last executing test programs: 6m0.520535342s ago: executing program 1 (id=58): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXPWRBN:00/power/wakeup_max_time_ms\x00', 0xb480, 0x0) r0 = getpid() process_vm_readv$auto(r0, &(0x7f0000000000)={0x0, 0xfff}, 0x800000001, &(0x7f0000000280)={&(0x7f0000000080), 0x1ffffffff}, 0x6, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$auto(0x3, 0x4040ae79, r1) (fail_nth: 2) 5m59.39482894s ago: executing program 1 (id=63): mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0xffffffffffffffff, 0x300000000000) mmap$auto(0x0, 0x2020007, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) (async) mmap$auto(0x0, 0x2020007, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000000000), 0xc0402, 0x0) r1 = open(&(0x7f0000000800)='./file0\x00', 0x22200, 0x154) open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x115) (async) r2 = open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x115) copy_file_range$auto(r2, 0x0, r1, 0x0, 0x21c1, 0x0) (async) copy_file_range$auto(r2, 0x0, r1, 0x0, 0x21c1, 0x0) ioctl$auto_VHOST_SET_VRING_ERR2(r2, 0x4008af22, &(0x7f0000000040)={0x2, r0}) (async) ioctl$auto_VHOST_SET_VRING_ERR2(r2, 0x4008af22, &(0x7f0000000040)={0x2, r0}) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) ioctl$auto_posix_clock_file_operations_posix_clock(r0, 0x40603d10, 0x0) open(0x0, 0x6902, 0x10b) r3 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/net/ipv6/conf/default/ignore_routes_with_linkdown\x00', 0x42a81, 0x0) mmap$auto(0x0, 0x2000d, 0x7, 0xeb1, 0x404, 0x10008000) io_uring_setup$auto(0x8, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer2\x00', 0x220000, 0x0) openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000180), 0x111000, 0x0) close_range$auto(0x2, 0xffffffffffffffff, 0x1) clock_nanosleep$auto(0x2, 0x6, 0x0, 0x0) nanosleep$auto(&(0x7f00000001c0)={0x5}, &(0x7f0000000240)={0xffffffffffff3de3, 0xc982}) (async) nanosleep$auto(&(0x7f00000001c0)={0x5}, &(0x7f0000000240)={0xffffffffffff3de3, 0xc982}) setsockopt$auto(0xffffffffffffffff, 0x3, 0x3e, 0x0, 0x8) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r4 = socket(0x2b, 0x1, 0x0) sendmmsg$auto(r4, &(0x7f0000000000)={{&(0x7f0000000040), 0x1, 0x0, 0x9, 0x0, 0x1f, 0xfffffffd}, 0x10001}, 0x5, 0x20000000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) (async) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r5, 0x0, 0x9) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) writev$auto(r3, &(0x7f0000000200)={0x0, 0x7}, 0x3) (async) writev$auto(r3, &(0x7f0000000200)={0x0, 0x7}, 0x3) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/fail-nth\x00', 0x800, 0x0) prctl$auto_PR_SYS_DISPATCH_OFF(0x2, 0x0, 0x0, 0x1, 0x2003) 5m58.383727731s ago: executing program 1 (id=67): r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x8010}, 0x4000004) lstat$auto(0x0, &(0x7f0000000180)={0xb, 0x2, 0xbe, 0x1000, 0x0, 0x0, 0x0, 0xfa94, 0x8, 0x7fffffffffffffff, 0x8000000004, 0x100000007fffffff, 0x5, 0x0, 0x7, 0x4, 0x3}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x89fc, &(0x7f0000000040)={'bridge0\x00'}) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="100026bd7000fedbdf25030000000800040008000000060007000080000008000200", @ANYRES32=0x0, @ANYRES8=r0], 0x68}, 0x1, 0x0, 0x0, 0x40080}, 0x40090) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 5m58.248963199s ago: executing program 1 (id=68): mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x88202, 0x0) ioctl$auto_PPPIOCSMRU(r0, 0xc004743e, 0x0) ioctl$auto(0x3, 0x8008743f, 0x1) r1 = open(&(0x7f0000000000)='./file0\x00', 0x4242, 0xe1d2b27bdc14aabc) flock$auto(r1, 0x2) flock$auto(r1, 0x5) r2 = socket$nl_generic(0x10, 0x3, 0x10) rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x0, 0x6, 0xffffffff, 0x2}, 0x8000, 0x0, 0x27) bpf$auto_BPF_ENABLE_STATS(0x20, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) fanotify_init$auto(0x5, 0x2000000000002) socket$nl_generic(0x10, 0x3, 0x10) socket(0x11, 0x80003, 0x300) r4 = socket(0xa, 0x3, 0x6) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) bpf$auto(0x0, &(0x7f0000000040)=@bpf_attr_5={@target_ifindex=r3, 0x7f, 0x99, 0x8, 0x1, @relative_fd=r4, 0xd}, 0x92) bpf$auto(0x2, &(0x7f00000001c0)=@raw_tracepoint={0x5, 0xffffffffffffffff, 0x0, 0x3}, 0xa) r5 = open(0x0, 0x261c2, 0x84) bpf$auto(0x3, &(0x7f00000001c0)=@raw_tracepoint={0x5, r5, 0x0, 0x3}, 0xd) 5m58.078609177s ago: executing program 1 (id=71): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXPWRBN:00/power/wakeup_max_time_ms\x00', 0xb480, 0x0) r0 = getpid() process_vm_readv$auto(r0, &(0x7f0000000000)={0x0, 0xfff}, 0x800000001, &(0x7f0000000280)={&(0x7f0000000080), 0x1ffffffff}, 0x6, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$auto(0x3, 0x4040ae79, r1) (fail_nth: 3) 5m57.500067454s ago: executing program 1 (id=74): socket(0x10, 0x3, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) fstat$auto(0xffffffffffffffff, &(0x7f0000000000)={0x5, 0x80000001, 0x0, 0x100, 0xee01, 0x0, 0x0, 0xffffffffffffff91, 0xfd3, 0x2, 0xec, 0x4, 0x80000000081, 0x8, 0x2, 0xfffffffffffffff8}) mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) madvise$auto(0x0, 0x454, 0x9) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x20200, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a0027"], 0x1ac}}, 0x40000) r0 = openat$auto_uhid_fops_uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4044000}, 0x800) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) fanotify_init$auto(0x5, 0x2) socket(0xa, 0x2, 0x0) socket(0x21, 0x2, 0xa) sendmmsg$auto(0x2, &(0x7f0000000240)={{0x0, 0x6, &(0x7f00000001c0)={0x0, 0x10}, 0x2, &(0x7f0000000200), 0xd8, 0xfff}, 0x2}, 0x5, 0xfe64) read$auto(r0, 0x0, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) ioctl$auto(0x3, 0x400454ca, 0x38) ptrace$auto(0xf106, 0x0, 0x8, 0x0) ptrace$auto(0x5, 0x0, 0xfffffffffffffffa, 0x8) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) writev$auto(0x3, &(0x7f0000004100)={0x0, 0x2000000b}, 0x3ff) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 5m41.77230512s ago: executing program 32 (id=74): socket(0x10, 0x3, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) fstat$auto(0xffffffffffffffff, &(0x7f0000000000)={0x5, 0x80000001, 0x0, 0x100, 0xee01, 0x0, 0x0, 0xffffffffffffff91, 0xfd3, 0x2, 0xec, 0x4, 0x80000000081, 0x8, 0x2, 0xfffffffffffffff8}) mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) madvise$auto(0x0, 0x454, 0x9) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x20200, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a0027"], 0x1ac}}, 0x40000) r0 = openat$auto_uhid_fops_uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4044000}, 0x800) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) fanotify_init$auto(0x5, 0x2) socket(0xa, 0x2, 0x0) socket(0x21, 0x2, 0xa) sendmmsg$auto(0x2, &(0x7f0000000240)={{0x0, 0x6, &(0x7f00000001c0)={0x0, 0x10}, 0x2, &(0x7f0000000200), 0xd8, 0xfff}, 0x2}, 0x5, 0xfe64) read$auto(r0, 0x0, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) ioctl$auto(0x3, 0x400454ca, 0x38) ptrace$auto(0xf106, 0x0, 0x8, 0x0) ptrace$auto(0x5, 0x0, 0xfffffffffffffffa, 0x8) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) writev$auto(0x3, &(0x7f0000004100)={0x0, 0x2000000b}, 0x3ff) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 3m2.128037559s ago: executing program 0 (id=845): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) timerfd_create$auto_CLOCK_REALTIME(0x0, 0x1) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) io_uring_setup$auto(0x5, 0x0) openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000000)='/dev/binderfs/binder1\x00', 0x2001, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x4000000, 0xffffffffffff0085, 0x1004) r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0xfffffffffffffffd, 0x80040000d, 0x5, 0x9b72, r0, 0x8000) dup$auto(0xffffffffffffffff) socket(0x2, 0x1, 0x106) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0x2000e, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0x4, 0xda, 0x948b, 0x0, 0x95f4da0a, 0x2, 0x8, 0x62, 0x80000005, 0x7, 0x4, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) write$auto(r1, &(0x7f0000000080)='/dev/audio1\x00', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x958b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x40008000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x10000]}, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/bus/pci/resource_alignment\x00', 0x8ea182, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f0000000000)="42bf466a98f4921b6c0a", 0xa) unshare$auto(0x40000080) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/pts/ptmx\x00', 0x20540, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) mknod$auto(&(0x7f0000000040)='\xfd\x90\x8f2\x14\x92\x00\xbf\xdf\xcf\x9a\xae}\xd9\xf95\xc5gV\x82\f\xe5h\xfe\x83\xe4\xbe\x8c\x1f\xa5\xf1_T\xde\xf7\xd4\x83D\x9eXS\xd6\x90T\xc1v\xad#\xc4q\x8b\xed2\xadW:0\xef\x9c.=\xba\x0fy\x8f\xcd\xd6\xde\xa9i\xec\xe8\xca\x9f\xf3\x82b\xa2y\xa87J\xfc \xc5\xd8\x80\xba\xaaV\x8f{\x1f\x1b\xb0\n\x97\\\xa7\xe3\xdf\xc29-*;#r\xc8\xd1\x14RcF\x87\xe4\x1c\x1fGL\xa5\x19\x90\xd6\x8d*\xe6\b(\x1a\xea\x95\xdc\xa6)5\xae&yAl\x1e\xe3j Lp\x91\r\xed%\xafZ\xf8w\xf2}\xcdGS\xce\xb9\xdck\x86\x00.6\xe6{\xc1\x00\x1bW5\x81\xda!\xcb.O\xa9\xf3\xa7\x88+\xb9\xf3\x9a7\xa4\xe6)<\xa79\xa4\x87\\\xb4\xbf\v\x03\x87\xac\x87r\x02\x05\xdb\xe4\xde,V\xb6G\xba.WR\xe2<~\xdd\xb2\xe53hj_;\xa5qm\x92\xc7P\xc9.\x82w8\x1f\xfcX\xe4\x14\xc72cC\xd3\x00'/263, 0x1, 0x4) lstat$auto(&(0x7f0000000200)='\xfd\x90\x8f2\x14\x92\x00\xbf\xdf\xcf\x9a\xae}\xd9\xf95\xc5gV\x82\f\xe5h\xfe\x83\xe4\xbe\x8c\x1f\xa5\xf1_T\xde\xf7\xd4\x83D\x9eXS\xd6\x90T\xc1v\xad#\xc4q\x8b\xed2\xadW:0\xef\x9c.=\xba\x0fy\x8f\xcd\xd6\xde\xa9i\xec\xe8\xca\x9f\xf3\x82b\xa2y\xa87J\xfc \xc5\xd8\x80\xba\xaaV\x8f{\x1f\x1b\xb0\n\x97\\\xa7\xe3\xdf\xc29-*;#r\xc8\xd1\x14RcF\x87\xe4\x1c\x1fGL\xa5\x19\x90\xd6\x8d*\xe6\b(\x1a\xea\x95\xdc\xa6)5\xae&yAl\x1e\xe3j Lp\x91\r\xed%\xafZ\xf8w\xf2}\xcdGS\xce\xb9\xdck\x86\x00.6\xe6{\xc1\x00\x1bW5\x81\xda!\xcb.O\xa9\xf3\xa7\x88+\xb9\xf3\x9a7\xa4\xe6)<\xa79\xa4\x87\\\xb4\xbf\v\x03\x87\xac\x87r\x02\x05\xdb\xe4\xde,V\xb6G\xba.WR\xe2<~\xdd\xb2\xe53hj_;\xa5qm\x92\xc7P\xc9.\x82w8\x1f\xfcX\xe4\x14\xc72cC\xd3\x00', 0x0) ioctl$auto(0x3, 0x5420, 0x38) statx$auto(0xffffff9c, 0x0, 0x1000, 0x803, 0x0) move_pages$auto(0x0, 0x1002, 0x0, 0x0, 0x0, 0x2) ioctl$auto(0x3, 0x402c542c, 0x38) ioctl$auto(0x3, 0x402c542b, 0x38) close_range$auto(0x2, 0x8, 0x0) 2m59.97483148s ago: executing program 0 (id=850): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) futex$auto(0x0, 0x3, 0x2, 0x0, &(0x7f0000002440)=0x8, 0x71a8dce0) mmap$auto(0x0, 0x5, 0x4000000000e2, 0xeb1, 0xffffffffffffffff, 0x8000) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x38, 0xffffffffffffffff, 0x0, 0x1, 0x0) socket(0x15, 0x3, 0x8000) connect$auto(0x3, 0x0, 0x81) mmap$auto(0x0, 0x7, 0x20000000df, 0x19, 0x40000000000a5, 0x5) r0 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, 0x0, 0x100, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, 0x0) close_range$auto(r0, 0x8, 0x0) r1 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/interrupts\x00', 0x18b202, 0x0) prctl$auto(0x41, 0x3, 0x0, 0xffffffff80000000, 0xfffffffffffffff8) close_range$auto(0x2, 0x8, 0x3) socket(0x22, 0x80000, 0x5) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, r2, 0x0) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r3) ioctl$auto_KVM_GET_MSRS(r2, 0x4008ae89, &(0x7f00000000c0)={0xdd, 0x0, [{0x40000108, 0x400}]}) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x2008000) mprotect$auto(0x11, 0xd914, 0x6) pread64$auto(r1, 0x0, 0x6, 0x1ff) readv$auto(r1, 0x0, 0x8) unshare$auto(0x40000080) open(0x0, 0x161342, 0x130) write$auto_dynamic_events_ops_trace_dynevent(0xffffffffffffffff, 0x0, 0x0) 2m59.190919352s ago: executing program 0 (id=854): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/controlC2\x00', 0x402, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x244142, 0x0) openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mtd0\x00', 0x8000, 0x0) close_range$auto(r0, r0, 0x5) open(0x0, 0x22240, 0x155) socket(0x2, 0x1, 0x0) setsockopt$auto(0x3, 0x0, 0x4, 0x0, 0x28) 2m58.935514621s ago: executing program 0 (id=855): socket(0x2, 0x1, 0x106) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x2, 0x7, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x155) socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55) msgctl$auto_MSG_STAT(0xffffffff, 0xb, &(0x7f0000000080)={{0x0, 0xee00, 0xffffffffffffffff, 0x3, 0x8000, 0x0, 0x1}, &(0x7f0000000000)=0x12, &(0x7f0000000040)=0x9, 0x6, 0x2, 0x84, 0x5, 0x2, 0x4, 0x151, 0xed, @inferred=0xffffffffffffffff, @inferred=0xffffffffffffffff}) r1 = getegid() msgctl$auto(0x8, 0x8, &(0x7f0000000180)={{0x8, 0xffffffffffffffff, r1, 0x7ff, 0x2, 0x4c4, 0x2}, 0x0, &(0x7f0000000140)=0x2, 0x8, 0x8000, 0x96e, 0x5, 0x8, 0x7, 0x6c, 0x3, @raw=0xb, @raw=0x7}) shmctl$auto_IPC_STAT(0x5, 0x2, &(0x7f0000000380)={{0x0, r2, r1, 0x8, 0xc0000000, 0x81, 0xc}, 0x80000000, 0x4, 0x3, 0x7, @inferred, @raw=0x4, 0xfd8c, 0x0, &(0x7f00000002c0), 0x0}) r3 = getpid() process_vm_readv$auto(r3, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000080), 0xffffffff}, 0x6, 0x0) r4 = clone$auto(0x5, 0x80000000, &(0x7f0000000100)=0x7fff, &(0x7f0000000140)=0x9, 0x1ff) shmctl$auto(0x5, 0xe000000, &(0x7f00000002c0)={{0x9, r0, r1, 0xffff, 0x80000001, 0x3, 0x8000}, 0x9, 0x9, 0x8, 0x0, @inferred=r3, @inferred=r4, 0x8001, 0x0, &(0x7f0000000180)="913a8acf1769e84f01a2574a263111e18d7d94bf96b65d32a7b1167802b1b874cbefd00f353f8b1aae5340e467e4bc0c615aac2efd330c176db8620e6a2cfef6e6c57c376e98e089017901509b6bd18948520d684efff0ec76ac481b78341cb7579232a38aaf8a9ad2bd6a2b42d53332434b8c93ef92d85bfa6f28f710ec", &(0x7f0000000200)="304304a1e5f952693ed2bfaf40d44ce8e9d08ae696407c64e8ee937a995b740a82f9c15283d482166f0096a127a1642f47abf22b37f78b0ba8e5d84ad30a7e501050bd5fbca0efc2469f6f5cc4a88ce1af7b09eb4d536aaa5a794491299857e4792d61a2e29dad6960c8546935440d4aef4594a527260452080956b9caadf70a9b44cc9f02cd631ecd2cbdeeb306020e2f39f6e2a2712adb6abbe9"}) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x2020009, 0x203, 0xeb1, 0xfffffffffffffffa, 0x8000) unshare$auto(0x40000080) setdomainname$auto(0x0, 0xb4) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "abe6de3d6468fe8000"}, 0x56) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) 2m55.687967587s ago: executing program 0 (id=862): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram5\x00', 0x14fa02, 0x0) mmap$auto(0x0, 0x810004, 0x400000000ffb, 0x8000000008011, 0x3, 0x8000) write$auto(0xffffffffffffffff, &(0x7f0000000440)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xab\b\x00\x00\x00\x00\x00\x00\x00}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2oc!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb', 0x83) r0 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/tracing/per_cpu/cpu1/trace_pipe_raw\x00', 0x80100, 0x0) sendmsg$auto_NL80211_CMD_PROBE_MESH_LINK(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x50}, 0x8811) mmap$auto(0x0, 0x20009, 0xdb, 0xeb1, r0, 0x8000) sysfs$auto(0x2, 0x23, 0x0) r1 = ioctl$auto_NS_GET_USERNS(0xffffffffffffffff, 0xb701, 0x0) r2 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$auto_IPVS_CMD_DEL_DAEMON(r1, &(0x7f0000000600)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="60baf7d875f65c2d4e5ac123162d9970377e35e875063b04306e1d29cc6246c920e4e34f03118769", @ANYRES16=r2, @ANYBLOB="000126bd7000ffdbdf250a000000080004003c040000"], 0x1c}, 0x1, 0x0, 0x0, 0x880}, 0x4080) socket(0x2, 0x5, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) capget$auto(0x0, 0xfffffffffffffffe) setsockopt$auto(r0, 0x87, 0x10000bf, 0x0, 0xfff) r3 = fsopen$auto(0x0, 0x1) fsconfig$auto(r3, 0x8, 0x0, 0x0, 0x0) r4 = openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$auto_SNDRV_PCM_IOCTL_HW_PARAMS_OLD2(r4, 0xc1004111, 0x0) r5 = openat$auto_evm_xattr_ops_evm_secfs(0xffffffffffffff9c, &(0x7f0000000140), 0x189000, 0x0) readv$auto(r5, &(0x7f00000018c0)={0x0, 0x1}, 0x9) openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000240)='/proc/thread-self/personality\x00', 0x8002, 0x0) r6 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) sysfs$auto(0x8, 0x5, 0xfffffffffffffff9) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r6, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) read$auto_proc_reg_file_ops_compat_inode(0xffffffffffffffff, &(0x7f0000000300)=""/251, 0xfb) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000200)='/proc/irq/6/effective_affinity_list\x00', 0x701500, 0x0) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) 2m53.041085633s ago: executing program 0 (id=872): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0xffffffffffffffff, 0x8000000000000000) r2 = openat$auto_proc_sessionid_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/sessionid\x00', 0x0, 0x0) exit$auto(0x7) r3 = pidfd_getfd$auto(r0, r2, 0x2) r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000001c0), r0) sendmsg$auto_NL80211_CMD_GET_MPATH(r3, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x18, r4, 0x202, 0x70bd2a, 0x25dfdbff, {}, [@NL80211_ATTR_REG_INDOOR={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000000}, 0x8008885) preadv$auto(0x40000000000003, &(0x7f0000000080)={0x0, 0xfffffffd}, 0x6, 0x8, 0x5) sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000080)={0x104, r1, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NFSD_A_SERVER_SCOPE={0xe5, 0x4, 'nfs\x81\x9b\xb6$\x10\x16\xfb:\xb3\x15Y\x90\xf9\xc0\xc0\x88.!s\x1f\xe9\x1d\'&Hvn\xb1\x88\xbf\x15<\xa6e\xbc\xa1\xfa\xbeG\t*_kW_m\x1b:,\xc6\xa6\xfd\xba\xcd\xbe\xbe=\xc3\xbf\xd3f2!\xc4\x05EA\xac\x04\x83\xf1\x99\xa05\xfb\xf3\xf4?(\x9c\x8b\x9d\xdcV\xc5\x00\tm\xdez\xc9\xdbn\xb1\t\n\xe7\x8cd\xca\xd89\r\x1a@\xe1_\xb1_\xf8\xf3\xb1]\xad\xaf\xd9\xd0\xa8:\xd4<\x8d\xbc\rg[\x1d\x98\xb2r\xac\x83\xf8s\xafh@\x8c\xa7\xcd\xb3+Qy\"\xe8\x8ah,\xca|\xd9\xb3?Ha\xdb\xa3F\nGU&7\x15\x19\xeb\x9b\x9eU\xab\x86\x10\x9d\xaf>\xda(R\xcb\xe6\xf7\x8c\xf8\xb1\xdf\xe4t\xe6\x9f\x81\xb3\xbb\xc3\xbf\x8e\xd9VC\xa7\x03rJ.\xf6L\x94b\xc5\x03\xea\x84u\x92\xc0\xcd\x16\xfb<\x03\x00\x00'}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x2}]}, 0x104}}, 0x4000) 2m48.86718467s ago: executing program 3 (id=888): mlockall$auto(0x7) mmap$auto(0x0, 0x40000b, 0xde, 0x9b72, 0xffffffffffffffff, 0x8000) ioperm$auto(0x7, 0x6, 0x2) prctl$auto(0x16, 0x1, 0x6, 0xfffffffffffffffe, 0x4) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/pts/ptmx\x00', 0x40001, 0x0) r1 = open(&(0x7f0000000000)='./cgroup\x00', 0x0, 0x64) fchdir$auto(r1) mkdir$auto(&(0x7f00000001c0)='./cgroup\x00', 0xa) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup/cgroup.type\x00', 0x103042, 0x0) (async) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup/cgroup.type\x00', 0x103042, 0x0) rmdir$auto(&(0x7f0000000080)='./cgroup\x00') (async) rmdir$auto(&(0x7f0000000080)='./cgroup\x00') readv$auto(r2, &(0x7f0000000040)={0x0, 0x3ff}, 0x1) mkdir$auto(&(0x7f0000000140)='./file0\x00', 0xfffd) (async) mkdir$auto(&(0x7f0000000140)='./file0\x00', 0xfffd) mkdir$auto(&(0x7f00000000c0)='./file1\x00', 0x9) (async) mkdir$auto(&(0x7f00000000c0)='./file1\x00', 0x9) mkdir$auto(&(0x7f0000000000)='./file0/file0\x00', 0x54c) (async) mkdir$auto(&(0x7f0000000000)='./file0/file0\x00', 0x54c) rename$auto(&(0x7f0000000180)='./file0/file0\x00', &(0x7f0000000040)='./file0\x00') (async) rename$auto(&(0x7f0000000180)='./file0/file0\x00', &(0x7f0000000040)='./file0\x00') ioctl$auto(r0, 0x80045430, 0xffffffffffffffff) mlock$auto(0xfbe8, 0x4) r3 = getpid() process_vm_readv$auto(r3, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000100)="58e7a2329fbdfb4986a26faf4182257497e4856e4a66e5177fa5d4eb558a61b740471c000000007e973d778cb0026ab17c9fe9252ff86e659e", 0xffffffff}, 0x6, 0x0) (async) process_vm_readv$auto(r3, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000100)="58e7a2329fbdfb4986a26faf4182257497e4856e4a66e5177fa5d4eb558a61b740471c000000007e973d778cb0026ab17c9fe9252ff86e659e", 0xffffffff}, 0x6, 0x0) capset$auto(&(0x7f0000000080)={0x209, r3}, 0x0) mlock$auto(0xcecc, 0xd325) mlock$auto(0xffffffffffffffff, 0x1) 2m47.89613277s ago: executing program 3 (id=894): socket(0x1d, 0x2, 0x7) mmap$auto(0x0, 0x3, 0xdf, 0xeb1, 0x403, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x2000, 0x0) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000140), 0x2002, 0x0) socket(0x29, 0x2, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x0, 0xfffffffffffffffe, 0x0, 0x1, 0x0) select$auto(0x8, 0x0, 0x0, 0x0, 0x0) write$auto(r0, &(0x7f0000000400)='\x00\x00\x00\x00', 0x1) mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000) r1 = getpid() process_vm_readv$auto(r1, &(0x7f0000000000)={0x0, 0xfff}, 0x40000000001, &(0x7f0000000180)={&(0x7f0000000140), 0x40000000001243}, 0xa, 0x0) mmap$auto(0x4, 0x202000a, 0x7, 0x1e, r0, 0x8010) socket(0x5, 0x801, 0x33a2) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000140), 0x2002, 0x0) openat$auto_tun_fops_tun(0xffffffffffffff9c, 0x0, 0x2002, 0x0) r2 = socket(0xa, 0x3, 0x3a) setsockopt$auto(r2, 0xd, 0x8000014, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/amidi2\x00', 0xb8801, 0x0) prctl$auto(0x7, 0x1, r1, 0x1, 0x0) write$auto(r2, &(0x7f00000000c0)='@T\xc1\x9a-\x94D1\x04\x9d\xf1|;\xf2\xc3M\x88\tr\x9eg\xf6\x14\x1f\xed\xfc \x83r\xc7x\x01', 0x2) r3 = getpid() mremap$auto(0x0, 0x4000007, 0x3fd7, 0x0, 0x20000020000000) process_vm_readv$auto(r3, &(0x7f0000000000)={0x0, 0xfff}, 0x40000000001, &(0x7f0000000180)={&(0x7f0000000140), 0x40000000001243}, 0xa, 0x0) sched_setattr$auto(0x0, &(0x7f00000002c0)={0x5, 0x9, 0x3ff, 0x3, 0x101, 0x100, 0x40, 0x401, 0x101, 0x2}, 0x9) ioctl$auto(0x3, 0x400454ca, 0x38) close_range$auto(0x2, 0x8, 0x0) memfd_create$auto(0x0, 0xe) 2m47.013281452s ago: executing program 3 (id=900): mmap$auto(0x0, 0x202000c, 0x3, 0x10004000eb3, 0xfffffffffffffffa, 0x7) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r0 = openat$auto_proc_pid_set_comm_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/comm\x00', 0x40000, 0x0) pread64$auto(r0, &(0x7f0000000080)='(\x03', 0x13b, 0x1) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x7ffe) unshare$auto(0x40000080) setgroups$auto(0xfffffc01, 0x0) r1 = getpid() r2 = gettid() rt_tgsigqueueinfo$auto(r1, r2, 0x16, &(0x7f0000000400)={@siginfo_0_0={0xfffeffff, 0x0, 0x2, @_sigpoll={0x8}}}) tgkill$auto_SIGCONT(r1, r1, 0x12) prctl$auto(0x83, 0x7fff, r1, 0x9, 0x2) 2m43.766159334s ago: executing program 3 (id=912): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r1 = socket(0x2, 0x1, 0x0) setsockopt$auto(0x3, 0x0, 0x4, 0x0, 0x28) r2 = getsockopt$auto(r1, 0x0, 0x4, 0x0, 0x0) r3 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000000180), r0) sendmsg$auto_CTRL_CMD_GETPOLICY(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r3, 0x20, 0x70bd2b, 0x25dfdbfb, {}, [@CTRL_ATTR_FAMILY_NAME={0x7, 0x2, '!(\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) r4 = socket(0x2, 0x1, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS0\x00', 0x20800, 0x0) fcntl$auto(0x3, 0x4, 0xa553) r5 = io_uring_setup$auto(0x6, 0x0) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/module/zswap/parameters/compressor\x00', 0x80002, 0x0) write$auto_ocfs2_control_fops_stack_user(r6, &(0x7f0000003900)='\t', 0x1) read$auto_kernfs_file_fops_kernfs_internal(r6, &(0x7f00000004c0)=""/244, 0xf4) r7 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001080)='/sys/module/i915/parameters/mitigations\x00', 0x88302, 0x0) sendfile$auto(r7, r7, 0x0, 0x7ffff000) r8 = memfd_secret$auto(0x9) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$auto_MACSEC_CMD_UPD_RXSA(r9, &(0x7f0000006200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)={0x28, r10, 0x23, 0x70bd27, 0x25dfdbfe, {}, [@MACSEC_ATTR_SA_CONFIG={0x8, 0x3, 0x0, 0x1, [@nested={0x4, 0x3}]}, @MACSEC_ATTR_RXSC_CONFIG={0x4}, @MACSEC_ATTR_IFINDEX={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4008008}, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) sendmsg$auto_MACSEC_CMD_GET_TXSC(r8, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r10, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@MACSEC_ATTR_IFINDEX={0x8, 0x1, r11}]}, 0x1c}, 0x1, 0x0, 0x0, 0x3400c000}, 0x4000000) setsockopt$auto(r4, 0x1, 0x3c, 0x0, 0xb2f) 2m42.567249691s ago: executing program 3 (id=918): mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) unshare$auto(0x40000080) close_range$auto(0x2, 0x8, 0x0) unshare$auto(0x9) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000002280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000002240)={&(0x7f0000000080)={0x21b8, r1, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@NL80211_ATTR_UNSOL_BCAST_PROBE_RESP={0x2160, 0x127, 0x0, 0x1, [@NL80211_UNSOL_BCAST_PROBE_RESP_ATTR_TMPL={0x467, 0x2, "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"}, @NL80211_UNSOL_BCAST_PROBE_RESP_ATTR_TMPL={0x752, 0x2, "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"}, @NL80211_UNSOL_BCAST_PROBE_RESP_ATTR_INT={0x8, 0x1, 0x7ff}, @NL80211_UNSOL_BCAST_PROBE_RESP_ATTR_TMPL={0x8a5, 0x2, "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"}, @NL80211_UNSOL_BCAST_PROBE_RESP_ATTR_INT={0x8, 0x1, 0x5}, @NL80211_UNSOL_BCAST_PROBE_RESP_ATTR_TMPL={0x602, 0x2, "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"}, @NL80211_UNSOL_BCAST_PROBE_RESP_ATTR_TMPL={0x6e1, 0x2, "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"}]}, @NL80211_ATTR_FREQ_FIXED={0x4}, @NL80211_ATTR_MBSSID_CONFIG={0x40, 0x132, 0x0, 0x1, [@NL80211_MBSSID_CONFIG_ATTR_MAX_INTERFACES={0x5, 0x1, 0xa}, @NL80211_MBSSID_CONFIG_ATTR_MAX_INTERFACES={0x5, 0x1, 0x8}, @NL80211_MBSSID_CONFIG_ATTR_INDEX={0x5, 0x3, 0x80}, @NL80211_MBSSID_CONFIG_ATTR_EMA={0x4}, @NL80211_MBSSID_CONFIG_ATTR_MAX_INTERFACES={0x5, 0x1, 0x10}, @NL80211_MBSSID_CONFIG_ATTR_MAX_EMA_PROFILE_PERIODICITY={0x5, 0x2, 0x1}, @NL80211_MBSSID_CONFIG_ATTR_MAX_EMA_PROFILE_PERIODICITY={0x5, 0x2, 0x7}, @NL80211_MBSSID_CONFIG_ATTR_MAX_EMA_PROFILE_PERIODICITY={0x5, 0x2, 0x6}]}]}, 0x21b8}, 0x1, 0x0, 0x0, 0x42}, 0x40008004) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = socket(0x2b, 0x1, 0x1) socketpair$auto(0xfffffffe, 0x1, 0x8000000000000000, 0x0) ioctl$auto(r2, 0x89a0, 0x4) 2m42.204773624s ago: executing program 3 (id=920): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram11\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000400), r1) sendmsg$auto_NFSD_CMD_VERSION_SET(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)={0x24, r2, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@NFSD_A_SERVER_PROTO_VERSION={0x10, 0x1, 0x0, 0x1, [@NFSD_A_VERSION_ENABLED={0x4}, @NFSD_A_VERSION_MAJOR={0x8, 0x1, 0x2}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24000001}, 0x844) read$auto_dvb_dvr_fops_dmxdev(0xffffffffffffffff, &(0x7f00000000c0)=""/238, 0xee) pread64$auto(r0, &(0x7f00000001c0)='-%-}-/\'-\x00', 0x3, 0x5) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r3 = socket(0x11, 0x80003, 0x300) move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) setsockopt$auto(r3, 0x107, 0x12, 0x0, 0x4) openat$auto_cachefiles_daemon_fops_internal(0xffffffffffffff9c, &(0x7f0000000040), 0x22080, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r4 = syz_genetlink_get_family_id$auto_ncsi(&(0x7f0000000280), r3) sendmsg$auto_NCSI_CMD_CLEAR_INTERFACE(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r4, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@NCSI_ATTR_PACKAGE_MASK={0x8, 0x7, 0xfffffffa}, @NCSI_ATTR_PACKAGE_ID={0x8, 0x3, 0x905}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x20040881) r5 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x0, 0xfffffffffffff000, 0x2) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) socket(0xa, 0x801, 0x84) getsockopt$auto(r3, 0x84, 0x74, 0x0, &(0x7f0000000040)=0x9002d) landlock_create_ruleset$auto(&(0x7f0000000000)={0x0, 0x401, 0x80000001}, 0x9, 0x0) landlock_restrict_self$auto(r5, 0x2) pivot_root$auto(&(0x7f0000000040)='\x00\x00\x06\xf0/\xedW', &(0x7f0000000080)='.\x00') preadv2$auto(r0, &(0x7f0000000080)={0x0, 0x80000003}, 0x6, 0xffffffffffffffff, 0x0, 0x2f) 2m37.96615408s ago: executing program 33 (id=872): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0xffffffffffffffff, 0x8000000000000000) r2 = openat$auto_proc_sessionid_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/sessionid\x00', 0x0, 0x0) exit$auto(0x7) r3 = pidfd_getfd$auto(r0, r2, 0x2) r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000001c0), r0) sendmsg$auto_NL80211_CMD_GET_MPATH(r3, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x18, r4, 0x202, 0x70bd2a, 0x25dfdbff, {}, [@NL80211_ATTR_REG_INDOOR={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000000}, 0x8008885) preadv$auto(0x40000000000003, &(0x7f0000000080)={0x0, 0xfffffffd}, 0x6, 0x8, 0x5) sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000080)={0x104, r1, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NFSD_A_SERVER_SCOPE={0xe5, 0x4, 'nfs\x81\x9b\xb6$\x10\x16\xfb:\xb3\x15Y\x90\xf9\xc0\xc0\x88.!s\x1f\xe9\x1d\'&Hvn\xb1\x88\xbf\x15<\xa6e\xbc\xa1\xfa\xbeG\t*_kW_m\x1b:,\xc6\xa6\xfd\xba\xcd\xbe\xbe=\xc3\xbf\xd3f2!