9j<\v\xf8\xfe\n\xa7\xfeD\xca\xd9\xb3\xc1\xe4\xf5j\x94\x7f\x00\xd2\x8b\x11e1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\xa1q\x0f\xed\x013\x87l\xb9\x1e\x05\x90\xa2', 0x2) r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)) lseek$auto(r0, 0x0, 0x0) (async) mkdir$auto(0x0, 0x8cd) (async) bpf$auto_BPF_OBJ_GET_INFO_BY_FD(0xf, &(0x7f00000002c0)=@test={0xffffffffffffffff, 0x0, 0x856, 0x189, 0x8, 0x7fff, 0x7fff, 0x10000, 0xc91a, 0x7, 0x5, 0x3, 0x3, 0x3, 0x6}, 0x1) (async) unshare$auto(0x40000080) settimeofday$auto(0x0, &(0x7f0000000100)={0x82, 0x4}) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x7ffe) (async) read$auto(0x3, 0x0, 0x400000000f34) (async) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/fs/cifs/dfscache\x00', 0x101a41, 0x0) mmap$auto(0x0, 0x7, 0xfffffffffffffffe, 0x9b72, 0x2, 0x8000) (async) write$auto(r2, 0x0, 0x6) r3 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x42, 0x0) write$auto(r3, &(0x7f0000000200)='/de\xef\xe7audio1\x00', 0xa3d9) (async) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/snd/controlC1\x00', 0x802, 0x0) (async) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, &(0x7f0000000740)={{@inferred, 0x7, 0x4, 0x9, "3112d585005a614d19e22af9ffb683dbede3d0bf828bbfba40f035f4be6b7fe5e2f94bd90484b0755015e48d"}, 0x2, 0xfe, 0x4, @inferred, @integer64={0x0, 0x81, 0x4000006}, "7a9fc190334fdd7334022bd212b67212f0bcab84b1007ce8cbce0bb32777702b8d7c2d000f00040000001000"}) openat$auto_ubi_ctrl_cdev_operations_ubi(0xffffffffffffff9c, &(0x7f0000000180), 0x40900, 0x0) openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mouse0\x00', 0x381502, 0x0) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/virtual/graphics/fbcon/cursor_blink\x00', 0x0, 0x0) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7ffffffc, 0x8, 0x3000, 0x6, 0x7, 0x400a, 0xffffffffffffffff, [0x0, 0x0, 0x3ff], {0x6, 0x6, 0x8c48, 0x29b, 0x9, 0x80, 0x104, 0x6, 0x4}, {0x100, 0x1, 0x101, 0x85, 0x2, 0x1a7b870a, 0x76c5, 0x8, 0x100000000}}) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0xd, 0x3000, 0x6, 0x7, 0x400a, 0xffffffffffffffff, [0x0, 0xfffffffc], {0x6, 0x6, 0x8c48, 0x4, 0x3, 0x80, 0x104, 0x6, 0x3}, {0x100, 0x5, 0x52, 0x85, 0xffffffff, 0x1a7b870a, 0xcb, 0x8, 0x100000000}}) statmount$auto(0x0, &(0x7f0000000400)={0x8, 0x1, 0x9, 0x3, 0xb, 0x940, 0x1ffde, 0x3, 0x6, 0x2, 0x9, 0x5, 0x3, 0x3, 0xb0, 0x7, 0x6, 0x3, 0x5, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd]}, 0x1fe, 0x81) (async) ppoll$auto(&(0x7f0000000140)={0xffffffffffffffff, 0x3ff, 0x4}, 0x7f, 0x0, 0x0, 0x8) (async) close_range$auto(0x2, 0x8, 0x0) (async) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0xa, 0x2, 0x73) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) (async) io_uring_setup$auto(0x8, 0x0) close_range$auto(0x2, 0x8, 0x0) 3.560966086s ago: executing program 4 (id=4421): mmap$auto(0x0, 0x400008, 0x5f, 0x9b72, 0x2, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) unshare$auto(0x40000080) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0x2003f2, 0x15) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) clock_gettime$auto(0x0, &(0x7f0000000040)={0x7fff, 0xc}) 3.463972838s ago: executing program 8 (id=4422): r0 = socket(0x11, 0x3, 0x9) sendmmsg$auto(r0, &(0x7f00000001c0)={{&(0x7f0000000000), 0x1aa, &(0x7f0000000100)={&(0x7f00000003c0)="4a67d23edb317545d9bc8745d18a5956210d2de48302", 0x49}, 0x5, &(0x7f0000000400), 0x5, 0x1000}}, 0x1, 0x100) mmap$auto(0x0, 0x400009, 0xdf, 0x9b72, r0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$auto_BPF_TASK_FD_QUERY(0x14, 0x0, 0x3) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/fs/cifs/SecurityFlags\x00', 0x48041, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) openat$auto_vhci_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = socket(0x11, 0xa, 0x9) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) unshare$auto(0x40000080) openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x8800, 0x0) r2 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x787806, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0x10, 0x2, 0xc) r4 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$auto_CTRL_CMD_GETPOLICY(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x71, r4, 0x10, 0x70bd2c, 0x25dfdbfb, {0xa, 0x0, 0xa00}, [@CTRL_ATTR_OP={0x8, 0xa, 0x5}, @CTRL_ATTR_FAMILY_ID={0x31, 0x1, 0x6}]}, 0x10e}}, 0x10004010) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000001080), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$auto_NL80211_CMD_GET_WIPHY(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="810b25bd7000ffdbdf251100000008000300", @ANYRES32=r8], 0x1c}, 0x1, 0x0, 0x0, 0x20000084}, 0x0) sendmsg$auto_NL80211_CMD_DEAUTHENTICATE(r3, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="b00c0100"/20, @ANYRES16=r6, @ANYBLOB="200029bd7000fbdbdf25270000000800cb00050000000400cf0004003401c8002680ba00030081ae44d0012b6706f2921767de2a76ec22ec89bbacfadf25efcc4b8bd01a3eefd8e14decd51def83636dd206e0d5c96f4470e9dcc2c7c14b23f76c3a23ad43d1ad8417c10fdbb41cdb474b8e6e91634d7eeba60eec458ad76e1190cfd7d001a9da7c060750385dcde485683dfbe1f10dc591572a2c5b707e63f6fba22af4e4f0d32c9e8499329fe2348d7526923d407879261b742b7e553f112eb946153f976d3a8ceb1c837f5fcdeb7a134c415463706584a90f187e000008000100000400001200f9009ebb5f69e977d3bc734ac5dbc0cd00000c00f900a70480b89aeb465d"], 0x10c}, 0x1, 0x0, 0x0, 0x8000}, 0x200200c0) r9 = socket(0x10, 0x2, 0x4) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0xc) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYRES32=0x0, @ANYRES8=r1, @ANYRES8=r2], 0x18}, 0x1, 0x0, 0x0, 0x60008004}, 0x2000c082) write$auto(r9, &(0x7f0000000000)='-\x00', 0xfdef) 3.189070688s ago: executing program 6 (id=4423): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) close_range$auto(0xffffffffffffffff, 0x8, 0x400000) syz_clone(0x4011, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket(0x2, 0x1, 0x0) r1 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f00000001c0), 0x2000, 0x0) ioctl$auto_RTC_IRQP_READ(r1, 0x8008700b, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4ea2, @remote}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0x101}, 0x8}, 0x7, 0x20020000) fadvise64$auto_POSIX_FADV_NORMAL(0xffffffffffffffff, 0x7, 0xd, 0x0) write$auto(0x3, 0x0, 0x7fffffff) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) sendmsg$auto_IEEE802154_LLSEC_LIST_SECLEVEL(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x4000001}, 0x400c054) mmap$auto(0x0, 0x20005, 0x4000000000df, 0xeb1, 0xffffffffffffffff, 0x8000) close_range$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x81) socket(0x2, 0x3, 0x100) r2 = socket(0x1d, 0x2, 0x7) r3 = socket(0x5, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'vcan0\x00'}) bind$auto(r0, &(0x7f0000000040)=@nl=@unspec, 0x31ad) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'vcan0\x00', 0x0}) connect$auto(0x3, &(0x7f00000018c0)=@can={0x1d, r4}, 0x18) sendmmsg$auto(0x3, 0x0, 0x9a4, 0xffff) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/platform/vhci_hcd.8/usb26/26-0:1.0/usb26-port6/power/control\x00', 0xc0082, 0x0) sendfile$auto(r5, r5, 0x0, 0x800400000000ef0) read$auto(0xffffffffffffffff, 0x0, 0x200000009) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x2) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) write$auto(0x3, 0x0, 0x100000000) openat$auto_tracing_cpumask_fops_trace(0xffffffffffffff9c, 0x0, 0xa901, 0x0) 2.540103998s ago: executing program 4 (id=4424): openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x20881, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x401bf, 0x7352, 0x10003c, 0x1, 0x1ffde, 0x7, 0x3, 0xfffffffffffffffe, 0x9, 0x3, 0x6, 0x4, 0x7, 0x9, 0x9, 0x10005, 0x80, 0x4, 0xffefffff, 0x7, 0x2080, 0x203, 0x0, 0x20e9d17d, 0x400300000000000, 0xdb, 0x0, 0x6, 0xf04, [0xfffffffffffffffe, 0x0, 0x2, 0xfffffffffffffffd, 0x2, 0xfffffffffffffffe, 0x2, 0x6, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1000000, 0x0, 0x8f, 0x10000, 0x8000000, 0x7, 0x0, 0x1, 0xfffffffefffffffd, 0x5, 0xff5b, 0xc72, 0x0, 0x9, 0x0, 0x66, 0x3, 0x1, 0x0, 0x0, 0xfffffffffffffffb, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000003, 0x1, 0x8c]}, 0x2, 0xd) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x2062, 0x0) mkdir$auto(&(0x7f0000000040)='./file0\x00', 0x2) mkdir$auto(&(0x7f00000000c0)='./file1\x00', 0x9) mmap$auto(0x3, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) read$auto_proc_iter_file_ops_compat_inode(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001980)={0x14, r1, 0x1b, 0x70bd2b, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x20008800}, 0xc800) r2 = socket(0x10, 0x2, 0x0) statx$auto(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x5, 0x10001, 0x0) sendmsg$auto_NL802154_CMD_DEL_SEC_KEY(r2, 0x0, 0x48c5) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4004810}, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0x4) socket(0x10, 0x3, 0x6) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) r3 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="f0020000", @ANYRES16=r3, @ANYBLOB="01002dbd7000fedbdf2505000000da0203800800c000e000000204002a000400110008002e00", @ANYRES32, @ANYBLOB="d152e64e22695352dd73864415aa8a78c65e6ab75200000000000000007d0800cdd9690cac4138553ecfbb1b32"], 0x2f0}, 0x1, 0x0, 0x0, 0x80f4}, 0xd0) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0x7}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 2.287481759s ago: executing program 8 (id=4425): r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r1 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0xa, 0x9, 0xb267, 0x759, 0x5, 0x81, 0x1ffde, 0x7, 0x2, 0x8, 0x9, 0x80003, 0x4, 0x200000000005, 0x384, 0x9, 0xb14, 0x10006, 0x400007f, 0x7, 0x0, 0xe, 0x21ff9, 0x200, 0x0, 0x84, 0x0, 0x0, 0x3, 0x0, 0xac79, [0x0, 0x7, 0x0, 0x25c3, 0x0, 0x0, 0x2000000000, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x80000000, 0x5, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x40000000000804ac, 0x100000, 0x0, 0x0, 0x1, 0x5, 0x0, 0x196fc46e, 0x2, 0xffffffffffffffff, 0x0, 0x4, 0x0, 0x40000000000, 0x8, 0x0, 0x101, 0x0, 0x800000, 0xffff7fffffdffffe, 0x0, 0x4]}, 0x1fa, 0x4) r2 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000000000), 0x28002, 0x0) ioctl$auto__ctl_fops_dm_ioctl(r2, 0xfffffff7effffd05, &(0x7f00000001c0)) sendmmsg$auto(0x3, 0x0, 0x787b, 0x7000000) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/scsi/scsi\x00', 0x80002, 0x0) write$auto_proc_reg_file_ops_compat_inode(r1, &(0x7f00000024c0)="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", 0xfff) openat$auto_msr_fops_msr(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cpu/1/msr\x00', 0x20002, 0x0) openat$auto_tracing_fops_trace(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/tracing/trace\x00', 0x1a6b75d638828712, 0x0) r3 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/consoles\x00', 0x800, 0x0) pread64$auto(r3, 0x0, 0x5cfa, 0x80000000000000a) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) statmount$auto(0x0, &(0x7f0000000180)={0xa, 0x929, 0x4001, 0x7, 0x5, 0x100717e, 0x3, 0x7, 0x6, 0x7ff, 0xfffffffe, 0x80000001, 0x4, 0x200000000001, 0x1, 0xfffffffffffffffb, 0x8, 0x0, 0x2, 0x2, 0x864, 0xe, 0x22000, 0x200, 0x4, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, [0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x4000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffff4f3, 0x0, 0x0, 0x2f, 0x0, 0x0, 0xfffffffffffffffc]}, 0xa, 0xd) r4 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000000180), 0x1541, 0x0) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/lockd/parameters/nlm_grace_period\x00', 0x8001, 0x0) write$auto(r5, &(0x7f0000000200)='\x00\x00\x00\x00\xcf\x00l\xa67u\xe1\xe8@?\xdey\x94\x81\xb8\x80d\x92\a4T\xf5\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb4\x1b\x1e\xde\x01\x03`\x036\v\x00\x89E@\xec\xc9\xe9<\xb1\x89\xc7\xcc\xd4kF\xed@\x95\xb0\xdd}\xf1R\x84\xbb\x92\xb86\r>\xe0\xf0\xea\xc1\xc1\x029\x04\xd4|\x95\xa7\x1eB\r\xf1+\xe1\xc6O\xf5\xa6S\x86Q\xb9\xd5\xd1*\x03ds6,\xf6q\x04r5 qq/\x88\xf8\x03\xfaw?\xb6x\x9d\xbd\x87~\xbby\x8cy\xa6\x93m\xa6\xe7\xac\xa3\xf1\x04p\xaf\xc8}\xbc\xe9\xc0\t\xc6\"\x18U\x03\xa0\x18\xc5^\xa7\xc7\xd7\xb5\x15\xb3\xf7\xa6\xfe\x1a6', 0x81) mmap$auto(0x0, 0x101, 0x4000000000df, 0xeb1, 0x200000401, 0x8000) r6 = socket(0x10, 0x2, 0x6) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmmsg$auto(r6, &(0x7f0000000840)={{0x0, 0x5, &(0x7f0000000280)={0x0, 0xc3}, 0x1, 0x0, 0x7ffd, 0x8a}, 0x7}, 0x5, 0x2) write$auto_proc_clear_refs_operations_internal(r0, &(0x7f0000000000)="73d6cc4fdf406742386dd7", 0xb) write$auto(r0, &(0x7f0000000080)='/dev/mapper/control\x00', 0x4) r7 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wlan1\x00', 0x0}) sendmsg$auto_NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="010b27bd7000fcdbdf2505000000fd000300", @ANYRES32=r8, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4000050}, 0x240088e4) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000800)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="c0030000cd09be53554cc871f948f6782fa4df92dd88dc60cd055dcf875a6fb389f107c1ae685f82d4a4d2e245a7177a843bc4ebd1c5d772492f90535453fc46c4fa2031fadba5233085cce19bfb363a9780f6d7ef517b5b9c2034b4c46a70fa21ab934a557da6bf46bb0145a56121aaf3c9e95d56a651b9af0eb25fb62202311b34ea990a315c1e213672bb83246d99a66cf4844d1cd313575583345ee2527ec64652e68672a9e804c0a9261fa4157d31154e58c7146fb076bf33594323ddf5766c16e1e451c30069253a96a99f89", @ANYRES16=r7, @ANYBLOB="08002cbd7000fedbdf251f00000031000d011c0d1f0ad30e4f9991e97dc34457a71f8670394a4d0d9082ece1a6d9b25c21f47212b9b595707a1197dc0bc036000000060036000900000070031780bc00050028fbedd7208acf599b9230eb0bb891e19639349852fabaf3a6d8c4f34433c00b41d9e1a528329f6d9eeff8e576b08a31e7e58152f037285f9fcfcfee1131b636c0ca6da0e0a2df95e7b54f8b81c07e472b71c623e049425a091c84139e4e482266112d80d59fbf6645414dc51b55bb17167f07bc2c8cb6e5f5452982e0120c9834d9906a726a2aaf7ad36b5328ce04ddb9eb7d91b6d4eade580675697b465d0fa82157feb23e00576b9cbbeef33a1c0372ae581a17def42805000100800000002e000400c67e3e25c4e85cc10f4957f3ffc1cb6fed47f7b5716f9310e1f8c76c48f1edbadd57b7dc4f383bf5cbbb0000e300050011b060f9ab61b581f9ce99e7074a0b46d9104e030e9f3aacf9fe849f345bcb1ebf0f7a9b948a7a5aac585021c951ca516a4b0037464971e1205148cdb736b911309e344f2a0aa3ddd999ee0ec21d0fc62b14afd78c1d5ad8e0a5c08859e5f09de0855e53ca0f64dab4bb2561381db32cb83e36a4ee8b6fd9cc4f1235bdcb6d06bd612694a6e112938e885e6bed02ad0e0a84b3292b0e4e317b50b3182e85380b37493c3551e9fa938e42e3a7143dde52efc3f2fbce9f9d296f44b2a888dd01c1b4d5c09754e916fd3c4e3dd26a3598b9a0306d7bdf3cdb471ef5c3b5130745004b00040071db3aabf9681b5fb267698c91a2856ffb0de99899ec75e4bb043bb1c2ceca9e087127740fcabc50e8ba80558c8542733f7f8b806e67e87a84dd4262ed0307291c228d600a1a92005d000400a0641958ced101cbdfc15a149fd8e2ed37e1dd1ffccd0215c35b866dcc298b4135115bea403dc40c51dbd9ab7d8d6b73cb9d21f3d582d4cd7de113293f8c2f10706a0c5cf1fb14e953775cf2105a047d317bd8ae97b1b2aef40000000500020000000000de0004004ea316614cddd973c45ae2450efbe8f094bb0e1b1fc186d4bdf6d03026045565c4f15798e76f74d7904917c2033a9dc4884747444602019adcec10012c7c430a695f211a8dffc9b34e8decd51020af5f351f3eb6bfc9d89b3c4b4c4e9525298a1ff04990bf7001fa1dcccd0ab60bf0989fb4e5126fd86db1c105ba0ce3d6cc29e19b44110dad3ca5c1e9f2c8bff6518e7bb9d7aea3c0a113c7ef85dd31d7b8fe19538aae1d21650e12d3ac68afcac83727b248cf7c3099c9861a1815c888f40555f6df4dddd9ec3ae072106c390c5ef45925e5f2569dba76da3c0000"], 0x3c0}, 0x1, 0x0, 0x0, 0x44000}, 0x4000000) ioctl$auto__ctl_fops_dm_ioctl(r4, 0xfffffff7effffd01, &(0x7f00000001c0)) 2.038439197s ago: executing program 4 (id=4426): mmap$auto(0x0, 0x202000c, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket(0xa, 0x2, 0x0) close_range$auto(0x2, 0x8000, 0x0) socket(0x18, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000280), 0x101000, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r0) ioctl$auto_KVM_CREATE_VM(r1, 0x4048aecb, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000080), r3) sendmsg$auto_ETHTOOL_MSG_LINKINFO_SET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x3c, r4, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x9}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0xa}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x2400004c) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) 1.755853891s ago: executing program 6 (id=4427): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) keyctl$auto_KEYCTL_SETPERM(0x5, 0xa, 0x4, 0x4, 0xe) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) (async) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) connect$auto(r1, 0x0, 0x54) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) mknod$auto(&(0x7f0000000040)='./file0\x00', 0x1001, 0x4) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x7, 0x734f, 0x37, 0x67f, 0x1ffde, 0x7, 0x3, 0x20000002, 0xd, 0x3, 0x1, 0x2091, 0x83ad, 0x9, 0x6, 0x6, 0x81, 0x4, 0x1cd7, 0x8, 0x2000, 0x203, 0x0, 0x84, 0xfffffffffffffffa, 0x0, 0x0, 0x2, 0x101, [0x0, 0x0, 0x8003, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa04, 0x0, 0xfffffffffffffffc, 0x3, 0x4, 0x1ff, 0x0, 0x9, 0x0, 0x40000000, 0x0, 0x7, 0x0, 0x2, 0x7ff, 0x0, 0x0, 0x3, 0x40000000000000, 0x0, 0x0, 0x0, 0xff, 0x0, 0x8, 0x0, 0x3c3, 0x0, 0x2]}, 0x1fe, 0x2) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x13, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8040) (async) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x13, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8040) r2 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r2, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000080)={0x0, 0xfc2}, 0x2, &(0x7f0000000100), 0x3, 0x2}, 0x10000}, 0xffffffff, 0x4008) (async) sendmmsg$auto(r2, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000080)={0x0, 0xfc2}, 0x2, &(0x7f0000000100), 0x3, 0x2}, 0x10000}, 0xffffffff, 0x4008) 1.442958818s ago: executing program 4 (id=4428): r0 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/036/001\x00', 0xa901, 0x0) mmap$auto(0x10, 0x400008, 0xdf, 0x9b72, r0, 0x0) (async, rerun: 64) write$auto(0x1, 0x0, 0x80000000) (rerun: 64) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x20080, 0x0) (async) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) (async) r1 = pipe$auto(0x0) (async, rerun: 64) r2 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) r3 = syz_genetlink_get_family_id$auto_ila(&(0x7f0000000040), r2) sendmsg$auto_ILA_CMD_DEL(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, r3, 0x1, 0x70bd26, 0x6, {}, [@ILA_ATTR_CSUM_MODE={0x5, 0x7, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000010}, 0x4000000) (async) splice$auto(0x4, 0x0, r1, 0x0, 0x80000004, 0x2) (async) syz_genetlink_get_family_id$auto_tipcv2(0x0, 0xffffffffffffffff) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async, rerun: 32) sendmsg$auto_TIPC_NL_MEDIA_GET(0xffffffffffffffff, 0x0, 0x40) (async, rerun: 32) ioctl$auto(r0, 0x5522, 0xf15) (async) ioctl$auto(r0, 0x5523, r0) 997.177048ms ago: executing program 8 (id=4429): mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) r0 = socket(0x18, 0x3, 0x2) mmap$auto(0x0, 0xe983, 0x9, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x40009, 0xe1, 0x9b72, 0x7, 0x28000) open(&(0x7f0000000100)='.