last executing test programs: 13m55.112884729s ago: executing program 1 (id=1506): mmap$auto(0x0, 0x9, 0xdf, 0xeb1, 0x1, 0x8000) r0 = socketpair$auto(0x3, 0x5, 0x7, 0x0) r1 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000000c0), r0) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="f51e2abd7000fddb020000004c49a43026"], 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x2000000) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) r2 = socket(0xa, 0x3, 0x3b) connect$auto(0x3, 0x0, 0x58) mmap$auto(0x0, 0x400006, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) sysfs$auto(0x2, 0x100000000000029, 0x0) r3 = fsopen$auto(0x0, 0x1) close_range$auto(0x2, 0x8, 0x5) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0) mknod$auto(&(0x7f0000000040)='./file0\x00', 0x1001, 0x5) open(&(0x7f0000000000)='./file0\x00', 0x101800, 0xbf) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) r4 = socket(0x21, 0x2, 0x2) statx$auto(0xffffff9c, 0x0, 0x1000, 0x1, 0x0) close_range$auto(0x2, 0x8, 0x0) r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000140), 0x8f80, 0x0) ioctl$auto_KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$auto(0x3, 0x40a0ae49, r4) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) getcwd$auto(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000000c0), r3) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'rose0\x00'}) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_wireguard(&(0x7f0000000080), r6) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'vlan1\x00'}) 13m54.798567349s ago: executing program 1 (id=1509): mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) r0 = socket(0x2, 0x2, 0x0) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) mmap$auto(0x0, 0x400408, 0xdf, 0x9b72, 0x2, 0x8000) (async) mmap$auto(0x0, 0x400408, 0xdf, 0x9b72, 0x2, 0x8000) bind$auto(0x3, 0x0, 0x6a) sendto$auto(0xffffffffffffffff, 0x0, 0x401, 0x7f, 0x0, 0x1c) (async) sendto$auto(0xffffffffffffffff, 0x0, 0x401, 0x7f, 0x0, 0x1c) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sda\x00', 0x0, 0x0) (async) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sda\x00', 0x0, 0x0) capget$auto(0x0, 0xfffffffffffffffe) capset$auto(0x0, &(0x7f0000000000)={0x2, 0x10000002, 0x6}) ioctl$auto(r1, 0x401870cb, r1) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x50) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) (async) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) (async) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x801, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0xe8, 0x9, 0x2, 0x1, 0x5, 0x4, 0x15f4da0e, 0x8, 0x9, 0x100000000000000c, 0x8, 0x1, 0xfca, 0x9, 0x2, 0x4000000000000d]}, 0x0) pwrite64$auto(0xc8, &(0x7f0000000340)='\vX\xb5n\x91p\xe6\x1eRNM\x99\x86\xdde\x1cJ\x99\x00\x00\x00\x00,\x00\xfd\xfd\xd3\xd3\x1d\xf8\xbe\x01\x00\x00\x00\'\x03\x00\x00\x9f\x1e\xf9\xa4*\x01\x00\x00\x00^B\xb8\xe4j\t,\xe4\x90\xcc\x9d\xc5\x0fo\x84\xf4\x89\v\xea\x1b\x95\xafQ;CL\"\x01@\x00\x00\x00\x00\f\x00\xc0\x13\xc8\xe2\xae\xf5\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8d\x81\x81O*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,8\x93\xba\x88\x93\x9d\xb6\x1a\x7f\xc0%\xb0\x83ROJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd6eWj\xdc\xac\x88\xf0\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00\x00\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x17\x95\xc5\xc0\x1f\xdd\xe8\xc2\xdd\xc3S\xc9\xbbd\xb6JM&\xcf\x91\xd9S\x97\xe2\xe2\x1c(Mi\xcd\r0;\xd7\r\xdauVKz+\xc6\x11\x8e4(\xf0+\xff\x8b\x94\x02Tjw\x14\"\x9e\xeb\xd7\xb3\x8c\xf21\x10\xb5\x96\xf3\xedT0i\x950]\xf0\xe2{\xdc\x9e\xae\xb0\x1eG\x8d\xad\xa5\x8c=\x06\x98=\xb85\xcd\x7f~\'\x02dGX\xac-\xf6{\xf5\xd8\xa3\x04\x99\xb2\xd5\x1bx\xf50}P\x96\x9dA\x12M%\f*\xb9z[\xe2\xf8\xe0\xdb\xe9\xc4\xfe\xbe!\xd8\xc6\xd5\xe23\xe3qC \x19\xee\xe5V{rj\xb4Q\x1c\x9f\x81o\x01\x96\xadH\xdf\xa7\xd4\xea\xadr\xfd\x898\xe0+\xf2\x9f!~\xd2\f\xdeb\xd0\x8e\xa24Ez\xa3\xa2\xeb\xc7\x9bL', 0xfdf0, 0x39) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) bind$auto(r0, &(0x7f0000000240)=@sco, 0xfffffffb) getsockopt$auto_SO_RCVMARK(r2, 0x0, 0x4b, &(0x7f0000000000)='}\'.^\x00', &(0x7f00000000c0)=0x7) (async) getsockopt$auto_SO_RCVMARK(r2, 0x0, 0x4b, &(0x7f0000000000)='}\'.^\x00', &(0x7f00000000c0)=0x7) mmap$auto(0x0, 0x40009, 0x36, 0x9b72, 0x7, 0x28000) mmap$auto(0x0, 0x800400007, 0x65d, 0xffff, 0xffffffffffffffff, 0x20000000) (async) mmap$auto(0x0, 0x800400007, 0x65d, 0xffff, 0xffffffffffffffff, 0x20000000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ram6\x00', 0xc6fc1, 0x0) (async) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ram6\x00', 0xc6fc1, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) write$auto(0x3, 0x0, 0x7fffffff) r3 = epoll_create$auto(0x5) fremovexattr$auto(r3, &(0x7f0000000000)='&\x00') (async) fremovexattr$auto(r3, &(0x7f0000000000)='&\x00') read$auto_v4l2_fops_v4l2_dev(r3, &(0x7f0000000280)=""/54, 0x36) openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, 0x0, 0x200, 0x0) close_range$auto(0x2, 0x8000, 0x0) (async) close_range$auto(0x2, 0x8000, 0x0) 13m53.668791944s ago: executing program 1 (id=1513): r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) getpid() (async) r1 = getpid() close_range$auto(0x2, 0xa, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_ovs_ct_limit(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_DEL_INTERFACE(r2, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x18, 0x0, 0x8, 0x70bd28, 0x25dfdbff, {}, [@NL80211_ATTR_DISABLE_VHT={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x2004}, 0x80) sendmsg$auto_OVS_CT_LIMIT_CMD_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002180)={0x2e0, r3, 0x1, 0x51bd2e, 0x25dfcbfb, {}, [@OVS_CT_LIMIT_ATTR_ZONE_LIMIT={0x4}, @OVS_CT_LIMIT_ATTR_ZONE_LIMIT={0x2c8, 0x1, 0x0, 0x1, [@nested={0x4, 0x6}, @nested={0x2bd, 0x4, 0x0, 0x1, [@generic="fc921cf096b39f43034e2db36a74c0ade1e6a4dafab35aa84881d05d1662bd8a8f48943ea4276b7e1465958d17dd9c9706336d0f4a94c7de9fa79cb659b67f43fa331b6f98fa8ad43a943eac1b528ba83992018ecb03ba5dba6660c32c87b1dc86b69a7f6e747504f11d7688a74c47a4ba", @nested={0x248, 0x122, 0x0, 0x1, [@typed={0x4, 0x3b}, @nested={0x240, 0x8b, 0x0, 0x1, [@typed={0x8, 0x26, 0x0, 0x0, @fd=r2}, @typed={0x8, 0x6e, 0x0, 0x0, @ipv4=@local}, @nested={0x22c, 0xbc, 0x0, 0x1, [@nested={0x228, 0x98, 0x0, 0x1, [@nested={0x222, 0x142, 0x0, 0x1, [@generic="4b8ef4dea62052d4391e1b7fcd2429f7195770e4ca6f21844850ff750ce04caf301dc66838e61817fb1f807d53f524a2ac569f0f1c754ec84650d22b883479398e9d766ecc3fa8de0f83e8f703cb19a0826ec7c4949c87bab590c6305dc6f742accc66d7f2c47d87ec1d7fde707f", @typed={0x71, 0x137, 0x0, 0x0, @binary="6af15d7fa2ec9194354a1069b7c806492e043fa1fdad718d351a10ddade114048ff1302faa59a651c349c5ec3cede0e3949d48b97b2bd1d493852ed30d3a7c2cead7511ef0c8d71cb13b68fb7475ceac2b9816379110f6b4d10d69aea84f032ee4c179ba7929c5d06329cbdf05"}, @nested={0x4, 0x34}, @nested={0x4d, 0x11f, 0x0, 0x1, [@nested={0x4, 0xf1}, @nested={0x4, 0x6c}, @generic="0d7112532deb3ef76f18436c6041ed69a31df55778585e94b7244ba30fca32a34652fd3f440a97d881a3e6c962f72b82c506b0f9531ca4e8321faaa8982bbdfd85"]}, @nested={0xe5, 0x7d, 0x0, 0x1, [@typed={0x8, 0xe4, 0x0, 0x0, @uid}, @nested={0x4, 0xaf}, @generic="cee0bd49dab2a617b70e1a2e040e6ba448f301800a8999cec0bec67eb0617ad3f9a0977d09fa35f0e26b923a2713f1104ff7a5b18a2629bbee5de69b17f06e13870462f79e9deb527b97fd65fc8b156b0f525dfca9340f14dc75ef0881c14f5b87a6c615ee754d72289dcac3c3", @typed={0x8, 0x2b, 0x0, 0x0, @pid}, @nested={0x60, 0xf6, 0x0, 0x1, [@nested={0x4, 0x148}, @generic="f6c5cccd25852c755b4331229a68ba8457bb2c5bc855fc277901cc018a78610faf86906cfd8f50da20a3cfe74a23710a32b0bd28cfddfe8fbcc03a4f9178ec9a", @nested={0x4, 0xde}, @nested={0x4, 0x43}, @nested={0x4, 0x78}, @typed={0xc, 0xa7, 0x0, 0x0, @u64=0xfffffffffffffffe}]}]}]}]}]}]}]}]}]}]}, 0x2e0}, 0x1, 0x0, 0x0, 0x50}, 0x4) mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x2, 0x0) (async) socket(0xa, 0x2, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x55) (async) open(0x0, 0x22240, 0x55) r4 = socket(0xa, 0x3, 0x87) close_range$auto(0x2, 0xa, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$auto(0x3, 0x1, 0x21, 0x0, 0x9) syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000040), r5) mq_notify$auto(0x5cf5, &(0x7f00000006c0)={@sival_ptr=0x0, @inferred=r4, 0x2, @_sigev_thread={0x0, 0x0}}) close_range$auto(0x2, 0x8, 0x0) process_vm_readv$auto(r1, &(0x7f0000000000)={0x0, 0x91f5}, 0x800000001, &(0x7f0000000280)={&(0x7f0000001040)="837c43558323eadb4246897524000000000000000000000000000054", 0x1ffffffff}, 0x6, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) (async) r6 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$auto(0x3, 0x4040ae79, r0) (async) ioctl$auto(0x3, 0x4040ae79, r0) 13m50.802785882s ago: executing program 1 (id=1518): mmap$auto(0x800000, 0x202000b, 0x4, 0x15, 0xfffffffffffffffa, 0x0) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x2000, 0x0) ioctl$auto(r0, 0x4b49, 0xffffffffffffffff) openat$auto_console_fops_tty_io(0xffffffffffffff9c, 0x0, 0x4000, 0x0) socket(0xa, 0x3, 0x3b) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) sysfs$auto(0x2, 0x23, 0x0) r1 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/set_event\x00', 0x20201, 0x0) write$auto(r1, 0x0, 0x3) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mlock$auto(0xfff, 0xde7f) mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb2, 0x8000000401, 0x8000) io_uring_setup$auto(0x1, 0x0) futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0x80000001) r2 = gettid() futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0x80000001) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) kill$auto(r2, 0x11) sendmmsg$auto(0xffffffffffffffff, 0x0, 0x1ff, 0x20000000) mmap$auto(0x0, 0x2020009, 0x6, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0006, 0x17) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x400053, 0x9) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) mmap$auto(0x1, 0x2020009, 0x3, 0xebe, 0xfffffffffffffffa, 0x8000) shmctl$auto_IPC_SET(0xc, 0x1, &(0x7f0000000300)={{0xffffffff, 0xffffffffffffffff, 0xee01, 0x1000, 0xae, 0x9, 0x6}, 0x1, 0x7, 0x2, 0x280, @raw, @raw=0x5, 0x3, 0x0, &(0x7f0000000140)="4666def67af41b4f051e39fd6511fd6cfab11faa93fdd757f3a42ab52c0db46c7c57737a54cb9ad1fccd9f47e3400debebecee8c4b3ab4b0ecd15cb89799d7a8a423d738e2914ff98f43b494873650cfa841ca9b379cdbceb067f222f9852e4e248e519e6e2d25bc83b3fb9ec16cbc5fe503b9662d19861c9bb377749418140efde7024c7215d323a6c79c5be94bc04ed0d9afbb9c9574ff829522a54b91ef7bcef85e226564639c87b944203a6814a00eea8134d42bc137511ab276827b7ee17d85c2722c34b6d9cd3c095bd1094df859fd44defb05f086d48e42b8cfe4f20b057126cfb78738004716a5e21149cc372c89149624db4102", &(0x7f0000000240)="41b431f15aa64d11716c2908cc9f948827ddb702f4ae4ad578a4d9e2"}) 13m49.633009821s ago: executing program 1 (id=1524): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x745100, 0x0) openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000200), 0x101802, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0189436, &(0x7f00000001c0)={0xfffe0021, 0x6, 0x80000001, 0x8c37, 0x5}) r2 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/037/001\x00', 0x40a02, 0x0) ioctl$auto_USBDEVFS_CONTROL(r2, 0xc0185500, &(0x7f0000000000)={0x23, 0x3, 0x8, 0x10, 0x3ff, 0x7fb, 0x0}) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/midiC2D0\x00', 0x0, 0x0) openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, &(0x7f0000001140)='/dev/psaux\x00', 0x42000, 0x0) io_uring_setup$auto(0x8000, 0x0) openat$auto_vhci_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000d00), 0x0, 0x0) shmctl$auto_IPC_SET(0x8, 0x1, &(0x7f0000000640)={{0x3ff, 0x0, 0xee01, 0x3, 0x3ff, 0x9, 0x8}, 0xb, 0x9, 0x9, 0x3, @raw=0x101, @raw=0x7, 0x401, 0x0, &(0x7f0000000480)="f585d83a5b4fdc761e578f49ab4ba5ce0866e4d2fc2d513ebc5a17aead034245673d18e02662174d2464494db726e01706e10002d6eacb50219b4f07768094b44f170ebe5c10eb1968db93726e1420c005532cf3f267566f882e28a2138f6f3b3463fc2ed682f0616650bd3199f8379f7ad570194c415057be2a885577738ec35928b73992794e52c113afcfa2b64d9f839656ee31eb88dd3d8d3d348c0accb55aecda3b5961c68a5646e942fbd973154208ffdf503d0e4859f06a6897c2ce0b565599b8b68bde1de3342e017b800ce717795e9057ce1abe8506", &(0x7f0000000600)="c12adcb9e96c8d347a5cad2c0b77"}) select$auto(0xe, 0x0, 0x0, &(0x7f0000000580)={[0x1ff, 0x8000, 0xd, 0x1, 0x948d, 0x3, 0x10015f4da0a, 0xd, 0x7, 0x64c1, 0x8000001f, 0x400000000, 0x6d3e, 0xc, 0x2, 0x2]}, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xfc\x04\x00\x00)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/audit\x00', 0x40802, 0x0) r3 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/fb0\x00', 0x20401, 0x0) ioctl$auto(r3, 0x4611, r3) socket(0x2b, 0x1, 0x0) ioctl$auto(0x3, 0x8905, 0x38) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) madvise$auto(0x0, 0x200007, 0x19) madvise$auto(0x0, 0xffffffffffff0004, 0x14) pread64$auto(0xffffffffffffffff, &(0x7f0000000080)='\xd5u+~\xa7x\xe0VQ\x1a6\xcf\xce\xfa\xfbN\x19\b\xf64\r\x122i\xd6\x0e\xfa\x96\x9aV:\xe1G\x14\xb2\xd4N\x0e#jX:\xd0\xd0\xa9\xda\xaf\x98\x94G\xa8\xb4\xa7uPc\x1ang\xdb\xb4\xa7\xad\x1b\xcbonh\xd8\x99\x03\x10\xb0\xa5\xfey\xd5F,70\xecG\x8a\fz\x95\x7f\xb0Y{\xdd\xa1\xa3E\x03\xd4\xc67U\x93\n\xfc\xa4\x0e_\xf8\x94\xc3a\x00\xe6\xea4\xa2\x7ft\xeb\x8b$\x16\x0e\xe8j\xcaI\xe0c\x05\x12(\v\xef\xc5Z\xfb\xed\xa3\x01\x001\xa5\x18%\xae/\x1b6\xaa\xf5ysD\xa6\xee\xbf\xc0v\"\x93\x96\"\xcak.\x0e_\xb3\xf7\xac\x9e\xbd/w\xdf\xfc\xe24z\x0f\x8f\b\xbe\xda\xfb\xd0Jj\x97\xfa{\x9d\xfd\xfb\x14\x1f\b#\xb9\x01\xf7\xf5\x1c1\xfbNX\xd9\xf0\x97@\xff(\x99\x13M\xadM\b\xa7\xf3u\xa8ak\xff\x7f\x00\x00\x12\x85\x85\x14\b\x9c\x15\xc10\xb3\xd5.\x13\xc6\xb6\xbak:\xbf\x8f\xcd\x7f\a\xb8\x00'/272, 0x202, 0x7) 13m44.356313056s ago: executing program 1 (id=1542): write$auto(0xffffffffffffffff, 0x0, 0x100000a3d9) mmap$auto(0xfffffffffffffffc, 0x80000001, 0x7, 0x40eb1, 0x401, 0x300000000000) r0 = socket(0xa, 0x3, 0x3b) mmap$auto(0x0, 0x20006, 0x4000000000df, 0xeb1, 0x4, 0x8000) sendmsg$auto_NETDEV_CMD_PAGE_POOL_GET(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010028bd7000ffdbdf25050000000c00010002000000000000000c00010004"], 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0xd0) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000226bd7000fedbdf25030000000800030004020000060007000080000008000200", @ANYRES32=0x0, @ANYBLOB="0a00050000000000000000000a00010000000000000000000a0001000000000000000000060007000100000008000200", @ANYRES32=0x0, @ANYRESOCT=r1], 0x68}, 0x1, 0x0, 0x0, 0x4044080}, 0x40090) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0f0026bd7000fcdbdf9907"], 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x48080) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="1100"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r2 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r2, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) connect$auto(0x3, &(0x7f0000000000)=@llc={0x1a, 0x23, 0x79, 0x9a, 0x7, 0xb, @broadcast}, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) r3 = io_uring_setup$auto(0xf0, &(0x7f0000000180)={0x6, 0x18, 0xd64, 0xc852, 0x6, 0x7, r0, [0x1, 0x401, 0x1000], {0x7, 0x5, 0x1, 0x4, 0x95, 0xf4c, 0x7fff, 0xfffffffb, 0x65f29f6d}, {0x3, 0xadc, 0x10000, 0x0, 0x5, 0xffffffff, 0x1000, 0x154f, 0xdba}}) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) close_range$auto(0x2, 0xa, 0x0) socket(0xa, 0x2, 0x0) r4 = socket(0xa, 0x3, 0xff) r5 = openat$auto_autofs_root_operations_autofs_i(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/netdevsim/netdevsim7/ports/3\x00', 0x80000, 0x0) ioctl$auto_AUTOFS_IOC_READY(r5, 0x9360, 0x0) connect$auto(r4, &(0x7f00000018c0)=@generic={0xa}, 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7fffffe) write$auto_proc_mem_operations_base(0xffffffffffffffff, 0x0, 0x0) syz_clone3(0x0, 0x0) madvise$auto(0x1ffff000, 0x7, 0x100000000) mmap$auto(0x0, 0x400008, 0xb, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) mremap$auto(0x0, 0x4, 0x4, 0x7, 0x100000000) io_uring_setup$auto(0x2, &(0x7f0000000080)={0x80000003, 0x9, 0x4002, 0x6, 0x4, 0x8, r3, [], {0x9, 0x6, 0xf, 0x29f, 0x100, 0x7f, 0x101, 0x4000006, 0x2000}, {0x100, 0x1, 0x52, 0x5, 0x1, 0x40, 0x104, 0x8, 0x100000000}}) 13m29.135977317s ago: executing program 32 (id=1542): write$auto(0xffffffffffffffff, 0x0, 0x100000a3d9) mmap$auto(0xfffffffffffffffc, 0x80000001, 0x7, 0x40eb1, 0x401, 0x300000000000) r0 = socket(0xa, 0x3, 0x3b) mmap$auto(0x0, 0x20006, 0x4000000000df, 0xeb1, 0x4, 0x8000) sendmsg$auto_NETDEV_CMD_PAGE_POOL_GET(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010028bd7000ffdbdf25050000000c00010002000000000000000c00010004"], 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0xd0) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000226bd7000fedbdf25030000000800030004020000060007000080000008000200", @ANYRES32=0x0, @ANYBLOB="0a00050000000000000000000a00010000000000000000000a0001000000000000000000060007000100000008000200", @ANYRES32=0x0, @ANYRESOCT=r1], 0x68}, 0x1, 0x0, 0x0, 0x4044080}, 0x40090) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0f0026bd7000fcdbdf9907"], 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x48080) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="1100"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r2 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r2, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) connect$auto(0x3, &(0x7f0000000000)=@llc={0x1a, 0x23, 0x79, 0x9a, 0x7, 0xb, @broadcast}, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) r3 = io_uring_setup$auto(0xf0, &(0x7f0000000180)={0x6, 0x18, 0xd64, 0xc852, 0x6, 0x7, r0, [0x1, 0x401, 0x1000], {0x7, 0x5, 0x1, 0x4, 0x95, 0xf4c, 0x7fff, 0xfffffffb, 0x65f29f6d}, {0x3, 0xadc, 0x10000, 0x0, 0x5, 0xffffffff, 0x1000, 0x154f, 0xdba}}) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) close_range$auto(0x2, 0xa, 0x0) socket(0xa, 0x2, 0x0) r4 = socket(0xa, 0x3, 0xff) r5 = openat$auto_autofs_root_operations_autofs_i(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/netdevsim/netdevsim7/ports/3\x00', 0x80000, 0x0) ioctl$auto_AUTOFS_IOC_READY(r5, 0x9360, 0x0) connect$auto(r4, &(0x7f00000018c0)=@generic={0xa}, 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7fffffe) write$auto_proc_mem_operations_base(0xffffffffffffffff, 0x0, 0x0) syz_clone3(0x0, 0x0) madvise$auto(0x1ffff000, 0x7, 0x100000000) mmap$auto(0x0, 0x400008, 0xb, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) mremap$auto(0x0, 0x4, 0x4, 0x7, 0x100000000) io_uring_setup$auto(0x2, &(0x7f0000000080)={0x80000003, 0x9, 0x4002, 0x6, 0x4, 0x8, r3, [], {0x9, 0x6, 0xf, 0x29f, 0x100, 0x7f, 0x101, 0x4000006, 0x2000}, {0x100, 0x1, 0x52, 0x5, 0x1, 0x40, 0x104, 0x8, 0x100000000}}) 12m25.61805638s ago: executing program 0 (id=1783): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) madvise$auto(0x0, 0xffffffffffff0001, 0x15) (async) sysfs$auto(0x2, 0x10000000000002a, 0x0) (async) fsopen$auto(0x0, 0x1) close_range$auto(0x2, 0x8, 0x0) (async) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) (async) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @loopback}, 0x54) (async) fcntl$auto(0x3, 0x4, 0xa553) (async) write$auto(0x3, 0x0, 0xfdef) (async) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x2, 0x0) ioctl$auto_SNDCTL_SEQ_NRSYNTHS(r0, 0x8004510a, &(0x7f0000000040)) mmap$auto(0x0, 0x400008, 0x5d, 0x9b72, 0x2, 0x8000) (async) clone$auto(0x9001, 0x5, 0xffffffffffffffff, 0xfffffffffffffffc, 0x6) 12m25.196935555s ago: executing program 0 (id=1785): mmap$auto(0x7, 0xe983, 0xdf, 0xeb1, 0x401, 0xffffffff) getcwd$auto(0x0, 0xffffffffffffffff) r0 = inotify_init1$auto(0x3000000000000) inotify_add_watch$auto(r0, 0x0, 0x81000002) 12m25.071321551s ago: executing program 0 (id=1788): mmap$auto(0x0, 0x2000d, 0x4000000200df, 0xeb1, 0x404, 0x8000) (async, rerun: 64) clone$auto(0x2000020003b4a, 0x6, 0x0, 0x0, 0x103) (async, rerun: 64) r0 = getpid() setpriority$auto_PRIO_PGRP(0x1, r0, 0x20009) 12m23.77351201s ago: executing program 0 (id=1794): mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) io_uring_setup$auto(0x6, 0x0) open(0x0, 0x22240, 0x155) io_uring_setup$auto(0x6, 0x0) r0 = socket(0x28, 0x805, 0x0) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, 0x0, 0x1, 0x0, 0x8000000000000001, 0x800}, 0x7}, 0x3, 0x0) bind$auto(r0, &(0x7f0000000080)=@in={0x28, 0x0, @rand_addr=0xffffffff}, 0x68) listen$auto(0x3, 0x81) accept$auto(0x3, 0x0, 0x0) 12m22.213887422s ago: executing program 0 (id=1800): openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/net/afs/cells\x00', 0x80000, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) pwrite64$auto(0xc8, &(0x7f0000000000)='\vX5n\x91p\xe6\x1eRN8\x99\b\xff\x05\x00J\x99\x00:\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4\xf82\xe0Q8\x0e\x94\x1e\xd37?\x9ef\x15\x02l@\x18*\xc0\xc1\xf2\x14_\x1cC\x8a\v\x00\x00\x00\x00\x00\x00\x00X\xb9_\xdd*\xd1\x14^\xbe\xa2\x00\x00\x00\x00\x00\x00', 0x10, 0x3) openat$auto_vhci_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket(0x11, 0x3, 0x9) r0 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty0\x00', 0x201, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000180)='/dev/bus/usb/036/001\x00', 0xa901, 0x0) ioctl$auto_USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000240)={0x0, 0x81, 0x5b, 0x4, &(0x7f0000000000), 0x4000006, 0x401, 0x5, @number_of_packets=0x86c9, 0x9, 0x476, 0x0}) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/mnt\x00') listmount$auto(&(0x7f0000000100)={0x20, @inferred=r1, 0x8000000000, 0xfffffffffffffff7}, 0x0, 0x0, 0x1) mmap$auto(0x10000000, 0x802020009, 0x2000003, 0x13, r0, 0x8000000000000000) socket(0x2d, 0x1, 0x0) socket(0x28, 0x1, 0x0) connect$auto(0x3, &(0x7f00000000c0)=@vsock={0x28, 0x0, 0x2710, @hyper}, 0x10) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0x8000ffff}, 0x3) mmap$auto(0x0, 0x20009, 0xe, 0xeb1, 0x403, 0x8000) mmap$auto(0x0, 0x2020007, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) unshare$auto(0x40000080) get_robust_list$auto(0x0, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1, 0x1, 0x0, 0x401, 0xdd16) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xa142, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x17) 12m13.002559525s ago: executing program 0 (id=1814): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/event1\x00', 0x100, 0x0) (async, rerun: 64) listen$auto(0x3, 0x81) (rerun: 64) socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) mmap$auto(0x0, 0x2020009, 0x10, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) mmap$auto(0x8, 0x20006, 0xdf, 0xeb1, 0x401, 0x8000) (async) close_range$auto(0x2, 0x8, 0x0) (async) socket(0x2, 0x80002, 0x73) (async) socket(0xa, 0x1, 0x84) (async, rerun: 32) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) (async, rerun: 32) r0 = open(&(0x7f00009e1000)='./file0\x00', 0xc162, 0x0) r1 = socket(0x10, 0x2, 0xf) r2 = bpf$auto(0x0, &(0x7f0000000080)=@bpf_attr_4={0x1e, r0, 0x9, r1}, 0x210) (async, rerun: 64) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @loopback}, 0x54) (rerun: 64) write$auto(0x3, 0x0, 0xffd8) unshare$auto(0x40000080) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async, rerun: 32) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) (rerun: 32) syz_genetlink_get_family_id$auto_nfc(&(0x7f0000000140), r2) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) write$auto(r3, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x85) (async) madvise$auto(0x0, 0x2003f0, 0x15) madvise$auto(0x0, 0xfffffffffffeffff, 0x15) 11m57.624357291s ago: executing program 33 (id=1814): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/event1\x00', 0x100, 0x0) (async, rerun: 64) listen$auto(0x3, 0x81) (rerun: 64) socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) mmap$auto(0x0, 0x2020009, 0x10, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) mmap$auto(0x8, 0x20006, 0xdf, 0xeb1, 0x401, 0x8000) (async) close_range$auto(0x2, 0x8, 0x0) (async) socket(0x2, 0x80002, 0x73) (async) socket(0xa, 0x1, 0x84) (async, rerun: 32) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) (async, rerun: 32) r0 = open(&(0x7f00009e1000)='./file0\x00', 0xc162, 0x0) r1 = socket(0x10, 0x2, 0xf) r2 = bpf$auto(0x0, &(0x7f0000000080)=@bpf_attr_4={0x1e, r0, 0x9, r1}, 0x210) (async, rerun: 64) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @loopback}, 0x54) (rerun: 64) write$auto(0x3, 0x0, 0xffd8) unshare$auto(0x40000080) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async, rerun: 32) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) (rerun: 32) syz_genetlink_get_family_id$auto_nfc(&(0x7f0000000140), r2) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) write$auto(r3, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x85) (async) madvise$auto(0x0, 0x2003f0, 0x15) madvise$auto(0x0, 0xfffffffffffeffff, 0x15) 10m20.851205201s ago: executing program 5 (id=2176): socket(0x10, 0x2, 0x4) openat$auto_proc_pid_numa_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000003640)='/proc/self/numa_maps\x00', 0x40080, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xc, 0x800008000) setsockopt$auto(0xffffffffffffffff, 0x11, 0x68, 0x0, 0x8) read$auto_uhid_fops_uhid(0xffffffffffffffff, 0x0, 0x0) socketpair$auto(0x1, 0x2, 0xfffffffe, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/block/nbd12/integrity/device_is_integrity_capable\x00', 0x4a4100, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000001c00)=""/4111, 0x100f) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS0\x00', 0x101e81, 0x0) unshare$auto(0x5ca) r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/net/ipv6/conf/default/ignore_routes_with_linkdown\x00', 0x42a81, 0x0) pwrite64$auto(r1, &(0x7f0000000000)='/proc/sys/net/ipv6/coX\t/all/forwarding\x00', 0x1, 0x2) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x7fffffff, 0xfffffffffffffffc, 0x0, 0x220000000000005, 0xfe0000) write$auto(0xffffffffffffffff, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xae\x9fb\x9a\xaf\xb7\xbcaV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xb0\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36E\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) socket(0x2c, 0x1, 0x0) listen$auto(r0, 0x6) mmap$auto(0xfa2, 0x2, 0x81, 0xeb4, 0xffffffffffffffff, 0x8) keyctl$auto(0x5, 0x0, 0x0, 0x0, 0x6) prctl$auto(0x81, 0x4800000, 0x4, 0x4000000000000105, 0x6) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYRES8=r1, @ANYRES16, @ANYBLOB="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"], 0x14}}, 0x24048004) madvise$auto(0x0, 0x7, 0x6) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/thread-self/pagemap\x00', 0x1, 0x0) mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/smaps_rollup\x00', 0x94020, 0x0) 10m20.043585599s ago: executing program 5 (id=2177): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000040), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xebe, r0, 0x8000) r1 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/smaps_rollup\x00', 0x40000, 0x0) madvise$auto(0x0, 0xfffffffffffefffd, 0x17) madvise$auto(0x1, 0xfffffffffffffff5, 0x0) mbind$auto(0x7ffffffc, 0x100000004, 0x100000000, 0x0, 0x8001, 0x2) read$auto_proc_pid_maps_operations_internal(r1, 0x0, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_tracing_free_buffer_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/free_buffer\x00', 0x20103, 0x0) r2 = getpid() mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) migrate_pages$auto(0x0, 0x8, 0x0, &(0x7f00000001c0)=0x7b) r3 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/adsp1\x00', 0x40440, 0x0) ioctl$auto_SNDCTL_DSP_CHANNELS(r3, 0xc0045006, &(0x7f00000001c0)) readv$auto(r3, &(0x7f0000000200)={0x0, 0xfffc}, 0x3) process_vm_readv$auto(r2, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000080), 0xffffffff}, 0x4, 0x0) linkat$auto(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0, 0xfffffffd) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) write$auto(0x3, 0x0, 0x7fffffff) madvise$auto(0x1, 0xfffffffffffff001, 0xe) getsockopt$auto_SO_INCOMING_NAPI_ID(r1, 0xffff, 0x38, &(0x7f0000000180)='/proc/self/smaps_rollup\x00', &(0x7f00000001c0)=0xfffff113) madvise$auto(0x0, 0x200007, 0x19) r4 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000000), 0x480, 0x0) ioctl$auto_VHOST_SET_OWNER(r4, 0xaf01, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mq_open$auto(&(0x7f00000000c0)='\x12\xe6D\b\x9e\x00\x80\x8d\f\xb9w-\xbd!\x9eb\xed\xfb\x0f\xe5\x9dZ\xc2\xd1\x01wBV\x91\x8f_\xc0.\x84\xfe\x84\xd1se\x01\x06\x00\xb3\x13_Y&\xa9\x88\xe4\xa2\xb0V\x85\x92<\xb6\xdcT \\\xf2\v\xb1\xe2\xd8\xfa\xd8V\xe5\x00\xfa\xe9!