\xc4\x05EA\xac\x04\x83\xf1\x99\xa05\xfb\xf3\xf4?(\x9c\x8b\x9d\xdcV\xc5\x00\tm\xdez\xc9\xdbn\xb1\t\n\xe7\x8cd\xca\xd89\r\x1a@\xe1_\xb1_\xf8\xf3\xb1]\xad\xaf\xd9\xd0\xa8:\xd4<\x8d\xbc\rg[\x1d\x98\xb2r\xac\x83\xf8s\xafh@\x8c\xa7\xcd\xb3+Qy\"\xe8\x8ah,\xca|\xd9\xb3?Ha\xdb\xa3F\nGU&7\x15\x19\xeb\x9b\x9eU\xab\x86\x10\x9d\xaf>\xda(R\xcb\xe6\xf7\x8c\xf8\xb1\xdf\xe4t\xe6\x9f\x81\xb3\xbb\xc3\xbf\x8e\xd9VC\xa7\x03rJ.\xf6L\x94b\xc5\x03\xea\x84u\x92\xc0\xcd\x16\xfb<\x03\x00\x00'}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x2}]}, 0x104}}, 0x4000) 2m33.426283854s ago: executing program 2 (id=955): r0 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$auto_XFS_IOC_ALLOCSP64(0xffffffffffffffff, 0x40305824, &(0x7f0000000100)={0x5, 0x1, 0x80000001, 0x60c4, 0x2, 0xffffffffffffffff}) ioctl$auto_BLKTRACESETUP32(0xffffffffffffffff, 0xc0401273, &(0x7f0000000140)={"81fe7cae303ba18d52bb080b575503f7957f27fb9f8539c1dd0c44720a11012d", 0x6, 0xca81, 0x0, 0x10001, 0x1d8b, 0x0}) sendmsg$auto_NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="8c000000", @ANYRES16=r0, @ANYBLOB="100028bd7000fbdbdf254f0000000600b4000600000070002c805d00db80f6cde3b178cb0960fd22f729839ae7d5dd2162844463122b87f974153b91f49f893fdd36a1533a499cb1885c48767fd109d7c4029fa45c90a15c3ed14ad500014abc23b5418f7814c5429935dcaada701408001500", @ANYRES32=r1, @ANYBLOB="00000004004e0008005200", @ANYRES32=r2, @ANYBLOB="d5c9269d724c107a4e85d112ff4515e2a1d5f93e89ed9704561ada90a0c3e0b0f614727a9ac74c9d213582c6c63a230d6302d8b0f01ce1b89651fd8d92f2cd0760e0e6188a32c38206a9c6394907462b7c7329f9bd15070e69616603a53358e11f424ed046aaf0e2bca61409adc05b11eed5bf03cc7801fb45ae4f718fc1f1d32ebdf9fb58a709485c5dbbab98a66d84edf0873a263bc8ebb360ba87d27233808bdf60bbe8debbf3dcdf16716ac09252d13a2272bc5b2bb457227a307b8111da6141143092a252be5173d28cc4981542ae3c0c5cb6d4ea6de2fe5b2de80a853424fa9cdeb742f2d3514baa8e"], 0x8c}, 0x1, 0x0, 0x0, 0x48840}, 0x40000) r3 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x82802, 0x0) ioctl$auto(r3, 0x2285, 0x1cfc4b42) socket(0x2, 0x801, 0x106) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000000c0), 0xffffffffffffffff) (async) ioctl$auto_XFS_IOC_ALLOCSP64(0xffffffffffffffff, 0x40305824, &(0x7f0000000100)={0x5, 0x1, 0x80000001, 0x60c4, 0x2, 0xffffffffffffffff}) (async) ioctl$auto_BLKTRACESETUP32(0xffffffffffffffff, 0xc0401273, &(0x7f0000000140)={"81fe7cae303ba18d52bb080b575503f7957f27fb9f8539c1dd0c44720a11012d", 0x6, 0xca81, 0x0, 0x10001, 0x1d8b}) (async) sendmsg$auto_NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="8c000000", @ANYRES16=r0, @ANYBLOB="100028bd7000fbdbdf254f0000000600b4000600000070002c805d00db80f6cde3b178cb0960fd22f729839ae7d5dd2162844463122b87f974153b91f49f893fdd36a1533a499cb1885c48767fd109d7c4029fa45c90a15c3ed14ad500014abc23b5418f7814c5429935dcaada701408001500", @ANYRES32=r1, @ANYBLOB="00000004004e0008005200", @ANYRES32=r2, @ANYBLOB="d5c9269d724c107a4e85d112ff4515e2a1d5f93e89ed9704561ada90a0c3e0b0f614727a9ac74c9d213582c6c63a230d6302d8b0f01ce1b89651fd8d92f2cd0760e0e6188a32c38206a9c6394907462b7c7329f9bd15070e69616603a53358e11f424ed046aaf0e2bca61409adc05b11eed5bf03cc7801fb45ae4f718fc1f1d32ebdf9fb58a709485c5dbbab98a66d84edf0873a263bc8ebb360ba87d27233808bdf60bbe8debbf3dcdf16716ac09252d13a2272bc5b2bb457227a307b8111da6141143092a252be5173d28cc4981542ae3c0c5cb6d4ea6de2fe5b2de80a853424fa9cdeb742f2d3514baa8e"], 0x8c}, 0x1, 0x0, 0x0, 0x48840}, 0x40000) (async) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x82802, 0x0) (async) ioctl$auto(r3, 0x2285, 0x1cfc4b42) (async) socket(0x2, 0x801, 0x106) (async) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) (async) 2m33.172292658s ago: executing program 2 (id=957): set_mempolicy$auto(0x6, &(0x7f0000000080)=0x3, 0x21) unshare$auto(0x40000080) madvise$auto(0x0, 0x2000040080000004, 0xe) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) open(&(0x7f0000000180)='./cgroup\x00', 0x78081, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = prctl$auto(0x3e, 0x0, 0x4, 0x1, 0x7fe) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x100, 0x0) pread64$auto(r3, 0x0, 0x40000000f42c, 0x80002) r4 = syz_genetlink_get_family_id$auto_ncsi(&(0x7f0000000200), r2) sendmsg$auto_NCSI_CMD_SET_PACKAGE_MASK(r1, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0xe000420}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="28010000", @ANYRES16=r4, @ANYBLOB="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"], 0x128}}, 0x4000) epoll_ctl$auto(0xffffffffffffffff, 0x80000000, 0xffffffffffffffff, 0x0) r5 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0) ioctl$auto_OSS_GETVERSION2(r5, 0x80044d76, &(0x7f0000000080)) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) madvise$auto(0x0, 0x200007, 0x19) r6 = openat$auto_rfcomm_sock_debugfs_fops_(0xffffffffffffff9c, &(0x7f0000000000), 0x40040, 0x0) read$auto_rfcomm_sock_debugfs_fops_(r6, &(0x7f0000000040)=""/117, 0x75) ioctl$auto_BTRFS_IOC_SEND_32(r1, 0x40449426, &(0x7f00000005c0)={@inferred=r2, 0x4, 0x3, 0xe0, 0x7fff, 0xfffffffe, "fd64ab47b98fa2408fa518c6aeeb26534e24eab2a94d69169092f351"}) poll$auto(0x0, 0x7e, 0x3) pwrite64$auto(0xc8, &(0x7f0000000000)='\vX\xc9\xb3\xbc\x8c\x1dga08\x90\x86\xdde\x1cJ\x99\x00\x11:\x14\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#\x1c\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd8\xbdn\x1d\x00\xeb]B\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xaf\n1\x80\x1a\xbc_\xef\x8b\t\xcc\xa6\xf2\xc1\"\xact\xee\xc9\x00'/232, 0xfdef, 0x3) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x7, 0x28000) sysfs$auto(0x2, 0x10000000000002d, 0x0) r7 = fsopen$auto(0x0, 0x1) fsconfig$auto(r7, 0x8, 0x0, 0x0, 0x0) socket(0x10, 0x3, 0x6) 2m32.345328667s ago: executing program 2 (id=958): r0 = socket(0x22, 0x2, 0x4) write$auto(r0, 0x0, 0x2fb) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) socket(0x5, 0x2, 0x5) openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000240), 0x20003, 0x0) socket(0xa, 0x1, 0x100) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/lru_gen\x00', 0x80400, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) timerfd_create$auto_CLOCK_REALTIME(0x0, 0x1) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram14\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) io_uring_setup$auto(0x5, 0x0) openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000000)='/dev/binderfs/binder1\x00', 0x2001, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x4000000, 0xffffffffffff0085, 0x1004) r1 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0xfffffffffffffffd, 0x80040000d, 0x5, 0x9b72, r1, 0x8000) socket(0x2, 0x1, 0x106) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0x4, 0xda, 0x948b, 0x0, 0x95f4da0a, 0xffffffffffffffff, 0x3, 0x62, 0x80000005, 0x7, 0x4, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x958b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x40008000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x10000]}, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/bus/pci/resource_alignment\x00', 0x8ea182, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f0000000000)="42bf466a98f4921b6c0a", 0xa) unshare$auto(0x40000080) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) 2m31.677324269s ago: executing program 2 (id=960): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/module/libceph/parameters/supported_features\x00', 0x40000, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000003940)=""/4121, 0x1019) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) r1 = openat$auto_nsim_dev_trap_fa_cookie_fops_dev(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/netdevsim/netdevsim6/trap_flow_action_cookie\x00', 0x123400, 0x0) read$auto(r1, 0x0, 0x8) mincore$auto(0x1000, 0x8001, 0x0) mmap$auto(0x0, 0x40009, 0xe2, 0x9b72, 0x7, 0x28000) r2 = socketpair$auto(0x20000001, 0x2, 0x3, 0x0) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/net/rpc/nfs4.idtoname/channel\x00', 0x8f3b7a51b80ebd01, 0x0) write$auto_proc_reg_file_ops_compat_inode(r3, 0x0, 0x0) r4 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$auto_IOCTL_VMCI_VERSION2(r4, 0x7a7, 0x0) ioctl$auto_IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, 0x6) r5 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/038/001\x00', 0x40001, 0x0) ioctl$auto_IOCTL_VMCI_QUEUEPAIR_SETVA(r2, 0x7a4, 0x0) lstat$auto(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0xffffffffffffff00, 0x4, 0x0, 0x3, 0xffffffffffffffff, 0x0, 0x0, 0x8, 0x10000, 0x7f, 0xffffffffffffff3c, 0x9, 0x8, 0x6ab7, 0x0, 0xa, 0xc8a0}) setfsuid$auto(r6) ioctl$auto_USBDEVFS_CONTROL(r5, 0xc0185500, &(0x7f0000001040)={0xa0, 0x6, 0x2953, 0x17, 0x91, 0x80000, 0x0}) adjtimex$auto(0x0) openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/snd/pcmC1D0p\x00', 0x4e100, 0x0) r7 = fsmount$auto(r0, 0x5, 0xffff) read$auto_dev_fops_plock(r7, &(0x7f0000000480)=""/65, 0x41) ioctl$auto_IOCTL_VMCI_QUEUEPAIR_ALLOC(r4, 0x7a8, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x6, 0x0) r8 = socket(0xa, 0x5, 0x0) getsockopt$auto(r8, 0x84, 0x20, 0x0, 0x0) select$auto(0x1, &(0x7f00000000c0)={[0x3ff, 0x1, 0x7, 0x4, 0x7, 0x4403, 0x31, 0xf68, 0x2, 0x1, 0x5, 0xffffffff7fffffff, 0x1, 0x9, 0x1, 0x8]}, &(0x7f0000000180)={[0x3, 0x1, 0xfff, 0xffffffffffffffff, 0x3, 0xffffffffffffff01, 0x8dd, 0x3, 0xa7, 0x0, 0x10, 0x3, 0x2, 0x81, 0x5, 0x3]}, &(0x7f0000000200)={[0x401, 0xfffffffffffeffff, 0x795e, 0x2, 0xaeb, 0x80000000, 0xc9, 0x3, 0x2, 0x4, 0x0, 0x200, 0x2c, 0x6, 0xb, 0x10001]}, &(0x7f0000000280)={0x5ebf4c9d, 0x5}) fcntl$auto(r1, 0x26, 0x8) openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000000340)='/dev/fb1\x00', 0x509001, 0x0) 2m31.295021036s ago: executing program 2 (id=962): mmap$auto(0x4, 0x4020009, 0xdf, 0xeb3, 0xffffffffffffffff, 0x400400) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0) chdir$auto(&(0x7f0000000000)='}[,&*}\x00') r0 = open(&(0x7f0000000100)='.\x00', 0x0, 0x0) ioctl$auto_FS_IOC_FSSETXATTR(r0, 0x401c5820, 0x9) 2m31.103974394s ago: executing program 2 (id=964): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) close_range$auto(0x2, 0xa, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/virtual/block/nbd10/queue/zone_append_max_bytes\x00', 0x80, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r0 = socket(0x2a, 0x2, 0xb) close_range$auto(0x0, 0xffffeffe, 0x2) pipe$auto(0x0) pipe$auto(0x0) fcntl$auto(r0, 0x5, 0x6) r1 = socket(0x2, 0x1, 0x0) setsockopt$auto(r1, 0x0, 0x10, 0x0, 0x17) close_range$auto(0x0, 0xfffffffffffff000, 0x2) fanotify_init$auto(0x65, 0x0) setrlimit$auto(0x7, &(0x7f0000001380)={0x5, 0x6}) close_range$auto(0x2, 0xa, 0x0) socket(0xa, 0x2, 0x88) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000164c0), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_SCAN(r2, &(0x7f00000165c0)={0x0, 0x0, &(0x7f0000016580)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="79a327bd7000"/22], 0x1c}, 0x1, 0x0, 0x0, 0x2404c000}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x2, 0x0) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) socket$nl_generic(0x10, 0x3, 0x10) pipe$auto(0x0) connect$auto(r4, &(0x7f0000000080)=@ethernet={0x0, @remote}, 0x200) dup2$auto(0x5, 0x4) 2m27.004852862s ago: executing program 34 (id=920): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram11\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000400), r1) sendmsg$auto_NFSD_CMD_VERSION_SET(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)={0x24, r2, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@NFSD_A_SERVER_PROTO_VERSION={0x10, 0x1, 0x0, 0x1, [@NFSD_A_VERSION_ENABLED={0x4}, @NFSD_A_VERSION_MAJOR={0x8, 0x1, 0x2}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24000001}, 0x844) read$auto_dvb_dvr_fops_dmxdev(0xffffffffffffffff, &(0x7f00000000c0)=""/238, 0xee) pread64$auto(r0, &(0x7f00000001c0)='-%-}-/\'-\x00', 0x3, 0x5) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r3 = socket(0x11, 0x80003, 0x300) move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) setsockopt$auto(r3, 0x107, 0x12, 0x0, 0x4) openat$auto_cachefiles_daemon_fops_internal(0xffffffffffffff9c, &(0x7f0000000040), 0x22080, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r4 = syz_genetlink_get_family_id$auto_ncsi(&(0x7f0000000280), r3) sendmsg$auto_NCSI_CMD_CLEAR_INTERFACE(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r4, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@NCSI_ATTR_PACKAGE_MASK={0x8, 0x7, 0xfffffffa}, @NCSI_ATTR_PACKAGE_ID={0x8, 0x3, 0x905}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x20040881) r5 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x0, 0xfffffffffffff000, 0x2) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) socket(0xa, 0x801, 0x84) getsockopt$auto(r3, 0x84, 0x74, 0x0, &(0x7f0000000040)=0x9002d) landlock_create_ruleset$auto(&(0x7f0000000000)={0x0, 0x401, 0x80000001}, 0x9, 0x0) landlock_restrict_self$auto(r5, 0x2) pivot_root$auto(&(0x7f0000000040)='\x00\x00\x06\xf0/\xedW', &(0x7f0000000080)='.\x00') preadv2$auto(r0, &(0x7f0000000080)={0x0, 0x80000003}, 0x6, 0xffffffffffffffff, 0x0, 0x2f) 2m15.360202406s ago: executing program 35 (id=964): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) close_range$auto(0x2, 0xa, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/virtual/block/nbd10/queue/zone_append_max_bytes\x00', 0x80, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r0 = socket(0x2a, 0x2, 0xb) close_range$auto(0x0, 0xffffeffe, 0x2) pipe$auto(0x0) pipe$auto(0x0) fcntl$auto(r0, 0x5, 0x6) r1 = socket(0x2, 0x1, 0x0) setsockopt$auto(r1, 0x0, 0x10, 0x0, 0x17) close_range$auto(0x0, 0xfffffffffffff000, 0x2) fanotify_init$auto(0x65, 0x0) setrlimit$auto(0x7, &(0x7f0000001380)={0x5, 0x6}) close_range$auto(0x2, 0xa, 0x0) socket(0xa, 0x2, 0x88) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000164c0), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_SCAN(r2, &(0x7f00000165c0)={0x0, 0x0, &(0x7f0000016580)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="79a327bd7000"/22], 0x1c}, 0x1, 0x0, 0x0, 0x2404c000}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x2, 0x0) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) socket$nl_generic(0x10, 0x3, 0x10) pipe$auto(0x0) connect$auto(r4, &(0x7f0000000080)=@ethernet={0x0, @remote}, 0x200) dup2$auto(0x5, 0x4) 1m49.870169037s ago: executing program 7 (id=1092): fstat$auto(0xffffffffffffffff, &(0x7f0000000000)={0x5, 0x80000001, 0x0, 0x100, 0xee01, 0x0, 0x0, 0xffffffffffffff91, 0xfd3, 0x2, 0xec, 0x4, 0x80000000081, 0x8, 0x2, 0xfffffffffffffff8}) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x10, 0x2, 0x0) r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000180), r0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$auto(0x3, &(0x7f0000000040)=@can={0x1d, r2}, 0x6a) sendmsg$auto_ETHTOOL_MSG_STATS_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)={0x6c, r1, 0x200, 0x70bd29, 0x25dfdbfb, {}, [@ETHTOOL_A_STATS_HEADER={0x58, 0x2, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5d22}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20004000}, 0x4040051) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="1b0026bd7000fddbdf25030000000400080008000380090012"], 0x20}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) socket(0x10, 0x2, 0x4) socket(0x10, 0x2, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022abd7000fbdbdf2502"], 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0xc0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/fs/orangefs/dcache_timeout_msecs\x00', 0x8ea182, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f0000000000)="42bf", 0x2) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="180027"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 1m49.33822453s ago: executing program 7 (id=1095): mmap$auto(0x0, 0x8, 0xfff, 0xeb2, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket$nl_generic(0x11, 0x3, 0x10) getsockname$auto(0x3, &(0x7f0000000d00), &(0x7f0000000d40)=0x4) r0 = socket(0x9, 0x5, 0x6) lsm_list_modules$auto(0x0, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x5, 0x0) open(0x0, 0x8643, 0x15e) ioctl$sock_SIOCGIFINDEX(r0, 0x401c5820, 0x0) mmap$auto(0x0, 0x80000, 0x11001, 0x13, 0x3, 0x0) 1m48.958157918s ago: executing program 7 (id=1098): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) close_range$auto(0x2, 0x8, 0x0) socket(0x23, 0x5, 0x73) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sysfs$auto(0x2, 0x4c, 0x0) r1 = socket(0x10, 0x2, 0x0) r2 = socket(0x2, 0x801, 0x84) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) getsockopt$auto(r2, 0x84, 0x6c, 0x0, 0x0) setsockopt$auto(r1, 0x104000000000010e, 0x1, 0x0, 0x16) ioctl$auto_dma_heap_fops_dma_heap(r0, 0xffffffffffdffe00, &(0x7f0000000140)=';') socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x5, 0x84) select$auto(0x7, 0x0, &(0x7f0000000080)={[0x209c, 0xe9e, 0x5, 0x15, 0x1000, 0x100000001, 0xb, 0xf, 0x40000000000008, 0x0, 0x20000000009, 0xd59, 0x101, 0xff, 0x2, 0x245c]}, 0x0, 0x0) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x20000050}, 0x40008c0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000004c80)='/sys/bus/usb/drivers/airspy/new_id\x00', 0xa081, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/LNXSYSTM:00/LNXPWRBN:00/input/input0/capabilities/key\x00', 0x80000, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) read$auto(r3, 0x0, 0x6) write$auto(0x3, 0x0, 0x7fffffff) r4 = openat$auto_qrtr_tun_ops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$auto(r4, &(0x7f0000000040)='\x00', 0x400) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 1m48.277125642s ago: executing program 7 (id=1100): sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000226bd7000fedbdf25030000000800030004020000060007000080000008000200", @ANYRES32=0x0, @ANYBLOB="0a00050000000000000000000a00010000000000000000000a0001000000000000000000060007000100000008000200", @ANYRES32=0x0, @ANYBLOB="04001a"], 0x68}, 0x1, 0x0, 0x0, 0x4044080}, 0x40090) socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0f0026bd7000fcdbdf9907"], 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="7201", @ANYBLOB="13"], 0x1ac}}, 0x4004) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 1m47.941989738s ago: executing program 7 (id=1102): r0 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000240)='/dev/video37\x00', 0x8a240, 0x0) r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv6/conf/virt_wifi0/router_solicitations\x00', 0x101202, 0x0) r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/neigh/virt_wifi0/interval_probe_time_ms\x00', 0x8202, 0x0) sendfile$auto(r2, r1, 0x0, 0x48) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0xfffffffffffffffd, 0x40000008000) open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x8) getcwd$auto(0x0, 0xffffffffffffffff) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/system/cpu/online\x00', 0x800, 0x0) read$auto_tty_fops_tty_io(r3, &(0x7f00000006c0)=""/28, 0x1c) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x5, 0x0) inotify_init1$auto(0x3000000000000) inotify_add_watch$auto(0x4, 0x0, 0x4000e6e) open(&(0x7f00000000c0)='./file0\x00', 0x4242, 0x0) ioctl$auto(r0, 0x5646, r0) 1m47.662730639s ago: executing program 7 (id=1104): openat$auto_tracing_mark_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/tracing/trace_marker\x00', 0x1, 0x0) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) write$auto(0x3, 0x0, 0x7fffffff) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002a40), r0) sendmsg$auto_NFSD_CMD_LISTENER_SET(r0, &(0x7f00000050c0)={0x0, 0x0, &(0x7f0000005080)={&(0x7f0000002a80)={0x1c, r1, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@NFSD_A_SERVER_SOCK_ADDR={0x4}, @NFSD_A_SERVER_SOCK_ADDR={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008050) 1m36.462649105s ago: executing program 6 (id=1138): syz_clone3(&(0x7f0000000640)={0x108000, 0x0, 0x0, 0x0, {0x15}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x101001, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) (async) r1 = socket(0x11, 0x80003, 0x300) (async) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) r2 = open(0x0, 0x261c2, 0x84) (async) close_range$auto(0x2, 0x8000, 0x0) (async) r3 = open(&(0x7f0000000000)='./file0\x00', 0x26dc2, 0x84) (async) io_uring_setup$auto(0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8000, 0x0) socket(0xa, 0x2, 0x88) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000280)={'wg0\x00', 0x0}) bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_5={@target_ifindex=r6, r5, 0x4, 0x401, r1, @relative_id=0x13, 0xe600}, 0xf) (async) bpf$auto(0x2, &(0x7f00000001c0)=@raw_tracepoint={0x5, r3, 0x0, 0x3}, 0xc) (async) bpf$auto(0x2, &(0x7f00000001c0)=@raw_tracepoint={0x5, r2, 0x0, 0x3}, 0xc) (async) bpf$auto(0x2, &(0x7f0000000500)=@bpf_attr_11={0x5, 0x200ffffffff, 0x9, 0x5, 0xf870e9f, 0x7, 0x8}, 0x9) ioctl$auto_UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{0x9, 0xf2cf, 0x8, 0x80}, "6a034a07c7b82d90b69a39e32576f893fba86c9dd051a0094a3836d61c9100fefbbabea6ef9368c7996e841f3f1561d4992f726b0a6c36b0b2fd1678e816201cf562367fe6596824588a2e3d84ba165f", 0xa}) (async) ioctl$auto_UI_DEV_CREATE(r0, 0x5501, 0x0) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000001c0), r7) sendmsg$auto_CTRL_CMD_GETPOLICY(r7, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x20, r8, 0x301, 0x4070bd25, 0x25dfdbff, {}, [@CTRL_ATTR_FAMILY_NAME={0xc, 0x2, 'nl80211\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x30000881}, 0xc040810) syz_genetlink_get_family_id$auto_smbd_genl(&(0x7f0000000000), r7) syz_genetlink_get_family_id$auto_tcp_metrics(&(0x7f0000000040), r7) (async) writev$auto(r0, &(0x7f0000000340)={&(0x7f00000002c0), 0xda7e}, 0x9) 1m35.701207082s ago: executing program 6 (id=1140): r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x1, 0x0) ioctl$auto_SNDCTL_DSP_GETODELAY(r0, 0x80045017, &(0x7f0000000c00)) r1 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) write$auto(0xca, &(0x7f0000000000)='\x04#\x01\n2\x7f\x88\x83\xa9\xd7\xbea\xcd\x00\x00\x00\xef\xabJY\xee,\xf6\x80\xecP\x9f\x00\x00\x00\x00\x00\x00\x00\x80\xe0Z\x1bsZ\xac\xff\x92+\xc9\x9fs\xbf\xd8\f\xf5\xa7jUA\x11\xf9\xb4U\xc5\x92\xf1', 0x82) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="72010000", @ANYBLOB="120027", @ANYBLOB="5de1523353782950330a"], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB='J'], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/net/ip6_flowlabel\x00', 0x400, 0x0) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_DEL_PMK(0xffffffffffffffff, 0x0, 0x800) mmap$auto(0xfffffffffffffffe, 0x40, 0x4000000000df, 0xe31, 0x401, 0x8000) openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000140), 0x8040, 0x0) io_uring_setup$auto(0xc, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x8, 0x1ff, 0x7, 0x1d, 0x4909b6f5, 0x1, 0x7, 0x3, 0x9, 0x5df, 0x3, 0x4, 0x2, 0xb4, 0x9, 0x208, 0x10003, 0x80, 0x3, 0x80, 0xa, 0x22000, 0x200, 0x7, 0x84, 0x0, 0x9, 0xffffffff, 0x0, 0x0, [0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1f, 0x0, 0x2, 0x100000000000, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x6, 0x0, 0x0, 0x200000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000000, 0x8000000000000000]}, 0x3, 0x800d) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00082cbf7000fedbdf25030000000802e700", @ANYRES32=0x0, @ANYBLOB="060007000080000008000400060000000a000500aaaaaaaaaabb00000a00010000000000000000000a0001000180c200000e00000600"], 0x6c}, 0x1, 0x0, 0x0, 0x40080}, 0x6004000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x100) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x4}, 0x6}, 0x3, 0x0) pread64$auto(r2, 0x0, 0x3, 0x9) recvmmsg$auto(r1, &(0x7f0000000100)={{0x0, 0x4, &(0x7f0000000080)={&(0x7f0000000040), 0xcb}, 0x3, 0x0, 0x80000000, 0x6}, 0x9}, 0x7, 0x200, 0x0) openat$auto_vcs_fops_vc_screen(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs1\x00', 0x108002, 0x0) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000480)='/dev/sda1\x00', 0x8800, 0x0) cachestat$auto(r3, &(0x7f0000000640)={0x8, 0x4000000000008}, &(0x7f0000000680)={0x5, 0x100009, 0x384, 0x400, 0x1}, 0x0) 1m34.714444368s ago: executing program 6 (id=1143): write$auto(0xffffffffffffffff, 0x0, 0x599) lstat$auto(0x0, &(0x7f00000003c0)={0x4, 0x9, 0x6, 0x63, 0x0, 0x0, 0x0, 0xac, 0x200, 0x2, 0x40000402, 0x9, 0x9, 0xefffffffffffffff, 0x6, 0x6, 0x200000100103}) mmap$auto(0x0, 0x2020009, 0x2, 0xeb1, 0xfffffffffffffffa, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20104120}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000001}, 0x20000051) r0 = socket(0x29, 0x2, 0x0) r1 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB="5de1"], 0x1ac}}, 0x40000) recvmmsg$auto(r1, &(0x7f0000000040)={{0x0, 0x5, 0x0, 0x5, 0x0, 0x200002, 0x13}, 0x6}, 0xfffffff9, 0x10, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/controlC1\x00', 0x0, 0x0) ioctl$auto(r0, 0x8943, 0x24) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f00000017c0)='/sys/kernel/debug/lru_gen\x00', 0x1, 0x0) writev$auto(0x3, &(0x7f0000000100)={&(0x7f0000000140), 0x7111}, 0x8) 1m34.32331293s ago: executing program 6 (id=1145): r0 = socket(0x1e, 0x1, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) connect$auto(r0, &(0x7f0000000000)=@tipc=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/block/loop6/events_poll_msecs\x00', 0x113602, 0x0) 1m33.968586672s ago: executing program 6 (id=1147): prctl$auto(0x1000000001c, 0x5, 0x8, 0x9, 0x80001) mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) (async) mmap$auto(0x0, 0x9, 0xdf, 0xeb1, 0x1, 0x8000) (async) uname$auto(0x0) (async) r0 = socket(0xa, 0x3, 0x3a) ioctl$auto(r0, 0x890c, 0x1) (async) setreuid$auto(0x0, 0x7) (async) socket(0xa, 0x5, 0x0) (async) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) (async) mincore$auto(0x1000, 0x8001, 0x0) (async) setsockopt$auto(0x3, 0x10000000084, 0x2, 0x0, 0x8) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) (async) fcntl$auto(0x2, 0x40c, 0x7f) (async) read$auto(r0, 0x0, 0x3fd) (async) sendmmsg$auto(0xffffffffffffffff, 0x0, 0x7, 0x4008) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb2, 0xfffffffffffffffa, 0x3) (async) r1 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/oom_adj\x00', 0x3e00, 0x0) read$auto(r1, 0x0, 0x1f40) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r2, &(0x7f0000000200)={0x0, 0x7}, 0x3) mmap$auto(0x8, 0x9, 0x1, 0x80009b72, r2, 0x40) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r3 = socket(0x2b, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @remote}, 0x6a) sendmmsg$auto(r3, &(0x7f0000000000)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xfffffffd}, 0x10001}, 0x5, 0x20000000) (async) sendmsg$auto_SMC_NETLINK_DUMP_UEID(r3, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x18, 0x0, 0x200, 0x70bd2b, 0x25dfdbfb, {}, "c1"}, 0x18}, 0x1, 0x0, 0x0, 0x20004040}, 0x4004041) (async) openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, 0x0, 0x189002, 0x0) (async) unshare$auto(0x8000000) 1m32.808403586s ago: executing program 6 (id=1152): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x1c0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000100)={0x24, r2, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NFSD_A_SERVER_THREADS={0x8, 0x1, 0x4a}, @NFSD_A_SERVER_GRACETIME={0x8, 0x2, 0x9}]}, 0x24}}, 0x4000) mmap$auto(0x0, 0x2020006, 0x6, 0xdfbe, 0xfffffffffffffffa, 0x80008000) r3 = clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) io_uring_setup$auto(0xd66, &(0x7f0000000040)={0x8, 0xaa4, 0x3, 0x6, 0xff, 0x29, r0, [0x0, 0x5, 0x18], {0x639, 0xb766, 0x100, 0x6, 0x6, 0x80000001, 0xfffffffb, 0x3469, 0xd}, {0x80000000, 0xa817, 0xfffff77b, 0x1, 0x9, 0x5, 0xfff, 0x4, 0xff}}) tkill$auto(r3, 0x5) 1m31.981294942s ago: executing program 36 (id=1104): openat$auto_tracing_mark_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/tracing/trace_marker\x00', 0x1, 0x0) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) write$auto(0x3, 0x0, 0x7fffffff) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002a40), r0) sendmsg$auto_NFSD_CMD_LISTENER_SET(r0, &(0x7f00000050c0)={0x0, 0x0, &(0x7f0000005080)={&(0x7f0000002a80)={0x1c, r1, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@NFSD_A_SERVER_SOCK_ADDR={0x4}, @NFSD_A_SERVER_SOCK_ADDR={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008050) 1m17.68189277s ago: executing program 37 (id=1152): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x1c0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000100)={0x24, r2, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NFSD_A_SERVER_THREADS={0x8, 0x1, 0x4a}, @NFSD_A_SERVER_GRACETIME={0x8, 0x2, 0x9}]}, 0x24}}, 0x4000) mmap$auto(0x0, 0x2020006, 0x6, 0xdfbe, 0xfffffffffffffffa, 0x80008000) r3 = clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) io_uring_setup$auto(0xd66, &(0x7f0000000040)={0x8, 0xaa4, 0x3, 0x6, 0xff, 0x29, r0, [0x0, 0x5, 0x18], {0x639, 0xb766, 0x100, 0x6, 0x6, 0x80000001, 0xfffffffb, 0x3469, 0xd}, {0x80000000, 0xa817, 0xfffff77b, 0x1, 0x9, 0x5, 0xfff, 0x4, 0xff}}) tkill$auto(r3, 0x5) 23.133375048s ago: executing program 8 (id=1363): r0 = socket(0xa, 0x3, 0x3a) bind$auto(r0, &(0x7f0000000040)=@generic={0xa, "2c55000000ac5600"}, 0x66) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000900)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES32=r0, @ANYBLOB="000226bd7000fedbdf25030000000800030004020000060007000080000008000200", @ANYRESDEC=r0, @ANYRESHEX=0x0, @ANYRES64=r0, @ANYRES64=r0], 0x68}, 0x1, 0x0, 0x0, 0x4044080}, 0x40090) r1 = socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) r2 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000040), r1) r3 = waitid$auto_P_PIDFD(0x3, 0xffffffffffffffff, &(0x7f0000000300)={@siginfo_0_0={0x7fff, 0xaf9, 0x1, @_timer={0xffffffffffffffff, 0x5, @sival_int=0x8001, 0x4}}}, 0x4, &(0x7f0000000380)={{0x2, 0x2}, {0x2, 0x1}, 0xb, 0x8, 0x8000000000000001, 0x3, 0xfffffffffffffffe, 0x1, 0x5, 0x9, 0x7, 0x1, 0xa2b, 0x3d800000000, 0x3, 0x1}) r4 = getsid$auto(0xffffffffffffffff) sendmsg$auto_NL802154_CMD_LIST_ASSOCIATIONS(r1, &(0x7f0000000840)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f0000001c80)=ANY=[@ANYBLOB="fc030000", @ANYRES16=r2, @ANYBLOB="dc7c29bd7000fddbdf252b0000000500110005000000050010007f00000008000100020000000a0002005e2d2d2824000000b4032b80100050800400f38004004d8004008380fe00168008002500", @ANYRES32=r3, @ANYBLOB="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", @ANYRES32=r4, @ANYBLOB="393fba6a98bba29859be765addf3d1e27639f8d7e112441d25a768cb11d3dda8285d971fe2cae8863327198a0c5aa4a88d896b8483379cdec6e942448f210536db0c6b09b35e77e56820a7458d25248f922328a51384c9ed0cdc146158ff38209586a19616c259fddaea63"], 0x3fc}, 0x1, 0x0, 0x0, 0x40895}, 0x8040) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0f0026bd7000fcdbdf9907"], 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4042080}, 0x4004) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) socket(0x2, 0x2, 0x0) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) r5 = openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000000), 0xc0040, 0x0) ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x9, 0x2, 0x1d2c, 0x3, 0x4, 0x15f4da0e, 0x6, 0x9, 0x100000000000000c, 0x8, 0x4, 0xfca, 0x9, 0x2, 0x4000000000000d]}, 0x0) msgctl$auto_MSG_STAT(0xfffffff8, 0xb, &(0x7f0000000180)={{0x5, 0xee01, 0x0, 0x9, 0xa31, 0xa, 0x7}, &(0x7f00000000c0)=0x4c, &(0x7f0000000100)=0x7, 0xfffffffffffffff7, 0xffffffffffffff13, 0x7fff, 0x1, 0xc5f, 0x90c0, 0x8000, 0x0, @raw=0x8, @raw=0x3}) sendmsg$auto_TIPC_NL_NET_GET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16, @ANYBLOB="00012abd7000ffdbdf250e00000024000180080062000600000008003700", @ANYRES32=r6, @ANYBLOB="08001b00070000000800d100", @ANYRES32, @ANYBLOB="f41053f01b963556ba230c5afd906a03cfe79de2a94ba22fdbb0f5ca8c8366396688d0dc59283c4b3fe0d98aa730ed072f68f46311a380078fb1969785dcdffdc94d56317c785a58b3d80061166eeedb9aff7797427e"], 0x38}, 0x1, 0x0, 0x0, 0x20008090}, 0x814) sendmsg$auto_TIPC_NL_MEDIA_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)={0x14, 0x0, 0x701, 0x70bd29, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x10) r7 = setfsuid$auto(0xee00) setreuid$auto(r7, 0x0) sendmsg$auto_TIPC_NL_BEARER_DISABLE(0xffffffffffffffff, &(0x7f0000001c40)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000980)={0x12bc, 0x0, 0xa00, 0x70bd2b, 0x25dfdbff, {}, [@TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@nested={0x16, 0xd0, 0x0, 0x1, [@generic="9738304185f66ae095ee", @typed={0x8, 0x2a, 0x0, 0x0, @u32=0x9}]}]}, @TIPC_NLA_NET={0x128c, 0x7, 0x0, 0x1, [@nested={0xd8, 0x126, 0x0, 0x1, [@generic="45bb3b3d10dd8619ec19b6f307b9df7890c3d9d116ec3ae4dfab05ed8ad86717e6be1f8d29bebd19d1a058f107bdba82c40a96dbc137dba0ef2a9784209f74d8bcc1ed33b05c40125afdd7d47d0b88d4345d6f8f099f6472e518fcb353c85ae14b17e2987aba5e4844e9fe9b5a59aa381fe4e3fb496afe512226e08e75e9492938c8e937709ee86536d9d82596780f820cb65a9f72345787de935ed012ce5cacd58d1083932bb1401e6563398d29e19670ed06a48e1a2847139cf536f3da7beade39daa6d9782b4eb3a08005", @nested={0x4, 0x12e}, @generic, @nested={0x4, 0x124}]}, @typed={0xc, 0x33, 0x0, 0x0, @u64=0x8}, @typed={0xc, 0x23, 0x0, 0x0, @u64=0xa1}, @generic="96a86e52e8b6b11ca63deb94c8d6e836aab2cbce250e48ddf95b176cba706b85e65198411b34e0e7fef6ab65241375c53a7b5fecc4d9df411905677d0e0d055220613a2c37cdea1bdda61a015d69a5ec9b5e401701c62130b5c6ae681304ca075ba222da0f6e5229e16c912f0eb8e93ef0bd853ee41f0e4bd7b83797bd3d42271cb14b65eb073a7da4d0c252f5256c33c320b8d883364b747e965ac875f7bd7e117cdd342c510bafa60fa3befc54941da87d1da8d7313e8699484fd3bbcf1d7ff3e4bf0ccef63b846132ac2be2684a3a86f89739a9d3eb459573ff52b0201eefc48038ac65cb5a3cc60d0cb3e7a0236790d4b8f125550b60ca59f270b924a8f0570b1190c015346de7f0ab740d4e80bd78ee535ef2421b44cb276ea1e9eeefd64042ebfc0fab05b3be8e49819e6554fda5001f5b40e33bb15228de78dec7f53cb3d9862adf82233a0918b5d97487d94a0e5c9e4b0abee7d735949a22bb3ce136b0742f56033caa00dbbbb438417a1bb0c57a304b99cd8723ca3a5e98edc83bad4987984675c0c0fd766f3c58373215fee90ae4fbc12c1a957b7ca4405e7ef9a09032afc278e7a8318c7b4aad91d0d90995f31558ee8b995099a4aafd18a78db3018c786613d68260ad79d6c5bd05f85548dc1b2fabb75b725e395842a4f2eb56f0e197096d015bcad8f44412210cccf47cd403ccd8170b78a22a4799ddc83693549678460b4e9c1ffcbf90e64b340f862a31b2eb08ec63e70d68f514aa13ae071db73b70264eff0d59bfb3d61de59e9522ec66bb904f468eea0ea4f663c0718efc9ac7df7f2d16dbab295ac50b3c0807d3194ce658bf6fca83c928f25d102170f37caf8701bbda8e15202862f9a3738ce97c4255654c1aa35bf3276ea9acff02025dbb4b7f79b4851a75a082ab628e7528a8745c205501d902ddec4b653c84366023371cc9ab48f83c967e01a9046b95ffd04ab18899185ef83be35db15bd734abb7ce25c640b47bbc2ad3b9b601e67e7186ca5d8621225a18e4119302ff2c150793410736e6350042218c4e681025ae77a9b91b3fb975d96133bdb90ade8ade705a09301de4c6b18745e944ee72e6de10723f50784ad535674c924cb568b4036be93e81e24471c51aba94d77df44d35ffb4f0e54412939481591264f63bd562165b99cc86ea8c0d9cf6c28c9686270263b48bed348a8ee0359e9a14eab42d5f12e5aa0dfc8c2c57ba2f3d3541ddce9a5e46daa1c91d00a6b583c21250e87ab4ced57852006affd832a575c6d3fda9a50222b8fb2eba2b07adf9ee7e4aa19e414fafd354df448f0bf2b8b760d33e879392fe6e41dab0837e8cd6b83a3e8a3b1c092e274eed3399f419ac7424d7cd0c9daedc0367f24d647fb51ac2c181f2ae2f0509cd401d461f98ca553c48c518fe1520ec8e0334517cb07de761ebcc62b1b5e1276c3103e8ea0254abe14e8ae3e820d186b2f7bcb7346055324301eb7b26e86a89d95226fbab82af3e124f51aebefce08618ea383eb6d0ff73fd39c9684b3e1697be5ee69fdd6c88c56b3470c32f51371a2872e491632e38e3909f54cc197c98dbfb973bd1a98ba0c584e549f93b5790c5d0b3f960743abfaf43e848efe5ec519ab701f0c82a59666959dff7ef7d9ca1359108a147f9eae7d79bd887458ca53fca0138294596d63108befabb52a8725b9b962b134f0e13d41aaa1571f5ae7a0f41856ffdb43e989fb539b1ddb21725984c838d9a07d7f5e7411b1dd0d7d00efa6a2783e0a7d37ff5559c6e230f68d7d87966ee951f1f2276b6a1a2854a4e5f38570858af7d49b846fce90af037f7b0862bd8f5cb1b46e23d370892aa611894d89fab78387132f08a29ebfa02d1fa976f35e75f734855c467c0d1154f7dc4c590228e4fd16d3ef9f18cc1654aef17c2e8d0b3fd175b783e9f457e7513fba1a0ac404a4556aa43ea7421287e113bab2aefd82c73e2110610d833123a4efdfda640ce46b2f76a258ef55487c1dc9625e5a0427ffb14835cabb278ce501bcc5193f83b0217f32e5495e0a963325eaf47ef5acbb736c2b726cb75cc1ca8aee8b1bb5706a892b83fa6c842124febf3408f0cc1eae34f8cfd5af41c61c78a995767e6fa119e84f89ae00a9b5c07ee1a797cd330b366553d0cae8078e3d4e60fc251b787abcd4632252b11da2e1774e00cdde15ea799e20832fcd68ffe3628952b5401dfad79c629650f5f8fb15ce060b6fec770db079dc69cf0e70b4cea6dedb10100a03c7504a592e11f19a409972d4e93e4b21f25c3a04d1ebce053778ec8fba4f8ea5502b7e6025dcdea80940959fb1b73265f3806fc8a0a991db72213fa372316b4c82a536e8d94b54eea8363e80cfadd2d58b97ef0ae3b2402f28d512927d53b7d5ea1659af1f0e5701dac3e134a1e89ae20ade6a9565d8d797148b8ff782be0cb5563f3076b43c691f9b165a2e940428027b9a2f22c7a667886fa98dbd82ce1a678ecd317b756c15e7541bf7917f4081c8b193fccf184c7e137348e34a61fbc9d32eb8f9ad4e3e08937dd9038b734ad531dd7e1954138002c854389698f87ed23e416979747cb9b8bc9b014dbad51ec4d633b14cd005af7a1aace2cb730c5f931975ee844991be53da8ba0e7d5589da7a072b0b24c5b457d6bb468ee27badcc3cba77d441e90664b8ca5d68c6c0ac2a24c24acdd32ce59b04f2133e6a718ff413d2d870782f7b95c209b225e5f5cf924c9b279e9cc451fb7620ffd2e1acd28affbca88aec2fa82cb0c357d74040eabe0c305cb9c11230902bef93bf3ab5eacbcaf8660391ed41d1aea1f05af3aba31bb8f7c945040e7c1bf9a333ff639f8f8011c6dab10d17bb6fbaff47d72e01becd2326730057746209392cc65c8bcbabed441fa30d6e218765704469933e7b967a875469ad47c1a058aca5df8c78ea738bb3fcaf90203b0a7b137c7136c9f99c48d80633a394f23ce7fd5353496b42934bfdebe733aead0af653a899e9a63404f5ad98ed9cf4f31a94c8128ecad1cf0c1086474d5d3150d78f86ee2f279ac05d0b73d69d80073dbf9663eef2f3941ac18cd89e897332e38c744c61d274f4693800cf1a6f9e0d681786e1ad779fd7e7f56fcfc1a0cd317ee36b9f7fb82d21749184a9257f48d70beb887f285220d3e439d5130ee742bb1fdf1a11bff8ecbb5528112a02ff628d9c865f89d1b5eb9216c158e3e24b37d298c3cb057c071c0c5e7dbdd9ca45ca60483bbd61475171ff043d3b2bc48b0df24759d326e66bd9a7aa55590df1064d63cbae01d6b9fc680b695b61d0ea4771198a8731525d0b8276b82cf4b36d9ea1bd9ba283020d144c0ff6da43c1c4da4a5aebb39a5d3e12cd60604bafd7172bb4253275ec2d8837cd90c6f0a12898278771d7d3a3cba6a2c782057c602d5e28e29f6a500414c97799b721ad80ef896d34c7d2d84b5f1302cda0e5070eef13b357748dda2d1e1a8e8aa5b9626a972e02b438294d552e9cbcf5f460c16f77facdc592e6d6ba26e60e9ba8ce40cd3f21fac032de70a453dd9018e0800e5e985ddcba6fa1bae40d24fd635e4a493be302737791083149683bf69be061a90df30a81e7fc23933aeb054fe8c8dee97d79815432fa0875ec81b91f91b2eac2496b887d4d2023d784c3baa6a58f92751f5273f4973aa59c5ca3c714f014af841359992f4c7f95a681d5865d6f2205393dbb8d1eabb9780b5c824ae5434ecdc3fd6934c532bebcf4edc7239b9e990c4d8fce7a2499d5ac98e530961b7548264178f691466f4811307f49ab331bb2f591305cdcee491ea9e5638085004092546a8687232d022703bad59eb35d6e10343004fad74661057e832dd6b70334bfa9af100284cbf6a852bd1667bd668dc4017047b7c458fe156a755ca8560ea95b05dab4a3dca101fef274d39245d12432a20ce7fd21d00e9dfc150645e099f2cd964a195653a180e0a98f13f6e0dbcd82d5d178cf94d7b266df8e33baa432715c596393a2f8ca2c3de691f414d3daf275ecbfd55753ca396c003ee844bca661fab8a39f2252d68234c004262d58b2a606d50768f6a5d102e44360acfedca269cd9fc3120801587ef4f5366da4d4bbe4478b08eec2f542b87918901bd332fd4348ee655b80d4c7886583ae6f9f2dff27dfa48811623e0360fad04283dd542da9d4deea449dfa7eabe5c02de87195d20f376c972b4a616d87edda9e1714b180becf5be3081c258b6b947a6bb0b60e8593fbb04bd8a82a0c3cce7bf689bd0a85e89341629ea5e0a6f768656e8a251ff0c5cb0986ca3e111169d4d73ed3e79513710939b1fbfab078449c782a3421d36a3eac3001e2485807d9aa2dfebeafb3d5cf2e434448729d596a983c9ab51ac83fdb409d27a3b49cb9fc0aae8ae4d2a5ebba72844a5732340e3ada26e54b0d412004ac44f387a195ca688b66096c6124f39208afe3fb72788ccd25787d4cb14ec46b48b61c3c935c33528769e1b727c3656ece09d47476404363db519d53d579d78cd5bd0eb7ce756c012d02e05136b31e13d664b7e1aa928a82f6a05217093ac44faf0d1ca5d2bca63824f11caf3256d820dcfa6a01600f932c44e1c7653ab04f19ca1ceab28240bf60182c609c47d183cdba3c28426aef99554dfffb4034f02637de2571be7b942ac4a14ec9ee102560821a358f0ded6b13386c8eaddc86440423a63a3eabd241127dc31fa601ec250829e75c400467134faf2c6744657b154199d19f8bfb0dcb9c6fd40e98420b29719ae11a51cb80559db8ef7e811d2aa3c91e5d7f6c48790342ac36f02d2b2ca634ed9bf75e4ada4216aa111a79004d3df27668da28b38f4a2af2adb4ac37f1e4bf21c5ac49bf345d887139185df68a01b5db5a8edf2cc8417aaf641a3ae10f7bdbd244795d300aa5f7a1c231280ea9e85a24e9ddccae867b946fc6564c50f4aca491ef722024a62b3b9a2d5a5ec183ee3b20abe5e82df7a3c80d45d4fc9b9838f3970830776b874ac924e4c69bffc946f86372424d8b806d4f94259082d895629afa16c86a0fb8fa400f85ce363a83e23597efb161d96e5bf200130ba6c18e0702d37f8a425ad15eada6f72ed05c0f71b904d93334e92e734f1e2b23f1017001fed5da333d30dbb3c305d54398bd62fbee3ca467e58fdc91be728f2d5268b23d15d3580e7a66f8f148df2460244efe96e5e11d9dd9a6a2e11cc0d80fd928b4220d20b9ac239b50e9b5c32f4769c60030c0ffbeec4ffd5bee5a931fc3fc309b76bc2860a5e61160d67b54d649664823308087173800fec6d40d8307cb9e8a339d7b63d4ccd83f261349bae843a3fe9fb818ed480caeb381da7ec2030f118584e95c0a2a805a5f6e3a06a35fe328d1156fc4c95516e846e0f34cf626c518d2b3e85acec72a24f81e0bf0453478a88c1359b24908336d3ccb5f326400a27e69915c0311915ab3c1e9028836e2db71e072dd21cdf0693cc59b90bec5d357ca182d923f734002759ed8c8c89d1d266325f29639dcfa4cf2b8c5057865549e31a9e3c37e09723374d3fbefca2b003c09d8adb661bb0d96ba4da70a6f0cffcb61117407c0cd3d5ea140baf29148281c75553ef5bbdebf45a83066ec588ad2c78a75ef71cba11a10b7cf53f9a64912a1e026d3659519a7cced5f15a383b245037492ef581d1b7e7682da41dc7e1e9d80ccebc72513e33efc80688a5106f66e947b94e35ed9dd9991cbe3110a4cb7da61059c863ac4b79809ac22a1e8ea6bbe9ac5384df0420942b247f2ebd8950e284ed3c1ba0d0c43ac94d8ab", @typed={0x14, 0x86, 0x0, 0x0, @ipv6=@private2={0xfc, 0x2, '\x00', 0x1}}, @nested={0xc8, 0x12c, 0x0, 0x1, [@nested={0x4, 0x1c}, @typed={0x8, 0x1c, 0x0, 0x0, @uid=r7}, @nested={0x4, 0xe8}, @typed={0x8, 0x62, 0x0, 0x0, @ipv4=@multicast1}, @nested={0x4, 0x53}, @generic="6699e4f9af4fe7755fc089402a0053ef71428fda80331f5e132c5394b260134bbcddcfdfaec94d1a21e16874f7e541c8514d0a8d7d7075d84efdc3c43c15bbd611f94185ce69df2a9edb8e14a364a8bd65993c9f5b3f262179e30d1920d033862ab6aae237ec984eea08a932abca62542f81aa397a0cb2044e88e69a3331dc8cb6a6a60b665d63c65a51a77ff44d559e620d004b", @typed={0x14, 0x2f, 0x0, 0x0, @ipv6=@local}]}, @nested={0xbb, 0x83, 0x0, 0x1, [@typed={0x8, 0x72, 0x0, 0x0, @u32=0xe08}, @generic="92fbc9fddcd5e00a039b9f4f0c091b2d87c718e9077ccacaea51578259dc903c60afeacd3024e508b40c440d1b2d7ab16e2a410196d80a65498c9c2fc2c54fa504a364d7702340f2a78a4dba3f99a4c40f717e77e3c43a59d82fbc4d1e16faa40a769657840c1de12dde83461a4868e54f6298705bf97b19e2997b1b1bd497135356ef", @typed={0x2b, 0xcc, 0x0, 0x0, @binary="c2eb505fe8f35c4349bc3de8c45043d9bfa8db3af64f7c551d8ed8af2719dabe1154d5d92b53f4"}]}]}]}, 0x12bc}, 0x1, 0x0, 0x0, 0xc080}, 0x4000) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) close_range$auto(0x2, 0xa, 0x0) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 22.017697834s ago: executing program 8 (id=1365): mmap$auto(0x0, 0x2a, 0xdf, 0x9b72, 0x1000, 0x28000) close_range$auto(0xffffffffffffffff, 0x8, 0x0) r0 = socket(0x2, 0x2, 0x73) socket(0xa, 0x4, 0x81) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_severities_coverage_fops_severity(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) socketpair$auto(0xfffffffd, 0x5, 0xffffffff, 0x0) unshare$auto(0x40000080) setsockopt$auto(0x3, 0x10000000084, 0x7b, 0x0, 0xd) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram5\x00', 0x14fa02, 0x0) mmap$auto(0x0, 0x810004, 0x400000000ffb, 0x8000000008011, 0x3, 0x8000) r1 = fsopen$auto(0x0, 0x1) fsconfig$auto(r1, 0x8, 0x0, 0x0, 0x0) ioctl$auto_SNDRV_PCM_IOCTL_HW_PARAMS_OLD2(r1, 0xc1004111, &(0x7f0000000200)={0x3, [0x100008, 0x1, 0x7], [{0xe8, 0x9, 0x1, 0x1}, {0x10, 0x200, 0x0, 0x0, 0x1}, {0x4, 0x2}, {0x5, 0x6, 0x0, 0x1, 0x0, 0x1}, {0x9, 0x95e5, 0x1, 0x1, 0x1, 0x1}, {0x4, 0x3, 0x1, 0x0, 0x1}, {0x3, 0x12, 0x1, 0x0, 0x1, 0x1}, {0x2, 0x2, 0x1, 0x1, 0x0, 0x1}, {0x2, 0x6, 0x1, 0x1, 0x1}, {0xf8, 0xe1f, 0x0, 0x1, 0x1}, {0x3, 0x427e291d, 0x1, 0x0, 0x1, 0x1}, {0x59, 0x80, 0x1}], 0xf, 0x8, 0xe, 0x3ff, 0xfffffffa, 0x5, 0x1000, "5b7bbfcda08c57f1263f8e8d7091025e1d5c5b730a196c63a14d9fe2d760aba107d698025f95eec57b64a5b7622a07b35967357d970e221974fd17c2eaaef11a"}) r2 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x82000, 0x0) openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = ioctl$auto_TIOCGPTPEER2(0xffffffffffffffff, 0x5441, 0x0) fadvise64$auto_POSIX_FADV_NOREUSE(r3, 0x6, 0x4, 0x5) r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/scsi/sg/def_reserved_size\x00', 0x402, 0x0) write$auto(r4, &(0x7f0000000500)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x9f\xe2\xc7cOM\xb6\xa3,!oc.\xe7\x1d$\x9a`\xd8/g\xd3\x1a\xcd\x8e\x1d\xbb\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94&\x81\xe2\x13\x8f\xea#\xf8F\xa9O\x00\x00\x00\x00\xabxo\xd9\x90\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xb6\xb0N\x99\x04z\xd0I>\x8f\x00\xe5\x1c*\xedE\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xa3\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xcbA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xa5\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\xac\x92\x7f]|\x04\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x85R\x96\xa6\x89\xdd\xce\xab\xd5\xe4+\xeaF\x06Y\xe9\xa1`\xb1\x8d\x85\xe0w+\x1e\x8b+\xd67IH\xff\x80N\xd1E8\xb7\xff\xa7\xff\x80\xd0y\x0f\x1d(!\x99\xab\xdf\x01\x00\x00\x00\x00\x00\x00\x00\xcdd\x87\x06\xfbK\xb9/\x19\xe5\x8b\x10P\xe7i8\xbe', 0x7) getsockopt$auto_SO_RCVPRIORITY(0xffffffffffffffff, 0xa, 0x52, &(0x7f00000000c0)='\x1bs\xc3\x04\x00\a\x00\x00\x00Uu\xa1\x00\x00\x00\x00dev/', 0x0) setresuid$auto(0x0, 0x0, 0x0) sendmsg$auto_NL80211_CMD_GET_STATION(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000440)={&(0x7f0000000640)=ANY=[@ANYBLOB='|\a\x00\x00', @ANYRES16=0x0, @ANYBLOB="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", @ANYRES32=r2, @ANYRESOCT=r0, @ANYRES32, @ANYBLOB="ff00598008000f32", @ANYRES32=0x0, @ANYBLOB="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"], 0x77c}, 0x1, 0x0, 0x0, 0x805}, 0x2000c080) openat$auto_evm_xattr_ops_evm_secfs(0xffffffffffffff9c, &(0x7f0000000140), 0x189000, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto_PR_SET_MM_START_STACK(0x80000004, 0x5, 0x0, 0x0, 0x1) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) 21.045064743s ago: executing program 8 (id=1371): mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) r0 = setfsuid$auto(0x0) setreuid$auto(r0, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000540)='/dev/snd/midiC2D0\x00', 0x22142, 0x0) (async) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000540)='/dev/snd/midiC2D0\x00', 0x22142, 0x0) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r3 = openat$auto_drm_debugfs_entry_fops_drm_debugfs(0xffffffffffffff9c, 0x0, 0x2000, 0x0) lseek$auto(r3, 0x9, 0x0) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) (async) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) fsconfig$auto(0xffffffffffffffff, 0x9, 0x0, 0x0, 0x0) (async) fsconfig$auto(0xffffffffffffffff, 0x9, 0x0, 0x0, 0x0) read$auto_cgwb_debug_stats_fops_(r2, 0x0, 0x0) (async) read$auto_cgwb_debug_stats_fops_(r2, 0x0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f00000000c0)=""/255, 0xff) (async) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f00000000c0)=""/255, 0xff) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_smc_pnetid(&(0x7f0000001f00), 0xffffffffffffffff) madvise$auto(0x0, 0xffffffffffff0101, 0x15) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dmmidi2\x00', 0x24380, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x28, 0x1, 0x0) connect$auto(0x3, &(0x7f00000000c0)=@vsock={0x28, 0x0, 0x0, @my=0x1}, 0x55) (async) connect$auto(0x3, &(0x7f00000000c0)=@vsock={0x28, 0x0, 0x0, @my=0x1}, 0x55) ioctl$auto(0x3, 0x541b, 0x74) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) (async) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) openat$auto_rfkill_fops_core(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0) sendmsg$auto_NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8080}, 0x0) (async) sendmsg$auto_NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8080}, 0x0) writev$auto(0xffffffffffffffff, 0x0, 0x1) ioctl$auto(r1, 0x4, r3) close_range$auto(0x0, 0xfffffffffffff000, 0x0) sendmsg$auto_L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f0000004fc0)={0x0, 0x0, &(0x7f0000004f80)={&(0x7f0000004f00)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="010026bd"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x40) 20.570094918s ago: executing program 9 (id=1372): mkdir$auto(&(0x7f00000001c0)='./file0\x00', 0x0) ioctl$auto_SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000000)) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket(0x2, 0x1, 0x106) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) recvmmsg$auto(0x3, 0x0, 0x10000, 0x1a000000, 0x0) unlink$auto(&(0x7f0000000080)='./file0\x00') mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r1 = socket(0x2b, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @remote}, 0x6a) sendmmsg$auto(r1, &(0x7f0000000000)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xfffffffd}, 0x10001}, 0x5, 0x20000000) socket(0x2, 0x1, 0x0) ioctl$auto_RTC_IRQP_READ(0xffffffffffffffff, 0x8008700b, 0x0) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) write$auto(0x3, 0x0, 0x7fffffff) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) mmap$auto(0x0, 0x77, 0x0, 0xfffffffffffffffa, 0xffffffffffffffff, 0x8000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) write$auto(0x3, 0x0, 0x7fffffff) openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) preadv$auto(0x40000000000003, &(0x7f0000000080)={0x0, 0xfffffffd}, 0x6, 0x8, 0x5) socket(0x2b, 0x1, 0x1) r2 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x80080, 0x0) ioctl$auto_PPPIOCSMRU(r2, 0xc004743e, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) munmap$auto(0x8000, 0xffffffff) 19.596185647s ago: executing program 8 (id=1376): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0x203, 0x0) mmap$auto(0x0, 0x2000d, 0x4000000000df, 0xeb1, 0x404, 0x8000) ioctl$auto_SNDCTL_SEQ_NRSYNTHS(r0, 0x8004510a, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) move_pages$auto(0xffffffffffffffff, 0x20007, 0x0, 0x0, 0x0, 0x8000000000000000) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000140)={{&(0x7f0000000080)="738a311de8c0ccee95bfb406c51d8b545f30546247dcad05c3fecaf03e037a09a3ebfcc6893d59a2e1ae96463bfc6e8a2398ecb8fb35bd157c93e65134", 0x12, 0x0, 0x9, 0x0, 0xd42, 0xb}, 0x800009}, 0x80000001, 0x20000000) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) rseq$auto(&(0x7f00000001c0)={0xe, 0x20401, 0x5fc, 0x10000006, 0xffffffff, 0x6}, 0x8000, 0x0, 0x6) mmap$auto(0x0, 0x2020007, 0xffffffffffffffff, 0xeb1, 0xffffffffffffffff, 0x8000) open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x84) socket(0x2, 0x3, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket(0x22, 0x800, 0x4) fallocate$auto(0x8000000000000003, 0x0, 0xd, 0xcbd5d) sendfile$auto(0x6, 0x3, 0x0, 0x20000fffffdef) syncfs$auto(0xffffffffffffffff) mmap$auto(0xfffffffffffffffd, 0x2020009, 0x6, 0xeb1, 0xfffffffffffffffa, 0x7) madvise$auto(0x4, 0xffffffffffff0005, 0x17) prctl$auto(0x23, 0x8, 0x2008, 0x0, 0x0) setgroups$auto(0xe32, 0x0) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0xb74, 0x66a) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xd7}, 0x7) write$auto(0xffffffffffffffff, 0x0, 0x100000a3d9) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) r1 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/controlC1\x00', 0x2000, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_READ(r1, 0xc4c85512, &(0x7f00000002c0)={{@raw=0x7, 0x8, 0x4, 0xa2, "c6e47a44a36664a5e709f0e4c97056bc9fa32c617bb88dc98fa7591aefc4647f5af349f8e1e79c823b22958f"}, 0x1, @enumerated=@item=[0x0, 0x3, 0x1, 0xb, 0x6, 0x8001, 0x10, 0x6, 0x10001, 0xefe, 0xfffffff9, 0x5, 0x8001, 0x62f, 0x101, 0x4, 0x200, 0xfffffff0, 0x1000, 0x7, 0x3, 0x3, 0x0, 0x6, 0xb94, 0x0, 0x1, 0x7, 0x3, 0xe8, 0x4, 0x0, 0x9, 0x46f, 0x8, 0x1, 0x6, 0x4, 0x6, 0x8, 0x80, 0x9, 0x65b, 0x9, 0x7, 0x81, 0x1ce8, 0x9, 0x34b5, 0xfff, 0x5, 0x4, 0x2, 0x1000, 0x9, 0x0, 0x400, 0xd, 0x0, 0x0, 0x207d, 0xa7a, 0x5, 0x5, 0x4, 0x80, 0x6ed, 0x0, 0x1, 0x1, 0x6, 0x4, 0x8, 0x1, 0x4003ff, 0x5, 0x8, 0x6, 0x0, 0xa, 0x2, 0x5, 0x400, 0x6, 0x4, 0x9, 0x29, 0x8, 0x30971ad3, 0x9, 0x78d, 0x7f, 0x0, 0x8001, 0x20000, 0x40, 0x0, 0x14, 0x5, 0xfffff43e, 0x0, 0x4f000, 0xfe, 0x5, 0x7, 0xd49e923b, 0x4, 0x80000000, 0x77, 0xfa, 0x0, 0x7fffffff, 0x7f77, 0x9, 0x5b, 0x8, 0x10001, 0x8, 0x0, 0xc2, 0x80000000, 0x5, 0x1000, 0x1, 0x7, 0x400, 0x8, 0x3], "4570dcfd140074f863fc1385c4fd7abe6fce96c0b442897f58fd7d975d164deff4eef5b9f9173fa400163669eae95125d4bd68ca54ca1b0aefb60ffa8d501b1329af8d4108ac145aa564c6e7a09ea1b2dfae0f309c6ea508833d7d134b13d8cb3ef95bf5ed43801c280c02a5a853512e6f730d43226f00af1c5ac268ecc1d18f"}) setsockopt$auto(0x3, 0x1, 0x1d, 0x0, 0x9) openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f0000000100)={0x20041, 0x9, 0x2}, 0x18) socket(0x2, 0x1, 0x106) 17.947994184s ago: executing program 9 (id=1377): r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x80e42, 0x0) ioctl$auto_SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000080)) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) unshare$auto(0x40000080) close_range$auto(0x0, 0x5, 0x0) connect$auto(0x3, 0x0, 0x58) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x20009, 0x4, 0xeb1, 0xffffffffffffffff, 0x7f) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/fail-nth\x00', 0x140242, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/virtual/block/ram13/queue/dax\x00', 0x181000, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x0) mmap$auto(0x0, 0x9, 0x2, 0xeb1, 0x40000000000a5, 0x8000) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) futex$auto(0x0, 0x85, 0x8, 0x0, 0x0, 0x80800002) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x28, 0x1, 0x0) connect$auto(0x3, &(0x7f00000000c0)=@vsock={0x28, 0x0, 0x2710, @hyper}, 0x55) ioctl$auto(0x3, 0x800005411, 0x38) r2 = openat$auto_ubi_ctrl_cdev_operations_ubi(0xffffffffffffff9c, &(0x7f0000000180), 0x40900, 0x0) ioctl$auto_UBI_IOCATT(r2, 0x40186f40, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) pivot_root$auto(0x0, 0x0) r3 = open(0x0, 0x76bd, 0x12) sendfile$auto(r3, r1, &(0x7f0000000000)=0x6fe7, 0x9) kexec_load$auto(0x9, 0x0, 0x0, 0x1003e0000) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0x2000040080000000, 0xe) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) 16.868283465s ago: executing program 8 (id=1381): mmap$auto(0x5, 0x8, 0x4000000000e3, 0x800000000000017, 0x401, 0x5) r0 = socket(0x11, 0x5, 0x1) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, 0x0, 0x40000, 0x0) openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, 0x0, 0x191000, 0x0) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f0000000040)='}[,&*}\x00', &(0x7f0000000080)='nfsd\x00', 0x3, 0x0) rename$auto(&(0x7f0000000140)='}[,&*}\x00', &(0x7f0000000180)='./file0\x00') mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa}, 0x55) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)={0x3c, r1, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, "5256441b633b87bba3bd6e38e194879ade12e8512ef3ab6a65fae7f2ee80ef36de7ef6f3"}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x40004) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self/net/dev_snmp6/veth0_virt_wifi\x00', 0x200000, 0x0) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) close_range$auto(0x2, 0x8, 0x0) sendfile$auto(r2, 0x3, 0x0, 0xc3e0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS1\x00', 0x20000, 0x0) connect$auto(r0, &(0x7f00000000c0)=@phonet={0x23, 0x40, 0x57, 0x1}, 0x2e) mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/smaps_rollup\x00', 0x40000, 0x0) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0xb74, 0x66a) madvise$auto(0x0, 0xffffffffffff0001, 0x15) 16.336766338s ago: executing program 9 (id=1383): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/net/ip6_vti0/statistics/multicast\x00', 0x200, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000140)=""/12, 0xc) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXPWRBN:00/power/wakeup_max_time_ms\x00', 0xb480, 0x0) mmap$auto(0x0, 0x40009, 0x3, 0x9b72, 0x7, 0x63a2) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffff7fffff0005, 0x8) r1 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/smaps_rollup\x00', 0x40000, 0x0) read$auto_proc_pid_maps_operations_internal(r1, &(0x7f00000010c0)=""/4096, 0x1000) r2 = getpid() process_vm_readv$auto(r2, &(0x7f0000000000)={0x0, 0xfff}, 0x800000001, &(0x7f0000000280)={&(0x7f0000000080), 0x1ffffffff}, 0x6, 0x0) close_range$auto(0x2, 0x8, 0x0) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) lsm_set_self_attr$auto(0x1, 0x0, 0x4000080, 0x0) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$auto(0x3, 0x4040ae79, r3) socket$nl_generic(0x10, 0x3, 0x10) 15.748717237s ago: executing program 9 (id=1387): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000100), 0x8041, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) socket(0xa, 0x2, 0x0) getsockopt$auto(0x3, 0x200000000001, 0x2a, 0x0, 0x0) mmap$auto(0x0, 0x8, 0x1000000004, 0x9b72, 0x2, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x5, 0x0) getsockopt$auto(0x6, 0x40000000029, 0x50, 0xfffffffffffffffe, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/pts/ptmx\x00', 0x40001, 0x0) ioctl$auto(r1, 0x80045438, 0xffffffffffffffff) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/bus/input/handlers\x00', 0x40100, 0x0) read$auto_proc_pagemap_operations_internal(r2, &(0x7f0000001540)=""/209, 0xd1) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/system/memory/memory15/online\x00', 0xa001, 0x0) write$auto(r3, &(0x7f0000000140)='0[.