\x00', 0x0, 0x57e) fcntl$auto_F_ADD_SEALS(r0, 0x410, 0x6) sysfs$auto(0x7, 0x9, 0x5d58) rename$auto(&(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='./file0\x00') sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) mmap$auto(0x0, 0x40009, 0xe2, 0x9b72, 0x7, 0x28000) r1 = socket(0x11, 0x80003, 0x300) r2 = openat$auto_ptdump_fops_(0xffffffffffffff9c, &(0x7f0000000000), 0xd0002, 0x0) sendfile$auto(r2, r1, 0x0, 0x8fb5) ioctl$auto(0xc8, 0x400454ce, 0xffffffffffffffff) setsockopt$auto_SO_OOBINLINE(0xffffffffffffffff, 0x3, 0xa, 0x0, 0x2) close_range$auto(0x2, 0xa, 0x0) socket(0x18, 0xa, 0x1) socket(0xa, 0x2, 0x0) connect$auto(0x3, 0x0, 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) ioctl$auto_SW_SYNC_GET_DEADLINE(0xffffffffffffffff, 0xc0105702, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x88542, 0x0) r3 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x20200, 0x0) preadv$auto(r3, 0x0, 0xc, 0x9, 0x402) 631.969243ms ago: executing program 6 (id=4430): mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r0 = io_uring_setup$auto(0x5, 0x0) close_range$auto(0x2, r0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x2b, 0x1, 0x0) read$auto_usbdev_file_operations_usb(r0, &(0x7f0000000080)=""/91, 0x5b) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0xffff, @remote}, 0x69) listen$auto(0x3, 0x81) accept$auto(0x3, 0x0, 0x0) r3 = socket(0x2, 0x1, 0x0) sendmmsg$auto(r3, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x4, 0x0, 0x1, 0x1}, 0x80000b}, 0x5, 0x20000000) r4 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000100), r2) sendmsg$auto_ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000480)={&(0x7f0000000000), 0xc, &(0x7f0000000440)={&(0x7f0000000180)={0x2ac, r4, 0x8, 0x70bd2d, 0x25dfdbfb, {}, [@ETHTOOL_A_COALESCE_TX_AGGR_TIME_USECS={0x8, 0x1c, 0x100}, @ETHTOOL_A_COALESCE_TX_PROFILE={0x84, 0x1e, 0x0, 0x1, [@ETHTOOL_A_PROFILE_IRQ_MODERATION={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_IRQ_MODERATION_USEC={0x8, 0x1, 0x6}, @ETHTOOL_A_IRQ_MODERATION_COMPS={0x8}, @ETHTOOL_A_IRQ_MODERATION_PKTS={0x8, 0x2, 0x164a}]}, @ETHTOOL_A_PROFILE_IRQ_MODERATION={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_IRQ_MODERATION_COMPS={0x8}, @ETHTOOL_A_IRQ_MODERATION_COMPS={0x8, 0x3, 0x4040000}]}, @ETHTOOL_A_PROFILE_IRQ_MODERATION={0x4}, @ETHTOOL_A_PROFILE_IRQ_MODERATION={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_IRQ_MODERATION_PKTS={0x8, 0x2, 0x3}, @ETHTOOL_A_IRQ_MODERATION_USEC={0x8, 0x1, 0x200}]}, @ETHTOOL_A_PROFILE_IRQ_MODERATION={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_IRQ_MODERATION_COMPS={0x8, 0x3, 0x71c}, @ETHTOOL_A_IRQ_MODERATION_USEC={0x8, 0x1, 0x4}, @ETHTOOL_A_IRQ_MODERATION_USEC={0x8, 0x1, 0x4}]}, @ETHTOOL_A_PROFILE_IRQ_MODERATION={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_IRQ_MODERATION_PKTS={0x8, 0x2, 0xc}, @ETHTOOL_A_IRQ_MODERATION_COMPS={0x8, 0x3, 0x3}, @ETHTOOL_A_IRQ_MODERATION_COMPS={0x8, 0x3, 0x1}]}]}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES_LOW={0x8, 0x11, 0x1}, @ETHTOOL_A_COALESCE_TX_PROFILE={0x1ec, 0x1e, 0x0, 0x1, [@ETHTOOL_A_PROFILE_IRQ_MODERATION={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_IRQ_MODERATION_COMPS={0x8, 0x3, 0x1000}, @ETHTOOL_A_IRQ_MODERATION_COMPS={0x8, 0x3, 0x8f28}, @ETHTOOL_A_IRQ_MODERATION_USEC={0x8, 0x1, 0x10001}, @ETHTOOL_A_IRQ_MODERATION_USEC={0x8, 0x1, 0x886}, @ETHTOOL_A_IRQ_MODERATION_COMPS={0x8, 0x3, 0x10}, @ETHTOOL_A_IRQ_MODERATION_PKTS={0x8, 0x2, 0x6}, @ETHTOOL_A_IRQ_MODERATION_USEC={0x8, 0x1, 0x8}]}, @ETHTOOL_A_PROFILE_IRQ_MODERATION={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_IRQ_MODERATION_COMPS={0x8, 0x3, 0xffffff81}, @ETHTOOL_A_IRQ_MODERATION_PKTS={0x8, 0x2, 0x412}, @ETHTOOL_A_IRQ_MODERATION_COMPS={0x8, 0x3, 0x4}]}, @ETHTOOL_A_PROFILE_IRQ_MODERATION={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_IRQ_MODERATION_PKTS={0x8, 0x2, 0x5}]}, @ETHTOOL_A_PROFILE_IRQ_MODERATION={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_IRQ_MODERATION_USEC={0x8, 0x1, 0xfffffff8}, @ETHTOOL_A_IRQ_MODERATION_COMPS={0x8, 0x3, 0xd}, @ETHTOOL_A_IRQ_MODERATION_PKTS={0x8, 0x2, 0xd}]}, @ETHTOOL_A_PROFILE_IRQ_MODERATION={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_IRQ_MODERATION_COMPS={0x8, 0x3, 0x101}, @ETHTOOL_A_IRQ_MODERATION_USEC={0x8, 0x1, 0xfffffffc}, @ETHTOOL_A_IRQ_MODERATION_PKTS={0x8, 0x2, 0x7fff}, @ETHTOOL_A_IRQ_MODERATION_USEC={0x8, 0x1, 0x18}, @ETHTOOL_A_IRQ_MODERATION_PKTS={0x8, 0x2, 0x4}, @ETHTOOL_A_IRQ_MODERATION_PKTS={0x8, 0x2, 0x8001}, @ETHTOOL_A_IRQ_MODERATION_COMPS={0x8, 0x3, 0x5}, @ETHTOOL_A_IRQ_MODERATION_COMPS={0x8, 0x3, 0x6}, @ETHTOOL_A_IRQ_MODERATION_USEC={0x8}, @ETHTOOL_A_IRQ_MODERATION_COMPS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_PROFILE_IRQ_MODERATION={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_IRQ_MODERATION_PKTS={0x8, 0x2, 0x6}, @ETHTOOL_A_IRQ_MODERATION_USEC={0x8, 0x1, 0xfffffffd}, @ETHTOOL_A_IRQ_MODERATION_PKTS={0x8, 0x2, 0x73}, @ETHTOOL_A_IRQ_MODERATION_USEC={0x8, 0x1, 0x9}]}, @ETHTOOL_A_PROFILE_IRQ_MODERATION={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_IRQ_MODERATION_USEC={0x8, 0x1, 0x10001}, @ETHTOOL_A_IRQ_MODERATION_COMPS={0x8, 0x3, 0x2}, @ETHTOOL_A_IRQ_MODERATION_COMPS={0x8, 0x3, 0x7}, @ETHTOOL_A_IRQ_MODERATION_USEC={0x8, 0x1, 0x7}, @ETHTOOL_A_IRQ_MODERATION_COMPS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_PROFILE_IRQ_MODERATION={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_IRQ_MODERATION_COMPS={0x8, 0x3, 0x40}, @ETHTOOL_A_IRQ_MODERATION_COMPS={0x8, 0x3, 0x1000}, @ETHTOOL_A_IRQ_MODERATION_COMPS={0x8, 0x3, 0x1}, @ETHTOOL_A_IRQ_MODERATION_USEC={0x8, 0x1, 0x9}, @ETHTOOL_A_IRQ_MODERATION_PKTS={0x8, 0x2, 0x8}, @ETHTOOL_A_IRQ_MODERATION_PKTS={0x8, 0x2, 0x3}, @ETHTOOL_A_IRQ_MODERATION_PKTS={0x8, 0x2, 0x200}]}, @ETHTOOL_A_PROFILE_IRQ_MODERATION={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_IRQ_MODERATION_USEC={0x8, 0x1, 0x1}, @ETHTOOL_A_IRQ_MODERATION_COMPS={0x8, 0x3, 0x2}, @ETHTOOL_A_IRQ_MODERATION_COMPS={0x8, 0x3, 0x40}, @ETHTOOL_A_IRQ_MODERATION_COMPS={0x8, 0x3, 0x400}, @ETHTOOL_A_IRQ_MODERATION_PKTS={0x8, 0x2, 0xfb}, @ETHTOOL_A_IRQ_MODERATION_PKTS={0x8, 0x2, 0x9}, @ETHTOOL_A_IRQ_MODERATION_COMPS={0x8, 0x3, 0x7}]}, @ETHTOOL_A_PROFILE_IRQ_MODERATION={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_IRQ_MODERATION_USEC={0x8, 0x1, 0x6}, @ETHTOOL_A_IRQ_MODERATION_COMPS={0x8, 0x3, 0xb9c}, @ETHTOOL_A_IRQ_MODERATION_USEC={0x8, 0x1, 0x5}, @ETHTOOL_A_IRQ_MODERATION_COMPS={0x8, 0x3, 0x1}, @ETHTOOL_A_IRQ_MODERATION_USEC={0x8, 0x1, 0x7}, @ETHTOOL_A_IRQ_MODERATION_USEC={0x8, 0x1, 0x67db}, @ETHTOOL_A_IRQ_MODERATION_PKTS={0x8, 0x2, 0x5}, @ETHTOOL_A_IRQ_MODERATION_PKTS={0x8, 0x2, 0x9}, @ETHTOOL_A_IRQ_MODERATION_USEC={0x8, 0x1, 0x20}]}]}, @ETHTOOL_A_COALESCE_TX_AGGR_MAX_FRAMES={0x8}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_LOW={0x8, 0xf, 0xb09}, @ETHTOOL_A_COALESCE_TX_AGGR_MAX_FRAMES={0x8, 0x1b, 0x8e}]}, 0x2ac}, 0x1, 0x0, 0x0, 0x8011}, 0x4000) close_range$auto(0x2, 0x8, 0x0) close_range$auto(0x2, 0x8, 0x0) 630.679184ms ago: executing program 4 (id=4431): mmap$auto(0x0, 0x400008, 0x5f, 0x9b72, 0x2, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) unshare$auto(0x40000080) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0x2003f2, 0x15) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) clock_gettime$auto(0x0, &(0x7f0000000040)={0x7fff, 0xc}) 588.931915ms ago: executing program 8 (id=4432): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket(0x1e, 0x805, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) socket(0x18, 0x80e, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_ETHTOOL_MSG_FEC_GET(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}, 0x1, 0x0, 0x0, 0x4010}, 0x800) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) read$auto(0xffffffffffffffff, 0x0, 0x3) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/nr12/tx_queue_len\x00', 0x80000, 0x0) read$auto(r2, 0x0, 0x20) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r3, &(0x7f0000000200)={0x0, 0x7}, 0x3) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x2b) write$auto(0x1, 0x0, 0x80000000) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x2, 0x0) madvise$auto(0x0, 0x2003f0, 0x15) mmap$auto(0x100000000000000, 0x2020009, 0x3, 0xeb9, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) rename$auto(0x0, 0x0) madvise$auto(0x0, 0xff7fffffffff0040, 0x7) getcpu$auto(0x0, &(0x7f00000000c0)=0x6, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) syz_genetlink_get_family_id$auto_macsec(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$auto_smc_gen_netlink(0x0, 0xffffffffffffffff) sendto$auto(0xffffffffffffffff, 0x0, 0x0, 0x2, &(0x7f0000000040)=@hci={0x1f, 0x4}, 0xffff) 0s ago: executing program 6 (id=4433): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x745100, 0x0) openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000200), 0x101802, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/midiC2D0\x00', 0x0, 0x0) openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, &(0x7f0000001140)='/dev/psaux\x00', 0x42000, 0x0) r2 = io_uring_setup$auto(0x8000, 0x0) openat$auto_vhci_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000d00), 0x0, 0x0) shmctl$auto_IPC_SET(0x8, 0x1, 0x0) sendmsg$auto_OVS_CT_LIMIT_CMD_GET(r1, &(0x7f0000000700)={&(0x7f0000000240), 0xc, &(0x7f00000006c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="00ff25bd7008dedbdf2503000000f6a4baeebf2e2c2195a436bee8b7b6f31cbeba2739f5b02255a7bb9c4c4fe3d21581d6b12bb02bc33fa5ca102ba373f40000e32d8349c2c1e08fe01ce8d058483d15ded07ceefb1ff29cc4689990704da296e7dd52b273562454177b884da0238f5942d289306fe456d5deb266b4fd70452522a378b0d86d96114493330d6e6eec286b3449960519870be1f7d46aae22a29ac7e339b73952fba6ecd20888c833103937ead3c48fadaa1a8110b06e66195a5785f236b07cf6b15e6d6a6d10b70c1d71f8206d84a5c9e1bba4fa97838412b3f4a4a4b3980dda48ba08db80d6b5acd2a4738cccd99d1f8d66f64a6a243842f314668e14c1b4109788adc6dc4d4333436bef7d2d5937677ca9c27accd70fc28fb01cce1d293902c881155f2a3a8b0cd2035be0"], 0x14}, 0x1, 0x0, 0x0, 0x24008140}, 0x2404c044) select$auto(0xe, 0x0, 0x0, &(0x7f0000000580)={[0x1ff, 0x8000, 0xd, 0x1, 0x948d, 0x3, 0x10015f4da0a, 0xd, 0x7, 0x64c1, 0x8000001f, 0x400000000, 0x6d3e, 0xc, 0x4, 0x2]}, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xfc\x04\x00\x00)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) socket(0x2b, 0x1, 0x0) ioctl$auto(0x3, 0x8905, 0x38) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) fallocate$auto(r2, 0x80, 0xf, 0x6ad5) madvise$auto(0x0, 0x200007, 0x19) msgctl$auto_MSG_STAT_ANY(0x4, 0xd, &(0x7f00000002c0)={{0x100, 0x0, 0xffffffffffffffff, 0x5, 0xd, 0x10, 0x6}, &(0x7f00000001c0)=0x6, &(0x7f0000000280)=0x9, 0x3, 0x3c3d, 0x6, 0xd, 0x0, 0xfffd, 0x1, 0x0, @inferred, @inferred=0xffffffffffffffff}) msgctl$auto_MSG_STAT(0xff, 0xb, &(0x7f00000003c0)={{0x6, 0xee00, 0xee01, 0x4, 0xffff, 0x235, 0x986a}, &(0x7f0000000340)=0x5, &(0x7f0000000380)=0x9, 0x8001, 0x80000001, 0xf98b, 0x2340, 0x8, 0x4, 0x7fff, 0x650, @inferred=0xffffffffffffffff, @raw=0x25ab0b60}) ioctl$auto_XFS_IOC_FREESP64(r1, 0x40305825, &(0x7f0000000440)={0x7, 0x8, 0x0, 0xfffffffffffffd0f, 0x0, 0xffffffffffffffff}) r6 = getpid() shmctl$auto_SHM_STAT_ANY(0x6, 0xf, &(0x7f0000000740)={{0xe, r3, r4, 0x81, 0x8ce, 0x1, 0x2}, 0xfffffff8, 0x3f, 0xfffffffffffffbff, 0x5, @inferred=r5, @inferred=r6, 0x9, 0x0, &(0x7f0000000480)="a6bb11afd5cddf8ec727618cecb3e5ae00de54f5a48b9b05a23fc6e5ba4afccee020793fc153460b5b35a85a11ccac6c719f64a2c65227a003d470ddaa1d6e488d518d3924eebbbf0079c9ad58a5c8ebd785aca18515fec7f74638cf74231b672ce6b0d0d644b060f31a36d801631c968fcf58aa63eea34862a15e68a7b1179a38fff9e182cd21e0bf04f926a8ae04e2056c87f92997f991caa9f59d3a49188171f74a6f27645ec6322ec98baf12448a3b0e621670", &(0x7f0000000600)="8266120ddd63671e969c1e8490a4d133cef6aa248d4d7eb3436f3eb18c8fb89e0417c27e4128331cbd44bfc21255a7e7ec3c8d7f72b67e2c357edae1226fd5a8b8a9f6fa2869a7e8de0c74d0b61b848ec26cf649ea734375e0621626945256caa6e0f0cbc383"}) madvise$auto(0x0, 0xffffffffffff0004, 0x14) pread64$auto(0xffffffffffffffff, &(0x7f0000000080)='\xd5u+~\xa7x\xe0VQ\x1a6\xcf\xce\xfa\xfbN\x19\b\xf64\r\x122i\xd6\x0e\xfa\x96\x9aV:\xe1G\x14\xb2\xd4N\x0e#jX:\xd0\xd0\xa9\xda\xaf\x98\x94G\xa8\xb4\xa7uPc\x1ang\xdb\xb4\xa7\xad\x1b\xcbonh\xd8\x99\x03\x10\xb0\xa5\xfey\xd5F,70\xecG\x8a\fz\x95\x7f\xb0Y{\xdd\xa1\xa3E\x03\xd4\xc67U\x93\n\xfc\xa4\x0e_\xf8\x94\xc3a\x00\xe6\xea4\xa2\x7ft\xeb\x8b$\x16\x0e\xe8j\xcaI\xe0c\x05\x12(\v\xef\xc5Z\xfb\xed\xa3\x01\x001\xa5\x18%\xae/\x1b6\xaa\xf5ysD\xa6\xee\xbf\xc0v\"\x93\x96\"\xcak.\x0e_\xb3\xf7\xac\x9e\xbd/w\xdf\xfc\xe24z\x0f\x8f\b\xbe\xda\xfb\xd0Jj\x97\xfa{\x9d\xfd\xfb\x14\x1f\b#\xb9\x01\xf7\xf5\x1c1\xfbNX\xd9\xf0\x97@\xff(\x99\x13M\xadM\b\xa7\xf3u\xa8ak\xff\x7f\x00\x00\x12\x85\x85\x14\b\x9c\x15\xc10\xb3\xd5.\x13\xc6\xb6\xbak:\xbf\x8f\xcd\x7f\a\xb8\x00'/272, 0x202, 0x7) kernel console output (not intermixed with test programs): 00000000000110 [ 981.430863][T23403] RAX: ffffffffffffffda RBX: 00007f9d5b815fa0 RCX: 00007f9d5b59c819 [ 981.430886][T23403] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 981.430908][T23403] RBP: 00007f9d5b632c91 R08: 0000000000000000 R09: 0000000000000000 [ 981.430929][T23403] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 981.430951][T23403] R13: 00007f9d5b816038 R14: 00007f9d5b815fa0 R15: 00007ffc1327ed78 [ 981.430997][T23403] [ 986.790491][T23480] openvswitch: netlink: Flow key attribute not present in set flow. [ 988.626699][T23529] FAULT_INJECTION: forcing a failure. [ 988.626699][T23529] name failslab, interval 1, probability 0, space 0, times 0 [ 988.649965][T23529] CPU: 0 UID: 0 PID: 23529 Comm: syz.7.3781 Tainted: G L syzkaller #0 PREEMPT(full) [ 988.650004][T23529] Tainted: [L]=SOFTLOCKUP [ 988.650013][T23529] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 988.650027][T23529] Call Trace: [ 988.650035][T23529] [ 988.650044][T23529] dump_stack_lvl+0x100/0x190 [ 988.650090][T23529] should_fail_ex.cold+0x5/0xa [ 988.650118][T23529] ? tomoyo_realpath_from_path+0xb6/0x690 [ 988.650154][T23529] should_failslab+0xc2/0x120 [ 988.650211][T23529] __kmalloc_noprof+0xe0/0x850 [ 988.650272][T23529] tomoyo_realpath_from_path+0xb6/0x690 [ 988.650337][T23529] tomoyo_path_number_perm+0x23c/0x580 [ 988.650367][T23529] ? tomoyo_path_number_perm+0x22e/0x580 [ 988.650399][T23529] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 988.650429][T23529] ? futex_wait+0x125/0x380 [ 988.650498][T23529] ? find_held_lock+0x2b/0x80 [ 988.650521][T23529] ? __fget_files+0x215/0x3d0 [ 988.650544][T23529] ? hook_file_ioctl_common+0x146/0x410 [ 988.650586][T23529] ? __fget_files+0x21f/0x3d0 [ 988.650616][T23529] security_file_ioctl+0xd3/0x230 [ 988.650647][T23529] __x64_sys_ioctl+0xb7/0x210 [ 988.650686][T23529] do_syscall_64+0x106/0xf80 [ 988.650711][T23529] ? clear_bhb_loop+0x40/0x90 [ 988.650741][T23529] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 988.650765][T23529] RIP: 0033:0x7fb792b9c819 [ 988.650786][T23529] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 988.650810][T23529] RSP: 002b:00007fb793a08028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 988.650833][T23529] RAX: ffffffffffffffda RBX: 00007fb792e16180 RCX: 00007fb792b9c819 [ 988.650849][T23529] RDX: 0000200000000100 RSI: 000000004030580b RDI: 0000000000000047 [ 988.650865][T23529] RBP: 00007fb792c32c91 R08: 0000000000000000 R09: 0000000000000000 [ 988.650879][T23529] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 988.650894][T23529] R13: 00007fb792e16218 R14: 00007fb792e16180 R15: 00007fffe7cc9e78 [ 988.650924][T23529] [ 988.650958][T23529] ERROR: Out of memory at tomoyo_realpath_from_path. [ 989.710205][T23546] input: jJǸ-¶š9ã%vø“û¨lÐQ  J86Ö‘ as /devices/virtual/input/input30 [ 991.392739][T23580] mkiss: ax0: crc mode is auto. [ 991.471812][T23574] random: crng reseeded on system resumption [ 993.243369][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.250023][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.645005][T23604] FAULT_INJECTION: forcing a failure. [ 993.645005][T23604] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 993.696608][T23604] CPU: 1 UID: 0 PID: 23604 Comm: syz.4.3794 Tainted: G L syzkaller #0 PREEMPT(full) [ 993.696660][T23604] Tainted: [L]=SOFTLOCKUP [ 993.696673][T23604] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 993.696693][T23604] Call Trace: [ 993.696704][T23604] [ 993.696717][T23604] dump_stack_lvl+0x100/0x190 [ 993.696778][T23604] should_fail_ex.cold+0x5/0xa [ 993.696820][T23604] _copy_from_iter+0x1f4/0x1690 [ 993.696871][T23604] ? policy_nodemask+0xed/0x4f0 [ 993.696907][T23604] ? __pfx__copy_from_iter+0x10/0x10 [ 993.696954][T23604] ? alloc_pages_mpol+0x25a/0x550 [ 993.696995][T23604] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 993.697043][T23604] copy_page_from_iter+0xde/0x180 [ 993.697097][T23604] anon_pipe_write+0xae4/0x1d40 [ 993.697149][T23604] ? __pfx_anon_pipe_write+0x10/0x10 [ 993.697192][T23604] ? __pfx_autoremove_wake_function+0x10/0x10 [ 993.697249][T23604] ? bpf_lsm_file_permission+0x9/0x10 [ 993.697285][T23604] ? security_file_permission+0x76/0x210 [ 993.697337][T23604] ? rw_verify_area+0xce/0x6d0 [ 993.697396][T23604] vfs_write+0x6ac/0x1070 [ 993.697434][T23604] ? __pfx_anon_pipe_write+0x10/0x10 [ 993.697477][T23604] ? __pfx_vfs_write+0x10/0x10 [ 993.697511][T23604] ? find_held_lock+0x2b/0x80 [ 993.697574][T23604] ksys_write+0x1f8/0x250 [ 993.697610][T23604] ? __pfx_ksys_write+0x10/0x10 [ 993.697659][T23604] do_syscall_64+0x106/0xf80 [ 993.697698][T23604] ? clear_bhb_loop+0x40/0x90 [ 993.697742][T23604] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 993.697781][T23604] RIP: 0033:0x7f83cd39c819 [ 993.697810][T23604] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 993.697846][T23604] RSP: 002b:00007f83ce279028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 993.697878][T23604] RAX: ffffffffffffffda RBX: 00007f83cd616180 RCX: 00007f83cd39c819 [ 993.697902][T23604] RDX: 0000000080000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 993.697924][T23604] RBP: 00007f83cd432c91 R08: 0000000000000000 R09: 0000000000000000 [ 993.697947][T23604] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 993.697969][T23604] R13: 00007f83cd616218 R14: 00007f83cd616180 R15: 00007fff86d4b8d8 [ 993.698016][T23604] [ 995.544452][T23663] delete_channel: no stack [ 995.750917][T23665] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3808'. [ 996.577623][T23683] FAULT_INJECTION: forcing a failure. [ 996.577623][T23683] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 996.629092][T23683] CPU: 1 UID: 0 PID: 23683 Comm: syz.4.3811 Tainted: G L syzkaller #0 PREEMPT(full) [ 996.629143][T23683] Tainted: [L]=SOFTLOCKUP [ 996.629155][T23683] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 996.629174][T23683] Call Trace: [ 996.629186][T23683] [ 996.629199][T23683] dump_stack_lvl+0x100/0x190 [ 996.629252][T23683] should_fail_ex.cold+0x5/0xa [ 996.629283][T23683] ? prepare_alloc_pages+0x16d/0x5f0 [ 996.629325][T23683] should_fail_alloc_page+0xeb/0x140 [ 996.629363][T23683] prepare_alloc_pages+0x1f0/0x5f0 [ 996.629399][T23683] ? bpf_ksym_find+0x124/0x1c0 [ 996.629442][T23683] __alloc_frozen_pages_noprof+0x19a/0x2ba0 [ 996.629493][T23683] ? __kernel_text_address+0xd/0x30 [ 996.629539][T23683] ? unwind_get_return_address+0x59/0xa0 [ 996.629574][T23683] ? arch_stack_walk+0xa6/0xf0 [ 996.629617][T23683] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 996.629665][T23683] ? stack_trace_save+0x8e/0xc0 [ 996.629696][T23683] ? __pfx_stack_trace_save+0x10/0x10 [ 996.629728][T23683] ? stack_depot_save_flags+0x27/0x9d0 [ 996.629773][T23683] ? mas_store_prealloc+0x893/0xfb0 [ 996.629818][T23683] ? kasan_save_stack+0x30/0x50 [ 996.629845][T23683] ? kasan_save_track+0x14/0x30 [ 996.629871][T23683] ? __kasan_slab_alloc+0x89/0x90 [ 996.629900][T23683] ? kmem_cache_alloc_noprof+0x241/0x6e0 [ 996.629947][T23683] ? __pmd_alloc+0xbf/0x950 [ 996.629983][T23683] ? __handle_mm_fault+0xa9e/0x2b60 [ 996.630031][T23683] ? handle_mm_fault+0x36d/0xa20 [ 996.630071][T23683] ? __get_user_pages+0xf9c/0x34d0 [ 996.630106][T23683] ? populate_vma_page_range+0x267/0x3f0 [ 996.630144][T23683] ? __mm_populate+0x107/0x3a0 [ 996.630180][T23683] ? vm_mmap_pgoff+0x37f/0x470 [ 996.630214][T23683] ? ksys_mmap_pgoff+0xe1/0x650 [ 996.630245][T23683] ? __x64_sys_mmap+0x125/0x190 [ 996.630288][T23683] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 996.630322][T23683] ? policy_nodemask+0xed/0x4f0 [ 996.630358][T23683] alloc_pages_mpol+0x1fb/0x550 [ 996.630394][T23683] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 996.630438][T23683] alloc_pages_noprof+0x136/0x390 [ 996.630479][T23683] pte_alloc_one+0x1c/0x3d0 [ 996.630515][T23683] __pte_alloc+0x6d/0x3e0 [ 996.630547][T23683] ? __pfx___pte_alloc+0x10/0x10 [ 996.630581][T23683] ? do_raw_spin_lock+0x128/0x260 [ 996.630626][T23683] ? find_held_lock+0x2b/0x80 [ 996.630657][T23683] do_anonymous_page+0x13cc/0x1fb0 [ 996.630702][T23683] ? do_raw_spin_unlock+0x145/0x1e0 [ 996.630748][T23683] ? _raw_spin_unlock+0x28/0x50 [ 996.630795][T23683] ? __pmd_alloc+0x3fb/0x950 [ 996.630834][T23683] __handle_mm_fault+0x1d48/0x2b60 [ 996.630883][T23683] ? mt_find+0x45e/0x8e0 [ 996.630918][T23683] ? __pfx___handle_mm_fault+0x10/0x10 [ 996.630959][T23683] ? __pfx_mt_find+0x10/0x10 [ 996.631029][T23683] handle_mm_fault+0x36d/0xa20 [ 996.631080][T23683] __get_user_pages+0xf9c/0x34d0 [ 996.631130][T23683] ? __pfx___get_user_pages+0x10/0x10 [ 996.631178][T23683] populate_vma_page_range+0x267/0x3f0 [ 996.631218][T23683] ? __pfx_populate_vma_page_range+0x10/0x10 [ 996.631257][T23683] ? __pfx_find_vma_intersection+0x10/0x10 [ 996.631293][T23683] ? do_mmap+0x93f/0x12f0 [ 996.631332][T23683] __mm_populate+0x107/0x3a0 [ 996.631371][T23683] ? __pfx___mm_populate+0x10/0x10 [ 996.631411][T23683] ? up_write+0x290/0x4f0 [ 996.631458][T23683] vm_mmap_pgoff+0x37f/0x470 [ 996.631499][T23683] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 996.631537][T23683] ? do_futex+0x192/0x350 [ 996.631578][T23683] ? __pfx_do_futex+0x10/0x10 [ 996.631624][T23683] ksys_mmap_pgoff+0xe1/0x650 [ 996.631659][T23683] ? __x64_sys_futex+0x34f/0x4d0 [ 996.631698][T23683] ? __x64_sys_futex+0x358/0x4d0 [ 996.631739][T23683] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 996.631776][T23683] ? xfd_validate_state+0x129/0x190 [ 996.631827][T23683] __x64_sys_mmap+0x125/0x190 [ 996.631876][T23683] do_syscall_64+0x106/0xf80 [ 996.631909][T23683] ? clear_bhb_loop+0x40/0x90 [ 996.631946][T23683] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 996.631977][T23683] RIP: 0033:0x7f83cd39c819 [ 996.632014][T23683] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 996.632047][T23683] RSP: 002b:00007f83ce29a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 996.632077][T23683] RAX: ffffffffffffffda RBX: 00007f83cd616090 RCX: 00007f83cd39c819 [ 996.632098][T23683] RDX: 00000000000000df RSI: 0000000000400008 RDI: 0000000000000000 [ 996.632117][T23683] RBP: 00007f83cd432c91 R08: 0000000000000002 R09: 0000000000008000 [ 996.632136][T23683] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 996.632154][T23683] R13: 00007f83cd616128 R14: 00007f83cd616090 R15: 00007fff86d4b8d8 [ 