\xc5<\xce\x18=\x06\xdagq\xb5\r\t\xb2\xde\x99\xd50\xbb\x192\x1c4\x86\xc0\xc1-\xd5\x10\xc3\xfc*[8\x89h\xc5\xba\xff\xc8u5r0}) sendfile$auto(r2, r1, &(0x7f0000000280)=0xd, 0x8) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_ADD_NAN_FUNCTION(r3, &(0x7f0000000600)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000005c0)={&(0x7f0000000340)={0x270, r4, 0x20, 0x70bd2b, 0x25dfdbfd, {}, [@NL80211_ATTR_REG_ALPHA2={0x54, 0x21, "eb5000aa47e26f34ffa1d8e6c578ab5997abcafae6a6e4b548429b404996ee73c5e0203af818fb2e96bae99583985cbcff72114c9fcedfc5694357e6837e6beaf634cf1b47ef3e1bf9888ee415356eed"}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, "c449fa0db538173f1bc5c5f91d4b20231caec3bd48e615f55e66"}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x2}, @NL80211_ATTR_TID_CONFIG={0x1e0, 0x11d, 0x0, 0x1, [{0xe4, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x94, 0xd, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x3}, @NL80211_TXRATE_HT={0x30, 0x2, "277a632de8a4072f0329cb834fb07996fb3c12de5799785c8cc7910a0ac2049e526d1a01323a678b67a3397d"}, @NL80211_TXRATE_HT={0x9, 0x2, "19c58e8790"}, @NL80211_TXRATE_HT={0x4a, 0x2, "52df8fd342c1ef4e64c2705070ed9eb8b6419617e174ae3c9c53f555e9b1bfcddd4f10d9243ed28b6017ad88ef153de2242faf13464f00b74da238bd2ab14a956d6ebc1ac418"}]}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x93}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x20}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x46}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x9}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0xe}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x9}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x31}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x4}]}, {0x38, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8d}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x800}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x28}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}]}, {0x4c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x13}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0xe3}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x80}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xc7}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xb}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}]}, {0x4c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x4c2e}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x2}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0xf2}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x3}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x8}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x4}]}]}]}, 0x270}, 0x1, 0x0, 0x0, 0x40004}, 0x4000000) (async) sendmsg$auto_NL80211_CMD_ADD_NAN_FUNCTION(r3, &(0x7f0000000600)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000005c0)={&(0x7f0000000340)={0x270, r4, 0x20, 0x70bd2b, 0x25dfdbfd, {}, [@NL80211_ATTR_REG_ALPHA2={0x54, 0x21, "eb5000aa47e26f34ffa1d8e6c578ab5997abcafae6a6e4b548429b404996ee73c5e0203af818fb2e96bae99583985cbcff72114c9fcedfc5694357e6837e6beaf634cf1b47ef3e1bf9888ee415356eed"}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, "c449fa0db538173f1bc5c5f91d4b20231caec3bd48e615f55e66"}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x2}, @NL80211_ATTR_TID_CONFIG={0x1e0, 0x11d, 0x0, 0x1, [{0xe4, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x94, 0xd, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x3}, @NL80211_TXRATE_HT={0x30, 0x2, "277a632de8a4072f0329cb834fb07996fb3c12de5799785c8cc7910a0ac2049e526d1a01323a678b67a3397d"}, @NL80211_TXRATE_HT={0x9, 0x2, "19c58e8790"}, @NL80211_TXRATE_HT={0x4a, 0x2, "52df8fd342c1ef4e64c2705070ed9eb8b6419617e174ae3c9c53f555e9b1bfcddd4f10d9243ed28b6017ad88ef153de2242faf13464f00b74da238bd2ab14a956d6ebc1ac418"}]}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x93}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x20}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x46}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x9}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0xe}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x9}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x31}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x4}]}, {0x38, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8d}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x800}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x28}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}]}, {0x4c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x13}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0xe3}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x80}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xc7}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xb}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}]}, {0x4c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x4c2e}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x2}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0xf2}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x3}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x8}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x4}]}]}]}, 0x270}, 0x1, 0x0, 0x0, 0x40004}, 0x4000000) sendmsg$auto_NL80211_CMD_FLUSH_PMKSA(r3, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x6c, r4, 0x300, 0x70bd2b, 0x25dfdbfb, {}, [@NL80211_ATTR_WIPHY_TX_POWER_LEVEL={0x8, 0x62, 0x6}, @NL80211_ATTR_AUTH_DATA={0x11, 0x9c, "abaa9e8977982c3d11c7000b16"}, @NL80211_ATTR_SCAN_FREQ_KHZ={0x3c, 0x124, 0x0, 0x1, [@nested={0x17, 0xf5, 0x0, 0x1, [@nested={0x4, 0x134}, @generic="cbcd02", @typed={0xc, 0x155, 0x0, 0x0, @u64=0xffffffffffffffff}]}, @nested={0x4, 0x6c}, @nested={0x14, 0x147, 0x0, 0x1, [@typed={0x8, 0x145, 0x0, 0x0, @u32=0x5}, @nested={0x4, 0x5a}, @nested={0x4, 0x89}]}, @typed={0x8, 0x11c, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x40}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x850}, 0x4004054) sendmsg$auto_NL80211_CMD_GET_STATION(r2, &(0x7f0000001a40)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001a00)={&(0x7f00000007c0)={0x1214, r4, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@NL80211_ATTR_MAC={0xf7, 0x6, "306e95a1caa84d3784faa6f5d7745ddb7f6d3b62c9b6fe909694d76f42aa1cfcc15ec5495906379d7d79bffd29cfbcc18053ebbded3b01c2881415f5e8bfd57589826658842337a21cd8ed2dfae9be85388c8b780b22c9b1409ab5acf4c123df171917f54b6ce6656711e13b220d411f1ff4186dd69032be88b00a73a6887b9ec44995fed2baa58c98ce9da7426e13c60fdd4b2cb481274dec89ff30f8e261f351c8ba8e805c365d55f3d04c52432b415e83d5d65246d6e70931ebba82c0b973993fa8bc81a2d18b996073c22e37a9c88e7eba33010ce5b98aadab662dd19fb9d5e48b3ab35608fbc82d16de46ef96a8e58a13"}, @NL80211_ATTR_ASSOC_MLD_EXT_CAPA_OPS={0x6}, @NL80211_ATTR_KEY={0x10d2, 0x50, 0x0, 0x1, [@typed={0x5, 0xd1, 0x0, 0x0, @str='\x00'}, @generic="91c21a995faf8e8fa12919d039f025a92e58be84df69d3f97d6edc2817ab7ddc0de0d885795cd1cbd14270f354282c5ebe0e41c139a351f26dce490d8ed61dbb6eb5b6cea7849122e9f64eaa32de912bc8403ae81440b78398df472d8ae15828cf1dc478627a4dbdb0aa97d2dc3d4c7bb9b52618802ebc3621dc48856d8887b519bda47bc2e824828de77817a181d6994bad6a4e82a8996ba1778434c3b064e4a041a1e5794372d2f46962bc2e087a12e6a7e4cab95976622ecfbc101f25ed5f08175703dfca911de87ac85508fa2314d92bfbd1ba9fab010f47b7108216b5adc38d8f9342a04979cd1df8e89f6afd9dca9e12e8e31e59cd04918a06cb8825769373d516e5ece838a1012c6811dd7cd71b7e75b73f7da7e525a17cbd5baeb33c789491e2e0b3465aadfbb54e9c0770f715e82686dd5c63374d785bb6349101869091367d2f96ee3b483188771a82078c5110805e1bde088bc8dfcdc2070d5eff662b09f0e6a4d64b5a0721f14987a3b6ee1877cbaf00f8c77cadd3668f9ebda06776a2611a43b6d04c17c4075ae2120a1c7141c8b36404fc6fbbe262d627ba6325c3b98d1833e833214e6c4657a3c77efb958c0dcbdfab84b3308c6ffd4e286e2a537e75fd78e2276ca176458bbeea37f406e912a86c625fba90bd3769cf09005f05df7cf9078b35004040997275677e68510eebc9a0f53c4a1a6f3c14e1c98072a1f058becb278bb8be134bc03e21651e50f577e7718548ac63306311d96bfa924e7f829df90754908cce4e5d148497c7b248e8eadb7b73718b41a5e544edfb0b4510afd2f900d255f0671ffb56228a508a72161aa9b62ed88094e6b9eda0984e6caae00eaa6eaab5e2af06b32cb68c5824b0e95aba9e54ba362f399dc763b097c69df12781ccca09eca1288ebbfc7bafa838dc046c35249e952452de789e81c0d240e84c4486edf2be651441685282a35faccdcecfb68013687bf628b0cb969bbf0def88189c5c2e4a0368ac4ac9e124506cfea3b9ae0403b426e3ce127304f49982abfacdeef04733a85eb8406855aeca54622592732dac8574044ad65908bf0937872f3c72eaa5acd69e448ff3af28566baab2352e555a75ce3271ae9e297c7553d441798e6ec374b8395e35ed44268d1f3a2248fa169c489c516413c2472556458b88335449916974e110e2e2b79a1d2df4cd2cc60463dff732a721ccb5fd25a0580202e2573004e8a5c335c5bb17c423ea5db58f944b319f0bb566692e21e907909ca0154b4f7085cc410dbe7999bd4d7b4d8ab9194364a3d5b990428c0de5266773f3a77d56260d3ed4e505ef9141305bc755d04ecdc0806c219f68b9adad509372a51b1188355ac57dcb67b9ae138abdf081df190a01b092076aea3158c6b187425a8afa1bc8bc81c6e01c90763661350fffc95eab29957f8573a38d1967576c960dc6947c18cbcca71154559d4c170266dbc0261b321cd4ec6cfe1e03a6cc6922955d9af7d0ba59f15be5932f6687fc41a4d949fe80ab210868354c4a050a1842ad7dfa57dce10fc6cc912a9933420e2b7e709f6401a689c3da6354588b76ecbff5b87fc2772ab771c886ea05f29d88ca884b8eba6168f97f2f3057099747c0e3650920201a80fd1f39fe30e069d1f16b181486d691156b112e09cabeaa6d20754d5d0e09aa839f2bdb1a921780fc401129227ffdea0dc62c747e545b3b213f06360086307cc63499d72cc0dd5e97aa4e10f9d648b86ff78ce07cfe804c04b23ebc4be906ab2a3f4d03e699da91a3b6f3777e2990401b9bfa6461dc62b61fae7a96edbc1c103ed7e7d7f547edc535253c4d8edafcf70ff37c73a8f015ab3ca01b0237ef701e9bc91fb64e226e70a56f23d199614f1eb4896c6560da2cb11182c93094217da7df646171bde4169f682fabb5db2a7fcbe02ce520d45134d0bb724a9e68164b3b9fea18b6898babc4352822ed4b13f591a99c650ff2036059c7de0258f60e02739ac62f6d7456e429d16909dd7ca568bd6be410e180248726f45a25c062a5f04b73264ef3e6a3e7ec9e3b4d3c51c1ee01dc2bc0f79118b8b7d9fe43f3805383e590d1fcf13095187f257ff495ca4bb7d0877b9b02064da9e5ee344a635b4946ce85b0044b5a16bccec8513cf7d58e4da980e4d09090f37f00f816aa9bf4d4509d7eef810054f31d9312e7044be4ba7c9d7d5f764f90a3f53d58a7ca585f160f57bd8cbfe42d5704a0682c21fb1c41f121b0a23309e7a7e920f8e7c9adccb4290ca07b6989f5d6108ee72182928f3f4b122664d705fed64c6e0cfe3c714a57434a98883d3a75729e4bd2214d0bc58348680f8b5717d48d31772d58be7f8843e4b0eb9bf84ba22269e7550883dba2f58fad94a22e64b9bf5cee42131787d7d3824acc31b1a20b1957ca3520d8965fc6a796d53700b1483e2f5dd95e3005bc143819b84ef447e2970a5540a3878e813ab4ebdf10012d483a2c603f08e5feb6eb6538cda7b59933e7b77bd7594d5eea32db5b3996df0e1519c02aef3d9f9a06de38d149acbfeb22a7747b410a3fcc1af2bf5e64aa640054af2e3fd3181d04d1153743d21637a30f6e018ce7a6b7c42ea7cf7f4e496d3be3aea30852a7e86de422ec1b60fea519a3c2388cd7ec5e47d65df444a79be0cb66588d303d62b86f4fab5089ea0e3ccd4cec9c8194494ccb4b474f523e15fbe62b8a1edaecee2484fa35a2e3312e41a63943fed7e6502a57e0d861983957005826cfd47b6a1e3917fd1f9c6e12f613eb49d05fc51eedc9f3b1579f6276b25286f440ea133c80bf40acab014681eeed8a3cf3036586fb4c7b18b1a5e2b51e5de74b42f0d23442fc7d9d84ae4eb10e7d75842d63fec949e662a41ea9d01dde8836bdbb0dabd5fd19af04da7e4f82878ac5b1fd055e653c79f15bf4e015fc09a45103db5f4d7a85fdbf1f9ed74f2f619c95966d2e54bfc7aee85089e5bfbf6d193df0b954f0c1320a120e747554305395c7529f7c6c5a8f9fbdfb32cb6dff318e360d23c331a28187531c27fa7334299b34be83eb9f1742ad9d2acc49cde8615dcd714229f5285fa1abe25b9e0cdefdf9293d2f2a87070de940c5eb5752856538294e2264f6beb0fef70c0ae40214a2e0f52f375ebb9decb1c8574832c3d3e9fb12c2953f6bc45b5f134af5a238ebb4edc8f8928cbc34898b84c4f51311d2d805c2176e6b31be447bd4befc61907dad6a0009b52a45dbb71e9f732c3142f0e0733635e11ca612e1d0bd3526687602ce809450158542ccae937976ab7153868238d204e15adebc96413505940d9964f15186e80d319ff101137ffad48ab75f318ee4cfc3cd6e5da4c664d4b5c1b26675074c24a7352b490e91f445ead0afeb0f61aae012ca6baaf929a59c34031519bf1cb1dd819f043be24ea245db855f1e9929efe3edc3beb835477fb262101be41f046d3c73ce119be024d052b1daec564c39dcd7e1387d2eef7bce63b207b8512b7edcec87ae3be21df8d554004f8c9df46e464dbc679c1e565c0174a7d11cd110b748fe5e16d3b41026aa5a9a47e04de79a1953166d78ab590e86ba66d84440147f3e0616465282e89c5cad20959ae87d0590d0dd31946414cf1bbe109b443904cbbd0794a63a93dbd48215d589df28555475d43a28c2c38cef3f2478f2f241740d75c60746e1da09125ae7ab77c2b7c2d89dc9d8e065e1ed7fb103a8223cc6dda7131233c197b743066a837d86de91efabc50732530b2863be95cfc339533775d413a7e67130a823eb859a7c4a001fbd101f8c3dcf1a8939a16e401d2bb5c0ba2ec05c12418286661d97099721d089fd5df52790639043a6f33245c8050a3feb138b7c544d920ccead76002e1f06e9df618cffafb851bd6a7114fc4f7483b638282cca395c7edeccf387cdbd75ba7d2fdd288a28533f3256bb0805f8a726de4710d7487e9d7486959ad47211b95ea9783ecd616a0c040280dfa8679222a93dc97335c72f99cf8115dc2664f1d36e2d35168e5246006a95f2ee1f77b70d7493161d4d0760f65d4c4e10b335378ac5cb463725e43139042656ddd157483cf47022c2e252f31ebb1dff8df2dd35eb131c3914dcf42ed9d37988013c91ecf389ad1283fbda8d7520b9bbdd35414016c0d57048d9f402c42ec6e959f119a715aef17044f92dbddcc01b9db99c42cbd58be64f9ffe832a809e274dcbf14dca4a8845904a829d5cbbac9fd59a381c1578f019a196f49e46c0f78c36744aab044438c505913f0d9fb4f4330c0cb6f081ae921de0270c1a8ef814b3264ba5e9ded959da829c199b5939ef1f57260eb9e0e5fd721823e8b880fbcc630163fd8679c90a8a28552a5410a6ef22fa5634a9b61fc09eab0fc1f12eccb725de1650ce350da47ee47d15ed691ab47bbb9d49babf985b5b2d2f706474d9a2b75ad5cb1a0d7ccada4a853d3b2a83bbedc2b28af1ede3257275b293bf848882cfec1b4b0379792517e8f61b709b686daf4d0b16121acb1cdf02875835034f38aca8fb01ae33335834e3e60ee13be49f37d944419c916acd70ca0d0dd10d23beae9b4ebc4565079b688d63b13145c138e22eb84e6fd4a9dc77f05551b4f168e3105d6a6afc5668b066eeb53edb0f77681b77bb0ec7f60463f6d6251e7ddcb93e2ed57b4dd41b376f4d4ca0841f5b117e7bd1bd543d0aae62563777c4aafee97d9513896bd7bfea24e986a3a03d0613079b1178642ca57fb2eaecb454da0d626359930f52831d39d5f8c7d8dafa4dadab831865e40e43f08bd45c0d083d40a94d0b37c3a34161e577a26c0477ee02e85f37522e47dcd46c26431818e7a8472f863bcc6a191d149720eee6aa7ac359530a98ac137f3cd6e7a75a2e7649627006fd609e6d82ce208f5e32fc4f8eb92c619b87bd5c303938f9fe9f6c08ca401a3f0af515aa9b89d985daf033ac6001efc940be3b8e2cf2317824d57c6958df0a183ac1e36b493b625d57eefbeb30de2a11229fed93abaa12163e20aec7a9419f3e3e527568d5b6dda5f6d33bcf52db599dd5dbe772bd18a9a71dbfec4a23ae9ffa38cc46c30a1f8793f3f3a0b9142165ab8952304ba68150b004c6807b41e7fefd9f3d0f5b246870dd45b87c2cc2f48f019570654affd432b057b520d3f269f26261d1cfbd4ec3e89cca0d7176a8617730c9a432457d83265e578fc655bdf8e9ce4c609b4fb4c0a5dff64f98436df84e375181910014d03cd535ccfea79ca98f1078e8affde1b54a7b668cd74363b37c2581b9fde72741667beb8c616db40392ce19f55c88773eb602d34925aa43f4c4d52ccda8a09c886dfef850a3c76ce48a72982cd98791a56c568f0ccb98daf34778c888ccfa7d63067f3c59755420332e63becb9bef41dfdd6b4b2106bda8e5253f751797b6056621ab16c0e149a160ff184b702aa4b72320440faa239d7c6870d8dd67849532dfc9630be348f26e058949bce6bd9b47fcea0016f37bbe56515e671917f91e221a6dd3d41bdd9aa99fadcd2f6bebb21f1b0ba2fda355a5f24e7a71dd338e24fa59714bf302853520a74bf5c6dc2e9e1d3d6d4b48de326692c30cf1695dd9007c594058c9e204ed1e7b5ab290e590e484310911cefca4d8a1e9573a94904e930c24a5d64fc399e081a45cca31b87da0298826dd1d5790d95bb6ebf1056b24a4654babdd46ec620c528b234a11f938c2bdb1208decdffb1d8ac537940a454059c3678d13b0bd8315fa4bf945d866f54ec89df365b139a9040d4d95c9ea7c27cc287ad8dc0ab72ad0fdc324", @typed={0x8, 0x5a, 0x0, 0x0, @uid=0xee00}, @generic="44198c147b7c8781aa9ac0d2cdd0953d205206ce78d19817ace9a97969455a132921c5ba25fff68f9cb98e7fcfd4ffbf63a70feb3075023c82a917dda9cbc8c32961e9ed79539248b33d24f6994382ec643e93bb9a568653d448f727d41f6eed7212c859744d90c1ab2f79b8fd69ed378511460ec6e1ad7def22f63090b9b6e260c7efd09741944cb80b644e9c56f4c070e4c0394241f8d5256e63", @generic="50e77e6de4ad4ed245843852a1bbd9640b2aa12cde2fd004a1c275cca3fa4c92f98655"]}, @NL80211_ATTR_VHT_CAPABILITY_MASK={0x10, 0xb0, "b07db942210e0ee3f49f8800"}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0xf}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, 0x1}, @NL80211_ATTR_SUPPORT_MESH_AUTH={0x4}, @NL80211_ATTR_STA_VLAN={0x8, 0x14, 0x80000001}]}, 0x1214}, 0x1, 0x0, 0x0, 0x4004080}, 0x8001) r5 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000001a80), r3) waitid$auto_P_ALL(0x0, 0xa5, &(0x7f0000001ac0)={@siginfo_0_0={0x2, 0x7f, 0x8001, @_sigchld={0xffffffffffffffff, 0xee00, 0x3, 0xb4ab, 0x80000001}}}, 0x7, &(0x7f0000001b40)={{0x3, 0x5}, {0xc969, 0x8}, 0xfffffffffffffff9, 0x40, 0x3ff, 0x100, 0xf39, 0x4, 0x8000000000000001, 0x1, 0x1a6, 0x2, 0x2, 0x8, 0x63d, 0x2}) (async) r6 = waitid$auto_P_ALL(0x0, 0xa5, &(0x7f0000001ac0)={@siginfo_0_0={0x2, 0x7f, 0x8001, @_sigchld={0xffffffffffffffff, 0xee00, 0x3, 0xb4ab, 0x80000001}}}, 0x7, &(0x7f0000001b40)={{0x3, 0x5}, {0xc969, 0x8}, 0xfffffffffffffff9, 0x40, 0x3ff, 0x100, 0xf39, 0x4, 0x8000000000000001, 0x1, 0x1a6, 0x2, 0x2, 0x8, 0x63d, 0x2}) r9 = prctl$auto(0x6, 0x2, r6, 0x8, 0x5) r10 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000001c40), r2) sendmsg$auto_NL802154_CMD_SET_PAN_ID(r2, &(0x7f0000001d40)={&(0x7f0000001c00), 0xc, &(0x7f0000001d00)={&(0x7f0000001c80)={0x74, r10, 0x300, 0x70bd2c, 0x80, {}, [@NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0xc3}, @NL802154_ATTR_SUPPORTED_CHANNEL={0x8, 0x16, 0x4}, @NL802154_ATTR_BEACON_INTERVAL={0x5, 0x26, 0xff}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0xffffffffffffff42}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r2}, @NL802154_ATTR_SEC_DEVKEY={0x2b, 0x2f, 0x0, 0x1, [@typed={0x8, 0x17, 0x0, 0x0, @uid=r8}, @typed={0x8, 0x77, 0x0, 0x0, @ipv4=@rand_addr=0x64010101}, @generic="ff57c2b78cb9b9356ed8cae33390c920b386a55448b168"]}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0xa}]}, 0x74}, 0x1, 0x0, 0x0, 0x810}, 0x14000800) (async) sendmsg$auto_NL802154_CMD_SET_PAN_ID(r2, &(0x7f0000001d40)={&(0x7f0000001c00), 0xc, &(0x7f0000001d00)={&(0x7f0000001c80)={0x74, r10, 0x300, 0x70bd2c, 0x80, {}, [@NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0xc3}, @NL802154_ATTR_SUPPORTED_CHANNEL={0x8, 0x16, 0x4}, @NL802154_ATTR_BEACON_INTERVAL={0x5, 0x26, 0xff}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0xffffffffffffff42}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r2}, @NL802154_ATTR_SEC_DEVKEY={0x2b, 0x2f, 0x0, 0x1, [@typed={0x8, 0x17, 0x0, 0x0, @uid=r8}, @typed={0x8, 0x77, 0x0, 0x0, @ipv4=@rand_addr=0x64010101}, @generic="ff57c2b78cb9b9356ed8cae33390c920b386a55448b168"]}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0xa}]}, 0x74}, 0x1, 0x0, 0x0, 0x810}, 0x14000800) sendmsg$auto_NL80211_CMD_STOP_SCHED_SCAN(r3, &(0x7f00000021c0)={&(0x7f0000001d80)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000002180)={&(0x7f0000001dc0)={0x3a8, r5, 0x200, 0x70bd28, 0x25dfdbfb, {}, [@NL80211_ATTR_COLOR_CHANGE_ELEMS={0x35c, 0x131, 0x0, 0x1, [@NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0xb}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x2}, @NL80211_ATTR_SCAN_FREQUENCIES={0x300, 0x2c, 0x0, 0x1, [@typed={0x14, 0x92, 0x0, 0x0, @ipv6=@loopback}, @typed={0x14, 0xd4, 0x0, 0x0, @ipv6=@private1}, @nested={0x2b, 0x158, 0x0, 0x1, [@generic="e6c64acd18dfda7eb678e9bbc396ab", @nested={0x4, 0xbb}, @nested={0x4, 0x22}, @nested={0x4, 0x3c}, @typed={0x4, 0x2}, @typed={0x5, 0x4a, 0x0, 0x0, @str='\x00'}]}, @generic="62d230a6005906ab56be8d033e52f0b7fb8f427eb84c83beacdb59fc02aec72e6286ad5ef27419afcbd62b03f77fcd825f2542c23f505c77acc1548a05080aadd8b2da7504ce58a32db04d1e3b2699412bf92a693c7e65d944c8ad4d8fff2940e0e676cb641a4b5d3b7676aa84f2db9a068e3f01eed8e67ac2c1f6c2f956d85e6c83bb9731ea4b653868fd4b4d074eaf2c62bb921a6523e29f7e87c10f640eeff5da08dc196d16a4a0a90fb835d4c501ceece984937972604009df50b2139913ccc4", @nested={0x10, 0x150, 0x0, 0x1, [@typed={0x8, 0x114, 0x0, 0x0, @fd=r3}, @nested={0x4, 0x11e}]}, @generic="e21d6e0bcc85e0cc0a52e22e84cdabee77b16bae7b5508a211d8d2c85dc921262ae79f98e3cacdc243ed1fa5e0a28f1426d8fc5f59f3b1ccaaed0245e87287342a5154ccccf1bd18376a7fc83af422d24cea8f4da1aa3f544ddb1bc73b769593c86305ebd88c03261b5bba690653a9fe63255e89f489ef040a2e8c791690886c04181b4f9258837006014d9a3ae23b66f30af44909f384c03ca9310444a52d22a540", @nested={0x134, 0xcf, 0x0, 0x1, [@typed={0x4, 0x137}, @generic="6e34591f4f4270101a126def2059442315fa61cbbe2da6287f2f2e1768aedf1ab7dc1af18c01266b8be6a93288544bfcbf3b76333b591e80", @typed={0xc, 0xc7, 0x0, 0x0, @str='nl80211\x00'}, @typed={0x8, 0x130, 0x0, 0x0, @pid=r7}, @generic="61c9f4ce9bc3ce523022276410cc38bdbcda765b0f68d931eacd723d4ba1ca9bdea7d337e0ecb5d8a6225ed1d66f0e6a6e578ca345c8676c599251fd5cb09158e6a06a57754a270a7c0f5a2481ae1c3d88bc33ddb357f69a93acec3292ae7ddae9bea7594461faf268dc42410daeb1e587897cc457b7ce8ac57a410772323bdc", @nested={0x4, 0xd9}, @nested={0x4, 0x37}, @generic="1b0e05d11fd965dbefb9d9b70e0054d200994d30ad0841bc637775ef38794f1ad0ebb35cbb6e5688e399a44b1fbd1b89a1cdac058da341f025da6205b878235fd588beeb71d0c44ea67ed65b9aacec9e32c556bf41632622"]}]}, @NL80211_ATTR_TIMED_OUT={0x4}, @NL80211_ATTR_STA_WME={0x3c, 0x81, 0x0, 0x1, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x4}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x5}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x5d}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x1}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x8}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x8}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x6}]}, @NL80211_ATTR_MAC={0x4}, @NL80211_ATTR_ROAM_SUPPORT={0x4}]}, @NL80211_ATTR_MLD_ADDR={0x7, 0x13a, "74866b"}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x6}, @NL80211_ATTR_WIPHY_NAME={0xd, 0x2, 'nl802154\x00'}, @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @NL80211_ATTR_PUNCT_BITMAP={0x8, 0x142, 0x3}, @NL80211_ATTR_TXQ_QUANTUM={0x8, 0x10c, 0x7f}]}, 0x3a8}, 0x1, 0x0, 0x0, 0x404c804}, 0x4040001) sendmsg$auto_NL80211_CMD_REMOVE_LINK(r9, &(0x7f0000003400)={&(0x7f0000002200)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000033c0)={&(0x7f0000002240)={0x1144, r4, 0x8, 0x70bd27, 0x25dfdbfe, {}, [@NL80211_ATTR_SCAN_FREQUENCIES={0x1130, 0x2c, 0x0, 0x1, [@nested={0x10f1, 0x106, 0x0, 0x1, [@nested={0x4, 0x80}, @nested={0x4, 0x139}, @generic="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", @nested={0x4, 0x127}, @typed={0x4, 0xd6, 0x0, 0x0, @binary}, @generic="dcd7188390ce4c5fbad227208aeff612c1404809f3b97cd498ed4bdc2a8c894ce5ad6eb3df", @generic="606ba371ca5a663501492f298b727f820adf5d4a023ea6c3417a44f5b598616b24ef076ef6bd4745c8a48f4396e8045ae3923e152f9bc67f862d7ad4d0a5653be2a30f8fc64d351b18f909adc247b541cbcdbb20f0321b62ee75082c53de792e4602ade7ff759b96ff7ba287e03d749889c91d433af4d03857803055ce9479ae02bcd53356d237896ea180d039d57112f51e34d6c06e49fc1f97835cf3460e072f484c4bbc4b3589dedf7357456ff255eedd2df9", @nested={0x4, 0x14a}]}, @typed={0x13, 0x147, 0x0, 0x0, @str='/dev/sequencer\x00'}, @typed={0x14, 0x13f, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @empty}}, @typed={0x10, 0xb5, 0x0, 0x0, @binary="6c7bcd246484b1accb048ed1"}]}]}, 0x1144}, 0x1, 0x0, 0x0, 0x4804}, 0x240040d4) r11 = socket(0x9, 0x5, 0x0) sendfile$auto(r0, r11, &(0x7f0000003440)=0x92d, 0x9) syz_genetlink_get_family_id$auto_nfc(&(0x7f00000034c0), r11) (async) r12 = syz_genetlink_get_family_id$auto_nfc(&(0x7f00000034c0), r11) sendmsg$auto_NFC_CMD_FW_DOWNLOAD(r11, &(0x7f0000003600)={&(0x7f0000003480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000035c0)={&(0x7f0000003500)={0xa0, r12, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@NFC_ATTR_VENDOR_DATA={0x81, 0x1f, "e3051ffc2d6c60c65f7323daee5d4fb671588cdc5d1b7a68f69a3bb57de7cd173ae7f5c1b64c0a2caf7404256824c226879a94414b3a38a9b5f6ab6bb2c1d654758be5dda5b88757f038cd08317cbebef1c5fffb48dc15642a304b3a9fae9ca6744882733b2126286d8a69d914007225eed527aadb037478f6d7513c22"}, @NFC_ATTR_VENDOR_ID={0x8, 0x1d, 0x6}]}, 0xa0}, 0x1, 0x0, 0x0, 0x4000}, 0x4000081) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000003640), r9) epoll_ctl$auto_EPOLL_CTL_MOD(r11, 0x3, r1, &(0x7f0000003680)={0x6, 0x4}) (async) epoll_ctl$auto_EPOLL_CTL_MOD(r11, 0x3, r1, &(0x7f0000003680)={0x6, 0x4}) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000036c0)='/proc/asound/card0/pcm0c/sub1/status\x00', 0x40, 0x0) ioctl$auto_BLKTRACESTART2(r2, 0x1274, 0x0) socket(0x28, 0xa, 0x1) (async) socket(0x28, 0xa, 0x1) sendmmsg$auto(r9, &(0x7f0000003900)={{&(0x7f0000003700)="03c8e5f94808994051de5c118efcfe28d37ec81f595f38c9ca4d896b5bdfd17cf08dada93ff2e767fc79b90ecda82bd79b5929b59ea4f3effa6a18602307b8f9f22b240f9b24e3c74a07c50f2cca14587ce4aac6e3c232f22c23090593e0628ebaadc3705776d3fd8ef7c63612f06611eb25987948593731f99aba5689a3846e71e4b8c0f3b8f474ca6a5dc87c98b9316e5e524972fabedd352fca2f2b18c2f9d99ac27badf57a2da935b25b421b5485ce4733a1efec040c3735cb88e98ccb913263ce89c7b4d8701a574b980c17b438caa6220379d5fc9e3ffb3c434794db", 0x9, &(0x7f0000003840)={&(0x7f0000003800)="0fcc991c3df5c1063d6e2439d68ce034b6e44ea70f611741", 0x80}, 0x2, &(0x7f0000003880)="6aa43693218d15027bc1d001b9302e7be68847ea64e6c85439258aab940a272ab2291f5a5755d9939f038a6e5db13591ea8a60ade0a812cbc6dbd768544acca8fafb9c8a21", 0x7, 0xff}, 0x1a}, 0x3, 0x9) 10m16.713228648s ago: executing program 5 (id=2196): r0 = socket(0x2, 0x801, 0x84) r1 = getsockopt$auto(r0, 0x84, 0x6d, 0x0, &(0x7f00000002c0)=0x8) mmap$auto(0x0, 0x1, 0xc, 0x7ffffffd, r0, 0x8001) mmap$auto(0x0, 0x9, 0x80000000000000df, 0x10004000eb1, r1, 0x201) close_range$auto(0x2, 0x8, 0x0) sysfs$auto(0x2, 0x100000000000027, 0x0) fsopen$auto(0x0, 0x1) (async) r2 = fsopen$auto(0x0, 0x1) socket(0x2, 0x4, 0x10000) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x8, 0x1, 0x8, 0xd, 0xe13, 0x81, 0x4, 0x2000000000000002, 0x0, 0x9, 0x1, 0x2, 0x80000001, 0xffffffffffffffff, 0x9, 0x20000800001, 0x3, 0x6, 0x7, 0x6, 0xa, 0x0, 0x4, 0x2a17, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, [0x18, 0x7, 0x0, 0x0, 0x200, 0x40000, 0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, 0x4, 0x2, 0x0, 0xfffffffffffffffe, 0x0, 0x4, 0xbb, 0x4, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x100000001, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2, 0x6]}, 0x9, 0x81) sendmsg$auto_OVS_VPORT_CMD_DEL(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="5d9767d2a163cb05e408e852655c563eaae1e3f413cac921847e6a1c065e56996c579f79008c4768e1a2e5ab0f8556803fc40cc0ad73034d01c3fd02000000e7f38600"/79], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x4010) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x400c811}, 0x20040801) sendmsg$auto_NL80211_CMD_GET_REG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4000010}, 0x48041) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) io_uring_setup$auto(0xb, 0x0) (async) r3 = io_uring_setup$auto(0xb, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x2c4080, 0x0) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) (async) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000380)='/dev/snd/midiC2D2\x00', 0x801, 0x0) socketcall$auto_SYS_GETSOCKNAME(0x6, &(0x7f0000000080)=0x3) (async) socketcall$auto_SYS_GETSOCKNAME(0x6, &(0x7f0000000080)=0x3) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000400)='/dev/video6\x00', 0x480300, 0x0) (async) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000400)='/dev/video6\x00', 0x480300, 0x0) openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/netdevsim/netdevsim1/health/break_health\x00', 0x40440, 0x0) openat$auto_snd_mixer_oss_f_ops_mixer_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer1\x00', 0x180, 0x0) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/video15\x00', 0x180, 0x0) (async) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/video15\x00', 0x180, 0x0) select$auto(0x9, &(0x7f00000000c0)={[0xeeda, 0x7, 0x100000001, 0xc, 0x6, 0x1ff, 0x6, 0x3, 0x4, 0x4618ecd2, 0x3, 0x42ff, 0x6, 0x9a8c, 0x9, 0x10001]}, 0x0, 0x0, 0x0) (async) select$auto(0x9, &(0x7f00000000c0)={[0xeeda, 0x7, 0x100000001, 0xc, 0x6, 0x1ff, 0x6, 0x3, 0x4, 0x4618ecd2, 0x3, 0x42ff, 0x6, 0x9a8c, 0x9, 0x10001]}, 0x0, 0x0, 0x0) dup2$auto(0x5, 0x4) ioctl$auto(0x3, 0xae60, 0x10000000000402) ioctl$auto_BLKTRACESETUP32(r3, 0xc0401273, &(0x7f0000000100)={"2ac95a600aaf0a102501db76800000000100", 0x8, 0x0, 0x7, 0x8000006, 0x9}) (async) ioctl$auto_BLKTRACESETUP32(r3, 0xc0401273, &(0x7f0000000100)={"2ac95a600aaf0a102501db76800000000100", 0x8, 0x0, 0x7, 0x8000006, 0x9, 0x0}) fcntl$auto(r2, 0x10000, r4) ioctl$auto(0x3, 0x8208ae63, 0x38) ioprio_set$auto(0x3, 0x0, 0x4b34) mmap$auto(0x0, 0x40000400008, 0x44000000000010df, 0x49b72, 0x2, 0x8000) (async) mmap$auto(0x0, 0x40000400008, 0x44000000000010df, 0x49b72, 0x2, 0x8000) 10m1.504168854s ago: executing program 34 (id=2196): r0 = socket(0x2, 0x801, 0x84) r1 = getsockopt$auto(r0, 0x84, 0x6d, 0x0, &(0x7f00000002c0)=0x8) mmap$auto(0x0, 0x1, 0xc, 0x7ffffffd, r0, 0x8001) mmap$auto(0x0, 0x9, 0x80000000000000df, 0x10004000eb1, r1, 0x201) close_range$auto(0x2, 0x8, 0x0) sysfs$auto(0x2, 0x100000000000027, 0x0) fsopen$auto(0x0, 0x1) (async) r2 = fsopen$auto(0x0, 0x1) socket(0x2, 0x4, 0x10000) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x8, 0x1, 0x8, 0xd, 0xe13, 0x81, 0x4, 0x2000000000000002, 0x0, 0x9, 0x1, 0x2, 0x80000001, 0xffffffffffffffff, 0x9, 0x20000800001, 0x3, 0x6, 0x7, 0x6, 0xa, 0x0, 0x4, 0x2a17, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, [0x18, 0x7, 0x0, 0x0, 0x200, 0x40000, 0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, 0x4, 0x2, 0x0, 0xfffffffffffffffe, 0x0, 0x4, 0xbb, 0x4, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x100000001, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2, 0x6]}, 0x9, 0x81) sendmsg$auto_OVS_VPORT_CMD_DEL(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="5d9767d2a163cb05e408e852655c563eaae1e3f413cac921847e6a1c065e56996c579f79008c4768e1a2e5ab0f8556803fc40cc0ad73034d01c3fd02000000e7f38600"/79], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x4010) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x400c811}, 0x20040801) sendmsg$auto_NL80211_CMD_GET_REG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4000010}, 0x48041) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) io_uring_setup$auto(0xb, 0x0) (async) r3 = io_uring_setup$auto(0xb, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x2c4080, 0x0) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) (async) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000380)='/dev/snd/midiC2D2\x00', 0x801, 0x0) socketcall$auto_SYS_GETSOCKNAME(0x6, &(0x7f0000000080)=0x3) (async) socketcall$auto_SYS_GETSOCKNAME(0x6, &(0x7f0000000080)=0x3) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000400)='/dev/video6\x00', 0x480300, 0x0) (async) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000400)='/dev/video6\x00', 0x480300, 0x0) openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/netdevsim/netdevsim1/health/break_health\x00', 0x40440, 0x0) openat$auto_snd_mixer_oss_f_ops_mixer_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer1\x00', 0x180, 0x0) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/video15\x00', 0x180, 0x0) (async) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/video15\x00', 0x180, 0x0) select$auto(0x9, &(0x7f00000000c0)={[0xeeda, 0x7, 0x100000001, 0xc, 0x6, 0x1ff, 0x6, 0x3, 0x4, 0x4618ecd2, 0x3, 0x42ff, 0x6, 0x9a8c, 0x9, 0x10001]}, 0x0, 0x0, 0x0) (async) select$auto(0x9, &(0x7f00000000c0)={[0xeeda, 0x7, 0x100000001, 0xc, 0x6, 0x1ff, 0x6, 0x3, 0x4, 0x4618ecd2, 0x3, 0x42ff, 0x6, 0x9a8c, 0x9, 0x10001]}, 0x0, 0x0, 0x0) dup2$auto(0x5, 0x4) ioctl$auto(0x3, 0xae60, 0x10000000000402) ioctl$auto_BLKTRACESETUP32(r3, 0xc0401273, &(0x7f0000000100)={"2ac95a600aaf0a102501db76800000000100", 0x8, 0x0, 0x7, 0x8000006, 0x9}) (async) ioctl$auto_BLKTRACESETUP32(r3, 0xc0401273, &(0x7f0000000100)={"2ac95a600aaf0a102501db76800000000100", 0x8, 0x0, 0x7, 0x8000006, 0x9, 0x0}) fcntl$auto(r2, 0x10000, r4) ioctl$auto(0x3, 0x8208ae63, 0x38) ioprio_set$auto(0x3, 0x0, 0x4b34) mmap$auto(0x0, 0x40000400008, 0x44000000000010df, 0x49b72, 0x2, 0x8000) (async) mmap$auto(0x0, 0x40000400008, 0x44000000000010df, 0x49b72, 0x2, 0x8000) 8m28.805842157s ago: executing program 6 (id=2474): mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) r0 = socket(0x18, 0xa, 0x1) r1 = socket(0xa, 0x2, 0x0) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa}, 0x55) semctl$auto(0x7, 0x2, 0x13, 0x1) lsm_list_modules$auto(0x0, 0x0, 0x0) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, 0x0, 0x108, 0x0, 0x6c, 0x697a}, 0xed71390}, 0x9a6, 0xff00) mmap$auto(0x0, 0x20004, 0x1ff, 0xeb1, 0x8000000000000024, 0x8000) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r2 = syz_genetlink_get_family_id$auto_hsr(&(0x7f00000000c0), r0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'veth1_vlan\x00', 0x0}) sendmsg$auto_HSR_C_GET_NODE_STATUS(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x68, r2, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@HSR_A_IFINDEX={0x8}, @HSR_A_IFINDEX={0x8, 0x2, r3}, @HSR_A_NODE_ADDR_B={0xa, 0x5, @remote}, @HSR_A_IFINDEX={0x8, 0x2, r4}, @HSR_A_IF2_SEQ={0x6, 0x7, 0x400}, @HSR_A_NODE_ADDR_B={0xa}, @HSR_A_IF2_SEQ={0x6, 0x7, 0x98}, @HSR_A_IF2_SEQ={0x6, 0x7, 0x4}, @HSR_A_NODE_ADDR_B={0xa}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000040}, 0x40040) eventfd$auto(0x4) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0xfffffffd, 0x5, 0xffffffff, 0x0) unshare$auto(0x40000080) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) sendmmsg$auto(0x3, 0x0, 0x3, 0x0) 8m28.027504137s ago: executing program 6 (id=2475): readv$auto(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0xf7}, 0x7) 8m27.681025119s ago: executing program 6 (id=2477): r0 = openat$auto_proc_clear_refs_operations_internal(0xffffffffffffff9c, &(0x7f0000000600)='/proc/thread-self/clear_refs\x00', 0x2, 0x0) r1 = socket(0x10, 0x3, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket(0xa, 0x2, 0x3a) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'veth1_to_bond\x00', 0x0}) bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_5={@target_ifindex=r3, r2, 0x8000, 0x2, 0xffffffffffffffff, @relative_id=0x13, 0x6}, 0xf) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB=']'], 0x1ac}}, 0x40000) recvmmsg$auto(r1, &(0x7f0000000140)={{0x0, 0x3, &(0x7f0000000080)={0x0, 0x400}, 0x5, 0x0, 0x2000000200002, 0x8}, 0x803}, 0xfffffff9, 0x10, 0x0) write$auto_proc_clear_refs_operations_internal(r0, 0x0, 0xffffff4b) openat$auto_show_traces_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/tracing/available_tracers\x00', 0x40000, 0x0) mprotect$auto(0x200000000000, 0x806121, 0x6) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) syz_genetlink_get_family_id$auto_ncsi(&(0x7f0000001340), 0xffffffffffffffff) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) 8m26.651133786s ago: executing program 6 (id=2480): mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x40000) bpf$auto(0x12, &(0x7f0000000040)=@link_detach, 0x26) mlock$auto(0x1000, 0x6) mlockall$auto(0x800000000000005) 8m26.326738312s ago: executing program 6 (id=2481): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x15, 0x5, 0x0) mmap$auto(0x0, 0x5, 0x3, 0x17, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x400008, 0x203, 0x9b72, 0x2, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x40000) ioprio_set$auto(0x2, 0x800000000, 0x8) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_OVS_DP_CMD_NEW(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x34, r3, 0x1, 0x2070bd26, 0x25dfdbfd, {}, [@OVS_DP_ATTR_UPCALL_PID={0x8, 0x2, 0x4}, @OVS_DP_ATTR_NAME={0x8, 0x1, 'HfR\x00'}, @OVS_DP_ATTR_UPCALL_PID={0x8, 0x2, 0x9}, @OVS_DP_ATTR_MASKS_CACHE_SIZE={0x8, 0x7, 0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x80) r4 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000004440), 0xffffffffffffffff) sendmsg$auto_OVS_DP_CMD_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000004540)={&(0x7f00000000c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01009b64c23ef155546b0104000008000900", @ANYBLOB="080005000600000008000200", @ANYRES32=0x0, @ANYBLOB="0c00010069"], 