[\x00', 0xcd04) ioctl$auto_PPPIOCSMRU(r0, 0xc004743e, 0x0) ioctl$auto_PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000040)={0x6, 0x0}) ioctl$auto_PPPIOCSDEBUG(r0, 0x40047440, &(0x7f0000000140)=0x7) ioctl$auto_PPPIOCSPASS(r0, 0x40107447, &(0x7f00000000c0)={0x9, &(0x7f0000000000)={0x28, 0xf3, 0xb0, @raw=0xfffff038}}) openat$auto_proc_mem_operations_base(0xffffffffffffff9c, 0x0, 0xc0000, 0x0) write$auto(r0, 0x0, 0x6) r4 = open(&(0x7f0000000000)='./file0\x00', 0x101800, 0xbf) ppoll$auto(&(0x7f0000000180)={r4, 0x4, 0x8}, 0x6, 0x0, 0x0, 0x8) ioctl$auto_EVIOCSMASK(r4, 0x40104593, &(0x7f0000000080)={0x8000, 0x2, 0x3}) 15.47749714s ago: executing program 8 (id=1389): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000380)='/dev/cuse\x00', 0x0, 0x0) read$auto(r0, 0x0, 0x7fff) r1 = socket(0x11, 0x80003, 0x300) setsockopt$auto(r1, 0x107, 0x1, 0x0, 0x8004) statmount$auto(0x0, &(0x7f0000000180)={0x6, 0x1, 0x401bf, 0x7352, 0x37, 0x400000000065f, 0x1ffde, 0x40007, 0x7f, 0x20000005, 0x9, 0x3, 0x6, 0x400000004, 0xb4, 0x4, 0x6, 0x2, 0x1, 0xfff, 0xfffffff7, 0x10, 0x1fff, 0x203, 0x838b, 0x84, 0x12, 0x100, 0x5, 0x0, 0x7ff, [0x0, 0x10000000000006, 0x0, 0x40000000000, 0x1, 0xffffffffffffffff, 0x0, 0x0, 0x400, 0x3, 0x9, 0x1, 0x0, 0x0, 0x7, 0x0, 0x400000000001ff, 0xb06d, 0x10001, 0x0, 0x3, 0x1, 0x0, 0x0, 0x8, 0x0, 0x251, 0x3, 0x0, 0x0, 0x8, 0x0, 0xfffffffffffff7cc, 0x462, 0x400000000000002, 0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x9, 0x8, 0x2010]}, 0x1fe, 0x8) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r2 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r2, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) r3 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)) fchdir$auto(r3) sendmsg$auto_NL80211_CMD_SET_POWER_SAVE(r2, &(0x7f0000000700)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000400)={&(0x7f00000005c0)={0x13c, 0x0, 0x300, 0x70bd2b, 0x25dfdbff, {}, [@NL80211_ATTR_PMK={0x1c, 0xfe, "f75dca69204e4529f8f125d387cec2ea37756081f8c62628"}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x6}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x7, 0x8}}, @NL80211_ATTR_HE_6GHZ_CAPABILITY={0xfc, 0x125, "5ad6e8788eeb0e23132f5eda7fe98d498025934c38380251715f7bdce46df46e8bd2b284da18b444c64643ee5cf8ab8d4a36e311729518e9a00fb528954124fc845af9ba70301b1821139c543154d3a48ac2aa56d2b3ac3befb71b8505ac129cddd41547c9a3b66370aecd5954fde16218b14d73f78b05099d441a6d13f553d467af16286db51e27c518aeb2980ade955420db39055f32d86267e1542042d0be9304bcce6fc0992ec240b9df42d8fe620de3d1eb41194cfe9be226f4c61fa7d12a5b0dc90a2807e9452b5da49084d0a4dfe31ebc04b816e4ea72b872551c699ee8b8ee47d91792c783bbe25913ec6784e4cede859d37af6f"}]}, 0x13c}, 0x1, 0x0, 0x0, 0x4008094}, 0x4040010) r4 = socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/system/memory/memory12/power/control\x00', 0x100, 0x0) socket(0x10, 0x2, 0x0) exit$auto(0x7) getcwd$auto(0x0, 0xffffffffffffffff) bpf$auto_BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000500)=@info={r0, 0xfdb, 0x2}, 0x894) r5 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/adsp1\x00', 0x88400, 0x0) ioctl$auto_SNDCTL_DSP_GETODELAY(r5, 0x80045017, 0x0) rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x0, 0x4, 0x6, 0x2}, 0x8000, 0x0, 0x6) r6 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vbi15\x00', 0x802, 0x0) ppoll$auto(&(0x7f0000000040)={r6, 0x5, 0xf}, 0x4, 0x0, 0x0, 0x8) socket$nl_generic(0x10, 0x3, 0x10) flistxattr$auto(r5, &(0x7f0000000080)='\\\\\x00', 0x0) io_uring_setup$auto(0x4, &(0x7f0000000000)={0x1, 0x3, 0x1, 0x2, 0xbf7a, 0x0, r5, [0xc94, 0x1, 0x4], {0x3, 0x3, 0x5, 0x80000001, 0x5c, 0xd, 0x2, 0x62c, 0x80000001}, {0x1, 0x80000000, 0x10, 0x1, 0x7fffffff, 0x0, 0x7807, 0x5, 0x6}}) sendmsg$auto_NL802154_CMD_NEW_SEC_KEY(r4, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16, @ANYBLOB="000826bd7000fedbdf251700000014002d800800c280bca1be4f0898998460d52a2e"], 0x28}, 0x1, 0x0, 0x0, 0x5}, 0x80) unshare$auto(0x40000080) 14.474359165s ago: executing program 9 (id=1392): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) getrandom$auto(0x0, 0x6000000, 0x3) r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio1\x00', 0x1a1b42, 0x0) ioctl$auto_SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000040)) write$auto_snd_pcm_oss_f_reg_pcm_oss(r0, &(0x7f0000000080)="c2", 0x1) r1 = bpf$auto(0x18, &(0x7f0000000380)=@bpf_attr_11={0x4, 0x9, 0x866b, 0x100005, 0x80000009, 0xfffffe01, 0xe6d9}, 0x92) r2 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'team_slave_1\x00'}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'bridge_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'ip6gretap0\x00', 0x0}) ioctl$auto_SNDCTL_DSP_GETCAPS(0xffffffffffffffff, 0x8004500f, &(0x7f0000000440)="2731aefa5004c6c3e67df9bac9cb049aadf76e89c678f2f38693728a13b1ca000497d9b60bb13f2106c1b68f090622840bfba38f4dc4bbffb26ffb3de848738cfb60912372d111400238dd1f14f879260008b0ddddfb2e3c652be9a3666fdc8639d8a5422948aefb8d13812a7dd26393d513aed9ac3dc6735a0863c97a9231d6c296d62ab555ce917047e56bb0d99d0e839fbef94f8427532b280a175f71e743664453e3f9fdafd293eeda02bcdf90763300d0873de47426b2") sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000340)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="100028bd7000fbdbdf250100000092fc0100", @ANYRES64=r1, @ANYBLOB="08000100ab65780591845be0bfb2af5953fb15196e175c46ae87c53a271ceb497139ddb3f748623a1ddf24a9908692105cbda430c6034287f5078cf71c618f5698960f88747025e4155523", @ANYRES32=r3, @ANYBLOB="60024010", @ANYRES32=r4, @ANYBLOB], 0x5e}, 0x1, 0x0, 0x0, 0x8040}, 0xc0000) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/conf/syz_tun/forwarding\x00', 0x80, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x6) r5 = socket(0x2, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0xffff, @remote}, 0x6a) sendmmsg$auto(r5, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/core/rps_default_mask\x00', 0x82, 0x0) openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socketpair$auto(0x0, 0x4004, 0x4, 0x0) socketpair$auto(0x1e, 0x3, 0xfffffffe, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) mkdir$auto(&(0x7f0000000280)='./cgroup.net/\f\x00\x00\x00\x00', 0xa3) r6 = socket(0x2, 0x1, 0x106) getsockopt$auto(r6, 0x29, 0x4e, 0x0, 0x0) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x10002, 0x0, 0x1, 0x0, 0x0, 0x3}, 0x7}, 0x3, 0xcad7) r7 = syz_genetlink_get_family_id$auto_mac80211_hwsim(0x0, 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_NEW_RADIO(0xffffffffffffffff, &(0x7f0000004240)={0x0, 0x0, &(0x7f0000004200)={&(0x7f00000005c0)=ANY=[@ANYBLOB="9cf4d207", @ANYRES16=r7, @ANYBLOB="010029bd7000fedbdf250400000006000b002c290000"], 0x1c}, 0x1, 0x0, 0x0, 0x4000060}, 0x48c4) 12.998925941s ago: executing program 9 (id=1398): sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000226bd7000fedbdf25030000000800030004020000060007000080000008000200", @ANYRES32=0x0, @ANYBLOB="0a00050000000000000000000a00010000000000000000000a0001000000000000000000060007000100000008000200", @ANYRES32=0x0, @ANYBLOB="04001a"], 0x68}, 0x1, 0x0, 0x0, 0x4044080}, 0x40090) r0 = socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000300), r0) openat$auto_trace_options_fops_trace(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/tracing/options/blk_cgroup\x00', 0x5, 0x0) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_NL80211_CMD_DEL_PMK(r0, &(0x7f0000000e00)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x11124000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000340)={0xa5c, r1, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x4}, @NL80211_ATTR_PUNCT_BITMAP={0x8, 0x142, 0x8}, @NL80211_ATTR_MLO_SUPPORT={0x4}, @NL80211_ATTR_UNSOL_BCAST_PROBE_RESP={0xa34, 0x127, 0x0, 0x1, [@NL80211_UNSOL_BCAST_PROBE_RESP_ATTR_INT={0x8, 0x1, 0x1}, @NL80211_UNSOL_BCAST_PROBE_RESP_ATTR_TMPL={0x82d, 0x2, "d122c79cab69020d7063450645f2675f19e7cbfb0d28c5323565e19f63469186501d7304e3d501eb98e3085a212f56e6fae7d423ff02e6d20317f06aa0f4778c9e9212d832953bf4cdae2920fe696d33e909d23a1b49191ac8af4bb5728b99548a925f679d1e7612d728c1c64a885e56e8e3762e240c251613500ab3fca03b65eed2980a706a07645659fd5b6fa8d52b59b97968f28b9929e8e2a964700bd4d0055d829a12f9d503ced5ad2cff78495095318393de61e9a06300a5cc5452f709537a33a4828329954f18fc504ab2efda5875d03afd40b7ae2c85e0ccba84cacc72045ed6bac47aee0e598442ffe594f31ca4b720835ebf58dd4431c3c4f3576dd430587ce1c1924ca015f4559672be4f424eb8b5deffff9a0f248f19ca1797afabe5a46e218e658c85a26bffbf7a28b7fa4e7a7e72689c5f7e7dcdcd729402180288fa6ea7d5576047230a7efb8b1fa412adfcef5c539acc97b6da574dda60378143db8d8270a7d4af3aa4f88bd0620c4f68a8899f5127783670085205d447c7694249939e25b03e85ac157d3b3601bd3bc171ed39c4e539a28fdbbdde9fa2da941e36b7d8dc2f14298ce4dc6cd88ac3aaedbc254e0e447e8e1f2ac806c22b95ba90525771221f620326d694487ed7d15065d30af620cb92f91fb6b2b4e88faab661482f1cd70a19114efbca3de1c8c443fc4b425db0520934914f99463ea9c605626cd5bb0403a4b1fa653a66ac4434616ef019bc9b3e3ec541e5b3e588b6d85ce5a2ee83d4769956cccab19d9315668d8afd41586fdeb0876f9a7fc2d6275374fddd6a04b5f41c9769894413c529133a710f56a11be53dd5d4c8a23c5279f0c7da49a8595e600a30ddbc1f49b53a7a1e4c3fe9b547a3dc3a90d9073f1d56b32ac36d8b5ea13cc05c3fcb29815bba42af3d66489684f8b3567617b572b3c3a04f4d9aa38374b8b3e8cbb0d9264bd28be366595201f2f6f7c475415768062c155509545944c4201ca750e674516418137831be7763963832b20edad33483e3c6a3e86f4475fe8422ecf77a255a8a13e96430ca3bbbb601f2fcbbb36bd512b1cd22c5965d3b33b320dfe1bd4f11908e3ef888f54b37a5a567a556c7b98d5db698ae9412739de5318e56c1913066d4620f4d2c1f9f2e3b83a21e369885366860876aeb60b706d35eed090bb1996456c944f82c1e61c8c30dd160c82d4e376a32fe4393edf01734678553c9295f14faa1bc3e7f8f28a758f9702fbff78737e065e55fc3ba60771bd4287fa58f998267d45101a442dff4fa00bb3e290c3dbe8474bccba9ab0e1eeee43fd760f512419157d54d4c3cf6f61d41506ac223feb4878254cfbff3dcc2a8c7a531686dcd28ca127b7efd93f4ab6c3d578cafa3ec49992c8156c1c55d9c14d5bedfc88c150a36411e8714d6a9085b3726b2c7b459c4fc64a7089be7a217eaca2b7fe1971f4460d55cbadeebe56b80b2424009aac3113c2549ce4be0676d5607a88e7cea1038652e06fe829f099469782bad0d744618f67f1970965b3c77395594f01a01d566fe2da383b62dbe6858dd927e59a5f8d80e1dcea66502d965cc68beccc60394fa7c9e946c34ada98c56722cc6397c0ee8cbd2fda1e16e13fd1ef2503cf971941a4c47f2705d0413d056cc5c981924526fa9bb494fde0e4695e8179724c76d1f03e897af2ddaff4d29042cb913a0023165bb821eb097f596555728712e27e16cb3ee01a1a00ea8a923658501360b6fadea7e7e3d3eeb89f195e72c999658d9254703dcdbbebd0a5ce194c72b34f67efec8cdd6916b22b8591dc00f1ff263a1dba59788470d61ede9950ee18fa0c038ff2670752b660f382fa98c9c5993277efc282a509e7b8dc244fea589bab7684f1f941b2bd2ee6ec61507198c64222733cfd02bdfe4493bd117f2792c514fa386d6e718cc4f691a1469f21c78bc733ba8b688674d16579cb0397f0b330d14938091f2b1144d297fa74b8fbee4c9ee5869e3e34ada2029c1809d4f80c01187d47fa8fd7ad3b2ded0150ae62e43d5684ab389a939edb4766d3fd70aa3b978605215a58a35e6db421acb1781918a7f823dff172b0677c19e40bf9dee4fc7573125ae184d18d461645a6f20c5f88e04a7c6a4f115bed07fe281cb7eec95a36bc3a39597a9bcc0a7856acb294ac6d49f8c2909bf901fa324dea819af765e1179e11561556228eb5806013db0915cb313f70e8e60ca39ecf329f903e49ce7e329093613c79655aca75f41ea5e58d3646882437d5956d539b3e7c517ce713e3f3e2cd780f8cc35d2e87f30dee901bda4ab32e7c3ca37bd74872e55007fe9a45eb9c51effbaf3aeb11b6138041d9086b4c189ffa3b8f620b712cfc9883cb407e992d6629e81d962644bb785fdf8d6a414b12b88aae5a72a1e57680c8f7e62c3c0c12f0d428b98c708941a7847a5a37362853f63e6102129ca530ff0c4576ef4bd50b9ff4be8e3fe0419a20c53bdbbe19f0351a2bac964950b44be696e40769154261dcc18139bd0081f5ef1c76066032dc73231c3987f416bee8185b8f52d7680e83f8f5a6e7a123e53bbd33e6e069ecf40a0c382144363c98c67afaa6116165eea1e67bb78df48762bdfb3eb99ccc9807a81e35b5bcb72306b646a9dccf320ff985f004145272c66a5d59f1e348f805e32a1cdb2258f547de0496c1a73f7e24c456c6ae6e93bace8db976785a90c85fef1e0431a28e4444c2ca9237c02c319416b29d91e37d421f3a68096de8f55406c0cba09326fadb946ad86899cef7102f66455b15f91fd747a88727c75829adb8034fdd8c3cbf2e5dd6031cab2c6b0d7817719bff5d8c13676f3d3b73b531653bdaca922e22e33bd1f2eda23a9a33d7cf226d8d04bb7443847e915d473546eb967bc70d056c24d88857e8c9ec9d203207c8e1a48d64dce661dae084d9c3a86b7f60225"}, @NL80211_UNSOL_BCAST_PROBE_RESP_ATTR_TMPL={0x1ee, 0x2, "937b702dbdcef600654fdbd02d17c42ee6d6cf6f5aa41b05b0c359d037afc858acaa31d72f6f34441e177b05178b19b6d53093e792c8bf8bc268c0d165ca51444eee4f9593a1f940480223144d7bac84e1871dabd0abf54354facbb12227a012d49b4b2190f0ae0828f40bb07d90ecac6e9382d5d52782c4aea633750c0dd4db6b98644fce957e98e33a01fea580a1c6de65729eac16ae284b187c964f72fba8dd72fc5e26f8944652fc92b779a4003e9835e8424d65980b76bc78ebf9794946bc5cf4ef5bffe5930f48a4bc919709d6b3d71b7f48522d1dae82b5f2e26290aff5a452d6182f7b96c9b35cee89551c9ff7d3446d4665a6bbf20059f87698ba2d9ecda50a2e4408af0270278a857a0b77e8e7382b0e5dd247a320184065385c839754164601aecb39d1c9d6f4a13fce2649740b97db5d366675e1affb4783799b3b8d25c15e12b0ff1b1cd73ae4a31d0c178d5d563462e19a03cb176777170713338be933c22e9514ab1073abf9995380c5bf3417ea116a30ec844fd622aefb50160b6075f6d5c0e1c4f0ec5aa173b3a97b8accf4d02dc72066966091522360ea32f8d86a81f85c1a933202b743374d930f621c08e325ea758a6d2476fcc6d0aa611537ac5c8ed0c1e495f44c0ced1fc9dc9beb4930c70c9f9d41b75275d844906050c68c823eb682cf0d"}, @NL80211_UNSOL_BCAST_PROBE_RESP_ATTR_INT={0x8, 0x1, 0x1}]}]}, 0xa5c}, 0x1, 0x0, 0x0, 0x4000}, 0x8040) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0f0026bd7000fcdbdf9907"], 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x4) r2 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) mmap$auto(0x0, 0x2020002, 0x1000000000000007, 0xeb1, r0, 0x1008000) r3 = socket(0x29, 0x2, 0x0) r4 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB="5de1"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) recvmmsg$auto(r4, &(0x7f0000000040)={{0x0, 0x1, 0x0, 0x5, 0x0, 0x200002, 0x13}, 0x803}, 0xfffffff9, 0x10, 0x0) ioctl$auto(r3, 0x891d, 0x24) ioctl$auto(0x3, 0x400454ca, 0x38) r5 = openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/snd/pcmC0D0p\x00', 0x80000, 0x0) ioctl$auto_SNDRV_PCM_IOCTL_PVERSION(r5, 0x80044100, 0x0) write$auto(r2, 0x0, 0x400000000005) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="7201ff03", @ANYBLOB="13"], 0x1ac}, 0x1, 0x0, 0x0, 0x4004880}, 0x4004) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0xfffffffffffffffd, 0x0, 0x0, 0x9}, 0x17}, 0x3, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_5={@target_ifindex=r7, r6, 0x4, 0xf, 0xffffffffffffffff, @relative_fd, 0xe600}, 0xf) newfstatat$auto(r2, &(0x7f0000001040)='./file0\x00', &(0x7f0000001080)={0xff, 0x6, 0x38000000000, 0x400, 0xffffffffffffffff, 0x0, 0x0, 0x4, 0x9, 0x4, 0x5, 0x3, 0xa, 0xb4, 0x1000000000000, 0x0, 0x4}, 0x9) sendmsg$auto_OVS_VPORT_CMD_DEL(r0, &(0x7f00000025c0)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000002580)={&(0x7f0000001140)=ANY=[@ANYBLOB="78140000", @ANYRES16=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="0008000900010000000f00030040fb5c2c3a402a5ede7d00000800020080000000080001000000000044000600010000000000000003000000000000004c00000000000000441e000000000000816880080000000005000000000000000900000000000000060000000000000008000800", @ANYRES32=r7, @ANYBLOB="83020a800800af00", @ANYRES32=r8, @ANYBLOB="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"], 0x1438}, 0x1, 0x0, 0x0, 0x8000}, 0x48080) 9.759021956s ago: executing program 5 (id=1410): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0xc, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/system/memory/memory12/power/control\x00', 0x100, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x8af81, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$auto(0x3, 0x4008ae48, r0) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) close_range$auto(0x2, 0xa, 0x0) r2 = socket(0x11, 0x3, 0x9) capset$auto(0x0, &(0x7f0000000000)={0x1, 0x6, 0x48}) sendmmsg$auto(r2, &(0x7f00000001c0)={{&(0x7f0000000000), 0x1aa, &(0x7f0000000100)={&(0x7f00000003c0)="4a67d23edb3100000000000000000075210d2de44406c2", 0x49}, 0x5, &(0x7f0000000180), 0x5}, 0x1}, 0x2, 0x101) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/platform/vhci_hcd.4/usb18/18-0:1.0/bInterfaceClass\x00', 0x420402, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/platform/dummy_hcd.5/usb6/6-0:1.0/usb6-port1/early_stop\x00', 0x80302, 0x0) write$auto(0x3, 0x0, 0xffd8) 9.216126745s ago: executing program 5 (id=1412): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/tty/tty49/dev\x00', 0x40, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000040)=""/44, 0x2c) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x20000081}, 0x4040091) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop5\x00', 0x14fa02, 0x0) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x82000, 0x0) openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$auto_SO_RCVPRIORITY(0xffffffffffffffff, 0x2, 0x52, &(0x7f00000001c0)='/dev/virtual_nci\x00', 0x0) setresuid$auto(0x0, 0x0, 0x0) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x121900, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto_PR_SET_MM_START_STACK(0x80000000, 0x5, 0x0, 0x2, 0x1) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r2 = openat$auto_iommufd_fops_main(0xffffffffffffff9c, 0x0, 0x80001, 0x0) ioctl$auto(r2, 0x3b82, 0x38) prctl$auto(0x1, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) sched_setattr$auto(0x0, 0x0, 0x7b) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) r3 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0) read$auto(0xffffffffffffffff, &(0x7f0000000240)=',*N\x03\x00\x00\x00\x00\x00\x00\x00', 0x5) sendfile$auto(0x3, r3, 0x0, 0x1000400000000006) pread64$auto(0xffffffffffffffff, 0x0, 0x100000000, 0x2000002) 8.39274179s ago: executing program 4 (id=1413): socketcall$auto_SYS_GETSOCKNAME(0x6, &(0x7f0000000000)) (async) socketcall$auto_SYS_GETSOCKNAME(0x6, &(0x7f0000000000)) socketcall$auto_SYS_GETSOCKNAME(0x6, &(0x7f0000000040)=0x2400000000000) shmat$auto(0x9, &(0x7f0000000080)='%\']\x00', 0xffff2614) socketcall$auto_SYS_GETSOCKNAME(0x6, &(0x7f00000000c0)=0x7) socketcall$auto_SYS_GETSOCKNAME(0x6, &(0x7f0000000100)=0x2) socketcall$auto_SYS_GETSOCKNAME(0x6, &(0x7f0000000140)=0x7f1) socketcall$auto_SYS_GETSOCKNAME(0x6, &(0x7f0000000180)=0x2) socketcall$auto_SYS_GETSOCKNAME(0x6, &(0x7f00000001c0)=0x10) (async) socketcall$auto_SYS_GETSOCKNAME(0x6, &(0x7f00000001c0)=0x10) socketcall$auto_SYS_GETSOCKNAME(0x6, &(0x7f0000000200)=0x100000001) socketcall$auto_SYS_GETSOCKNAME(0x6, &(0x7f0000000240)=0x7fffffffffffffff) socketcall$auto_SYS_GETSOCKNAME(0x6, &(0x7f0000000280)=0x26e) (async) socketcall$auto_SYS_GETSOCKNAME(0x6, &(0x7f0000000280)=0x26e) socketcall$auto_SYS_GETSOCKNAME(0x6, &(0x7f00000002c0)=0x4) socketcall$auto_SYS_GETSOCKNAME(0x6, &(0x7f0000000300)=0x2) (async) socketcall$auto_SYS_GETSOCKNAME(0x6, &(0x7f0000000300)=0x2) socketcall$auto_SYS_GETSOCKNAME(0x6, &(0x7f0000000340)=0x5) shmat$auto(0x4, &(0x7f0000000380)='%\']\x00', 0x7) socketcall$auto_SYS_GETSOCKNAME(0x6, &(0x7f00000003c0)) shmdt$auto(&(0x7f0000000400)='%\']\x00') socketcall$auto_SYS_GETSOCKNAME(0x6, &(0x7f0000000440)=0x6) (async) socketcall$auto_SYS_GETSOCKNAME(0x6, &(0x7f0000000440)=0x6) socketcall$auto_SYS_GETSOCKNAME(0x6, &(0x7f0000000480)) socketcall$auto_SYS_GETSOCKNAME(0x6, &(0x7f00000004c0)=0x6) socketcall$auto_SYS_GETSOCKNAME(0x6, &(0x7f0000000500)=0x2) (async) socketcall$auto_SYS_GETSOCKNAME(0x6, &(0x7f0000000500)=0x2) openat$auto_stat_fops_per_vm_kvm_main(0xffffffffffffff9c, &(0x7f0000000540)='/sys/kernel/debug/kvm/mmu_pde_zapped\x00', 0x100, 0x0) socketcall$auto_SYS_GETSOCKNAME(0x6, &(0x7f0000000580)=0xa) (async) socketcall$auto_SYS_GETSOCKNAME(0x6, &(0x7f0000000580)=0xa) socketcall$auto_SYS_GETSOCKNAME(0x6, &(0x7f00000005c0)=0x10001) socketcall$auto_SYS_GETSOCKNAME(0x6, &(0x7f0000000600)=0x8) (async) socketcall$auto_SYS_GETSOCKNAME(0x6, &(0x7f0000000600)=0x8) socketcall$auto_SYS_GETSOCKNAME(0x6, &(0x7f0000000640)=0x7) socketcall$auto_SYS_GETSOCKNAME(0x6, &(0x7f0000000680)=0x8000000000000000) socketcall$auto_SYS_GETSOCKNAME(0x6, &(0x7f00000006c0)=0x1) (async) socketcall$auto_SYS_GETSOCKNAME(0x6, &(0x7f00000006c0)=0x1) socketcall$auto_SYS_GETSOCKNAME(0x6, &(0x7f0000000700)=0x1ff) (async) socketcall$auto_SYS_GETSOCKNAME(0x6, &(0x7f0000000700)=0x1ff) socketcall$auto_SYS_GETSOCKNAME(0x6, &(0x7f0000000740)=0x7) 8.009519737s ago: executing program 4 (id=1414): statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x5, 0x14, 0x944, 0x1ffe2, 0x3, 0x6, 0x7, 0x9, 0x400005, 0x4000fff, 0x8000007, 0x8001, 0xd, 0x5, 0xfffffff9, 0x40, 0x7, 0x20, 0x309, 0x6, 0x0, 0x7fffffff, 0x3, 0x0, 0x0, 0xffffffff, 0x0, 0x0, [0x0, 0x0, 0x0, 0x4, 0x9, 0x0, 0x0, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x4000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x800000000002, 0x9, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x10, 0xfffffffffffffffe, 0xffffffffffffd059, 0x0, 0x0, 0x0, 0x2961]}, 0x1fb, 0x81) r0 = openat$auto_trace_fops_debugfs(0xffffffffffffff9c, &(0x7f0000000040), 0x101400, 0x0) close_range$auto(r0, 0x8, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x42, 0x20) faccessat2$auto(r1, &(0x7f00000000c0)='./file0\x00', 0x3, 0x4) mknod$auto(&(0x7f0000000140)='./file1\x00', 0x5, 0x4) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) openat$auto_proc_fault_inject_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/make-it-fail\x00', 0x40000, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) r2 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r2, &(0x7f0000000200)={{0x0, 0x1f00, &(0x7f0000000100)={0x0, 0xfdef}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/irq/1/effective_affinity\x00', 0x204040, 0x0) 8.007470497s ago: executing program 5 (id=1415): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0x203, 0x0) mmap$auto(0x0, 0x2000d, 0x4000000000df, 0xeb1, 0x404, 0x8000) ioctl$auto_SNDCTL_SEQ_NRSYNTHS(r0, 0x8004510a, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) move_pages$auto(0xffffffffffffffff, 0x20007, 0x0, 0x0, 0x0, 0x8000000000000000) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000140)={{&(0x7f0000000080)="738a311de8c0ccee95bfb406c51d8b545f30546247dcad05c3fecaf03e037a09a3ebfcc6893d59a2e1ae96463bfc6e8a2398ecb8fb35bd157c93e65134", 0x12, 0x0, 0x9, 0x0, 0xd42, 0xb}, 0x800009}, 0x80000001, 0x20000000) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) rseq$auto(&(0x7f00000001c0)={0xe, 0x20401, 0x5fc, 0x10000006, 0xffffffff, 0x6}, 0x8000, 0x0, 0x6) mmap$auto(0x0, 0x2020007, 0xffffffffffffffff, 0xeb1, 0xffffffffffffffff, 0x8000) open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x84) socket(0x2, 0x3, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket(0x22, 0x800, 0x4) fallocate$auto(0x8000000000000003, 0x0, 0xd, 0xcbd5d) sendfile$auto(0x6, 0x3, 0x0, 0x20000fffffdef) syncfs$auto(0xffffffffffffffff) mmap$auto(0xfffffffffffffffd, 0x2020009, 0x6, 0xeb1, 0xfffffffffffffffa, 0x7) madvise$auto(0x4, 0xffffffffffff0005, 0x17) prctl$auto(0x23, 0x8, 0x2008, 0x0, 0x0) setgroups$auto(0xe32, 0x0) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0xb74, 0x66a) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xd7}, 0x7) write$auto(0xffffffffffffffff, 0x0, 0x100000a3d9) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) r1 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/controlC1\x00', 0x2000, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_READ(r1, 0xc4c85512, &(0x7f00000002c0)={{@raw=0x7, 0x8, 0x4, 0xa2, "c6e47a44a36664a5e709f0e4c97056bc9fa32c617bb88dc98fa7591aefc4647f5af349f8e1e79c823b22958f"}, 0x1, @enumerated=@item=[0x0, 0x3, 0x1, 0xb, 0x6, 0x8001, 0x10, 0x6, 0x10001, 0xefe, 0xfffffff9, 0x5, 0x8001, 0x62f, 0x101, 0x4, 0x200, 0xfffffff0, 0x1000, 0x7, 0x3, 0x3, 0x0, 0x6, 0xb94, 0x0, 0x1, 0x7, 0x3, 0xe8, 0x4, 0x0, 0x9, 0x46f, 0x8, 0x1, 0x6, 0x4, 0x6, 0x8, 0x80, 0x9, 0x65b, 0x9, 0x7, 0x81, 0x1ce8, 0x9, 0x34b5, 0xfff, 0x5, 0x4, 0x2, 0x1000, 0x9, 0x0, 0x400, 0xd, 0x0, 0x0, 0x207d, 0xa7a, 0x5, 0x5, 0x4, 0x80, 0x6ed, 0x0, 0x1, 0x1, 0x6, 0x4, 0x8, 0x1, 0x4003ff, 0x5, 0x8, 0x6, 0x0, 0xa, 0x2, 0x5, 0x400, 0x6, 0x4, 0x9, 0x29, 0x8, 0x30971ad3, 0x9, 0x78d, 0x7f, 0x0, 0x8001, 0x20000, 0x40, 0x0, 0x14, 0x5, 0xfffff43e, 0x0, 0x4f000, 0xfe, 0x5, 0x7, 0xd49e923b, 0x4, 0x80000000, 0x77, 0xfa, 0x0, 0x7fffffff, 0x7f77, 0x9, 0x5b, 0x8, 0x10001, 0x8, 0x0, 0xc2, 0x80000000, 0x5, 0x1000, 0x1, 0x7, 0x400, 0x8, 0x3], "4570dcfd140074f863fc1385c4fd7abe6fce96c0b442897f58fd7d975d164deff4eef5b9f9173fa400163669eae95125d4bd68ca54ca1b0aefb60ffa8d501b1329af8d4108ac145aa564c6e7a09ea1b2dfae0f309c6ea508833d7d134b13d8cb3ef95bf5ed43801c280c02a5a853512e6f730d43226f00af1c5ac268ecc1d18f"}) setsockopt$auto(0x3, 0x1, 0x1d, 0x0, 0x9) openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f0000000100)={0x20041, 0x9, 0x2}, 0x18) socket(0x2, 0x1, 0x106) 7.619385088s ago: executing program 4 (id=1416): mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000) select$auto(0x8, 0x0, &(0x7f0000000080)={[0x34d, 0x100000001, 0x7, 0xffff7fffffffffff, 0x9, 0x7ff, 0x4816, 0x5, 0x7, 0x9, 0x2, 0x300, 0xb9d3, 0x100, 0x5, 0x3]}, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_smc_gen_netlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_SMC_NETLINK_DISABLE_SEID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="013b"], 0x14}, 0x1, 0x0, 0x0, 0x880}, 0x810) socket(0x8, 0x800, 0x695) sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080), 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) 7.264704852s ago: executing program 4 (id=1417): r0 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x1000, 0x0) mmap$auto_tracing_buffers_fops_trace(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x8e051, r0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) init_module$auto(0x0, 0xffff9, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x8000000000000000, 0x15) madvise$auto(0x0, 0x2000000080000001, 0x3) r1 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x20401, 0x0) write$auto_fb_fops_fb_chrdev(r1, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) capget$auto(0x0, 0xfffffffffffffffe) r2 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x80, 0x0) move_mount$auto(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x91e4) io_cancel$auto(0x8, &(0x7f00000000c0)={0xd49, 0x4, 0xa2ed, 0x7, 0x2, r0, 0xffffffff, 0x293, 0x10000, 0x0, 0x7, r2}, &(0x7f0000000100)={0x3, 0xb39, 0x6, 0x4}) ioctl$auto_SNDCTL_SEQ_RESETSAMPLES(r3, 0x40045109, &(0x7f0000000140)="bdb7a8d7f5a6f1db9a60cf69a8810b9716f0a7136bb497786a622e4276f24e2ba49813c9c2e266866c7966bb4c2d2af0cd770b0ad3bac450b79fef80ad57bedc06ba5a22520f563c521a6f79889a20cf55b37889d1c838f53eb6e26ce37f768d30820a2cd425f4db86dae15cafbe7c8b662797e83ea7f5e5deacde64cc9f46ab") madvise$auto(0x0, 0xffffffffffff0005, 0x17) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) semctl$auto_GETPID(0xb3fb, 0x1, 0xb, 0x400) msgsnd$auto(0x0, &(0x7f0000000040)={0x5}, 0x1000, 0x4) msgctl$auto(0x0, 0x1, 0x0) 6.366190735s ago: executing program 5 (id=1418): sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000226bd7000fedbdf25030000000800030004020000060007000080000008000200", @ANYRES32=0x0, @ANYBLOB="0a00050000000000000000000a00010000000000000000000a0001000000000000000000060007000100000008000200", @ANYRES32=0x0, @ANYBLOB="04001a"], 0x68}, 0x1, 0x0, 0x0, 0x4044080}, 0x40090) socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0f0026bd7000fcdbdf9907"], 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0xf4) 5.974864113s ago: executing program 5 (id=1419): unshare$auto(0x40000080) open(&(0x7f0000000000)='./file0\x00', 0x1c3300, 0x96) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r0 = io_uring_setup$auto(0x59, &(0x7f0000000080)={0x6, 0xd, 0xfffffffe, 0x6, 0x7fff, 0x8, 0xffffffffffffffff, [], {0x6, 0x10001, 0xb, 0x2de, 0x504, 0x1, 0x101, 0x6, 0x6}, {0xfff7ffff, 0x2, 0x52, 0x5, 0x10001, 0x40, 0x76c5, 0x8, 0x8000000000000000}}) r2 = getpid() process_vm_readv$auto(r2, &(0x7f0000000000)={0x0, 0xfff}, 0x800000001, &(0x7f0000000280)={&(0x7f0000000080), 0x1ffffffff}, 0x6, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) r3 = prctl$auto(0x1000000003b, 0xbc, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) kcmp$auto_KCMP_FILE(r2, r2, 0x0, r3, r1) clock_adjtime$auto(0x354d, 0x0) syz_clone3(&(0x7f0000000100)={0x2100000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) mmap$auto(0x0, 0x2000d, 0x7, 0xeb1, 0xffffffffffffffff, 