996.632194][T23683] [ 999.111672][T23715] FAULT_INJECTION: forcing a failure. [ 999.111672][T23715] name failslab, interval 1, probability 0, space 0, times 0 [ 999.135522][T23715] CPU: 1 UID: 0 PID: 23715 Comm: syz.4.3819 Tainted: G L syzkaller #0 PREEMPT(full) [ 999.135572][T23715] Tainted: [L]=SOFTLOCKUP [ 999.135583][T23715] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 999.135603][T23715] Call Trace: [ 999.135614][T23715] [ 999.135627][T23715] dump_stack_lvl+0x100/0x190 [ 999.135683][T23715] should_fail_ex.cold+0x5/0xa [ 999.135724][T23715] should_failslab+0xc2/0x120 [ 999.135770][T23715] __kmalloc_cache_noprof+0x7a/0x6f0 [ 999.135817][T23715] ? copy_ipcs+0x10d/0x7e0 [ 999.135873][T23715] copy_ipcs+0x10d/0x7e0 [ 999.135926][T23715] create_new_namespaces+0x20a/0xac0 [ 999.135964][T23715] ? security_capable+0x80/0x260 [ 999.136002][T23715] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 999.136044][T23715] ksys_unshare+0x473/0xad0 [ 999.136091][T23715] ? __pfx_ksys_unshare+0x10/0x10 [ 999.136150][T23715] __x64_sys_unshare+0x31/0x40 [ 999.136194][T23715] do_syscall_64+0x106/0xf80 [ 999.136230][T23715] ? clear_bhb_loop+0x40/0x90 [ 999.136272][T23715] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 999.136307][T23715] RIP: 0033:0x7f83cd39c819 [ 999.136335][T23715] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 999.136368][T23715] RSP: 002b:00007f83ce2bb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 999.136398][T23715] RAX: ffffffffffffffda RBX: 00007f83cd615fa0 RCX: 00007f83cd39c819 [ 999.136420][T23715] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000006c000000 [ 999.136440][T23715] RBP: 00007f83cd432c91 R08: 0000000000000000 R09: 0000000000000000 [ 999.136461][T23715] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 999.136482][T23715] R13: 00007f83cd616038 R14: 00007f83cd615fa0 R15: 00007fff86d4b8d8 [ 999.136526][T23715] [ 1000.241049][T23724] netlink: 504 bytes leftover after parsing attributes in process `syz.4.3822'. [ 1001.431516][T23730] FAULT_INJECTION: forcing a failure. [ 1001.431516][T23730] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1001.448347][T23730] CPU: 0 UID: 0 PID: 23730 Comm: syz.4.3824 Tainted: G L syzkaller #0 PREEMPT(full) [ 1001.448402][T23730] Tainted: [L]=SOFTLOCKUP [ 1001.448415][T23730] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1001.448435][T23730] Call Trace: [ 1001.448448][T23730] [ 1001.448460][T23730] dump_stack_lvl+0x100/0x190 [ 1001.448514][T23730] should_fail_ex.cold+0x5/0xa [ 1001.448545][T23730] ? prepare_alloc_pages+0x16d/0x5f0 [ 1001.448584][T23730] should_fail_alloc_page+0xeb/0x140 [ 1001.448622][T23730] prepare_alloc_pages+0x1f0/0x5f0 [ 1001.448664][T23730] __alloc_frozen_pages_noprof+0x19a/0x2ba0 [ 1001.448729][T23730] ? __lock_acquire+0x4a5/0x2630 [ 1001.448771][T23730] ? finish_task_switch.isra.0+0x2c6/0xb80 [ 1001.448807][T23730] ? rcu_is_watching+0x12/0xc0 [ 1001.448861][T23730] ? trace_sched_exit_tp+0x13a/0x180 [ 1001.448899][T23730] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1001.448954][T23730] ? find_held_lock+0x2b/0x80 [ 1001.448982][T23730] ? __might_fault+0xc5/0x140 [ 1001.449027][T23730] ? __might_fault+0xc5/0x140 [ 1001.449082][T23730] ? _copy_from_iter+0x270/0x1690 [ 1001.449122][T23730] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1001.449157][T23730] ? policy_nodemask+0xed/0x4f0 [ 1001.449193][T23730] alloc_pages_mpol+0x1fb/0x550 [ 1001.449228][T23730] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1001.449271][T23730] alloc_pages_noprof+0x136/0x390 [ 1001.449307][T23730] anon_pipe_write+0xabf/0x1d40 [ 1001.449351][T23730] ? __pfx_anon_pipe_write+0x10/0x10 [ 1001.449385][T23730] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1001.449424][T23730] ? bpf_lsm_file_permission+0x9/0x10 [ 1001.449453][T23730] ? security_file_permission+0x76/0x210 [ 1001.449498][T23730] ? rw_verify_area+0xce/0x6d0 [ 1001.449546][T23730] vfs_write+0x6ac/0x1070 [ 1001.449576][T23730] ? __pfx_anon_pipe_write+0x10/0x10 [ 1001.449611][T23730] ? __pfx_vfs_write+0x10/0x10 [ 1001.449637][T23730] ? find_held_lock+0x2b/0x80 [ 1001.449687][T23730] ksys_write+0x1f8/0x250 [ 1001.449716][T23730] ? __pfx_ksys_write+0x10/0x10 [ 1001.449761][T23730] do_syscall_64+0x106/0xf80 [ 1001.449797][T23730] ? clear_bhb_loop+0x40/0x90 [ 1001.449839][T23730] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1001.449876][T23730] RIP: 0033:0x7f83cd39c819 [ 1001.449904][T23730] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1001.449937][T23730] RSP: 002b:00007f83ce2bb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1001.449972][T23730] RAX: ffffffffffffffda RBX: 00007f83cd615fa0 RCX: 00007f83cd39c819 [ 1001.449997][T23730] RDX: 0000000080000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 1001.450018][T23730] RBP: 00007f83cd432c91 R08: 0000000000000000 R09: 0000000000000000 [ 1001.450040][T23730] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1001.450062][T23730] R13: 00007f83cd616038 R14: 00007f83cd615fa0 R15: 00007fff86d4b8d8 [ 1001.450108][T23730] [ 1002.217037][T23749] FAULT_INJECTION: forcing a failure. [ 1002.217037][T23749] name failslab, interval 1, probability 0, space 0, times 0 [ 1002.230287][T23749] CPU: 0 UID: 0 PID: 23749 Comm: syz.3.3827 Tainted: G L syzkaller #0 PREEMPT(full) [ 1002.230362][T23749] Tainted: [L]=SOFTLOCKUP [ 1002.230371][T23749] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1002.230385][T23749] Call Trace: [ 1002.230394][T23749] [ 1002.230403][T23749] dump_stack_lvl+0x100/0x190 [ 1002.230445][T23749] should_fail_ex.cold+0x5/0xa [ 1002.230479][T23749] should_failslab+0xc2/0x120 [ 1002.230507][T23749] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1002.230546][T23749] ? anon_vma_fork+0x19a/0x6b0 [ 1002.230589][T23749] anon_vma_fork+0x19a/0x6b0 [ 1002.230628][T23749] dup_mmap+0x141f/0x2180 [ 1002.230669][T23749] ? __pfx_dup_mmap+0x10/0x10 [ 1002.230698][T23749] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1002.230745][T23749] ? __lock_acquire+0x4a5/0x2630 [ 1002.230779][T23749] ? find_held_lock+0x2b/0x80 [ 1002.230801][T23749] ? __percpu_counter_init_many+0x2bc/0x3b0 [ 1002.230855][T23749] copy_process+0x7523/0x7a40 [ 1002.230899][T23749] ? __pfx_copy_process+0x10/0x10 [ 1002.230928][T23749] ? find_held_lock+0x2b/0x80 [ 1002.230963][T23749] kernel_clone+0xfc/0x9a0 [ 1002.230990][T23749] ? __pfx_futex_wait+0x10/0x10 [ 1002.231030][T23749] ? __pfx_kernel_clone+0x10/0x10 [ 1002.231075][T23749] __do_sys_clone+0xd9/0x120 [ 1002.231104][T23749] ? __pfx___do_sys_clone+0x10/0x10 [ 1002.231158][T23749] do_syscall_64+0x106/0xf80 [ 1002.231183][T23749] ? clear_bhb_loop+0x40/0x90 [ 1002.231212][T23749] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1002.231237][T23749] RIP: 0033:0x7f9d5b59c819 [ 1002.231257][T23749] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1002.231280][T23749] RSP: 002b:00007f9d5c3d6fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1002.231304][T23749] RAX: ffffffffffffffda RBX: 00007f9d5b815fa0 RCX: 00007f9d5b59c819 [ 1002.231327][T23749] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000002360411 [ 1002.231341][T23749] RBP: 00007f9d5b632c91 R08: 0000000000000000 R09: 0000000000000000 [ 1002.231356][T23749] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1002.231371][T23749] R13: 00007f9d5b816038 R14: 00007f9d5b815fa0 R15: 00007ffc1327ed78 [ 1002.231402][T23749] [ 1002.705204][T23750] openvswitch: HfR: Dropping previously announced user features [ 1002.786696][T23761] openvswitch: HfR: Dropping previously announced user features [ 1002.795741][T23750] usb usb13: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1002.855282][T23756] sd 0:0:1:0: PR command failed: 1026 [ 1002.875009][T23756] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 1002.967782][T23756] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 1004.077295][T23792] FAULT_INJECTION: forcing a failure. [ 1004.077295][T23792] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1004.095353][T23792] CPU: 1 UID: 0 PID: 23792 Comm: syz.4.3834 Tainted: G L syzkaller #0 PREEMPT(full) [ 1004.095406][T23792] Tainted: [L]=SOFTLOCKUP [ 1004.095419][T23792] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1004.095439][T23792] Call Trace: [ 1004.095451][T23792] [ 1004.095463][T23792] dump_stack_lvl+0x100/0x190 [ 1004.095520][T23792] should_fail_ex.cold+0x5/0xa [ 1004.095560][T23792] get_futex_key+0x107c/0x1620 [ 1004.095608][T23792] ? __pfx_get_futex_key+0x10/0x10 [ 1004.095647][T23792] ? lock_acquire+0x1cf/0x380 [ 1004.095705][T23792] futex_wake+0xea/0x530 [ 1004.095761][T23792] ? __pfx_futex_wake+0x10/0x10 [ 1004.095813][T23792] ? exit_mm_release+0x19/0x30 [ 1004.095867][T23792] do_futex+0x32b/0x350 [ 1004.095916][T23792] ? __pfx_do_futex+0x10/0x10 [ 1004.095957][T23792] ? __might_fault+0xc5/0x140 [ 1004.096020][T23792] mm_release+0x24a/0x2f0 [ 1004.096057][T23792] do_exit+0x704/0x2b60 [ 1004.096109][T23792] ? __pfx_do_exit+0x10/0x10 [ 1004.096155][T23792] ? do_raw_spin_lock+0x128/0x260 [ 1004.096212][T23792] ? find_held_lock+0x2b/0x80 [ 1004.096245][T23792] ? get_signal+0x7e0/0x21e0 [ 1004.096285][T23792] do_group_exit+0xd5/0x2a0 [ 1004.096336][T23792] get_signal+0x1ec7/0x21e0 [ 1004.096388][T23792] ? __pfx_get_signal+0x10/0x10 [ 1004.096427][T23792] ? do_futex+0x192/0x350 [ 1004.096478][T23792] arch_do_signal_or_restart+0x91/0x770 [ 1004.096523][T23792] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1004.096579][T23792] ? __pfx___x64_sys_futex+0x10/0x10 [ 1004.096635][T23792] exit_to_user_mode_loop+0x86/0x4a0 [ 1004.096684][T23792] do_syscall_64+0x668/0xf80 [ 1004.096719][T23792] ? clear_bhb_loop+0x40/0x90 [ 1004.096761][T23792] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1004.096795][T23792] RIP: 0033:0x7f83cd39c819 [ 1004.096822][T23792] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1004.096855][T23792] RSP: 002b:00007f83ce2bb0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1004.096887][T23792] RAX: fffffffffffffe00 RBX: 00007f83cd615fa8 RCX: 00007f83cd39c819 [ 1004.096909][T23792] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f83cd615fa8 [ 1004.096930][T23792] RBP: 00007f83cd615fa0 R08: 0000000000000000 R09: 0000000000000000 [ 1004.096950][T23792] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1004.096970][T23792] R13: 00007f83cd616038 R14: 00007fff86d4b7f0 R15: 00007fff86d4b8d8 [ 1004.097013][T23792] [ 1004.503238][T23796] netlink: 504 bytes leftover after parsing attributes in process `syz.7.3833'. [ 1005.421220][T23809] netlink: 346 bytes leftover after parsing attributes in process `syz.7.3837'. [ 1006.922448][T23834] netlink: 330 bytes leftover after parsing attributes in process `syz.6.3843'. [ 1007.420989][T23849] FAULT_INJECTION: forcing a failure. [ 1007.420989][T23849] name failslab, interval 1, probability 0, space 0, times 0 [ 1007.421079][T23849] CPU: 1 UID: 0 PID: 23849 Comm: syz.7.3846 Tainted: G L syzkaller #0 PREEMPT(full) [ 1007.421128][T23849] Tainted: [L]=SOFTLOCKUP [ 1007.421141][T23849] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1007.421161][T23849] Call Trace: [ 1007.421172][T23849] [ 1007.421186][T23849] dump_stack_lvl+0x100/0x190 [ 1007.421246][T23849] should_fail_ex.cold+0x5/0xa [ 1007.421290][T23849] should_failslab+0xc2/0x120 [ 1007.421331][T23849] __kmalloc_cache_noprof+0x7a/0x6f0 [ 1007.421381][T23849] ? device_create_groups_vargs+0x8a/0x270 [ 1007.421434][T23849] ? __lock_acquire+0x4a5/0x2630 [ 1007.421487][T23849] device_create_groups_vargs+0x8a/0x270 [ 1007.421544][T23849] device_create+0xed/0x130 [ 1007.421594][T23849] ? __pfx_device_create+0x10/0x10 [ 1007.421645][T23849] ? is_console_locked+0x9/0x20 [ 1007.421687][T23849] ? con_is_visible+0x65/0x150 [ 1007.421734][T23849] ? csi_J+0x57e/0xad0 [ 1007.421792][T23849] vcs_make_sysfs+0x32/0x80 [ 1007.421843][T23849] vc_allocate+0x539/0x880 [ 1007.421899][T23849] ? __pfx_vc_allocate+0x10/0x10 [ 1007.421967][T23849] con_install+0xa1/0x620 [ 1007.422038][T23849] ? __pfx_con_install+0x10/0x10 [ 1007.422103][T23849] ? __pfx_con_install+0x10/0x10 [ 1007.422160][T23849] tty_init_dev.part.0+0x9e/0x470 [ 1007.422205][T23849] tty_open+0xa63/0xfa0 [ 1007.422248][T23849] ? __pfx_tty_open+0x10/0x10 [ 1007.422283][T23849] ? chrdev_open+0x589/0x6a0 [ 1007.422321][T23849] ? chrdev_open+0x589/0x6a0 [ 1007.422368][T23849] ? __pfx_tty_open+0x10/0x10 [ 1007.422403][T23849] chrdev_open+0x234/0x6a0 [ 1007.422445][T23849] ? __pfx_chrdev_open+0x10/0x10 [ 1007.422488][T23849] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 1007.422539][T23849] do_dentry_open+0x6d8/0x1660 [ 1007.422578][T23849] ? __pfx_chrdev_open+0x10/0x10 [ 1007.422628][T23849] vfs_open+0x82/0x3f0 [ 1007.422682][T23849] path_openat+0x208c/0x31a0 [ 1007.422738][T23849] ? __pfx_path_openat+0x10/0x10 [ 1007.422797][T23849] do_file_open+0x20e/0x430 [ 1007.422840][T23849] ? __pfx_do_file_open+0x10/0x10 [ 1007.422913][T23849] ? alloc_fd+0x476/0x790 [ 1007.422956][T23849] ? do_getname+0x191/0x390 [ 1007.423015][T23849] do_sys_openat2+0x10d/0x1e0 [ 1007.423066][T23849] ? __pfx_do_sys_openat2+0x10/0x10 [ 1007.423122][T23849] ? __fget_files+0x21f/0x3d0 [ 1007.423170][T23849] __x64_sys_openat+0x12d/0x210 [ 1007.423222][T23849] ? __pfx___x64_sys_openat+0x10/0x10 [ 1007.423291][T23849] do_syscall_64+0x106/0xf80 [ 1007.423329][T23849] ? clear_bhb_loop+0x40/0x90 [ 1007.423372][T23849] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1007.423409][T23849] RIP: 0033:0x7fb792b9c819 [ 1007.423436][T23849] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1007.423469][T23849] RSP: 002b:00007fb793a4a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1007.423503][T23849] RAX: ffffffffffffffda RBX: 00007fb792e15fa0 RCX: 00007fb792b9c819 [ 1007.423528][T23849] RDX: 0000000000000000 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 1007.423551][T23849] RBP: 00007fb792c32c91 R08: 0000000000000000 R09: 0000000000000000 [ 1007.423574][T23849] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1007.423597][T23849] R13: 00007fb792e16038 R14: 00007fb792e15fa0 R15: 00007fffe7cc9e78 [ 1007.423645][T23849] [ 1007.738946][T23848] usb usb13: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1010.197087][T23891] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3854'. [ 1011.877617][T23925] netlink: 504 bytes leftover after parsing attributes in process `syz.7.3861'. [ 1012.532906][T23936] bonding: no command found in bonding_masters - use +ifname or -ifname [ 1012.578165][T23936] FAULT_INJECTION: forcing a failure. [ 1012.578165][T23936] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1012.612423][T23936] CPU: 1 UID: 0 PID: 23936 Comm: syz.7.3863 Tainted: G L syzkaller #0 PREEMPT(full) [ 1012.612461][T23936] Tainted: [L]=SOFTLOCKUP [ 1012.612470][T23936] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1012.612486][T23936] Call Trace: [ 1012.612495][T23936] [ 1012.612504][T23936] dump_stack_lvl+0x100/0x190 [ 1012.612547][T23936] should_fail_ex.cold+0x5/0xa [ 1012.612573][T23936] ? prepare_alloc_pages+0x16d/0x5f0 [ 1012.612606][T23936] should_fail_alloc_page+0xeb/0x140 [ 1012.612637][T23936] prepare_alloc_pages+0x1f0/0x5f0 [ 1012.612672][T23936] __alloc_frozen_pages_noprof+0x19a/0x2ba0 [ 1012.612720][T23936] ? __pfx_mt_destroy_walk+0x10/0x10 [ 1012.612752][T23936] ? vms_complete_munmap_vmas+0x7ac/0xdd0 [ 1012.612793][T23936] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1012.612847][T23936] ? __pfx_vms_complete_munmap_vmas+0x10/0x10 [ 1012.612885][T23936] ? vma_wants_writenotify+0x10b/0x390 [ 1012.612941][T23936] ? __pfx_vma_wants_writenotify+0x10/0x10 [ 1012.612987][T23936] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1012.613016][T23936] ? policy_nodemask+0xed/0x4f0 [ 1012.613046][T23936] alloc_pages_mpol+0x1fb/0x550 [ 1012.613075][T23936] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1012.613112][T23936] folio_alloc_mpol_noprof+0x36/0x340 [ 1012.613147][T23936] vma_alloc_folio_noprof+0xed/0x1d0 [ 1012.613181][T23936] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 1012.613223][T23936] do_anonymous_page+0xb3a/0x1fb0 [ 1012.613269][T23936] __handle_mm_fault+0x1d48/0x2b60 [ 1012.613314][T23936] ? __pfx___handle_mm_fault+0x10/0x10 [ 1012.613352][T23936] ? pte_offset_map_lock+0x174/0x320 [ 1012.613380][T23936] ? find_held_lock+0x2b/0x80 [ 1012.613414][T23936] ? follow_page_pte+0x5b3/0x1400 [ 1012.613450][T23936] handle_mm_fault+0x36d/0xa20 [ 1012.613492][T23936] __get_user_pages+0xf9c/0x34d0 [ 1012.613533][T23936] ? __pfx___get_user_pages+0x10/0x10 [ 1012.613572][T23936] populate_vma_page_range+0x267/0x3f0 [ 1012.613606][T23936] ? __pfx_populate_vma_page_range+0x10/0x10 [ 1012.613639][T23936] ? __pfx_find_vma_intersection+0x10/0x10 [ 1012.613669][T23936] ? do_mmap+0x93f/0x12f0 [ 1012.613702][T23936] __mm_populate+0x107/0x3a0 [ 1012.613734][T23936] ? __pfx___mm_populate+0x10/0x10 [ 1012.613769][T23936] ? up_write+0x290/0x4f0 [ 1012.613809][T23936] vm_mmap_pgoff+0x37f/0x470 [ 1012.613842][T23936] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 1012.613874][T23936] ? do_futex+0x192/0x350 [ 1012.613908][T23936] ? __pfx_do_futex+0x10/0x10 [ 1012.613954][T23936] ksys_mmap_pgoff+0xe1/0x650 [ 1012.613983][T23936] ? __x64_sys_futex+0x34f/0x4d0 [ 1012.614016][T23936] ? __x64_sys_futex+0x358/0x4d0 [ 1012.614051][T23936] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 1012.614080][T23936] ? xfd_validate_state+0x129/0x190 [ 1012.614123][T23936] __x64_sys_mmap+0x125/0x190 [ 1012.614164][T23936] do_syscall_64+0x106/0xf80 [ 1012.614191][T23936] ? clear_bhb_loop+0x40/0x90 [ 1012.614222][T23936] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1012.614248][T23936] RIP: 0033:0x7fb792b9c819 [ 1012.614269][T23936] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1012.614294][T23936] RSP: 002b:00007fb793a4a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1012.614318][T23936] RAX: ffffffffffffffda RBX: 00007fb792e15fa0 RCX: 00007fb792b9c819 [ 1012.614335][T23936] RDX: 00000000000000df RSI: 0000000000040009 RDI: 0000000000000000 [ 1012.614351][T23936] RBP: 00007fb792c32c91 R08: 0000000000000007 R09: 0000000000028000 [ 1012.614366][T23936] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 1012.614381][T23936] R13: 00007fb792e16038 R14: 00007fb792e15fa0 R15: 00007fffe7cc9e78 [ 1012.614413][T23936] [ 1013.345036][T23955] tc_dump_action: action bad kind [ 1014.198779][T23972] vhci_hcd: not connected 4 [ 1014.242533][T23972] vhci_hcd: not connected 4 [ 1014.292473][T23977] vivid-007: ================= START STATUS ================= [ 1014.301685][T23977] vivid-007: Generate PTS: true [ 1014.306841][T23977] vivid-007: Generate SCR: true [ 1014.311982][T23977] tpg source WxH: 320x240 (Y'CbCr) [ 1014.317879][T23977] tpg field: 1 [ 1014.321717][T23977] tpg crop: (0,0)/320x240 [ 1014.349579][T23977] tpg compose: (0,0)/320x240 [ 1014.356094][T23977] tpg colorspace: 8 [ 1014.373534][T23977] tpg transfer function: 0/0 [ 1014.378305][T23977] tpg Y'CbCr encoding: 0/0 [ 1014.385248][T23977] tpg quantization: 0/0 [ 1014.395391][T23977] tpg RGB range: 0/2 [ 1014.405538][T23977] vivid-007: ================== END STATUS ================== [ 1014.605074][T23984] netlink: 504 bytes leftover after parsing attributes in process `syz.7.3872'. [ 1016.030089][T24017] hub 3-0:1.0: USB hub found [ 1016.051625][T24017] hub 3-0:1.0: 1 port detected [ 1016.146291][T24017] usb usb3: authorized to connect [ 1018.408702][T24056] ucma_write: process 1075 (syz.6.3885) changed security contexts after opening file descriptor, this is not allowed. [ 1018.478166][T24056] Format for adding new device is "id port_count num_queues" (uint uint unit). [ 1019.638761][T24084] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 1020.436875][T24100] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3895'. [ 1022.254128][T24132] binder: 24131:24132 ioctl c00c620f 2000000001c0 returned -22 [ 1023.176702][T24157] openvswitch: netlink: VXLAN extension message has 1 unknown bytes. [ 1023.942192][T15096] Bluetooth: hci4: unexpected subevent 0x01 length: 123 > 18 [ 1023.965224][T24166] netlink: 504 bytes leftover after parsing attributes in process `syz.3.3905'. [ 1024.376720][T24180] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3911'. [ 1024.452440][T24179] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3911'. [ 1024.464060][T24180] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3911'. [ 1024.479329][T24180] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3911'. [ 1024.928265][T24196] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1025.962403][ T5839] Bluetooth: hci4: command 0x2016 tx timeout [ 1027.342370][T24245] netlink: 504 bytes leftover after parsing attributes in process `syz.3.3920'. [ 1027.684174][T24253] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3922'. [ 1027.707557][T24253] netlink: 25 bytes leftover after parsing attributes in process `syz.7.3922'. [ 1028.043296][T24227] Bluetooth: hci4: command 0x2016 tx timeout [ 1028.334559][T24268] input: jJôƸ-¶š9ã%vø“û¨lÐQ  J86Ö‘ as /devices/virtual/input/input34 [ 1028.353347][T24258] sp0: Synchronizing with TNC [ 