0x8d}, 0x1, 0x0, 0x0, 0x10}, 0x2000000) sendmsg$auto_OVS_DP_CMD_NEW(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r4, 0x1, 0x2070bd26, 0x25dfdbf8, {}, [@OVS_DP_ATTR_UPCALL_PID={0x8, 0x2, 0x4}, @OVS_DP_ATTR_NAME={0x8, 0x1, 'HfR\x00'}, @OVS_DP_ATTR_UPCALL_PID={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x801}, 0x80) 8m25.780779609s ago: executing program 6 (id=2484): r0 = openat$auto_proc_clear_refs_operations_internal(0xffffffffffffff9c, &(0x7f0000000600)='/proc/thread-self/clear_refs\x00', 0x2, 0x0) r1 = socket(0x10, 0x3, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x202000a, 0x5, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x15, 0x5, 0x0) openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, &(0x7f0000000140)='/dev/input/mice\x00', 0x22002, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) write$auto(0x3, 0x0, 0x70) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB=']'], 0x1ac}}, 0x40000) recvmmsg$auto(r1, &(0x7f0000000140)={{0x0, 0x3, &(0x7f0000000080)={0x0, 0x400}, 0x5, 0x0, 0x2000000200002, 0x8}, 0x803}, 0xfffffff9, 0x10, 0x0) write$auto_proc_clear_refs_operations_internal(r0, 0x0, 0xffffff4b) openat$auto_show_traces_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/tracing/available_tracers\x00', 0x40000, 0x0) mprotect$auto(0x200000000000, 0x806121, 0x6) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) syz_genetlink_get_family_id$auto_ncsi(&(0x7f0000001340), 0xffffffffffffffff) r2 = socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) getsockopt$auto_SO_NOFCS(r2, 0x6, 0x2b, &(0x7f0000000000)='/proc/thread-self/clear_refs\x00', &(0x7f0000000040)) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) 8m10.723728875s ago: executing program 35 (id=2484): r0 = openat$auto_proc_clear_refs_operations_internal(0xffffffffffffff9c, &(0x7f0000000600)='/proc/thread-self/clear_refs\x00', 0x2, 0x0) r1 = socket(0x10, 0x3, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x202000a, 0x5, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x15, 0x5, 0x0) openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, &(0x7f0000000140)='/dev/input/mice\x00', 0x22002, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) write$auto(0x3, 0x0, 0x70) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB=']'], 0x1ac}}, 0x40000) recvmmsg$auto(r1, &(0x7f0000000140)={{0x0, 0x3, &(0x7f0000000080)={0x0, 0x400}, 0x5, 0x0, 0x2000000200002, 0x8}, 0x803}, 0xfffffff9, 0x10, 0x0) write$auto_proc_clear_refs_operations_internal(r0, 0x0, 0xffffff4b) openat$auto_show_traces_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/tracing/available_tracers\x00', 0x40000, 0x0) mprotect$auto(0x200000000000, 0x806121, 0x6) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) syz_genetlink_get_family_id$auto_ncsi(&(0x7f0000001340), 0xffffffffffffffff) r2 = socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) getsockopt$auto_SO_NOFCS(r2, 0x6, 0x2b, &(0x7f0000000000)='/proc/thread-self/clear_refs\x00', &(0x7f0000000040)) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) 2m43.61622842s ago: executing program 7 (id=3306): syz_genetlink_get_family_id$auto_net_shaper(&(0x7f0000001500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'pimreg1\x00'}) sendmsg$auto_ETHTOOL_MSG_TSCONFIG_GET(0xffffffffffffffff, 0x0, 0x4004000) ioctl$auto_XFS_IOC_ERROR_CLEARALL(0xffffffffffffffff, 0x40085875, 0x0) mmap$auto(0x0, 0xa00006, 0x400002, 0x40eb1, 0x602, 0x300000000000) mmap$auto(0x0, 0x400008, 0xdf, 0x14, 0x2, 0x8000) r0 = socket(0x2, 0x1, 0x106) bind$auto(r0, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$auto(0x3, 0x80000541b, 0x38) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D2\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) connect$auto(r1, &(0x7f0000000140)=@phonet={0x23, 0xc, 0x1, 0x2}, 0xdba6) write$auto(0x3, 0x0, 0xfffffdef) select$auto(0x9, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da07, 0x3, 0x3, 0x65, 0x8000001f, 0x1000, 0x6d3e, 0x9, 0x2, 0x8]}, 0x0) select$auto(0x8, &(0x7f00000000c0)={[0x8eeda, 0x7, 0x6, 0x9, 0x33, 0x1ff, 0x6, 0x4, 0x800000000000004, 0x4618ecd2, 0x3, 0x42ff, 0x6, 0x9a8e, 0x9, 0x10001]}, 0x0, 0x0, &(0x7f00000001c0)={0x6, 0xcb}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_TIPC_NL_LINK_GET(r2, 0x0, 0x4) mmap$auto(0xfffffffffffffffd, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mmap$auto(0x0, 0x2000d, 0x7, 0xeb1, 0x404, 0x10008000) prctl$auto_PR_SET_DUMPABLE(0x4, 0x4, 0x1, 0x5b18, 0x3a) madvise$auto(0x0, 0xffffffffffff0005, 0x19) 2m41.956582071s ago: executing program 7 (id=3310): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = prctl$auto(0x1000000003b, 0xffc, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, r0, 0x8000) unshare$auto(0x40000080) setgroups$auto(0x7, 0x0) 2m41.117288004s ago: executing program 7 (id=3314): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_IPVS_CMD_SET_CONFIG(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="240000009d0dcb4bb756f7ed2d68310e4fb5fd15dc9a9d34dec012832a3c5b2aa0f21bdd551bf2b20df4958960de8949eb6c86fcad92c6df113e2aebdd3943f89dc8c7bff1736bff57d79c3927762dcce7b2d5ef064b35168e41a8d240b2f9c1902a3d66291a183313b793f8dc63ebdd89e9eea25eca29f9ca4d5bfc0baf407b11e524db702fee50cfa726518c8404553b6494a1602e80c5005efa6cb461372c298d44879f59cb1cbfafb7bc0b9be6d03008ae8c7da04806d97d3a0df2dbb7417247db650e9787ab8e2ca7e914", @ANYRES16=r1, @ANYBLOB="01002abd7000fbdbdf250c000000080005009be300000800040000000000"], 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x44) wait4$auto(0x0, 0x0, 0xf, &(0x7f0000000140)={{0x2599}, {0xffffffffffffffff, 0x1000000009}, 0x2, 0x800080000001, 0x1, 0x1000, 0x5, 0x7, 0x5, 0x5, 0xb11c, 0x8, 0xfffffffffffffffd, 0xfffffffffffffeff, 0xffff, 0x801c0000003}) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000826bd7000fedbdf250300000008000400b70a0000060007000080000008000200", @ANYRES32, @ANYBLOB="0a0005000180c200000e00000a07000000000000000e00000a0001"], 0x68}, 0x1, 0x0, 0x0, 0x40080}, 0x40) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000003b40)={'veth0_to_hsr\x00', 0x0}) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYRES16=r4], 0x1ac}, 0x1, 0x0, 0x0, 0x8000}, 0x40001) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40000) sendmmsg$auto(r3, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x4008) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) r5 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self/oom_adj\x00', 0x49402, 0x0) openat$auto_mgts_fops_(0xffffffffffffff9c, &(0x7f0000000100), 0x10080, 0x0) read$auto(r5, 0x0, 0x9a28) openat$auto_rfcomm_dlc_debugfs_fops_(0xffffffffffffff9c, &(0x7f0000000040), 0x101201, 0x0) close_range$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x2) finit_module$auto(0x3, 0xfffffffffffffffe, 0x400000000004) r6 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) r7 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/mm/hugepages/hugepages-2048kB/nr_hugepages_mempolicy\x00', 0xa001, 0x0) write$auto(r7, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) preadv$auto(0xffffffffffffffff, 0x0, 0x8, 0x6, 0x9f4b) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptye4\x00', 0x763100, 0x0) writev$auto(r6, &(0x7f0000000200)={0x0, 0x7}, 0x3) memfd_secret$auto(0x4) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/tty16\x00', 0x0, 0x0) (fail_nth: 1) 2m38.988469045s ago: executing program 7 (id=3318): semtimedop$auto(0x0, &(0x7f0000000b80)={0xc, 0x5, 0x8f}, 0x3, 0x0) 2m38.351486939s ago: executing program 7 (id=3319): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x169780, 0x0) r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp1\x00', 0x20342, 0x0) ioctl$auto_SNDCTL_DSP_GETISPACE(r0, 0x8010500d, &(0x7f0000000040)) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80802, 0x0) r1 = socket(0x2b, 0x1, 0x0) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/irq/13/effective_affinity_list\x00', 0x2000, 0x0) r2 = ioctl$auto_TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) sendfile$auto(r2, 0xffffffffffffffff, 0x0, 0x8080000001) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @loopback}, 0x6a) sendmmsg$auto(r1, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, 0x0, 0x9, 0x0, 0x1f, 0x9}, 0x800009}, 0x7, 0x20000000) r3 = io_uring_setup$auto(0x6, 0x0) ioctl$auto_SNDCTL_TMR_CONTINUE(r3, 0x5404, &(0x7f0000000180)="55caa03e8adb9a050dfb76d2f09e314b147482572c5e2ccf9997f174168491bb032073f20d4a449054cec05748c1712d72be6bd4db1c296f2581c7a14eeaf3d5a38b34666f5c2bb3c3ef389ec3fce2adc0808de693a4889cd1de99377c025f1a79d3f6170ce8c119a00572ec31d93d250da42a302486435408c54746ff6cefca9674ca48c0135d29763a27c8c9400efc93894b2e6f10f5aca8647e2a31882cc75dffc3ba6f66392963277d08d300872293dcc2f12641459705fa266a4fb1ed5738b09952383283de16753c9c3236e840db8cecb64e300614b28d0e13ee438eff3d6fb65a15423bc8f74057870ed57fad41d1447e6896") setsockopt$auto(0x3, 0x1, 0x2f, 0x0, 0x9) write$auto(0x3, 0x0, 0xfffffdef) fsconfig$auto_FSCONFIG_CMD_CREATE(r3, 0x6, &(0x7f0000000080)='\x00', &(0x7f0000000180), 0x7) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) 2m37.331787245s ago: executing program 7 (id=3322): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x169780, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80802, 0x0) r0 = socket(0x2b, 0x1, 0x0) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/irq/13/effective_affinity_list\x00', 0x2000, 0x0) get_mempolicy$auto(0xfffffffffffffffe, 0x0, 0x3, 0x1ff, 0x3) sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080000001) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @loopback}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, 0x0, 0x9, 0x0, 0x1f, 0x9}, 0x800009}, 0x7, 0x20000000) r1 = io_uring_setup$auto(0x6, 0x0) setsockopt$auto(0x3, 0x1, 0x2f, 0x0, 0x9) write$auto(0x3, 0x0, 0xfffffdef) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/nbd3/queue/iostats\x00', 0x80302, 0x0) sendfile$auto(r2, r2, 0x0, 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_gtp(&(0x7f0000001040), 0xffffffffffffffff) sendmsg$auto_GTP_CMD_GETPDP(r3, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c000000fc072d809d982f22a1c0e43e8cfb51548b7ead8f8f1df0ca37bb2421c8f34cb44979f31285d909e81e1f95ca54dd0bdf8c8861f2cd144ef3f1d12a9f6d087ae95792fa176644dc4a27ae3d0f64c6060d7eed", @ANYRES16=r4, @ANYBLOB="01002cbd7000fedbdf250200000008000100ff030000080002000800000005000d00e5000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x24040814) fsconfig$auto_FSCONFIG_CMD_CREATE(r1, 0x6, &(0x7f0000000080)='\x00', &(0x7f0000000180), 0x7) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) 2m21.116961186s ago: executing program 36 (id=3322): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x169780, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80802, 0x0) r0 = socket(0x2b, 0x1, 0x0) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/irq/13/effective_affinity_list\x00', 0x2000, 0x0) get_mempolicy$auto(0xfffffffffffffffe, 0x0, 0x3, 0x1ff, 0x3) sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080000001) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @loopback}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, 0x0, 0x9, 0x0, 0x1f, 0x9}, 0x800009}, 0x7, 0x20000000) r1 = io_uring_setup$auto(0x6, 0x0) setsockopt$auto(0x3, 0x1, 0x2f, 0x0, 0x9) write$auto(0x3, 0x0, 0xfffffdef) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/nbd3/queue/iostats\x00', 0x80302, 0x0) sendfile$auto(r2, r2, 0x0, 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_gtp(&(0x7f0000001040), 0xffffffffffffffff) sendmsg$auto_GTP_CMD_GETPDP(r3, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c000000fc072d809d982f22a1c0e43e8cfb51548b7ead8f8f1df0ca37bb2421c8f34cb44979f31285d909e81e1f95ca54dd0bdf8c8861f2cd144ef3f1d12a9f6d087ae95792fa176644dc4a27ae3d0f64c6060d7eed", @ANYRES16=r4, @ANYBLOB="01002cbd7000fedbdf250200000008000100ff030000080002000800000005000d00e5000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x24040814) fsconfig$auto_FSCONFIG_CMD_CREATE(r1, 0x6, &(0x7f0000000080)='\x00', &(0x7f0000000180), 0x7) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) 10.888956722s ago: executing program 4 (id=3645): mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) r0 = pidfd_open$auto(0x1, 0x0) setns(r0, 0x60020000) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x12e) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/system/memory/memory12/power/control\x00', 0x100, 0x0) getrlimit$auto(0x1, 0x0) setresuid$auto(0x0, 0x0, 0x0) shmctl$auto(0x2, 0x8, &(0x7f0000000240)={{0x3, 0xffffffffffffffff, 0x0, 0x6, 0x9, 0x5, 0x1}, 0x7f, 0x1, 0x8001, 0xc, @raw=0x1, @raw=0x6, 0x4, 0x0, &(0x7f0000000080)="2de5d47b50c3175b50b7c9c6f55269efaab5ae947acdf3c81973d849fbeb7c925c6c81cc7c858ddee91fd1c02bb1a6ee66ff1a58ea80fae019584dcad4e4dca17b5b4b20cec827b9f34369edd925fa55efc82d4b82aaef381bdf84806d8b8fd6669796240fe1a6d692b2954e31f4ceef5235c866d6a37fe648b45ae71cdb1560cc176194088041a79631c3b4a29fee000cde00e543af1bfddcc012798a55c6a85789230d214775a4f6ec4e326bbfdeda1e98164cd0be37173605dab01937663dd4272b456340bebd662a2e4e3cf3b30c115acf715d078e14ae8ca93088d491f6b886", &(0x7f0000000180)="b34a9ae8b82c20f07f6bca9b07eebabb6c7550d04d21707c144df61d7573c56e6654fcb05a1bbd3ffd67dae188d26905d27cda4272ffffe8c302d6192a1dcef7f23bdca123ae28e8569d448bdf22333b9f3b76c8d32fc072a004e6bfdbfc3082e18b819bd939c82591417c1a5b427b4c2e904e4a453ba93eca52ea6bf8814646da6f5f4cf579e2e528896e64d22a5e714718dbfa22ecaf25333a48daae7e"}) keyctl$auto(0x2, r1, 0x0, r2, 0x7) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x0, 0x0) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) r4 = socket(0xa, 0x800, 0x3a) socket$nl_generic(0x10, 0x3, 0x10) socket(0x21, 0x1, 0x4) ioctl$auto(r4, 0x6, 0xffffffffffffffff) ioctl$auto(0x3, 0x4038a67a, r0) mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000) socket(0x10, 0x80000, 0x0) getrandom$auto(0x0, 0x5fffffb, 0x4) socket(0x1d, 0xa, 0x8) r5 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtd0\x00', 0x2, 0x0) ioctl$auto_MEMERASE64(r5, 0x40104d14, &(0x7f0000000040)={0x3, 0x1000}) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) socket(0xa, 0x800, 0x84) mmap$auto(0x0, 0x20009, 0x3, 0xeb1, 0x401, 0x8000) socket(0x10, 0x80002, 0x0) openat$auto_tracing_readme_fops_trace(0xffffffffffffff9c, 0x0, 0x80, 0x0) flistxattr$auto(0xffffffffffffffff, &(0x7f0000000100)='/dev/dsp1\x00', 0x7) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xfffffffffffffffe, 0x8000) madvise$auto(0x0, 0x2003f0, 0x800015) 8.405284311s ago: executing program 8 (id=3652): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) setgroups$auto(0x9, &(0x7f0000000080)=0xc8) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) socket(0x2b, 0x1, 0x0) listen$auto(r0, 0x81) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0xe) keyctl$auto(0x1f, 0x1, 0x0, 0x3, 0x3ff) prctl$auto(0x1ff, 0x1, 0x4, 0x5, 0x7) setgroups$auto(0x2, &(0x7f0000000180)=0x200) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) socket(0xa, 0x1, 0x84) socket(0xa, 0x5, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x8100, 0x0) socket(0x80000000000002d, 0x0, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000440)='/sys/devices/platform/dummy_hcd.0/usb1/bConfigurationValue\x00', 0x63102, 0x0) sendfile$auto(r2, r2, 0x0, 0x2) madvise$auto(0x0, 0xffffffffffff0005, 0x19) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(r1, &(0x7f00000001c0)=@can, 0xff) sysfs$auto(0x2, 0x2, 0x0) socket(0x23, 0x3, 0x387) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) io_uring_setup$auto(0x6, 0x0) sendmsg$auto_NL80211_CMD_GET_STATION(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8001}, 0x2400c081) 8.324915061s ago: executing program 2 (id=3653): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000180)='/dev/tty43\x00', 0x101201, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp1\x00', 0x20b42, 0x0) ioctl$auto_SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000140)="0400") openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f0000000200), 0x202080, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda1\x00', 0x900, 0x0) io_uring_setup$auto(0xb, 0x0) io_uring_setup$auto(0x83, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/002/001\x00', 0x4380, 0x0) openat$auto_aoe_fops_aoechr(0xffffffffffffff9c, &(0x7f0000000000)='/dev/etherd/err\x00', 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D1\x00', 0x20c002, 0x0) openat$auto_rfkill_fops_core(0xffffffffffffff9c, &(0x7f0000000140), 0x382, 0x0) socket(0x15, 0x5, 0x0) socketpair$auto(0x96, 0x9, 0xfffffdfd, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/mm/transparent_hugepage/hugepages-64kB/stats/nr_anon\x00', 0x0, 0x0) openat$auto_lowpan_enable_fops_(0xffffffffffffff9c, &(0x7f0000000100), 0x109500, 0x0) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, 0x0, 0x60c40, 0x0) openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, 0x0, 0x105000, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) socketpair$auto(0x4004, 0x2, 0xfff, 0x0) ioctl$auto_TIOCSETD2(r1, 0x5423, 0x0) write$auto(r1, 0x0, 0x1) 8.153282392s ago: executing program 4 (id=3654): r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000200)='/dev/snd/controlC0\x00', 0x222101, 0x0) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, r0, 0x0) write$auto(0xffffffffffffffff, &(0x7f0000000080)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94&\x81\xe2\x13\x8f\xea#\xf8F\xbbOO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\b\xc1\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xcbA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(', 0xa) unshare$auto(0x40000080) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) listen$auto(0x3, 0x81) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x202000a, 0xffffffff, 0xdc, 0xfffffffffffffffa, 0x8000) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x24048084) madvise$auto(0x9, 0x200007, 0x800) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, 0x0, 0x103003, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x101001, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000001c0), 0x101000, 0x0) r2 = openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f0000000340), 0x80200, 0x0) pread64$auto(r2, &(0x7f0000000240)='\x03W\x96l\x15\x00'/21, 0x100000002, 0x100000001) 7.63151086s ago: executing program 2 (id=3655): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/zswap/parameters/compressor\x00', 0xc0002, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) (async) mmap$auto(0x0, 0x2020009, 0x3, 0x9000000eb1, 0xfffffffffffffffa, 0x8000) getrlimit$auto(0x3, 0x0) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ram1\x00', 0x6281, 0x0) ioctl$auto_BLKZEROOUT(r1, 0x127f, 0x0) r2 = openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000140)='/dev/cuse\x00', 0x1c1041, 0x0) write$auto_fuse_dev_operations_fuse_i(r2, &(0x7f0000000440)="1100000007000000000000000000000001", 0x11) (async) r3 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) ioctl$auto_SNDCTL_DSP_SPEED(r3, 0xc0045002, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x40009, 0xe2, 0x9b72, 0x7, 0x28000) (async) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f00000011c0), 0xa2741, 0x0) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/vtconsole/vtcon1/bind\x00', 0x182b02, 0x0) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) (async) r4 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda1\x00', 0xe6e43, 0x0) ioctl$auto_BLKFLSBUF(r4, 0x1261, 0x0) (async) lseek$auto(0x3, 0xffffffffff800002, 0x10) (async) ioctl$auto_BLKFLSBUF(r4, 0x1261, 0x0) (async) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x9}, 0x8) unshare$auto(0x40000080) (async) write$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f0000000000)="b2", 0x1) (async) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv6/neigh/bond_slave_1/ucast_solicit\x00', 0x101202, 0x0) (async) setsockopt$auto_SO_PEEK_OFF(r3, 0x8, 0x2a, &(0x7f00000000c0)='/dev/cuse\x00', 0x4197) (async) write$auto_ocfs2_control_fops_stack_user(r0, &(0x7f0000003900)='\t', 0x1) (async) r5 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/fb0\x00', 0x20401, 0x0) ioctl$auto(r0, 0x40044620, r4) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/apparmor/parameters/lock_policy\x00', 0x82, 0x0) sendfile$auto(r6, r6, 0x0, 0x5) (async) getsockopt$auto_SO_MAX_PACING_RATE(r5, 0x85, 0x2f, &(0x7f0000000040)='&-\x00', &(0x7f0000000080)=0x1c) 6.638732786s ago: executing program 3 (id=3657): open(&(0x7f0000000540)='./cgroup\x00', 0x0, 0x310) r0 = socket(0xa, 0x802, 0x3a) r1 = prctl$auto(0x21, 0x0, 0x0, 0x0, 0x0) setsockopt$auto(r0, 0x29, 0x21, 0x0, 0x18000113) r2 = openat$auto_dynamic_events_ops_trace_dynevent(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/dynamic_events\x00', 0x542, 0x0) write$auto_dynamic_events_ops_trace_dynevent(r2, &(0x7f0000000040)='-:', 0x2) alarm$auto(0x4) connect$auto(r1, &(0x7f0000000000)=@phonet={0x23, 0x2, 0x5, 0x4b}, 0x5b) unshare$auto(0x40000080) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) set_mempolicy$auto(0x1, 0x0, 0x803) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_ovs_vport(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$auto_OVS_VPORT_CMD_DEL(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010027bd7000fcdbdf250200000004000a800800050000000008"], 0x20}, 0x1, 0x0, 0x0, 0x8800}, 0x4000000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) memfd_create$auto(0x0, 0xe) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) mmap$auto(0x0, 0x810006, 0xffb, 0x8000000008011, 0x3, 0x0) msync$auto(0x0, 0xe0, 0x6) madvise$auto(0x7f, 0xfffffffffffefffd, 0x17) pkey_free$auto(0xfffffffd) bpf$auto(0x0, &(0x7f00000001c0)=@link_detach={r3}, 0x10) r5 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x20342, 0x0) ioctl$auto_SOUND_MIXER_READ_RECSRC2(r5, 0x80044dff, &(0x7f0000000000)) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/virtual/block/loop10/queue/add_random\x00', 0x80302, 0x0) writev$auto(r6, &(0x7f0000000100)={&(0x7f0000000340), 0x7111}, 0x4) bpf$auto(0x18, &(0x7f0000000380)=@bpf_attr_0={0x9, 0xa66, 0xa9ef, 0x2, 0x3, r0, 0x2, "ef36bbca3830aff5d08eae73a1117d96", 0x0, r6, 0x0, 0x80000000, 0x7, 0xc}, 0x92) 6.281151069s ago: executing program 8 (id=3658): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x3fd, 0x8000) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) mmap$auto(0x0, 0x2a, 0xdf, 0x9b72, 0x1000, 0x28000) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/oss/devices\x00', 0x0, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) prctl$auto_PR_SET_VMA(0x53564d41, 0x0, 0x0, 0x7fff, 0x2) r0 = openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f0000006900)='/sys/kernel/config/target/dbroot\x00', 0x189002, 0x0) write$auto(r0, &(0x7f0000000080)='\x00\x00s\xa6\xc2\x1d\a\r\x05`\xa6\xfef\xa3\x00\x00q,h\xa2\x99;\xd9S\xbb\x81\xaa2\xa4oJ\x15\xd0\xc8\'h\x8d\x9f&\xc7\xde\xb3\x03\x8eB\x9e%h\xf4\xa5\xfdt{\x82t\xc9\xf9\xf8\xe6\xee}`\xd9\xd8\n\xee\x7f\xbb\x04\x17\xca\x1f~\xaf<\xe7f[*\x02\t\x8f\'t\xbe\xd1\x94\x17\x82\x9c\xb2\xb7\xda\xb0\xc1s\xbeR\x82\x14\xe3Oi\xda3V\t\xe3\xa4d@\xe9\x823P\x9cS\xb3\xe5nz\x99?\xb8\xcb\xcd\x88)\xf9:\x16UB\x15\x1a9\xe05%{X\x1a\\-\xad\xce\x91;\f\xc6\xf43\xcd\x92N\xf9\x97\xcf\x8d\xd1l\xfb\x9d\xa8 \xf3\x99+\x0f\x9eX\xc4\x8a\xf3\x86\x8b \xe6j\xa1\x0e\xf7\xf7\x12\r\xcc\xf2m\xf5\x84\x9b\xf5\rp\x8c\xc9X\xd6u0\xd2\x97f|\b\x17\'F\x1b\xb9\xe9f\xfbo\x9d\xb2\xc0\x8b|j\x00;\xb6\xee\xeb<#`\xa34\"cD\xcd\xea\a\b\xb2o\x93\xbd\xdc\xd4\xe7\xfaca\xf3\x9eW\xf2\xc9\x8e\xeb^^T\x8d\xf3\tk\x03\xacs\xd0!\xbd\xc3G\x8f\xdf\xc9\xa0\xca\xeb\xc22;GH\xdf \x91\x88\x99\xf8m\xa2\x1e\x81\xfd\x82\x9a\x92\x97\x1f\xb8^\x9eF\x18\xcas\x9a\xeaED\x19\xfb\xd3\x94|4\xfc\xb0\x7fx$\xc7\xb2\x9cW\xc0\xdd\x16\x16\xaf\xb2@\x81:\x99\xf8\x8b\xe9!\xd2X\xf1~\xbb\x13', 0x100400a3db) r1 = set_tid_address$auto(&(0x7f0000001000)=0x759) r2 = prctl$auto(0x5, 0x4, r1, 0x4, 0x8) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000000), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000540), r3) sendmsg$auto_ETHTOOL_MSG_TSCONFIG_SET(r3, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01008a0c0000fddbdf252f00000018000180140002007465616d5f736c4a76650d4a955c3000020000"], 0x2c}, 0x1, 0x0, 0x0, 0xc084}, 0x4000) sendmsg$auto_ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, 0x0, 0x800) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), r4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x80302, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002cbd7000fcdbdf252100000008000300", @ANYRES32=r6], 0x28}}, 0x400c080) r8 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_SET_WIPHY(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01002dbd7100f97bf53b7200000408000300", @ANYRES32=r10], 0x24}, 0x1, 0x0, 0x0, 0x404c0c0}, 0x80) clone$auto(0x2, 0x20aa2890, 0x0, 0x0, 0xfffffffffffffe00) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb3, r2, 0x8000) socketcall$auto_SYS_GETSOCKOPT(0xf, &(0x7f0000000280)=0x5) 5.452919192s ago: executing program 2 (id=3659): unshare$auto(0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r2 = socket(0x2b, 0x3, 0x20000) ioctl$auto_BTRFS_IOC_SET_RECEIVED_SUBVOL_32(r1, 0xc0c09425, &(0x7f00000001c0)={"c03b998f3c5f46e31e91506f8e4e54bd", 0x6, 0xd62, {0x1, 0xfffffffd}, {0x3}, 0x8000000000, [0x4, 0x8, 0x100, 0x1, 0x9, 0x6, 0x7, 0x9, 0xcaa, 0x8, 0x1ff, 0x9, 0x1b, 0x4, 0x4, 0x4]}) listen$auto(0x3, 0x81) mmap$auto(0x4, 0x2020009, 0x7, 0xeb1, r2, 0x8000) mmap$auto(0x0, 0x8a06, 0x3, 0xeb1, 0xfffffffffffffffa, 0x0) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) r3 = socket(0x2, 0x3, 0x1) getsockopt$auto_SO_DEBUG(r3, 0xff, 0x1, 0x0, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) write$auto(0x1, 0x0, 0x80000000) close_range$auto(0x2, r2, 0x8) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000080), 0xe0180, 0x0) r5 = ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$auto_KVM_GET_MSRS(r5, 0x4068aea3, &(0x7f0000000100)={0x92}) r6 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x1, 0x0) write$auto_seq_oss_f_ops_seq_oss(r6, &(0x7f0000000c80)="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", 0x144) madvise$auto(0x1, 0xffffffffffff0001, 0x15) unshare$auto(0x40000080) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), r4) mmap$auto(0x1002, 0xb63, 0x2, 0x1c, 0x401, 0x701cf82d) r7 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/platform/vivid.0/video4linux/radio25/dev\x00', 0x88451ebfefae459a, 0x0) sendfile$auto(r7, r7, 0x0, 0x6) 5.230128561s ago: executing program 8 (id=3660): close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x7, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x26, 0x3, 0x80000a) io_uring_setup$auto(0x7, 0x0) mmap$auto(0x0, 0x9, 0xffb, 0x8000000008011, 0x3, 0x0) getrandom$auto(0x0, 0x6000000, 0x3) io_uring_enter$auto(0x3, 0xa84, 0x80000001, 0xa, 0x0, 0x46) 4.784691862s ago: executing program 3 (id=3661): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x169780, 0x0) openat$auto_tap_fops_tap(0xffffffffffffff9c, 0x0, 0xb8642, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) write$auto(0xffffffffffffffff, &(0x7f0000000280)='/Eev/audio\x06\x00VI\xa3\xaa\xb1;\x9df[J\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rN\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc\x7f\x13*]\x0e\x15\x00`kE\x8d\xdeZ#?5\x1c\xa4\x1b\xbfr\x03\xaf\xac|\x1a\x90`ug.\xe5\xf58V\x0e\xc9\xf0\xea)\xf1_\xb8\xa3\xa0+\xacx?\xff`wu\xe3\x06.\xad\xef\x9b4\n\xf4\x9a\x10\v\x1f\xce\xa5-\xed\xfdD\x8d\xe2vi\xb3\x13.\xb3(8\x84\xb3\f\x00\x00\x00\x00\x00\x00\xf7\xea:bw\x17\x10\x81\xf6\xf5\xd3\xc6M\xa4\x7f\xd7\xc7\xd9\x1d\x94\xcf\xbb\x8a\xf9\xf1\xb6g\x11)\"Hy[z\x10*\x90/\x97\xab\x86ei\x12\xf4\xc6nz\xa3\xa82\x83\x122K\x83\xaf\xb0a\xc8\x1c\xc6\xcfXU\xfe\x95\x8b\xfc\x02\xe6`\xda\xc5t\xa2I\x8d\xc0IT\xbc#m?_\xd9\x18\x04\xc3.\xb7/\xfdT\xf7K\x889\x16\xa7\xe2\xed\xf2\x8dN', 0x100000a3d9) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x22, 0x4, 0x81) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) setsockopt$auto(0x3, 0x10000000084, 0x7d, 0x0, 0x8) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80802, 0x0) socket(0x2b, 0x1, 0x0) r0 = socket(0x10, 0x2, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001400"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x2404c000) write$auto(r0, &(0x7f0000000000)='-\x00', 0x2fb) 4.690718192s ago: executing program 8 (id=3662): openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/controlC1\x00', 0x40000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, r0, 0x0) r1 = socket(0x10, 0x2, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_SMC_NETLINK_GET_DEV_SMCD(r2, &(0x7f0000004380)={0x0, 0x0, &(0x7f0000004340)={&(0x7f0000004300)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB='\v'], 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x810) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), r2) read$auto(r2, &(0x7f0000000000)='\x00', 0x91e2) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0xc) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000300)='/sys/fs/ocfs2/cluster_stack\x00', 0x88282, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/module/hid_magicmouse/parameters/emulate_scroll_wheel\x00', 0x4724fe770cbacc92, 0x0) socket(0x22, 0x3, 0x0) socket(0x1, 0x5, 0x0) clone$auto(0x7fff, 0xff, 0x0, 0x0, 0x7) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/conf/bridge0/disable_policy\x00', 0x204a00, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000800)='/sys/devices/virtual/bdi/43:384/max_bytes\x00', 0x181482, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0x10, 0x2, 0xc) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x60008004}, 0x4000891) write$auto(r1, &(0x7f0000000000)='-\x00', 0xfdef) mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/virtual/block/nbd2/mq/0/nr_reserved_tags\x00', 0x8200, 0x0) read$auto(r4, 0x0, 0x20) bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x9, 0x21eb, 0x7ff, 0x6, 0xa, 0x1000009, 0x5f, 0x0, 0x3}, 0x6f3) sendmmsg$auto(r5, &(0x7f00000000c0)={{0x0, 0x2, 0x0, 0xc, 0x0, 0x10000000001, 0xa82}}, 0x2009, 0x40000000) 4.592319369s ago: executing program 4 (id=3663): mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) prctl$auto(0x3e, 0x8000, 0x0, 0x1, 0x6) getrandom$auto(0x0, 0x6000000, 0x3) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x6, 0x0) madvise$auto_MADV_GUARD_INSTALL(0x0, 0x2021000, 0x66) mmap$auto(0x0, 0x20009, 0xfffffffffffffff3, 0x12, 0x401, 0x7ffc) 4.266892018s ago: executing program 2 (id=3664): mmap$auto(0x0, 0x8, 0x40000000200, 0x17, 0xffffffffffffffff, 0x8004) mmap$auto(0x0, 0xfff, 0xdf, 0xeb1, 0x401, 0x8000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'virt_wifi0\x00'}) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) r0 = socket(0x29, 0x2, 0x0) r1 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200"], 0x1ac}}, 0x40000) recvmmsg$auto(r1, &(0x7f0000000040)={{0x0, 0x7, 0x0, 0x9, 0x0, 0x200002, 0x13}, 0x803}, 0xfffffff9, 0x20010, 0x0) ioctl$auto(r0, 0x89a3, 0x24) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0xc02, 0x0) write$auto(r2, &(0x7f0000000100)='7\x00\\\xa0\x04\xdb\xc3\x8cnI\x9c\t\xbck\x17\xfe_9\xdf\v\x9d\xf7\xa9+n\xf19\x8ba\xe38\xf7u~\r\x91p\x90x\xd9y\xef\x06\xafs\x90\xf0\xf9\xc3\'r\xac\x8d\\\xccM\xe3\x05\x87\x8c\x1beu\xa6\xab\xb2}\xb6\xb8\xa1\xb4\x98\x0f\x9b(8\xb9\xcb\x88\x0e\x99\x81f&\xe4\xe1\xf1\xe0iS\x93\xea\xa1\xb8\xa6T\xf4G\xb0m\xe5!