0x10008000) r4 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) readahead$auto(r5, 0x7, 0xae8) read$auto(r4, 0x0, 0x9a28) r6 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r6, &(0x7f0000000200)={0x0, 0x7}, 0x3) getsockopt$auto_SO_RCVMARK(r0, 0x5, 0x4b, &(0x7f0000000040)='/dev/tty29\x00', &(0x7f0000000180)=0x101) read$auto_proc_fail_nth_operations_base(r6, 0x0, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty29\x00', 0x800, 0x0) mmap$auto(0x0, 0xffffffffffff06e1, 0xe2, 0xeb1, 0x405, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) 255.58099ms ago: executing program 5 (id=1420): r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty17\x00', 0x1, 0x0) write$auto_tty_fops_tty_io(r0, &(0x7f0000000200)="352c8efa610c0bcf83a4ebdb040000000000000021cb244b19a48bb5e0d12d", 0x1f) ioctl$auto(0xffffffffffffffff, 0x8912, 0x38) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xfffffffffffffffe, 0x8000) writev$auto(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240)="6f78636a2289d5a852e2920f0ade62da40c1ed39ed63ea17a591ec5091eadd250ef1d4d6a15cd8263780240bcab4ab132c4956063c0be56b25fd1d26d94e2f87b0f0c2897899ba64ea68b635954addf882014f34c5094d5f62b2f0f21b016faddcdd200de8098bdc7a3f99ea3bda9c9efc74d3a23fab2ab0ce8d97a8b84f70a89c57b6e2b5346ee1bcb1", 0x2}, 0x4) ustat$auto(0x801, 0x0) r1 = openat$auto_btrfs_ctl_fops_super(0xffffffffffffff9c, &(0x7f0000000f40), 0x2100, 0x0) ioctl$auto_BTRFS_IOC_GET_SUPPORTED_FEATURES(r1, 0x80489439, &(0x7f0000000f80)=[{0x3ff, 0x3, 0x8000000000000000}, {0x5, 0x5, 0x2}, {0xa6, 0x1, 0x2}]) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) madvise$auto(0x0, 0x2003f0, 0x15) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0xff1, 0x8000) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x4048000}, 0x4000804) lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x10, 0x9, 0x63, 0x0, 0x0, 0x0, 0x0, 0x40000000000f, 0x1000, 0xfffffffffffffffd, 0x7ffffffb, 0x9, 0xffffffff7ffffffc, 0xb, 0x7, 0x200000100103}) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x89fc, &(0x7f0000000040)={'bridge0\x00'}) r4 = io_uring_setup$auto(0x1, 0x0) bpf$auto(0x5, 0x0, 0x102) sendmsg$auto_NCSI_CMD_SET_CHANNEL_MASK(r4, &(0x7f0000000800)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000380)={0x434, 0x0, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@NCSI_ATTR_CHANNEL_ID={0x8, 0x4, 0x1}, @NCSI_ATTR_MULTI_FLAG={0x4}, @NCSI_ATTR_CHANNEL_ID={0x8, 0x4, 0xa5}, @NCSI_ATTR_DATA={0x40a, 0x5, "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"}]}, 0x434}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) getpid() openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/graphics/fbcon/cursor_blink\x00', 0xa001, 0x0) write$auto(r5, &(0x7f0000000140)='7\x81=\"\xad\xff\x8d\xf9P\x18\xa4\xb0\xb4\xd9\x82=\xe1P\x05\x00\xfb&\xe8\xbf\x901\a2\xa2X`\a\xf1y\xb3\"=', 0xd4d0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000164c0), 0xffffffffffffffff) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) rt_sigprocmask$auto(0x8, &(0x7f0000000180)={0xab}, &(0x7f00000001c0)={0x2}, 0x8) madvise$auto(0x0, 0xfffffffffffefffd, 0x17) 254.861921ms ago: executing program 4 (id=1421): mmap$auto(0x0, 0x100, 0x4000000000df, 0x80000000eb1, 0x401, 0x8000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x2020009, 0x2, 0xf8, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0xa, 0x0) r0 = socket(0x2b, 0x1, 0x1) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(r0, 0x2, 0x0, 0x1) socket(0x10, 0x2, 0x4) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket(0x23, 0x80805, 0x0) sendmsg$auto_MACSEC_CMD_DEL_RXSC(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYRES16=0x0, @ANYRES16, @ANYBLOB="010527bd7000fbdbdf250200000008000100", @ANYRES32=0x0, @ANYBLOB="1800"], 0x34}, 0x1, 0x0, 0x0, 0x4028811}, 0x4080) sendmsg$auto_L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0x21, 0x70bd28, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(r1, r2, 0x2) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) setfsuid$auto(0xee00) statmount$auto(0x0, &(0x7f0000000180)={0x315, 0xfffffffd, 0x401bf, 0x7352, 0x3c, 0x65f, 0x1ffde, 0x6, 0x3, 0x2, 0x9, 0x2, 0x4000006, 0x4, 0xb6, 0x80000000009, 0x6, 0x10003, 0xb, 0x4, 0x0, 0x7, 0x2000, 0x203, 0x0, 0x84}, 0x1fe, 0xd) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000826bd7000fedbdf25030000000600070008000000060007000080000008000200", @ANYRES32=0x0, @ANYBLOB="0a00050000000000000000000a00010000000000000000000a00"], 0x6c}, 0x1, 0x0, 0x0, 0x40080}, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x100) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) socket(0x2, 0x5, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/pts/ptmx\x00', 0x40001, 0x0) 180.617605ms ago: executing program 38 (id=1389): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000380)='/dev/cuse\x00', 0x0, 0x0) read$auto(r0, 0x0, 0x7fff) r1 = socket(0x11, 0x80003, 0x300) setsockopt$auto(r1, 0x107, 0x1, 0x0, 0x8004) statmount$auto(0x0, &(0x7f0000000180)={0x6, 0x1, 0x401bf, 0x7352, 0x37, 0x400000000065f, 0x1ffde, 0x40007, 0x7f, 0x20000005, 0x9, 0x3, 0x6, 0x400000004, 0xb4, 0x4, 0x6, 0x2, 0x1, 0xfff, 0xfffffff7, 0x10, 0x1fff, 0x203, 0x838b, 0x84, 0x12, 0x100, 0x5, 0x0, 0x7ff, [0x0, 0x10000000000006, 0x0, 0x40000000000, 0x1, 0xffffffffffffffff, 0x0, 0x0, 0x400, 0x3, 0x9, 0x1, 0x0, 0x0, 0x7, 0x0, 0x400000000001ff, 0xb06d, 0x10001, 0x0, 0x3, 0x1, 0x0, 0x0, 0x8, 0x0, 0x251, 0x3, 0x0, 0x0, 0x8, 0x0, 0xfffffffffffff7cc, 0x462, 0x400000000000002, 0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x9, 0x8, 0x2010]}, 0x1fe, 0x8) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r2 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r2, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) r3 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)) fchdir$auto(r3) sendmsg$auto_NL80211_CMD_SET_POWER_SAVE(r2, &(0x7f0000000700)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000400)={&(0x7f00000005c0)={0x13c, 0x0, 0x300, 0x70bd2b, 0x25dfdbff, {}, [@NL80211_ATTR_PMK={0x1c, 0xfe, "f75dca69204e4529f8f125d387cec2ea37756081f8c62628"}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x6}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x7, 0x8}}, @NL80211_ATTR_HE_6GHZ_CAPABILITY={0xfc, 0x125, "5ad6e8788eeb0e23132f5eda7fe98d498025934c38380251715f7bdce46df46e8bd2b284da18b444c64643ee5cf8ab8d4a36e311729518e9a00fb528954124fc845af9ba70301b1821139c543154d3a48ac2aa56d2b3ac3befb71b8505ac129cddd41547c9a3b66370aecd5954fde16218b14d73f78b05099d441a6d13f553d467af16286db51e27c518aeb2980ade955420db39055f32d86267e1542042d0be9304bcce6fc0992ec240b9df42d8fe620de3d1eb41194cfe9be226f4c61fa7d12a5b0dc90a2807e9452b5da49084d0a4dfe31ebc04b816e4ea72b872551c699ee8b8ee47d91792c783bbe25913ec6784e4cede859d37af6f"}]}, 0x13c}, 0x1, 0x0, 0x0, 0x4008094}, 0x4040010) r4 = socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/system/memory/memory12/power/control\x00', 0x100, 0x0) socket(0x10, 0x2, 0x0) exit$auto(0x7) getcwd$auto(0x0, 0xffffffffffffffff) bpf$auto_BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000500)=@info={r0, 0xfdb, 0x2}, 0x894) r5 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/adsp1\x00', 0x88400, 0x0) ioctl$auto_SNDCTL_DSP_GETODELAY(r5, 0x80045017, 0x0) rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x0, 0x4, 0x6, 0x2}, 0x8000, 0x0, 0x6) r6 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vbi15\x00', 0x802, 0x0) ppoll$auto(&(0x7f0000000040)={r6, 0x5, 0xf}, 0x4, 0x0, 0x0, 0x8) socket$nl_generic(0x10, 0x3, 0x10) flistxattr$auto(r5, &(0x7f0000000080)='\\\\\x00', 0x0) io_uring_setup$auto(0x4, &(0x7f0000000000)={0x1, 0x3, 0x1, 0x2, 0xbf7a, 0x0, r5, [0xc94, 0x1, 0x4], {0x3, 0x3, 0x5, 0x80000001, 0x5c, 0xd, 0x2, 0x62c, 0x80000001}, {0x1, 0x80000000, 0x10, 0x1, 0x7fffffff, 0x0, 0x7807, 0x5, 0x6}}) sendmsg$auto_NL802154_CMD_NEW_SEC_KEY(r4, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16, @ANYBLOB="000826bd7000fedbdf251700000014002d800800c280bca1be4f0898998460d52a2e"], 0x28}, 0x1, 0x0, 0x0, 0x5}, 0x80) unshare$auto(0x40000080) 0s ago: executing program 4 (id=1423): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/tty/tty49/dev\x00', 0x40, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000040)=""/44, 0x2c) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x20000081}, 0x4040091) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop5\x00', 0x14fa02, 0x0) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x82000, 0x0) openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$auto_SO_RCVPRIORITY(0xffffffffffffffff, 0x2, 0x52, &(0x7f00000001c0)='/dev/virtual_nci\x00', 0x0) setresuid$auto(0x0, 0x0, 0x0) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x121900, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto_PR_SET_MM_START_STACK(0x80000000, 0x5, 0x0, 0x2, 0x1) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r2 = openat$auto_iommufd_fops_main(0xffffffffffffff9c, 0x0, 0x80001, 0x0) ioctl$auto(r2, 0x3b82, 0x38) prctl$auto(0x1, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) sched_setattr$auto(0x0, 0x0, 0x7b) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) r3 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0) read$auto(0xffffffffffffffff, &(0x7f0000000240)=',*N\x03\x00\x00\x00\x00\x00\x00\x00', 0x5) sendfile$auto(0x3, r3, 0x0, 0x1000400000000006) pread64$auto(0xffffffffffffffff, 0x0, 0x100000000, 0x2000002) kernel console output (not intermixed with test programs): 10 [ 301.695991][ T9676] do_syscall_64+0xcd/0xfa0 [ 301.696021][ T9676] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 301.696045][ T9676] RIP: 0033:0x7f914898f749 [ 301.696063][ T9676] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 301.696086][ T9676] RSP: 002b:00007f91497f7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 301.696107][ T9676] RAX: ffffffffffffffda RBX: 00007f9148be5fa0 RCX: 00007f914898f749 [ 301.696122][ T9676] RDX: 0000000000000028 RSI: 0000200000000280 RDI: 0000000000000008 [ 301.696136][ T9676] RBP: 00007f9148a13f91 R08: 0000000000000000 R09: 0000000000000000 [ 301.696149][ T9676] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 301.696163][ T9676] R13: 00007f9148be6038 R14: 00007f9148be5fa0 R15: 00007ffd210790e8 [ 301.696193][ T9676] [ 302.357647][ T9676] Mem-Info: [ 302.376901][ T9676] active_anon:56482 inactive_anon:670 isolated_anon:0 [ 302.376901][ T9676] active_file:6587 inactive_file:51603 isolated_file:0 [ 302.376901][ T9676] unevictable:768 dirty:328 writeback:0 [ 302.376901][ T9676] slab_reclaimable:11345 slab_unreclaimable:93584 [ 302.376901][ T9676] mapped:50730 shmem:42337 pagetables:1556 [ 302.376901][ T9676] sec_pagetables:0 bounce:0 [ 302.376901][ T9676] kernel_misc_reclaimable:0 [ 302.376901][ T9676] free:1266460 free_pcp:21359 free_cma:0 [ 302.448624][ T9676] Node 0 active_anon:227292kB inactive_anon:2680kB active_file:26348kB inactive_file:206004kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:203436kB dirty:1312kB writeback:0kB shmem:169204kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:34816kB kernel_stack:13228kB pagetables:6072kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 302.571596][ T9676] Node 1 active_anon:2996kB inactive_anon:0kB active_file:0kB inactive_file:408kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:1084kB dirty:0kB writeback:0kB shmem:2344kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:2048kB kernel_stack:48kB pagetables:152kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 302.621893][ T9676] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 302.675689][ T9676] lowmem_reserve[]: 0 2485 2487 2487 2487 [ 302.685411][ T9676] Node 0 DMA32 free:1169768kB boost:0kB min:34364kB low:42952kB high:51540kB reserved_highatomic:0KB free_highatomic:0KB active_anon:225648kB inactive_anon:2680kB active_file:26348kB inactive_file:206004kB unevictable:1536kB writepending:1516kB zspages:256kB present:3129332kB managed:2545068kB mlocked:0kB bounce:0kB free_pcp:53680kB local_pcp:25372kB free_cma:0kB [ 302.827821][ T9676] lowmem_reserve[]: 0 0 1 1 1 [ 302.844746][ T9676] Node 0 Normal free:0kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:0kB free_cma:0kB [ 302.943601][ T9676] lowmem_reserve[]: 0 0 0 0 0 [ 302.958960][ T9676] Node 1 Normal free:3869876kB boost:0kB min:55512kB low:69388kB high:83264kB reserved_highatomic:0KB free_highatomic:0KB active_anon:2996kB inactive_anon:0kB active_file:0kB inactive_file:408kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:38224kB local_pcp:27664kB free_cma:0kB [ 303.056002][ T9676] lowmem_reserve[]: 0 0 0 0 0 [ 303.060829][ T9676] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 303.166099][ T9676] Node 0 DMA32: 2*4kB (ME) 25*8kB (UME) 47*16kB (UME) 348*32kB (UE) 155*64kB (UME) 326*128kB (UME) 344*256kB (UME) 143*512kB (UME) 44*1024kB (UME) 6*2048kB (UE) 216*4096kB (M) = 1167104kB [ 303.248271][ T9676] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 303.304804][ T9676] Node 1 Normal: 191*4kB (UME) 73*8kB (UME) 35*16kB (UME) 56*32kB (UME) 31*64kB (UME) 7*128kB (UME) 3*256kB (ME) 2*512kB (UM) 3*1024kB (UME) 2*2048kB (ME) 941*4096kB (M) = 3869876kB [ 303.377847][ T9676] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 303.409202][ T9676] Node 0 hugepages_total=3 hugepages_free=0 hugepages_surp=1 hugepages_size=2048kB [ 303.450293][ T9676] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 303.490021][ T9676] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 303.532624][ T9676] 106146 total pagecache pages [ 303.561929][ T9676] 0 pages in swap cache [ 303.575446][ T9676] Free swap = 124816kB [ 303.579739][ T9676] Total swap = 124996kB [ 303.583928][ T9676] 2097051 pages RAM [ 303.600042][ T9676] 0 pages HighMem/MovableOnly [ 303.604758][ T9676] 428694 pages reserved [ 303.630852][ T9676] 0 pages cma reserved [ 304.888862][ T9729] zswap: compressor not available [ 307.245760][ T9765] FAULT_INJECTION: forcing a failure. [ 307.245760][ T9765] name failslab, interval 1, probability 0, space 0, times 0 [ 307.308090][ T9765] CPU: 1 UID: 0 PID: 9765 Comm: syz.2.852 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 307.308162][ T9765] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 307.308182][ T9765] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 307.308201][ T9765] Call Trace: [ 307.308212][ T9765] [ 307.308224][ T9765] dump_stack_lvl+0x16c/0x1f0 [ 307.308271][ T9765] should_fail_ex+0x512/0x640 [ 307.308329][ T9765] should_failslab+0xc2/0x120 [ 307.308376][ T9765] kmem_cache_alloc_noprof+0x75/0x6e0 [ 307.308413][ T9765] ? skb_clone+0x190/0x3f0 [ 307.308454][ T9765] ? skb_clone+0x190/0x3f0 [ 307.308484][ T9765] skb_clone+0x190/0x3f0 [ 307.308520][ T9765] netlink_deliver_tap+0xabd/0xd30 [ 307.308565][ T9765] netlink_unicast+0x71f/0x870 [ 307.308608][ T9765] ? __pfx_netlink_unicast+0x10/0x10 [ 307.308645][ T9765] ? idr_get_next+0xec/0x150 [ 307.308696][ T9765] ctrl_getfamily+0x40a/0x540 [ 307.308741][ T9765] ? __pfx_ctrl_getfamily+0x10/0x10 [ 307.308787][ T9765] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 307.308831][ T9765] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 307.308894][ T9765] genl_family_rcv_msg_doit+0x209/0x2f0 [ 307.308941][ T9765] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 307.308984][ T9765] ? genl_get_cmd+0x194/0x580 [ 307.309037][ T9765] ? __radix_tree_lookup+0x21f/0x2c0 [ 307.309080][ T9765] genl_rcv_msg+0x55c/0x800 [ 307.309129][ T9765] ? __pfx_genl_rcv_msg+0x10/0x10 [ 307.309171][ T9765] ? __pfx_ctrl_getfamily+0x10/0x10 [ 307.309231][ T9765] netlink_rcv_skb+0x158/0x420 [ 307.309267][ T9765] ? __pfx_genl_rcv_msg+0x10/0x10 [ 307.309310][ T9765] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 307.309366][ T9765] ? netlink_deliver_tap+0x1ae/0xd30 [ 307.309408][ T9765] genl_rcv+0x28/0x40 [ 307.309443][ T9765] netlink_unicast+0x5aa/0x870 [ 307.309486][ T9765] ? __pfx_netlink_unicast+0x10/0x10 [ 307.309541][ T9765] netlink_sendmsg+0x8c8/0xdd0 [ 307.309598][ T9765] ? __pfx_netlink_sendmsg+0x10/0x10 [ 307.309642][ T9765] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 307.309699][ T9765] __sys_sendto+0x4a3/0x520 [ 307.309752][ T9765] ? __pfx___sys_sendto+0x10/0x10 [ 307.309819][ T9765] ? find_held_lock+0x2b/0x80 [ 307.309893][ T9765] __x64_sys_sendto+0xe0/0x1c0 [ 307.309944][ T9765] ? do_syscall_64+0x91/0xfa0 [ 307.309985][ T9765] ? lockdep_hardirqs_on+0x7c/0x110 [ 307.310026][ T9765] do_syscall_64+0xcd/0xfa0 [ 307.310069][ T9765] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 307.310102][ T9765] RIP: 0033:0x7f86b19915dc [ 307.310128][ T9765] Code: 2a 5f 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5f 02 00 48 8b [ 307.310160][ T9765] RSP: 002b:00007f86b27e0ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 307.310192][ T9765] RAX: ffffffffffffffda RBX: 00007f86b27e0fc0 RCX: 00007f86b19915dc [ 307.310212][ T9765] RDX: 0000000000000020 RSI: 00007f86b27e1010 RDI: 000000000000000b [ 307.310232][ T9765] RBP: 0000000000000000 R08: 00007f86b27e0f14 R09: 000000000000000c [ 307.310252][ T9765] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000000000b [ 307.310272][ T9765] R13: 00007f86b27e0f68 R14: 00007f86b27e1010 R15: 0000000000000000 [ 307.310317][ T9765] [ 307.650123][ T9768] netlink: 72 bytes leftover after parsing attributes in process `syz.3.853'. [ 307.795559][ T9768] netlink: 72 bytes leftover after parsing attributes in process `syz.3.853'. [ 307.888795][ T9768] netlink: 72 bytes leftover after parsing attributes in process `syz.3.853'. [ 308.027499][ T9768] netlink: 72 bytes leftover after parsing attributes in process `syz.3.853'. [ 308.667434][ T9793] netlink: 4 bytes leftover after parsing attributes in process `syz.2.858'. [ 312.318135][ T9841] FAULT_INJECTION: forcing a failure. [ 312.318135][ T9841] name failslab, interval 1, probability 0, space 0, times 0 [ 312.400225][ T9841] CPU: 0 UID: 0 PID: 9841 Comm: syz.4.867 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 312.400274][ T9841] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 312.400287][ T9841] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 312.400301][ T9841] Call Trace: [ 312.400308][ T9841] [ 312.400317][ T9841] dump_stack_lvl+0x16c/0x1f0 [ 312.400349][ T9841] should_fail_ex+0x512/0x640 [ 312.400390][ T9841] should_failslab+0xc2/0x120 [ 312.400422][ T9841] kmem_cache_alloc_noprof+0x75/0x6e0 [ 312.400445][ T9841] ? skb_clone+0x190/0x3f0 [ 312.400481][ T9841] ? skb_clone+0x190/0x3f0 [ 312.400501][ T9841] skb_clone+0x190/0x3f0 [ 312.400525][ T9841] netlink_deliver_tap+0xabd/0xd30 [ 312.400556][ T9841] netlink_unicast+0x71f/0x870 [ 312.400585][ T9841] ? __pfx_netlink_unicast+0x10/0x10 [ 312.400611][ T9841] ? genl_rcv_msg+0x4bb/0x800 [ 312.400647][ T9841] netlink_ack+0x696/0xb80 [ 312.400681][ T9841] netlink_rcv_skb+0x332/0x420 [ 312.400705][ T9841] ? __pfx_genl_rcv_msg+0x10/0x10 [ 312.400736][ T9841] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 312.400774][ T9841] ? netlink_deliver_tap+0x1ae/0xd30 [ 312.400801][ T9841] genl_rcv+0x28/0x40 [ 312.400826][ T9841] netlink_unicast+0x5aa/0x870 [ 312.400855][ T9841] ? __pfx_netlink_unicast+0x10/0x10 [ 312.400891][ T9841] netlink_sendmsg+0x8c8/0xdd0 [ 312.400921][ T9841] ? __pfx_netlink_sendmsg+0x10/0x10 [ 312.400950][ T9841] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 312.400990][ T9841] __sys_sendto+0x4a3/0x520 [ 312.401027][ T9841] ? __pfx___sys_sendto+0x10/0x10 [ 312.401072][ T9841] ? find_held_lock+0x2b/0x80 [ 312.401117][ T9841] __x64_sys_sendto+0xe0/0x1c0 [ 312.401152][ T9841] ? do_syscall_64+0x91/0xfa0 [ 312.401179][ T9841] ? lockdep_hardirqs_on+0x7c/0x110 [ 312.401207][ T9841] do_syscall_64+0xcd/0xfa0 [ 312.401236][ T9841] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 312.401259][ T9841] RIP: 0033:0x7f4ce9b915dc [ 312.401277][ T9841] Code: 2a 5f 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5f 02 00 48 8b [ 312.401299][ T9841] RSP: 002b:00007f4ceaa30ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 312.401320][ T9841] RAX: ffffffffffffffda RBX: 00007f4ceaa30fc0 RCX: 00007f4ce9b915dc [ 312.401335][ T9841] RDX: 0000000000000020 RSI: 00007f4ceaa31010 RDI: 000000000000000b [ 312.401349][ T9841] RBP: 0000000000000000 R08: 00007f4ceaa30f14 R09: 000000000000000c [ 312.401363][ T9841] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000000000b [ 312.401376][ T9841] R13: 00007f4ceaa30f68 R14: 00007f4ceaa31010 R15: 0000000000000000 [ 312.401407][ T9841] [ 316.350836][ T5148] Bluetooth: hci3: unexpected event 0x35 length: 13 > 6 [ 316.355005][ T9928] netlink: 11 bytes leftover after parsing attributes in process `syz.3.885'. [ 316.392169][ T9909] FAULT_INJECTION: forcing a failure. [ 316.392169][ T9909] name failslab, interval 1, probability 0, space 0, times 0 [ 316.411282][ T9909] CPU: 0 UID: 0 PID: 9909 Comm: syz.2.881 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 316.411355][ T9909] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 316.411374][ T9909] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 316.411395][ T9909] Call Trace: [ 316.411406][ T9909] [ 316.411418][ T9909] dump_stack_lvl+0x16c/0x1f0 [ 316.411468][ T9909] should_fail_ex+0x512/0x640 [ 316.411518][ T9909] ? __kmalloc_cache_noprof+0x5f/0x780 [ 316.411555][ T9909] should_failslab+0xc2/0x120 [ 316.411600][ T9909] __kmalloc_cache_noprof+0x72/0x780 [ 316.411633][ T9909] ? alloc_tty_struct+0x96/0x8c0 [ 316.411683][ T9909] ? alloc_tty_struct+0x96/0x8c0 [ 316.411722][ T9909] alloc_tty_struct+0x96/0x8c0 [ 316.411765][ T9909] ? __pfx_alloc_tty_struct+0x10/0x10 [ 316.411820][ T9909] tty_init_dev.part.0+0x1e/0x500 [ 316.411865][ T9909] tty_open+0xa4f/0xf90 [ 316.411915][ T9909] ? __pfx_tty_open+0x10/0x10 [ 316.411956][ T9909] ? chrdev_open+0x58c/0x6a0 [ 316.412002][ T9909] ? __pfx_tty_open+0x10/0x10 [ 316.412053][ T9909] chrdev_open+0x234/0x6a0 [ 316.412094][ T9909] ? __pfx_chrdev_open+0x10/0x10 [ 316.412138][ T9909] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 316.412194][ T9909] do_dentry_open+0x982/0x1530 [ 316.412234][ T9909] ? __pfx_chrdev_open+0x10/0x10 [ 316.412303][ T9909] vfs_open+0x82/0x3f0 [ 316.412357][ T9909] path_openat+0x1de4/0x2cb0 [ 316.412409][ T9909] ? __pfx_path_openat+0x10/0x10 [ 316.412450][ T9909] ? __lock_acquire+0xb8a/0x1c90 [ 316.412501][ T9909] do_filp_open+0x20b/0x470 [ 316.412540][ T9909] ? __pfx_do_filp_open+0x10/0x10 [ 316.412610][ T9909] ? alloc_fd+0x471/0x7d0 [ 316.412658][ T9909] do_sys_openat2+0x11b/0x1d0 [ 316.412707][ T9909] ? __pfx_do_sys_openat2+0x10/0x10 [ 316.412775][ T9909] __x64_sys_openat+0x174/0x210 [ 316.412827][ T9909] ? __pfx___x64_sys_openat+0x10/0x10 [ 316.412897][ T9909] do_syscall_64+0xcd/0xfa0 [ 316.412944][ T9909] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 316.412978][ T9909] RIP: 0033:0x7f86b198f749 [ 316.413005][ T9909] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 316.413038][ T9909] RSP: 002b:00007f86b27c1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 316.413070][ T9909] RAX: ffffffffffffffda RBX: 00007f86b1be6090 RCX: 00007f86b198f749 [ 316.413092][ T9909] RDX: 0000000000000800 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 316.413113][ T9909] RBP: 00007f86b1a13f91 R08: 0000000000000000 R09: 0000000000000000 [ 316.413133][ T9909] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 316.413153][ T9909] R13: 00007f86b1be6128 R14: 00007f86b1be6090 R15: 00007fffc920cb78 [ 316.413206][ T9909] [ 316.787392][ T9930] netlink: 28 bytes leftover after parsing attributes in process `syz.4.886'. [ 317.541889][ T30] audit: type=1326 audit(4294967423.746:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9937 comm="syz.3.888" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff678b8f749 code=0x0 [ 318.205747][ T9954] zswap: compressor D7?1NE4OGU3t:g'bז3=ۊ5t=ׯ=c>8R not available [ 318.481622][ T9961] vivid-003: ================= START STATUS ================= [ 318.492415][ T9961] vivid-003: Radio HW Seek Mode: Bounded [ 318.502194][ T9961] vivid-003: Radio Programmable HW Seek: false [ 318.508801][ T9961] vivid-003: RDS Rx I/O Mode: Block I/O [ 318.514411][ T9961] vivid-003: Generate RBDS Instead of RDS: false [ 318.521476][ T9961] vivid-003: RDS Reception: true [ 318.527576][ T9961] vivid-003: RDS Program Type: 0 inactive [ 318.534915][ T9961] vivid-003: RDS PS Name: inactive [ 318.541058][ T9961] vivid-003: RDS Radio Text: inactive [ 318.548393][ T9961] vivid-003: RDS Traffic Announcement: false inactive [ 318.555249][ T9961] vivid-003: RDS Traffic Program: false inactive [ 318.562142][ T9961] vivid-003: RDS Music: false inactive [ 318.567781][ T9961] vivid-003: ================== END STATUS ================== [ 319.122820][ T9981] netlink: 28 bytes leftover after parsing attributes in process `syz.4.898'. [ 319.142458][ T9979] netlink: 28 bytes leftover after parsing attributes in process `syz.4.898'. [ 321.664316][T10026] netlink: 342 bytes leftover after parsing attributes in process `syz.4.908'. [ 321.718028][T10025] netlink: 342 bytes leftover after parsing attributes in process `syz.4.908'. [ 321.881214][T10024] Process accounting paused [ 324.893336][ T30] audit: type=1326 audit(4294967431.096:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10084 comm="syz.2.921" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f86b198f749 code=0x0 [ 326.207615][T10104] zram: Removed device: zram0 [ 327.515792][T10134] zswap: compressor not available [ 327.599891][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 327.606371][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 328.443449][T10159] Invalid ELF header magic: != ELF [ 328.468321][T10157] delete_channel: no stack [ 328.870539][T10168] tipc: Started in network mode [ 328.888593][T10168] tipc: Node identity ffffffff, cluster identity 4711 [ 328.903275][T10168] tipc: Node number set to 4294967295 [ 329.175172][ T52] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 329.184885][ T52] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 329.194932][ T52] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 329.203939][ T52] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 329.212058][ T52] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 329.954308][T10172] chnl_net:caif_netlink_parms(): no params data found [ 330.008890][ T30] audit: type=1800 audit(4294967436.216:10): pid=10187 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.940" name="dbroot" dev="configfs" ino=30411 res=0 errno=0 [ 330.119882][T10172] bridge0: port 1(bridge_slave_0) entered blocking state [ 330.127352][T10172] bridge0: port 1(bridge_slave_0) entered disabled state [ 330.134604][T10172] bridge_slave_0: entered allmulticast mode [ 330.143530][T10172] bridge_slave_0: entered promiscuous mode [ 330.155003][T10172] bridge0: port 2(bridge_slave_1) entered blocking state [ 330.162569][T10172] bridge0: port 2(bridge_slave_1) entered disabled state [ 330.170139][T10172] bridge_slave_1: entered allmulticast mode [ 330.179920][T10172] bridge_slave_1: entered promiscuous mode [ 330.234370][T10172] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 330.251034][T10172] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 330.333677][T10172] team0: Port device team_slave_0 added [ 330.347973][T10172] team0: Port device team_slave_1 added [ 330.429517][T10172] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 330.437405][T10172] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 330.493541][T10172] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 330.531501][T10172] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 330.544860][T10172] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 330.575186][T10172] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 330.709912][T10172] hsr_slave_0: entered promiscuous mode [ 330.717289][T10172] hsr_slave_1: entered promiscuous mode [ 330.723842][T10172] debugfs: 'hsr0' already exists in 'hsr' [ 330.731223][T10172] Cannot create hsr debugfs directory [ 331.129738][T10172] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 331.136870][T10205] delete_channel: no stack [ 331.149543][T10172] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 331.161578][T10172] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 331.173297][T10172] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 331.257996][ T5148] Bluetooth: hci2: command tx timeout [ 331.647052][ T5874] smpboot: CPU 0 is now offline [ 331.655139][T10172] 8021q: adding VLAN 0 to HW filter on device bond0 [ 331.726822][T10172] 8021q: adding VLAN 0 to HW filter on device team0 [ 331.754560][ T7428] bridge0: port 1(bridge_slave_0) entered blocking state [ 331.761745][ T7428] bridge0: port 