1029.433114][T24296] futex_wake_op: syz.4.3933 tries to shift op by -2048; fix this program [ 1029.463697][T24297] futex_wake_op: syz.4.3933 tries to shift op by -2048; fix this program [ 1029.882061][T24314] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3936'. [ 1029.965250][T24314] bridge_slave_1: left allmulticast mode [ 1029.976020][T24314] bridge_slave_1: left promiscuous mode [ 1030.004409][T24314] bridge0: port 2(bridge_slave_1) entered disabled state [ 1030.041994][T24314] bridge_slave_0: left allmulticast mode [ 1030.053007][T24314] bridge_slave_0: left promiscuous mode [ 1030.060580][T24314] bridge0: port 1(bridge_slave_0) entered disabled state [ 1030.339894][T24321] netlink: 186 bytes leftover after parsing attributes in process `syz.4.3939'. [ 1030.560662][T24327] futex_wake_op: syz.7.3941 tries to shift op by -2048; fix this program [ 1030.575251][T24327] futex_wake_op: syz.7.3941 tries to shift op by -2048; fix this program [ 1030.639174][T24327] futex_wake_op: syz.7.3941 tries to shift op by -2048; fix this program [ 1032.015772][T24343] FAULT_INJECTION: forcing a failure. [ 1032.015772][T24343] name failslab, interval 1, probability 0, space 0, times 0 [ 1032.125700][T24343] CPU: 0 UID: 0 PID: 24343 Comm: syz.4.3942 Tainted: G L syzkaller #0 PREEMPT(full) [ 1032.125750][T24343] Tainted: [L]=SOFTLOCKUP [ 1032.125762][T24343] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1032.125784][T24343] Call Trace: [ 1032.125795][T24343] [ 1032.125808][T24343] dump_stack_lvl+0x100/0x190 [ 1032.125864][T24343] should_fail_ex.cold+0x5/0xa [ 1032.125907][T24343] should_failslab+0xc2/0x120 [ 1032.125946][T24343] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1032.125997][T24343] ? vm_area_dup+0x27/0x8e0 [ 1032.126049][T24343] vm_area_dup+0x27/0x8e0 [ 1032.126097][T24343] __split_vma+0x18c/0xd90 [ 1032.126150][T24343] ? __pfx___split_vma+0x10/0x10 [ 1032.126209][T24343] ? __pfx_mas_prev+0x10/0x10 [ 1032.126259][T24343] vms_gather_munmap_vmas+0x39f/0x1500 [ 1032.126314][T24343] ? trace_sched_exit_tp+0x13a/0x180 [ 1032.126372][T24343] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 1032.126425][T24343] ? __lock_acquire+0x4a5/0x2630 [ 1032.126487][T24343] do_vmi_align_munmap+0x287/0x5f0 [ 1032.126545][T24343] ? __pfx_do_vmi_align_munmap+0x10/0x10 [ 1032.126595][T24343] ? rcu_is_watching+0x12/0xc0 [ 1032.126706][T24343] do_vmi_munmap+0x1f8/0x3e0 [ 1032.126763][T24343] __vm_munmap+0x196/0x390 [ 1032.126795][T24343] ? __pfx___vm_munmap+0x10/0x10 [ 1032.126849][T24343] __x64_sys_munmap+0x59/0x80 [ 1032.126889][T24343] do_syscall_64+0x106/0xf80 [ 1032.126917][T24343] ? clear_bhb_loop+0x40/0x90 [ 1032.126950][T24343] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1032.126977][T24343] RIP: 0033:0x7f83cd39c647 [ 1032.126999][T24343] Code: 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 0b 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1032.127026][T24343] RSP: 002b:00007f83ce214d18 EFLAGS: 00000206 ORIG_RAX: 000000000000000b [ 1032.127052][T24343] RAX: ffffffffffffffda RBX: 00007f83c4000000 RCX: 00007f83cd39c647 [ 1032.127069][T24343] RDX: 0000000000000000 RSI: 0000000000c00000 RDI: 00007f83c3400000 [ 1032.127085][T24343] RBP: 0000000000021000 R08: 00000000ffffffff R09: 0000000000000000 [ 1032.127102][T24343] R10: 0000000000000022 R11: 0000000000000206 R12: 0000000004000000 [ 1032.127117][T24343] R13: 0000000000001000 R14: 00007f83c8000000 R15: 0000000000c00000 [ 1032.127152][T24343] [ 1032.896510][T24365] netlink: 504 bytes leftover after parsing attributes in process `syz.6.3947'. [ 1036.454521][T24441] Setting dangerous option i915.mitigations - tainting kernel [ 1036.477841][T24440] Setting dangerous option i915.mitigations - tainting kernel [ 1036.597595][T24445] bond0: invalid ARP target specified [ 1036.658738][T24445] nbd: socks must be embedded in a SOCK_ITEM attr [ 1036.659027][T24445] block nbd0: shutting down sockets [ 1036.820688][T24453] bond0: option slaves: interface -Âô does not exist! [ 1036.903233][T15096] Bluetooth: hci0: unexpected event 0x03 length: 725 > 11 [ 1036.903354][T15096] Bluetooth: hci0: unexpected event 0x03 length: 725 > 11 [ 1037.083124][T24461] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3968'. [ 1037.132430][T14755] Process accounting resumed [ 1037.144730][T24461] Format for unlinking a device is "netnsfd:ifidx" (int uint). [ 1037.155322][T24461] netlink: zone id is out of range [ 1037.161110][T24461] netlink: zone id is out of range [ 1037.167646][T24461] netlink: zone id is out of range [ 1037.173660][T24461] netlink: zone id is out of range [ 1037.180533][T24461] netlink: zone id is out of range [ 1037.185743][T24461] netlink: zone id is out of range [ 1037.191660][T24461] netlink: zone id is out of range [ 1037.196905][T24461] netlink: zone id is out of range [ 1037.203255][T24461] netlink: zone id is out of range [ 1037.215212][T24461] netlink: zone id is out of range [ 1037.359989][T24469] netlink: 198 bytes leftover after parsing attributes in process `syz.6.3970'. [ 1037.498489][T24469] binder: BINDER_SET_CONTEXT_MGR already set [ 1037.504823][T24469] binder: 24468:24469 ioctl 4018620d 2000000027c0 returned -16 [ 1037.763459][T24480] block2mtd: error: cannot open device çinX [ 1037.780242][T24480] FAULT_INJECTION: forcing a failure. [ 1037.780242][T24480] name failslab, interval 1, probability 0, space 0, times 0 [ 1037.798859][T24480] CPU: 0 UID: 0 PID: 24480 Comm: syz.6.3974 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1037.798919][T24480] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1037.798934][T24480] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1037.798956][T24480] Call Trace: [ 1037.798969][T24480] [ 1037.798982][T24480] dump_stack_lvl+0x100/0x190 [ 1037.799048][T24480] should_fail_ex.cold+0x5/0xa [ 1037.799106][T24480] should_failslab+0xc2/0x120 [ 1037.799148][T24480] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 1037.799208][T24480] ? __d_alloc+0x34/0xa80 [ 1037.799249][T24480] ? __pfx_stack_trace_save+0x10/0x10 [ 1037.799295][T24480] __d_alloc+0x34/0xa80 [ 1037.799344][T24480] d_alloc_parallel+0x111/0x14e0 [ 1037.799417][T24480] ? find_held_lock+0x2b/0x80 [ 1037.799453][T24480] ? __d_lookup+0x25c/0x4a0 [ 1037.799508][T24480] ? __pfx_d_alloc_parallel+0x10/0x10 [ 1037.799569][T24480] ? __d_lookup+0x266/0x4a0 [ 1037.799634][T24480] lookup_open.isra.0+0x57c/0x11b0 [ 1037.799700][T24480] ? __pfx_lookup_open.isra.0+0x10/0x10 [ 1037.799782][T24480] ? mnt_get_write_access+0x1e9/0x2f0 [ 1037.799842][T24480] path_openat+0xa98/0x31a0 [ 1037.799898][T24480] ? __pfx_path_openat+0x10/0x10 [ 1037.799954][T24480] do_file_open+0x20e/0x430 [ 1037.799998][T24480] ? __pfx_do_file_open+0x10/0x10 [ 1037.800077][T24480] ? alloc_fd+0x476/0x790 [ 1037.800122][T24480] ? do_getname+0x191/0x390 [ 1037.800177][T24480] do_sys_openat2+0x10d/0x1e0 [ 1037.800229][T24480] ? __pfx_do_sys_openat2+0x10/0x10 [ 1037.800296][T24480] __x64_sys_openat+0x12d/0x210 [ 1037.800349][T24480] ? __pfx___x64_sys_openat+0x10/0x10 [ 1037.800418][T24480] do_syscall_64+0x106/0xf80 [ 1037.800458][T24480] ? clear_bhb_loop+0x40/0x90 [ 1037.800504][T24480] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1037.800543][T24480] RIP: 0033:0x7fb65599c819 [ 1037.800574][T24480] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1037.800608][T24480] RSP: 002b:00007fb6567ba028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1037.800641][T24480] RAX: ffffffffffffffda RBX: 00007fb655c15fa0 RCX: 00007fb65599c819 [ 1037.800665][T24480] RDX: 0000000000022502 RSI: 0000200000000540 RDI: ffffffffffffff9c [ 1037.800688][T24480] RBP: 00007fb655a32c91 R08: 0000000000000000 R09: 0000000000000000 [ 1037.800710][T24480] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1037.800731][T24480] R13: 00007fb655c16038 R14: 00007fb655c15fa0 R15: 00007fffef378d18 [ 1037.800778][T24480] [ 1037.803262][T24480] futex_wake_op: syz.6.3974 tries to shift op by -1; fix this program [ 1038.099727][T24482] netlink: 202 bytes leftover after parsing attributes in process `syz.6.3974'. [ 1041.646848][T24539] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3985'. [ 1044.630421][T24578] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 0 out of range (51000000..2150000000) [ 1044.697082][T24578] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 0 out of range (51000000..2150000000) [ 1044.780166][T24578] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 0 out of range (51000000..2150000000) [ 1044.813517][T24578] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 0 out of range (51000000..2150000000) [ 1044.927261][T24578] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 0 out of range (51000000..2150000000) [ 1045.069825][T24578] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 0 out of range (51000000..2150000000) [ 1045.554330][T24593] FAULT_INJECTION: forcing a failure. [ 1045.554330][T24593] name failslab, interval 1, probability 0, space 0, times 0 [ 1045.577574][T24593] CPU: 1 UID: 0 PID: 24593 Comm: syz.7.3996 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1045.577617][T24593] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1045.577627][T24593] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1045.577643][T24593] Call Trace: [ 1045.577651][T24593] [ 1045.577662][T24593] dump_stack_lvl+0x100/0x190 [ 1045.577707][T24593] should_fail_ex.cold+0x5/0xa [ 1045.577737][T24593] should_failslab+0xc2/0x120 [ 1045.577766][T24593] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1045.577807][T24593] ? sp_alloc+0x27/0x160 [ 1045.577844][T24593] sp_alloc+0x27/0x160 [ 1045.577877][T24593] mpol_set_shared_policy+0xa5/0x890 [ 1045.577917][T24593] ? __pfx_shmem_set_policy+0x10/0x10 [ 1045.577946][T24593] mbind_range+0x339/0x550 [ 1045.577983][T24593] do_mbind+0x7dc/0xfd0 [ 1045.578022][T24593] ? __might_fault+0xc5/0x140 [ 1045.578059][T24593] ? __pfx_do_mbind+0x10/0x10 [ 1045.578098][T24593] ? _copy_from_user+0x59/0xd0 [ 1045.578139][T24593] ? __pfx_get_nodes+0x10/0x10 [ 1045.578171][T24593] kernel_mbind+0x1b7/0x200 [ 1045.578206][T24593] ? __pfx_kernel_mbind+0x10/0x10 [ 1045.578248][T24593] do_syscall_64+0x106/0xf80 [ 1045.578275][T24593] ? clear_bhb_loop+0x40/0x90 [ 1045.578306][T24593] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1045.578332][T24593] RIP: 0033:0x7fb792b9c819 [ 1045.578354][T24593] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1045.578378][T24593] RSP: 002b:00007fb793a4a028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed [ 1045.578402][T24593] RAX: ffffffffffffffda RBX: 00007fb792e15fa0 RCX: 00007fb792b9c819 [ 1045.578419][T24593] RDX: 0000000000008003 RSI: 0000000000800605 RDI: 0000000000000000 [ 1045.578474][T24593] RBP: 00007fb792c32c91 R08: 0000000000000003 R09: 0000000000000003 [ 1045.578500][T24593] R10: 0000200000000100 R11: 0000000000000246 R12: 0000000000000000 [ 1045.578522][T24593] R13: 00007fb792e16038 R14: 00007fb792e15fa0 R15: 00007fffe7cc9e78 [ 1045.578564][T24593] [ 1047.020276][T24616] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4001'. [ 1047.110462][T24227] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1047.130961][T24227] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1047.141957][T24227] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1047.153572][T24227] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1047.162134][T24227] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1047.323559][T24619] netlink: 310 bytes leftover after parsing attributes in process `syz.6.4002'. [ 1048.111653][T24617] chnl_net:caif_netlink_parms(): no params data found [ 1048.295340][T24633] ptp ptp0: only physical clock in use now [ 1048.373498][T24617] bridge0: port 1(bridge_slave_0) entered blocking state [ 1048.402688][T24617] bridge0: port 1(bridge_slave_0) entered disabled state [ 1048.410043][T24617] bridge_slave_0: entered allmulticast mode [ 1048.439032][T24617] bridge_slave_0: entered promiscuous mode [ 1048.456373][T24617] bridge0: port 2(bridge_slave_1) entered blocking state [ 1048.480248][T24617] bridge0: port 2(bridge_slave_1) entered disabled state [ 1048.494057][T24617] bridge_slave_1: entered allmulticast mode [ 1048.521392][T24617] bridge_slave_1: entered promiscuous mode [ 1048.600524][T24617] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1048.616426][T24617] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1048.676359][T24617] team0: Port device team_slave_0 added [ 1048.754750][T24617] team0: Port device team_slave_1 added [ 1048.850812][T24617] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1048.858058][T24617] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1048.895582][T24617] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1048.928309][T24642] blktrace: Concurrent blktraces are not allowed on loop2 [ 1049.055201][T24617] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1049.084295][T24617] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1049.146983][T24617] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1049.216931][T24227] Bluetooth: hci5: command tx timeout [ 1049.527542][T24617] hsr_slave_0: entered promiscuous mode [ 1049.534762][T24617] hsr_slave_1: entered promiscuous mode [ 1049.549966][T24617] debugfs: 'hsr0' already exists in 'hsr' [ 1049.557568][T24617] Cannot create hsr debugfs directory [ 1050.290070][T24617] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1050.323308][T24617] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1050.369871][T24617] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1050.384366][T24617] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1050.660527][T24617] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1050.688504][T24617] 8021q: adding VLAN 0 to HW filter on device team0 [ 1050.720872][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 1050.728048][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1050.771248][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 1050.778470][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1051.287782][T24227] Bluetooth: hci5: command tx timeout [ 1051.375320][T24617] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1052.184337][T24617] veth0_vlan: entered promiscuous mode [ 1052.258472][T24617] veth1_vlan: entered promiscuous mode [ 1052.455657][T24617] veth0_macvtap: entered promiscuous mode [ 1052.489226][T24617] veth1_macvtap: entered promiscuous mode [ 1052.553691][T24691] FAULT_INJECTION: forcing a failure. [ 1052.553691][T24691] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1052.568375][T24617] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1052.599237][T24617] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1052.629697][T24691] CPU: 1 UID: 0 PID: 24691 Comm: syz.6.4014 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1052.629752][T24691] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1052.629765][T24691] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1052.629785][T24691] Call Trace: [ 1052.629797][T24691] [ 1052.629810][T24691] dump_stack_lvl+0x100/0x190 [ 1052.629870][T24691] should_fail_ex.cold+0x5/0xa [ 1052.629911][T24691] _copy_from_iter+0x1f4/0x1690 [ 1052.629965][T24691] ? policy_nodemask+0xed/0x4f0 [ 1052.630011][T24691] ? __pfx__copy_from_iter+0x10/0x10 [ 1052.630055][T24691] ? alloc_pages_mpol+0x25a/0x550 [ 1052.630094][T24691] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1052.630146][T24691] copy_page_from_iter+0xde/0x180 [ 1052.630199][T24691] anon_pipe_write+0xae4/0x1d40 [ 1052.630253][T24691] ? __pfx_anon_pipe_write+0x10/0x10 [ 1052.630295][T24691] ? apparmor_file_permission+0x13f/0x1c0 [ 1052.630342][T24691] ? bpf_lsm_file_permission+0x9/0x10 [ 1052.630376][T24691] ? security_file_permission+0x76/0x210 [ 1052.630426][T24691] ? rw_verify_area+0xce/0x6d0 [ 1052.630487][T24691] vfs_write+0x6ac/0x1070 [ 1052.630528][T24691] ? __pfx_anon_pipe_write+0x10/0x10 [ 1052.630569][T24691] ? __pfx_vfs_write+0x10/0x10 [ 1052.630602][T24691] ? find_held_lock+0x2b/0x80 [ 1052.630664][T24691] ksys_write+0x1f8/0x250 [ 1052.630700][T24691] ? __pfx_ksys_write+0x10/0x10 [ 1052.630746][T24691] do_syscall_64+0x106/0xf80 [ 1052.630783][T24691] ? clear_bhb_loop+0x40/0x90 [ 1052.630826][T24691] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1052.630864][T24691] RIP: 0033:0x7fb65599c819 [ 1052.630892][T24691] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1052.630929][T24691] RSP: 002b:00007fb656778028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1052.630963][T24691] RAX: ffffffffffffffda RBX: 00007fb655c16180 RCX: 00007fb65599c819 [ 1052.630986][T24691] RDX: 0000000080000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 1052.631017][T24691] RBP: 00007fb655a32c91 R08: 0000000000000000 R09: 0000000000000000 [ 1052.631038][T24691] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1052.631060][T24691] R13: 00007fb655c16218 R14: 00007fb655c16180 R15: 00007fffef378d18 [ 1052.631105][T24691] [ 1053.188312][ T6392] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1053.198376][ T6392] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1053.211810][ T6392] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1053.295363][ T6392] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1053.357465][T24227] Bluetooth: hci5: command tx timeout [ 1053.983664][T24703] netlink: 'syz.6.4015': attribute type 64 has an invalid length. [ 1053.993721][T24703] netlink: 74 bytes leftover after parsing attributes in process `syz.6.4015'. [ 1054.022390][T22611] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1054.032426][T22611] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1054.253956][T22611] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1054.267168][T22611] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1054.637026][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.645640][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.866942][T24713] netlink: 504 bytes leftover after parsing attributes in process `syz.8.4000'. [ 1055.039560][T24719] sd 0:0:1:0: PR command failed: 1026 [ 1055.053751][T24719] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 1055.063839][T24719] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 1055.452842][T15096] Bluetooth: hci5: command tx timeout [ 1056.708333][T15096] Bluetooth: hci4: command 0x2016 tx timeout [ 1058.808523][T24801] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4029'. [ 1059.790821][T24809] can: request_module (can-proto-0) failed. [ 1060.931928][T24821] netlink: 'syz.8.4033': attribute type 1 has an invalid length. [ 1060.978394][T24822] netlink: 'syz.8.4033': attribute type 1 has an invalid length. [ 1061.181408][T24825] futex_wake_op: syz.4.4034 tries to shift op by -2048; fix this program [ 1061.202203][T24825] futex_wake_op: syz.4.4034 tries to shift op by -2048; fix this program [ 1061.224620][T24825] 0x000000000001-0x000000020000 : "" [ 1061.254018][T24825] ftl_cs: FTL header corrupt! [ 1062.177229][T15096] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1062.194678][T15096] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1062.218400][T15096] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1062.228951][T15096] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1062.238808][T15096] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1064.158666][T24837] chnl_net:caif_netlink_parms(): no params data found [ 1064.356490][T15096] Bluetooth: hci6: command tx timeout [ 1065.046255][T24837] bridge0: port 1(bridge_slave_0) entered blocking state [ 1065.073744][T24837] bridge0: port 1(bridge_slave_0) entered disabled state [ 1065.081045][T24837] bridge_slave_0: entered allmulticast mode [ 1065.118066][T24837] bridge_slave_0: entered promiscuous mode [ 1065.215713][T24837] bridge0: port 2(bridge_slave_1) entered blocking state [ 1065.224314][T24837] bridge0: port 2(bridge_slave_1) entered disabled state [ 1065.231688][T24837] bridge_slave_1: entered allmulticast mode [ 1065.243605][T24837] bridge_slave_1: entered promiscuous mode [ 1065.604527][T24837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1065.675276][T24837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1065.877946][T24837] team0: Port device team_slave_0 added [ 1065.922700][T24837] team0: Port device team_slave_1 added [ 1066.015404][T24837] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1066.029812][T24837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1066.103484][T24837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1066.167700][T24837] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1066.184961][T24837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1066.227988][T24837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1066.312064][T24837] hsr_slave_0: entered promiscuous mode [ 1066.320116][T24837] hsr_slave_1: entered promiscuous mode [ 1066.326749][T24837] debugfs: 'hsr0' already exists in 'hsr' [ 1066.332777][T24837] Cannot create hsr debugfs directory [ 1066.415845][T15096] Bluetooth: hci6: command tx timeout [ 1066.566062][T24901] usb usb21: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1067.366952][T24907] netlink: 