\xa3\xda\x83\xc1\b\xb3\xce\x1bq\x03\xf7\t\x8f', 0x81) getsockopt$auto_SO_COOKIE(r2, 0x8001, 0x39, 0x0, 0x0) socket(0xf, 0x3, 0x2) close_range$auto(0x2, 0x8, 0x0) r3 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$auto_SNDRV_RAWMIDI_IOCTL_USER_PVERSION(r3, 0x40045702, &(0x7f0000001080)=0x10000) write$auto(r3, &(0x7f0000000040)='/dev/kvm\x00', 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x1, 0x84) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/system/memory/memory12/power/control\x00', 0x100, 0x0) getrandom$auto(0x0, 0x6000000, 0x3) setfsuid$auto(0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_proc_loginuid_operations_base(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/thread-self/loginuid\x00', 0x3c8082, 0x0) openat$auto_trace_options_core_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/tracing/options/userstacktrace\x00', 0x121082, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/net/bond0/bonding/updelay\x00', 0x8242, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) read$auto_proc_reg_file_ops_compat_inode(0xffffffffffffffff, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) arch_prctl$auto_ARCH_GET_XCOMP_PERM(0x1022, 0x6) 4.053612116s ago: executing program 4 (id=3665): openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000240)='/proc/fs/lockd/nlm_end_grace\x00', 0x8282, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto_PR_SET_VMA(0x53564d41, 0x0, 0x1, 0x8002, 0x1) r1 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) r2 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/fb0\x00', 0x20401, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x460f, 0x0) bind$auto(0x3, &(0x7f0000000100)=@llc={0x1a, 0x212, 0xfe, 0xc5, 0x2, 0x9, @multicast}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) shutdown$auto(0x200000003, 0x2) sendto$auto(0x3, 0x0, 0x2000f, 0x101, &(0x7f0000000000)=@in={0x2, 0x4e22, @loopback}, 0x1c) r3 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f00000000c0)=""/47, 0x2f) ioctl$auto_BLKSECTGET2(r0, 0x1267, 0x0) ioctl$auto_VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000000)=0x200000000) r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/dynamic_debug/control\x00', 0x482, 0x0) r5 = openat$auto_tracing_iter_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/trace_options\x00', 0x2, 0x0) read$auto_tracing_iter_fops_trace(r5, &(0x7f0000000040)=""/219, 0xdb) writev$auto(r4, &(0x7f0000000240)={&(0x7f0000000180), 0x9}, 0xb) read$auto(r1, 0x0, 0x3ff) close_range$auto(0x2, 0x8, 0x0) openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, &(0x7f0000000200), 0x200, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/amidi2\x00', 0x200001, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/system/memory/memory5/uevent\x00', 0x501000, 0x0) 3.358780574s ago: executing program 8 (id=3666): r0 = open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x130) r1 = timerfd_create$auto(0x9, 0x0) fallocate$auto(0x8000000000000003, 0x0, 0x9, 0x4cbd5d) fallocate$auto(r0, 0x1, 0x820, 0x7fff) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x14fa02, 0x0) r2 = socket(0x1d, 0x2, 0x2) syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000040), r2) ioctl$auto_SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000180)="fc5ea5f1401a03cd7d362456adda0cf384c0e2d7bd3d31e409957ab6bd240c4af9373f9691253b947acf08619bf87d27ebc9b1fff0ce71c342980e157ce4c431437e29b11e2c41b25e95a0d677941ec8136ec921976149c1d14b") mmap$auto(0x0, 0xb9f, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) r3 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r4 = socket(0x2b, 0x1, 0x1) io_uring_register$auto(r4, 0x2, &(0x7f00000000c0), 0x1) r5 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000200), r3) sendmsg$auto_NL80211_CMD_NOTIFY_RADAR(r0, &(0x7f00000025c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000002580)={&(0x7f0000002600)={0x24b4, r5, 0x200, 0x70bd29, 0x25dfdbfb, {}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_SCAN_SSIDS={0x2491, 0x2d, 0x0, 0x1, [@nested={0x2c5, 0x147, 0x0, 0x1, [@nested={0x4, 0x105}, @nested={0x4, 0xd8}, @typed={0x8, 0xfd, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x21}}, @generic="753e5d7d9aefd22212b04674d141beba0dfad2b431a1c3a95bf62d62d57d864f5bad7858934fe23d4a8bac2c7256ce7f41c1", @generic="83c672a6d24e8a64ef8bcc27f6bdb41970ac0cb99cf48b05419d620c8d15ae32fd3f983d7875047592dc05dfec49d1d33fde8e05e29e94c350199fb6b9b86dabbc064aea4032fb0eb0280700e1c467ef542fd4d00e1ab9b6e927cde9d82c4f8f19b8a4bbebd3416ea3f0b2b41a77a48efe08f24de0e1f2fcf96cdeb81d3be685c86b8972ff8ca699b0ea3d0de5e51e7fb5e19f5af053477a771d127b1f5692668d7e61fa6100e835e50b9d7eee17e1fd2ba8800f52389c309283ddb67536698d21de29c468f0de5b297a9d66f4eacf3aea12c3e25325824cfd5e8ad9e0bd6c033693", @generic="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", @nested={0x4, 0x77}, @generic="c9d3f9c01b59de0229de908ff885cb85b501c527e786ca351bd56bb5ff7d24d96199a9347d6e90fd2dd4e011aa45028f76b57c50c9806315a66af0f4440bd4506c2d8ef66cb83b7cecba8a0d8878dc2168ae9e07779d61"]}, @generic="11b3fa53e75f9f619c95c0", @generic="d09587178f4a15ec6134afb79b516965eaecd5c9cc3cfeca7bec9a4c90201fe61cb1def9972ca1ab016b919aebd0bf1dbd7e7e23605914262dd2fb35be785a8980911e2c51a8fb238e7d40acba219a8a00dba89204d954626b51183f627a217bdc564972c87f4a49a0d0da30c3e879497f68b46f064013f4c5e6d61acf35949587a79da6bc4b357678ac9312c48e835ef173661a60a0c11b26e6462973fefa6d2abadcb54cbcfb3ff28db68c025f5c0d5d5bab3b582eeee729d47f8ae3e90aa9f5f9bbfe085ff6c1f901", @generic="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", @nested={0x10e8, 0x5d, 0x0, 0x1, [@typed={0xd1, 0x133, 0x0, 0x0, @binary="3c81dff6942b14313ffe72a0a7b3caebaf19aa0cce9bfc2b84f56ed2bb4295d0b369cc01269f4379a809677d4983dc1faee6959f94aa5955ab26ec340b11b5c2afc823cf5cf6f445d3159651d701891e448f0ffe599c6488e10cd6db2b76cc46185698b9c3ff5d451333be3393219ddc762d2df8856389193c2648cce99dfac3f9cdaa882abd5dc769fa421c297a8668e1d01d8c83e1b31e3a99d627ab673e2d1110788690188378334958a03f9b355794edcd6c89b023da070d80bc03cf744e8ca8f10b255f0e1b7f54ddb223"}, @typed={0x1004, 0x147, 0x0, 0x0, @binary="1be24edf4112542d1a3a1856db3737da3efb95a67d4eab219c811d3ebde1a21c63498548ebc52104087ceff454794840910e4bf84c2825f55e8c18dda3ab003225fa8a66323f1faf0b9910fa41b23ac7343974ee30b51601b927cc2c1e0bb063f0ea23489be010745066287833326373f69a2d110aa7412ce757281c511633c82ee81885cc143973f9ca68f5852e950020fc34774e8f121b85d9341388b055bb5bea37005078bc22d69c9f6ba3ae48b9627941e476f4d0ecd0c29af1de377ed1ecb222ce7e9648643e0cf11f5487ec1129603baaff1d5b05cebcd977ca2cae0faacdabc8a196abf1b493f16d24d5d53e684a4da17cc1230ebe9c1abf246ecfa6488752ca83994878ff0931e3a8ea2f820c0ecfddc2305daa049f652eda7dce8b29988bb09147fc7bc726ee34a2af10e5716f4806cfebbdb88565fba54c7e2cbda18ed33b978c4b0e2de744c46337761d5808ee1286c635288878b5e0b332e48d177b7ac6a38a29615bbfb73c11e5dc52f45bfa75844fc0b083b700d7b298faa069e8676a92ea9ed557fc88681bc4b7db7bf9d3c89e7720080ff5f6edebf4005143b6cde7e01a9038bac952dd1cf02e9e3e3709e6e7e51751cd30f24a9190e353ca183cf1ad99c32de2c5086e07758856d375d1675e8d95a100a295d32c2a631887f6a6540098d71f052b02edaa8860423047aa22f5cf8e30553dac2e936da1bedb630e466f264a4ecb1b6384ba668af820cef0349ba025cb59b2276c7c7e11dae94a3ce0ed3ab6edc288179978321e0e275ff01f9e5eb4862cea01f641226b13b5e5bdd5afc1f7e31794817afa2a30508e6aadf2a9df68b44c43db9128b2239200a7e82f24daf34f62a0ce9017eb0d2389ac21f8144facc5e278fe741eb402409c79a4e53ba654c92d73ab5551fbd88baeb4e0b492b8e0fc6170da2c131bf7ddd6065f0507bd262ba120f0379f25bb358ab7a4fe9df71c4a5f87f671e8cc531f886180a5c7f75a68b8f5a9257df503d9eef82a4798eec5ab840ae259853b3db73fecfa9d7b97018e6c69981b01c22b8315bc6df5e313b45cf8393f8b9dff44bb2c6848fa9ab1f265cdf4a950dddc2704381d47843b3f131b10660d42bc383877ab439d6ecbe30464d84bd27cf469903b3a24f43cfe494084aa9cffe1c62742c9dbd22791b54a50681a1d5825cb1661d35e03863a96d3cfb5803253a5e8c9d078d7e034308bf15768bd7e27837b573430a1cf84aa608185f8efc8cfa90ee67636bb145db23f11ca73ecd1ada1232e9a73afe58073d1f85fd92f2818f7d37eb9791a81f07840dec60de4a6343d648a384fe5c418e6cb3de6aea45600a46a83b3d3b0047d4888c659770a17c40756c41f487a83d705f488a7de20b8cd5cbd77956cc25562bd3136c31da80d72fd1e3c16b9b012b499159ca010846356840f02136e39e2a44e0f744b6f264b165b7bcc9e83f3364e2fe0b203bf96bf3f3be0c030f11c750ef51dff6cf5e119d514b7458f0bec7caafbfb608505066d1fffa657821832e178f5d5d56845b0ac89a96a2669721186f41c61447ba5a6c74bec936cd43c366c49f560e1229bd1e3b70d0c73c2f147c715cfd1b1bdb11ae5eba4018d321e7addb071e5166f4780076247dc2df49d95ac34fc11f398f65eedc7eec38f424f586dba3035c8dc776db1a2122204ce47e4c8739957a9931351bf385def871c38f6cef43cc1bf8c494f72e7188f78a63d80d2fd9297358c3bf0098ce2bc5805bbc21e6912ac4951d451cb0e1f5795034421a209f4751133258d823986181519edbf0f18bb573bc74230749bf6a9cb389d26dee041452cbeabf61cbcff28cfeb27e574db15273a1abbb43fe5bc30e49a1eea47bca6e3e2abf100c3725a4ff5fccef7e71a2692fdeff26f9f8821c1d1db98d49fd65b088932607fef3827a9afe296da5a818ece53a9499a4f1728c8ba710d5a7ef0853574fd3302de26734644ea6d35e436e0b3d51595fdec62df0e92c96c436f1aaebb269b1ae47fe9286e1ef7d070bd3ee946615cb214b61292052462a052dfa75104047d5ca9c1568bdcf37da62819f9ff8aaf1150927843b3b424b7be087b7954be46b77c121e1cf6fe06ae6252dd853ca462a8780d9eaab01156cbb4a042923a0b0b2281fd6ac3e19d100f1ec5111b4ad23b1e18ccc2bf9d115065ffb1d8f6e4f83dea6c98311805795d9ee8a2a42669089fa4c9c3ba2412c3471765aabc79d09dce193a74829ca234c6515c744c04eedda70054ff73c0919766aface1ac812fc2330e7355c6239824d440157a78eee6d054f858ab964bb3f44732d6cc298a6140d1134009d98af8e9f9ac8d8268730e85a269de4cd7f3deb8d650d7eae0e0314139db1c031ceb083791aafb4ebc65ef83236c4cc66e28534fd790085764d99f2dc207027960a3a6ffd961990d9cd5083226a04f4060cf63ff9fe4c46e3de9cab148602b367d1d4541e643329cb8ed5f6b2e8e37837465f824f3a4440e86d996303c580765d48c6e3f53a524225b73c702e7829032a07de5e66c58f4e639ab72f3654f70d7041faf252e895ccda614b7a3858739df8049a87e209a1ebba036be9e95da95d24f9de06bc803d98413ce2519efa36a0682a1f338370b73ff7d4179ff11cd8dd638f9d8a6b0536ebcf968d86b8a753fe7f0bccd635c7266f45bba34138e00ef7467957383df6e174aa73eb19c5b8dc780ee96bbdd831796d43f0f57f1309369a1bf3243d3b5a448bf0506732e302b4bbb8c3eadda13297e9b25176e79b583eb3cff95d202326d6b62d8f3a7f3d70ba15190896c6070e7bb18fe220a7c2f5aa22e66d416a7ea0d1aa9a41e9ca0c7dd5d18985d2bd70a5386a2b667a885074873b66c9dd4161bc314014c6f20f88cee6dbe78679193a1f4f803caac77cc80442c51892b5ad86313800ddf39352104b6e1e81bb8d4d4ddec91d746fbd3fe5b029958fb7748ae2c82edfc40dddb20470ee8337cffae36367da41c164eda303c71a0d5c9643e044855d1851ac813b51e29995096d60a290bb00547b2de601655f60e7000f6352a0245150a1ac4c3d3b758c3a9987a59bb9a4519d3c378dc80b596014a1c91ca822ee08be2d92dedfef18492dc6250c9aa826186f44134c8a63da38011df2462821a28a3f7890be8c3710e2f8188b2891a34083995ed3a33790618147bdc8972650dfe69248b0ca7ace60ea67a21448decf8c1f7fb89d660d67be3e17a04a195bc8106a24208a6ebccf1530fe1dfc0ecaba7231b78dbeb9de3ff8f68cd611f666bf43b0195d8d2df9d6dcf848d21ec2bf9bd2781bdf6a9eb7d8230ed5f0660f9bb180f884ac5a567018d92860dbef39b3b52719173d6d70e17794f73bcbfeb3e02dc5aa0ff8fde50c1b3cda34053af4aab5d3c3c0a308dbb79048e019d6f46fb38b2677dab5c6a81e69e8ed58ebaa87456c52000b641d96359ae4c2a134679e521bf74c92da2e992cb23209d84eb10c9018da2df0923522cfecc7f5bcbd63bf77afdf11e7f5c19a0531b7c8b71cdac88bef4811cffb2bd1f76c361829716fb3569884c52e1d39ed68f06ce9803119766f67ca3d3a833e3fed84050b065ac651842914081fd01fc059001c69f6db8b17ba8e5ffa1c75a761fa150dd900e76b1c31f191286f36b83df75eea1e0f856cd7fd652b054ffb7e34f0ff70ffdea6137941506d8d126dc9349b25be04886bc3137040f9eb23fb26e2b6e4a0048f2ab9209b6ff6673dde3f7cf9a06e60dec24517ee0f6d55e6aac07abd105df1e2d6cad87adbedd491c4466afc030e5771c56441ad825443fc4a72f69dce937e6d0060257a1d9b21d41931cf9ab679680a712f5b01c9f6391e07b7c19ce3cc4f666e82a1511575e27fad137074b2765cff1a1e164022b0338d15ebd30f54929ec8b6803d68a030a8b37c47690d6cf870a1b126fb7d0aea21f165ab01e8c260818b494dc1995d60786acd520e2ef5dd32c12b6760f9ba41734c232caa3423482d87e921b3396d189f72ad3423991af7f5f18c100cbf82753a7732d9ffce58d031cbd82c9328dd5bcd4e00c5f8f351d9e891f2fee238cd7fed35bfd3c69c5963d5b4c2751eeb80ab1e1bae59d3a1dc259e128b3983eb0da1adf4fc980dacf2a6eb36e0b8abd721cf86b363c8ba519a0896c3f1997a645d5409b3fc62fe331f01e447d7d4fff32e8ad8f046a0e31f76f6f45a5c3a23ea9136a26f318a13472fadb53409251f78c773f6321bfcc3dcd9be005491632d5724d946857878db10bda29033e389d1a176aa8af953cdfa4ce831eb8a634dd599bab04c0cc1027cf3e23f99a5194f791764578cfc1ffec7b42acc38c03c45edda637b611a9fe021fae6eb89e034dadf00c8cc29791dcd21dbfbec0f3a52a1bd92817ed88aae8f2b9fdf232177614f76954447a357b11042f03b325062e54e9bfaf30a86508c30a37d085cd0436844731b4cc58fbd45802cd6a8c35aa14fda3fad3b8ac783c31043f8afa526758da76b757c3610e4ad2a9f6c8700b670a3c8b610f2370f8221a8b9a9d299e74ce77adadac1da76777d210e23f1138a501afb4540fd19bec4172957d7bf7b861f037cc583d10864809eae83c3b5808c777911031ee62d5aa0f286b9d43acba0d71f69de0944f97b0adbd364de2f15145598352763f5caa6d56c4a5bc8d066aefbfa98c7e334ec84554e90ad336d4a3a1ac46441431dad7594b3d19bbb806a22a752eda6f35045eb0e2e1054e46133eaa40e4b2b01b0fc594f54e0dc767e8ab4c5ca801a6dd33a2254c2079c98884fd4d29e6cbc818f763918f2b3090550ccbda9b0a6d7e96b7b6543b29a5fa94a3b2e0baac93e3d5cb011a2d9ffb4502ec64b43d2f3139cb5db0d64b7f6b96ee0a596b2959a56edeaa6bd43be9cf8e83cc8dc8ead46f1837ccf8500582a9c1b83bb3bda3bd9a3984abf00264b33cd6787c6d84cc539d6d5fc0b356d2dfadb23fd4d9e01588757d3358efd5128ac4b766a90c77d3024e834ee7cd0ce79bce843ecd19fa26099ce2b5d4ead776dda1683d0036cfc3a983855fedebafd765f69c2cfc4b0fb261e736919e74bc5ef51d7cce1128e334fd3ed18b713df918177be657980beb40a7034cbdc96db6377093112870167de2deffc91bc4be5ad0d5f2dc4b85a1528039029c51e2f46f3674efb7ed821e4ee22178420e90c625907ca7733c1998cf9ff9e814b54cc860533e4853694d42b52d689da06f986292f7ffbdba04c2e00ade59095950b9e55abf3e3968882021cf7f20c3fab259e0e7e64019d241a8d3bc1cd3931e49df32011310b979468640e941ebee4e06dca6c55b6781a662ae278182704d71260b39f087d71e37ac923c32ba8b3fcc4094663aa8bb808d28711117b35f645ea7bee0f02673356baddc42e871d4b649005c3b61aa87bfe07a75a5377e77fd9257fad92c226de27194e45e3c477fba244618e77da6463158d5d6d99f75442f2d34601b4c2284b5bf9312a67de2de87989b557a1b736ebd75037ab6700035553e25c532151f759280e2b67460fb0cb735ea1a2848594048268c9023cb952735a91ce5e91263aa386079df440dfd79691d1914fdab42598c8f66a7f7839ae019b8af352c57e104c624a3af0e3cb2dfffe78cf3df327a3807c1ed856e4bb54be8dbf116eb6f1317d06edf0d826ec68a512ad500346d2ab80a4e1df866fb95d5cec41a07f7d36457ac8393c76265b0b3a919ced6e2856ff36d0d4106fe668b60fa1e77ac69a224774a0359b639fbeb23789b2b9f0ee5"}, @typed={0xc, 0x136, 0x0, 0x0, @u64=0x9}]}, @typed={0x8, 0xf6, 0x0, 0x0, @ipv4=@remote}]}, @NL80211_ATTR_TXQ_MEMORY_LIMIT={0x8, 0x10b, 0x7}]}, 0x24b4}}, 0x20000804) unshare$auto(0x7) memfd_secret$auto(0x0) mmap$auto(0x0, 0x810004, 0x400000000ffb, 0x8000000008011, 0x3, 0x8000) openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x0, 0x0) write$auto(r6, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) ioctl$auto_IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) eventfd$auto(0x1) socket(0xa, 0x3, 0x3a) setsockopt$auto(0x400000000000003, 0x29, 0xd1, 0x0, 0x14) r8 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="1b0026bd7400fddbdf250300000004000800100003800c000980080001808847338012000100898771f1c19f17790485908286cd0000040002"], 0x40}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) 3.296948015s ago: executing program 3 (id=3667): mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/devices/virtual/ptp/ptp0/pps_available\x00', 0x0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f0000001100)=""/4105, 0x1009) landlock_restrict_self$auto(r1, 0x0) r3 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$auto_NBD_CMD_RECONFIGURE(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, r3, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@NBD_ATTR_BACKEND_IDENTIFIER={0x4}, @NBD_ATTR_INDEX={0x8, 0x1, 0xfffffff7}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004044}, 0x10000000) sendmsg$auto_SMC_NETLINK_DISABLE_SEID(0xffffffffffffffff, 0x0, 0x810) mseal$auto(0x1, 0x9, 0xffffffff) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r4 = socket(0x10, 0x2, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022abd7000dddbdf25020001000800030000000000080015"], 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0xc0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NETDEV_CMD_QUEUE_GET(0xffffffffffffffff, &(0x7f0000003040)={0x0, 0x0, &(0x7f0000003000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="01"], 0x1c}, 0x1, 0x0, 0x0, 0x20040004}, 0x20008810) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="18"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f0000000000)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x3}, 0x3, 0x0) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000000)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/block/ram9/diskseq\x00', 0x20000, 0x0) read$auto(r5, 0x0, 0x100000001) writev$auto(r0, &(0x7f0000000200)={0x0, 0x2}, 0x3) r6 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000002c0), r4) sendmsg$auto_NL80211_CMD_TDLS_CHANNEL_SWITCH(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r6, 0x200, 0x70bd29, 0x25dfdbff, {}, [@NL80211_ATTR_WIPHY_ANTENNA_TX={0x8, 0x69, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x5040}, 0x20000804) openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/pcmC1D0c\x00', 0x80042, 0x0) 2.585573698s ago: executing program 4 (id=3668): acct$auto(&(0x7f00000000c0)='/dev/input/event1\x00') r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv6/conf/default/disable_ipv6\x00', 0x202, 0x0) sendfile$auto(r0, r0, 0x0, 0x200) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) socket(0x2, 0x2, 0x0) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) r1 = socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) getcwd$auto(0x0, 0xffffffffffffffff) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x5, 0x0) getsockopt$auto(r1, 0x84, 0x80, 0x0, 0x0) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x50) r3 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) io_uring_register$auto_IORING_REGISTER_RESIZE_RINGS(r2, 0x21, &(0x7f0000000340)="a4bae087c2abb2378e56a29e846929f53e5d9702e6dabfe8267e92638a276825f845cbf95474b62682a991970a9388d225c866a52354029e33ab83227566dad779683b73f8ea8a90e381bbb3beabc722777313739a0cf2b7a07b187d07008d7d377c61ed0b34c0c7c77df41287f9f6dd5396807a133d7a3af122209773c3972ac621a70823778a9936769adcabc934f553553ff0874c2bf95094dbcc0a86dda00a04ef50e9de31e50379b9b63ea94f0f1cddf49ae4a99595c5803dd021cfdcf65aff14a14ffd37b23b70174077a1fc706ae6d654b7", 0xa0000000) r4 = geteuid() r5 = ioctl$auto_NS_GET_TGID_IN_PIDNS(r3, 0x8004b709, &(0x7f0000000000)=0x80000000) shmctl$auto_IPC_SET(0x7, 0x1, &(0x7f0000000140)={{0x6, r4, 0x0, 0x8, 0x6, 0x2303, 0x1}, 0x7, 0x1ff, 0x78, 0x0, @raw=0x5a460793, @inferred=r5, 0x2378, 0x0, &(0x7f0000000040)="91ef9d6a6590998c66e68364d63c1dfed0afc6e4174465478bd1d626de80b1342cc44eafc089aa7ccc0f8f295410e938c43e0c8ec5336a795773eec18d", &(0x7f0000000440)="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"}) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0xe8, 0x9, 0x2, 0x1, 0x5, 0x4, 0x15f4da0e, 0x8, 0x9, 0x100000000000000c, 0x8, 0x1, 0xfca, 0x9, 0x2, 0x4000000000000d]}, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x40009, 0x36, 0x9b72, 0x7, 0x28000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ram6\x00', 0xc6fc1, 0x0) socket(0xa, 0x2, 0x88) openat$auto_tracing_pipe_fops_trace(0xffffffffffffff9c, 0x0, 0x20a02, 0x0) 2.156521376s ago: executing program 8 (id=3669): openat$auto_proc_setgroups_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/setgroups\x00', 0x149002, 0x0) (async) write$auto(0xffffffffffffffff, &(0x7f0000000080)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94&\x81\xe2\x13\x8f\xea#\xf8F\xbbOO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\b\xc1\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xcbA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(', 0xa) (async) unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (async) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) (async) socket(0x2b, 0x1, 0x0) (async) listen$auto(0x3, 0x81) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) mmap$auto(0x0, 0x202000a, 0xffffffff, 0xdc, 0xfffffffffffffffa, 0x8000) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) (async) r1 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) (async) r2 = syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000980)={0x14, r2, 0x1, 0x70bd31, 0x25dfdbfd}, 0x14}}, 0x24048084) (async) madvise$auto(0x0, 0x200007, 0x19) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/thread-self/pagemap\x00', 0x103003, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x101001, 0x0) (async) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000001c0), 0x101000, 0x0) r4 = ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) (async) r5 = openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f0000000340), 0x80200, 0x0) pread64$auto(r5, 0x0, 0x100000002, 0x100000001) (async) ioctl$auto_UDMABUF_CREATE_LIST(r4, 0x40087543, &(0x7f0000000200)={0x6ee6, 0x5}) (async) close_range$auto(r4, 0xfffffffffffff000, 0x0) mq_notify$auto(0xffffffffffffffff, &(0x7f0000000180)={@sival_ptr=0x0, @inferred, 0x0, @_sigev_thread={0x0, 0x0}}) (async) mq_open$auto(&(0x7f0000000280)='\\*)A\x00', 0x7e, 0x9, 0x0) (async) mq_timedsend$auto(r1, 0x0, 0x2, 0x9, 0x0) 2.101861948s ago: executing program 2 (id=3670): socket(0xa, 0x2, 0x3a) setsockopt$auto(0x400000000000003, 0x29, 0xc8, 0x0, 0x567) unshare$auto(0x40000080) acct$auto(&(0x7f0000000040)='/dev/video1\x00') r0 = prctl$auto(0x23, 0x4000000000000001, 0x2009, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x61, 0x100001000000003, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x1, 0x0) prctl$auto_PR_SET_VMA(0x53564d41, 0x4, 0x2, 0x1, 0x2) r1 = socket(0xa, 0x801, 0x106) setsockopt$auto(r1, 0x6, 0x24, 0x0, 0x9) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0xc, 0x0, 0x1, 0x0, 0x2, 0xd}, 0xacc}, 0x3, 0x10000) close_range$auto(0x2, 0xa, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/platform/vhci_hcd.0/usbip_debug\x00', 0x8002, 0x0) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40602, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) setfsuid$auto(0xee00) preadv$auto(0x40000000000003, &(0x7f0000000080)={0x0, 0xf15a}, 0x7, 0x3, 0xffffffffffffff7f) write$auto(0x3, 0x0, 0xffd8) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/net/ip_vs_conn\x00', 0x400, 0x0) prctl$auto(0x29, 0x17000000, 0x0, 0x0, 0x0) acct$auto(&(0x7f0000000000)='/proc/self/net/rpc/use-gss-proxy\x00') read$auto_proc_reg_file_ops_compat_inode(r2, 0x0, 0x0) openat$auto_buffer_subbuf_size_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/buffer_subbuf_size_kb\x00', 0x40, 0x0) acct$auto(&(0x7f0000000200)='/d\x00VhW\xf9sf\f\x80\x9d!%\x0e\xd335\x9c\xd3\xe6*F\x10\x1d\x06og88!&\xf4\xe6\xda&bp\xd2(\x12/\r\xc2\"\x06\x111-{\xef\xfbI\xa23\xc6\xa6\xee\xe9\x11C\xf2:\x9c\xc6\xe9\xac\xc5\xca\xf8\xc8jH\x9fr\x9b\xf8F4\xa4\xd2\xc8o\xd4\xe6\xf7\x02\xff\x83\xaft\xbd\xa9\x14dr\xc7\xf5\axY\xe4x\xac\xd8\xad9\xd2\x17\xf4q\xd13\x02\xec\x95\x86\xbb\x00\xed\x8b\xcce?(v\x9cG\xbb\xeaw\xf3\x8d\xe0\xac\x9f`\xb2\x03\xc2Q\xde\x10\xa6\x11\x02\x00\x85c\x92p\xc4Q\xad4\x95u\x9d\xa3\x98\xf0\xecB\xa6\xc5\x88gya\xb5\xbaT\x97\x86A\xdfj\xcd;A<\x91\x10\x9dU\xbf\xf2\x93t\x80\xc3\xfb\xb2&\x13\x8c\xf3SF\xd1\x8b1D)gk\xb9\xcb\x8f\x01v-\x95\x06^\x10`\xe4\xc9\xd2\xa1\"\x88\x1e\x9a\xa6\xec\xff~ZkJ\'\x84FC\xa9\x01J\x8f\xcd\x80<*\xf5\\F\x84<\xf2\xb0$Q\xb2\xa4Y|\x83p?\tL\xe4\x10\x85jGBQ\x1f\x90\x1f\x0es\xbf\xc3\xf8d2\xd5\x01\"{&\xd6G\xf9\xccI[\x00$\x04\xc2\xde;\xdf\xd4\xae\x0fo\xc6\xe8\x87\xff]\xdf\x04AEy\x1f\xb6\xf1+XQ\xc2j\x86\xc6\x0ed\x7f{\n\xed95==O3AQ\xc8\xb7\xe0\x16pg\x00\x00\x00\x00\x00\x00\x00\x00\x00') r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/virtual/block/ram9/diskseq\x00', 0x0, 0x0) read$auto(r3, 0x0, 0x20) ioctl$auto_VHOST_SET_VRING_ERR2(r0, 0x4008af22, &(0x7f00000000c0)={0x3, r0}) 1.644230236s ago: executing program 3 (id=3671): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) (async) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) (async) r0 = openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000000000), 0xc0402, 0x0) io_uring_setup$auto(0x406, 0x0) (async) ioctl$auto_posix_clock_file_operations_posix_clock(r0, 0x40103d0b, 0x0) close_range$auto(0x2, 0x8, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) (async) ioctl$auto(0x3, 0xae41, r1) r2 = open(&(0x7f0000000040)='./file0\x00', 0x149443, 0xc8) ioctl$auto_KVM_GET_MSRS(r2, 0x4068aea3, &(0x7f00000001c0)={0x3d80a0ad, 0x0, [{0x8, 0x8, 0x1}, {0xff7, 0xbf63, 0x4}, {0x8, 0x401, 0x2360076000000000}]}) mmap$auto(0xfffffffffffffff8, 0x20009, 0x4, 0xeb1, 0x401, 0x8000000000000001) socket(0x10, 0x2, 0x0) (async) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022abd6c00fbdbdf250200000008000300000000000800010047c7e2"], 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0xd0) (async) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="10002cbd7000fddbdf251c"], 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x10004010) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a0027"], 0x1ac}}, 0x40000) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) (async) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000080)={{0x0, 0x3000000, 0x0, 0x40000000001, 0x0, 0x10000000000000}, 0xfffffffd}, 0x100003, 0x0) (async) r3 = getpid() process_vm_readv$auto(r3, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000080), 0x10ffffffff}, 0x6, 0xff) r4 = bpf$auto(0x5, &(0x7f0000000000)=@iter_create={0x15, 0x8}, 0x7) (async) r5 = open(&(0x7f0000000000)='./file0\x00', 0x4242, 0xe1d2b27bdc14aabc) migrate_pages$auto(r3, 0x40005, &(0x7f0000000180)=0x6, &(0x7f0000000100)=0xfffffffffffffff8) (async) open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x100) (async) ioctl$auto_USBDEVFS_IOCTL32(r4, 0xc00c5512, &(0x7f0000000140)={0x5, 0x1396, 0x5737}) (async) fcntl$auto(r5, 0x400, 0x1) 1.548248305s ago: executing program 4 (id=3672): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket(0x2, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) ioctl$auto_FS_IOC_SETFLAGS(r0, 0x40086602, 0x808) sendto$auto(0x3, 0x0, 0x3f, 0x101, 0x0, 0x1c) ioctl$auto(0x3, 0x541b, 0x38) io_uring_setup$auto(0x56, &(0x7f0000000080)={0x7fffffff, 0xfffffeff, 0x400, 0x9, 0x4, 0x8, 0xffffffffffffffff, [0x0, 0x10000], {0x6, 0x6, 0x2, 0x29f, 0x1, 0x84, 0x101, 0x17f, 0x2}, {0xff, 0x401, 0xfffffff9, 0x80005, 0x1, 0x7, 0x4, 0x7, 0x7}}) write$auto(0x1, 0x0, 0x80000000) unshare$auto(0x40000080) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) mmap$auto(0x1002, 0x6, 0x4, 0x200000eb0, r1, 0x701cf82a) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/mm/transparent_hugepage/hugepages-2048kB/enabled\x00', 0x22b42, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x8) read$auto_ptdump_fops_(0xffffffffffffffff, &(0x7f00000000c0)=""/32, 0x20) sendfile$auto(r2, r2, 0x0, 0x6) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0x5, 0x0, 0x0, &(0x7f00000001c0)={[0x1ff, 0x0, 0x7, 0xfff, 0x948b, 0x0, 0x15f4da0a, 0x3, 0x402, 0x62, 0x80000000, 0x4, 0x6d41, 0x4, 0xa, 0xfffffffffffffdfa]}, 0x0) write$auto(r3, &(0x7f0000000400), 0x100000a3d9) close_range$auto(0xffffffffffffffff, 0x8, 0x0) sendmsg$auto_HWSIM_CMD_NEW_RADIO(0xffffffffffffffff, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f0000001e40)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="010027bd7000fbdbdf25040000000800170008"], 0x20}, 0x1, 0x0, 0x0, 0x220000c1}, 0xc0) setpriority$auto(0x2, 0x0, 0x80000) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x5, 0xec8, 0xdf, 0x100000000009b72, 0xffffffffffffffff, 0x28000) r4 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/net/dev_snmp6/syz_tun\x00', 0x1cb422, 0x0) pread64$auto(r4, 0x0, 0x800003, 0x270) madvise$auto_MADV_SEQUENTIAL(0x8, 0x2, 0x2) io_uring_setup$auto(0x6, 0x0) clock_nanosleep$auto(0x2, 0x1000, 0x0, 0x0) 960.834517ms ago: executing program 3 (id=3673): mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000013c0)='/sys/kernel/notes\x00', 0x101700, 0x0) socket(0xa, 0x2, 0x73) (async) socket(0xa, 0x2, 0x73) recvfrom$auto(0x3, 0x0, 0x800000000e, 0xfffff4a4, 0x0, 0xfffffffffffffffd) (async) recvfrom$auto(0x3, 0x0, 0x800000000e, 0xfffff4a4, 0x0, 0xfffffffffffffffd) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000040)=""/4096, 0x1000) r1 = openat$auto_trace_options_core_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/options/event-fork\x00', 0x2000, 0x0) read$auto_trace_options_core_fops_trace(r1, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_cifs(&(0x7f0000000000), r2) (async) syz_genetlink_get_family_id$auto_cifs(&(0x7f0000000000), r2) select$auto(0x6, 0x0, &(0x7f0000000100)={[0x8, 0x200000000005, 0x7, 0x7, 0x8, 0x80000004, 0xc, 0x6, 0x8fc, 0xb80, 0xe34c, 0x9, 0x3, 0xfffffffffffff954, 0xfffffffffffffffc, 0x1000]}, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x787b, 0x7000000) (async) sendmmsg$auto(0x3, 0x0, 0x787b, 0x7000000) close_range$auto(0x2, 0x8, 0x0) 392.931455ms ago: executing program 2 (id=3674): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) read$auto(0xffffffffffffffff, 0x0, 0x1) r0 = openat$auto_hwsim_fops_ps_(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/ieee80211/phy1/hwsim/ps\x00', 0x1102, 0x0) write$auto(r0, 0x0, 0x4000000000) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D3\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) write$auto(0xffffffffffffffff, 0x0, 0x8000000000000001) r2 = socket(0x2, 0x3, 0xa) getsockopt$auto(r2, 0x0, 0x29, 0x0, &(0x7f0000000040)=0xdbb) mmap$auto(0x8000000007, 0x20009, 0x7, 0x1000000000000ebf, 0xffffffffffffffff, 0xf4f) getpid() syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_NEW_RADIO(0xffffffffffffffff, 0x0, 0x40800) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x101401, 0x0) r3 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/usbmon0\x00', 0x0, 0x0) ioctl$auto_MON_IOCX_MFETCH(r3, 0xc0109207, 0x0) ioctl$auto_MON_IOCX_MFETCH(r3, 0xc0109207, 0x0) mlockall$auto(0x7) mprotect$auto(0x0, 0x806121, 0x6) bpf$auto(0x5, &(0x7f0000000080)=@bpf_attr_7={@prog_id=0xc, 0x92f1, 0x4}, 0xa) mmap$auto(0x0, 0x20004, 0x1ff, 0xeb1, 0x8000000000000024, 0x8000) r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/net/ip_vs_conn\x00', 0x8880, 0x0) setitimer$auto(0x0, &(0x7f0000001a00)={{0x80, 0x9}, {0x6, 0x100}}, 0x0) socket(0x11, 0x6, 0x8000) r5 = fcntl$auto_F_DUPFD_CLOEXEC(r4, 0x406, r4) ioctl$auto_BTRFS_IOC_SUBVOL_CREATE_V2(r5, 0x50009418, &(0x7f0000000100)={@inferred=r4, 0x8, 0x100000002, @btrfs_ioctl_vol_args_v2_3_0={0x6, 0x0}, @name="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"}) 0s ago: executing program 3 (id=3675): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) lseek$auto(r0, 0x8, 0x4f5) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) (async) close_range$auto(0x2, 0x8, 0x0) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r1, 0x0, 0x20) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r2, &(0x7f0000000200)={0x0, 0x7}, 0x3) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x800) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0xc040, 0x0) ioctl$auto(0x3, 0x1, 0x90000800000402) (async) r3 = openat$auto_proc_tid_children_operations_internal(0xffffffffffffff9c, 0x0, 0x2400, 0x0) getsockopt$auto_SO_BUF_LOCK(r3, 0x4, 0x48, 0x0, &(0x7f0000000080)=0x2) (async) unshare$auto(0x40000080) io_uring_setup$auto(0x2, 0x0) (async) socket(0x28, 0x1, 0x0) (async) socket(0x2, 0x5, 0x0) (async) epoll_create$auto(0x7) (async) epoll_ctl$auto(0x5, 0x1, 0x8000000000000000, 0x0) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) epoll_ctl$auto(0x5, 0x1, r4, 0x0) close_range$auto(0x0, 0x5, 0x0) kernel console output (not intermixed with test programs): ffffffffffffffda RBX: 00007fe426615fa0 RCX: 00007fe42639bf79 [ 1141.899838][T21626] RDX: 0000000000000003 RSI: 0000200000000b80 RDI: 0000000000000000 [ 1141.899849][T21626] RBP: 00007fe427236090 R08: 0000000000000000 R09: 0000000000000000 [ 1141.899859][T21626] R10: 0000200000000bc0 R11: 0000000000000246 R12: 0000000000000001 [ 1141.899870][T21626] R13: 00007fe426616038 R14: 00007fe426615fa0 R15: 00007ffd01c15108 [ 1141.899892][T21626] [ 1142.312520][T21588] Node 0 DMA32 free:1238248kB boost:0kB min:34304kB low:42880kB high:51456kB reserved_highatomic:0KB free_highatomic:0KB active_anon:14628kB inactive_anon:116660kB active_file:78232kB inactive_file:17964kB unevictable:1536kB writepending:1044kB zspages:812kB present:3129332kB managed:2537532kB mlocked:0kB bounce:0kB free_pcp:34412kB local_pcp:34412kB free_cma:0kB [ 1142.631059][T21588] lowmem_reserve[]: 0 0 1 1 1 [ 1142.678362][T21588] Node 0 Normal free:4kB boost:0kB min:12kB low:12kB high:12kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1064kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:12kB free_cma:0kB [ 1142.962987][T21588] lowmem_reserve[]: 0 0 0 0 0 [ 1143.009172][T21588] Node 