1(bridge_slave_0) entered forwarding state [ 331.800466][ T7428] bridge0: port 2(bridge_slave_1) entered blocking state [ 331.807657][ T7428] bridge0: port 2(bridge_slave_1) entered forwarding state [ 331.984978][T10172] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 332.783304][T10172] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 333.337495][ T5148] Bluetooth: hci2: command tx timeout [ 333.542876][T10172] veth0_vlan: entered promiscuous mode [ 333.572575][T10172] veth1_vlan: entered promiscuous mode [ 333.647346][T10172] veth0_macvtap: entered promiscuous mode [ 333.674188][T10172] veth1_macvtap: entered promiscuous mode [ 333.722643][T10172] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 333.753490][T10172] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 333.785137][ T6301] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 333.820858][ T6301] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.088440][ T6301] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.148567][ T6301] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.479962][ T6301] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 334.500141][ T6301] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 334.707888][ T6301] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 334.723171][ T6301] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 334.866101][T10276] vhci_hcd: invalid port number 23 [ 334.871256][T10276] vhci_hcd: Wrong hub descriptor type for USB 3.0 roothub. [ 335.227180][T10286] netlink: 8 bytes leftover after parsing attributes in process `syz.4.963'. [ 335.417041][ T52] Bluetooth: hci2: command tx timeout [ 337.376738][T10297] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 337.496223][ T52] Bluetooth: hci2: command tx timeout [ 338.176997][T10319] mkiss: ax0: crc mode is auto. [ 338.385643][T10319] mkiss: ax0: crc mode is auto. [ 338.568594][T10328] FAULT_INJECTION: forcing a failure. [ 338.568594][T10328] name fail_futex, interval 1, probability 0, space 0, times 0 [ 338.603394][T10328] CPU: 1 UID: 0 PID: 10328 Comm: syz.5.971 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 338.603446][T10328] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 338.603459][T10328] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 338.603472][T10328] Call Trace: [ 338.603480][T10328] [ 338.603488][T10328] dump_stack_lvl+0x16c/0x1f0 [ 338.603522][T10328] should_fail_ex+0x512/0x640 [ 338.603566][T10328] get_futex_key+0x1d0/0x1560 [ 338.603602][T10328] ? __pfx_get_futex_key+0x10/0x10 [ 338.603644][T10328] futex_wait_setup+0x9d/0x550 [ 338.603674][T10328] __futex_wait+0x193/0x2f0 [ 338.603696][T10328] ? __pfx___futex_wait+0x10/0x10 [ 338.603723][T10328] ? __pfx_futex_wake_mark+0x10/0x10 [ 338.603765][T10328] ? futex_hash+0x2c5/0x380 [ 338.603799][T10328] ? futex_private_hash_put+0xd5/0x190 [ 338.603832][T10328] futex_wait+0xe8/0x380 [ 338.603852][T10328] ? __pfx_futex_wait+0x10/0x10 [ 338.603881][T10328] ? __lock_acquire+0x622/0x1c90 [ 338.603920][T10328] do_futex+0x229/0x350 [ 338.603953][T10328] ? __pfx_do_futex+0x10/0x10 [ 338.603987][T10328] ? find_held_lock+0x2b/0x80 [ 338.604015][T10328] __x64_sys_futex+0x1e0/0x4c0 [ 338.604049][T10328] ? __do_sys_landlock_create_ruleset+0x2b2/0x4e0 [ 338.604086][T10328] ? __fget_files+0x20e/0x3c0 [ 338.604110][T10328] ? __pfx___x64_sys_futex+0x10/0x10 [ 338.604155][T10328] do_syscall_64+0xcd/0xfa0 [ 338.604198][T10328] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 338.604228][T10328] RIP: 0033:0x7f826af8f749 [ 338.604246][T10328] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 338.604269][T10328] RSP: 002b:00007f826bdd10e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 338.604289][T10328] RAX: ffffffffffffffda RBX: 00007f826b1e6098 RCX: 00007f826af8f749 [ 338.604305][T10328] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f826b1e6098 [ 338.604319][T10328] RBP: 00007f826b1e6090 R08: 0000000000000000 R09: 0000000000000000 [ 338.604333][T10328] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 338.604347][T10328] R13: 00007f826b1e6128 R14: 00007ffe980552f0 R15: 00007ffe980553d8 [ 338.604377][T10328] [ 338.853862][T10330] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 338.863307][T10330] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 340.122433][ T5148] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 340.132167][ T5148] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 340.145102][ T5148] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 340.153820][ T5148] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 340.161621][T10353] netlink: 28 bytes leftover after parsing attributes in process `syz.5.978'. [ 340.172643][ T5148] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 340.749495][T10354] chnl_net:caif_netlink_parms(): no params data found [ 341.077290][T10354] bridge0: port 1(bridge_slave_0) entered blocking state [ 341.102247][T10354] bridge0: port 1(bridge_slave_0) entered disabled state [ 341.126846][T10354] bridge_slave_0: entered allmulticast mode [ 341.157619][T10354] bridge_slave_0: entered promiscuous mode [ 341.181032][T10354] bridge0: port 2(bridge_slave_1) entered blocking state [ 341.202103][T10354] bridge0: port 2(bridge_slave_1) entered disabled state [ 341.227003][T10354] bridge_slave_1: entered allmulticast mode [ 341.254395][T10354] bridge_slave_1: entered promiscuous mode [ 341.466288][T10354] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 341.507778][T10354] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 341.689634][T10354] team0: Port device team_slave_0 added [ 341.707519][T10380] netlink: 330 bytes leftover after parsing attributes in process `syz.4.983'. [ 341.727183][T10354] team0: Port device team_slave_1 added [ 341.759171][T10381] netlink: 330 bytes leftover after parsing attributes in process `syz.4.983'. [ 341.800303][T10380] netlink: 330 bytes leftover after parsing attributes in process `syz.4.983'. [ 341.811004][T10354] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 341.833687][T10354] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 341.867960][T10386] netlink: 330 bytes leftover after parsing attributes in process `syz.4.983'. [ 341.901379][T10354] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 341.956717][T10354] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 341.975357][T10354] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 342.065399][T10354] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 342.185003][T10354] hsr_slave_0: entered promiscuous mode [ 342.204883][T10354] hsr_slave_1: entered promiscuous mode [ 342.214167][T10354] debugfs: 'hsr0' already exists in 'hsr' [ 342.220198][ T5148] Bluetooth: hci5: command tx timeout [ 342.235657][T10354] Cannot create hsr debugfs directory [ 342.606223][T10354] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 342.629977][T10354] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 342.657003][T10354] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 342.684702][T10354] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 342.962840][T10354] 8021q: adding VLAN 0 to HW filter on device bond0 [ 343.046707][T10354] 8021q: adding VLAN 0 to HW filter on device team0 [ 343.088065][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 343.095248][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 343.227024][ T6301] bridge0: port 2(bridge_slave_1) entered blocking state [ 343.234281][ T6301] bridge0: port 2(bridge_slave_1) entered forwarding state [ 344.036848][T10354] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 344.298360][ T5148] Bluetooth: hci5: command tx timeout [ 344.837471][T10354] veth0_vlan: entered promiscuous mode [ 344.884817][T10354] veth1_vlan: entered promiscuous mode [ 344.978349][T10354] veth0_macvtap: entered promiscuous mode [ 345.036108][T10354] veth1_macvtap: entered promiscuous mode [ 345.082553][T10354] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 345.136174][T10354] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 345.196157][ T12] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.215524][ T12] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.252535][ T12] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.377727][ T5148] Bluetooth: hci5: command tx timeout [ 346.405772][T10424] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(4.128.4294967291), cmd(3) [ 346.523198][ T981] Process accounting resumed [ 346.529971][T10428] Process accounting resumed [ 346.597551][ T5894] Process accounting resumed [ 346.606558][ T5894] Process accounting resumed [ 346.623475][ T5894] Process accounting resumed [ 346.642949][ T5894] Process accounting resumed [ 346.658235][ T5894] Process accounting resumed [ 346.699163][ T5894] Process accounting resumed [ 346.717361][ T5894] Process accounting resumed [ 346.730666][ T5894] Process accounting resumed [ 346.746851][ T5894] Process accounting resumed [ 346.765717][ T5894] Process accounting resumed [ 346.788035][ T5894] Process accounting resumed [ 346.808918][ T5894] Process accounting resumed [ 346.830195][ T5894] Process accounting resumed [ 346.848015][ T5894] Process accounting resumed [ 346.878204][ T5894] Process accounting resumed [ 346.891893][ T5894] Process accounting resumed [ 346.917932][ T5894] Process accounting resumed [ 346.972358][ T5894] Process accounting resumed [ 346.998536][ T5894] Process accounting resumed [ 347.022514][ T5894] Process accounting resumed [ 347.061757][ T5894] Process accounting resumed [ 347.093144][ T5894] Process accounting resumed [ 347.113311][ T5894] Process accounting resumed [ 347.135984][ T5894] Process accounting resumed [ 347.157262][ T5894] Process accounting resumed [ 347.178765][ T5894] Process accounting resumed [ 347.187348][ T5894] Process accounting resumed [ 347.198375][ T5894] Process accounting resumed [ 347.208358][ T5894] Process accounting resumed [ 347.219145][ T5894] Process accounting resumed [ 347.284667][T10424] Process accounting resumed [ 348.155620][ T12] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.346323][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 348.354189][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 348.456291][ T5148] Bluetooth: hci5: command tx timeout [ 348.462868][ T7442] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 348.492907][ T7442] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 349.322786][T10451] netlink: 28 bytes leftover after parsing attributes in process `syz.5.991'. [ 350.262313][T10342] mkiss: ax0: crc mode is auto. [ 350.407216][T10464] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 350.415985][T10464] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 350.432545][T10464] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 350.449199][T10464] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 350.475797][T10464] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 350.497547][T10464] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 350.568340][T10464] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 350.600864][T10464] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 350.619489][T10464] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 350.643944][T10464] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 350.679838][T10464] CPU0 is offline. [ 351.354976][T10490] FAULT_INJECTION: forcing a failure. [ 351.354976][T10490] name failslab, interval 1, probability 0, space 0, times 0 [ 351.436782][T10496] netlink: 330 bytes leftover after parsing attributes in process `syz.6.1002'. [ 351.459996][T10490] CPU: 1 UID: 0 PID: 10490 Comm: syz.4.1000 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 351.460050][T10490] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 351.460062][T10490] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 351.460077][T10490] Call Trace: [ 351.460084][T10490] [ 351.460093][T10490] dump_stack_lvl+0x16c/0x1f0 [ 351.460127][T10490] should_fail_ex+0x512/0x640 [ 351.460162][T10490] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 351.460189][T10490] should_failslab+0xc2/0x120 [ 351.460220][T10490] kmem_cache_alloc_noprof+0x75/0x6e0 [ 351.460251][T10490] ? __proc_create+0x2ce/0x8e0 [ 351.460290][T10490] ? __proc_create+0x2ce/0x8e0 [ 351.460323][T10490] __proc_create+0x2ce/0x8e0 [ 351.460358][T10490] ? __pfx___proc_create+0x10/0x10 [ 351.460398][T10490] ? mark_held_locks+0x49/0x80 [ 351.460433][T10490] _proc_mkdir+0xb9/0x210 [ 351.460468][T10490] ? __pfx__proc_mkdir+0x10/0x10 [ 351.460512][T10490] sctp_proc_init+0x59/0x270 [ 351.460540][T10490] ? __pfx_sctp_defaults_init+0x10/0x10 [ 351.460567][T10490] sctp_defaults_init+0x758/0xd90 [ 351.460597][T10490] ? __pfx_sctp_defaults_init+0x10/0x10 [ 351.460625][T10490] ops_init+0x1e2/0x5f0 [ 351.460666][T10490] setup_net+0x100/0x390 [ 351.460690][T10490] ? __pfx_setup_net+0x10/0x10 [ 351.460715][T10490] ? debug_mutex_init+0x37/0x70 [ 351.460741][T10490] copy_net_ns+0x2f8/0x690 [ 351.460771][T10490] create_new_namespaces+0x3ea/0xa90 [ 351.460803][T10490] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 351.460852][T10490] ksys_unshare+0x45b/0xa40 [ 351.460884][T10490] ? __pfx_ksys_unshare+0x10/0x10 [ 351.460916][T10490] ? xfd_validate_state+0x61/0x180 [ 351.460958][T10490] __x64_sys_unshare+0x31/0x40 [ 351.460988][T10490] do_syscall_64+0xcd/0xfa0 [ 351.461019][T10490] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 351.461045][T10490] RIP: 0033:0x7f4ce9b8f749 [ 351.461067][T10490] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 351.461090][T10490] RSP: 002b:00007f4ceaa32038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 351.461112][T10490] RAX: ffffffffffffffda RBX: 00007f4ce9de5fa0 RCX: 00007f4ce9b8f749 [ 351.461127][T10490] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 351.461141][T10490] RBP: 00007f4ce9c13f91 R08: 0000000000000000 R09: 0000000000000000 [ 351.461155][T10490] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 351.461169][T10490] R13: 00007f4ce9de6038 R14: 00007f4ce9de5fa0 R15: 00007ffcf52a0c38 [ 351.461201][T10490] [ 351.931126][ T52] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 351.940074][ T52] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 352.027155][ T52] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 352.036824][ T52] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 352.044672][ T52] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 352.375824][ T52] Bluetooth: hci0: command 0x0c1a tx timeout [ 352.464358][ T52] Bluetooth: hci4: command 0x040f tx timeout [ 352.471403][ T5148] Bluetooth: hci3: command 0x0c1a tx timeout [ 352.479363][ T5830] Bluetooth: hci1: command 0x0c1a tx timeout [ 352.536853][ T52] Bluetooth: hci2: command 0x0c1a tx timeout [ 352.618040][ T52] Bluetooth: hci5: command 0x0c1a tx timeout [ 353.069038][T10499] chnl_net:caif_netlink_parms(): no params data found [ 353.901815][T10499] bridge0: port 1(bridge_slave_0) entered blocking state [ 353.948912][T10499] bridge0: port 1(bridge_slave_0) entered disabled state [ 353.981753][T10499] bridge_slave_0: entered allmulticast mode [ 354.027343][T10499] bridge_slave_0: entered promiscuous mode [ 354.137123][ T52] Bluetooth: hci6: command tx timeout [ 354.199443][T10499] bridge0: port 2(bridge_slave_1) entered blocking state [ 354.266567][T10499] bridge0: port 2(bridge_slave_1) entered disabled state [ 354.273808][T10499] bridge_slave_1: entered allmulticast mode [ 354.327269][T10554] net_ratelimit: 51 callbacks suppressed [ 354.327288][T10554] netlink: Failed to add  helper -22 [ 354.372398][T10499] bridge_slave_1: entered promiscuous mode [ 354.527795][T10499] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 354.561497][T10560] can: request_module (can-proto-5) failed. [ 354.616765][ T52] Bluetooth: hci2: command 0x0c1a tx timeout [ 354.648296][T10499] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 354.696108][ T52] Bluetooth: hci5: command 0x0c1a tx timeout [ 354.725991][T10565] netlink: 342 bytes leftover after parsing attributes in process `syz.4.1014'. [ 354.782177][T10499] team0: Port device team_slave_0 added [ 354.822579][T10499] team0: Port device team_slave_1 added [ 354.987998][T10499] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 355.022432][T10499] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 355.141839][T10499] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 355.232656][T10499] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 355.252595][T10499] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 355.380614][T10499] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 355.409257][ T30] audit: type=1800 audit(4294967461.606:11): pid=10576 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1018" name="members" dev="configfs" ino=34037 res=0 errno=0 [ 355.805903][T10499] hsr_slave_0: entered promiscuous mode [ 355.823075][T10499] hsr_slave_1: entered promiscuous mode [ 355.843805][T10499] debugfs: 'hsr0' already exists in 'hsr' [ 355.865453][T10499] Cannot create hsr debugfs directory [ 356.219762][ T52] Bluetooth: hci6: command tx timeout [ 356.695633][ T52] Bluetooth: hci2: command 0x0c1a tx timeout [ 356.780192][ T52] Bluetooth: hci5: command 0x0c1a tx timeout [ 356.881036][T10499] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 356.912713][T10594] netlink: set zone limit has 8 unknown bytes [ 356.944735][T10499] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 357.039125][T10499] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 357.087299][T10499] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 357.763404][T10499] 8021q: adding VLAN 0 to HW filter on device bond0 [ 357.918657][T10639] nfs: Unknown parameter 'w`_I+; HY Lu>>uh*C<+ ' [ 357.958031][T10499] 8021q: adding VLAN 0 to HW filter on device team0 [ 358.019867][ T7428] bridge0: port 1(bridge_slave_0) entered blocking state [ 358.027137][ T7428] bridge0: port 1(bridge_slave_0) entered forwarding state [ 358.051885][T10635] can: request_module (can-proto-0) failed. [ 358.224421][ T7428] bridge0: port 2(bridge_slave_1) entered blocking state [ 358.231682][ T7428] bridge0: port 2(bridge_slave_1) entered forwarding state [ 358.299980][ T52] Bluetooth: hci6: command tx timeout [ 358.676381][T10650] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1030'. [ 358.983060][T10650] veth1_macvtap: left promiscuous mode [ 359.343672][T10499] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 360.375835][ T52] Bluetooth: hci6: command tx timeout [ 360.828534][T10499] veth0_vlan: entered promiscuous mode [ 360.969739][T10499] veth1_vlan: entered promiscuous mode [ 361.423432][T10499] veth0_macvtap: entered promiscuous mode [ 361.471339][T10499] veth1_macvtap: entered promiscuous mode [ 361.597897][T10499] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 361.634699][T10499] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 361.708043][ T7442] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 361.805648][ T7442] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 361.851494][ T7442] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 361.957752][T10492] mkiss: ax0: crc mode is auto. [ 361.963178][ T7442] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.283393][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 362.325946][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 362.696925][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 362.732272][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 362.867576][T10717] netlink: 'syz.5.1041': attribute type 11 has an invalid length. [ 362.939311][T10717] netlink: 'syz.5.1041': attribute type 11 has an invalid length. [ 363.040543][T10717] netlink: 'syz.5.1041': attribute type 11 has an invalid length. [ 364.410398][T10743] ICMPv6: process `syz.5.1046' is using deprecated sysctl (syscall) net.ipv6.neigh.veth0_to_bridge.base_reachable_time - use net.ipv6.neigh.veth0_to_bridge.base_reachable_time_ms instead [ 364.428750][ C1] vkms_vblank_simulate: vblank timer overrun [ 364.835023][T10754] ACPI: Can not change Invalid GPE/Fixed Event status [ 365.610222][T10766] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 366.358673][T10779] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1060'. [ 369.733758][T10842] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1070'. [ 372.039249][T10885] input: f as /devices/virtual/input/input14 [ 372.280276][ T52] Bluetooth: hci4: unexpected subevent 0x01 length: 123 > 18 [ 372.288838][ T52] Bluetooth: hci4: Invalid handle: 0x3a4a > 0x0eff [ 372.297144][ T52] Bluetooth: hci4: unexpected subevent 0x01 length: 123 > 18 [ 372.304552][ T52] Bluetooth: hci4: Invalid handle: 0x3a4a > 0x0eff [ 372.794124][T10896] FAULT_INJECTION: forcing a failure. [ 372.794124][T10896] name failslab, interval 1, probability 0, space 0, times 0 [ 373.036868][T10896] CPU: 1 UID: 0 PID: 10896 Comm: syz.5.1082 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 373.036920][T10896] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 373.036934][T10896] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 373.036947][T10896] Call Trace: [ 373.036954][T10896] [ 373.036963][T10896] dump_stack_lvl+0x16c/0x1f0 [ 373.036996][T10896] should_fail_ex+0x512/0x640 [ 373.037032][T10896] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 373.037058][T10896] should_failslab+0xc2/0x120 [ 373.037090][T10896] kmem_cache_alloc_noprof+0x75/0x6e0 [ 373.037114][T10896] ? ptlock_alloc+0x1f/0x70 [ 373.037154][T10896] ? ptlock_alloc+0x1f/0x70 [ 373.037188][T10896] ptlock_alloc+0x1f/0x70 [ 373.037223][T10896] pte_alloc_one+0x84/0x350 [ 373.037249][T10896] __pte_alloc+0x6d/0x380 [ 373.037277][T10896] ? __pfx___pte_alloc+0x10/0x10 [ 373.037308][T10896] ? do_raw_spin_lock+0x12c/0x2b0 [ 373.037347][T10896] do_pte_missing+0x282c/0x3ba0 [ 373.037384][T10896] ? __thp_vma_allowable_orders+0x1c8/0xcd0 [ 373.037421][T10896] ? __pmd_alloc+0x64f/0x8b0 [ 373.037455][T10896] __handle_mm_fault+0x1556/0x2aa0 [ 373.037500][T10896] ? __pfx___handle_mm_fault+0x10/0x10 [ 373.037568][T10896] handle_mm_fault+0x589/0xd10 [ 373.037612][T10896] __get_user_pages+0x54e/0x3530 [ 373.037657][T10896] ? __pfx___get_user_pages+0x10/0x10 [ 373.037698][T10896] populate_vma_page_range+0x267/0x3f0 [ 373.037734][T10896] ? __pfx_populate_vma_page_range+0x10/0x10 [ 373.037767][T10896] ? __pfx_find_vma_intersection+0x10/0x10 [ 373.037799][T10896] ? do_mmap+0x69c/0x1210 [ 373.037832][T10896] __mm_populate+0x1d8/0x380 [ 373.037866][T10896] ? __pfx___mm_populate+0x10/0x10 [ 373.037902][T10896] ? up_write+0x1b2/0x520 [ 373.037939][T10896] vm_mmap_pgoff+0x37f/0x470 [ 373.037973][T10896] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 373.038010][T10896] ? __x64_sys_futex+0x1e0/0x4c0 [ 373.038040][T10896] ? __x64_sys_futex+0x1e9/0x4c0 [ 373.038075][T10896] ksys_mmap_pgoff+0x7d/0x5c0 [ 373.038104][T10896] ? xfd_validate_state+0x61/0x180 [ 373.038135][T10896] ? __pfx_do_writev+0x10/0x10 [ 373.038161][T10896] __x64_sys_mmap+0x125/0x190 [ 373.038199][T10896] do_syscall_64+0xcd/0xfa0 [ 373.038230][T10896] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 373.038254][T10896] RIP: 0033:0x7f826af8f749 [ 373.038273][T10896] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 373.038296][T10896] RSP: 002b:00007f826bdf2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 373.038316][T10896] RAX: ffffffffffffffda RBX: 00007f826b1e5fa0 RCX: 00007f826af8f749 [ 373.038331][T10896] RDX: 0000000000000072 RSI: 0000000000000009 RDI: 0000000000000000 [ 373.038344][T10896] RBP: 00007f826b013f91 R08: 0000000000000002 R09: 0000000000008000 [ 373.038357][T10896] R10: 0000000000008b72 R11: 0000000000000246 R12: 0000000000000000 [ 373.038371][T10896] R13: 00007f826b1e6038 R14: 00007f826b1e5fa0 R15: 00007ffe980553d8 [ 373.038402][T10896] [ 374.558931][T10903] qrtr: Invalid version 0 [ 375.009014][T10722] mkiss: ax0: crc mode is auto. [ 377.897762][T10961] qrtr: Invalid version 0 [ 378.098734][T10959] Process accounting paused [ 380.468603][T11003] bcache: register_bcache() error : failed to open device [ 382.204616][T11019] qrtr: Invalid version 0 [ 382.564253][T11027] netlink: 'syz.5.1111': attribute type 1 has an invalid length. [ 382.586068][T11031] Unable to find swap-space signature [ 382.677779][T11027] netlink: 13 bytes leftover after parsing attributes in process `syz.5.1111'. [ 384.558551][T11069] Kernel: The 'panic_print' parameter is now deprecated. Please use 'panic_sys_info' and 'panic_console_replay' instead. [ 385.244715][T11073] qrtr: Invalid version 0 [ 385.300171][T11077] openvswitch: netlink: ct_state flags aa1414ac unsupported [ 385.565504][T11079] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input15 [ 386.928463][T10933] mkiss: ax0: crc mode is auto. [ 388.640869][T11126] vhci_hcd: USB_PORT_FEAT_BH_PORT_RESET req not supported for USB 2.0 roothub [ 388.913240][T11126] Console: switching to colour frame buffer device 128x48 [ 388.991334][T11130] netlink: zone id is out of range [ 389.009932][T11130] netlink: zone id is out of range [ 389.028799][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 389.039954][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 389.071836][T11130] netlink: zone id is out of range [ 389.094980][T11130] netlink: zone id is out of range [ 389.120702][T11130] netlink: zone id is out of range [ 389.155974][T11130] netlink: zone id is out of range [ 389.182208][T11130] netlink: zone id is out of range [ 389.211739][T11130] netlink: zone id is out of range [ 389.244186][T11130] netlink: zone id is out of range [ 389.821487][T11138] FAULT_INJECTION: forcing a failure. [ 389.821487][T11138] name failslab, interval 1, probability 0, space 0, times 0 [ 390.028787][T11138] CPU: 1 UID: 0 PID: 11138 Comm: syz.5.1136 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 390.028838][T11138] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 390.028851][T11138] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 390.028865][T11138] Call Trace: [ 390.028872][T11138] [ 390.028880][T11138] dump_stack_lvl+0x16c/0x1f0 [ 390.028912][T11138] should_fail_ex+0x512/0x640 [ 390.028947][T11138] ? __kmalloc_cache_noprof+0x5f/0x780 [ 390.028973][T11138] should_failslab+0xc2/0x120 [ 390.029004][T11138] __kmalloc_cache_noprof+0x72/0x780 [ 390.029024][T11138] ? rcu_is_watching+0x12/0xc0 [ 390.029049][T11138] ? resv_map_alloc+0x46/0x400 [ 390.029085][T11138] ? resv_map_alloc+0x46/0x400 [ 390.029115][T11138] resv_map_alloc+0x46/0x400 [ 390.029148][T11138] hugetlbfs_get_inode+0x33f/0x730 [ 390.029179][T11138] hugetlb_file_setup+0x15b/0x620 [ 390.029208][T11138] ksys_mmap_pgoff+0x189/0x5c0 [ 390.029264][T11138] __x64_sys_mmap+0x125/0x190 [ 390.029304][T11138] do_syscall_64+0xcd/0xfa0 [ 390.029336][T11138] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 390.029359][T11138] RIP: 0033:0x7f826af8f749 [ 390.029378][T11138] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 390.029400][T11138] RSP: 002b:00007f826bdb0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 390.029421][T11138] RAX: ffffffffffffffda RBX: 00007f826b1e6180 RCX: 00007f826af8f749 [ 390.029436][T11138] RDX: 0000000000000002 RSI: 0000000000000006 RDI: 0000000000000000 [ 390.029450][T11138] RBP: 00007f826b013f91 R08: ffffffffffffffff R09: 0000308000000000 [ 390.029464][T11138] R10: 0000000000040eb2 R11: 0000000000000246 R12: 0000000000000000 [ 390.029477][T11138] R13: 00007f826b1e6218 R14: 00007f826b1e6180 R15: 00007ffe980553d8 [ 390.029506][T11138] [ 390.221020][ C1] vkms_vblank_simulate: vblank timer overrun [ 390.835377][ T52] Bluetooth: hci5: unexpected event 0x23 length: 127 > 13 [ 390.924267][T11151] netlink: 338 bytes leftover after parsing attributes in process `syz.6.1140'. [ 395.353699][ T5148] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 395.363056][ T5148] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 395.375464][ T5148] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 395.388895][ T5148] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 395.407004][ T5148] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 396.107671][T11204] chnl_net:caif_netlink_parms(): no params data found [ 396.369578][T11204] bridge0: port 1(bridge_slave_0) entered blocking state [ 396.396148][T11204] bridge0: port 1(bridge_slave_0) entered disabled state [ 396.425236][T11204] bridge_slave_0: entered allmulticast mode [ 396.456043][T11204] bridge_slave_0: entered promiscuous mode [ 396.486644][T11204] bridge0: port 2(bridge_slave_1) entered blocking state [ 396.493794][T11204] bridge0: port 2(bridge_slave_1) entered disabled