504 bytes leftover after parsing attributes in process `syz.4.4047'. [ 1067.894028][T24837] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1067.943599][T24837] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1067.983680][T24837] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1068.278084][T24837] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1068.486763][T15096] Bluetooth: hci6: command tx timeout [ 1068.518577][T24914] netlink: 'syz.4.4049': attribute type 1 has an invalid length. [ 1068.553441][T24914] netlink: 330 bytes leftover after parsing attributes in process `syz.4.4049'. [ 1068.794168][T24837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1068.842521][T24909] kexec: Could not allocate control_code_buffer [ 1068.866330][T24837] 8021q: adding VLAN 0 to HW filter on device team0 [ 1068.909934][T22610] bridge0: port 1(bridge_slave_0) entered blocking state [ 1068.917136][T22610] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1068.975821][T11896] bridge0: port 2(bridge_slave_1) entered blocking state [ 1068.983231][T11896] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1069.440129][ T30] audit: type=1800 audit(2147484700.383:40): pid=24931 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.4051" name="features" dev="configfs" ino=114442 res=0 errno=0 [ 1069.824632][T24837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1070.557589][T15096] Bluetooth: hci6: command tx timeout [ 1071.148807][T24958] FAULT_INJECTION: forcing a failure. [ 1071.148807][T24958] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1071.269851][T24958] CPU: 1 UID: 0 PID: 24958 Comm: syz.6.4053 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1071.269909][T24958] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1071.269922][T24958] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1071.269943][T24958] Call Trace: [ 1071.269955][T24958] [ 1071.269969][T24958] dump_stack_lvl+0x100/0x190 [ 1071.270030][T24958] should_fail_ex.cold+0x5/0xa [ 1071.270082][T24958] _copy_from_iter+0x1f4/0x1690 [ 1071.270138][T24958] ? policy_nodemask+0xed/0x4f0 [ 1071.270178][T24958] ? __pfx__copy_from_iter+0x10/0x10 [ 1071.270227][T24958] ? alloc_pages_mpol+0x25a/0x550 [ 1071.270269][T24958] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1071.270319][T24958] copy_page_from_iter+0xde/0x180 [ 1071.270373][T24958] anon_pipe_write+0xae4/0x1d40 [ 1071.270428][T24958] ? __pfx_anon_pipe_write+0x10/0x10 [ 1071.270470][T24958] ? apparmor_file_permission+0x13f/0x1c0 [ 1071.270517][T24958] ? bpf_lsm_file_permission+0x9/0x10 [ 1071.270552][T24958] ? security_file_permission+0x76/0x210 [ 1071.270603][T24958] ? rw_verify_area+0xce/0x6d0 [ 1071.270662][T24958] vfs_write+0x6ac/0x1070 [ 1071.270698][T24958] ? __pfx_anon_pipe_write+0x10/0x10 [ 1071.270740][T24958] ? __pfx_vfs_write+0x10/0x10 [ 1071.270772][T24958] ? find_held_lock+0x2b/0x80 [ 1071.270840][T24958] ksys_write+0x1f8/0x250 [ 1071.270875][T24958] ? __pfx_ksys_write+0x10/0x10 [ 1071.270918][T24958] do_syscall_64+0x106/0xf80 [ 1071.270953][T24958] ? clear_bhb_loop+0x40/0x90 [ 1071.270992][T24958] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1071.271025][T24958] RIP: 0033:0x7fb65599c819 [ 1071.271062][T24958] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1071.271093][T24958] RSP: 002b:00007fb656778028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1071.271126][T24958] RAX: ffffffffffffffda RBX: 00007fb655c16180 RCX: 00007fb65599c819 [ 1071.271149][T24958] RDX: 0000000080000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 1071.271170][T24958] RBP: 00007fb655a32c91 R08: 0000000000000000 R09: 0000000000000000 [ 1071.271191][T24958] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1071.271212][T24958] R13: 00007fb655c16218 R14: 00007fb655c16180 R15: 00007fffef378d18 [ 1071.271258][T24958] [ 1071.835024][T24968] FAULT_INJECTION: forcing a failure. [ 1071.835024][T24968] name failslab, interval 1, probability 0, space 0, times 0 [ 1071.901256][T24968] CPU: 1 UID: 0 PID: 24968 Comm: syz.8.4057 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1071.901298][T24968] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1071.901308][T24968] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1071.901324][T24968] Call Trace: [ 1071.901332][T24968] [ 1071.901342][T24968] dump_stack_lvl+0x100/0x190 [ 1071.901385][T24968] should_fail_ex.cold+0x5/0xa [ 1071.901415][T24968] should_failslab+0xc2/0x120 [ 1071.901444][T24968] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1071.901483][T24968] ? alloc_empty_file+0x55/0x1c0 [ 1071.901517][T24968] ? __pfx_stack_trace_save+0x10/0x10 [ 1071.901547][T24968] alloc_empty_file+0x55/0x1c0 [ 1071.901582][T24968] path_openat+0xe8/0x31a0 [ 1071.901608][T24968] ? kasan_save_stack+0x3f/0x50 [ 1071.901630][T24968] ? kasan_save_stack+0x30/0x50 [ 1071.901652][T24968] ? kasan_save_track+0x14/0x30 [ 1071.901674][T24968] ? __kasan_slab_alloc+0x89/0x90 [ 1071.901698][T24968] ? kmem_cache_alloc_noprof+0x241/0x6e0 [ 1071.901745][T24968] ? do_getname+0x35/0x390 [ 1071.901777][T24968] ? do_sys_openat2+0xc5/0x1e0 [ 1071.901811][T24968] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1071.901842][T24968] ? __pfx_path_openat+0x10/0x10 [ 1071.901880][T24968] do_file_open+0x20e/0x430 [ 1071.901910][T24968] ? __pfx_do_file_open+0x10/0x10 [ 1071.901959][T24968] ? alloc_fd+0x476/0x790 [ 1071.901988][T24968] ? do_getname+0x191/0x390 [ 1071.902024][T24968] do_sys_openat2+0x10d/0x1e0 [ 1071.902060][T24968] ? __pfx_do_sys_openat2+0x10/0x10 [ 1071.902106][T24968] __x64_sys_openat+0x12d/0x210 [ 1071.902142][T24968] ? __pfx___x64_sys_openat+0x10/0x10 [ 1071.902189][T24968] do_syscall_64+0x106/0xf80 [ 1071.902215][T24968] ? clear_bhb_loop+0x40/0x90 [ 1071.902246][T24968] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1071.902272][T24968] RIP: 0033:0x7f92e759c819 [ 1071.902292][T24968] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1071.902317][T24968] RSP: 002b:00007f92e847e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1071.902341][T24968] RAX: ffffffffffffffda RBX: 00007f92e7815fa0 RCX: 00007f92e759c819 [ 1071.902358][T24968] RDX: 0000000000038000 RSI: 0000200000000180 RDI: ffffffffffffff9c [ 1071.902374][T24968] RBP: 00007f92e7632c91 R08: 0000000000000000 R09: 0000000000000000 [ 1071.902389][T24968] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1071.902404][T24968] R13: 00007f92e7816038 R14: 00007f92e7815fa0 R15: 00007fff83dbbe38 [ 1071.902435][T24968] [ 1072.186345][T24837] veth0_vlan: entered promiscuous mode [ 1072.198971][T24837] veth1_vlan: entered promiscuous mode [ 1072.225511][T24837] veth0_macvtap: entered promiscuous mode [ 1072.235322][T24837] veth1_macvtap: entered promiscuous mode [ 1072.253722][T24837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1072.264908][T24837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1072.497227][ T6400] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1072.543050][T22609] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1072.601569][T12709] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1072.614239][T12709] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1072.900973][T22610] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1072.963860][T22610] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1073.186782][ T6400] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1073.218975][ T6400] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1074.721785][T24998] netlink: 310 bytes leftover after parsing attributes in process `syz.4.4063'. [ 1076.854739][T25054] netlink: 504 bytes leftover after parsing attributes in process `syz.8.4075'. [ 1079.882573][T25122] phram: not enough arguments [ 1080.924818][T25134] netlink: 504 bytes leftover after parsing attributes in process `syz.8.4094'. [ 1083.186501][T25173] block nbd0: Unsupported socket: should be TCP or UNIX. [ 1083.504707][T25180] netlink: 504 bytes leftover after parsing attributes in process `syz.4.4105'. [ 1084.140567][T25203] FAULT_INJECTION: forcing a failure. [ 1084.140567][T25203] name failslab, interval 1, probability 0, space 0, times 0 [ 1084.178599][T25203] CPU: 1 UID: 0 PID: 25203 Comm: syz.9.4107 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1084.178661][T25203] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1084.178676][T25203] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1084.178699][T25203] Call Trace: [ 1084.178711][T25203] [ 1084.178724][T25203] dump_stack_lvl+0x100/0x190 [ 1084.178786][T25203] should_fail_ex.cold+0x5/0xa [ 1084.178829][T25203] ? tomoyo_supervisor+0x65d/0x1340 [ 1084.178863][T25203] should_failslab+0xc2/0x120 [ 1084.178905][T25203] __kmalloc_noprof+0xe0/0x850 [ 1084.178971][T25203] tomoyo_supervisor+0x65d/0x1340 [ 1084.179015][T25203] ? __pfx_tomoyo_supervisor+0x10/0x10 [ 1084.179075][T25203] ? tomoyo_check_path_acl+0x141/0x210 [ 1084.179121][T25203] ? tomoyo_check_acl+0x1f7/0x410 [ 1084.179167][T25203] tomoyo_path_permission+0x270/0x3b0 [ 1084.179216][T25203] tomoyo_check_open_permission+0x34d/0x3c0 [ 1084.179274][T25203] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 1084.179363][T25203] ? do_raw_spin_lock+0x128/0x260 [ 1084.179424][T25203] ? path_get+0x61/0x80 [ 1084.179472][T25203] tomoyo_file_open+0x6b/0x90 [ 1084.179510][T25203] security_file_open+0xb5/0x1e0 [ 1084.179561][T25203] do_dentry_open+0x5aa/0x1660 [ 1084.179603][T25203] ? security_inode_permission+0xbf/0x250 [ 1084.179653][T25203] vfs_open+0x82/0x3f0 [ 1084.179705][T25203] path_openat+0x208c/0x31a0 [ 1084.179758][T25203] ? __pfx_path_openat+0x10/0x10 [ 1084.179814][T25203] do_file_open+0x20e/0x430 [ 1084.179855][T25203] ? __pfx_do_file_open+0x10/0x10 [ 1084.179927][T25203] ? alloc_fd+0x476/0x790 [ 1084.179970][T25203] ? do_getname+0x191/0x390 [ 1084.180021][T25203] do_sys_openat2+0x10d/0x1e0 [ 1084.180071][T25203] ? __pfx_do_sys_openat2+0x10/0x10 [ 1084.180138][T25203] __x64_sys_openat+0x12d/0x210 [ 1084.180190][T25203] ? __pfx___x64_sys_openat+0x10/0x10 [ 1084.180283][T25203] do_syscall_64+0x106/0xf80 [ 1084.180322][T25203] ? clear_bhb_loop+0x40/0x90 [ 1084.180367][T25203] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1084.180406][T25203] RIP: 0033:0x7f72eeb9c819 [ 1084.180435][T25203] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1084.180469][T25203] RSP: 002b:00007f72ecdf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1084.180503][T25203] RAX: ffffffffffffffda RBX: 00007f72eee15fa0 RCX: 00007f72eeb9c819 [ 1084.180526][T25203] RDX: 0000000000000001 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 1084.180548][T25203] RBP: 00007f72eec32c91 R08: 0000000000000000 R09: 0000000000000000 [ 1084.180569][T25203] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1084.180589][T25203] R13: 00007f72eee16038 R14: 00007f72eee15fa0 R15: 00007fff204282f8 [ 1084.180632][T25203] [ 1085.076817][ T30] audit: type=1326 audit(2147484716.096:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25211 comm="syz.9.4111" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f72eeb9c819 code=0x0 [ 1086.611248][T25241] FAULT_INJECTION: forcing a failure. [ 1086.611248][T25241] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1086.709014][T25241] CPU: 0 UID: 0 PID: 25241 Comm: syz.8.4116 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1086.709067][T25241] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1086.709081][T25241] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1086.709099][T25241] Call Trace: [ 1086.709109][T25241] [ 1086.709122][T25241] dump_stack_lvl+0x100/0x190 [ 1086.709174][T25241] should_fail_ex.cold+0x5/0xa [ 1086.709202][T25241] ? prepare_alloc_pages+0x16d/0x5f0 [ 1086.709242][T25241] should_fail_alloc_page+0xeb/0x140 [ 1086.709282][T25241] prepare_alloc_pages+0x1f0/0x5f0 [ 1086.709329][T25241] __alloc_frozen_pages_noprof+0x19a/0x2ba0 [ 1086.709394][T25241] ? __lock_acquire+0x4a5/0x2630 [ 1086.709452][T25241] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1086.709510][T25241] ? lock_acquire+0x1cf/0x380 [ 1086.709570][T25241] ? __mutex_lock+0x26a/0x1b90 [ 1086.709606][T25241] ? trace_ignore_this_task+0xbc/0x100 [ 1086.709662][T25241] ? anon_pipe_write+0x163/0x1d40 [ 1086.709699][T25241] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1086.709738][T25241] ? policy_nodemask+0xed/0x4f0 [ 1086.709781][T25241] alloc_pages_mpol+0x1fb/0x550 [ 1086.709821][T25241] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1086.709872][T25241] alloc_pages_noprof+0x136/0x390 [ 1086.709911][T25241] anon_pipe_write+0xabf/0x1d40 [ 1086.709964][T25241] ? __pfx_anon_pipe_write+0x10/0x10 [ 1086.710010][T25241] ? apparmor_file_permission+0x13f/0x1c0 [ 1086.710057][T25241] ? bpf_lsm_file_permission+0x9/0x10 [ 1086.710090][T25241] ? security_file_permission+0x76/0x210 [ 1086.710140][T25241] ? rw_verify_area+0xce/0x6d0 [ 1086.710197][T25241] vfs_write+0x6ac/0x1070 [ 1086.710232][T25241] ? __pfx_anon_pipe_write+0x10/0x10 [ 1086.710277][T25241] ? __pfx_vfs_write+0x10/0x10 [ 1086.710306][T25241] ? find_held_lock+0x2b/0x80 [ 1086.710363][T25241] ksys_write+0x1f8/0x250 [ 1086.710396][T25241] ? __pfx_ksys_write+0x10/0x10 [ 1086.710441][T25241] do_syscall_64+0x106/0xf80 [ 1086.710476][T25241] ? clear_bhb_loop+0x40/0x90 [ 1086.710517][T25241] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1086.710551][T25241] RIP: 0033:0x7f92e759c819 [ 1086.710577][T25241] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1086.710608][T25241] RSP: 002b:00007f92e843c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1086.710640][T25241] RAX: ffffffffffffffda RBX: 00007f92e7816180 RCX: 00007f92e759c819 [ 1086.710662][T25241] RDX: 0000000080000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 1086.710683][T25241] RBP: 00007f92e843c090 R08: 0000000000000000 R09: 0000000000000000 [ 1086.710703][T25241] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1086.710723][T25241] R13: 00007f92e7816218 R14: 00007f92e7816180 R15: 00007fff83dbbe38 [ 1086.710769][T25241] [ 1092.304910][T25337] FAULT_INJECTION: forcing a failure. [ 1092.304910][T25337] name failslab, interval 1, probability 0, space 0, times 0 [ 1092.374102][T25337] CPU: 1 UID: 0 PID: 25337 Comm: syz.6.4131 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1092.374155][T25337] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1092.374169][T25337] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1092.374188][T25337] Call Trace: [ 1092.374199][T25337] [ 1092.374212][T25337] dump_stack_lvl+0x100/0x190 [ 1092.374272][T25337] should_fail_ex.cold+0x5/0xa [ 1092.374311][T25337] ? lsm_blob_alloc+0x68/0x90 [ 1092.374380][T25337] should_failslab+0xc2/0x120 [ 1092.374419][T25337] __kmalloc_noprof+0xe0/0x850 [ 1092.374472][T25337] ? trace_kmalloc+0x101/0x130 [ 1092.374516][T25337] lsm_blob_alloc+0x68/0x90 [ 1092.374570][T25337] security_sk_alloc+0x2d/0x290 [ 1092.374616][T25337] sk_prot_alloc+0x12a/0x2a0 [ 1092.374662][T25337] sk_alloc+0x36/0xe80 [ 1092.374714][T25337] __netlink_create+0x5e/0x2c0 [ 1092.374764][T25337] ? __wake_up+0x3f/0x60 [ 1092.374805][T25337] netlink_create+0x293/0x610 [ 1092.374835][T25337] ? __pfx_genl_bind+0x10/0x10 [ 1092.374873][T25337] ? __pfx_genl_unbind+0x10/0x10 [ 1092.374910][T25337] ? __pfx_genl_release+0x10/0x10 [ 1092.374955][T25337] __sock_create+0x339/0x860 [ 1092.375008][T25337] __sys_socket+0x14d/0x260 [ 1092.375051][T25337] ? exc_page_fault+0x6f/0xd0 [ 1092.375086][T25337] ? __pfx___sys_socket+0x10/0x10 [ 1092.375137][T25337] ? do_user_addr_fault+0x8d6/0x12f0 [ 1092.375176][T25337] __x64_sys_socket+0x72/0xb0 [ 1092.375221][T25337] ? lockdep_hardirqs_on+0x78/0x100 [ 1092.375257][T25337] do_syscall_64+0x106/0xf80 [ 1092.375293][T25337] ? clear_bhb_loop+0x40/0x90 [ 1092.375335][T25337] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1092.375372][T25337] RIP: 0033:0x7fb65599e087 [ 1092.375401][T25337] Code: f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 0f 1f 44 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1092.375434][T25337] RSP: 002b:00007fb656776f98 EFLAGS: 00000286 ORIG_RAX: 0000000000000029 [ 1092.375465][T25337] RAX: ffffffffffffffda RBX: 00007fb655c16180 RCX: 00007fb65599e087 [ 1092.375486][T25337] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 1092.375507][T25337] RBP: 00000000ffffffff R08: 0000000000000000 R09: 0000000000000000 [ 1092.375528][T25337] R10: 00002000000001c0 R11: 0000000000000286 R12: 0000000000000000 [ 1092.375549][T25337] R13: 00007fb655c16218 R14: 00007fb655c16180 R15: 00007fffef378d18 [ 1092.375598][T25337] [ 1095.219093][T25401] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1096.147317][T25391] FAULT_INJECTION: forcing a failure. [ 1096.147317][T25391] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1096.187216][T25391] CPU: 0 UID: 0 PID: 25391 Comm: syz.9.4145 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1096.187274][T25391] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1096.187288][T25391] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1096.187308][T25391] Call Trace: [ 1096.187319][T25391] [ 1096.187332][T25391] dump_stack_lvl+0x100/0x190 [ 1096.187392][T25391] should_fail_ex.cold+0x5/0xa [ 1096.187439][T25391] ? prepare_alloc_pages+0x16d/0x5f0 [ 1096.187488][T25391] should_fail_alloc_page+0xeb/0x140 [ 1096.187531][T25391] prepare_alloc_pages+0x1f0/0x5f0 [ 1096.187574][T25391] __alloc_frozen_pages_noprof+0x19a/0x2ba0 [ 1096.187639][T25391] ? rcu_is_watching+0x12/0xc0 [ 1096.187687][T25391] ? mod_memcg_lruvec_state+0x1a6/0x630 [ 1096.187735][T25391] ? __mod_zone_page_state+0xe2/0x190 [ 1096.187780][T25391] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1096.187829][T25391] ? lru_gen_add_folio+0x20f/0x13e0 [ 1096.187866][T25391] ? folios_put_refs+0x66d/0x840 [ 1096.187923][T25391] ? __pfx_folios_put_refs+0x10/0x10 [ 1096.187976][T25391] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1096.188009][T25391] ? policy_nodemask+0xed/0x4f0 [ 1096.188045][T25391] alloc_pages_mpol+0x1fb/0x550 [ 1096.188100][T25391] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1096.188134][T25391] ? __lock_acquire+0x4a5/0x2630 [ 1096.188182][T25391] folio_alloc_mpol_noprof+0x36/0x340 [ 1096.188223][T25391] shmem_alloc_folio+0x135/0x160 [ 1096.188264][T25391] shmem_alloc_and_add_folio+0x371/0xd40 [ 1096.188320][T25391] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 1096.188370][T25391] ? shmem_allowable_huge_orders+0x2bd/0x400 [ 1096.188432][T25391] shmem_get_folio_gfp+0x6ab/0x1900 [ 1096.188487][T25391] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 1096.188537][T25391] ? filemap_map_pages+0xe4c/0x2010 [ 1096.188589][T25391] shmem_fault+0x1f9/0xa20 [ 1096.188639][T25391] ? __pfx_shmem_fault+0x10/0x10 [ 1096.188692][T25391] ? __pfx_filemap_map_pages+0x10/0x10 [ 1096.188748][T25391] __do_fault+0x10d/0x550 [ 1096.188781][T25391] do_fault+0xabb/0x18e0 [ 1096.188823][T25391] __handle_mm_fault+0x1815/0x2b60 [ 1096.188871][T25391] ? mt_find+0x45e/0x8e0 [ 1096.188908][T25391] ? __pfx___handle_mm_fault+0x10/0x10 [ 1096.188948][T25391] ? __pfx_mt_find+0x10/0x10 [ 1096.189001][T25391] ? find_vma+0xbf/0x140 [ 1096.189030][T25391] ? __pfx_find_vma+0x10/0x10 [ 1096.189064][T25391] handle_mm_fault+0x36d/0xa20 [ 1096.189113][T25391] do_user_addr_fault+0x74c/0x12f0 [ 1096.189153][T25391] exc_page_fault+0x6f/0xd0 [ 1096.189186][T25391] asm_exc_page_fault+0x26/0x30 [ 1096.189215][T25391] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 1096.189258][T25391] Code: 93 04 00 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 e9 cf 93 04 00 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 1096.189287][T25391] RSP: 0018:ffffc90003327a40 EFLAGS: 00050206 [ 1096.189312][T25391] RAX: 0000000000000001 RBX: ffff88809156a000 RCX: 0000000000001000 [ 1096.189332][T25391] RDX: 0000000000000001 RSI: 0000000000203000 RDI: ffff88809156a000 [ 1096.189351][T25391] RBP: 0000000000203000 R08: 0000000000000001 R09: ffffed10122ad5ff [ 1096.189369][T25391] R10: ffff88809156afff R11: 0000000000000000 R12: ffffc90003327d80 [ 1096.189388][T25391] R13: 0000000000203000 R14: 0000000000001000 R15: 0000000000000000 [ 1096.189430][T25391] _copy_from_iter+0x355/0x1690 [ 1096.189477][T25391] ? policy_nodemask+0xed/0x4f0 [ 1096.189508][T25391] ? __pfx__copy_from_iter+0x10/0x10 [ 1096.189549][T25391] ? alloc_pages_mpol+0x25a/0x550 [ 1096.189583][T25391] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1096.189623][T25391] copy_page_from_iter+0xde/0x180 [ 1096.189668][T25391] anon_pipe_write+0xae4/0x1d40 [ 1096.189712][T25391] ? __pfx_anon_pipe_write+0x10/0x10 [ 1096.189745][T25391] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1096.189784][T25391] ? bpf_lsm_file_permission+0x9/0x10 [ 1096.189813][T25391] ? security_file_permission+0x76/0x210 [ 1096.189856][T25391] ? rw_verify_area+0xce/0x6d0 [ 1096.189904][T25391] vfs_write+0x6ac/0x1070 [ 1096.189935][T25391] ? __pfx_anon_pipe_write+0x10/0x10 [ 1096.189969][T25391] ? __pfx_vfs_write+0x10/0x10 [ 1096.189996][T25391] ? find_held_lock+0x2b/0x80 [ 1096.190047][T25391] ksys_write+0x1f8/0x250 [ 1096.190076][T25391] ? __pfx_ksys_write+0x10/0x10 [ 1096.190115][T25391] do_syscall_64+0x106/0xf80 [ 1096.190145][T25391] ? clear_bhb_loop+0x40/0x90 [ 1096.190182][T25391] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1096.190212][T25391] RIP: 0033:0x7f72eeb9c819 [ 1096.190236][T25391] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1096.190263][T25391] RSP: 002b:00007f72ecdf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1096.190289][T25391] RAX: ffffffffffffffda RBX: 00007f72eee15fa0 RCX: 00007f72eeb9c819 [ 1096.190308][T25391] RDX: 0000000080000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 1096.190326][T25391] RBP: 00007f72eec32c91 R08: 0000000000000000 R09: 0000000000000000 [ 1096.190344][T25391] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1096.190362][T25391] R13: 00007f72eee16038 R14: 00007f72eee15fa0 R15: 00007fff204282f8 [ 1096.190400][T25391] [ 1096.663985][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 1099.756332][T15096] Bluetooth: hci0: Malformed Event: 0x02 [ 1099.891650][T25482] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4161'. [ 1101.952775][T25504] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4167'. [ 1101.990167][T25504] HfR: entered promiscuous mode [ 1102.927694][T25527] kstrtoul() returned -22 for lu_gp_id [ 1102.944406][ T30] audit: type=1800 audit(2147484734.040:42): pid=25529 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.4173" name="lu_gp_id" dev="configfs" ino=117382 res=0 errno=0 [ 1102.974377][T25527] kstrtoul() returned -22 for lu_gp_id [ 1103.000833][T25527] kstrtoul() returned -22 for lu_gp_id [ 1103.037366][T25527] kstrtoul() returned -22 for lu_gp_id [ 1103.065035][T25527] kstrtoul() returned -22 for lu_gp_id [ 1103.070578][T25527] kstrtoul() returned -22 for lu_gp_id [ 1103.136769][T25527] kstrtoul() returned -22 for lu_gp_id [ 1103.166325][T25527] kstrtoul() returned -22 for lu_gp_id [ 1103.195986][T25527] kstrtoul() returned -22 for lu_gp_id [ 1103.206285][T25527] kstrtoul() returned -22 for lu_gp_id [ 1103.232187][T25527] kstrtoul() returned -22 for lu_gp_id [ 1103.238236][T25527] kstrtoul() returned -22 for lu_gp_id [ 1103.254849][T25527] kstrtoul() returned -22 for lu_gp_id [ 1103.277095][T25527] kstrtoul() returned -22 for lu_gp_id [ 1103.294318][T25527] kstrtoul() returned -22 for lu_gp_id [ 1103.310194][T25527] kstrtoul() returned -22 for lu_gp_id [ 1103.315979][T25527] kstrtoul() returned -22 for lu_gp_id [ 1103.336547][T25527] kstrtoul() returned -22 for lu_gp_id [ 1103.344918][T25527] kstrtoul() returned -22 for lu_gp_id [ 1103.355261][T25527] kstrtoul() returned -22 for lu_gp_id [ 1103.371448][T25527] kstrtoul() returned -22 for lu_gp_id [ 1103.382076][T25527] kstrtoul() returned -22 for lu_gp_id [ 1105.384902][T25521] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 1107.483426][T25583] FAULT_INJECTION: forcing a failure. [ 1107.483426][T25583] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1107.552450][T25583] CPU: 0 UID: 0 PID: 25583 Comm: syz.4.4183 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1107.552509][T25583] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1107.552522][T25583] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1107.552542][T25583] Call Trace: [ 1107.552554][T25583] [ 1107.552566][T25583] dump_stack_lvl+0x100/0x190 [ 1107.552619][T25583] should_fail_ex.cold+0x5/0xa [ 1107.552664][T25583] _copy_from_iter+0x1f4/0x1690 [ 1107.552711][T25583] ? policy_nodemask+0xed/0x4f0 [ 1107.552745][T25583] ? __pfx__copy_from_iter+0x10/0x10 [ 1107.552787][T25583] ? alloc_pages_mpol+0x25a/0x550 [ 1107.552822][T25583] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1107.552863][T25583] copy_page_from_iter+0xde/0x180 [ 1107.552907][T25583] anon_pipe_write+0xae4/0x1d40 [ 1107.552951][T25583] ? __pfx_anon_pipe_write+0x10/0x10 [ 1107.552985][T25583] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1107.553025][T25583] ? bpf_lsm_file_permission+0x9/0x10 [ 1107.553054][T25583] ? security_file_permission+0x76/0x210 [ 1107.553096][T25583] ? rw_verify_area+0xce/0x6d0 [ 1107.553145][T25583] vfs_write+0x6ac/0x1070 [ 1107.553174][T25583] ? __pfx_anon_pipe_write+0x10/0x10 [ 1107.553210][T25583] ? __pfx_vfs_write+0x10/0x10 [ 1107.553236][T25583] ? find_held_lock+0x2b/0x80 [ 1107.553287][T25583] ksys_write+0x1f8/0x250 [ 1107.553316][T25583] ? __pfx_ksys_write+0x10/0x10 [ 1107.553372][T25583] do_syscall_64+0x106/0xf80 [ 1107.553406][T25583] ? clear_bhb_loop+0x40/0x90 [ 1107.553444][T25583] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1107.553475][T25583] RIP: 0033:0x7f83cd39c819 [ 1107.553500][T25583] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1107.553529][T25583] RSP: 002b:00007f83ce279028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1107.553557][T25583] RAX: ffffffffffffffda RBX: 00007f83cd616180 RCX: 00007f83cd39c819 [ 1107.553577][T25583] RDX: 00000000800000f4 RSI: 0000000000000000 RDI: 0000000000000001 [ 1107.553595][T25583] RBP: 00007f83cd432c91 R08: 0000000000000000 R09: 0000000000000000 [ 1107.553613][T25583] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1107.553638][T25583] R13: 00007f83cd616218 R14: 00007f83cd616180 R15: 00007fff86d4b8d8 [ 1107.553675][T25583] [ 1109.932592][T15096] Bluetooth: hci0: unexpected subevent 0x0c length: 118 > 5 [ 1110.920770][T25678] netlink: 'syz.8.4198': attribute type 5 has an invalid length. [ 1110.949445][T25678] netlink: 4158 bytes leftover after parsing attributes in process `syz.8.4198'. [ 1111.290592][ T30] audit: type=1800 audit(2147484742.440:43): pid=25670 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.4197" name="members" dev="configfs" ino=117744 res=0 errno=0 [ 1111.827799][T25686] could not allocate digest TFM handle [ 1114.022718][T25714] FAULT_INJECTION: forcing a failure. [ 1114.022718][T25714] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1114.144931][T25714] CPU: 1 UID: 0 PID: 25714 Comm: syz.6.4205 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1114.144999][T25714] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1114.145013][T25714] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1114.145035][T25714] Call Trace: [ 1114.145047][T25714] [ 1114.145060][T25714] dump_stack_lvl+0x100/0x190 [ 1114.145122][T25714] should_fail_ex.cold+0x5/0xa [ 1114.145164][T25714] _copy_from_iter+0x1f4/0x1690 [ 1114.145232][T25714] ? policy_nodemask+0xed/0x4f0 [ 1114.145271][T25714] ? __pfx__copy_from_iter+0x10/0x10 [ 1114.145316][T25714] ? alloc_pages_mpol+0x25a/0x550 [ 1114.145350][T25714] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1114.145397][T25714] copy_page_from_iter+0xde/0x180 [ 1114.145448][T25714] anon_pipe_write+0xae4/0x1d40 [ 1114.145499][T25714] ? __pfx_anon_pipe_write+0x10/0x10 [ 1114.145540][T25714] ? apparmor_file_permission+0x13f/0x1c0 [ 1114.145584][T25714] ? bpf_lsm_file_permission+0x9/0x10 [ 1114.145618][T25714] ? security_file_permission+0x76/0x210 [ 1114.145666][T25714] ? rw_verify_area+0xce/0x6d0 [ 1114.145722][T25714] vfs_write+0x6ac/0x1070 [ 1114.145757][T25714] ? __pfx_anon_pipe_write+0x10/0x10 [ 1114.145799][T25714] ? __pfx_vfs_write+0x10/0x10 [ 1114.145830][T25714] ? find_held_lock+0x2b/0x80 [ 1114.145892][T25714] ksys_write+0x1f8/0x250 [ 1114.145925][T25714] ? __pfx_ksys_write+0x10/0x10 [ 1114.145977][T25714] do_syscall_64+0x106/0xf80 [ 1114.146020][T25714] ? clear_bhb_loop+0x40/0x90 [ 1114.146064][T25714] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1114.146100][T25714] RIP: 0033:0x7fb65599c819 [ 1114.146129][T25714] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1114.146163][T25714] RSP: 002b:00007fb656778028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1114.146194][T25714] RAX: ffffffffffffffda RBX: 00007fb655c16180 RCX: 00007fb65599c819 [ 1114.146217][T25714] RDX: 0000000080000300 RSI: 0000000000000000 RDI: 0000000000000001 [ 1114.146237][T25714] RBP: 00007fb655a32c91 R08: 0000000000000000 R09: 0000000000000000 [ 1114.146257][T25714] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1114.146278][T25714] R13: 00007fb655c16218 R14: 00007fb655c16180 R15: 00007fffef378d18 [ 1114.146322][T25714] [ 1115.788277][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1115.796033][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.584641][T25754] FAULT_INJECTION: forcing a failure. [ 1116.584641][T25754] name failslab, interval 1, probability 0, space 0, times 0 [ 1116.598872][T25754] CPU: 0 UID: 0 PID: 25754 Comm: syz.6.4214 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1116.598933][T25754] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1116.598948][T25754] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1116.598970][T25754] Call Trace: [ 1116.598982][T25754] [ 1116.599001][T25754] dump_stack_lvl+0x100/0x190 [ 1116.599065][T25754] should_fail_ex.cold+0x5/0xa [ 1116.599109][T25754] ? lsm_blob_alloc+0x68/0x90 [ 1116.599164][T25754] should_failslab+0xc2/0x120 [ 1116.599204][T25754] __kmalloc_noprof+0xe0/0x850 [ 1116.599260][T25754] ? trace_kmalloc+0x101/0x130 [ 1116.599307][T25754] lsm_blob_alloc+0x68/0x90 [ 1116.599363][T25754] security_sk_alloc+0x2d/0x290 [ 1116.599405][T25754] sk_prot_alloc+0x12a/0x2a0 [ 1116.599453][T25754] sk_alloc+0x36/0xe80 [ 1116.599509][T25754] tap_open+0x2ed/0x1180 [ 1116.599562][T25754] ? __pfx_tap_open+0x10/0x10 [ 1116.599608][T25754] chrdev_open+0x234/0x6a0 [ 1116.599648][T25754] ? __pfx_apparmor_file_open+0x10/0x10 [ 1116.599688][T25754] ? __pfx_chrdev_open+0x10/0x10 [ 1116.599731][T25754] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 1116.599793][T25754] do_dentry_open+0x6d8/0x1660 [ 1116.599831][T25754] ? __pfx_chrdev_open+0x10/0x10 [ 1116.599879][T25754] vfs_open+0x82/0x3f0 [ 1116.599929][T25754] path_openat+0x208c/0x31a0 [ 1116.599981][T25754] ? __pfx_path_openat+0x10/0x10 [ 1116.600037][T25754] do_file_open+0x20e/0x430 [ 1116.600079][T25754] ? __pfx_do_file_open+0x10/0x10 [ 1116.600147][T25754] ? alloc_fd+0x476/0x790 [ 1116.600188][T25754] ? do_getname+0x191/0x390 [ 1116.600239][T25754] do_sys_openat2+0x10d/0x1e0 [ 1116.600288][T25754] ? __pfx_do_sys_openat2+0x10/0x10 [ 1116.600353][T25754] __x64_sys_openat+0x12d/0x210 [ 1116.600405][T25754] ? __pfx___x64_sys_openat+0x10/0x10 [ 1116.600473][T25754] do_syscall_64+0x106/0xf80 [ 1116.600510][T25754] ? clear_bhb_loop+0x40/0x90 [ 1116.600555][T25754] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1116.600591][T25754] RIP: 0033:0x7fb65599c819 [ 1116.600621][T25754] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1116.600656][T25754] RSP: 002b:00007fb6567ba028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1116.600688][T25754] RAX: ffffffffffffffda RBX: 00007fb655c15fa0 RCX: 00007fb65599c819 [ 1116.600712][T25754] RDX: 0000000000000001 RSI: 0000200000000200 RDI: ffffffffffffff9c [ 1116.600734][T25754] RBP: 00007fb655a32c91 R08: 0000000000000000 R09: 0000000000000000 [ 1116.600765][T25754] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1116.600787][T25754] R13: 00007fb655c16038 R14: 00007fb655c15fa0 R15: 00007fffef378d18 [ 1116.600831][T25754] [ 1117.708961][ T30] audit: type=1800 audit(2147484748.890:44): pid=25768 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.4217" name="features" dev="configfs" ino=118617 res=0 errno=0 [ 1119.155972][T25790] input: f¬ as /devices/virtual/input/input35 [ 1122.752111][T25822] FAULT_INJECTION: forcing a failure. [ 1122.752111][T25822] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1122.874862][T25822] CPU: 1 UID: 0 PID: 25822 Comm: syz.9.4227 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1122.874904][T25822] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1122.874913][T25822] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1122.874928][T25822] Call Trace: [ 1122.874937][T25822] [ 1122.874946][T25822] dump_stack_lvl+0x100/0x190 [ 1122.874988][T25822] should_fail_ex.cold+0x5/0xa [ 1122.875017][T25822] _copy_from_user+0x2e/0xd0 [ 1122.875050][T25822] sctp_setsockopt+0x8cc/0xb370 [ 1122.875085][T25822] ? __pfx_aa_sk_perm+0x10/0x10 [ 1122.875119][T25822] ? __pfx_sctp_setsockopt+0x10/0x10 [ 1122.875155][T25822] ? aa_sock_opt_perm+0xfe/0x1b0 [ 1122.875178][T25822] ? sock_common_setsockopt+0x2e/0xf0 [ 1122.875207][T25822] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 1122.875239][T25822] do_sock_setsockopt+0xf3/0x1d0 [ 1122.875272][T25822] __sys_setsockopt+0x119/0x190 [ 1122.875316][T25822] __x64_sys_setsockopt+0xbd/0x160 [ 1122.875354][T25822] ? do_syscall_64+0x95/0xf80 [ 1122.875380][T25822] ? lockdep_hardirqs_on+0x78/0x100 [ 1122.875406][T25822] do_syscall_64+0x106/0xf80 [ 1122.875436][T25822] ? clear_bhb_loop+0x40/0x90 [ 1122.875466][T25822] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1122.875491][T25822] RIP: 0033:0x7f72eeb9c819 [ 1122.875511][T25822] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1122.875535][T25822] RSP: 002b:00007f72ecdf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1122.875558][T25822] RAX: ffffffffffffffda RBX: 00007f72eee15fa0 RCX: 00007f72eeb9c819 [ 1122.875574][T25822] RDX: 0000000000000076 RSI: 0000010000000084 RDI: 0000000000000003 [ 1122.875588][T25822] RBP: 00007f72ecdf6090 R08: 0000000000000008 R09: 0000000000000000 [ 1122.875603][T25822] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1122.875617][T25822] R13: 00007f72eee16038 R14: 00007f72eee15fa0 R15: 00007fff204282f8 [ 1122.875647][T25822] [ 1124.197784][T25830] usb usb36: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1124.230547][T25830] vhci_hcd vhci_hcd.1: invalid port number 99 [ 1124.272449][T25830] vhci_hcd vhci_hcd.1: default hub control req: 2f70 v6f72 i0063 l31091 [ 1124.927551][T15096] Bluetooth: hci5: unexpected event 0x3e length: 508 > 260 [ 1124.927603][T15096] Bluetooth: hci5: unexpected subevent 0x02 length: 507 > 260 [ 1124.943640][T15096] Bluetooth: hci5: Dropping invalid advertising data [ 1124.951028][T15096] Bluetooth: hci5: unknown advertising packet type: 0xe9 [ 1124.951076][T15096] Bluetooth: hci5: Dropping invalid advertising data [ 1124.967811][T15096] Bluetooth: hci5: Malformed LE Event: 0x02 [ 1127.215716][T25879] netlink: 342 bytes leftover after parsing attributes in process `syz.9.4243'. [ 1129.707541][T25905] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4249'. [ 1129.798451][T25905] hsr_slave_0: left promiscuous mode [ 1129.937985][T25905] hsr_slave_1: left promiscuous mode [ 1133.113512][T25953] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1133.120343][T25953] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1133.165727][T25953] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1133.182383][T25953] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1133.188889][T25953] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1133.195749][T25953] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1133.211573][T25953] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1133.219024][T25953] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 1133.235159][T25953] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 1133.246883][T25953] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 1133.254326][T25953] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 1133.271939][T25953] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 1133.296431][T25965] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1133.564666][T25970] netlink: 206 bytes leftover after parsing attributes in process `syz.4.4264'. [ 1135.133292][T15096] Bluetooth: hci1: command 0x0c1a tx timeout [ 1135.140112][T15096] Bluetooth: hci3: command 0x2016 tx timeout [ 1135.221429][T24227] Bluetooth: hci5: command 0x0c1a tx timeout [ 1135.227551][T24227] Bluetooth: hci4: command 0x2016 tx timeout [ 1135.234304][T15096] Bluetooth: hci0: command 0x0c1a tx timeout [ 1135.241402][T15096] Bluetooth: hci2: command 0x0406 tx timeout [ 1135.290920][T18046] Bluetooth: hci6: command 0x0c1a tx timeout [ 1136.304901][T25992] FAULT_INJECTION: forcing a failure. [ 1136.304901][T25992] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1136.344620][T25992] CPU: 1 UID: 0 PID: 25992 Comm: syz.9.4272 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1136.344685][T25992] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1136.344699][T25992] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1136.344720][T25992] Call Trace: [ 1136.344734][T25992] [ 1136.344751][T25992] dump_stack_lvl+0x100/0x190 [ 1136.344795][T25992] should_fail_ex.cold+0x5/0xa [ 1136.344820][T25992] ? prepare_alloc_pages+0x16d/0x5f0 [ 1136.344854][T25992] should_fail_alloc_page+0xeb/0x140 [ 1136.344884][T25992] prepare_alloc_pages+0x1f0/0x5f0 [ 1136.344919][T25992] __alloc_frozen_pages_noprof+0x19a/0x2ba0 [ 1136.344960][T25992] ? do_user_addr_fault+0x7de/0x12f0 [ 1136.344984][T25992] ? do_user_addr_fault+0x7de/0x12f0 [ 1136.345020][T25992] ? irqentry_exit+0x180/0x670 [ 1136.345048][T25992] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1136.345088][T25992] ? irqentry_exit+0x180/0x670 [ 1136.345128][T25992] ? rep_movs_alternative+0x4a/0x90 [ 1136.345164][T25992] ? _copy_from_iter+0x270/0x1690 [ 1136.345199][T25992] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1136.345227][T25992] ? policy_nodemask+0xed/0x4f0 [ 1136.345258][T25992] alloc_pages_mpol+0x1fb/0x550 [ 1136.345288][T25992] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1136.345324][T25992] alloc_pages_noprof+0x136/0x390 [ 1136.345385][T25992] anon_pipe_write+0xabf/0x1d40 [ 1136.345438][T25992] ? __pfx_anon_pipe_write+0x10/0x10 [ 1136.345468][T25992] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1136.345508][T25992] ? bpf_lsm_file_permission+0x9/0x10 [ 1136.345533][T25992] ? security_file_permission+0x76/0x210 [ 1136.345589][T25992] ? rw_verify_area+0xce/0x6d0 [ 1136.345654][T25992] vfs_write+0x6ac/0x1070 [ 1136.345696][T25992] ? __pfx_anon_pipe_write+0x10/0x10 [ 1136.345743][T25992] ? __pfx_vfs_write+0x10/0x10 [ 1136.345766][T25992] ? find_held_lock+0x2b/0x80 [ 1136.345810][T25992] ksys_write+0x1f8/0x250 [ 1136.345834][T25992] ? __pfx_ksys_write+0x10/0x10 [ 1136.345868][T25992] do_syscall_64+0x106/0xf80 [ 1136.345894][T25992] ? clear_bhb_loop+0x40/0x90 [ 1136.345930][T25992] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1136.345955][T25992] RIP: 0033:0x7f72eeb9c819 [ 1136.345976][T25992] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1136.346000][T25992] RSP: 002b:00007f72ecdf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1136.346023][T25992] RAX: ffffffffffffffda RBX: 00007f72eee15fa0 RCX: 00007f72eeb9c819 [ 1136.346045][T25992] RDX: 000000008000f400 RSI: 0000000000000000 RDI: 0000000000000001 [ 1136.346060][T25992] RBP: 00007f72eec32c91 R08: 0000000000000000 R09: 0000000000000000 [ 1136.346080][T25992] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1136.346096][T25992] R13: 00007f72eee16038 R14: 00007f72eee15fa0 R15: 00007fff204282f8 [ 1136.346128][T25992] [ 1137.295930][T15096] Bluetooth: hci5: command 0x0c1a tx timeout [ 1137.303160][T18046] Bluetooth: hci4: command 0x2016 tx timeout [ 1137.365294][T18046] Bluetooth: hci6: command 0x0c1a tx timeout [ 1138.538670][T26042] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4284'. [ 1139.118716][T26034] FAULT_INJECTION: forcing a failure. [ 1139.118716][T26034] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1139.162434][T26034] CPU: 0 UID: 0 PID: 26034 Comm: syz.6.4283 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1139.162487][T26034] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1139.162499][T26034] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1139.162519][T26034] Call Trace: [ 1139.162529][T26034] [ 1139.162542][T26034] dump_stack_lvl+0x100/0x190 [ 1139.162594][T26034] should_fail_ex.cold+0x5/0xa [ 1139.162631][T26034] _copy_from_iter+0x1f4/0x1690 [ 1139.162677][T26034] ? policy_nodemask+0xed/0x4f0 [ 1139.162709][T26034] ? __pfx__copy_from_iter+0x10/0x10 [ 1139.162749][T26034] ? alloc_pages_mpol+0x25a/0x550 [ 1139.162784][T26034] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1139.162824][T26034] copy_page_from_iter+0xde/0x180 [ 1139.162869][T26034] anon_pipe_write+0xae4/0x1d40 [ 1139.162913][T26034] ? __pfx_anon_pipe_write+0x10/0x10 [ 1139.162947][T26034] ? apparmor_file_permission+0x13f/0x1c0 [ 1139.162986][T26034] ? bpf_lsm_file_permission+0x9/0x10 [ 1139.163015][T26034] ? security_file_permission+0x76/0x210 [ 1139.163058][T26034] ? rw_verify_area+0xce/0x6d0 [ 1139.163106][T26034] vfs_write+0x6ac/0x1070 [ 1139.163137][T26034] ? __pfx_anon_pipe_write+0x10/0x10 [ 1139.163172][T26034] ? __pfx_vfs_write+0x10/0x10 [ 1139.163198][T26034] ? find_held_lock+0x2b/0x80 [ 1139.163249][T26034] ksys_write+0x1f8/0x250 [ 1139.163288][T26034] ? __pfx_ksys_write+0x10/0x10 [ 1139.163328][T26034] do_syscall_64+0x106/0xf80 [ 1139.163361][T26034] ? clear_bhb_loop+0x40/0x90 [ 1139.163397][T26034] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1139.163427][T26034] RIP: 0033:0x7fb65599c819 [ 1139.163452][T26034] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1139.163480][T26034] RSP: 002b:00007fb6567ba028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1139.163508][T26034] RAX: ffffffffffffffda RBX: 00007fb655c15fa0 RCX: 