1 Normal free:3934132kB boost:0kB min:55580kB low:69472kB high:83364kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:132kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:4096kB local_pcp:4096kB free_cma:0kB [ 1143.194747][T21588] lowmem_reserve[]: 0 0 0 0 0 [ 1143.199695][T21588] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1143.320815][T21588] Node 0 DMA32: 3434*4kB (UME) 2091*8kB (UME) 4399*16kB (UME) 1836*32kB (UME) 1244*64kB (UME) 804*128kB (UME) 597*256kB (UME) 298*512kB (UM) 168*1024kB (UM) 5*2048kB (UME) 97*4096kB (UM) = 1227120kB [ 1143.342010][ T8048] usb usb40-port2: attempt power cycle [ 1143.500318][T21588] Node 0 Normal: 1*4kB (U) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 1143.652569][T21588] Node 1 Normal: 5*4kB (UME) 8*8kB (UME) 10*16kB (UME) 10*32kB (UME) 10*64kB (UME) 4*128kB (UME) 5*256kB (UME) 6*512kB (UME) 4*1024kB (UM) 6*2048kB (UME) 955*4096kB (M) = 3934132kB [ 1143.768447][T21588] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1143.832539][T21588] Node 0 hugepages_total=4 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 1143.842400][T21588] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1143.926079][ T8048] usb usb40-port2: unable to enumerate USB device [ 1143.984105][T21588] Node 1 hugepages_total=3 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 1144.042542][T21588] 39785 total pagecache pages [ 1144.047271][T21588] 62 pages in swap cache [ 1144.051705][T21588] Free swap = 81412kB [ 1144.126621][T21588] Total swap = 124996kB [ 1144.130854][T21588] 2097051 pages RAM [ 1144.197695][T21588] 0 pages HighMem/MovableOnly [ 1144.225796][T21588] 430787 pages reserved [ 1144.230175][T21588] 0 pages cma reserved [ 1144.252565][T21588] tty tty16: ldisc open failed (-12), clearing slot 15 [ 1145.244041][T21651] FAULT_INJECTION: forcing a failure. [ 1145.244041][T21651] name failslab, interval 1, probability 0, space 0, times 0 [ 1145.324496][T21651] CPU: 0 UID: 0 PID: 21651 Comm: syz.3.3339 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1145.324532][T21651] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1145.324540][T21651] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1145.324552][T21651] Call Trace: [ 1145.324559][T21651] [ 1145.324567][T21651] dump_stack_lvl+0x100/0x190 [ 1145.324599][T21651] should_fail_ex.cold+0x5/0xa [ 1145.324620][T21651] should_failslab+0xc2/0x120 [ 1145.324649][T21651] __kmalloc_cache_noprof+0x7a/0x6f0 [ 1145.324671][T21651] ? snd_pcm_attach_substream+0x451/0xd60 [ 1145.324698][T21651] ? snd_ctl_get_preferred_subdevice+0x191/0x200 [ 1145.324723][T21651] ? snd_pcm_open+0x25f/0x710 [ 1145.324757][T21651] snd_pcm_attach_substream+0x451/0xd60 [ 1145.324789][T21651] snd_pcm_open_substream+0x90/0x1850 [ 1145.324817][T21651] ? __pfx_snd_pcm_open_substream+0x10/0x10 [ 1145.324845][T21651] ? rcu_is_watching+0x12/0xc0 [ 1145.324875][T21651] snd_pcm_open+0x2a3/0x710 [ 1145.324903][T21651] ? __pfx_snd_pcm_open+0x10/0x10 [ 1145.324931][T21651] ? __pfx_default_wake_function+0x10/0x10 [ 1145.324967][T21651] ? __pfx_snd_pcm_capture_open+0x10/0x10 [ 1145.324993][T21651] snd_pcm_capture_open+0x89/0xe0 [ 1145.325019][T21651] snd_open+0x22d/0x4c0 [ 1145.325040][T21651] ? __pfx_snd_open+0x10/0x10 [ 1145.325059][T21651] chrdev_open+0x234/0x6a0 [ 1145.325085][T21651] ? __pfx_apparmor_file_open+0x10/0x10 [ 1145.325108][T21651] ? __pfx_chrdev_open+0x10/0x10 [ 1145.325136][T21651] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 1145.325168][T21651] do_dentry_open+0x6d8/0x1660 [ 1145.325194][T21651] ? __pfx_chrdev_open+0x10/0x10 [ 1145.325225][T21651] vfs_open+0x82/0x3f0 [ 1145.325247][T21651] path_openat+0x208c/0x31a0 [ 1145.325288][T21651] ? __pfx_path_openat+0x10/0x10 [ 1145.325323][T21651] do_file_open+0x20e/0x430 [ 1145.325351][T21651] ? __pfx_do_file_open+0x10/0x10 [ 1145.325392][T21651] ? alloc_fd+0x476/0x790 [ 1145.325420][T21651] ? do_getname+0x191/0x390 [ 1145.325442][T21651] do_sys_openat2+0x10d/0x1e0 [ 1145.325463][T21651] ? __pfx_do_sys_openat2+0x10/0x10 [ 1145.325486][T21651] ? __fget_files+0x21f/0x3d0 [ 1145.325521][T21651] __x64_sys_openat+0x12d/0x210 [ 1145.325543][T21651] ? __pfx___x64_sys_openat+0x10/0x10 [ 1145.325573][T21651] do_syscall_64+0x106/0xf80 [ 1145.325600][T21651] ? clear_bhb_loop+0x40/0x90 [ 1145.325623][T21651] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1145.325642][T21651] RIP: 0033:0x7f3598b9bf79 [ 1145.325658][T21651] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1145.325676][T21651] RSP: 002b:00007f3596df6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1145.325696][T21651] RAX: ffffffffffffffda RBX: 00007f3598e15fa0 RCX: 00007f3598b9bf79 [ 1145.325708][T21651] RDX: 0000000000080042 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 1145.325719][T21651] RBP: 00007f3598c327e0 R08: 0000000000000000 R09: 0000000000000000 [ 1145.325730][T21651] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1145.325747][T21651] R13: 00007f3598e16038 R14: 00007f3598e15fa0 R15: 00007fff5489a4b8 [ 1145.325770][T21651] [ 1146.106558][T17212] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 1146.362569][T13812] block nbd3: Possible stuck request ffff888027e28000: control (read@0,4096B). Runtime 180 seconds [ 1146.629302][T21663] netlink: 334 bytes leftover after parsing attributes in process `syz.2.3340'. [ 1146.663618][T21663] FAULT_INJECTION: forcing a failure. [ 1146.663618][T21663] name failslab, interval 1, probability 0, space 0, times 0 [ 1146.716815][T21663] CPU: 0 UID: 0 PID: 21663 Comm: syz.2.3340 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1146.716853][T21663] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1146.716861][T21663] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1146.716872][T21663] Call Trace: [ 1146.716879][T21663] [ 1146.716887][T21663] dump_stack_lvl+0x100/0x190 [ 1146.716920][T21663] should_fail_ex.cold+0x5/0xa [ 1146.716943][T21663] should_failslab+0xc2/0x120 [ 1146.716971][T21663] kmem_cache_alloc_node_noprof+0x81/0x6f0 [ 1146.716997][T21663] ? alloc_vmap_area+0x640/0x2bd0 [ 1146.717028][T21663] alloc_vmap_area+0x640/0x2bd0 [ 1146.717077][T21663] ? __pfx_alloc_vmap_area+0x10/0x10 [ 1146.717111][T21663] __get_vm_area_node+0x1ca/0x330 [ 1146.717144][T21663] __vmalloc_node_range_noprof+0x213/0x1530 [ 1146.717164][T21663] ? n_tty_open+0x1a/0x170 [ 1146.717188][T21663] ? look_up_lock_class+0x64/0x120 [ 1146.717218][T21663] ? n_tty_open+0x1a/0x170 [ 1146.717246][T21663] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1146.717270][T21663] ? __ldsem_down_write_nested+0xfd/0x830 [ 1146.717293][T21663] ? __ldsem_down_write_nested+0x10e/0x830 [ 1146.717314][T21663] ? is_console_locked+0x9/0x20 [ 1146.717338][T21663] ? __pfx___ldsem_down_write_nested+0x10/0x10 [ 1146.717364][T21663] ? n_tty_open+0x1a/0x170 [ 1146.717383][T21663] __vmalloc_node_noprof+0xad/0xf0 [ 1146.717403][T21663] ? n_tty_open+0x1a/0x170 [ 1146.717424][T21663] ? __pfx_n_tty_open+0x10/0x10 [ 1146.717445][T21663] n_tty_open+0x1a/0x170 [ 1146.717467][T21663] tty_ldisc_open+0xa2/0x120 [ 1146.717494][T21663] tty_ldisc_setup+0x40/0xf0 [ 1146.717523][T21663] tty_init_dev.part.0+0x1b5/0x470 [ 1146.717545][T21663] tty_open+0xa63/0xfa0 [ 1146.717573][T21663] ? __pfx_tty_open+0x10/0x10 [ 1146.717592][T21663] ? chrdev_open+0x10b/0x6a0 [ 1146.717617][T21663] ? chrdev_open+0x10b/0x6a0 [ 1146.717646][T21663] ? __pfx_tty_open+0x10/0x10 [ 1146.717665][T21663] chrdev_open+0x234/0x6a0 [ 1146.717691][T21663] ? __pfx_apparmor_file_open+0x10/0x10 [ 1146.717713][T21663] ? __pfx_chrdev_open+0x10/0x10 [ 1146.717880][T21663] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 1146.717914][T21663] do_dentry_open+0x6d8/0x1660 [ 1146.717941][T21663] ? __pfx_chrdev_open+0x10/0x10 [ 1146.717973][T21663] vfs_open+0x82/0x3f0 [ 1146.717996][T21663] path_openat+0x208c/0x31a0 [ 1146.718031][T21663] ? __pfx_path_openat+0x10/0x10 [ 1146.718066][T21663] do_file_open+0x20e/0x430 [ 1146.718094][T21663] ? __pfx_do_file_open+0x10/0x10 [ 1146.718137][T21663] ? alloc_fd+0x476/0x790 [ 1146.718165][T21663] ? do_getname+0x191/0x390 [ 1146.718186][T21663] do_sys_openat2+0x10d/0x1e0 [ 1146.718207][T21663] ? __pfx_do_sys_openat2+0x10/0x10 [ 1146.718236][T21663] __x64_sys_openat+0x12d/0x210 [ 1146.718258][T21663] ? __pfx___x64_sys_openat+0x10/0x10 [ 1146.718287][T21663] do_syscall_64+0x106/0xf80 [ 1146.718314][T21663] ? clear_bhb_loop+0x40/0x90 [ 1146.718337][T21663] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1146.718360][T21663] RIP: 0033:0x7f2e9099bf79 [ 1146.718377][T21663] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1146.718396][T21663] RSP: 002b:00007f2e91820028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1146.718415][T21663] RAX: ffffffffffffffda RBX: 00007f2e90c15fa0 RCX: 00007f2e9099bf79 [ 1146.718428][T21663] RDX: 0000000000000000 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 1146.718440][T21663] RBP: 00007f2e90a327e0 R08: 0000000000000000 R09: 0000000000000000 [ 1146.718451][T21663] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1146.718463][T21663] R13: 00007f2e90c16038 R14: 00007f2e90c15fa0 R15: 00007ffc29872808 [ 1146.718487][T21663] [ 1147.492927][T21663] syz.2.3340: vmalloc error: size 9128, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1147.520058][T21663] CPU: 0 UID: 0 PID: 21663 Comm: syz.2.3340 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1147.520094][T21663] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1147.520102][T21663] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1147.520113][T21663] Call Trace: [ 1147.520120][T21663] [ 1147.520128][T21663] dump_stack_lvl+0x100/0x190 [ 1147.520159][T21663] warn_alloc.cold+0x95/0x1c1 [ 1147.520192][T21663] ? __pfx_warn_alloc+0x10/0x10 [ 1147.520214][T21663] ? lockdep_hardirqs_on+0x78/0x100 [ 1147.520243][T21663] ? __get_vm_area_node+0x2c5/0x330 [ 1147.520277][T21663] ? __get_vm_area_node+0x208/0x330 [ 1147.520310][T21663] __vmalloc_node_range_noprof+0xbf4/0x1530 [ 1147.520332][T21663] ? look_up_lock_class+0x64/0x120 [ 1147.520362][T21663] ? n_tty_open+0x1a/0x170 [ 1147.520390][T21663] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1147.520411][T21663] ? __ldsem_down_write_nested+0xfd/0x830 [ 1147.520433][T21663] ? __ldsem_down_write_nested+0x10e/0x830 [ 1147.520455][T21663] ? is_console_locked+0x9/0x20 [ 1147.520479][T21663] ? __pfx___ldsem_down_write_nested+0x10/0x10 [ 1147.520505][T21663] ? n_tty_open+0x1a/0x170 [ 1147.520526][T21663] __vmalloc_node_noprof+0xad/0xf0 [ 1147.520545][T21663] ? n_tty_open+0x1a/0x170 [ 1147.520567][T21663] ? __pfx_n_tty_open+0x10/0x10 [ 1147.520589][T21663] n_tty_open+0x1a/0x170 [ 1147.520611][T21663] tty_ldisc_open+0xa2/0x120 [ 1147.520638][T21663] tty_ldisc_setup+0x40/0xf0 [ 1147.520667][T21663] tty_init_dev.part.0+0x1b5/0x470 [ 1147.520698][T21663] tty_open+0xa63/0xfa0 [ 1147.520752][T21663] ? __pfx_tty_open+0x10/0x10 [ 1147.520771][T21663] ? chrdev_open+0x10b/0x6a0 [ 1147.520798][T21663] ? chrdev_open+0x10b/0x6a0 [ 1147.520828][T21663] ? __pfx_tty_open+0x10/0x10 [ 1147.520849][T21663] chrdev_open+0x234/0x6a0 [ 1147.520876][T21663] ? __pfx_apparmor_file_open+0x10/0x10 [ 1147.520898][T21663] ? __pfx_chrdev_open+0x10/0x10 [ 1147.520926][T21663] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 1147.520962][T21663] do_dentry_open+0x6d8/0x1660 [ 1147.520988][T21663] ? __pfx_chrdev_open+0x10/0x10 [ 1147.521020][T21663] vfs_open+0x82/0x3f0 [ 1147.521043][T21663] path_openat+0x208c/0x31a0 [ 1147.521078][T21663] ? __pfx_path_openat+0x10/0x10 [ 1147.521113][T21663] do_file_open+0x20e/0x430 [ 1147.521141][T21663] ? __pfx_do_file_open+0x10/0x10 [ 1147.521183][T21663] ? alloc_fd+0x476/0x790 [ 1147.521212][T21663] ? do_getname+0x191/0x390 [ 1147.521233][T21663] do_sys_openat2+0x10d/0x1e0 [ 1147.521254][T21663] ? __pfx_do_sys_openat2+0x10/0x10 [ 1147.521283][T21663] __x64_sys_openat+0x12d/0x210 [ 1147.521304][T21663] ? __pfx___x64_sys_openat+0x10/0x10 [ 1147.521334][T21663] do_syscall_64+0x106/0xf80 [ 1147.521360][T21663] ? clear_bhb_loop+0x40/0x90 [ 1147.521394][T21663] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1147.521415][T21663] RIP: 0033:0x7f2e9099bf79 [ 1147.521434][T21663] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1147.521452][T21663] RSP: 002b:00007f2e91820028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1147.521472][T21663] RAX: ffffffffffffffda RBX: 00007f2e90c15fa0 RCX: 00007f2e9099bf79 [ 1147.521485][T21663] RDX: 0000000000000000 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 1147.521498][T21663] RBP: 00007f2e90a327e0 R08: 0000000000000000 R09: 0000000000000000 [ 1147.521509][T21663] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1147.521521][T21663] R13: 00007f2e90c16038 R14: 00007f2e90c15fa0 R15: 00007ffc29872808 [ 1147.521545][T21663] [ 1147.521554][T21663] Mem-Info: [ 1148.078050][T21666] EXT4-fs error (device sda1): ext4_validate_inode_bitmap:104: comm syz-executor: Corrupt inode bitmap - block_group = 2, inode_bitmap = 139 [ 1148.373293][T20716] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1148.385857][T20716] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1148.397965][T20716] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1148.407725][T20716] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1148.418566][T20716] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1149.082186][T21675] chnl_net:caif_netlink_parms(): no params data found [ 1149.415660][T21688] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 1149.749143][T21675] bridge0: port 1(bridge_slave_0) entered blocking state [ 1149.782965][T21675] bridge0: port 1(bridge_slave_0) entered disabled state [ 1149.790365][T21675] bridge_slave_0: entered allmulticast mode [ 1149.885866][T21675] bridge_slave_0: entered promiscuous mode [ 1149.928177][T21675] bridge0: port 2(bridge_slave_1) entered blocking state [ 1149.972750][T21675] bridge0: port 2(bridge_slave_1) entered disabled state [ 1150.010440][T21675] bridge_slave_1: entered allmulticast mode [ 1150.043155][T21675] bridge_slave_1: entered promiscuous mode [ 1150.148445][T21663] active_anon:3691 inactive_anon:19927 isolated_anon:63 [ 1150.148445][T21663] active_file:20764 inactive_file:3328 isolated_file:0 [ 1150.148445][T21663] unevictable:768 dirty:407 writeback:0 [ 1150.148445][T21663] slab_reclaimable:12584 slab_unreclaimable:107399 [ 1150.148445][T21663] mapped:45920 shmem:1974 pagetables:1549 [ 1150.148445][T21663] sec_pagetables:0 bounce:0 [ 1150.148445][T21663] kernel_misc_reclaimable:0 [ 1150.148445][T21663] free:1293296 free_pcp:9366 free_cma:0 [ 1150.238021][T21675] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1150.295688][T21675] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1150.405253][T21663] Node 0 active_anon:14816kB inactive_anon:79544kB active_file:83056kB inactive_file:13180kB unevictable:1536kB isolated(anon):252kB isolated(file):0kB mapped:183680kB dirty:1624kB writeback:0kB shmem:6360kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:36864kB kernel_stack:13056kB pagetables:6088kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1150.457185][T21675] team0: Port device team_slave_0 added [ 1150.488791][T21675] team0: Port device team_slave_1 added [ 1150.500845][T20716] Bluetooth: hci3: command tx timeout [ 1150.569913][T21663] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:132kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:108kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1150.615773][T21675] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1150.632881][T21675] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1150.705983][T21663] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1150.763269][T21675] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1150.802847][T21675] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1150.809927][T21675] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1150.869464][T21663] lowmem_reserve[]: 0 2478 2479 2479 2479 [ 1150.889779][T21663] Node 0 DMA32 free:1223480kB boost:0kB min:34304kB low:42880kB high:51456kB reserved_highatomic:0KB free_highatomic:0KB active_anon:14920kB inactive_anon:79448kB active_file:83056kB inactive_file:13180kB unevictable:1536kB writepending:1624kB zspages:3500kB present:3129332kB managed:2537532kB mlocked:0kB bounce:0kB free_pcp:32052kB local_pcp:32052kB free_cma:0kB [ 1150.962093][T21675] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1151.076690][T21663] lowmem_reserve[]: 0 0 1 1 1 [ 1151.136865][T21663] Node 0 Normal free:4kB boost:0kB min:12kB low:12kB high:12kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1064kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:12kB free_cma:0kB [ 1151.273722][T21675] hsr_slave_0: entered promiscuous mode [ 1151.280730][T21675] hsr_slave_1: entered promiscuous mode [ 1151.299515][T21663] lowmem_reserve[]: 0 0 0 0 0 [ 1151.318729][T21663] Node 1 Normal free:3934132kB boost:0kB min:55580kB low:69472kB high:83364kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:132kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:4096kB local_pcp:4096kB free_cma:0kB [ 1151.359599][T21675] debugfs: 'hsr0' already exists in 'hsr' [ 1151.392791][T21675] Cannot create hsr debugfs directory [ 1151.539235][T21663] lowmem_reserve[]: 0 0 0 0 0 [ 1151.593853][T21663] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1151.673012][T21663] Node 0 DMA32: 7251*4kB (UME) 4444*8kB (UME) 3896*16kB (UME) 1946*32kB (UME) 1259*64kB (UME) 807*128kB (UME) 597*256kB (UME) 300*512kB (UM) 168*1024kB (UM) 5*2048kB (UME) 86*4096kB (UM) = 1213996kB [ 1151.810422][T21663] Node 0 Normal: 1*4kB (U) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 1151.864211][T21663] Node 1 Normal: 5*4kB (UME) 8*8kB (UME) 10*16kB (UME) 10*32kB (UME) 10*64kB (UME) 4*128kB (UME) 5*256kB (UME) 6*512kB (UME) 4*1024kB (UM) 6*2048kB (UME) 955*4096kB (M) = 3934132kB [ 1151.956051][T21663] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1152.030757][T21663] Node 0 hugepages_total=4 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 1152.102624][T21663] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1152.158590][T21663] Node 1 hugepages_total=3 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 1152.294666][T21663] 26856 total pagecache pages [ 1152.317581][T21663] 75 pages in swap cache [ 1152.392902][T21663] Free swap = 66368kB [ 1152.449299][T21663] Total swap = 124996kB [ 1152.458111][T21675] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1152.485522][T21663] 2097051 pages RAM [ 1152.503219][T21675] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1152.546137][T21663] 0 pages HighMem/MovableOnly [ 1152.563231][T20716] Bluetooth: hci3: command tx timeout [ 1152.593743][T21675] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1152.631889][T21675] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1152.653124][T21663] 430787 pages reserved [ 1152.658157][T21663] 0 pages cma reserved [ 1152.686910][T21663] tty tty16: ldisc open failed (-12), clearing slot 15 [ 1152.940329][T21675] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1153.031240][T21675] 8021q: adding VLAN 0 to HW filter on device team0 [ 1153.090752][ T6881] bridge0: port 1(bridge_slave_0) entered blocking state [ 1153.098394][ T6881] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1153.180784][ T6881] bridge0: port 2(bridge_slave_1) entered blocking state [ 1153.188048][ T6881] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1154.098576][T21675] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1154.649315][T17212] Bluetooth: hci3: command tx timeout [ 1155.775015][T21675] veth0_vlan: entered promiscuous mode [ 1155.884973][T21675] veth1_vlan: entered promiscuous mode [ 1156.145688][T21675] veth0_macvtap: entered promiscuous mode [ 1156.194714][T21675] veth1_macvtap: entered promiscuous mode [ 1156.214801][T21765] random: crng reseeded on system resumption [ 1156.708929][T21675] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1156.722641][T17212] Bluetooth: hci3: command tx timeout [ 1156.801684][T21675] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1156.895155][T12029] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1156.944966][T12029] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1157.066783][T12029] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1157.124614][T12029] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1157.566261][T18482] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1157.637043][T18482] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1157.775562][ T6886] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1157.799255][T17686] usb usb40-port2: attempt power cycle [ 1157.814842][ T6886] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1158.393486][T17686] usb usb40-port2: unable to enumerate USB device [ 1160.323156][T17212] Bluetooth: hci6: Opcode 0x0c03 failed: -110 [ 1162.866495][T21828] random: crng reseeded on system resumption [ 1163.787809][T21843] bridge0: port 3(bond0) entered blocking state [ 1163.839787][T21843] bridge0: port 3(bond0) entered disabled state [ 1163.891161][T21843] bond0: entered allmulticast mode [ 1163.933275][T21843] bond_slave_0: entered allmulticast mode [ 1163.971316][T21843] bond_slave_1: entered allmulticast mode [ 1164.003765][T21843] bond0: entered promiscuous mode [ 1164.039123][T21843] bond_slave_0: entered promiscuous mode [ 1164.093165][T21843] bond_slave_1: entered promiscuous mode [ 1164.133224][T21843] bridge0: port 3(bond0) entered blocking state [ 1164.139881][T21843] bridge0: port 3(bond0) entered forwarding state [ 1164.464144][T21826] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1164.576761][T21826] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1164.628679][T21826] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1164.672173][T21826] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1164.699429][T21826] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1164.731640][T21826] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1164.758159][T21826] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1164.787612][T21826] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1166.244868][T17212] Bluetooth: hci4: command 0x0c1a tx timeout [ 1166.650002][T17212] Bluetooth: hci5: command 0x0c1a tx timeout [ 1166.657266][T20716] Bluetooth: hci1: command 0x0c1a tx timeout [ 1166.722857][T20716] Bluetooth: hci2: command 0x0c1a tx timeout [ 1166.728902][T20716] Bluetooth: hci0: command 0x0c1a tx timeout [ 1166.803962][T20716] Bluetooth: hci3: command 0x0c1a tx timeout [ 1168.882754][T20716] Bluetooth: hci3: command 0x0c1a tx timeout [ 1169.530124][T21919] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1169.676295][T21920] misc userio: Invalid payload size [ 1169.862312][T21893] syz.4.3393 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=1, oom_score_adj=1000 [ 1169.956602][T21893] CPU: 0 UID: 0 PID: 21893 Comm: syz.4.3393 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1169.956642][T21893] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1169.956649][T21893] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1169.956659][T21893] Call Trace: [ 1169.956666][T21893] [ 1169.956673][T21893] dump_stack_lvl+0x100/0x190 [ 1169.956704][T21893] dump_header+0xfb/0x606 [ 1169.956725][T21893] oom_kill_process.cold+0xd/0x330 [ 1169.956747][T21893] out_of_memory+0x340/0x14f0 [ 1169.956776][T21893] ? __pfx_out_of_memory+0x10/0x10 [ 1169.956805][T21893] mem_cgroup_out_of_memory+0xc6/0x130 [ 1169.956827][T21893] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 1169.956847][T21893] ? find_held_lock+0x2b/0x80 [ 1169.956882][T21893] ? do_raw_spin_unlock+0x145/0x1e0 [ 1169.956908][T21893] ? _raw_spin_unlock+0x28/0x50 [ 1169.956933][T21893] try_charge_memcg+0x652/0xc90 [ 1169.956965][T21893] ? __pfx_try_charge_memcg+0x10/0x10 [ 1169.956990][T21893] ? rcu_read_unlock+0x17/0x60 [ 1169.957018][T21893] ? rcu_read_unlock+0x17/0x60 [ 1169.957050][T21893] ? get_mem_cgroup_from_objcg+0xd3/0x330 [ 1169.957076][T21893] obj_cgroup_charge_account+0x33d/0x640 [ 1169.957108][T21893] __memcg_slab_post_alloc_hook+0x2e3/0x9a0 [ 1169.957145][T21893] __kmalloc_cache_noprof+0x59d/0x6f0 [ 1169.957165][T21893] ? ipv6_add_dev+0x1c9/0x1520 [ 1169.957196][T21893] ipv6_add_dev+0x1c9/0x1520 [ 1169.957227][T21893] addrconf_notify+0x563/0x19c0 [ 1169.957248][T21893] ? ip6mr_device_event+0x1bc/0x230 [ 1169.957274][T21893] notifier_call_chain+0x99/0x420 [ 1169.957301][T21893] call_netdevice_notifiers_info+0xbe/0x110 [ 1169.957323][T21893] register_netdevice+0x16e6/0x2210 [ 1169.957356][T21893] ? __pfx_register_netdevice+0x10/0x10 [ 1169.957384][T21893] ? net_generic+0xea/0x2a0 [ 1169.957414][T21893] register_netdev+0x34/0x50 [ 1169.957441][T21893] ip6_tnl_init_net+0x2ff/0x480 [ 1169.957468][T21893] ? __pfx_ip6_tnl_init_net+0x10/0x10 [ 1169.957493][T21893] ops_init+0x1e2/0x5f0 [ 1169.957523][T21893] setup_net+0x118/0x3a0 [ 1169.957550][T21893] ? __pfx_setup_net+0x10/0x10 [ 1169.957580][T21893] ? lockdep_init_map_type+0x5c/0x250 [ 1169.957603][T21893] ? mutex_init_lockep+0x110/0x150 [ 1169.957634][T21893] copy_net_ns+0x46f/0x7c0 [ 1169.957654][T21893] create_new_namespaces+0x3ea/0xac0 [ 1169.957689][T21893] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 1169.957710][T21893] ksys_unshare+0x455/0xab0 [ 1169.957734][T21893] ? __pfx_ksys_unshare+0x10/0x10 [ 1169.957765][T21893] __x64_sys_unshare+0x31/0x40 [ 1169.957786][T21893] do_syscall_64+0x106/0xf80 [ 1169.957811][T21893] ? clear_bhb_loop+0x40/0x90 [ 1169.957834][T21893] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1169.957852][T21893] RIP: 0033:0x7fe42639bf79 [ 1169.957871][T21893] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1169.957889][T21893] RSP: 002b:00007fe427215028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1169.957907][T21893] RAX: ffffffffffffffda RBX: 00007fe426616090 RCX: 00007fe42639bf79 [ 1169.957919][T21893] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 1169.957929][T21893] RBP: 00007fe4264327e0 R08: 0000000000000000 R09: 0000000000000000 [ 1169.957940][T21893] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1169.957951][T21893] R13: 00007fe426616128 R14: 00007fe426616090 R15: 00007ffd01c15108 [ 1169.957974][T21893] [ 1169.957982][T21893] memory: usage 3064kB, limit 3072kB, failcnt 124944 [ 1171.075400][T20716] Bluetooth: hci3: command 0x0c1a tx timeout [ 1171.782689][T21893] memory+swap: usage 7336kB, limit 9007199254740988kB, failcnt 0 [ 1171.862629][T21893] kmem: usage 2904kB, limit 9007199254740988kB, failcnt 0 [ 1171.870232][T21893] Memory cgroup stats for /syz4: [ 1171.870479][T21893] cache 0 [ 1172.072263][T21893] rss 20480 [ 1172.114892][T21893] rss_huge 0 [ 1172.131093][T21893] shmem 0 [ 1172.188971][T21893] mapped_file 0 [ 1172.222948][T21893] dirty 0 [ 1172.241155][T21893] writeback 0 [ 1172.253413][T21893] workingset_refault_anon 20145 [ 1172.322147][T21893] workingset_refault_file 20624 [ 1172.365866][T21893] swap 4440064 [ 1172.398752][T21893] swapcached 548241408 [ 1172.466177][T21893] pgpgin 328166 [ 1172.508122][T21893] pgpgout 348445 [ 1172.560800][T21893] pgfault 212405 [ 1172.614177][T21893] pgmajfault 6664 [ 1172.637808][T21893] inactive_anon 16384 [ 1172.669133][T21893] active_anon 0 [ 1172.773507][T21893] inactive_file 0 [ 1172.844812][T21893] active_file 0 [ 1172.889970][T21893] unevictable 0 [ 1172.959823][T21893] hierarchical_memory_limit 3145728 [ 1173.023634][T21893] hierarchical_memsw_limit 9223372036854771712 [ 1173.063526][T21893] total_cache 0 [ 1173.145918][T21893] total_rss 20480 [ 1173.205133][T21893] total_rss_huge 0 [ 1173.252328][T21893] total_shmem 0 [ 1173.266532][T21893] total_mapped_file 0 [ 1173.369975][T21893] total_dirty 0 [ 1173.392059][T21893] total_writeback 0 [ 1173.419197][T21893] total_workingset_refault_anon 20145 [ 1173.474738][T21893] total_workingset_refault_file 20624 [ 1173.532691][T21893] total_swap 4440064 [ 1173.549296][T21953] zswap: compressor not available [ 1173.587357][T21893] total_swapcached 548241408 [ 1173.635224][T21893] total_pgpgin 328166 [ 1173.639504][T21893] total_pgpgout 348445 [ 1173.693228][T21893] total_pgfault 212405 [ 1173.716502][T21893] total_pgmajfault 6664 [ 1173.720782][T21893] total_inactive_anon 16384 [ 1173.774103][T21893] total_active_anon 0 [ 1173.818576][T21893] total_inactive_file 0 [ 1173.846940][T21893] total_active_file 0 [ 1173.851005][T21893] total_unevictable 0 [ 1173.928898][T21893] anon_cost 76 [ 1173.932361][T21893] file_cost 0 [ 1173.951166][T21893] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.3393,pid=21891,uid=0 [ 1174.049495][T21893] Memory cgroup out of memory: Killed process 21892 (syz.4.3393) total-vm:106584kB, anon-rss:3272kB, file-rss:22960kB, shmem-rss:0kB, UID:0 pgtables:164kB oom_score_adj:1000 [ 1174.853295][T21971] FAULT_INJECTION: forcing a failure. [ 1174.853295][T21971] name failslab, interval 1, probability 0, space 0, times 0 [ 1174.894208][T21970] netlink: 334 bytes leftover after parsing attributes in process `syz.2.3411'. [ 1174.932699][T21971] CPU: 0 UID: 0 PID: 21971 Comm: syz.3.3412 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1174.932733][T21971] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1174.932740][T21971] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1174.932751][T21971] Call Trace: [ 1174.932758][T21971] [ 1174.932765][T21971] dump_stack_lvl+0x100/0x190 [ 1174.932797][T21971] should_fail_ex.cold+0x5/0xa [ 1174.932817][T21971] should_failslab+0xc2/0x120 [ 1174.932844][T21971] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1174.932868][T21971] ? do_getname+0x35/0x390 [ 1174.932886][T21971] ? find_held_lock+0x2b/0x80 [ 1174.932916][T21971] do_getname+0x35/0x390 [ 1174.932936][T21971] do_sys_openat2+0xc5/0x1e0 [ 1174.932971][T21971] ? __pfx_do_sys_openat2+0x10/0x10 [ 1174.932989][T21971] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1174.933020][T21971] ? __fget_files+0x21f/0x3d0 [ 1174.933048][T21971] __x64_sys_openat+0x12d/0x210 [ 1174.933068][T21971] ? __pfx___x64_sys_openat+0x10/0x10 [ 1174.933087][T21971] ? ksys_write+0x1ac/0x250 [ 1174.933119][T21971] do_syscall_64+0x106/0xf80 [ 1174.933144][T21971] ? clear_bhb_loop+0x40/0x90 [ 1174.933166][T21971] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1174.933185][T21971] RIP: 0033:0x7f3598b9bf79 [ 1174.933201][T21971] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1174.933218][T21971] RSP: 002b:00007f3596df6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1174.933236][T21971] RAX: ffffffffffffffda RBX: 00007f3598e15fa0 RCX: 00007f3598b9bf79 [ 1174.933248][T21971] RDX: 0000000000000000 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 1174.933259][T21971] RBP: 00007f3596df6090 R08: 0000000000000000 R09: 0000000000000000 [ 1174.933270][T21971] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1174.933280][T21971] R13: 00007f3598e16038 R14: 00007f3598e15fa0 R15: 00007fff5489a4b8 [ 1174.933302][T21971] [ 1175.844181][T21985] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3416'. [ 1175.923310][T21984] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3416'. [ 1176.887837][T13812] block nbd3: Possible stuck request ffff888027e28000: control (read@0,4096B). Runtime 210 seconds [ 1177.535510][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.541913][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 1178.005077][T22016] NFSD: Failed to start, no listeners configured. [ 1179.304951][T22055] FAULT_INJECTION: forcing a failure. [ 1179.304951][T22055] name failslab, interval 1, probability 0, space 0, times 0 [ 1179.399011][T22055] CPU: 0 UID: 0 PID: 22055 Comm: syz.8.3431 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1179.399049][T22055] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1179.399058][T22055] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1179.399071][T22055] Call Trace: [ 1179.399079][T22055] [ 1179.399087][T22055] dump_stack_lvl+0x100/0x190 [ 1179.399121][T22055] should_fail_ex.cold+0x5/0xa [ 1179.399144][T22055] should_failslab+0xc2/0x120 [ 1179.399174][T22055] __kmalloc_cache_noprof+0x7a/0x6f0 [ 1179.399197][T22055] ? tty_alloc_file+0x3f/0xa0 [ 1179.399218][T22055] ? kobject_get_unless_zero+0x156/0x200 [ 1179.399241][T22055] ? __pfx_ptmx_open+0x10/0x10 [ 1179.399269][T22055] tty_alloc_file+0x3f/0xa0 [ 1179.399289][T22055] ptmx_open+0x61/0x3c0 [ 1179.399316][T22055] ? __pfx_ptmx_open+0x10/0x10 [ 1179.399344][T22055] chrdev_open+0x234/0x6a0 [ 1179.399372][T22055] ? __pfx_apparmor_file_open+0x10/0x10 [ 1179.399397][T22055] ? __pfx_chrdev_open+0x10/0x10 [ 1179.399426][T22055] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 1179.399460][T22055] do_dentry_open+0x6d8/0x1660 [ 1179.399488][T22055] ? __pfx_chrdev_open+0x10/0x10 [ 1179.399521][T22055] vfs_open+0x82/0x3f0 [ 1179.399545][T22055] path_openat+0x208c/0x31a0 [ 1179.399580][T22055] ? __pfx_path_openat+0x10/0x10 [ 1179.399615][T22055] do_file_open+0x20e/0x430 [ 1179.399645][T22055] ? __pfx_do_file_open+0x10/0x10 [ 1179.399687][T22055] ? alloc_fd+0x476/0x790 [ 1179.399717][T22055] ? do_getname+0x191/0x390 [ 1179.399739][T22055] do_sys_openat2+0x10d/0x1e0 [ 1179.399760][T22055] ? __pfx_do_sys_openat2+0x10/0x10 [ 1179.399802][T22055] __x64_sys_openat+0x12d/0x210 [ 1179.399825][T22055] ? __pfx___x64_sys_openat+0x10/0x10 [ 1179.399857][T22055] do_syscall_64+0x106/0xf80 [ 1179.399885][T22055] ? clear_bhb_loop+0x40/0x90 [ 1179.399909][T22055] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1179.399930][T22055] RIP: 0033:0x7f518e99bf79 [ 1179.399948][T22055] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1179.399968][T22055] RSP: 002b:00007f518f932028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1179.399988][T22055] RAX: ffffffffffffffda RBX: 00007f518ec15fa0 RCX: 00007f518e99bf79 [ 1179.400000][T22055] RDX: 0000000000000000 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 1179.400013][T22055] RBP: 00007f518ea327e0 R08: 0000000000000000 R09: 0000000000000000 [ 1179.400024][T22055] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1179.400036][T22055] R13: 00007f518ec16038 R14: 00007f518ec15fa0 R15: 00007ffc807a7598 [ 1179.400060][T22055] [ 1183.033015][T22106] vhci_hcd vhci_hcd.2: invalid port number 16 [ 1183.115566][T22106] vhci_hcd vhci_hcd.2: invalid port number 16 [ 1183.342651][T22070] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1183.446409][T22070] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1183.630072][T22070] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1183.761588][T22070] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1183.932863][T22113] FAULT_INJECTION: forcing a failure. [ 1183.932863][T22113] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1183.955617][T22070] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1183.962085][T22070] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1184.021705][T22113] CPU: 0 UID: 0 PID: 22113 Comm: syz.4.3438 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1184.021740][T22113] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1184.021748][T22113] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1184.021758][T22113] Call Trace: [ 1184.021765][T22113] [ 1184.021773][T22113] dump_stack_lvl+0x100/0x190 [ 1184.021804][T22113] should_fail_ex.cold+0x5/0xa [ 1184.021826][T22113] get_futex_key+0x1d2/0x1620 [ 1184.021849][T22113] ? __pfx_get_futex_key+0x10/0x10 [ 1184.021868][T22113] ? find_held_lock+0x2b/0x80 [ 1184.021896][T22113] ? futex_wake+0x456/0x530 [ 1184.021933][T22113] futex_wake+0xea/0x530 [ 1184.021964][T22113] ? __pfx_futex_wake+0x10/0x10 [ 1184.021991][T22113] ? __lock_acquire+0x4a5/0x2630 [ 1184.022018][T22113] do_futex+0x32b/0x350 [ 1184.022040][T22113] ? __pfx_do_futex+0x10/0x10 [ 1184.022063][T22113] ? find_held_lock+0x2b/0x80 [ 1184.022093][T22113] __x64_sys_futex+0x34f/0x4d0 [ 1184.022117][T22113] ? __fget_files+0x21f/0x3d0 [ 1184.022142][T22113] ? __pfx___x64_sys_futex+0x10/0x10 [ 1184.022172][T22113] do_syscall_64+0x106/0xf80 [ 1184.022199][T22113] ? clear_bhb_loop+0x40/0x90 [ 1184.022221][T22113] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1184.022241][T22113] RIP: 0033:0x7fe42639bf79 [ 1184.022257][T22113] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1184.022275][T22113] RSP: 002b:00007fe4272150e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1184.022295][T22113] RAX: ffffffffffffffda RBX: 00007fe426616098 RCX: 00007fe42639bf79 [ 1184.022317][T22113] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fe42661609c [ 1184.022328][T22113] RBP: 00007fe426616090 R08: 0000000000000000 R09: 0000000000000000 [ 1184.022340][T22113] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 1184.022351][T22113] R13: 00007fe426616128 R14: 00007ffd01c15020 R15: 00007ffd01c15108 [ 1184.022375][T22113] [ 1185.252878][T17212] Bluetooth: hci4: command 0x0c1a tx timeout [ 1185.533715][T17212] Bluetooth: hci1: command 0x0c1a tx timeout [ 1185.687494][T17212] Bluetooth: hci5: command 0x0c1a tx timeout [ 1185.833443][ T29] audit: type=1807 audit(4294967349.830:36): UNKNOWN=òÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿ [ 1185.855990][T17212] Bluetooth: hci0: command 0x0c1a tx timeout [ 1185.988215][ T29] audit: type=1802 audit(4294967349.990:37): pid=22132 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.8.3443" res=0 errno=0 [ 1186.007106][T17212] Bluetooth: hci3: command 0x0c1a tx timeout [ 1186.013450][T20716] Bluetooth: hci2: command 0x0c1a tx timeout [ 1186.020058][T22132] ima: policy update failed [ 1186.177191][ T29] audit: type=1802 audit(4294967350.180:38): pid=22132 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.8.3443" res=0 errno=0 [ 1188.969797][T22167] futex_wake_op: syz.3.3452 tries to shift op by -2048; fix this program [ 1189.029893][T22167] futex_wake_op: syz.3.3452 tries to shift op by -2048; fix this program [ 1189.100357][T22168] 0x000000000001-0x000000020000 : "" [ 1189.138394][T22168] ftl_cs: FTL header corrupt! [ 1190.485265][T22165] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3450'. [ 1190.556238][T22165] HfR: entered promiscuous mode [ 1192.467169][T22205] netlink: 334 bytes leftover after parsing attributes in process `syz.4.3461'. [ 1192.583973][T22205] FAULT_INJECTION: forcing a failure. [ 1192.583973][T22205] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1192.674687][T22205] CPU: 0 UID: 0 PID: 22205 Comm: syz.4.3461 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1192.674722][T22205] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1192.674730][T22205] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1192.674740][T22205] Call Trace: [ 1192.674748][T22205] [ 1192.674756][T22205] dump_stack_lvl+0x100/0x190 [ 1192.674788][T22205] should_fail_ex.cold+0x5/0xa [ 1192.674810][T22205] get_futex_key+0x1d2/0x1620 [ 1192.674833][T22205] ? __pfx_get_futex_key+0x10/0x10 [ 1192.674853][T22205] ? realloc_user_queue+0x284/0x320 [ 1192.674879][T22205] ? __snd_timer_user_ioctl.isra.0+0x1a9/0x27c0 [ 1192.674906][T22205] futex_wake+0xea/0x530 [ 1192.674933][T22205] ? __pfx_futex_wake+0x10/0x10 [ 1192.674956][T22205] ? rcu_is_watching+0x12/0xc0 [ 1192.674982][T22205] ? trace_contention_end+0x140/0x180 [ 1192.675007][T22205] ? __mutex_lock+0x26a/0x1b90 [ 1192.675036][T22205] ? find_held_lock+0x2b/0x80 [ 1192.675063][T22205] ? snd_timer_user_ioctl+0x9e/0xd0 [ 1192.675091][T22205] do_futex+0x32b/0x350 [ 1192.675113][T22205] ? __pfx_do_futex+0x10/0x10 [ 1192.675136][T22205] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1192.675167][T22205] __x64_sys_futex+0x34f/0x4d0 [ 1192.675190][T22205] ? __x64_sys_openat+0x12d/0x210 [ 1192.675212][T22205] ? __pfx___x64_sys_futex+0x10/0x10 [ 1192.675241][T22205] do_syscall_64+0x106/0xf80 [ 1192.675269][T22205] ? clear_bhb_loop+0x40/0x90 [ 1192.675291][T22205] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1192.675310][T22205] RIP: 0033:0x7fe42639bf79 [ 1192.675326][T22205] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1192.675345][T22205] RSP: 002b:00007fe4272360e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1192.675364][T22205] RAX: ffffffffffffffda RBX: 00007fe426615fa8 RCX: 00007fe42639bf79 [ 1192.675376][T22205] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fe426615fac [ 1192.675387][T22205] RBP: 00007fe426615fa0 R08: 0000000000000000 R09: 0000000000000000 [ 1192.675399][T22205] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1192.675409][T22205] R13: 00007fe426616038 R14: 00007ffd01c15020 R15: 00007ffd01c15108 [ 1192.675431][T22205] [ 1194.846887][T22223] FAULT_INJECTION: forcing a failure. [ 1194.846887][T22223] name failslab, interval 1, probability 0, space 0, times 0 [ 1194.936710][T22223] CPU: 0 UID: 0 PID: 22223 Comm: syz.4.3468 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1194.936743][T22223] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1194.936751][T22223] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1194.936762][T22223] Call Trace: [ 1194.936769][T22223] [ 1194.936777][T22223] dump_stack_lvl+0x100/0x190 [ 1194.936809][T22223] should_fail_ex.cold+0x5/0xa [ 1194.936831][T22223] should_failslab+0xc2/0x120 [ 1194.936860][T22223] __kmalloc_cache_noprof+0x7a/0x6f0 [ 1194.936881][T22223] ? snd_card_file_add+0x52/0x340 [ 1194.936906][T22223] ? __pfx_snd_pcm_capture_open+0x10/0x10 [ 1194.936932][T22223] snd_card_file_add+0x52/0x340 [ 1194.936955][T22223] ? __pfx_snd_pcm_capture_open+0x10/0x10 [ 1194.936981][T22223] snd_pcm_open+0xf1/0x710 [ 1194.937004][T22223] ? __mutex_unlock_slowpath+0x15c/0x790 [ 1194.937036][T22223] ? __pfx_snd_pcm_open+0x10/0x10 [ 1194.937070][T22223] ? __pfx_snd_pcm_capture_open+0x10/0x10 [ 1194.937095][T22223] snd_pcm_capture_open+0x89/0xe0 [ 1194.937121][T22223] snd_open+0x22d/0x4c0 [ 1194.937140][T22223] ? __pfx_snd_open+0x10/0x10 [ 1194.937159][T22223] chrdev_open+0x234/0x6a0 [ 1194.937187][T22223] ? __pfx_apparmor_file_open+0x10/0x10 [ 1194.937209][T22223] ? __pfx_chrdev_open+0x10/0x10 [ 1194.937237][T22223] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 1194.937269][T22223] do_dentry_open+0x6d8/0x1660 [ 1194.937295][T22223] ? __pfx_chrdev_open+0x10/0x10 [ 1194.937326][T22223] vfs_open+0x82/0x3f0 [ 1194.937348][T22223] path_openat+0x208c/0x31a0 [ 1194.937382][T22223] ? __pfx_path_openat+0x10/0x10 [ 1194.937416][T22223] do_file_open+0x20e/0x430 [ 1194.937445][T22223] ? __pfx_do_file_open+0x10/0x10 [ 1194.937486][T22223] ? alloc_fd+0x476/0x790 [ 1194.937513][T22223] ? do_getname+0x191/0x390 [ 1194.937533][T22223] do_sys_openat2+0x10d/0x1e0 [ 1194.937553][T22223] ? __pfx_do_sys_openat2+0x10/0x10 [ 1194.937576][T22223] ? __fget_files+0x21f/0x3d0 [ 1194.937608][T22223] __x64_sys_openat+0x12d/0x210 [ 1194.937629][T22223] ? __pfx___x64_sys_openat+0x10/0x10 [ 1194.937657][T22223] do_syscall_64+0x106/0xf80 [ 1194.937690][T22223] ? clear_bhb_loop+0x40/0x90 [ 1194.937712][T22223] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1194.937732][T22223] RIP: 0033:0x7fe42639bf79 [ 1194.937748][T22223] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1194.937767][T22223] RSP: 002b:00007fe427236028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1194.937786][T22223] RAX: ffffffffffffffda RBX: 00007fe426615fa0 RCX: 00007fe42639bf79 [ 1194.937814][T22223] RDX: 0000000000080042 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 1194.937826][T22223] RBP: 00007fe4264327e0 R08: 0000000000000000 R09: 0000000000000000 [ 1194.937838][T22223] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1194.937849][T22223] R13: 00007fe426616038 R14: 00007fe426615fa0 R15: 00007ffd01c15108 [ 1194.937872][T22223] [ 1197.963854][T22243] FAULT_INJECTION: forcing a failure. [ 1197.963854][T22243] name failslab, interval 1, probability 0, space 0, times 0 [ 1198.046054][T22243] CPU: 0 UID: 0 PID: 22243 Comm: syz.4.3471 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1198.046089][T22243] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1198.046096][T22243] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1198.046107][T22243] Call Trace: [ 1198.046114][T22243] [ 1198.046121][T22243] dump_stack_lvl+0x100/0x190 [ 1198.046153][T22243] should_fail_ex.cold+0x5/0xa [ 1198.046176][T22243] ? tomoyo_realpath_from_path+0xb6/0x690 [ 1198.046212][T22243] should_failslab+0xc2/0x120 [ 1198.046240][T22243] __kmalloc_noprof+0xe0/0x850 [ 1198.046269][T22243] tomoyo_realpath_from_path+0xb6/0x690 [ 1198.046302][T22243] tomoyo_check_open_permission+0x2af/0x3c0 [ 1198.046329][T22243] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 1198.046381][T22243] ? lock_acquire+0x1cf/0x380 [ 1198.046404][T22243] ? find_held_lock+0x2b/0x80 [ 1198.046437][T22243] tomoyo_file_open+0x6b/0x90 [ 1198.046458][T22243] security_file_open+0xb5/0x1e0 [ 1198.046485][T22243] do_dentry_open+0x5aa/0x1660 [ 1198.046518][T22243] vfs_open+0x82/0x3f0 [ 1198.046540][T22243] path_openat+0x208c/0x31a0 [ 1198.046574][T22243] ? __pfx_path_openat+0x10/0x10 [ 1198.046608][T22243] do_file_open+0x20e/0x430 [ 1198.046643][T22243] ? __pfx_do_file_open+0x10/0x10 [ 1198.046686][T22243] ? alloc_fd+0x476/0x790 [ 1198.046714][T22243] ? do_getname+0x191/0x390 [ 1198.046735][T22243] do_sys_openat2+0x10d/0x1e0 [ 1198.046755][T22243] ? __pfx_do_sys_openat2+0x10/0x10 [ 1198.046783][T22243] __x64_sys_openat+0x12d/0x210 [ 1198.046805][T22243] ? __pfx___x64_sys_openat+0x10/0x10 [ 1198.046834][T22243] do_syscall_64+0x106/0xf80 [ 1198.046860][T22243] ? clear_bhb_loop+0x40/0x90 [ 1198.046883][T22243] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1198.046902][T22243] RIP: 0033:0x7fe42639bf79 [ 1198.046918][T22243] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1198.046936][T22243] RSP: 002b:00007fe427215028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1198.046955][T22243] RAX: ffffffffffffffda RBX: 00007fe426616090 RCX: 00007fe42639bf79 [ 1198.046968][T22243] RDX: 0000000000101001 RSI: 0000200000000180 RDI: ffffffffffffff9c [ 1198.046980][T22243] RBP: 00007fe4264327e0 R08: 0000000000000000 R09: 0000000000000000 [ 1198.046992][T22243] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1198.047003][T22243] R13: 00007fe426616128 R14: 00007fe426616090 R15: 00007ffd01c15108 [ 1198.047027][T22243] [ 1198.047035][T22243] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1198.405096][T22251] ovs_: entered promiscuous mode [ 1198.784907][T22259] FAULT_INJECTION: forcing a failure. [ 1198.784907][T22259] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1198.927462][T22259] CPU: 0 UID: 0 PID: 22259 Comm: syz.8.3476 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1198.927496][T22259] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1198.927504][T22259] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1198.927514][T22259] Call Trace: [ 1198.927521][T22259] [ 1198.927529][T22259] dump_stack_lvl+0x100/0x190 [ 1198.927560][T22259] should_fail_ex.cold+0x5/0xa [ 1198.927586][T22259] _copy_from_user+0x2e/0xd0 [ 1198.927612][T22259] rxrpc_server_keyring+0x184/0x210 [ 1198.927644][T22259] rxrpc_setsockopt+0x5d9/0x8a0 [ 1198.927672][T22259] ? __pfx_rxrpc_setsockopt+0x10/0x10 [ 1198.927701][T22259] ? aa_sock_opt_perm+0xfe/0x1b0 [ 1198.927722][T22259] ? __pfx_rxrpc_setsockopt+0x10/0x10 [ 1198.927751][T22259] do_sock_setsockopt+0xf3/0x1d0 [ 1198.927772][T22259] __sys_setsockopt+0x119/0x190 [ 1198.927801][T22259] __x64_sys_setsockopt+0xbd/0x160 [ 1198.927825][T22259] ? do_syscall_64+0x95/0xf80 [ 1198.927851][T22259] ? lockdep_hardirqs_on+0x78/0x100 [ 1198.927877][T22259] do_syscall_64+0x106/0xf80 [ 1198.927902][T22259] ? clear_bhb_loop+0x40/0x90 [ 1198.927925][T22259] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1198.927949][T22259] RIP: 0033:0x7f518e99bf79 [ 1198.927965][T22259] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1198.927983][T22259] RSP: 002b:00007f518f932028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1198.928001][T22259] RAX: ffffffffffffffda RBX: 00007f518ec15fa0 RCX: 00007f518e99bf79 [ 1198.928013][T22259] RDX: 0000000000000002 RSI: 0000001000000110 RDI: 0000000000000003 [ 1198.928023][T22259] RBP: 00007f518f932090 R08: 00000000000000df R09: 0000000000000000 [ 1198.928034][T22259] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1198.928044][T22259] R13: 00007f518ec16038 R14: 00007f518ec15fa0 R15: 00007ffc807a7598 [ 1198.928067][T22259] [ 1204.443387][T22288] zswap: compressor not available [ 1206.828751][T22313] FAULT_INJECTION: forcing a failure. [ 1206.828751][T22313] name failslab, interval 1, probability 0, space 0, times 0 [ 1206.964195][T13812] block nbd3: Possible stuck request ffff888027e28000: control (read@0,4096B). Runtime 240 seconds [ 1207.198456][T22313] CPU: 0 UID: 0 PID: 22313 Comm: syz.3.3491 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1207.198490][T22313] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1207.198498][T22313] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1207.198509][T22313] Call Trace: [ 1207.198516][T22313] [ 1207.198525][T22313] dump_stack_lvl+0x100/0x190 [ 1207.198559][T22313] should_fail_ex.cold+0x5/0xa [ 1207.198581][T22313] ? apply_wqattrs_prepare+0xfe/0xbb0 [ 1207.198611][T22313] should_failslab+0xc2/0x120 [ 1207.198639][T22313] __kmalloc_noprof+0xe0/0x850 [ 1207.198668][T22313] apply_wqattrs_prepare+0xfe/0xbb0 [ 1207.198705][T22313] workqueue_apply_unbound_cpumask+0x18c/0x970 [ 1207.198741][T22313] ? __pfx_workqueue_apply_unbound_cpumask+0x10/0x10 [ 1207.198772][T22313] ? bitmap_parse+0x306/0x3f0 [ 1207.198804][T22313] cpumask_store+0x1ad/0x220 [ 1207.198832][T22313] ? __pfx_cpumask_store+0x10/0x10 [ 1207.198861][T22313] ? find_held_lock+0x2b/0x80 [ 1207.198888][T22313] ? sysfs_file_kobj+0xe4/0x290 [ 1207.198906][T22313] ? sysfs_file_kobj+0xe4/0x290 [ 1207.198925][T22313] ? __pfx_cpumask_store+0x10/0x10 [ 1207.198953][T22313] dev_attr_store+0x58/0x80 [ 1207.198977][T22313] ? __pfx_dev_attr_store+0x10/0x10 [ 1207.199001][T22313] sysfs_kf_write+0xf2/0x150 [ 1207.199021][T22313] kernfs_fop_write_iter+0x3e0/0x5f0 [ 1207.199048][T22313] ? __pfx_sysfs_kf_write+0x10/0x10 [ 1207.199069][T22313] vfs_write+0x6ac/0x1070 [ 1207.199095][T22313] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 1207.199125][T22313] ? __pfx_vfs_write+0x10/0x10 [ 1207.199166][T22313] ksys_write+0x12a/0x250 [ 1207.199192][T22313] ? __pfx_ksys_write+0x10/0x10 [ 1207.199223][T22313] do_syscall_64+0x106/0xf80 [ 1207.199249][T22313] ? clear_bhb_loop+0x40/0x90 [ 1207.199273][T22313] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1207.199292][T22313] RIP: 0033:0x7f3598b9bf79 [ 1207.199318][T22313] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1207.199336][T22313] RSP: 002b:00007f3596df6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1207.199356][T22313] RAX: ffffffffffffffda RBX: 00007f3598e15fa0 RCX: 00007f3598b9bf79 [ 1207.199368][T22313] RDX: 0000000000000005 RSI: 0000200000000180 RDI: 0000000000000008 [ 1207.199379][T22313] RBP: 00007f3598c327e0 R08: 0000000000000000 R09: 0000000000000000 [ 1207.199391][T22313] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1207.199401][T22313] R13: 00007f3598e16038 R14: 00007f3598e15fa0 R15: 00007fff5489a4b8 [ 1207.199433][T22313] [ 1211.025810][T22352] FAULT_INJECTION: forcing a failure. [ 1211.025810][T22352] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1211.112669][T22352] CPU: 0 UID: 0 PID: 22352 Comm: syz.8.3500 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1211.112706][T22352] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1211.112714][T22352] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1211.112726][T22352] Call Trace: [ 1211.112733][T22352] [ 1211.112741][T22352] dump_stack_lvl+0x100/0x190 [ 1211.112774][T22352] should_fail_ex.cold+0x5/0xa [ 1211.112792][T22352] ? prepare_alloc_pages+0x16d/0x5f0 [ 1211.112825][T22352] should_fail_alloc_page+0xeb/0x140 [ 1211.112855][T22352] prepare_alloc_pages+0x1f0/0x5f0 [ 1211.112889][T22352] __alloc_frozen_pages_noprof+0x19a/0x2ba0 [ 1211.112917][T22352] ? rcu_is_watching+0x12/0xc0 [ 1211.112945][T22352] ? trace_mm_page_alloc+0x17a/0x1d0 [ 1211.112975][T22352] ? __alloc_frozen_pages_noprof+0x2b1/0x2ba0 [ 1211.113003][T22352] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1211.113032][T22352] ? find_held_lock+0x2b/0x80 [ 1211.113059][T22352] ? is_bpf_text_address+0x8a/0x1a0 [ 1211.113084][T22352] ? is_bpf_text_address+0x8a/0x1a0 [ 1211.113111][T22352] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1211.113142][T22352] ? is_bpf_text_address+0x94/0x1a0 [ 1211.113167][T22352] ? kernel_text_address+0x8d/0x100 [ 1211.113194][T22352] ? __kernel_text_address+0xd/0x30 [ 1211.113219][T22352] ? unwind_get_return_address+0x59/0xa0 [ 1211.113244][T22352] alloc_pages_bulk_noprof+0x782/0x1490 [ 1211.113276][T22352] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 1211.113303][T22352] ? kasan_save_stack+0x30/0x50 [ 1211.113332][T22352] ? alloc_pages_noprof+0x233/0x390 [ 1211.113370][T22352] __kasan_populate_vmalloc+0xf0/0x210 [ 1211.113399][T22352] alloc_vmap_area+0x95d/0x2bd0 [ 1211.113436][T22352] ? __pfx_alloc_vmap_area+0x10/0x10 [ 1211.113470][T22352] __get_vm_area_node+0x1ca/0x330 [ 1211.113503][T22352] __vmalloc_node_range_noprof+0x213/0x1530 [ 1211.113524][T22352] ? n_tty_open+0x1a/0x170 [ 1211.113547][T22352] ? look_up_lock_class+0x64/0x120 [ 1211.113578][T22352] ? n_tty_open+0x1a/0x170 [ 1211.113605][T22352] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1211.113626][T22352] ? __ldsem_down_write_nested+0xfd/0x830 [ 1211.113647][T22352] ? __ldsem_down_write_nested+0x10e/0x830 [ 1211.113670][T22352] ? is_console_locked+0x9/0x20 [ 1211.113700][T22352] ? __pfx___ldsem_down_write_nested+0x10/0x10 [ 1211.113726][T22352] ? n_tty_open+0x1a/0x170 [ 1211.113746][T22352] __vmalloc_node_noprof+0xad/0xf0 [ 1211.113765][T22352] ? n_tty_open+0x1a/0x170 [ 1211.113787][T22352] ? __pfx_n_tty_open+0x10/0x10 [ 1211.113809][T22352] n_tty_open+0x1a/0x170 [ 1211.113830][T22352] tty_ldisc_open+0xa2/0x120 [ 1211.113858][T22352] tty_ldisc_setup+0x40/0xf0 [ 1211.113887][T22352] tty_init_dev.part.0+0x1b5/0x470 [ 1211.113910][T22352] tty_open+0xa63/0xfa0 [ 1211.113934][T22352] ? __pfx_tty_open+0x10/0x10 [ 1211.113954][T22352] ? chrdev_open+0x10b/0x6a0 [ 1211.113980][T22352] ? chrdev_open+0x10b/0x6a0 [ 1211.114009][T22352] ? __pfx_tty_open+0x10/0x10 [ 1211.114028][T22352] chrdev_open+0x234/0x6a0 [ 1211.114054][T22352] ? __pfx_apparmor_file_open+0x10/0x10 [ 1211.114077][T22352] ? __pfx_chrdev_open+0x10/0x10 [ 1211.114106][T22352] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 1211.114138][T22352] do_dentry_open+0x6d8/0x1660 [ 1211.114165][T22352] ? __pfx_chrdev_open+0x10/0x10 [ 1211.114198][T22352] vfs_open+0x82/0x3f0 [ 1211.114220][T22352] path_openat+0x208c/0x31a0 [ 1211.114256][T22352] ? __pfx_path_openat+0x10/0x10 [ 1211.114293][T22352] do_file_open+0x20e/0x430 [ 1211.114321][T22352] ? __pfx_do_file_open+0x10/0x10 [ 1211.114377][T22352] ? alloc_fd+0x476/0x790 [ 1211.114406][T22352] ? do_getname+0x191/0x390 [ 1211.114427][T22352] do_sys_openat2+0x10d/0x1e0 [ 1211.114449][T22352] ? __pfx_do_sys_openat2+0x10/0x10 [ 1211.114472][T22352] ? __pfx_idempotent_init_module+0x10/0x10 [ 1211.114502][T22352] __x64_sys_openat+0x12d/0x210 [ 1211.114525][T22352] ? __pfx___x64_sys_openat+0x10/0x10 [ 1211.114556][T22352] do_syscall_64+0x106/0xf80 [ 1211.114584][T22352] ? clear_bhb_loop+0x40/0x90 [ 1211.114606][T22352] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1211.114626][T22352] RIP: 0033:0x7f518e99bf79 [ 1211.114644][T22352] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1211.114662][T22352] RSP: 002b:00007f518f932028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1211.114682][T22352] RAX: ffffffffffffffda RBX: 00007f518ec15fa0 RCX: 00007f518e99bf79 [ 1211.114694][T22352] RDX: 0000000000000000 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 1211.114706][T22352] RBP: 00007f518ea327e0 R08: 0000000000000000 R09: 0000000000000000 [ 1211.114717][T22352] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1211.114729][T22352] R13: 00007f518ec16038 R14: 00007f518ec15fa0 R15: 00007ffc807a7598 [ 1211.114752][T22352] [ 1211.629234][T22352] syz.8.3500: vmalloc error: size 9128, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1211.645655][T22352] CPU: 0 UID: 0 PID: 22352 Comm: syz.8.3500 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1211.645689][T22352] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1211.645696][T22352] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1211.645707][T22352] Call Trace: [ 1211.645715][T22352] [ 1211.645723][T22352] dump_stack_lvl+0x100/0x190 [ 1211.645754][T22352] warn_alloc.cold+0x95/0x1c1 [ 1211.645786][T22352] ? __pfx_warn_alloc+0x10/0x10 [ 1211.645808][T22352] ? lockdep_hardirqs_on+0x78/0x100 [ 1211.645838][T22352] ? __get_vm_area_node+0x2c5/0x330 [ 1211.645871][T22352] ? __get_vm_area_node+0x208/0x330 [ 1211.645904][T22352] __vmalloc_node_range_noprof+0xbf4/0x1530 [ 1211.645926][T22352] ? look_up_lock_class+0x64/0x120 [ 1211.645956][T22352] ? n_tty_open+0x1a/0x170 [ 1211.645984][T22352] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1211.646005][T22352] ? __ldsem_down_write_nested+0xfd/0x830 [ 1211.646027][T22352] ? __ldsem_down_write_nested+0x10e/0x830 [ 1211.646049][T22352] ? is_console_locked+0x9/0x20 [ 1211.646074][T22352] ? __pfx___ldsem_down_write_nested+0x10/0x10 [ 1211.646099][T22352] ? n_tty_open+0x1a/0x170 [ 1211.646119][T22352] __vmalloc_node_noprof+0xad/0xf0 [ 1211.646138][T22352] ? n_tty_open+0x1a/0x170 [ 1211.646159][T22352] ? __pfx_n_tty_open+0x10/0x10 [ 1211.646180][T22352] n_tty_open+0x1a/0x170 [ 1211.646202][T22352] tty_ldisc_open+0xa2/0x120 [ 1211.646229][T22352] tty_ldisc_setup+0x40/0xf0 [ 1211.646257][T22352] tty_init_dev.part.0+0x1b5/0x470 [ 1211.646280][T22352] tty_open+0xa63/0xfa0 [ 1211.646303][T22352] ? __pfx_tty_open+0x10/0x10 [ 1211.646320][T22352] ? chrdev_open+0x10b/0x6a0 [ 1211.646354][T22352] ? chrdev_open+0x10b/0x6a0 [ 1211.646383][T22352] ? __pfx_tty_open+0x10/0x10 [ 1211.646402][T22352] chrdev_open+0x234/0x6a0 [ 1211.646427][T22352] ? __pfx_apparmor_file_open+0x10/0x10 [ 1211.646450][T22352] ? __pfx_chrdev_open+0x10/0x10 [ 1211.646479][T22352] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 1211.646511][T22352] do_dentry_open+0x6d8/0x1660 [ 1211.646537][T22352] ? __pfx_chrdev_open+0x10/0x10 [ 1211.646569][T22352] vfs_open+0x82/0x3f0 [ 1211.646590][T22352] path_openat+0x208c/0x31a0 [ 1211.646625][T22352] ? __pfx_path_openat+0x10/0x10 [ 1211.646659][T22352] do_file_open+0x20e/0x430 [ 1211.646693][T22352] ? __pfx_do_file_open+0x10/0x10 [ 1211.646736][T22352] ? alloc_fd+0x476/0x790 [ 1211.646764][T22352] ? do_getname+0x191/0x390 [ 1211.646785][T22352] do_sys_openat2+0x10d/0x1e0 [ 1211.646805][T22352] ? __pfx_do_sys_openat2+0x10/0x10 [ 1211.646826][T22352] ? __pfx_idempotent_init_module+0x10/0x10 [ 1211.646854][T22352] __x64_sys_openat+0x12d/0x210 [ 1211.646875][T22352] ? __pfx___x64_sys_openat+0x10/0x10 [ 1211.646905][T22352] do_syscall_64+0x106/0xf80 [ 1211.646931][T22352] ? clear_bhb_loop+0x40/0x90 [ 1211.646953][T22352] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1211.646973][T22352] RIP: 0033:0x7f518e99bf79 [ 1211.646989][T22352] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1211.647006][T22352] RSP: 002b:00007f518f932028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1211.647024][T22352] RAX: ffffffffffffffda RBX: 00007f518ec15fa0 RCX: 00007f518e99bf79 [ 1211.647036][T22352] RDX: 0000000000000000 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 1211.647047][T22352] RBP: 00007f518ea327e0 R08: 0000000000000000 R09: 0000000000000000 [ 1211.647058][T22352] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1211.647068][T22352] R13: 00007f518ec16038 R14: 00007f518ec15fa0 R15: 00007ffc807a7598 [ 1211.647092][T22352] [ 1211.647155][T22352] Mem-Info: [ 1212.045592][T22352] active_anon:3735 inactive_anon:50156 isolated_anon:24 [ 1212.045592][T22352] active_file:21366 inactive_file:2779 isolated_file:0 [ 1212.045592][T22352] unevictable:768 dirty:639 writeback:0 [ 1212.045592][T22352] slab_reclaimable:13011 slab_unreclaimable:109865 [ 1212.045592][T22352] mapped:48201 shmem:30000 pagetables:1594 [ 1212.045592][T22352] sec_pagetables:0 bounce:0 [ 1212.045592][T22352] kernel_misc_reclaimable:0 [ 1212.045592][T22352] free:1252550 free_pcp:15669 free_cma:0 [ 1212.097633][T22352] Node 0 active_anon:14940kB inactive_anon:200624kB active_file:85464kB inactive_file:10984kB unevictable:1536kB isolated(anon):96kB isolated(file):0kB mapped:192804kB dirty:2556kB writeback:0kB shmem:118464kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:43008kB kernel_stack:13344kB pagetables:6268kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1212.176518][T22352] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:132kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:108kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1212.282536][T22352] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1212.382582][T22352] lowmem_reserve[]: 0 2478 2479 2479 2479 [ 1212.388614][T22352] Node 0 DMA32 free:1056608kB boost:0kB min:34304kB low:42880kB high:51456kB reserved_highatomic:0KB free_highatomic:0KB active_anon:14940kB inactive_anon:198232kB active_file:85464kB inactive_file:10984kB unevictable:1536kB writepending:2556kB zspages:5680kB present:3129332kB managed:2537532kB mlocked:0kB bounce:0kB free_pcp:64900kB local_pcp:64900kB free_cma:0kB [ 1212.522596][T22352] lowmem_reserve[]: 0 0 1 1 1 [ 1212.532463][T22352] Node 0 Normal free:4kB boost:0kB min:12kB low:12kB high:12kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1064kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:12kB free_cma:0kB [ 1212.662589][T22352] lowmem_reserve[]: 0 0 0 0 0 [ 1212.684987][T22352] Node 1 Normal free:3938228kB boost:0kB min:55580kB low:69472kB high:83364kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:132kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1212.802557][T22352] lowmem_reserve[]: 0 0 0 0 0 [ 1212.807842][T22352] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1212.858139][T22352] Node 0 DMA32: 3284*4kB (UM) 2203*8kB (UM) 2770*16kB (UME) 274*32kB (UME) 1242*64kB (UM) 788*128kB (UM) 600*256kB (UM) 301*512kB (UM) 173*1024kB (UM) 3*2048kB (UE) 76*4096kB (UM) = 1066504kB [ 1212.924194][T22352] Node 0 Normal: 1*4kB (U) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 1212.974246][T22352] Node 1 Normal: 5*4kB (UME) 8*8kB (UME) 10*16kB (UME) 10*32kB (UME) 10*64kB (UME) 4*128kB (UME) 5*256kB (UME) 6*512kB (UME) 4*1024kB (UM) 4*2048kB (UME) 957*4096kB (M) = 3938228kB [ 1213.052572][T22352] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1213.082580][T22352] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 1213.112599][T22352] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1213.122364][T22352] Node 1 hugepages_total=3 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 1213.182545][T22352] 48982 total pagecache pages [ 1213.198982][T22352] 132 pages in swap cache [ 1213.209121][T22352] Free swap = 52048kB [ 1213.222528][T22352] Total swap = 124996kB [ 1213.242594][T22352] 2097051 pages RAM [ 1213.246780][T22352] 0 pages HighMem/MovableOnly [ 1213.251918][T22352] 430787 pages reserved [ 1213.290802][T22352] 0 pages cma reserved [ 1213.309581][T22352] tty tty16: ldisc open failed (-12), clearing slot 15 [ 1215.642992][T22369] vhci_hcd vhci_hcd.2: default hub control req: 0000 v0000 i0000 l0 [ 1216.582492][T22396] FAULT_INJECTION: forcing a failure. [ 1216.582492][T22396] name failslab, interval 1, probability 0, space 0, times 0 [ 1216.672935][T22396] CPU: 0 UID: 0 PID: 22396 Comm: syz.8.3508 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1216.672971][T22396] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1216.672979][T22396] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1216.672990][T22396] Call Trace: [ 1216.672997][T22396] [ 1216.673006][T22396] dump_stack_lvl+0x100/0x190 [ 1216.673038][T22396] should_fail_ex.cold+0x5/0xa [ 1216.673060][T22396] should_failslab+0xc2/0x120 [ 1216.673089][T22396] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1216.673113][T22396] ? __pmd_alloc+0xbf/0x9c0 [ 1216.673134][T22396] __pmd_alloc+0xbf/0x9c0 [ 1216.673154][T22396] move_page_tables+0x3224/0x4500 [ 1216.673179][T22396] ? __pfx_copy_vma+0x10/0x10 [ 1216.673210][T22396] ? __pfx_move_page_tables+0x10/0x10 [ 1216.673244][T22396] ? finish_task_switch.isra.0+0x200/0xb80 [ 1216.673275][T22396] copy_vma_and_data+0x25c/0x7c0 [ 1216.673300][T22396] ? __pfx_copy_vma_and_data+0x10/0x10 [ 1216.673333][T22396] ? __vma_start_write+0x17f/0x280 [ 1216.673354][T22396] ? __pfx___vma_start_write+0x10/0x10 [ 1216.673382][T22396] move_vma+0x51b/0x1890 [ 1216.673409][T22396] ? __pfx_move_vma+0x10/0x10 [ 1216.673434][T22396] ? mm_get_unmapped_area_vmflags+0xd7/0x130 [ 1216.673465][T22396] ? cap_mmap_addr+0x4b/0x120 [ 1216.673485][T22396] ? bpf_lsm_mmap_addr+0x9/0x30 [ 1216.673510][T22396] ? security_mmap_addr+0x71/0x1e0 [ 1216.673536][T22396] ? __get_unmapped_area+0x255/0x3e0 [ 1216.673567][T22396] ? vrm_set_new_addr+0x204/0x290 [ 1216.673591][T22396] mremap_to+0x1b7/0x450 [ 1216.673614][T22396] do_mremap+0xb76/0x2130 [ 1216.673646][T22396] ? __pfx_do_mremap+0x10/0x10 [ 1216.673673][T22396] ? ksys_write+0x190/0x250 [ 1216.673704][T22396] __do_sys_mremap+0x126/0x170 [ 1216.673727][T22396] ? __pfx___do_sys_mremap+0x10/0x10 [ 1216.673756][T22396] ? __x64_sys_futex+0x34f/0x4d0 [ 1216.673793][T22396] do_syscall_64+0x106/0xf80 [ 1216.673820][T22396] ? clear_bhb_loop+0x40/0x90 [ 1216.673843][T22396] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1216.673861][T22396] RIP: 0033:0x7f518e99bf79 [ 1216.673878][T22396] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1216.673897][T22396] RSP: 002b:00007f518f932028 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 1216.673916][T22396] RAX: ffffffffffffffda RBX: 00007f518ec15fa0 RCX: 00007f518e99bf79 [ 1216.673929][T22396] RDX: 0000000000000013 RSI: 0000000000000004 RDI: 0000200000000000 [ 1216.673941][T22396] RBP: 00007f518ea327e0 R08: 0000000100000000 R09: 0000000000000000 [ 1216.673953][T22396] R10: 0000000000000007 R11: 0000000000000246 R12: 0000000000000000 [ 1216.673966][T22396] R13: 00007f518ec16038 R14: 00007f518ec15fa0 R15: 00007ffc807a7598 [ 1216.673990][T22396] [ 1220.379117][T22435] [U] [ 1220.382299][T22435] [U] [ 1220.385092][T22435] [U] [ 1220.387785][T22435] [U] [ 1220.603060][T22435] [U] [ 1220.605979][T22435] [U] [ 1220.608856][T22435] [U] [ 1220.611953][T22435] [U] [ 1220.777186][T22435] [U] [ 1222.899890][T22469] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3521'. [ 1223.805579][T22478] FAULT_INJECTION: forcing a failure. [ 1223.805579][T22478] name failslab, interval 1, probability 0, space 0, times 0 [ 1224.042689][T22478] CPU: 0 UID: 0 PID: 22478 Comm: syz.3.3523 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1224.042725][T22478] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1224.042732][T22478] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1224.042744][T22478] Call Trace: [ 1224.042751][T22478] [ 1224.042759][T22478] dump_stack_lvl+0x100/0x190 [ 1224.042791][T22478] should_fail_ex.cold+0x5/0xa [ 1224.042812][T22478] ? tomoyo_encode2+0xfb/0x3c0 [ 1224.042839][T22478] should_failslab+0xc2/0x120 [ 1224.042867][T22478] __kmalloc_noprof+0xe0/0x850 [ 1224.042891][T22478] ? d_absolute_path+0x136/0x1b0 [ 1224.042915][T22478] tomoyo_encode2+0xfb/0x3c0 [ 1224.042945][T22478] tomoyo_encode+0x29/0x50 [ 1224.042971][T22478] tomoyo_realpath_from_path+0x18c/0x690 [ 1224.043004][T22478] tomoyo_check_open_permission+0x2af/0x3c0 [ 1224.043030][T22478] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 1224.043076][T22478] ? do_raw_spin_lock+0x128/0x260 [ 1224.043103][T22478] ? path_get+0x61/0x80 [ 1224.043132][T22478] tomoyo_file_open+0x6b/0x90 [ 1224.043153][T22478] security_file_open+0xb5/0x1e0 [ 1224.043180][T22478] do_dentry_open+0x5aa/0x1660 [ 1224.043208][T22478] ? security_inode_permission+0xbf/0x250 [ 1224.043244][T22478] vfs_open+0x82/0x3f0 [ 1224.043266][T22478] path_openat+0x208c/0x31a0 [ 1224.043300][T22478] ? __pfx_path_openat+0x10/0x10 [ 1224.043335][T22478] do_file_open+0x20e/0x430 [ 1224.043364][T22478] ? __pfx_do_file_open+0x10/0x10 [ 1224.043410][T22478] ? alloc_fd+0x476/0x790 [ 1224.043438][T22478] ? do_getname+0x191/0x390 [ 1224.043459][T22478] do_sys_openat2+0x10d/0x1e0 [ 1224.043480][T22478] ? __pfx_do_sys_openat2+0x10/0x10 [ 1224.043508][T22478] __x64_sys_openat+0x12d/0x210 [ 1224.043529][T22478] ? __pfx___x64_sys_openat+0x10/0x10 [ 1224.043558][T22478] do_syscall_64+0x106/0xf80 [ 1224.043584][T22478] ? clear_bhb_loop+0x40/0x90 [ 1224.043607][T22478] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1224.043626][T22478] RIP: 0033:0x7f3598b9bf79 [ 1224.043642][T22478] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1224.043661][T22478] RSP: 002b:00007f3596df6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1224.043679][T22478] RAX: ffffffffffffffda RBX: 00007f3598e15fa0 RCX: 00007f3598b9bf79 [ 1224.043691][T22478] RDX: 0000000000101000 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 1224.043703][T22478] RBP: 00007f3598c327e0 R08: 0000000000000000 R09: 0000000000000000 [ 1224.043713][T22478] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1224.043724][T22478] R13: 00007f3598e16038 R14: 00007f3598e15fa0 R15: 00007fff5489a4b8 [ 1224.043747][T22478] [ 1224.043767][T22478] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1224.353192][T22482] netlink: Conntrack attr has 16 unknown bytes [ 1230.421191][T22526] FAULT_INJECTION: forcing a failure. [ 1230.421191][T22526] name failslab, interval 1, probability 0, space 0, times 0 [ 1230.506285][T22526] CPU: 0 UID: 0 PID: 22526 Comm: syz.3.3533 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1230.506319][T22526] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1230.506327][T22526] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1230.506339][T22526] Call Trace: [ 1230.506346][T22526] [ 1230.506353][T22526] dump_stack_lvl+0x100/0x190 [ 1230.506384][T22526] should_fail_ex.cold+0x5/0xa [ 1230.506406][T22526] ? tomoyo_encode2+0xfb/0x3c0 [ 1230.506433][T22526] should_failslab+0xc2/0x120 [ 1230.506460][T22526] __kmalloc_noprof+0xe0/0x850 [ 1230.506483][T22526] ? d_absolute_path+0x136/0x1b0 [ 1230.506508][T22526] tomoyo_encode2+0xfb/0x3c0 [ 1230.506538][T22526] tomoyo_encode+0x29/0x50 [ 1230.506564][T22526] tomoyo_realpath_from_path+0x18c/0x690 [ 1230.506597][T22526] tomoyo_path_number_perm+0x23c/0x580 [ 1230.506620][T22526] ? tomoyo_path_number_perm+0x22e/0x580 [ 1230.506645][T22526] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1230.506670][T22526] ? find_held_lock+0x2b/0x80 [ 1230.506717][T22526] ? find_held_lock+0x2b/0x80 [ 1230.506743][T22526] ? current_check_access_path+0x281/0x460 [ 1230.506772][T22526] ? __pfx_current_check_access_path+0x10/0x10 [ 1230.506800][T22526] ? d_alloc_parallel+0x864/0x14e0 [ 1230.506826][T22526] tomoyo_path_mknod+0x164/0x190 [ 1230.506846][T22526] ? __pfx_tomoyo_path_mknod+0x10/0x10 [ 1230.506863][T22526] ? find_held_lock+0x2b/0x80 [ 1230.506892][T22526] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1230.506931][T22526] security_path_mknod+0x161/0x300 [ 1230.506962][T22526] may_o_create+0x30/0x3a0 [ 1230.506986][T22526] lookup_open.isra.0+0xa0d/0x11b0 [ 1230.507015][T22526] ? __pfx_lookup_open.isra.0+0x10/0x10 [ 1230.507042][T22526] ? __pfx___might_resched+0x10/0x10 [ 1230.507067][T22526] ? mnt_get_write_access+0x52/0x2f0 [ 1230.507092][T22526] ? __pfx_down_write+0x10/0x10 [ 1230.507108][T22526] ? mnt_get_write_access+0x1e9/0x2f0 [ 1230.507132][T22526] path_openat+0x2291/0x31a0 [ 1230.507166][T22526] ? __pfx_path_openat+0x10/0x10 [ 1230.507202][T22526] do_file_open+0x20e/0x430 [ 1230.507239][T22526] ? __pfx_do_file_open+0x10/0x10 [ 1230.507283][T22526] ? alloc_fd+0x476/0x790 [ 1230.507312][T22526] ? do_getname+0x191/0x390 [ 1230.507333][T22526] do_sys_openat2+0x10d/0x1e0 [ 1230.507355][T22526] ? __pfx_do_sys_openat2+0x10/0x10 [ 1230.507377][T22526] ? __fget_files+0x21f/0x3d0 [ 1230.507408][T22526] __x64_sys_openat+0x12d/0x210 [ 1230.507430][T22526] ? __pfx___x64_sys_openat+0x10/0x10 [ 1230.507461][T22526] do_syscall_64+0x106/0xf80 [ 1230.507487][T22526] ? clear_bhb_loop+0x40/0x90 [ 1230.507510][T22526] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1230.507529][T22526] RIP: 0033:0x7f3598b9bf79 [ 1230.507545][T22526] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1230.507563][T22526] RSP: 002b:00007f3596df6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1230.507582][T22526] RAX: ffffffffffffffda RBX: 00007f3598e15fa0 RCX: 00007f3598b9bf79 [ 1230.507602][T22526] RDX: 0000000000080042 RSI: 0000000000000000 RDI: ffffffffffffff9c [ 1230.507613][T22526] RBP: 00007f3598c327e0 R08: 0000000000000000 R09: 0000000000000000 [ 1230.507625][T22526] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1230.507637][T22526] R13: 00007f3598e16038 R14: 00007f3598e15fa0 R15: 00007fff5489a4b8 [ 1230.507661][T22526] [ 1230.507684][T22526] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1233.367069][T22542] snd_virmidi snd_virmidi.0: control 61678:131081:3:yª:2047 is already present [ 1235.336844][T22570] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff88807fe08000 pfn:0x7fe08 [ 1235.605873][T22570] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 1235.741534][T22570] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000 [ 1235.932848][T22570] raw: ffff88807fe08000 ffff88807e22e000 00000001ffffffff 0000000000000000 [ 1236.081603][T22570] page dumped because: unmovable page [ 1236.172366][T22570] page_owner tracks the page as allocated [ 1236.178529][T22570] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xdc0(GFP_KERNEL|__GFP_ZERO), pid 19419, tgid 19416 (syz.3.2825), ts 922361618770, free_ts 832926948204 [ 1236.558864][T22570] post_alloc_hook+0x153/0x170 [ 1236.586917][T22570] get_page_from_freelist+0x111d/0x3140 [ 1236.638978][T22570] __alloc_frozen_pages_noprof+0x27c/0x2ba0 [ 1236.713082][T22570] alloc_pages_mpol+0x1fb/0x550 [ 1236.718202][T22570] alloc_pages_noprof+0x131/0x390 [ 1236.767939][T22570] relay_open_buf.part.0+0x267/0xc10 [ 1236.782518][T22570] relay_open+0x7b9/0xa00 [ 1236.802728][T22570] blk_trace_setup_prepare+0x35c/0x6c0 [ 1236.828920][T22570] blk_trace_setup2+0x145/0x240 [ 1236.862526][T22570] blk_trace_ioctl+0x1db/0x320 [ 1236.882625][T22570] blkdev_ioctl+0x17c/0x6f0 [ 1236.899823][T22570] __x64_sys_ioctl+0x18e/0x210 [ 1236.924700][T22570] do_syscall_64+0x106/0xf80 [ 1236.992595][T22570] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1237.034011][T22570] page last free pid 5917 tgid 5917 stack trace: [ 1237.040681][T22570] __free_frozen_pages+0x7ca/0x10a0 [ 1237.052631][T13812] block nbd3: Possible stuck request ffff888027e28000: control (read@0,4096B). Runtime 270 seconds [ 1237.107069][T22570] pcpu_free_pages.isra.0+0x13c/0x1c0 [ 1237.137668][T22570] pcpu_balance_workfn+0x24e/0xdd0 [ 1237.158125][T22570] process_one_work+0x9d7/0x1920 [ 1237.182481][T22570] worker_thread+0x5da/0xe40 [ 1237.188114][T22570] kthread+0x370/0x450 [ 1237.242556][T22570] ret_from_fork+0x754/0xd80 [ 1237.257803][T22570] ret_from_fork_asm+0x1a/0x30 [ 1237.683788][T22591] FAULT_INJECTION: forcing a failure. [ 1237.683788][T22591] name failslab, interval 1, probability 0, space 0, times 0 [ 1237.794543][T22591] CPU: 0 UID: 0 PID: 22591 Comm: syz.3.3548 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1237.794581][T22591] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1237.794589][T22591] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1237.794601][T22591] Call Trace: [ 1237.794608][T22591] [ 1237.794616][T22591] dump_stack_lvl+0x100/0x190 [ 1237.794649][T22591] should_fail_ex.cold+0x5/0xa [ 1237.794672][T22591] should_failslab+0xc2/0x120 [ 1237.794703][T22591] __kmalloc_cache_noprof+0x7a/0x6f0 [ 1237.794725][T22591] ? snd_pcm_attach_substream+0x451/0xd60 [ 1237.794753][T22591] ? snd_ctl_get_preferred_subdevice+0x191/0x200 [ 1237.794779][T22591] ? snd_pcm_open+0x25f/0x710 [ 1237.794808][T22591] snd_pcm_attach_substream+0x451/0xd60 [ 1237.794843][T22591] snd_pcm_open_substream+0x90/0x1850 [ 1237.794872][T22591] ? __pfx_snd_pcm_open_substream+0x10/0x10 [ 1237.794901][T22591] ? rcu_is_watching+0x12/0xc0 [ 1237.794933][T22591] snd_pcm_open+0x2a3/0x710 [ 1237.794963][T22591] ? __pfx_snd_pcm_open+0x10/0x10 [ 1237.794992][T22591] ? __pfx_default_wake_function+0x10/0x10 [ 1237.795031][T22591] ? __pfx_snd_pcm_capture_open+0x10/0x10 [ 1237.795059][T22591] snd_pcm_capture_open+0x89/0xe0 [ 1237.795087][T22591] snd_open+0x22d/0x4c0 [ 1237.795108][T22591] ? __pfx_snd_open+0x10/0x10 [ 1237.795128][T22591] chrdev_open+0x234/0x6a0 [ 1237.795156][T22591] ? __pfx_apparmor_file_open+0x10/0x10 [ 1237.795181][T22591] ? __pfx_chrdev_open+0x10/0x10 [ 1237.795211][T22591] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 1237.795245][T22591] do_dentry_open+0x6d8/0x1660 [ 1237.795274][T22591] ? __pfx_chrdev_open+0x10/0x10 [ 1237.795308][T22591] vfs_open+0x82/0x3f0 [ 1237.795330][T22591] path_openat+0x208c/0x31a0 [ 1237.795367][T22591] ? __pfx_path_openat+0x10/0x10 [ 1237.795403][T22591] do_file_open+0x20e/0x430 [ 1237.795444][T22591] ? __pfx_do_file_open+0x10/0x10 [ 1237.795505][T22591] ? alloc_fd+0x476/0x790 [ 1237.795535][T22591] ? do_getname+0x191/0x390 [ 1237.795558][T22591] do_sys_openat2+0x10d/0x1e0 [ 1237.795585][T22591] ? __pfx_do_sys_openat2+0x10/0x10 [ 1237.795610][T22591] ? __fget_files+0x21f/0x3d0 [ 1237.795641][T22591] __x64_sys_openat+0x12d/0x210 [ 1237.795663][T22591] ? __pfx___x64_sys_openat+0x10/0x10 [ 1237.795695][T22591] do_syscall_64+0x106/0xf80 [ 1237.795723][T22591] ? clear_bhb_loop+0x40/0x90 [ 1237.795748][T22591] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1237.795770][T22591] RIP: 0033:0x7f3598b9bf79 [ 1237.795788][T22591] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1237.795809][T22591] RSP: 002b:00007f3596df6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1237.795830][T22591] RAX: ffffffffffffffda RBX: 00007f3598e15fa0 RCX: 00007f3598b9bf79 [ 1237.795843][T22591] RDX: 0000000000080042 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 1237.795855][T22591] RBP: 00007f3598c327e0 R08: 0000000000000000 R09: 0000000000000000 [ 1237.795867][T22591] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1237.795878][T22591] R13: 00007f3598e16038 R14: 00007f3598e15fa0 R15: 00007fff5489a4b8 [ 1237.795904][T22591] [ 1239.044742][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 1239.057729][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 1242.471654][T22633] netlink: 'syz.2.3559': attribute type 1 has an invalid length. [ 1242.501825][T22625] netlink: 326 bytes leftover after parsing attributes in process `syz.3.3556'. [ 1242.552964][T22633] nbd: error processing sock list [ 1242.634961][T22633] ======================================================= [ 1242.634961][T22633] WARNING: The mand mount option has been deprecated and [ 1242.634961][T22633] and is ignored by this kernel. Remove the mand [ 1242.634961][T22633] option from the mount to silence this warning. [ 1242.634961][T22633] ======================================================= [ 1243.710897][T22649] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3564'. [ 1244.595790][T22657] openvswitch: netlink: Geneve opt len 1 is not a multiple of 4. [ 1245.110199][T20716] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1245.122217][T20716] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1245.131687][T20716] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1245.141730][T20716] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1245.151770][T20716] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1246.393933][T22666] chnl_net:caif_netlink_parms(): no params data found [ 1246.913165][T22694] program syz.8.3575 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1247.203229][T20716] Bluetooth: hci5: command tx timeout [ 1247.418376][T22666] bridge0: port 1(bridge_slave_0) entered blocking state [ 1247.463870][T22666] bridge0: port 1(bridge_slave_0) entered disabled state [ 1247.517477][T22666] bridge_slave_0: entered allmulticast mode [ 1247.550553][T22666] bridge_slave_0: entered promiscuous mode [ 1247.579512][T22666] bridge0: port 2(bridge_slave_1) entered blocking state [ 1247.652171][T22666] bridge0: port 2(bridge_slave_1) entered disabled state [ 1247.696963][T22666] bridge_slave_1: entered allmulticast mode [ 1247.742639][T22666] bridge_slave_1: entered promiscuous mode [ 1247.850635][T22666] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1247.987742][T22666] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1248.163896][T22666] team0: Port device team_slave_0 added [ 1248.171993][T22666] team0: Port device team_slave_1 added [ 1248.349678][T22704] mkiss: ax0: crc mode is auto. [ 1248.575573][T22666] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1248.618077][T22666] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1248.782519][T22666] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1248.920027][T22666] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1248.968622][T22666] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1249.127247][T22666] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1249.284689][T20716] Bluetooth: hci5: command tx timeout [ 1249.401456][T22666] hsr_slave_0: entered promiscuous mode [ 1249.424479][T22666] hsr_slave_1: entered promiscuous mode [ 1249.470275][T22666] debugfs: 'hsr0' already exists in 'hsr' [ 1249.499716][T22666] Cannot create hsr debugfs directory [ 1250.839643][T22728] misc userio: Invalid payload size [ 1251.086904][T22722] FAULT_INJECTION: forcing a failure. [ 1251.086904][T22722] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1251.134455][T22666] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1251.242763][T22722] CPU: 0 UID: 0 PID: 22722 Comm: syz.3.3580 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1251.242799][T22722] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1251.242806][T22722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1251.242817][T22722] Call Trace: [ 1251.242824][T22722] [ 1251.242832][T22722] dump_stack_lvl+0x100/0x190 [ 1251.242864][T22722] should_fail_ex.cold+0x5/0xa [ 1251.242883][T22722] ? lock_acquire+0x1cf/0x380 [ 1251.242908][T22722] get_futex_key+0x1d2/0x1620 [ 1251.242932][T22722] ? __pfx_get_futex_key+0x10/0x10 [ 1251.242950][T22722] ? __lock_acquire+0x4a5/0x2630 [ 1251.242974][T22722] ? __local_bh_enable_ip+0x9e/0x120 [ 1251.242997][T22722] futex_wake+0xea/0x530 [ 1251.243023][T22722] ? do_raw_spin_lock+0x128/0x260 [ 1251.243049][T22722] ? __pfx_futex_wake+0x10/0x10 [ 1251.243072][T22722] ? tipc_sk_bind+0x19a/0x380 [ 1251.243092][T22722] ? tipc_sk_bind+0x19a/0x380 [ 1251.243112][T22722] ? __local_bh_enable_ip+0x9e/0x120 [ 1251.243131][T22722] ? lockdep_hardirqs_on+0x78/0x100 [ 1251.243158][T22722] ? tipc_sk_bind+0x19a/0x380 [ 1251.243178][T22722] do_futex+0x32b/0x350 [ 1251.243200][T22722] ? __pfx_do_futex+0x10/0x10 [ 1251.243221][T22722] ? __sys_bind+0x1c7/0x260 [ 1251.243246][T22722] __x64_sys_futex+0x34f/0x4d0 [ 1251.243280][T22722] ? __pfx___x64_sys_futex+0x10/0x10 [ 1251.243311][T22722] do_syscall_64+0x106/0xf80 [ 1251.243338][T22722] ? clear_bhb_loop+0x40/0x90 [ 1251.243361][T22722] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1251.243382][T22722] RIP: 0033:0x7f3598b9bf79 [ 1251.243399][T22722] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1251.243417][T22722] RSP: 002b:00007f3596db40e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1251.243437][T22722] RAX: ffffffffffffffda RBX: 00007f3598e16188 RCX: 00007f3598b9bf79 [ 1251.243449][T22722] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f3598e1618c [ 1251.243460][T22722] RBP: 00007f3598e16180 R08: 0000000000000000 R09: 0000000000000000 [ 1251.243471][T22722] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1251.243481][T22722] R13: 00007f3598e16218 R14: 00007fff5489a3d0 R15: 00007fff5489a4b8 [ 1251.243503][T22722] [ 1251.772542][T22731] device-mapper: ioctl: Unable to rename non-existent device,  to „ [ 1251.813039][T20716] Bluetooth: hci5: command tx timeout [ 1252.229901][T22666] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1252.581078][T22744] netlink: 342 bytes leftover after parsing attributes in process `syz.4.3584'. [ 1252.621304][T22666] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1252.920024][T22666] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1253.855995][T17212] Bluetooth: hci5: command tx timeout [ 1254.349233][T22757] FAULT_INJECTION: forcing a failure. [ 1254.349233][T22757] name failslab, interval 1, probability 0, space 0, times 0 [ 1254.380182][T22666] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1254.452690][T22757] CPU: 0 UID: 0 PID: 22757 Comm: syz.3.3586 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1254.452727][T22757] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1254.452735][T22757] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1254.452747][T22757] Call Trace: [ 1254.452754][T22757] [ 1254.452762][T22757] dump_stack_lvl+0x100/0x190 [ 1254.452795][T22757] should_fail_ex.cold+0x5/0xa [ 1254.452817][T22757] should_failslab+0xc2/0x120 [ 1254.452856][T22757] kmem_cache_alloc_node_noprof+0x81/0x6f0 [ 1254.452882][T22757] ? __alloc_skb+0x140/0x710 [ 1254.452912][T22757] __alloc_skb+0x140/0x710 [ 1254.452936][T22757] ? __alloc_skb+0x5b7/0x710 [ 1254.452960][T22757] ? __pfx___alloc_skb+0x10/0x10 [ 1254.452986][T22757] ? neigh_connected_output+0x3be/0x5d0 [ 1254.453016][T22757] alloc_skb_with_frags+0xe0/0x810 [ 1254.453058][T22757] sock_alloc_send_pskb+0x801/0x980 [ 1254.453083][T22757] ? find_held_lock+0x2b/0x80 [ 1254.453116][T22757] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 1254.453141][T22757] ? ip6_output+0x2eb/0xa60 [ 1254.453162][T22757] ? __pfx_ip6_output+0x10/0x10 [ 1254.453188][T22757] __ip6_append_data+0x2c4c/0x4de0 [ 1254.453213][T22757] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 1254.453243][T22757] ? find_held_lock+0x2b/0x80 [ 1254.453275][T22757] ? __pfx___ip6_append_data+0x10/0x10 [ 1254.453295][T22757] ? __pfx_ip6_mtu+0x10/0x10 [ 1254.453321][T22757] ? ip6_setup_cork+0x5be/0x14c0 [ 1254.453351][T22757] ip6_make_skb+0x2a3/0x3b0 [ 1254.453374][T22757] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 1254.453403][T22757] ? __pfx_ip6_make_skb+0x10/0x10 [ 1254.453429][T22757] ? sk_dst_check+0x1de/0x550 [ 1254.453456][T22757] ? udpv6_sendmsg+0x2499/0x2f60 [ 1254.453480][T22757] udpv6_sendmsg+0x2499/0x2f60 [ 1254.453508][T22757] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 1254.453543][T22757] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 1254.453572][T22757] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 1254.453610][T22757] ? __pfx___might_resched+0x10/0x10 [ 1254.453647][T22757] ? __import_iovec+0x1d2/0x640 [ 1254.453674][T22757] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 1254.453700][T22757] ? inet6_sendmsg+0x105/0x140 [ 1254.453725][T22757] inet6_sendmsg+0x105/0x140 [ 1254.453757][T22757] ____sys_sendmsg+0x704/0xc30 [ 1254.453779][T22757] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1254.453802][T22757] ? rcu_is_watching+0x12/0xc0 [ 1254.453828][T22757] ? ___sys_sendmsg+0x19d/0x1e0 [ 1254.453846][T22757] ? kfree+0x2ec/0x6b0 [ 1254.453869][T22757] ___sys_sendmsg+0x190/0x1e0 [ 1254.453891][T22757] ? __pfx____sys_sendmsg+0x10/0x10 [ 1254.453932][T22757] ? __pfx___might_resched+0x10/0x10 [ 1254.453961][T22757] __sys_sendmmsg+0x205/0x430 [ 1254.453991][T22757] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1254.454017][T22757] ? __local_bh_enable_ip+0x9e/0x120 [ 1254.454042][T22757] ? __pfx_do_futex+0x10/0x10 [ 1254.454074][T22757] ? xfd_validate_state+0x129/0x190 [ 1254.454105][T22757] __x64_sys_sendmmsg+0x9c/0x100 [ 1254.454131][T22757] ? lockdep_hardirqs_on+0x78/0x100 [ 1254.454158][T22757] do_syscall_64+0x106/0xf80 [ 1254.454185][T22757] ? clear_bhb_loop+0x40/0x90 [ 1254.454208][T22757] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1254.454227][T22757] RIP: 0033:0x7f3598b9bf79 [ 1254.454251][T22757] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1254.454270][T22757] RSP: 002b:00007f3596df6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1254.454290][T22757] RAX: ffffffffffffffda RBX: 00007f3598e15fa0 RCX: 00007f3598b9bf79 [ 1254.454303][T22757] RDX: 00000000000009a6 RSI: 0000000000000000 RDI: 0000000000000003 [ 1254.454315][T22757] RBP: 00007f3598c327e0 R08: 0000000000000000 R09: 0000000000000000 [ 1254.454326][T22757] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1254.454343][T22757] R13: 00007f3598e16038 R14: 00007f3598e15fa0 R15: 00007fff5489a4b8 [ 1254.454368][T22757] [ 1256.182656][T22666] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1256.224861][T22666] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1256.421130][T22666] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1256.748907][T22760] FAULT_INJECTION: forcing a failure. [ 1256.748907][T22760] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1256.897909][T22760] CPU: 0 UID: 8 PID: 22760 Comm: syz.4.3587 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1256.897944][T22760] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1256.897951][T22760] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1256.897963][T22760] Call Trace: [ 1256.897970][T22760] [ 1256.897978][T22760] dump_stack_lvl+0x100/0x190 [ 1256.898011][T22760] should_fail_ex.cold+0x5/0xa [ 1256.898108][T22760] _copy_from_user+0x2e/0xd0 [ 1256.898147][T22760] __sys_bpf+0x243/0x4b90 [ 1256.898171][T22760] ? __pfx___sys_bpf+0x10/0x10 [ 1256.898190][T22760] ? __pfx_futex_wait+0x10/0x10 [ 1256.898223][T22760] ? __call_rcu_common.constprop.0+0x3f0/0x9b0 [ 1256.898259][T22760] ? do_futex+0x192/0x350 [ 1256.898304][T22760] ? xfd_validate_state+0x129/0x190 [ 1256.898336][T22760] __x64_sys_bpf+0x7b/0xc0 [ 1256.898355][T22760] ? lockdep_hardirqs_on+0x78/0x100 [ 1256.898388][T22760] do_syscall_64+0x106/0xf80 [ 1256.898414][T22760] ? clear_bhb_loop+0x40/0x90 [ 1256.898437][T22760] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1256.898457][T22760] RIP: 0033:0x7fe42639bf79 [ 1256.898474][T22760] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1256.898492][T22760] RSP: 002b:00007fe427236028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1256.898511][T22760] RAX: ffffffffffffffda RBX: 00007fe426615fa0 RCX: 00007fe42639bf79 [ 1256.898523][T22760] RDX: 000000000000000a RSI: 0000200000000100 RDI: 0000000000000017 [ 1256.898534][T22760] RBP: 00007fe4264327e0 R08: 0000000000000000 R09: 0000000000000000 [ 1256.898546][T22760] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1256.898557][T22760] R13: 00007fe426616038 R14: 00007fe426615fa0 R15: 00007ffd01c15108 [ 1256.898579][T22760] [ 1257.289250][T22666] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1257.310585][T22666] 8021q: adding VLAN 0 to HW filter on device team0 [ 1257.471817][T12019] bridge0: port 1(bridge_slave_0) entered blocking state [ 1257.479465][T12019] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1257.544495][T12019] bridge0: port 2(bridge_slave_1) entered blocking state [ 1257.551782][T12019] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1257.708872][T22773] can: request_module (can-proto-5) failed. [ 1258.133765][T22786] openvswitch: netlink: Tunnel attr 242 out of range max 16 [ 1258.209600][T22786] FAULT_INJECTION: forcing a failure. [ 1258.209600][T22786] name failslab, interval 1, probability 0, space 0, times 0 [ 1258.260155][T22666] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1258.303679][T22786] CPU: 0 UID: 0 PID: 22786 Comm: syz.3.3589 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1258.303712][T22786] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1258.303725][T22786] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1258.303736][T22786] Call Trace: [ 1258.303744][T22786] [ 1258.303752][T22786] dump_stack_lvl+0x100/0x190 [ 1258.303785][T22786] should_fail_ex.cold+0x5/0xa [ 1258.303807][T22786] should_failslab+0xc2/0x120 [ 1258.303836][T22786] __kmalloc_cache_noprof+0x7a/0x6f0 [ 1258.303858][T22786] ? snd_pcm_attach_substream+0x451/0xd60 [ 1258.303885][T22786] ? snd_ctl_get_preferred_subdevice+0x191/0x200 [ 1258.303911][T22786] ? snd_pcm_open+0x25f/0x710 [ 1258.303939][T22786] snd_pcm_attach_substream+0x451/0xd60 [ 1258.303972][T22786] snd_pcm_open_substream+0x90/0x1850 [ 1258.303999][T22786] ? __pfx_snd_pcm_open_substream+0x10/0x10 [ 1258.304027][T22786] ? rcu_is_watching+0x12/0xc0 [ 1258.304071][T22786] snd_pcm_open+0x2a3/0x710 [ 1258.304100][T22786] ? __pfx_snd_pcm_open+0x10/0x10 [ 1258.304129][T22786] ? __pfx_default_wake_function+0x10/0x10 [ 1258.304166][T22786] ? __pfx_snd_pcm_capture_open+0x10/0x10 [ 1258.304193][T22786] snd_pcm_capture_open+0x89/0xe0 [ 1258.304220][T22786] snd_open+0x22d/0x4c0 [ 1258.304241][T22786] ? __pfx_snd_open+0x10/0x10 [ 1258.304261][T22786] chrdev_open+0x234/0x6a0 [ 1258.304288][T22786] ? __pfx_apparmor_file_open+0x10/0x10 [ 1258.304310][T22786] ? __pfx_chrdev_open+0x10/0x10 [ 1258.304338][T22786] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 1258.304370][T22786] do_dentry_open+0x6d8/0x1660 [ 1258.304405][T22786] ? __pfx_chrdev_open+0x10/0x10 [ 1258.304438][T22786] vfs_open+0x82/0x3f0 [ 1258.304460][T22786] path_openat+0x208c/0x31a0 [ 1258.304497][T22786] ? __pfx_path_openat+0x10/0x10 [ 1258.304532][T22786] do_file_open+0x20e/0x430 [ 1258.304561][T22786] ? __pfx_do_file_open+0x10/0x10 [ 1258.304605][T22786] ? alloc_fd+0x476/0x790 [ 1258.304634][T22786] ? do_getname+0x191/0x390 [ 1258.304655][T22786] do_sys_openat2+0x10d/0x1e0 [ 1258.304676][T22786] ? __pfx_do_sys_openat2+0x10/0x10 [ 1258.304698][T22786] ? __fget_files+0x21f/0x3d0 [ 1258.304728][T22786] __x64_sys_openat+0x12d/0x210 [ 1258.304749][T22786] ? __pfx___x64_sys_openat+0x10/0x10 [ 1258.304778][T22786] do_syscall_64+0x106/0xf80 [ 1258.304808][T22786] ? clear_bhb_loop+0x40/0x90 [ 1258.304831][T22786] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1258.304849][T22786] RIP: 0033:0x7f3598b9bf79 [ 1258.304865][T22786] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1258.304883][T22786] RSP: 002b:00007f3596df6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1258.304901][T22786] RAX: ffffffffffffffda RBX: 00007f3598e15fa0 RCX: 00007f3598b9bf79 [ 1258.304912][T22786] RDX: 0000000000080042 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 1258.304923][T22786] RBP: 00007f3598c327e0 R08: 0000000000000000 R09: 0000000000000000 [ 1258.304934][T22786] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1258.304945][T22786] R13: 00007f3598e16038 R14: 00007f3598e15fa0 R15: 00007fff5489a4b8 [ 1258.304968][T22786] [ 1258.648646][T22666] veth0_vlan: entered promiscuous mode [ 1258.660727][T22666] veth1_vlan: entered promiscuous mode [ 1258.683101][T22666] veth0_macvtap: entered promiscuous mode [ 1258.692221][T22666] veth1_macvtap: entered promiscuous mode [ 1258.707616][T22666] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1258.718183][T22666] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1259.389022][T18482] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1259.534113][ T9279] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1259.573251][ T9279] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1259.623976][ T9279] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1260.065714][ T6881] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1260.122603][ T6881] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1260.358321][ T6881] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1260.397223][ T6881] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1262.034409][T22831] HfR: entered promiscuous mode [ 1264.327588][ T29] audit: type=1326 