state [ 396.535878][T11204] bridge_slave_1: entered allmulticast mode [ 396.556872][T11204] bridge_slave_1: entered promiscuous mode [ 396.692704][T11204] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 396.748303][T11204] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 396.876506][T11204] team0: Port device team_slave_0 added [ 396.884497][T11204] team0: Port device team_slave_1 added [ 397.024824][T11204] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 397.052378][T11204] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 397.078339][ C1] vkms_vblank_simulate: vblank timer overrun [ 397.147604][T11204] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 397.200015][T11204] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 397.224758][T11204] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 397.315763][T11204] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 397.495617][ T5148] Bluetooth: hci7: command tx timeout [ 397.504242][T11204] hsr_slave_0: entered promiscuous mode [ 397.526646][T11204] hsr_slave_1: entered promiscuous mode [ 397.536514][ T30] audit: type=1800 audit(4294967324.910:12): pid=11214 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="" name="lu_gp_id" dev="configfs" ino=38152 res=0 errno=0 [ 397.572295][T11204] debugfs: 'hsr0' already exists in 'hsr' [ 397.598302][T11204] Cannot create hsr debugfs directory [ 398.209664][T11113] mkiss: ax0: crc mode is auto. [ 398.287748][T11204] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 398.324392][T11204] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 398.363599][T11204] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 398.407471][T11204] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 398.924895][T11204] 8021q: adding VLAN 0 to HW filter on device bond0 [ 398.999290][T11204] 8021q: adding VLAN 0 to HW filter on device team0 [ 399.058534][ T6301] bridge0: port 1(bridge_slave_0) entered blocking state [ 399.065726][ T6301] bridge0: port 1(bridge_slave_0) entered forwarding state [ 399.276171][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 399.283301][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 399.575606][ T5148] Bluetooth: hci7: command tx timeout [ 399.780767][T11252] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1163'. [ 399.913769][T11255] FAULT_INJECTION: forcing a failure. [ 399.913769][T11255] name failslab, interval 1, probability 0, space 0, times 0 [ 399.974766][T11255] CPU: 1 UID: 0 PID: 11255 Comm: syz.4.1162 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 399.974816][T11255] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 399.974829][T11255] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 399.974842][T11255] Call Trace: [ 399.974849][T11255] [ 399.974857][T11255] dump_stack_lvl+0x16c/0x1f0 [ 399.974890][T11255] should_fail_ex+0x512/0x640 [ 399.974925][T11255] ? __kmalloc_cache_noprof+0x5f/0x780 [ 399.974951][T11255] should_failslab+0xc2/0x120 [ 399.974983][T11255] __kmalloc_cache_noprof+0x72/0x780 [ 399.975004][T11255] ? rcu_is_watching+0x12/0xc0 [ 399.975029][T11255] ? resv_map_alloc+0x46/0x400 [ 399.975065][T11255] ? resv_map_alloc+0x46/0x400 [ 399.975095][T11255] resv_map_alloc+0x46/0x400 [ 399.975129][T11255] hugetlbfs_get_inode+0x33f/0x730 [ 399.975160][T11255] hugetlb_file_setup+0x15b/0x620 [ 399.975188][T11255] ksys_mmap_pgoff+0x189/0x5c0 [ 399.975224][T11255] __x64_sys_mmap+0x125/0x190 [ 399.975267][T11255] do_syscall_64+0xcd/0xfa0 [ 399.975297][T11255] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 399.975320][T11255] RIP: 0033:0x7f4ce9b8f749 [ 399.975338][T11255] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 399.975360][T11255] RSP: 002b:00007f4cea9f0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 399.975381][T11255] RAX: ffffffffffffffda RBX: 00007f4ce9de6180 RCX: 00007f4ce9b8f749 [ 399.975396][T11255] RDX: 0000000000000002 RSI: 0000000000000006 RDI: 0000000000000000 [ 399.975409][T11255] RBP: 00007f4ce9c13f91 R08: ffffffffffffffff R09: 0000308000000000 [ 399.975423][T11255] R10: 0000000000040eb2 R11: 0000000000000246 R12: 0000000000000000 [ 399.975436][T11255] R13: 00007f4ce9de6218 R14: 00007f4ce9de6180 R15: 00007ffcf52a0c38 [ 399.975466][T11255] [ 400.543793][T11252] bond0: (slave bond_slave_0): Releasing backup interface [ 400.900323][T11204] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 401.648454][T11204] veth0_vlan: entered promiscuous mode [ 401.655744][ T5148] Bluetooth: hci7: command tx timeout [ 401.715141][T11204] veth1_vlan: entered promiscuous mode [ 401.820326][T11204] veth0_macvtap: entered promiscuous mode [ 401.868786][T11204] veth1_macvtap: entered promiscuous mode [ 401.948035][T11204] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 402.012945][T11204] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 402.078270][ T7439] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 402.117464][ T7439] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 402.155892][ T7439] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 402.199542][ T7439] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 402.431122][ T7439] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 402.482287][ T7439] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 402.591484][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 402.625903][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 403.359990][T11295] zswap: compressor not available [ 403.736629][ T5148] Bluetooth: hci7: command tx timeout [ 404.268844][T11311] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1174'. [ 404.312415][T11311] vlan1: entered promiscuous mode [ 404.324267][T11311] vlan1: entered allmulticast mode [ 404.339138][T11311] veth0_vlan: entered allmulticast mode [ 404.346179][T11313] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1174'. [ 404.374800][T11311] ptrace attach of ""[11314] was attempted by "./syz-executor exec"[11311] [ 405.082744][T11325] netlink: 334 bytes leftover after parsing attributes in process `syz.8.1175'. [ 406.161278][T11342] binder: 11341:11342 ioctl c0306201 0 returned -14 [ 407.256476][ T5148] Bluetooth: hci7: unexpected subevent 0x01 length: 1 < 18 [ 408.362955][T11382] Process accounting resumed [ 409.188758][T11399] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 409.254102][T11399] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 409.333666][T11399] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 409.397830][T11399] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 409.528552][T11399] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 409.595665][T11399] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 409.635230][T11239] mkiss: ax0: crc mode is auto. [ 409.683939][T11399] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 409.762380][T11399] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 409.841090][T11399] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 409.962144][T11399] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 410.028672][T11399] Bluetooth: hci7: Opcode 0x0406 failed: -4 [ 410.111686][T11399] Bluetooth: hci7: Opcode 0x0406 failed: -4 [ 410.224647][T11399] CPU0 is offline. [ 410.256146][ T52] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 410.266225][ T52] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 410.274059][ T52] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 410.282353][ T52] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 410.290141][ T52] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 410.510214][T11414] FAULT_INJECTION: forcing a failure. [ 410.510214][T11414] name failslab, interval 1, probability 0, space 0, times 0 [ 410.688203][T11417] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1199'. [ 410.699697][T11414] CPU: 1 UID: 0 PID: 11414 Comm: syz.8.1198 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 410.699747][T11414] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 410.699760][T11414] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 410.699774][T11414] Call Trace: [ 410.699780][T11414] [ 410.699789][T11414] dump_stack_lvl+0x16c/0x1f0 [ 410.699822][T11414] should_fail_ex+0x512/0x640 [ 410.699858][T11414] ? __kmalloc_cache_noprof+0x5f/0x780 [ 410.699883][T11414] should_failslab+0xc2/0x120 [ 410.699915][T11414] __kmalloc_cache_noprof+0x72/0x780 [ 410.699935][T11414] ? rcu_is_watching+0x12/0xc0 [ 410.699959][T11414] ? resv_map_alloc+0x46/0x400 [ 410.699995][T11414] ? resv_map_alloc+0x46/0x400 [ 410.700036][T11414] resv_map_alloc+0x46/0x400 [ 410.700069][T11414] hugetlbfs_get_inode+0x33f/0x730 [ 410.700101][T11414] hugetlb_file_setup+0x15b/0x620 [ 410.700130][T11414] ksys_mmap_pgoff+0x189/0x5c0 [ 410.700165][T11414] __x64_sys_mmap+0x125/0x190 [ 410.700208][T11414] do_syscall_64+0xcd/0xfa0 [ 410.700238][T11414] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 410.700261][T11414] RIP: 0033:0x7f368eb8f749 [ 410.700278][T11414] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 410.700301][T11414] RSP: 002b:00007f368f94e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 410.700334][T11414] RAX: ffffffffffffffda RBX: 00007f368ede6180 RCX: 00007f368eb8f749 [ 410.700348][T11414] RDX: 0000000000000002 RSI: 0000000000000006 RDI: 0000000000000000 [ 410.700361][T11414] RBP: 00007f368ec13f91 R08: ffffffffffffffff R09: 0000308000000000 [ 410.700374][T11414] R10: 0000000000040eb2 R11: 0000000000000246 R12: 0000000000000000 [ 410.700387][T11414] R13: 00007f368ede6218 R14: 00007f368ede6180 R15: 00007ffc3243b208 [ 410.700415][T11414] [ 410.891719][ C1] vkms_vblank_simulate: vblank timer overrun [ 411.077786][T11421] netlink: 17 bytes leftover after parsing attributes in process `syz.5.1199'. [ 411.256739][ T52] Bluetooth: hci1: command 0x0c1a tx timeout [ 411.262836][ T5148] Bluetooth: hci0: command 0x0c1a tx timeout [ 411.336675][ T52] Bluetooth: hci3: command 0x0c1a tx timeout [ 411.416055][ T52] Bluetooth: hci4: command 0x040f tx timeout [ 411.575818][ T52] Bluetooth: hci5: command 0x0c1a tx timeout [ 411.581938][ T5148] Bluetooth: hci2: command 0x0c1a tx timeout [ 411.736804][ T52] Bluetooth: hci6: command 0x0c1a tx timeout [ 411.975790][ T52] Bluetooth: hci7: command 0x0c1a tx timeout [ 412.148594][T11430] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1201'. [ 412.277686][T11435] netlink: 354 bytes leftover after parsing attributes in process `syz.4.1201'. [ 412.292139][T11407] chnl_net:caif_netlink_parms(): no params data found [ 412.376172][ T52] Bluetooth: hci8: command tx timeout [ 412.846188][T11407] bridge0: port 1(bridge_slave_0) entered blocking state [ 412.884201][T11407] bridge0: port 1(bridge_slave_0) entered disabled state [ 412.927564][T11407] bridge_slave_0: entered allmulticast mode [ 412.965543][T11407] bridge_slave_0: entered promiscuous mode [ 413.001329][T11407] bridge0: port 2(bridge_slave_1) entered blocking state [ 413.060997][T11407] bridge0: port 2(bridge_slave_1) entered disabled state [ 413.089688][T11407] bridge_slave_1: entered allmulticast mode [ 413.136121][T11407] bridge_slave_1: entered promiscuous mode [ 413.500998][T11407] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 413.578189][T11407] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 413.727654][T11462] hub 1-0:1.0: USB hub found [ 413.745777][T11462] hub 1-0:1.0: 1 port detected [ 413.817547][ T52] Bluetooth: hci6: command 0x0c1a tx timeout [ 413.832416][T11407] team0: Port device team_slave_0 added [ 413.878210][T11407] team0: Port device team_slave_1 added [ 413.886931][T11460] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 413.892997][T11460] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 414.041315][T11460] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 414.055739][ T5148] Bluetooth: hci7: command 0x0c1a tx timeout [ 414.125664][T11407] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 414.135226][T11460] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 414.150518][T11460] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 414.163447][T11407] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 414.203774][T11460] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 414.264035][T11407] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 414.309025][T11460] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 414.352356][T11407] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 414.374315][T11407] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 414.400798][T11460] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 414.415776][T11460] Bluetooth: hci8: Opcode 0x0c1a failed: -4 [ 414.432816][T11460] Bluetooth: hci8: Opcode 0x0406 failed: -4 [ 414.457085][T11460] Bluetooth: hci8: Opcode 0x0406 failed: -4 [ 414.471824][T11407] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 414.674317][T11460] CPU0 is offline. [ 414.821149][T11474] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1211'. [ 414.864171][T11474] netlink: 29 bytes leftover after parsing attributes in process `syz.5.1211'. [ 414.922048][T11407] hsr_slave_0: entered promiscuous mode [ 414.956704][T11407] hsr_slave_1: entered promiscuous mode [ 414.988628][T11407] debugfs: 'hsr0' already exists in 'hsr' [ 415.038388][T11407] Cannot create hsr debugfs directory [ 415.151952][ T5148] Bluetooth: hci4: Malformed LE Event: 0x0b [ 415.977771][ T5148] Bluetooth: hci1: command 0x0c1a tx timeout [ 415.983892][ T5148] Bluetooth: hci0: command 0x0c1a tx timeout [ 416.055593][ T5148] Bluetooth: hci3: command 0x0c1a tx timeout [ 416.092605][T11407] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 416.135646][ T5148] Bluetooth: hci4: command 0x040f tx timeout [ 416.160246][T11407] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 416.217650][ T5148] Bluetooth: hci2: command 0x0c1a tx timeout [ 416.238356][T11407] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 416.295989][ T5148] Bluetooth: hci5: command 0x0c1a tx timeout [ 416.377302][ T5148] Bluetooth: hci7: command 0x0c1a tx timeout [ 416.383599][ T52] Bluetooth: hci6: command 0x0c1a tx timeout [ 416.434045][T11407] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 416.456978][ T5148] Bluetooth: hci8: command 0x040f tx timeout [ 417.213711][T11407] 8021q: adding VLAN 0 to HW filter on device bond0 [ 417.390669][T11407] 8021q: adding VLAN 0 to HW filter on device team0 [ 417.473974][ T7428] bridge0: port 1(bridge_slave_0) entered blocking state [ 417.481149][ T7428] bridge0: port 1(bridge_slave_0) entered forwarding state [ 417.531521][T11514] block nbd9: NBD_DISCONNECT [ 417.571273][ T7428] bridge0: port 2(bridge_slave_1) entered blocking state [ 417.578463][ T7428] bridge0: port 2(bridge_slave_1) entered forwarding state [ 418.234530][T11514] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 418.540127][ T5148] Bluetooth: hci8: command 0x040f tx timeout [ 418.708521][T11514] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 419.227828][T11514] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 419.244465][T11535] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 419.307697][T11535] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 419.418761][T11535] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 419.424829][T11535] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 419.669101][T11514] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 419.706947][T11535] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 419.862299][T11407] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 420.020193][T11535] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 420.175792][T11535] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 420.355926][T11535] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 420.361995][T11535] Bluetooth: hci8: Opcode 0x0c1a failed: -4 [ 420.645556][T11535] CPU0 is offline. [ 421.127685][T11419] mkiss: ax0: crc mode is auto. [ 421.149036][T11573] netlink: 334 bytes leftover after parsing attributes in process `syz.8.1223'. [ 421.260046][ T5148] Bluetooth: hci0: command 0x0c1a tx timeout [ 421.277446][T11407] veth0_vlan: entered promiscuous mode [ 421.341926][ T5148] Bluetooth: hci1: command 0x0c1a tx timeout [ 421.350729][T11407] veth1_vlan: entered promiscuous mode [ 421.453815][T11407] veth0_macvtap: entered promiscuous mode [ 421.495949][ T5148] Bluetooth: hci4: command 0x040f tx timeout [ 421.502108][ T52] Bluetooth: hci3: command 0x0c1a tx timeout [ 421.538178][T11407] veth1_macvtap: entered promiscuous mode [ 421.566410][T11578] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 421.614219][T11407] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 421.692619][T11407] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 421.735863][ T5148] Bluetooth: hci2: command 0x0c1a tx timeout [ 421.803760][ T7423] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 421.827802][ T7423] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 421.876414][ T7423] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 421.989752][ T7423] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.056108][ T5148] Bluetooth: hci5: command 0x0c1a tx timeout [ 422.215455][ T5148] Bluetooth: hci6: command 0x0c1a tx timeout [ 422.376179][ T52] Bluetooth: hci7: command 0x0c1a tx timeout [ 422.382464][ T5148] Bluetooth: hci8: command 0x040f tx timeout [ 422.596770][T11585] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 422.672447][ T7423] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 422.729878][T11585] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 422.740556][ T7423] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 422.862502][T11585] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 422.885538][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 422.922379][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 423.010482][T11585] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 423.136866][T11585] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 423.307221][T11585] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 423.366525][T11585] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 423.414348][T11585] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 423.491919][T11585] Bluetooth: hci8: Opcode 0x0c1a failed: -4 [ 423.583396][T11585] CPU0 is offline. [ 424.615452][ T5148] Bluetooth: hci1: command 0x0c1a tx timeout [ 424.621572][ T52] Bluetooth: hci0: command 0x0c1a tx timeout [ 424.936151][ T5148] Bluetooth: hci3: command 0x0c1a tx timeout [ 425.015510][ T5148] Bluetooth: hci4: command 0x040f tx timeout [ 425.126451][T11629] futex_wake_op: syz.9.1236 tries to shift op by -2048; fix this program [ 425.175431][ T5148] Bluetooth: hci2: command 0x0c1a tx timeout [ 425.232180][T11627] 0x000000000001-0x000000020000 : "" [ 425.268417][T11627] ftl_cs: FTL header corrupt! [ 425.335960][ T5148] Bluetooth: hci5: command 0x0c1a tx timeout [ 425.415857][ T5148] Bluetooth: hci6: command 0x0c1a tx timeout [ 425.500777][ T5148] Bluetooth: hci8: command 0x040f tx timeout [ 425.506987][ T52] Bluetooth: hci7: command 0x0c1a tx timeout [ 425.962243][T11637] random: crng reseeded on system resumption [ 426.379554][T11643] FAULT_INJECTION: forcing a failure. [ 426.379554][T11643] name failslab, interval 1, probability 0, space 0, times 0 [ 426.476483][T11643] CPU: 1 UID: 0 PID: 11643 Comm: syz.9.1239 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 426.476534][T11643] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 426.476547][T11643] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 426.476560][T11643] Call Trace: [ 426.476568][T11643] [ 426.476576][T11643] dump_stack_lvl+0x16c/0x1f0 [ 426.476608][T11643] should_fail_ex+0x512/0x640 [ 426.476643][T11643] ? __kmalloc_noprof+0xca/0x880 [ 426.476683][T11643] should_failslab+0xc2/0x120 [ 426.476715][T11643] __kmalloc_noprof+0xdd/0x880 [ 426.476752][T11643] ? create_ruleset+0x21/0x140 [ 426.476792][T11643] ? create_ruleset+0x21/0x140 [ 426.476825][T11643] create_ruleset+0x21/0x140 [ 426.476860][T11643] landlock_merge_ruleset+0xbb/0x870 [ 426.476883][T11643] ? prepare_creds+0x583/0x7d0 [ 426.476920][T11643] __do_sys_landlock_restrict_self+0x2a2/0x910 [ 426.476961][T11643] do_syscall_64+0xcd/0xfa0 [ 426.476992][T11643] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 426.477015][T11643] RIP: 0033:0x7f6b5c38f749 [ 426.477032][T11643] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 426.477054][T11643] RSP: 002b:00007f6b5d2e8038 EFLAGS: 00000246 ORIG_RAX: 00000000000001be [ 426.477076][T11643] RAX: ffffffffffffffda RBX: 00007f6b5c5e6090 RCX: 00007f6b5c38f749 [ 426.477091][T11643] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000005 [ 426.477104][T11643] RBP: 00007f6b5c413f91 R08: 0000000000000000 R09: 0000000000000000 [ 426.477118][T11643] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 426.477131][T11643] R13: 00007f6b5c5e6128 R14: 00007f6b5c5e6090 R15: 00007fff32980b78 [ 426.477161][T11643] [ 427.575371][ T5148] Bluetooth: hci8: command 0x040f tx timeout [ 427.730027][T11653] can: request_module (can-proto-3) failed. [ 428.155669][T11660] binder: 11656:11660 ioctl c018620c 0 returned -1 [ 428.314605][T11660] binder: 11656:11660 ioctl c018620c 0 returned -1 [ 428.436361][T11660] binder: 11656:11660 ioctl c018620c 0 returned -1 [ 428.505683][T11660] binder: 11656:11660 ioctl c018620c 0 returned -1 [ 428.555167][T11660] binder: 11656:11660 ioctl c018620c 0 returned -1 [ 428.593124][T11660] binder: 11656:11660 ioctl c018620c 0 returned -1 [ 429.033947][T11681] FAULT_INJECTION: forcing a failure. [ 429.033947][T11681] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 429.127229][T11681] CPU: 1 UID: 0 PID: 11681 Comm: syz.5.1245 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 429.127286][T11681] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 429.127299][T11681] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 429.127312][T11681] Call Trace: [ 429.127319][T11681] [ 429.127328][T11681] dump_stack_lvl+0x16c/0x1f0 [ 429.127360][T11681] should_fail_ex+0x512/0x640 [ 429.127398][T11681] _copy_from_user+0x2e/0xd0 [ 429.127435][T11681] copy_msghdr_from_user+0x98/0x160 [ 429.127458][T11681] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 429.127485][T11681] ? __pfx__kstrtoull+0x10/0x10 [ 429.127518][T11681] ___sys_sendmsg+0xfe/0x1d0 [ 429.127541][T11681] ? __pfx____sys_sendmsg+0x10/0x10 [ 429.127577][T11681] ? find_held_lock+0x2b/0x80 [ 429.127618][T11681] __sys_sendmmsg+0x200/0x420 [ 429.127644][T11681] ? __pfx___sys_sendmmsg+0x10/0x10 [ 429.127676][T11681] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 429.127718][T11681] ? fput+0x9b/0xd0 [ 429.127747][T11681] ? ksys_write+0x1ac/0x250 [ 429.127771][T11681] ? __pfx_ksys_write+0x10/0x10 [ 429.127801][T11681] __x64_sys_sendmmsg+0x9c/0x100 [ 429.127822][T11681] ? lockdep_hardirqs_on+0x7c/0x110 [ 429.127849][T11681] do_syscall_64+0xcd/0xfa0 [ 429.127879][T11681] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 429.127902][T11681] RIP: 0033:0x7f826af8f749 [ 429.127919][T11681] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 429.127941][T11681] RSP: 002b:00007f826bdf2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 429.127962][T11681] RAX: ffffffffffffffda RBX: 00007f826b1e5fa0 RCX: 00007f826af8f749 [ 429.127976][T11681] RDX: 0000000000000003 RSI: 0000200000000080 RDI: 0000000000000003 [ 429.127990][T11681] RBP: 00007f826bdf2090 R08: 0000000000000000 R09: 0000000000000000 [ 429.128003][T11681] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 429.128017][T11681] R13: 00007f826b1e6038 R14: 00007f826b1e5fa0 R15: 00007ffe980553d8 [ 429.128046][T11681] [ 429.342550][ C1] vkms_vblank_simulate: vblank timer overrun [ 431.883539][T11712] netlink: 10248 bytes leftover after parsing attributes in process `syz.9.1254'. [ 432.316383][T11720] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1255'. [ 432.840150][T11582] mkiss: ax0: crc mode is auto. [ 433.107697][T11724] random: crng reseeded on system resumption [ 435.222975][T11756] FAULT_INJECTION: forcing a failure. [ 435.222975][T11756] name failslab, interval 1, probability 0, space 0, times 0 [ 435.323989][T11756] CPU: 1 UID: 0 PID: 11756 Comm: syz.8.1263 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 435.324043][T11756] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 435.324056][T11756] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 435.324071][T11756] Call Trace: [ 435.324078][T11756] [ 435.324086][T11756] dump_stack_lvl+0x16c/0x1f0 [ 435.324119][T11756] should_fail_ex+0x512/0x640 [ 435.324156][T11756] ? __kmalloc_cache_noprof+0x5f/0x780 [ 435.324182][T11756] should_failslab+0xc2/0x120 [ 435.324227][T11756] __kmalloc_cache_noprof+0x72/0x780 [ 435.324250][T11756] ? vkms_atomic_crtc_duplicate_state+0x78/0x1d0 [ 435.324282][T11756] ? vkms_atomic_crtc_duplicate_state+0x78/0x1d0 [ 435.324307][T11756] vkms_atomic_crtc_duplicate_state+0x78/0x1d0 [ 435.324334][T11756] drm_atomic_get_crtc_state+0x171/0x450 [ 435.324370][T11756] drm_atomic_get_plane_state+0x436/0x590 [ 435.324405][T11756] drm_client_modeset_commit_atomic+0x237/0x7e0 [ 435.324441][T11756] ? __pfx___might_resched+0x10/0x10 [ 435.324475][T11756] ? __pfx_drm_client_modeset_commit_atomic+0x10/0x10 [ 435.324511][T11756] ? __mutex_lock+0x1c5/0x1060 [ 435.324540][T11756] ? rcu_is_watching+0x12/0xc0 [ 435.324593][T11756] drm_client_modeset_commit_locked+0x14d/0x580 [ 435.324634][T11756] drm_client_modeset_commit+0x4f/0x80 [ 435.324670][T11756] __drm_fb_helper_restore_fbdev_mode_unlocked+0x19f/0x200 [ 435.324707][T11756] ? __pfx_drm_fbdev_client_restore+0x10/0x10 [ 435.324736][T11756] drm_fbdev_client_restore+0x2c/0x40 [ 435.324763][T11756] drm_client_dev_restore+0x1f6/0x2a0 [ 435.324813][T11756] drm_release+0x2c4/0x360 [ 435.324848][T11756] ? __pfx_drm_release+0x10/0x10 [ 435.324879][T11756] __fput+0x402/0xb70 [ 435.324917][T11756] task_work_run+0x150/0x240 [ 435.324955][T11756] ? __pfx_task_work_run+0x10/0x10 [ 435.324992][T11756] ? __pfx___do_sys_close_range+0x10/0x10 [ 435.325025][T11756] exit_to_user_mode_loop+0xec/0x130 [ 435.325062][T11756] do_syscall_64+0x426/0xfa0 [ 435.325093][T11756] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 435.325116][T11756] RIP: 0033:0x7f368eb8f749 [ 435.325133][T11756] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 435.325155][T11756] RSP: 002b:00007f368f96f038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 435.325176][T11756] RAX: 0000000000000000 RBX: 00007f368ede6090 RCX: 00007f368eb8f749 [ 435.325190][T11756] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000002 [ 435.325203][T11756] RBP: 00007f368ec13f91 R08: 0000000000000000 R09: 0000000000000000 [ 435.325216][T11756] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 435.325229][T11756] R13: 00007f368ede6128 R14: 00007f368ede6090 R15: 00007ffc3243b208 [ 435.325261][T11756] [ 437.595378][T11777] FAULT_INJECTION: forcing a failure. [ 437.595378][T11777] name failslab, interval 1, probability 0, space 0, times 0 [ 437.651586][T11777] CPU: 1 UID: 0 PID: 11777 Comm: syz.5.1271 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 437.651635][T11777] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 437.651648][T11777] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 437.651661][T11777] Call Trace: [ 437.651668][T11777] [ 437.651676][T11777] dump_stack_lvl+0x16c/0x1f0 [ 437.651708][T11777] should_fail_ex+0x512/0x640 [ 437.651743][T11777] ? kmem_cache_alloc_node_noprof+0x65/0x770 [ 437.651771][T11777] should_failslab+0xc2/0x120 [ 437.651802][T11777] kmem_cache_alloc_node_noprof+0x78/0x770 [ 437.651825][T11777] ? __alloc_skb+0x2b2/0x380 [ 437.651866][T11777] ? __alloc_skb+0x2b2/0x380 [ 437.651899][T11777] ? __pfx_netlink_insert+0x10/0x10 [ 437.651920][T11777] __alloc_skb+0x2b2/0x380 [ 437.651955][T11777] ? __pfx___alloc_skb+0x10/0x10 [ 437.651992][T11777] ? netlink_autobind.isra.0+0x158/0x370 [ 437.652034][T11777] netlink_alloc_large_skb+0x69/0x140 [ 437.652060][T11777] netlink_sendmsg+0x698/0xdd0 [ 437.652087][T11777] ? __pfx_netlink_sendmsg+0x10/0x10 [ 437.652113][T11777] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 437.652149][T11777] ____sys_sendmsg+0xa98/0xc70 [ 437.652177][T11777] ? copy_msghdr_from_user+0x10a/0x160 [ 437.652198][T11777] ? __pfx_____sys_sendmsg+0x10/0x10 [ 437.652230][T11777] ? __pfx__kstrtoull+0x10/0x10 [ 437.652261][T11777] ___sys_sendmsg+0x134/0x1d0 [ 437.652284][T11777] ? __pfx____sys_sendmsg+0x10/0x10 [ 437.652317][T11777] ? find_held_lock+0x2b/0x80 [ 437.652356][T11777] __sys_sendmmsg+0x200/0x420 [ 437.652380][T11777] ? __pfx___sys_sendmmsg+0x10/0x10 [ 