00007fb65599c819 [ 1139.163530][T26034] RDX: 0000000080001800 RSI: 0000000000000000 RDI: 0000000000000001 [ 1139.163547][T26034] RBP: 00007fb655a32c91 R08: 0000000000000000 R09: 0000000000000000 [ 1139.163565][T26034] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1139.163583][T26034] R13: 00007fb655c16038 R14: 00007fb655c15fa0 R15: 00007fffef378d18 [ 1139.163620][T26034] [ 1139.443744][T18046] Bluetooth: hci5: command 0x0c1a tx timeout [ 1139.449943][T18046] Bluetooth: hci6: command 0x0c1a tx timeout [ 1140.100199][T26054] FAULT_INJECTION: forcing a failure. [ 1140.100199][T26054] name failslab, interval 1, probability 0, space 0, times 0 [ 1140.113530][T26054] CPU: 0 UID: 0 PID: 26054 Comm: syz.9.4287 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1140.113572][T26054] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1140.113582][T26054] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1140.113597][T26054] Call Trace: [ 1140.113607][T26054] [ 1140.113617][T26054] dump_stack_lvl+0x100/0x190 [ 1140.113661][T26054] should_fail_ex.cold+0x5/0xa [ 1140.113691][T26054] ? lsm_blob_alloc+0x68/0x90 [ 1140.113729][T26054] should_failslab+0xc2/0x120 [ 1140.113759][T26054] __kmalloc_noprof+0xe0/0x850 [ 1140.113799][T26054] ? down_write_nested+0x14f/0x200 [ 1140.113844][T26054] lsm_blob_alloc+0x68/0x90 [ 1140.113884][T26054] security_sb_alloc+0x25/0x240 [ 1140.113911][T26054] alloc_super+0x24c/0xd20 [ 1140.113955][T26054] ? __pfx_mqueue_fill_super+0x10/0x10 [ 1140.113979][T26054] sget_fc+0x117/0xc70 [ 1140.114019][T26054] ? __pfx_set_anon_super_fc+0x10/0x10 [ 1140.114059][T26054] ? __pfx_mqueue_fill_super+0x10/0x10 [ 1140.114083][T26054] get_tree_nodev+0x28/0x190 [ 1140.114108][T26054] mqueue_get_tree+0xf1/0x130 [ 1140.114132][T26054] vfs_get_tree+0x92/0x320 [ 1140.114169][T26054] fc_mount_longterm+0x1a/0x270 [ 1140.114217][T26054] mq_init_ns+0x482/0x820 [ 1140.114248][T26054] copy_ipcs+0x3dd/0x7e0 [ 1140.114279][T26054] create_new_namespaces+0x20a/0xac0 [ 1140.114307][T26054] ? security_capable+0x80/0x260 [ 1140.114335][T26054] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 1140.114366][T26054] ksys_unshare+0x473/0xad0 [ 1140.114400][T26054] ? __pfx_ksys_unshare+0x10/0x10 [ 1140.114451][T26054] __x64_sys_unshare+0x31/0x40 [ 1140.114483][T26054] do_syscall_64+0x106/0xf80 [ 1140.114511][T26054] ? clear_bhb_loop+0x40/0x90 [ 1140.114541][T26054] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1140.114566][T26054] RIP: 0033:0x7f72eeb9c819 [ 1140.114593][T26054] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1140.114617][T26054] RSP: 002b:00007f72ecdf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1140.114642][T26054] RAX: ffffffffffffffda RBX: 00007f72eee15fa0 RCX: 00007f72eeb9c819 [ 1140.114659][T26054] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000006c000000 [ 1140.114674][T26054] RBP: 00007f72eec32c91 R08: 0000000000000000 R09: 0000000000000000 [ 1140.114690][T26054] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1140.114705][T26054] R13: 00007f72eee16038 R14: 00007f72eee15fa0 R15: 00007fff204282f8 [ 1140.114737][T26054] [ 1141.883382][T26076] FAULT_INJECTION: forcing a failure. [ 1141.883382][T26076] name failslab, interval 1, probability 0, space 0, times 0 [ 1141.912539][T26076] CPU: 0 UID: 0 PID: 26076 Comm: syz.4.4293 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1141.912592][T26076] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1141.912605][T26076] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1141.912625][T26076] Call Trace: [ 1141.912637][T26076] [ 1141.912649][T26076] dump_stack_lvl+0x100/0x190 [ 1141.912708][T26076] should_fail_ex.cold+0x5/0xa [ 1141.912749][T26076] should_failslab+0xc2/0x120 [ 1141.912788][T26076] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 1141.912842][T26076] ? alloc_inode+0x68/0x250 [ 1141.912891][T26076] ? simple_start_creating+0xb0/0x110 [ 1141.912926][T26076] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 1141.912968][T26076] alloc_inode+0x68/0x250 [ 1141.913017][T26076] new_inode+0x22/0x1c0 [ 1141.913068][T26076] __debugfs_create_file+0x105/0x4f0 [ 1141.913124][T26076] debugfs_create_file_full+0x41/0x60 [ 1141.913168][T26076] ref_tracker_dir_debugfs+0x19e/0x2e0 [ 1141.913219][T26076] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 1141.913303][T26076] ? __kvmalloc_node_noprof+0x37b/0xa00 [ 1141.913336][T26076] ? alloc_netdev_mqs+0xd7/0x14f0 [ 1141.913371][T26076] ? lockdep_init_map_type+0x5c/0x250 [ 1141.913426][T26076] ? __pfx_ppp_setup+0x10/0x10 [ 1141.913471][T26076] alloc_netdev_mqs+0x314/0x14f0 [ 1141.913516][T26076] ppp_ioctl+0x906/0x2800 [ 1141.913552][T26076] ? find_held_lock+0x2b/0x80 [ 1141.913587][T26076] ? __pfx_ppp_ioctl+0x10/0x10 [ 1141.913628][T26076] ? __fget_files+0x21f/0x3d0 [ 1141.913670][T26076] ? __pfx_ppp_ioctl+0x10/0x10 [ 1141.913704][T26076] __x64_sys_ioctl+0x18e/0x210 [ 1141.913760][T26076] do_syscall_64+0x106/0xf80 [ 1141.913797][T26076] ? clear_bhb_loop+0x40/0x90 [ 1141.913840][T26076] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1141.913875][T26076] RIP: 0033:0x7f83cd39c819 [ 1141.913903][T26076] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1141.913935][T26076] RSP: 002b:00007f83ce2bb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1141.913966][T26076] RAX: ffffffffffffffda RBX: 00007f83cd615fa0 RCX: 00007f83cd39c819 [ 1141.913989][T26076] RDX: 0000000000000000 RSI: 00000000c004743e RDI: 0000000000000005 [ 1141.914009][T26076] RBP: 00007f83cd432c91 R08: 0000000000000000 R09: 0000000000000000 [ 1141.914030][T26076] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1141.914051][T26076] R13: 00007f83cd616038 R14: 00007f83cd615fa0 R15: 00007fff86d4b8d8 [ 1141.914105][T26076] [ 1141.914119][T26076] debugfs: out of free dentries, can not create file 'netdev@ffff888035e74620' [ 1142.629071][T26102] FAULT_INJECTION: forcing a failure. [ 1142.629071][T26102] name failslab, interval 1, probability 0, space 0, times 0 [ 1142.662439][T26102] CPU: 1 UID: 0 PID: 26102 Comm: syz.4.4299 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1142.662504][T26102] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1142.662519][T26102] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1142.662540][T26102] Call Trace: [ 1142.662552][T26102] [ 1142.662566][T26102] dump_stack_lvl+0x100/0x190 [ 1142.662630][T26102] should_fail_ex.cold+0x5/0xa [ 1142.662675][T26102] should_failslab+0xc2/0x120 [ 1142.662716][T26102] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1142.662774][T26102] ? __proc_create+0x2cb/0x8c0 [ 1142.662819][T26102] __proc_create+0x2cb/0x8c0 [ 1142.662857][T26102] ? __pfx___proc_create+0x10/0x10 [ 1142.662900][T26102] ? _raw_write_unlock+0x28/0x50 [ 1142.662937][T26102] ? proc_register+0x559/0x8a0 [ 1142.662980][T26102] proc_create_reg+0x75/0x170 [ 1142.663022][T26102] proc_create_seq_private+0x8e/0x180 [ 1142.663066][T26102] ? __pfx_proc_create_seq_private+0x10/0x10 [ 1142.663109][T26102] ? __pfx_proc_create_net_data+0x10/0x10 [ 1142.663146][T26102] ? __pfx_uevent_net_rcv+0x10/0x10 [ 1142.663201][T26102] ? __pfx_dev_proc_net_init+0x10/0x10 [ 1142.663257][T26102] dev_proc_net_init+0xac/0x230 [ 1142.663322][T26102] ops_init+0x1e2/0x5f0 [ 1142.663364][T26102] setup_net+0x118/0x3a0 [ 1142.663404][T26102] ? __pfx_setup_net+0x10/0x10 [ 1142.663436][T26102] ? lockdep_init_map_type+0x5c/0x250 [ 1142.663487][T26102] ? mutex_init_lockep+0x110/0x150 [ 1142.663546][T26102] copy_net_ns+0x46f/0x7c0 [ 1142.663592][T26102] create_new_namespaces+0x3ea/0xac0 [ 1142.663642][T26102] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 1142.663687][T26102] ksys_unshare+0x473/0xad0 [ 1142.663736][T26102] ? __pfx_ksys_unshare+0x10/0x10 [ 1142.663814][T26102] __x64_sys_unshare+0x31/0x40 [ 1142.663862][T26102] do_syscall_64+0x106/0xf80 [ 1142.663900][T26102] ? clear_bhb_loop+0x40/0x90 [ 1142.663943][T26102] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1142.663980][T26102] RIP: 0033:0x7f83cd39c819 [ 1142.664008][T26102] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1142.664042][T26102] RSP: 002b:00007f83ce29a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1142.664075][T26102] RAX: ffffffffffffffda RBX: 00007f83cd616090 RCX: 00007f83cd39c819 [ 1142.664099][T26102] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 1142.664120][T26102] RBP: 00007f83cd432c91 R08: 0000000000000000 R09: 0000000000000000 [ 1142.664140][T26102] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1142.664160][T26102] R13: 00007f83cd616128 R14: 00007f83cd616090 R15: 00007fff86d4b8d8 [ 1142.664206][T26102] [ 1143.309395][T26111] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4301'. [ 1145.183495][T26142] kernel profiling enabled (shift: 0) [ 1145.334820][T26151] hub 1-0:1.0: USB hub found [ 1145.343233][T26151] hub 1-0:1.0: 1 port detected [ 1145.504460][T26150] can: request_module (can-proto-5) failed. [ 1145.573234][T26147] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4309'. [ 1146.257143][T26153] FAULT_INJECTION: forcing a failure. [ 1146.257143][T26153] name failslab, interval 1, probability 0, space 0, times 0 [ 1146.355216][T26153] CPU: 1 UID: 0 PID: 26153 Comm: syz.4.4308 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1146.355272][T26153] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1146.355287][T26153] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1146.355308][T26153] Call Trace: [ 1146.355320][T26153] [ 1146.355333][T26153] dump_stack_lvl+0x100/0x190 [ 1146.355393][T26153] should_fail_ex.cold+0x5/0xa [ 1146.355435][T26153] should_failslab+0xc2/0x120 [ 1146.355475][T26153] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1146.355531][T26153] ? __pmd_alloc+0xbf/0x950 [ 1146.355582][T26153] __pmd_alloc+0xbf/0x950 [ 1146.355630][T26153] move_page_tables+0x3224/0x4500 [ 1146.355687][T26153] ? __pfx_copy_vma+0x10/0x10 [ 1146.355755][T26153] ? __pfx_move_page_tables+0x10/0x10 [ 1146.355831][T26153] ? finish_task_switch.isra.0+0x200/0xb80 [ 1146.355879][T26153] copy_vma_and_data+0x25c/0x7c0 [ 1146.355937][T26153] ? __pfx_copy_vma_and_data+0x10/0x10 [ 1146.356006][T26153] ? __vma_start_write+0x17f/0x280 [ 1146.356064][T26153] ? __pfx___vma_start_write+0x10/0x10 [ 1146.356124][T26153] move_vma+0x51b/0x1890 [ 1146.356187][T26153] ? __pfx_move_vma+0x10/0x10 [ 1146.356246][T26153] ? mm_get_unmapped_area_vmflags+0xd7/0x130 [ 1146.356291][T26153] ? cap_mmap_addr+0x4b/0x120 [ 1146.356327][T26153] ? bpf_lsm_mmap_addr+0x9/0x30 [ 1146.356361][T26153] ? security_mmap_addr+0x71/0x1e0 [ 1146.356412][T26153] ? __get_unmapped_area+0x255/0x3e0 [ 1146.356459][T26153] ? vrm_set_new_addr+0x204/0x290 [ 1146.356517][T26153] mremap_to+0x1b7/0x450 [ 1146.356573][T26153] do_mremap+0xb76/0x2130 [ 1146.356647][T26153] ? __pfx_do_mremap+0x10/0x10 [ 1146.356713][T26153] ? ksys_write+0x190/0x250 [ 1146.356759][T26153] __do_sys_mremap+0x126/0x170 [ 1146.356815][T26153] ? __pfx___do_sys_mremap+0x10/0x10 [ 1146.356883][T26153] ? __x64_sys_futex+0x34f/0x4d0 [ 1146.356959][T26153] do_syscall_64+0x106/0xf80 [ 1146.356996][T26153] ? clear_bhb_loop+0x40/0x90 [ 1146.357049][T26153] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1146.357087][T26153] RIP: 0033:0x7f83cd39c819 [ 1146.357117][T26153] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1146.357153][T26153] RSP: 002b:00007f83ce279028 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 1146.357187][T26153] RAX: ffffffffffffffda RBX: 00007f83cd616180 RCX: 00007f83cd39c819 [ 1146.357211][T26153] RDX: 0000000000000004 RSI: 0000000000000004 RDI: 0000200000000000 [ 1146.357233][T26153] RBP: 00007f83cd432c91 R08: 0000000100000000 R09: 0000000000000000 [ 1146.357256][T26153] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 1146.357278][T26153] R13: 00007f83cd616218 R14: 00007f83cd616180 R15: 00007fff86d4b8d8 [ 1146.357324][T26153] [ 1147.003783][T26174] net_ratelimit: 31 callbacks suppressed [ 1147.003807][T26174] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1147.016209][T26174] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1150.113655][T26204] [U] [ 1150.116505][T26204] [U] [ 1150.119275][T26204] [U] [ 1150.122050][T26204] [U] [ 1150.214313][T26204] [U] [ 1150.217203][T26204] [U] [ 1150.219974][T26204] [U] [ 1150.222738][T26204] [U] [ 1150.412771][T26204] [U] [ 1150.415628][T26204] [U] [ 1150.418436][T26204] [U] [ 1150.421201][T26204] [U] [ 1150.527088][T26204] [U] [ 1150.529917][T26204] [U] [ 1150.532823][T26204] [U] [ 1150.535594][T26204] [U] [ 1150.701293][T26204] [U] [ 1150.704052][T26210] vhci_hcd vhci_hcd.2: invalid port number 194 [ 1150.704105][T26204] [U] [ 1150.711031][T26210] vhci_hcd vhci_hcd.2: invalid port number 194 [ 1150.713099][T26204] [U] [ 1150.721901][T26204] [U] [ 1150.914020][T26204] [U] [ 1150.916958][T26204] [U] [ 1150.919701][T26204] [U] [ 1150.922439][T26204] [U] [ 1150.992813][T26204] [U] [ 1151.639075][T26213] netlink: 186 bytes leftover after parsing attributes in process `syz.6.4321'. [ 1153.102454][T26226] FAULT_INJECTION: forcing a failure. [ 1153.102454][T26226] name failslab, interval 1, probability 0, space 0, times 0 [ 1153.173898][T26226] CPU: 1 UID: 0 PID: 26226 Comm: syz.6.4325 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1153.173957][T26226] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1153.173971][T26226] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1153.173992][T26226] Call Trace: [ 1153.174002][T26226] [ 1153.174015][T26226] dump_stack_lvl+0x100/0x190 [ 1153.174076][T26226] should_fail_ex.cold+0x5/0xa [ 1153.174118][T26226] ? __register_sysctl_table+0xbe4/0x1650 [ 1153.174155][T26226] should_failslab+0xc2/0x120 [ 1153.174196][T26226] __kmalloc_noprof+0xe0/0x850 [ 1153.174263][T26226] __register_sysctl_table+0xbe4/0x1650 [ 1153.174309][T26226] ? __pfx___register_sysctl_table+0x10/0x10 [ 1153.174345][T26226] ? is_module_address+0x69/0xf0 [ 1153.174391][T26226] ? register_net_sysctl_sz+0x222/0x430 [ 1153.174450][T26226] ? __asan_memcpy+0x3c/0x60 [ 1153.174506][T26226] sctp_sysctl_net_register+0x15e/0x200 [ 1153.174549][T26226] ? __pfx_sctp_defaults_init+0x10/0x10 [ 1153.174587][T26226] sctp_defaults_init+0x6d2/0xd90 [ 1153.174627][T26226] ? __pfx_sctp_defaults_init+0x10/0x10 [ 1153.174666][T26226] ops_init+0x1e2/0x5f0 [ 1153.174709][T26226] setup_net+0x118/0x3a0 [ 1153.174747][T26226] ? __pfx_setup_net+0x10/0x10 [ 1153.174781][T26226] ? lockdep_init_map_type+0x5c/0x250 [ 1153.174834][T26226] ? mutex_init_lockep+0x110/0x150 [ 1153.174890][T26226] copy_net_ns+0x46f/0x7c0 [ 1153.174937][T26226] create_new_namespaces+0x3ea/0xac0 [ 1153.174985][T26226] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 1153.175031][T26226] ksys_unshare+0x473/0xad0 [ 1153.175080][T26226] ? __pfx_ksys_unshare+0x10/0x10 [ 1153.175143][T26226] __x64_sys_unshare+0x31/0x40 [ 1153.175191][T26226] do_syscall_64+0x106/0xf80 [ 1153.175229][T26226] ? clear_bhb_loop+0x40/0x90 [ 1153.175274][T26226] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1153.175312][T26226] RIP: 0033:0x7fb65599c819 [ 1153.175342][T26226] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1153.175379][T26226] RSP: 002b:00007fb6567ba028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1153.175414][T26226] RAX: ffffffffffffffda RBX: 00007fb655c15fa0 RCX: 00007fb65599c819 [ 1153.175447][T26226] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 1153.175469][T26226] RBP: 00007fb655a32c91 R08: 0000000000000000 R09: 0000000000000000 [ 1153.175490][T26226] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1153.175511][T26226] R13: 00007fb655c16038 R14: 00007fb655c15fa0 R15: 00007fffef378d18 [ 1153.175558][T26226] [ 1153.175573][T26226] sysctl could not get directory: /net/sctp -12 [ 1154.286054][T26237] netlink: 330 bytes leftover after parsing attributes in process `syz.9.4324'. [ 1154.425820][T26237] mac80211_hwsim hwsim45 ›: renamed from wlan0 (while UP) [ 1154.727734][ T10] usb usb40-port2: attempt power cycle [ 1155.101248][T26249] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input36 [ 1155.338190][ T10] usb usb40-port2: unable to enumerate USB device [ 1155.659298][T26255] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4331'. [ 1155.701157][T26255] blktrace: Concurrent blktraces are not allowed on loop2 [ 1155.744585][T26255] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4331'. [ 1158.640415][T26281] netlink: 504 bytes leftover after parsing attributes in process `syz.9.4337'. [ 1160.955259][T26310] blktrace: Concurrent blktraces are not allowed on loop2 [ 1163.183920][T26344] FAULT_INJECTION: forcing a failure. [ 1163.183920][T26344] name failslab, interval 1, probability 0, space 0, times 0 [ 1163.220356][T26344] CPU: 0 UID: 0 PID: 26344 Comm: syz.6.4354 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1163.220414][T26344] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1163.220429][T26344] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1163.220451][T26344] Call Trace: [ 1163.220464][T26344] [ 1163.220478][T26344] dump_stack_lvl+0x100/0x190 [ 1163.220540][T26344] should_fail_ex.cold+0x5/0xa [ 1163.220585][T26344] should_failslab+0xc2/0x120 [ 1163.220626][T26344] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1163.220684][T26344] ? prepare_creds+0x2c/0x950 [ 1163.220748][T26344] prepare_creds+0x2c/0x950 [ 1163.220808][T26344] __do_sys_landlock_restrict_self+0x143/0x9e0 [ 1163.220866][T26344] do_syscall_64+0x106/0xf80 [ 1163.220904][T26344] ? clear_bhb_loop+0x40/0x90 [ 1163.220949][T26344] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1163.220987][T26344] RIP: 0033:0x7fb65599c819 [ 1163.221024][T26344] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1163.221060][T26344] RSP: 002b:00007fb6567ba028 EFLAGS: 00000246 ORIG_RAX: 00000000000001be [ 1163.221094][T26344] RAX: ffffffffffffffda RBX: 00007fb655c15fa0 RCX: 00007fb65599c819 [ 1163.221117][T26344] RDX: 0000000000000000 RSI: 000000000000000b RDI: 0000000000000003 [ 1163.221137][T26344] RBP: 00007fb655a32c91 R08: 0000000000000000 R09: 0000000000000000 [ 1163.221158][T26344] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1163.221179][T26344] R13: 00007fb655c16038 R14: 00007fb655c15fa0 R15: 00007fffef378d18 [ 1163.221223][T26344] [ 1163.866992][T26350] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4353'. [ 1163.934825][T26350] netlink: 'syz.4.4353': attribute type 1 has an invalid length. [ 1163.967890][T26350] netlink: 'syz.4.4353': attribute type 1 has an invalid length. [ 1164.042144][T26350] netlink: 'syz.4.4353': attribute type 1 has an invalid length. [ 1164.242089][T26350] netlink: 'syz.4.4353': attribute type 1 has an invalid length. [ 1164.485727][T26362] FAULT_INJECTION: forcing a failure. [ 1164.485727][T26362] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1164.500390][T26350] netlink: 'syz.4.4353': attribute type 1 has an invalid length. [ 1164.515878][T26362] CPU: 1 UID: 0 PID: 26362 Comm: syz.6.4357 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1164.515935][T26362] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1164.515949][T26362] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1164.515976][T26362] Call Trace: [ 1164.515990][T26362] [ 1164.516003][T26362] dump_stack_lvl+0x100/0x190 [ 1164.516072][T26362] should_fail_ex.cold+0x5/0xa [ 1164.516117][T26362] _copy_from_iter+0x1f4/0x1690 [ 1164.516173][T26362] ? policy_nodemask+0xed/0x4f0 [ 1164.516213][T26362] ? __pfx__copy_from_iter+0x10/0x10 [ 1164.516261][T26362] ? alloc_pages_mpol+0x25a/0x550 [ 1164.516304][T26362] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1164.516354][T26362] copy_page_from_iter+0xde/0x180 [ 1164.516408][T26362] anon_pipe_write+0xae4/0x1d40 [ 1164.516463][T26362] ? __pfx_anon_pipe_write+0x10/0x10 [ 1164.516506][T26362] ? apparmor_file_permission+0x13f/0x1c0 [ 1164.516553][T26362] ? bpf_lsm_file_permission+0x9/0x10 [ 1164.516589][T26362] ? security_file_permission+0x76/0x210 [ 1164.516649][T26362] ? rw_verify_area+0xce/0x6d0 [ 1164.516708][T26362] vfs_write+0x6ac/0x1070 [ 1164.516745][T26362] ? __pfx_anon_pipe_write+0x10/0x10 [ 1164.516789][T26362] ? __pfx_vfs_write+0x10/0x10 [ 1164.516822][T26362] ? find_held_lock+0x2b/0x80 [ 1164.516884][T26362] ksys_write+0x1f8/0x250 [ 1164.516921][T26362] ? __pfx_ksys_write+0x10/0x10 [ 1164.516968][T26362] do_syscall_64+0x106/0xf80 [ 1164.517005][T26362] ? clear_bhb_loop+0x40/0x90 [ 1164.517049][T26362] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1164.517086][T26362] RIP: 0033:0x7fb65599c819 [ 1164.517115][T26362] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1164.517156][T26362] RSP: 002b:00007fb656799028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1164.517190][T26362] RAX: ffffffffffffffda RBX: 00007fb655c16090 RCX: 00007fb65599c819 [ 1164.517213][T26362] RDX: 0000000080000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 1164.517235][T26362] RBP: 00007fb655a32c91 R08: 0000000000000000 R09: 0000000000000000 [ 1164.517257][T26362] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1164.517279][T26362] R13: 00007fb655c16128 R14: 00007fb655c16090 R15: 00007fffef378d18 [ 1164.517325][T26362] [ 