audit(4294967428.330:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22853 comm="syz.3.3605" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3598b9bf79 code=0x0 [ 1266.373501][T22874] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1266.715609][T22881] FAULT_INJECTION: forcing a failure. [ 1266.715609][T22881] name failslab, interval 1, probability 0, space 0, times 0 [ 1266.809235][T22881] CPU: 0 UID: 0 PID: 22881 Comm: syz.2.3614 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1266.809268][T22881] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1266.809276][T22881] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1266.809286][T22881] Call Trace: [ 1266.809293][T22881] [ 1266.809300][T22881] dump_stack_lvl+0x100/0x190 [ 1266.809332][T22881] should_fail_ex.cold+0x5/0xa [ 1266.809352][T22881] ? tomoyo_realpath_from_path+0xb6/0x690 [ 1266.809380][T22881] should_failslab+0xc2/0x120 [ 1266.809408][T22881] __kmalloc_noprof+0xe0/0x850 [ 1266.809435][T22881] tomoyo_realpath_from_path+0xb6/0x690 [ 1266.809468][T22881] tomoyo_check_open_permission+0x2af/0x3c0 [ 1266.809494][T22881] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 1266.809539][T22881] ? do_raw_spin_lock+0x128/0x260 [ 1266.809565][T22881] ? path_get+0x61/0x80 [ 1266.809594][T22881] tomoyo_file_open+0x6b/0x90 [ 1266.809614][T22881] security_file_open+0xb5/0x1e0 [ 1266.809640][T22881] do_dentry_open+0x5aa/0x1660 [ 1266.809668][T22881] ? security_inode_permission+0xbf/0x250 [ 1266.809695][T22881] vfs_open+0x82/0x3f0 [ 1266.809717][T22881] path_openat+0x208c/0x31a0 [ 1266.809750][T22881] ? __pfx_path_openat+0x10/0x10 [ 1266.809784][T22881] do_file_open+0x20e/0x430 [ 1266.809812][T22881] ? __pfx_do_file_open+0x10/0x10 [ 1266.809853][T22881] ? alloc_fd+0x476/0x790 [ 1266.809880][T22881] ? do_getname+0x191/0x390 [ 1266.809901][T22881] do_sys_openat2+0x10d/0x1e0 [ 1266.809921][T22881] ? __pfx_do_sys_openat2+0x10/0x10 [ 1266.809957][T22881] __x64_sys_openat+0x12d/0x210 [ 1266.809979][T22881] ? __pfx___x64_sys_openat+0x10/0x10 [ 1266.810007][T22881] do_syscall_64+0x106/0xf80 [ 1266.810033][T22881] ? clear_bhb_loop+0x40/0x90 [ 1266.810056][T22881] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1266.810075][T22881] RIP: 0033:0x7f885419bf79 [ 1266.810090][T22881] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1266.810107][T22881] RSP: 002b:00007f8855091028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1266.810125][T22881] RAX: ffffffffffffffda RBX: 00007f8854415fa0 RCX: 00007f885419bf79 [ 1266.810137][T22881] RDX: 0000000000000080 RSI: 0000200000000640 RDI: ffffffffffffff9c [ 1266.810149][T22881] RBP: 00007f88542327e0 R08: 0000000000000000 R09: 0000000000000000 [ 1266.810159][T22881] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1266.810170][T22881] R13: 00007f8854416038 R14: 00007f8854415fa0 R15: 00007ffce577a0c8 [ 1266.810193][T22881] [ 1266.810200][T22881] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1267.367139][T18936] block nbd3: Possible stuck request ffff888027e28000: control (read@0,4096B). Runtime 300 seconds [ 1267.917909][T22888] zswap: compressor not available [ 1268.747687][T22916] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3619'. [ 1268.816325][T22917] FAULT_INJECTION: forcing a failure. [ 1268.816325][T22917] name failslab, interval 1, probability 0, space 0, times 0 [ 1268.888313][T22917] CPU: 0 UID: 0 PID: 22917 Comm: syz.2.3619 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1268.888348][T22917] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1268.888356][T22917] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1268.888367][T22917] Call Trace: [ 1268.888375][T22917] [ 1268.888391][T22917] dump_stack_lvl+0x100/0x190 [ 1268.888423][T22917] should_fail_ex.cold+0x5/0xa [ 1268.888446][T22917] should_failslab+0xc2/0x120 [ 1268.888475][T22917] __kmalloc_cache_noprof+0x7a/0x6f0 [ 1268.888498][T22917] ? pty_common_install+0x10e/0xb30 [ 1268.888531][T22917] pty_common_install+0x10e/0xb30 [ 1268.888563][T22917] ? __pfx_pty_unix98_install+0x10/0x10 [ 1268.888591][T22917] tty_init_dev.part.0+0x9e/0x470 [ 1268.888615][T22917] tty_init_dev+0x60/0x80 [ 1268.888635][T22917] ptmx_open+0x15e/0x3c0 [ 1268.888660][T22917] ? __pfx_ptmx_open+0x10/0x10 [ 1268.888690][T22917] chrdev_open+0x234/0x6a0 [ 1268.888717][T22917] ? __pfx_apparmor_file_open+0x10/0x10 [ 1268.888740][T22917] ? __pfx_chrdev_open+0x10/0x10 [ 1268.888789][T22917] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 1268.888823][T22917] do_dentry_open+0x6d8/0x1660 [ 1268.888849][T22917] ? __pfx_chrdev_open+0x10/0x10 [ 1268.888881][T22917] vfs_open+0x82/0x3f0 [ 1268.888903][T22917] path_openat+0x208c/0x31a0 [ 1268.888938][T22917] ? __pfx_path_openat+0x10/0x10 [ 1268.888981][T22917] do_file_open+0x20e/0x430 [ 1268.889010][T22917] ? __pfx_do_file_open+0x10/0x10 [ 1268.889054][T22917] ? alloc_fd+0x476/0x790 [ 1268.889083][T22917] ? do_getname+0x191/0x390 [ 1268.889104][T22917] do_sys_openat2+0x10d/0x1e0 [ 1268.889124][T22917] ? __pfx_do_sys_openat2+0x10/0x10 [ 1268.889153][T22917] __x64_sys_openat+0x12d/0x210 [ 1268.889174][T22917] ? __pfx___x64_sys_openat+0x10/0x10 [ 1268.889205][T22917] do_syscall_64+0x106/0xf80 [ 1268.889232][T22917] ? clear_bhb_loop+0x40/0x90 [ 1268.889254][T22917] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1268.889274][T22917] RIP: 0033:0x7f885419bf79 [ 1268.889290][T22917] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1268.889308][T22917] RSP: 002b:00007f885504f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1268.889327][T22917] RAX: ffffffffffffffda RBX: 00007f8854416180 RCX: 00007f885419bf79 [ 1268.889340][T22917] RDX: 0000000000000000 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 1268.889352][T22917] RBP: 00007f88542327e0 R08: 0000000000000000 R09: 0000000000000000 [ 1268.889363][T22917] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1268.889375][T22917] R13: 00007f8854416218 R14: 00007f8854416180 R15: 00007ffce577a0c8 [ 1268.889400][T22917] [ 1271.087169][T13429] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 1271.142633][T13429] CPU: 0 UID: 0 PID: 13429 Comm: syz-executor Tainted: G U L syzkaller #0 PREEMPT(full) [ 1271.142666][T13429] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1271.142673][T13429] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1271.142684][T13429] Call Trace: [ 1271.142691][T13429] [ 1271.142698][T13429] dump_stack_lvl+0x100/0x190 [ 1271.142730][T13429] dump_header+0xfb/0x606 [ 1271.142751][T13429] oom_kill_process.cold+0xd/0x330 [ 1271.142773][T13429] out_of_memory+0x340/0x14f0 [ 1271.142801][T13429] ? __pfx_out_of_memory+0x10/0x10 [ 1271.142830][T13429] mem_cgroup_out_of_memory+0xc6/0x130 [ 1271.142852][T13429] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 1271.142872][T13429] ? find_held_lock+0x2b/0x80 [ 1271.142903][T13429] ? do_raw_spin_unlock+0x145/0x1e0 [ 1271.142929][T13429] ? _raw_spin_unlock+0x28/0x50 [ 1271.142954][T13429] try_charge_memcg+0x652/0xc90 [ 1271.142992][T13429] ? __pfx_try_charge_memcg+0x10/0x10 [ 1271.143023][T13429] ? find_held_lock+0x2b/0x80 [ 1271.143049][T13429] ? rcu_read_unlock+0x17/0x60 [ 1271.143076][T13429] ? rcu_read_unlock+0x17/0x60 [ 1271.143105][T13429] charge_memcg+0xa6/0x280 [ 1271.143132][T13429] mem_cgroup_swapin_charge_folio+0xeb/0x470 [ 1271.143154][T13429] __swap_cache_prepare_and_add+0x528/0x9e0 [ 1271.143185][T13429] ? __pfx___swap_cache_prepare_and_add+0x10/0x10 [ 1271.143207][T13429] ? __pfx_swap_entry_swapped+0x10/0x10 [ 1271.143239][T13429] swap_cache_alloc_folio+0x1cb/0x300 [ 1271.143263][T13429] ? __pfx_swap_cache_alloc_folio+0x10/0x10 [ 1271.143292][T13429] swap_cluster_readahead+0x53b/0x770 [ 1271.143320][T13429] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 1271.143345][T13429] ? update_cfs_rq_load_avg+0x51/0x550 [ 1271.143370][T13429] ? __lock_acquire+0x4a5/0x2630 [ 1271.143393][T13429] ? get_vma_policy+0x23f/0x3b0 [ 1271.143423][T13429] swapin_readahead+0x160/0x12c0 [ 1271.143452][T13429] ? __pfx_swapin_readahead+0x10/0x10 [ 1271.143473][T13429] ? find_held_lock+0x2b/0x80 [ 1271.143498][T13429] ? swap_table_get+0x103/0x2c0 [ 1271.143517][T13429] ? swap_table_get+0x103/0x2c0 [ 1271.143541][T13429] ? swap_table_get+0x10d/0x2c0 [ 1271.143561][T13429] ? swap_cache_get_folio+0x1ae/0x600 [ 1271.143583][T13429] ? __pfx_swap_cache_get_folio+0x10/0x10 [ 1271.143603][T13429] ? __pfx_get_swap_device+0x10/0x10 [ 1271.143633][T13429] ? do_swap_page+0xb2e/0x68e0 [ 1271.143652][T13429] do_swap_page+0xb2e/0x68e0 [ 1271.143684][T13429] ? __pfx_do_swap_page+0x10/0x10 [ 1271.143705][T13429] ? __free_object+0x2a8/0x400 [ 1271.143724][T13429] ? lockdep_hardirqs_on+0x78/0x100 [ 1271.143752][T13429] ? rcu_is_watching+0x12/0xc0 [ 1271.143778][T13429] ? __pte_offset_map+0x179/0x310 [ 1271.143807][T13429] __handle_mm_fault+0x18c1/0x2b60 [ 1271.143832][T13429] ? reacquire_held_locks+0xce/0x1e0 [ 1271.143854][T13429] ? __pfx___handle_mm_fault+0x10/0x10 [ 1271.143878][T13429] ? lock_vma_under_rcu+0x17c/0x590 [ 1271.143912][T13429] handle_mm_fault+0x36d/0xa20 [ 1271.143937][T13429] do_user_addr_fault+0x5a3/0x12f0 [ 1271.143972][T13429] exc_page_fault+0x6f/0xd0 [ 1271.144066][T13429] asm_exc_page_fault+0x26/0x30 [ 1271.144083][T13429] RIP: 0033:0x7fe42635c84e [ 1271.144100][T13429] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1271.144117][T13429] RSP: 002b:00007ffd01c153e8 EFLAGS: 00010246 [ 1271.144132][T13429] RAX: 0000000000000000 RBX: 00005555927dd500 RCX: 00007fe42635c84e [ 1271.144144][T13429] RDX: 00007ffd01c15440 RSI: 0000000000000000 RDI: 0000000000000000 [ 1271.144155][T13429] RBP: 00007ffd01c154ac R08: 0000000000000000 R09: 0000000000000000 [ 1271.144165][T13429] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000001388 [ 1271.144176][T13429] R13: 00000000000927c0 R14: 000000000013612f R15: 00007ffd01c15500 [ 1271.144199][T13429] [ 1271.144206][T13429] memory: usage 3072kB, limit 3072kB, failcnt 149641 [ 1272.522781][T13429] memory+swap: usage 2828kB, limit 9007199254740988kB, failcnt 0 [ 1272.658987][T13429] kmem: usage 2408kB, limit 9007199254740988kB, failcnt 0 [ 1272.714303][T13429] Memory cgroup stats for /syz4: [ 1272.714424][T13429] cache 0 [ 1272.773931][T13429] rss 0 [ 1272.815879][T13429] rss_huge 0 [ 1272.819129][T13429] shmem 0 [ 1272.841876][T13429] mapped_file 0 [ 1272.868381][T13429] dirty 0 [ 1272.909223][T13429] writeback 0 [ 1272.935018][T13429] workingset_refault_anon 27180 [ 1272.940212][T13429] workingset_refault_file 20900 [ 1273.013815][T13429] swap 282624 [ 1273.017232][T13429] swapcached 640024576 [ 1273.063616][T13429] pgpgin 365968 [ 1273.079673][T13429] pgpgout 386438 [ 1273.110300][T13429] pgfault 254342 [ 1273.152578][T13429] pgmajfault 8934 [ 1273.156259][T13429] inactive_anon 0 [ 1273.159898][T13429] active_anon 139264 [ 1273.227100][T13429] inactive_file 0 [ 1273.231001][T13429] active_file 0 [ 1273.304902][T13429] unevictable 0 [ 1273.308609][T13429] hierarchical_memory_limit 3145728 [ 1273.383356][T13429] hierarchical_memsw_limit 9223372036854771712 [ 1273.389647][T13429] total_cache 0 [ 1273.437978][T13429] total_rss 0 [ 1273.441491][T13429] total_rss_huge 0 [ 1273.482507][T13429] total_shmem 0 [ 1273.510063][T13429] total_mapped_file 0 [ 1273.543588][T13429] total_dirty 0 [ 1273.566541][T13429] total_writeback 0 [ 1273.590464][T13429] total_workingset_refault_anon 27180 [ 1273.636678][T13429] total_workingset_refault_file 20900 [ 1273.642102][T13429] total_swap 282624 [ 1273.689404][T13429] total_swapcached 640024576 [ 1273.714610][T13429] total_pgpgin 365968 [ 1273.743184][T13429] total_pgpgout 386438 [ 1273.767677][T13429] total_pgfault 254342 [ 1273.794938][T13429] total_pgmajfault 8934 [ 1273.799140][T13429] total_inactive_anon 0 [ 1273.858060][T13429] total_active_anon 139264 [ 1273.872684][T13429] total_inactive_file 0 [ 1273.900221][T13429] total_active_file 0 [ 1273.935063][T13429] total_unevictable 0 [ 1273.939173][T13429] anon_cost 11 [ 1273.972916][T13429] file_cost 0 [ 1273.976704][T13429] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.3621,pid=22921,uid=0 [ 1274.083867][T13429] Memory cgroup out of memory: Killed process 22921 (syz.4.3621) total-vm:99700kB, anon-rss:3284kB, file-rss:21648kB, shmem-rss:8kB, UID:0 pgtables:136kB oom_score_adj:1000 [ 1275.927898][T22982] netlink: 146 bytes leftover after parsing attributes in process `syz.2.3634'. [ 1277.347069][ T29] audit: type=1326 audit(4294967441.350:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23012 comm="syz.4.3639" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe42639bf79 code=0x0 [ 1277.392616][T22993] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.3.3636: iget: checksum invalid [ 1277.463765][T22993] faux_driver regulatory: loading /lib/firmware/updates/syzkaller/regulatory.db failed with error -74 [ 1277.503919][T23017] ptrace attach of "./syz-executor exec"[23019] was attempted by "./syz-executor exec"[23017] [ 1277.517534][T23020] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3640'. [ 1277.617968][T22993] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.3.3636: iget: checksum invalid [ 1277.731765][T22993] faux_driver regulatory: loading /lib/firmware/updates/regulatory.db failed with error -74 [ 1277.858122][T22993] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.3.3636: iget: checksum invalid [ 1278.058740][T22993] faux_driver regulatory: loading /lib/firmware/syzkaller/regulatory.db failed with error -74 [ 1278.136544][T22993] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.3.3636: iget: checksum invalid [ 1278.317672][T22993] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -74 [ 1278.347251][T23035] zswap: compressor not available [ 1278.428708][T22993] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -74 [ 1278.480711][ T29] audit: type=1800 audit(4294967442.480:41): pid=23032 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.3643" name="lu_gp_id" dev="configfs" ino=108187 res=0 errno=0 [ 1278.524668][T22993] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 1278.796926][ T29] audit: type=1800 audit(4294967442.800:42): pid=23048 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3646" name=05 dev="tmpfs" ino=96 res=0 errno=0 [ 1278.937443][T23054] FAULT_INJECTION: forcing a failure. [ 1278.937443][T23054] name failslab, interval 1, probability 0, space 0, times 0 [ 1279.065338][T23054] CPU: 0 UID: 0 PID: 23054 Comm: syz.8.3647 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1279.065373][T23054] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1279.065381][T23054] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1279.065392][T23054] Call Trace: [ 1279.065399][T23054] [ 1279.065407][T23054] dump_stack_lvl+0x100/0x190 [ 1279.065439][T23054] should_fail_ex.cold+0x5/0xa [ 1279.065461][T23054] should_failslab+0xc2/0x120 [ 1279.065490][T23054] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 1279.065515][T23054] ? alloc_inode+0x183/0x250 [ 1279.065535][T23054] ? find_inode_fast+0x1fa/0x910 [ 1279.065558][T23054] alloc_inode+0x183/0x250 [ 1279.065578][T23054] iget_locked+0x1d9/0x6d0 [ 1279.065599][T23054] ? __pfx_iget_locked+0x10/0x10 [ 1279.065618][T23054] ? kernfs_root+0xee/0x2a0 [ 1279.065639][T23054] ? kernfs_root+0xee/0x2a0 [ 1279.065664][T23054] kernfs_get_inode+0x46/0x470 [ 1279.065686][T23054] kernfs_iop_lookup+0x1a7/0x2d0 [ 1279.065711][T23054] __lookup_slow+0x251/0x460 [ 1279.065732][T23054] ? __pfx___lookup_slow+0x10/0x10 [ 1279.065770][T23054] ? __d_lookup+0x266/0x4a0 [ 1279.065798][T23054] lookup_slow+0x50/0x70 [ 1279.065817][T23054] link_path_walk+0x1377/0x1cc0 [ 1279.065849][T23054] path_openat+0x1be/0x31a0 [ 1279.065873][T23054] ? kasan_save_stack+0x3f/0x50 [ 1279.065896][T23054] ? kasan_save_stack+0x30/0x50 [ 1279.065918][T23054] ? kasan_save_track+0x14/0x30 [ 1279.066029][T23054] ? kmem_cache_alloc_noprof+0x241/0x6e0 [ 1279.066061][T23054] ? __pfx_path_openat+0x10/0x10 [ 1279.066096][T23054] do_file_open+0x20e/0x430 [ 1279.066127][T23054] ? __pfx_do_file_open+0x10/0x10 [ 1279.066170][T23054] ? alloc_fd+0x476/0x790 [ 1279.066206][T23054] ? do_getname+0x191/0x390 [ 1279.066227][T23054] do_sys_openat2+0x10d/0x1e0 [ 1279.066248][T23054] ? __pfx_do_sys_openat2+0x10/0x10 [ 1279.066277][T23054] __x64_sys_openat+0x12d/0x210 [ 1279.066298][T23054] ? __pfx___x64_sys_openat+0x10/0x10 [ 1279.066329][T23054] do_syscall_64+0x106/0xf80 [ 1279.066357][T23054] ? clear_bhb_loop+0x40/0x90 [ 1279.066379][T23054] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1279.066399][T23054] RIP: 0033:0x7f518e99bf79 [ 1279.066417][T23054] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1279.066435][T23054] RSP: 002b:00007f518f932028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1279.066454][T23054] RAX: ffffffffffffffda RBX: 00007f518ec15fa0 RCX: 00007f518e99bf79 [ 1279.066466][T23054] RDX: 0000000000183841 RSI: 0000200000000280 RDI: ffffffffffffff9c [ 1279.066478][T23054] RBP: 00007f518ea327e0 R08: 0000000000000000 R09: 0000000000000000 [ 1279.066490][T23054] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1279.066502][T23054] R13: 00007f518ec16038 R14: 00007f518ec15fa0 R15: 00007ffc807a7598 [ 1279.066526][T23054] [ 1281.499861][T23080] hub 1-0:1.0: USB hub found [ 1281.592785][T23080] hub 1-0:1.0: 1 port detected [ 1283.097693][T23114] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3658'. [ 1283.250102][T23114] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3658'. [ 1284.999759][T23138] netlink: 'syz.8.3662': attribute type 1 has an invalid length. [ 1285.168193][T23143] FAULT_INJECTION: forcing a failure. [ 1285.168193][T23143] name failslab, interval 1, probability 0, space 0, times 0 [ 1285.246260][T23143] CPU: 0 UID: 0 PID: 23143 Comm: syz.2.3664 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1285.246295][T23143] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1285.246303][T23143] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1285.246313][T23143] Call Trace: [ 1285.246321][T23143] [ 1285.246329][T23143] dump_stack_lvl+0x100/0x190 [ 1285.246361][T23143] should_fail_ex.cold+0x5/0xa [ 1285.246383][T23143] ? sk_prot_alloc+0x10b/0x2a0 [ 1285.246401][T23143] should_failslab+0xc2/0x120 [ 1285.246428][T23143] __kmalloc_noprof+0xe0/0x850 [ 1285.246457][T23143] sk_prot_alloc+0x10b/0x2a0 [ 1285.246478][T23143] sk_alloc+0x36/0xe80 [ 1285.246503][T23143] pfkey_create+0x105/0x600 [ 1285.246533][T23143] __sock_create+0x339/0x860 [ 1285.246558][T23143] __sys_socket+0x14d/0x260 [ 1285.246580][T23143] ? __pfx___sys_socket+0x10/0x10 [ 1285.246607][T23143] __x64_sys_socket+0x72/0xb0 [ 1285.246627][T23143] ? lockdep_hardirqs_on+0x78/0x100 [ 1285.246655][T23143] do_syscall_64+0x106/0xf80 [ 1285.246681][T23143] ? clear_bhb_loop+0x40/0x90 [ 1285.246704][T23143] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1285.246723][T23143] RIP: 0033:0x7f885419bf79 [ 1285.246739][T23143] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1285.246756][T23143] RSP: 002b:00007f8855070028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1285.246783][T23143] RAX: ffffffffffffffda RBX: 00007f8854416090 RCX: 00007f885419bf79 [ 1285.246795][T23143] RDX: 0000000000000002 RSI: 0000000000000003 RDI: 000000000000000f [ 1285.246806][T23143] RBP: 00007f88542327e0 R08: 0000000000000000 R09: 0000000000000000 [ 1285.246817][T23143] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1285.246827][T23143] R13: 00007f8854416128 R14: 00007f8854416090 R15: 00007ffce577a0c8 [ 1285.246859][T23143] [ 1285.913719][T23148] FAULT_INJECTION: forcing a failure. [ 1285.913719][T23148] name failslab, interval 1, probability 0, space 0, times 0 [ 1285.987424][T23148] CPU: 0 UID: 0 PID: 23148 Comm: syz.3.3667 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1285.987460][T23148] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1285.987467][T23148] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1285.987479][T23148] Call Trace: [ 1285.987486][T23148] [ 1285.987494][T23148] dump_stack_lvl+0x100/0x190 [ 1285.987534][T23148] should_fail_ex.cold+0x5/0xa [ 1285.987556][T23148] should_failslab+0xc2/0x120 [ 1285.987585][T23148] kmem_cache_alloc_node_noprof+0x81/0x6f0 [ 1285.987611][T23148] ? __alloc_skb+0x140/0x710 [ 1285.987642][T23148] __alloc_skb+0x140/0x710 [ 1285.987666][T23148] ? __alloc_skb+0x5b7/0x710 [ 1285.987690][T23148] ? __pfx___alloc_skb+0x10/0x10 [ 1285.987720][T23148] netlink_ack+0x117/0xb80 [ 1285.987757][T23148] netlink_rcv_skb+0x333/0x420 [ 1285.987786][T23148] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1285.987816][T23148] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1285.987984][T23148] ? netlink_deliver_tap+0x1ae/0xcc0 [ 1285.988015][T23148] netlink_unicast+0x5aa/0x870 [ 1285.988048][T23148] ? __pfx_netlink_unicast+0x10/0x10 [ 1285.988085][T23148] netlink_sendmsg+0x8b0/0xda0 [ 1285.988117][T23148] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1285.988149][T23148] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 1285.988174][T23148] __sys_sendto+0x4aa/0x520 [ 1285.988200][T23148] ? __pfx___sys_sendto+0x10/0x10 [ 1285.988240][T23148] ? xfd_validate_state+0x129/0x190 [ 1285.988270][T23148] __x64_sys_sendto+0xe0/0x1c0 [ 1285.988293][T23148] ? do_syscall_64+0x95/0xf80 [ 1285.988320][T23148] ? lockdep_hardirqs_on+0x78/0x100 [ 1285.988347][T23148] do_syscall_64+0x106/0xf80 [ 1285.988372][T23148] ? clear_bhb_loop+0x40/0x90 [ 1285.988395][T23148] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1285.988415][T23148] RIP: 0033:0x7f3598b5c84e [ 1285.988431][T23148] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1285.988450][T23148] RSP: 002b:00007f3596df4e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1285.988469][T23148] RAX: ffffffffffffffda RBX: 00007f3596df66c0 RCX: 00007f3598b5c84e [ 1285.988481][T23148] RDX: 0000000000000020 RSI: 00007f3596df5000 RDI: 0000000000000006 [ 1285.988492][T23148] RBP: 0000000000000000 R08: 00007f3596df4f04 R09: 000000000000000c [ 1285.988503][T23148] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 1285.988514][T23148] R13: 00007f3596df4f58 R14: 00007f3596df5000 R15: 0000000000000000 [ 1285.988536][T23148] [ 1289.528850][ T30] INFO: task syz.7.3322:21570 blocked for more than 143 seconds. [ 1289.537929][ T30] Tainted: G U L syzkaller #0 [ 1289.560476][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1289.602457][ T30] task:syz.7.3322 state:D stack:26792 pid:21570 tgid:21567 ppid:18081 task_flags:0x480140 flags:0x00080006 [ 1289.677811][ T30] Call Trace: [ 1289.699700][ T30] [ 1289.718137][ T30] __schedule+0xfee/0x60e0 [ 1289.749925][ T30] ? __lock_acquire+0x4a5/0x2630 [ 1289.792534][ T30] ? __pfx___schedule+0x10/0x10 [ 1289.821609][ T30] ? find_held_lock+0x2b/0x80 [ 1289.854709][ T30] ? schedule+0x2bf/0x390 [ 1289.879365][ T30] schedule+0xdd/0x390 [ 1289.922476][ T30] blk_mq_freeze_queue_wait+0x14a/0x1b0 [ 1289.942480][ T30] ? __pfx_blk_mq_freeze_queue_wait+0x10/0x10 [ 1289.984765][ T30] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1290.018695][ T30] queue_limits_commit_update_frozen+0x60/0xd0 [ 1290.061153][ T30] queue_attr_store+0x1b2/0x2f0 [ 1290.095301][ T30] ? __pfx_queue_attr_store+0x10/0x10 [ 1290.132231][ T30] ? find_held_lock+0x2b/0x80 [ 1290.152168][ T30] ? sysfs_file_kobj+0xe4/0x290 [ 1290.185091][ T30] ? sysfs_file_kobj+0xe4/0x290 [ 1290.190179][ T30] ? __pfx_queue_attr_store+0x10/0x10 [ 1290.288114][ T30] sysfs_kf_write+0xf2/0x150 [ 1290.372484][ T30] kernfs_fop_write_iter+0x3e0/0x5f0 [ 1290.377825][ T30] ? __pfx_sysfs_kf_write+0x10/0x10 [ 1290.436583][ T30] iter_file_splice_write+0x82b/0x10a0 [ 1290.469009][ T30] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1290.499936][ T30] ? __pfx_copy_splice_read+0x10/0x10 [ 1290.523101][ T30] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1290.529145][ T30] direct_splice_actor+0x192/0x6c0 [ 1290.577575][ T30] splice_direct_to_actor+0x345/0xa30 [ 1290.602358][ T30] ? __pfx_direct_splice_actor+0x10/0x10 [ 1290.633132][ T30] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1290.639230][ T30] do_splice_direct+0x174/0x240 [ 1290.682828][ T30] ? __pfx_do_splice_direct+0x10/0x10 [ 1290.688519][ T30] ? common_file_perm+0x1ab/0x4f0 [ 1290.724799][ T30] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1290.730955][ T30] ? rw_verify_area+0xce/0x6d0 [ 1290.792501][ T30] do_sendfile+0xadc/0xe20 [ 1290.797082][ T30] ? __pfx_do_sendfile+0x10/0x10 [ 1290.802143][ T30] ? __x64_sys_futex+0x34f/0x4d0 [ 1290.868512][T23137] base_sock_release(ffff88805fd1e780) sk=ffff8880321e9000 [ 1290.882831][ T30] ? __x64_sys_futex+0x358/0x4d0 [ 1290.888342][ T30] __x64_sys_sendfile64+0x1d8/0x220 [ 1290.913667][ T30] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 1290.949288][ T30] do_syscall_64+0x106/0xf80 [ 1290.972727][ T30] ? clear_bhb_loop+0x40/0x90 [ 1290.977692][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1291.023432][ T30] RIP: 0033:0x7f2d6a19bf79 [ 1291.028279][ T30] RSP: 002b:00007f2d6b0fd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1291.082525][T22654] EXT4-fs error (device sda1) in ext4_free_inode:361: Corrupt filesystem [ 1291.095871][ T30] RAX: ffffffffffffffda RBX: 00007f2d6a416090 RCX: 00007f2d6a19bf79 [ 1291.116017][ T30] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000006 [ 1291.162539][ T30] RBP: 00007f2d6a2327e0 R08: 0000000000000000 R09: 0000000000000000 [ 1291.170934][ T30] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 1291.192280][T22654] EXT4-fs error (device sda1) in ext4_free_inode:361: Corrupt filesystem [ 1291.243106][ T30] R13: 00007f2d6a416128 R14: 00007f2d6a416090 R15: 00007ffd328f0468 [ 1291.251573][ T30] [ 1291.284231][ T30] [ 1291.284231][ T30] Showing all locks held in the system: [ 1291.292264][ T30] 1 lock held by pool_workqueue_/3: [ 1291.327267][ T30] #0: ffffffff8e7f4e38 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x19e/0x3c0 [ 1291.362652][ T30] 1 lock held by khungtaskd/30: [ 1291.367655][ T30] #0: ffffffff8e7e9220 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 1291.413891][ T30] 2 locks held by kworker/u8:21/6890: [ 1291.419581][ T30] #0: ffff88801e787148 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_one_work+0x1287/0x1920 [ 1291.472632][ T30] #1: ffffc90003b27d08 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_one_work+0x93c/0x1920 [ 1291.532284][ T30] 4 locks held by kworker/u8:60/12024: [ 1291.562505][ T30] #0: ffff88801c6ae948 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x1287/0x1920 [ 1291.592545][ T30] #1: ffffc90002f77d08 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x93c/0x1920 [ 1291.624129][ T30] #2: ffffffff905f9170 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xb8/0x920 [ 1291.665029][ T30] #3: ffffffff8e7f4e38 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x19e/0x3c0 [ 1291.702473][ T30] 1 lock held by syz.5.2196/16380: [ 1291.707697][ T30] 1 lock held by syz.5.2196/16381: [ 1291.728758][ T30] 1 lock held by udevd/16675: [ 1291.753012][ T30] #0: ffff888027ce9358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40 [ 1291.782511][ T30] 3 locks held by kworker/0:0/17686: [ 1291.788014][ T30] #0: ffff88813fe63548 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x1287/0x1920 [ 1291.850776][ T30] #1: ffffc900037e7d08 ((fqdir_free_work).work){+.+.}-{0:0}, at: process_one_work+0x93c/0x1920 [ 1291.884865][ T30] #2: ffffffff8e7f4d00 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x48/0x6d0 [ 1291.930067][ T30] 6 locks held by syz.7.3322/21570: [ 1291.941887][ T30] #0: ffff888036108420 (sb_writers#7){.+.+}-{0:0}, at: splice_direct_to_actor+0x345/0xa30 [ 1291.995050][ T30] #1: ffff88807e50b088 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 [ 1292.022555][ T30] #2: ffff888023bb6008 (kn->active#361){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0 [ 1292.064722][ T30] #3: ffff888027debff0 (&q->limits_lock){+.+.}-{4:4}, at: queue_attr_store+0xf0/0x2f0 [ 1292.104849][ T30] #4: ffff888027deb990 (&q->q_usage_counter(io)#52){++++}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20 [ 1292.138398][ T30] #5: ffff888027deb9c8 (&q->q_usage_counter(queue)#36){+.+.}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20 [ 1292.183174][ T30] 1 lock held by syz.8.3658/23120: [ 1292.188675][ T30] 2 locks held by syz.8.3669/23164: [ 1292.224357][ T30] #0: ffffffff905f9170 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x451/0x7c0 [ 1292.263038][ T30] #1: ffffffff8e7f4d00 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x48/0x6d0 [ 1292.293072][ T30] 2 locks held by syz.4.3672/23176: [ 1292.298758][ T30] #0: ffffffff905f9170 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x451/0x7c0 [ 1292.346233][ T30] #1: ffffffff90611a68 (rtnl_mutex){+.+.}-{4:4}, at: ops_undo_list+0x7ec/0xab0 [ 1292.382455][ T30] 2 locks held by syz.3.3675/23195: [ 1292.387913][ T30] #0: ffffffff905f9170 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x451/0x7c0 [ 1292.422441][ T30] #1: ffffffff90611a68 (rtnl_mutex){+.+.}-{4:4}, at: ip_tunnel_init_net+0x21e/0x780 [ 1292.505720][ T30] [ 1292.508173][ T30] ============================================= [ 1292.508173][ T30] [ 1292.556050][ T30] NMI backtrace for cpu 0 [ 1292.556073][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Tainted: G U L syzkaller #0 PREEMPT(full) [ 1292.556101][ T30] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1292.556108][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1292.556119][ T30] Call Trace: [ 1292.556126][ T30] [ 1292.556133][ T30] dump_stack_lvl+0x100/0x190 [ 1292.556164][ T30] nmi_cpu_backtrace.cold+0x12d/0x151 [ 1292.556192][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1292.556217][ T30] nmi_trigger_cpumask_backtrace+0x1d7/0x230 [ 1292.556242][ T30] sys_info+0x141/0x190 [ 1292.556260][ T30] watchdog+0xd25/0x1050 [ 1292.556292][ T30] ? __pfx_watchdog+0x10/0x10 [ 1292.556318][ T30] ? __kthread_parkme+0x18c/0x230 [ 1292.556340][ T30] ? kthread+0x13a/0x450 [ 1292.556360][ T30] ? __pfx_watchdog+0x10/0x10 [ 1292.556384][ T30] kthread+0x370/0x450 [ 1292.556404][ T30] ? __pfx_kthread+0x10/0x10 [ 1292.556427][ T30] ret_from_fork+0x754/0xd80 [ 1292.556453][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 1292.556479][ T30] ? __switch_to+0x7b4/0x1120 [ 1292.556497][ T30] ? __pfx_kthread+0x10/0x10 [ 1292.556520][ T30] ret_from_fork_asm+0x1a/0x30 [ 1292.556547][ T30] [ 1293.144351][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 1293.151239][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Tainted: G U L syzkaller #0 PREEMPT(full) [ 1293.162163][ T30] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1293.167649][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1293.177940][ T30] Call Trace: [ 1293.181239][ T30] [ 1293.184187][ T30] dump_stack_lvl+0x100/0x190 [ 1293.189277][ T30] vpanic+0x552/0x970 [ 1293.193640][ T30] ? __pfx_vpanic+0x10/0x10 [ 1293.198331][ T30] ? nmi_trigger_cpumask_backtrace+0x182/0x230 [ 1293.204675][ T30] panic+0xd1/0xe0 [ 1293.208405][ T30] ? __pfx_panic+0x10/0x10 [ 1293.213011][ T30] ? nmi_trigger_cpumask_backtrace+0x1b5/0x230 [ 1293.219344][ T30] ? nmi_trigger_cpumask_backtrace+0x1f6/0x230 [ 1293.225949][ T30] ? nmi_trigger_cpumask_backtrace+0x200/0x230 [ 1293.232318][ T30] ? watchdog.cold+0x198/0x1ca [ 1293.237283][ T30] ? watchdog+0xd35/0x1050 [ 1293.241889][ T30] watchdog.cold+0x1a9/0x1ca [ 1293.246598][ T30] ? __pfx_watchdog+0x10/0x10 [ 1293.251408][ T30] ? __kthread_parkme+0x18c/0x230 [ 1293.256973][ T30] ? kthread+0x13a/0x450 [ 1293.261419][ T30] ? __pfx_watchdog+0x10/0x10 [ 1293.266216][ T30] kthread+0x370/0x450 [ 1293.270734][ T30] ? __pfx_kthread+0x10/0x10 [ 1293.275330][ T30] ret_from_fork+0x754/0xd80 [ 1293.280103][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 1293.285308][ T30] ? __switch_to+0x7b4/0x1120 [ 1293.290277][ T30] ? __pfx_kthread+0x10/0x10 [ 1293.295329][ T30] ret_from_fork_asm+0x1a/0x30 [ 1293.300379][ T30] [ 1293.303543][ T30] Kernel Offset: disabled [ 1293.307984][ T30] Rebooting in 86400 seconds..