1164.748814][T26350] netlink: 'syz.4.4353': attribute type 1 has an invalid length. [ 1165.494653][T26369] usbcore.quirks: string doesn't fit in 127 chars. [ 1166.327823][T26370] netlink: 28 bytes leftover after parsing attributes in process `syz.8.4358'. [ 1166.351325][T26370] ipvlan1: entered promiscuous mode [ 1166.356627][T26370] ipvlan1: entered allmulticast mode [ 1166.399396][T26370] veth0_vlan: entered allmulticast mode [ 1167.584958][T26406] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4367'. [ 1169.247148][T26413] ecryptfs_miscdev_write: Invalid packet size [0] [ 1170.295837][T26442] block2mtd: error: cannot open device çinX‘©¼Ëò¨±ÂÚjFBçB>U»;߸³Ilk¬ [ 1172.014050][T26464] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4380'. [ 1176.114124][T26524] netlink: 'syz.4.4395': attribute type 2 has an invalid length. [ 1176.922605][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1176.929235][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1177.009022][T26538] netlink: 504 bytes leftover after parsing attributes in process `syz.4.4400'. [ 1178.378071][T26563] netlink: 330 bytes leftover after parsing attributes in process `syz.4.4404'. [ 1178.453274][T18046] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1178.471254][T18046] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1178.484512][T18046] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1178.515511][T18046] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1178.524970][T18046] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1179.928228][T26566] chnl_net:caif_netlink_parms(): no params data found [ 1180.235151][T26566] bridge0: port 1(bridge_slave_0) entered blocking state [ 1180.287878][T26566] bridge0: port 1(bridge_slave_0) entered disabled state [ 1180.295241][T26566] bridge_slave_0: entered allmulticast mode [ 1180.360412][T26566] bridge_slave_0: entered promiscuous mode [ 1180.384894][T26566] bridge0: port 2(bridge_slave_1) entered blocking state [ 1180.420355][T26566] bridge0: port 2(bridge_slave_1) entered disabled state [ 1180.436658][T26566] bridge_slave_1: entered allmulticast mode [ 1180.456874][T26566] bridge_slave_1: entered promiscuous mode [ 1180.581243][T26566] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1180.637421][T26566] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1180.655261][T15096] Bluetooth: hci7: command tx timeout [ 1180.824558][T26566] team0: Port device team_slave_0 added [ 1180.850995][T26566] team0: Port device team_slave_1 added [ 1181.206807][T26566] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1181.214039][T26566] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1181.241071][T26566] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1181.257414][T26566] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1181.273704][T26566] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1181.351406][T26566] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1181.596833][T26566] hsr_slave_0: entered promiscuous mode [ 1181.630105][T26566] hsr_slave_1: entered promiscuous mode [ 1182.726722][T15096] Bluetooth: hci7: command tx timeout [ 1183.053727][T26628] binder: 26619:26628 ioctl c00c620f 2000000001c0 returned -22 [ 1184.072421][T26566] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1184.102837][T26566] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1184.216536][T26566] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1184.246137][T26566] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1184.793897][T15096] Bluetooth: hci7: command tx timeout [ 1185.546358][T26685] netlink: 'syz.8.4422': attribute type 1 has an invalid length. [ 1185.596204][T26685] netlink: 33 bytes leftover after parsing attributes in process `syz.8.4422'. [ 1185.698270][T26566] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1185.921310][T26566] 8021q: adding VLAN 0 to HW filter on device team0 [ 1186.024322][T24761] bridge0: port 1(bridge_slave_0) entered blocking state [ 1186.031688][T24761] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1186.188999][T24748] bridge0: port 2(bridge_slave_1) entered blocking state [ 1186.196270][T24748] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1186.450436][T26707] netlink: 504 bytes leftover after parsing attributes in process `syz.4.4424'. [ 1186.533036][T26713] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 1186.862810][T15096] Bluetooth: hci7: command tx timeout [ 1187.203167][T26726] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4427'. [ 1187.225137][T26566] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1187.263511][T26725] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4427'. [ 1188.157902][T26566] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1188.410051][T26566] veth0_vlan: entered promiscuous mode [ 1188.588501][T26566] veth1_vlan: entered promiscuous mode [ 1188.983302][T26566] veth0_macvtap: entered promiscuous mode [ 1189.012697][ T31] INFO: task syz.3.3946:24369 blocked for more than 142 seconds. [ 1189.028736][ T31] Tainted: G U L syzkaller #0 [ 1189.051967][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1189.060705][ T31] task:syz.3.3946 state:D stack:27672 pid:24369 tgid:24356 ppid:16289 task_flags:0x400140 flags:0x00080002 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1189.089710][T26566] veth1_macvtap: entered promiscuous mode [ 1189.099375][ T31] Call Trace: [ 1189.115257][ T31] [ 1189.118282][ T31] __schedule+0xfee/0x6120 [ 1189.206607][ T31] ? __lock_acquire+0x4a5/0x2630 [ 1189.215983][ T31] ? __pfx___schedule+0x10/0x10 [ 1189.222077][ T31] ? find_held_lock+0x2b/0x80 [ 1189.227619][ T31] ? schedule+0x2bf/0x390 [ 1189.232450][ T31] schedule+0xdd/0x390 [ 1189.236733][ T31] schedule_preempt_disabled+0x13/0x30 [ 1189.242394][ T31] __mutex_lock+0xc9a/0x1b90 [ 1189.247479][ T31] ? rcu_is_watching+0x12/0xc0 [ 1189.253481][ T31] ? trace_kmalloc+0x101/0x130 [ 1189.258560][ T31] ? nfsd_nl_version_get_doit+0x18c/0x7f0 [ 1189.264636][ T31] ? __kmalloc_node_track_caller_noprof+0x321/0x850 [ 1189.274756][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1189.279872][ T31] ? kmalloc_reserve+0xf9/0x350 [ 1189.310077][ T31] ? skb_put+0x138/0x180 [ 1189.314439][ T31] ? __nlmsg_put+0x152/0x1c0 [ 1189.319249][ T31] ? nfsd_nl_version_get_doit+0x18c/0x7f0 [ 1189.390882][ T31] nfsd_nl_version_get_doit+0x18c/0x7f0 [ 1189.403410][ T31] ? is_bpf_text_address+0x94/0x1a0 [ 1189.453208][ T31] ? kernel_text_address+0x8d/0x100 [ 1189.458498][ T31] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1189.495916][ T31] ? __kernel_text_address+0xd/0x30 [ 1189.523365][ T31] ? __pfx_nfsd_nl_version_get_doit+0x10/0x10 [ 1189.530938][T26566] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1189.576189][T26566] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1189.578685][ T31] ? arch_stack_walk+0xa6/0xf0 [ 1189.665409][ T31] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1aa/0x280 [ 1189.678700][ T31] genl_family_rcv_msg_doit+0x214/0x300 [ 1189.688657][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1189.695031][ T31] ? genl_get_cmd+0x3ef/0x720 [ 1189.709711][ T31] ? kasan_save_track+0x14/0x30 [ 1189.714699][ T31] ? __kasan_slab_alloc+0x89/0x90 [ 1189.770236][ T31] ? __radix_tree_lookup+0x217/0x2b0 [ 1189.775648][ T31] genl_rcv_msg+0x560/0x800 [ 1189.813203][T24761] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1189.837740][T24761] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1189.849709][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1189.855178][ T31] ? __pfx_nfsd_nl_version_get_doit+0x10/0x10 [ 1189.881165][T24761] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1189.923568][ T31] ? __lock_acquire+0x4a5/0x2630 [ 1189.928972][ T31] netlink_rcv_skb+0x159/0x420 [ 1189.936005][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1189.941557][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1190.006259][ T31] ? netlink_deliver_tap+0x1ae/0xcc0 [ 1190.064139][T24761] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1190.074362][ T31] genl_rcv+0x28/0x40 [ 1190.086559][ T31] netlink_unicast+0x5aa/0x870 [ 1190.091498][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 1190.105468][ T31] netlink_sendmsg+0x8b0/0xda0 [ 1190.110696][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1190.116149][ T31] ? __import_iovec+0x1d2/0x640 [ 1190.121688][ T31] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 1190.128146][ T31] ____sys_sendmsg+0x9e1/0xb70 [ 1190.133489][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1190.139019][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1190.144879][ T31] ? try_to_wake_up+0x644/0x1a80 [ 1190.150287][ T31] ___sys_sendmsg+0x190/0x1e0 [ 1190.155376][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 1190.161393][ T31] ? futex_private_hash_put+0x107/0x1c0 [ 1190.167394][ T31] __sys_sendmsg+0x170/0x220 [ 1190.172199][ T31] ? __pfx___sys_sendmsg+0x10/0x10 [ 1190.177767][ T31] ? __x64_sys_futex+0x34f/0x4d0 [ 1190.225557][ T31] do_syscall_64+0x106/0xf80 [ 1190.245255][ T31] ? clear_bhb_loop+0x40/0x90 [ 1190.294513][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1190.301672][ T31] RIP: 0033:0x7f9d5b59c819 [ 1190.306262][ T31] RSP: 002b:00007f9d5c373028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1190.314780][ T31] RAX: ffffffffffffffda RBX: 00007f9d5b816270 RCX: 00007f9d5b59c819 [ 1190.322808][ T31] RDX: 00000000240480c0 RSI: 00002000000000c0 RDI: 0000000000000004 [ 1190.330928][ T31] RBP: 00007f9d5b632c91 R08: 0000000000000000 R09: 0000000000000000 [ 1190.385236][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1190.404725][ T31] R13: 00007f9d5b816308 R14: 00007f9d5b816270 R15: 00007ffc1327ed78 [ 1190.434246][ T31] [ 1190.449008][ T31] [ 1190.449008][ T31] Showing all locks held in the system: [ 1190.498972][ T31] 1 lock held by khungtaskd/31: [ 1190.552418][ T31] #0: ffffffff8e7e7760 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 1190.663810][ T31] 2 locks held by sshd-session/5811: [ 1190.669877][ T31] 3 locks held by kworker/u9:0/15096: [ 1190.722887][ T31] #0: ffff888036c2a948 ((wq_completion)hci8){+.+.}-{0:0}, at: process_one_work+0x1310/0x19a0 [ 1190.777297][ T31] #1: ffffc90008497d08 ((work_completion)(&hdev->power_on)){+.+.}-{0:0}, at: process_one_work+0x988/0x19a0 [ 1190.862970][ T31] #2: ffff888081d2cec0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_dev_do_open+0x22/0xb0 [ 1190.899931][ T31] 2 locks held by getty/18544: [ 1190.911203][ T31] #0: ffff888037ca30a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 1190.951903][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x1500 [ 1190.996418][ T31] 2 locks held by syz.6.3432/21847: [ 1191.011360][ T31] 2 locks held by syz.0.3546/22390: [ 1191.017838][ T31] #0: ffffffff906c3670 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1191.031349][ T31] #1: ffffffff8ec58ea8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0xd5/0x1a80 [ 1191.046066][ T31] 2 locks held by syz.3.3946/24369: [ 1191.052541][ T31] #0: ffffffff906c3670 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1191.061625][ T31] #1: ffffffff8ec58ea8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_version_get_doit+0x18c/0x7f0 [ 1191.071987][ T31] 2 locks held by syz.7.4001/24616: [ 1191.077760][ T31] #0: ffffffff906c3670 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1191.088102][ T31] #1: ffffffff8ec58ea8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x6c1/0xc00 [ 1191.098360][ T31] 6 locks held by kworker/u8:25/24750: [ 1191.106481][ T31] #0: ffff8880b843b360 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x88/0x140 [ 1191.118331][ T31] #1: ffff88802c3e2008 (&____s->seqcount#18){.-.-}-{0:0}, at: trace_ignore_this_task+0xbc/0x100 [ 1191.131893][ T31] #2: ffff8880b8426358 (&base->lock){-.-.}-{2:2}, at: __mod_timer+0x6e7/0xca0 [ 1191.141358][ T31] #3: ffffffff9b3feac0 (&obj_hash[i].lock){-.-.}-{2:2}, at: debug_object_activate+0x144/0x490 [ 1191.154202][ T31] #4: ffffffff8e69ddc8 (text_mutex){+.+.}-{4:4}, at: arch_jump_label_transform_apply+0x17/0x30 [ 1191.169702][ T31] #5: ffffffff8e7e7760 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x2f/0x310 [ 1191.180588][ T31] 4 locks held by kworker/u8:52/24765: [ 1191.186121][ T31] #0: ffff88801c6b6948 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x1310/0x19a0 [ 1191.196791][ T31] #1: ffffc90003e6fd08 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x988/0x19a0 [ 1191.207659][ T31] #2: ffffffff905fead0 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xb8/0x920 [ 1191.221602][ T31] #3: ffffffff90617328 (rtnl_mutex){+.+.}-{4:4}, at: wg_netns_pre_exit+0x1b/0x250 [ 1191.231188][ T31] 3 locks held by kworker/u8:56/24767: [ 1191.236699][ T31] #0: ffff888032ed7948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x1310/0x19a0 [ 1191.248344][ T31] #1: ffffc90003e8fd08 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_one_work+0x988/0x19a0 [ 1191.261182][ T31] #2: ffffffff90617328 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_dad_work+0x11f/0x1360 [ 1191.274753][ T31] 2 locks held by syz.9.4352/26339: [ 1191.281630][ T31] #0: ffffffff906c3670 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1191.290313][ T31] #1: ffffffff8ec58ea8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x6c1/0xc00 [ 1191.300801][ T31] 1 lock held by syz-executor/26566: [ 1191.306157][ T31] #0: ffffffff90617328 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x30c/0x18b0 [ 1191.316593][ T31] 3 locks held by syz.4.4431/26747: [ 1191.323828][ T31] #0: ffffffff905fead0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x451/0x7c0 [ 1191.335508][ T31] #1: ffffffff90617328 (rtnl_mutex){+.+.}-{4:4}, at: ops_undo_list+0x7ec/0xab0 [ 1191.346541][ T31] #2: ffffffff8e7f32b8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x27f/0x3c0 [ 1191.357061][ T31] 1 lock held by syz.8.4432/26763: [ 1191.362867][ T31] #0: ffffffff8e7f32b8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x19e/0x3c0 [ 1191.374563][ T31] 2 locks held by syz.6.4433/26761: [ 1191.383602][ T31] #0: ffffffff905fead0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x451/0x7c0 [ 1191.393530][ T31] #1: ffffffff90617328 (rtnl_mutex){+.+.}-{4:4}, at: wg_netns_pre_exit+0x1b/0x250 [ 1191.404122][ T31] 1 lock held by rm/26786: [ 1191.453340][ T31] [ 1191.455748][ T31] ============================================= [ 1191.455748][ T31] [ 1191.519097][ T31] NMI backtrace for cpu 1 [ 1191.519128][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G U L syzkaller #0 PREEMPT(full) [ 1191.519177][ T31] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1191.519189][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1191.519209][ T31] Call Trace: [ 1191.519220][ T31] [ 1191.519232][ T31] dump_stack_lvl+0x100/0x190 [ 1191.519288][ T31] nmi_cpu_backtrace.cold+0x12d/0x151 [ 1191.519346][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1191.519398][ T31] nmi_trigger_cpumask_backtrace+0x1d7/0x230 [ 1191.519453][ T31] sys_info+0x141/0x190 [ 1191.519495][ T31] watchdog+0xd25/0x1050 [ 1191.519542][ T31] ? __pfx_watchdog+0x10/0x10 [ 1191.519578][ T31] ? __kthread_parkme+0x18c/0x230 [ 1191.519622][ T31] ? kthread+0x13a/0x450 [ 1191.519666][ T31] ? __pfx_watchdog+0x10/0x10 [ 1191.519699][ T31] kthread+0x370/0x450 [ 1191.519744][ T31] ? __pfx_kthread+0x10/0x10 [ 1191.519793][ T31] ret_from_fork+0x754/0xd80 [ 1191.519856][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1191.519913][ T31] ? __switch_to+0x7b4/0x1120 [ 1191.519952][ T31] ? __pfx_kthread+0x10/0x10 [ 1191.520001][ T31] ret_from_fork_asm+0x1a/0x30 [ 1191.520059][ T31] [ 1191.520072][ T31] Sending NMI from CPU 1 to CPUs 0: [ 1191.656828][ C0] NMI backtrace for cpu 0 [ 1191.656853][ C0] CPU: 0 UID: 0 PID: 26747 Comm: syz.4.4431 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1191.656894][ C0] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1191.656904][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1191.656921][ C0] RIP: 0010:__lock_acquire+0xf9/0x2630 [ 1191.656961][ C0] Code: 8f 49 c1 fd 03 4c 0f af e8 89 c8 48 8d 1c 80 48 8d 85 58 0b 00 00 48 c1 e3 03 85 c9 0f 84 8a 06 00 00 f6 84 24 c8 00 00 00 01 <48> 89 04 24 75 1f 48 8d b4 1d 30 0b 00 00 0f b7 46 20 25 ff 1f 00 [ 1191.656988][ C0] RSP: 0018:ffffc90002657768 EFLAGS: 00000046 [ 1191.657009][ C0] RAX: ffff888059cc4858 RBX: 0000000000000078 RCX: 0000000000000003 [ 1191.657026][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff8e7e7760 [ 1191.657043][ C0] RBP: ffff888059cc3d00 R08: 0000000000000000 R09: 0000000000000000 [ 1191.657066][ C0] R10: ffffffff8e7e7760 R11: 0000000000000001 R12: 0000000000000000 [ 1191.657082][ C0] R13: 0000000000000007 R14: 0000000000000002 R15: 0000000000000000 [ 1191.657099][ C0] FS: 00007f83ce2bb6c0(0000) GS:ffff888124340000(0000) knlGS:0000000000000000 [ 1191.657124][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1191.657141][ C0] CR2: 00007fde9c1a1eb8 CR3: 0000000040efc000 CR4: 00000000003526f0 [ 1191.657159][ C0] Call Trace: [ 1191.657168][ C0] [ 1191.657178][ C0] ? __lock_acquire+0x4a5/0x2630 [ 1191.657218][ C0] lock_acquire+0x1cf/0x380 [ 1191.657251][ C0] ? kernfs_root+0x23/0x2a0 [ 1191.657290][ C0] ? kernfs_root+0xee/0x2a0 [ 1191.657327][ C0] ? kernfs_root+0xee/0x2a0 [ 1191.657367][ C0] kernfs_root+0x34/0x2a0 [ 1191.657404][ C0] ? kernfs_root+0x23/0x2a0 [ 1191.657442][ C0] kernfs_next_descendant_post+0x61/0x4b0 [ 1191.657487][ C0] __kernfs_remove+0x120/0x910 [ 1191.657527][ C0] ? kernfs_find_ns+0x283/0x540 [ 1191.657568][ C0] kernfs_remove_by_name_ns+0x68/0xf0 [ 1191.657599][ C0] sysfs_unmerge_group+0xe7/0x170 [ 1191.657641][ C0] dpm_sysfs_remove+0x7f/0xb0 [ 1191.657679][ C0] device_del+0x180/0x9b0 [ 1191.657710][ C0] ? __pfx_device_del+0x10/0x10 [ 1191.657746][ C0] ? netdev_unregister_kobject+0x2da/0x540 [ 1191.657783][ C0] unregister_netdevice_many_notify+0x1817/0x2580 [ 1191.657824][ C0] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 1191.657859][ C0] ? bond_net_exit_rtnl+0xff/0x3a0 [ 1191.657902][ C0] ? mutex_is_locked+0x17/0x60 [ 1191.657941][ C0] ops_undo_list+0x8ff/0xab0 [ 1191.657970][ C0] ? kfree+0x180/0x6b0 [ 1191.658005][ C0] ? __pfx_ops_undo_list+0x10/0x10 [ 1191.658034][ C0] ? ops_init+0x2fa/0x5f0 [ 1191.658068][ C0] setup_net+0x1fa/0x3a0 [ 1191.658095][ C0] ? __pfx_setup_net+0x10/0x10 [ 1191.658121][ C0] ? lockdep_init_map_type+0x5c/0x250 [ 1191.658158][ C0] ? mutex_init_lockep+0x110/0x150 [ 1191.658196][ C0] copy_net_ns+0x46f/0x7c0 [ 1191.658227][ C0] create_new_namespaces+0x3ea/0xac0 [ 1191.658260][ C0] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 1191.658291][ C0] ksys_unshare+0x473/0xad0 [ 1191.658325][ C0] ? __pfx_ksys_unshare+0x10/0x10 [ 1191.658365][ C0] __x64_sys_unshare+0x31/0x40 [ 1191.658399][ C0] do_syscall_64+0x106/0xf80 [ 1191.658426][ C0] ? clear_bhb_loop+0x40/0x90 [ 1191.658456][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1191.658483][ C0] RIP: 0033:0x7f83cd39c819 [ 1191.658504][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1191.658530][ C0] RSP: 002b:00007f83ce2bb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1191.658554][ C0] RAX: ffffffffffffffda RBX: 00007f83cd615fa0 RCX: 00007f83cd39c819 [ 1191.658572][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 1191.658589][ C0] RBP: 00007f83cd432c91 R08: 0000000000000000 R09: 0000000000000000 [ 1191.658605][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1191.658621][ C0] R13: 00007f83cd616038 R14: 00007f83cd615fa0 R15: 00007fff86d4b8d8 [ 1191.658648][ C0] [ 1191.660890][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 1191.660970][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G U L syzkaller #0 PREEMPT(full) [ 1191.661105][ T31] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1191.661148][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1191.661205][ T31] Call Trace: [ 1191.661239][ T31] [ 1191.661275][ T31] dump_stack_lvl+0x100/0x190 [ 1191.661421][ T31] vpanic+0x552/0x970 [ 1191.661512][ T31] ? __pfx_vpanic+0x10/0x10 [ 1191.661636][ T31] ? rcu_is_watching+0x12/0xc0 [ 1191.661819][ T31] panic+0xd1/0xe0 [ 1191.661907][ T31] ? __pfx_panic+0x10/0x10 [ 1191.662011][ T31] ? nmi_trigger_cpumask_backtrace+0x1b5/0x230 [ 1191.662157][ T31] ? nmi_trigger_cpumask_backtrace+0x1f6/0x230 [ 1191.662292][ T31] ? nmi_trigger_cpumask_backtrace+0x200/0x230 [ 1191.662417][ T31] ? watchdog.cold+0x198/0x1ca [ 1191.662523][ T31] ? watchdog+0xd35/0x1050 [ 1191.662622][ T31] watchdog.cold+0x1a9/0x1ca [ 1191.662749][ T31] ? __pfx_watchdog+0x10/0x10 [ 1191.662861][ T31] ? __kthread_parkme+0x18c/0x230 [ 1191.662975][ T31] ? kthread+0x13a/0x450 [ 1192.161329][ T31] ? __pfx_watchdog+0x10/0x10 [ 1192.166058][ T31] kthread+0x370/0x450 [ 1192.170196][ T31] ? __pfx_kthread+0x10/0x10 [ 1192.174846][ T31] ret_from_fork+0x754/0xd80 [ 1192.179497][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1192.184667][ T31] ? __switch_to+0x7b4/0x1120 [ 1192.189399][ T31] ? __pfx_kthread+0x10/0x10 [ 1192.194041][ T31] ret_from_fork_asm+0x1a/0x30 [ 1192.198869][ T31] [ 1192.202554][ T31] Kernel Offset: disabled [ 1192.206920][ T31] Rebooting in 86400 seconds..