437.652411][T11777] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 437.652449][T11777] ? fput+0x9b/0xd0 [ 437.652477][T11777] ? ksys_write+0x1ac/0x250 [ 437.652499][T11777] ? __pfx_ksys_write+0x10/0x10 [ 437.652526][T11777] __x64_sys_sendmmsg+0x9c/0x100 [ 437.652547][T11777] ? lockdep_hardirqs_on+0x7c/0x110 [ 437.652577][T11777] do_syscall_64+0xcd/0xfa0 [ 437.652604][T11777] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 437.652628][T11777] RIP: 0033:0x7f826af8f749 [ 437.652644][T11777] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 437.652665][T11777] RSP: 002b:00007f826bdf2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 437.652685][T11777] RAX: ffffffffffffffda RBX: 00007f826b1e5fa0 RCX: 00007f826af8f749 [ 437.652699][T11777] RDX: 0000000000000003 RSI: 0000200000000080 RDI: 0000000000000003 [ 437.652711][T11777] RBP: 00007f826bdf2090 R08: 0000000000000000 R09: 0000000000000000 [ 437.652724][T11777] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 437.652737][T11777] R13: 00007f826b1e6038 R14: 00007f826b1e5fa0 R15: 00007ffe980553d8 [ 437.652764][T11777] [ 438.688143][T11789] netlink: 338 bytes leftover after parsing attributes in process `syz.8.1275'. [ 438.707582][T11789] macsec0: entered promiscuous mode [ 438.718025][T11789] macsec0: entered allmulticast mode [ 438.733743][T11789] veth1_macvtap: entered allmulticast mode [ 440.054888][T11782] Process accounting paused [ 440.273443][T11813] nbd: must specify an index to disconnect [ 440.574562][T11810] netlink: 342 bytes leftover after parsing attributes in process `syz.5.1281'. [ 442.652141][T11839] net_ratelimit: 161 callbacks suppressed [ 442.652172][T11839] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 442.664970][T11839] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 443.037711][T11858] FAULT_INJECTION: forcing a failure. [ 443.037711][T11858] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 443.072051][T11858] CPU: 1 UID: 0 PID: 11858 Comm: syz.5.1293 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 443.072098][T11858] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 443.072109][T11858] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 443.072122][T11858] Call Trace: [ 443.072129][T11858] [ 443.072137][T11858] dump_stack_lvl+0x16c/0x1f0 [ 443.072173][T11858] should_fail_ex+0x512/0x640 [ 443.072210][T11858] _copy_from_iter+0x29f/0x1720 [ 443.072246][T11858] ? __alloc_skb+0x200/0x380 [ 443.072280][T11858] ? __pfx__copy_from_iter+0x10/0x10 [ 443.072313][T11858] ? netlink_autobind.isra.0+0x158/0x370 [ 443.072346][T11858] netlink_sendmsg+0x820/0xdd0 [ 443.072392][T11858] ? __pfx_netlink_sendmsg+0x10/0x10 [ 443.072421][T11858] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 443.072459][T11858] ____sys_sendmsg+0xa98/0xc70 [ 443.072489][T11858] ? copy_msghdr_from_user+0x10a/0x160 [ 443.072512][T11858] ? __pfx_____sys_sendmsg+0x10/0x10 [ 443.072546][T11858] ? __pfx__kstrtoull+0x10/0x10 [ 443.072579][T11858] ___sys_sendmsg+0x134/0x1d0 [ 443.072602][T11858] ? __pfx____sys_sendmsg+0x10/0x10 [ 443.072639][T11858] ? find_held_lock+0x2b/0x80 [ 443.072680][T11858] __sys_sendmmsg+0x200/0x420 [ 443.072706][T11858] ? __pfx___sys_sendmmsg+0x10/0x10 [ 443.072739][T11858] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 443.072780][T11858] ? fput+0x9b/0xd0 [ 443.072810][T11858] ? ksys_write+0x1ac/0x250 [ 443.072834][T11858] ? __pfx_ksys_write+0x10/0x10 [ 443.072863][T11858] __x64_sys_sendmmsg+0x9c/0x100 [ 443.072885][T11858] ? lockdep_hardirqs_on+0x7c/0x110 [ 443.072912][T11858] do_syscall_64+0xcd/0xfa0 [ 443.072942][T11858] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 443.072964][T11858] RIP: 0033:0x7f826af8f749 [ 443.072985][T11858] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 443.073008][T11858] RSP: 002b:00007f826bdf2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 443.073048][T11858] RAX: ffffffffffffffda RBX: 00007f826b1e5fa0 RCX: 00007f826af8f749 [ 443.073064][T11858] RDX: 0000000000000003 RSI: 0000200000000080 RDI: 0000000000000003 [ 443.073078][T11858] RBP: 00007f826bdf2090 R08: 0000000000000000 R09: 0000000000000000 [ 443.073092][T11858] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 443.073106][T11858] R13: 00007f826b1e6038 R14: 00007f826b1e5fa0 R15: 00007ffe980553d8 [ 443.073138][T11858] [ 443.323454][ C1] vkms_vblank_simulate: vblank timer overrun [ 443.535653][T11862] netlink: 342 bytes leftover after parsing attributes in process `syz.9.1294'. [ 443.791349][T11867] scsi_strcpy_devinfo: vendor string '/&c~n] | [ 443.791349][T11867] M' is too long [ 443.815380][T11867] scsi_strcpy_devinfo: model string 'Dd5 K2b [ 443.815380][T11867] W ' is too long [ 443.902359][ T5148] Bluetooth: hci9: Opcode 0x0c03 failed: -110 [ 444.226656][T11735] mkiss: ax0: crc mode is auto. [ 445.483724][T11900] netlink: 342 bytes leftover after parsing attributes in process `syz.4.1304'. [ 446.062483][T11907] FAULT_INJECTION: forcing a failure. [ 446.062483][T11907] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 446.161129][T11907] CPU: 1 UID: 0 PID: 11907 Comm: syz.4.1305 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 446.161181][T11907] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 446.161195][T11907] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 446.161209][T11907] Call Trace: [ 446.161216][T11907] [ 446.161225][T11907] dump_stack_lvl+0x16c/0x1f0 [ 446.161258][T11907] should_fail_ex+0x512/0x640 [ 446.161298][T11907] should_fail_alloc_page+0xe7/0x130 [ 446.161334][T11907] prepare_alloc_pages+0x3c2/0x610 [ 446.161370][T11907] __alloc_frozen_pages_noprof+0x18b/0x2470 [ 446.161399][T11907] ? __lock_acquire+0x622/0x1c90 [ 446.161438][T11907] ? __lock_acquire+0x622/0x1c90 [ 446.161469][T11907] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 446.161494][T11907] ? __lock_acquire+0xb8a/0x1c90 [ 446.161523][T11907] ? look_up_lock_class+0x59/0x150 [ 446.161553][T11907] ? register_lock_class+0x41/0x4c0 [ 446.161593][T11907] ? __lock_acquire+0xb8a/0x1c90 [ 446.161625][T11907] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 446.161671][T11907] ? policy_nodemask+0xea/0x4e0 [ 446.161705][T11907] alloc_pages_mpol+0x1fb/0x550 [ 446.161737][T11907] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 446.161780][T11907] alloc_pages_noprof+0x131/0x390 [ 446.161812][T11907] __pmd_alloc+0x3b/0x8b0 [ 446.161846][T11907] huge_pte_alloc+0x41d/0x5b0 [ 446.161873][T11907] hugetlb_fault+0x373/0x2f40 [ 446.161901][T11907] ? __pfx_hugetlb_fault+0x10/0x10 [ 446.161941][T11907] ? find_vma+0xbf/0x140 [ 446.161968][T11907] ? __pfx_find_vma+0x10/0x10 [ 446.161999][T11907] handle_mm_fault+0xbfa/0xd10 [ 446.162037][T11907] ? __pkru_allows_pkey+0x21/0xb0 [ 446.162077][T11907] do_user_addr_fault+0x7a6/0x1370 [ 446.162102][T11907] ? rcu_is_watching+0x12/0xc0 [ 446.162131][T11907] exc_page_fault+0x64/0xc0 [ 446.162164][T11907] asm_exc_page_fault+0x26/0x30 [ 446.162187][T11907] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 446.162225][T11907] Code: 3c 04 00 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 c3 cc cc cc cc 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 446.162247][T11907] RSP: 0018:ffffc90003e8f7c0 EFLAGS: 00050206 [ 446.162266][T11907] RAX: 0000000000000001 RBX: 00000000000000c4 RCX: 00000000000000c4 [ 446.162280][T11907] RDX: ffffed100c0fc221 RSI: 0000000000000000 RDI: ffff8880607e1040 [ 446.162295][T11907] RBP: 0000000000000000 R08: 0000000000000001 R09: ffffed100c0fc220 [ 446.162309][T11907] R10: ffff8880607e1103 R11: 0000000000000000 R12: ffffc90003e8fd50 [ 446.162324][T11907] R13: 00000000000000c4 R14: ffff8880607e1040 R15: 00007ffffffff000 [ 446.162354][T11907] _copy_from_iter+0x383/0x1720 [ 446.162407][T11907] ? __alloc_skb+0x200/0x380 [ 446.162444][T11907] ? __pfx__copy_from_iter+0x10/0x10 [ 446.162491][T11907] ? netlink_autobind.isra.0+0x158/0x370 [ 446.162525][T11907] netlink_sendmsg+0x820/0xdd0 [ 446.162553][T11907] ? __pfx_netlink_sendmsg+0x10/0x10 [ 446.162580][T11907] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 446.162617][T11907] ____sys_sendmsg+0xa98/0xc70 [ 446.162645][T11907] ? copy_msghdr_from_user+0x10a/0x160 [ 446.162666][T11907] ? __pfx_____sys_sendmsg+0x10/0x10 [ 446.162698][T11907] ? __pfx__kstrtoull+0x10/0x10 [ 446.162729][T11907] ___sys_sendmsg+0x134/0x1d0 [ 446.162752][T11907] ? __pfx____sys_sendmsg+0x10/0x10 [ 446.162786][T11907] ? find_held_lock+0x2b/0x80 [ 446.162846][T11907] __sys_sendmmsg+0x200/0x420 [ 446.162872][T11907] ? __pfx___sys_sendmmsg+0x10/0x10 [ 446.162905][T11907] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 446.162951][T11907] ? fput+0x9b/0xd0 [ 446.162982][T11907] ? ksys_write+0x1ac/0x250 [ 446.163006][T11907] ? __pfx_ksys_write+0x10/0x10 [ 446.163054][T11907] __x64_sys_sendmmsg+0x9c/0x100 [ 446.163078][T11907] ? lockdep_hardirqs_on+0x7c/0x110 [ 446.163106][T11907] do_syscall_64+0xcd/0xfa0 [ 446.163136][T11907] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 446.163159][T11907] RIP: 0033:0x7f4ce9b8f749 [ 446.163176][T11907] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 446.163201][T11907] RSP: 002b:00007f4ceaa32038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 446.163224][T11907] RAX: ffffffffffffffda RBX: 00007f4ce9de5fa0 RCX: 00007f4ce9b8f749 [ 446.163239][T11907] RDX: 0000000000000003 RSI: 0000200000000080 RDI: 0000000000000003 [ 446.163253][T11907] RBP: 00007f4ceaa32090 R08: 0000000000000000 R09: 0000000000000000 [ 446.163267][T11907] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 446.163280][T11907] R13: 00007f4ce9de6038 R14: 00007f4ce9de5fa0 R15: 00007ffcf52a0c38 [ 446.163312][T11907] [ 447.073557][T11922] FAULT_INJECTION: forcing a failure. [ 447.073557][T11922] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 447.086881][T11922] CPU: 1 UID: 0 PID: 11922 Comm: syz.5.1309 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 447.086929][T11922] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 447.086941][T11922] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 447.086952][T11922] Call Trace: [ 447.086977][T11922] [ 447.086986][T11922] dump_stack_lvl+0x16c/0x1f0 [ 447.087017][T11922] should_fail_ex+0x512/0x640 [ 447.087057][T11922] should_fail_alloc_page+0xe7/0x130 [ 447.087091][T11922] prepare_alloc_pages+0x3c2/0x610 [ 447.087121][T11922] ? arch_stack_walk+0xa6/0x100 [ 447.087148][T11922] __alloc_frozen_pages_noprof+0x18b/0x2470 [ 447.087172][T11922] ? __lock_acquire+0x622/0x1c90 [ 447.087211][T11922] ? __lock_acquire+0x622/0x1c90 [ 447.087245][T11922] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 447.087299][T11922] ? find_held_lock+0x2b/0x80 [ 447.087318][T11922] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 447.087355][T11922] ? policy_nodemask+0xea/0x4e0 [ 447.087385][T11922] alloc_pages_mpol+0x1fb/0x550 [ 447.087414][T11922] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 447.087443][T11922] ? arch_stack_walk+0xa6/0x100 [ 447.087468][T11922] ? __pfx_ieee80211_emulate_remove_chanctx+0x10/0x10 [ 447.087498][T11922] ___kmalloc_large_node+0xed/0x160 [ 447.087531][T11922] ? __pfx_ieee80211_emulate_remove_chanctx+0x10/0x10 [ 447.087561][T11922] __kmalloc_large_node_noprof+0x1c/0x70 [ 447.087593][T11922] __kmalloc_noprof.cold+0xc/0x62 [ 447.087623][T11922] ? stack_depot_save_flags+0x29/0x9c0 [ 447.087654][T11922] ? __pfx_stack_trace_save+0x10/0x10 [ 447.087677][T11922] ? wiphy_new_nm+0x701/0x2190 [ 447.087705][T11922] ? __pfx_ieee80211_emulate_add_chanctx+0x10/0x10 [ 447.087735][T11922] ? __pfx_ieee80211_emulate_remove_chanctx+0x10/0x10 [ 447.087784][T11922] ? wiphy_new_nm+0x701/0x2190 [ 447.087810][T11922] ? do_raw_spin_lock+0x12c/0x2b0 [ 447.087843][T11922] wiphy_new_nm+0x701/0x2190 [ 447.087872][T11922] ? __pfx_ieee80211_emulate_add_chanctx+0x10/0x10 [ 447.087910][T11922] ? __pfx_ieee80211_emulate_remove_chanctx+0x10/0x10 [ 447.087943][T11922] ieee80211_alloc_hw_nm+0x1bb5/0x22b0 [ 447.087973][T11922] ? __local_bh_enable_ip+0xa4/0x120 [ 447.088004][T11922] mac80211_hwsim_new_radio+0x1d3/0x50b0 [ 447.088043][T11922] ? __asan_memset+0x23/0x50 [ 447.088067][T11922] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 447.088113][T11922] hwsim_new_radio_nl+0xba2/0x1330 [ 447.088139][T11922] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 447.088170][T11922] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 447.088200][T11922] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 447.088235][T11922] genl_family_rcv_msg_doit+0x209/0x2f0 [ 447.088264][T11922] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 447.088300][T11922] ? bpf_lsm_capable+0x9/0x10 [ 447.088328][T11922] ? security_capable+0x7e/0x260 [ 447.088359][T11922] ? ns_capable+0xd7/0x110 [ 447.088383][T11922] genl_rcv_msg+0x55c/0x800 [ 447.088413][T11922] ? __pfx_genl_rcv_msg+0x10/0x10 [ 447.088440][T11922] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 447.088473][T11922] netlink_rcv_skb+0x158/0x420 [ 447.088495][T11922] ? __pfx_genl_rcv_msg+0x10/0x10 [ 447.088523][T11922] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 447.088558][T11922] ? netlink_deliver_tap+0x1ae/0xd30 [ 447.088583][T11922] genl_rcv+0x28/0x40 [ 447.088606][T11922] netlink_unicast+0x5aa/0x870 [ 447.088633][T11922] ? __pfx_netlink_unicast+0x10/0x10 [ 447.088666][T11922] netlink_sendmsg+0x8c8/0xdd0 [ 447.088693][T11922] ? __pfx_netlink_sendmsg+0x10/0x10 [ 447.088720][T11922] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 447.088756][T11922] ____sys_sendmsg+0xa98/0xc70 [ 447.088785][T11922] ? copy_msghdr_from_user+0x10a/0x160 [ 447.088806][T11922] ? __pfx_____sys_sendmsg+0x10/0x10 [ 447.088840][T11922] ? __pfx_futex_wake_mark+0x10/0x10 [ 447.088877][T11922] ___sys_sendmsg+0x134/0x1d0 [ 447.088911][T11922] ? find_held_lock+0x2b/0x80 [ 447.088953][T11922] ? __pfx____sys_sendmsg+0x10/0x10 [ 447.088972][T11922] ? __lock_acquire+0x622/0x1c90 [ 447.089049][T11922] __sys_sendmsg+0x16d/0x220 [ 447.089070][T11922] ? __pfx___sys_sendmsg+0x10/0x10 [ 447.089091][T11922] ? __x64_sys_futex+0x1e0/0x4c0 [ 447.089136][T11922] do_syscall_64+0xcd/0xfa0 [ 447.089164][T11922] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 447.089184][T11922] RIP: 0033:0x7f826af8f749 [ 447.089201][T11922] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 447.089221][T11922] RSP: 002b:00007f826bdd1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 447.089241][T11922] RAX: ffffffffffffffda RBX: 00007f826b1e6090 RCX: 00007f826af8f749 [ 447.089260][T11922] RDX: 0000000000008000 RSI: 0000200000000200 RDI: 0000000000000008 [ 447.089273][T11922] RBP: 00007f826b013f91 R08: 0000000000000000 R09: 0000000000000000 [ 447.089285][T11922] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 447.089297][T11922] R13: 00007f826b1e6128 R14: 00007f826b1e6090 R15: 00007ffe980553d8 [ 447.089326][T11922] [ 448.361506][T11933] FAULT_INJECTION: forcing a failure. [ 448.361506][T11933] name failslab, interval 1, probability 0, space 0, times 0 [ 448.434692][T11939] netlink: 342 bytes leftover after parsing attributes in process `syz.8.1314'. [ 448.461525][T11933] CPU: 1 UID: 0 PID: 11933 Comm: syz.4.1313 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 448.461581][T11933] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 448.461593][T11933] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 448.461606][T11933] Call Trace: [ 448.461613][T11933] [ 448.461621][T11933] dump_stack_lvl+0x16c/0x1f0 [ 448.461653][T11933] should_fail_ex+0x512/0x640 [ 448.461687][T11933] ? fs_reclaim_acquire+0xae/0x150 [ 448.461718][T11933] should_failslab+0xc2/0x120 [ 448.461748][T11933] kmem_cache_alloc_noprof+0x75/0x6e0 [ 448.461779][T11933] ? __kernfs_new_node+0xd2/0x8e0 [ 448.461813][T11933] ? __kernfs_new_node+0xd2/0x8e0 [ 448.461839][T11933] __kernfs_new_node+0xd2/0x8e0 [ 448.461870][T11933] ? __pfx___kernfs_new_node+0x10/0x10 [ 448.461906][T11933] ? find_held_lock+0x2b/0x80 [ 448.461929][T11933] ? kernfs_root+0xee/0x2a0 [ 448.461962][T11933] kernfs_new_node+0x13c/0x1e0 [ 448.461999][T11933] __kernfs_create_file+0x53/0x350 [ 448.462025][T11933] sysfs_add_file_mode_ns+0x207/0x3c0 [ 448.462058][T11933] internal_create_group+0x578/0xf30 [ 448.462094][T11933] ? __pfx_internal_create_group+0x10/0x10 [ 448.462128][T11933] ? kernfs_create_link+0x1bd/0x240 [ 448.462155][T11933] internal_create_groups+0x9d/0x150 [ 448.462186][T11933] device_add+0x731/0x1aa0 [ 448.462209][T11933] ? __pfx_device_add+0x10/0x10 [ 448.462226][T11933] ? __pfx___might_resched+0x10/0x10 [ 448.462248][T11933] ? is_dynamic_key+0xb4/0x160 [ 448.462286][T11933] __add_disk+0x457/0xf00 [ 448.462320][T11933] add_disk_fwnode+0x13f/0x5d0 [ 448.462352][T11933] nbd_dev_add+0x783/0xbb0 [ 448.462384][T11933] ? __pfx_nbd_dev_add+0x10/0x10 [ 448.462430][T11933] ? bpf_lsm_capable+0x9/0x10 [ 448.462460][T11933] ? __radix_tree_lookup+0x21f/0x2c0 [ 448.462488][T11933] nbd_genl_connect+0x8b0/0x1c60 [ 448.462525][T11933] ? __pfx_nbd_genl_connect+0x10/0x10 [ 448.462558][T11933] ? __nla_parse+0x40/0x60 [ 448.462584][T11933] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 448.462615][T11933] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 448.462650][T11933] genl_family_rcv_msg_doit+0x209/0x2f0 [ 448.462680][T11933] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 448.462707][T11933] ? genl_get_cmd+0x194/0x580 [ 448.462741][T11933] ? __radix_tree_lookup+0x21f/0x2c0 [ 448.462768][T11933] genl_rcv_msg+0x55c/0x800 [ 448.462804][T11933] ? __pfx_genl_rcv_msg+0x10/0x10 [ 448.462832][T11933] ? __pfx_nbd_genl_connect+0x10/0x10 [ 448.462875][T11933] netlink_rcv_skb+0x158/0x420 [ 448.462898][T11933] ? __pfx_genl_rcv_msg+0x10/0x10 [ 448.462927][T11933] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 448.462962][T11933] ? netlink_deliver_tap+0x1ae/0xd30 [ 448.462990][T11933] genl_rcv+0x28/0x40 [ 448.463014][T11933] netlink_unicast+0x5aa/0x870 [ 448.463041][T11933] ? __pfx_netlink_unicast+0x10/0x10 [ 448.463093][T11933] netlink_sendmsg+0x8c8/0xdd0 [ 448.463125][T11933] ? __pfx_netlink_sendmsg+0x10/0x10 [ 448.463155][T11933] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 448.463196][T11933] ____sys_sendmsg+0xa98/0xc70 [ 448.463228][T11933] ? copy_msghdr_from_user+0x10a/0x160 [ 448.463252][T11933] ? __pfx_____sys_sendmsg+0x10/0x10 [ 448.463290][T11933] ? __pfx_futex_wake_mark+0x10/0x10 [ 448.463333][T11933] ___sys_sendmsg+0x134/0x1d0 [ 448.463359][T11933] ? __pfx____sys_sendmsg+0x10/0x10 [ 448.463380][T11933] ? __lock_acquire+0x622/0x1c90 [ 448.463450][T11933] __sys_sendmsg+0x16d/0x220 [ 448.463474][T11933] ? __pfx___sys_sendmsg+0x10/0x10 [ 448.463498][T11933] ? __x64_sys_futex+0x1e0/0x4c0 [ 448.463549][T11933] do_syscall_64+0xcd/0xfa0 [ 448.463581][T11933] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 448.463604][T11933] RIP: 0033:0x7f4ce9b8f749 [ 448.463622][T11933] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 448.463645][T11933] RSP: 002b:00007f4ceaa32038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 448.463668][T11933] RAX: ffffffffffffffda RBX: 00007f4ce9de5fa0 RCX: 00007f4ce9b8f749 [ 448.463683][T11933] RDX: 0000000020040300 RSI: 0000200000000500 RDI: 0000000000000005 [ 448.463698][T11933] RBP: 00007f4ce9c13f91 R08: 0000000000000000 R09: 0000000000000000 [ 448.463712][T11933] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 448.463726][T11933] R13: 00007f4ce9de6038 R14: 00007f4ce9de5fa0 R15: 00007ffcf52a0c38 [ 448.463759][T11933] [ 449.566860][T11933] nbd: failed to add new device [ 450.476319][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 450.483779][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 450.528842][T11967] bridge0: port 3(team0) entered blocking state [ 450.629344][T11967] bridge0: port 3(team0) entered disabled state [ 450.708269][T11967] team0: entered allmulticast mode [ 450.770208][T11967] team_slave_0: entered allmulticast mode [ 450.828400][T11967] team_slave_1: entered allmulticast mode [ 450.949364][T11967] team0: entered promiscuous mode [ 451.043546][T11967] team_slave_0: entered promiscuous mode [ 451.136812][T11967] team_slave_1: entered promiscuous mode [ 451.241246][T11967] bridge0: port 3(team0) entered blocking state [ 451.247658][T11967] bridge0: port 3(team0) entered forwarding state [ 451.669656][T11987] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1323'. [ 452.191266][T11989] zswap: compressor not available [ 454.139747][T11990] mkiss: ax1: crc mode is auto. [ 454.520548][T12039] dlm: plock device version mismatch: kernel (1.2.0), user (1489226698.240317300.1121487582) [ 454.883100][T12037] bridge0: port 3(team0) entered blocking state [ 454.964284][T12037] bridge0: port 3(team0) entered disabled state [ 455.039164][T12037] team0: entered allmulticast mode [ 455.072948][T12037] team_slave_0: entered allmulticast mode [ 455.112532][T12037] team_slave_1: entered allmulticast mode [ 455.185776][T12037] team0: entered promiscuous mode [ 455.242960][T12037] team_slave_0: entered promiscuous mode [ 455.294670][T12037] team_slave_1: entered promiscuous mode [ 455.357976][T12037] bridge0: port 3(team0) entered blocking state [ 455.364398][T12037] bridge0: port 3(team0) entered forwarding state [ 455.760803][T11897] mkiss: ax0: crc mode is auto. [ 458.989458][T12110] futex_wake_op: syz.4.1349 tries to shift op by -2048; fix this program [ 459.027943][T12110] futex_wake_op: syz.4.1349 tries to shift op by -2048; fix this program [ 459.128295][T12110] ubi1: attaching mtd0 [ 459.217589][T12110] ubi1: scanning is finished [ 459.308529][T12110] ubi1 error: ubi_read_volume_table: the layout volume was not found [ 459.897244][T12110] ubi1 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 463.391943][T12177] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1363'. [ 464.117130][T12183] random: crng reseeded on system resumption [ 465.936531][T12220] sg_write: data in/out 3292/1 bytes for SCSI command 0xa3-- guessing data in; [ 465.936531][T12220] program syz.5.1373 not setting count and/or reply_len properly [ 466.456966][T12228] ima: Unable to open file: /suritRy/integrity?iqa/policy (-2) [ 466.491839][T12225] ima: policy update failed [ 466.580428][ T30] audit: type=1802 audit(4294968381.434:13): pid=12225 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.4.1375" res=0 errno=0 [ 468.256980][T12077] mkiss: ax0: crc mode is auto. [ 468.692054][T12244] futex_wake_op: syz.9.1377 tries to shift op by -2048; fix this program [ 468.804737][T12244] futex_wake_op: syz.9.1377 tries to shift op by -2048; fix this program [ 468.864371][T12245] ubi1: attaching mtd0 [ 468.926823][T12245] ubi1: scanning is finished [ 468.931657][T12245] ubi1 error: ubi_read_volume_table: the layout volume was not found [ 468.956086][T12249] FAULT_INJECTION: forcing a failure. [ 468.956086][T12249] name failslab, interval 1, probability 0, space 0, times 0 [ 469.025854][T12249] CPU: 1 UID: 0 PID: 12249 Comm: syz.4.1379 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 469.025902][T12249] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 469.025915][T12249] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 469.025928][T12249] Call Trace: [ 469.025935][T12249] [ 469.025944][T12249] dump_stack_lvl+0x16c/0x1f0 [ 469.025975][T12249] should_fail_ex+0x512/0x640 [ 469.026010][T12249] ? __kmalloc_noprof+0xca/0x880 [ 469.026049][T12249] should_failslab+0xc2/0x120 [ 469.026080][T12249] __kmalloc_noprof+0xdd/0x880 [ 469.026116][T12249] ? kernfs_fop_write_iter+0x237/0x570 [ 469.026143][T12249] ? kernfs_fop_write_iter+0x237/0x570 [ 469.026163][T12249] kernfs_fop_write_iter+0x237/0x570 [ 469.026189][T12249] vfs_write+0x7d3/0x11d0 [ 469.026214][T12249] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 469.026243][T12249] ? __pfx___mutex_lock+0x10/0x10 [ 469.026273][T12249] ? __pfx_vfs_write+0x10/0x10 [ 469.026317][T12249] ksys_write+0x12a/0x250 [ 469.026342][T12249] ? __pfx_ksys_write+0x10/0x10 [ 469.026375][T12249] do_syscall_64+0xcd/0xfa0 [ 469.026405][T12249] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 469.026428][T12249] RIP: 0033:0x7f4ce9b8f749 [ 469.026445][T12249] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 469.026466][T12249] RSP: 002b:00007f4ceaa32038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 469.026487][T12249] RAX: ffffffffffffffda RBX: 00007f4ce9de5fa0 RCX: 00007f4ce9b8f749 [ 469.026502][T12249] RDX: 0000000000000001 RSI: 0000200000000780 RDI: 0000000000000003 [ 469.026516][T12249] RBP: 00007f4ceaa32090 R08: 0000000000000000 R09: 0000000000000000 [ 469.026529][T12249] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 469.026543][T12249] R13: 00007f4ce9de6038 R14: 00007f4ce9de5fa0 R15: 00007ffcf52a0c38 [ 469.026573][T12249] [ 469.804000][T12245] ubi1 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 470.629361][T12267] zswap: compressor not available [ 470.760010][T12272] Process accounting resumed [ 470.837470][T12277] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff88807fe04a00 pfn:0x7fe04 [ 470.905774][T12277] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 470.931653][T12277] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000 [ 470.973013][T12277] raw: ffff88807fe04a00 0000000000000000 00000001ffffffff 0000000000000000 [ 471.010079][T12277] page dumped because: unmovable page [ 471.032046][T12277] page_owner tracks the page as allocated [ 471.061036][T12277] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xcc0(GFP_KERNEL), pid 6503, tgid 6503 (syz-executor), ts 144760912439, free_ts 119664913184 [ 471.130239][T12277] post_alloc_hook+0x1af/0x220 [ 471.152796][T12277] get_page_from_freelist+0x10a3/0x3a30 [ 471.178823][T12277] __alloc_frozen_pages_noprof+0x25f/0x2470 [ 471.203556][T12277] alloc_pages_bulk_noprof+0x77a/0x1410 [ 471.232567][T12277] kasan_populate_vmalloc+0x112/0x2d0 [ 471.257016][T12277] alloc_vmap_area+0x960/0x29e0 [ 471.280190][T12277] __get_vm_area_node+0x1ca/0x330 [ 471.297689][T12277] __vmalloc_node_range_noprof+0x271/0x1480 [ 471.328608][T12277] vmalloc_user_noprof+0x9e/0xe0 [ 471.351969][T12277] kcov_ioctl+0x4c/0x730 [ 471.372157][T12277] __x64_sys_ioctl+0x18e/0x210 [ 471.392192][T12277] do_syscall_64+0xcd/0xfa0 [ 471.412712][T12277] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 471.445481][T12277] page last free pid 6045 tgid 6045 stack trace: [ 471.462164][T12277] __free_frozen_pages+0x7df/0x1160 [ 471.477765][T12277] vfree+0x1fd/0xb50 [ 471.490527][T12277] snd_dma_free_pages+0x54/0x70 [ 471.503890][T12277] snd_pcm_lib_free_pages+0x172/0x390 [ 471.522186][T12277] snd_pcm_release_substream.part.0+0x2a8/0x340 [ 471.538901][T12277] snd_pcm_release_substream+0x5b/0x70 [ 471.571006][T12277] snd_pcm_oss_release+0x135/0x310 [ 471.588639][T12277] __fput+0x402/0xb70 [ 471.603097][T12277] task_work_run+0x150/0x240 [ 471.617214][T12277] exit_to_user_mode_loop+0xec/0x130 [ 471.632593][T12277] do_syscall_64+0x426/0xfa0 [ 471.645091][T12277] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 471.898746][T12291] FAULT_INJECTION: forcing a failure. [ 471.898746][T12291] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 471.967322][T12291] CPU: 1 UID: 0 PID: 12291 Comm: syz.5.1391 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 471.967373][T12291] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 471.967386][T12291] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 471.967400][T12291] Call Trace: [ 471.967408][T12291] [ 471.967417][T12291] dump_stack_lvl+0x16c/0x1f0 [ 471.967450][T12291] should_fail_ex+0x512/0x640 [ 471.967503][T12291] _copy_from_iter+0x29f/0x1720 [ 471.967546][T12291] ? __pfx__copy_from_iter+0x10/0x10 [ 471.967581][T12291] ? rcu_is_watching+0x12/0xc0 [ 471.967606][T12291] ? trace_kmalloc+0x2b/0xd0 [ 471.967634][T12291] ? __kmalloc_noprof+0x34f/0x880 [ 471.967670][T12291] ? kernfs_fop_write_iter+0x237/0x570 [ 471.967698][T12291] kernfs_fop_write_iter+0x19a/0x570 [ 471.967723][T12291] vfs_write+0x7d3/0x11d0 [ 471.967749][T12291] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 471.967772][T12291] ? __pfx___mutex_lock+0x10/0x10 [ 471.967802][T12291] ? __pfx_vfs_write+0x10/0x10 [ 471.967846][T12291] ksys_write+0x12a/0x250 [ 471.967870][T12291] ? __pfx_ksys_write+0x10/0x10 [ 471.967904][T12291] do_syscall_64+0xcd/0xfa0 [ 471.967934][T12291] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 471.967957][T12291] RIP: 0033:0x7f826af8f749 [ 471.967974][T12291] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 471.968001][T12291] RSP: 002b:00007f826bdf2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 471.968022][T12291] RAX: ffffffffffffffda RBX: 00007f826b1e5fa0 RCX: 00007f826af8f749 [ 471.968036][T12291] RDX: 0000000000000001 RSI: 0000200000000780 RDI: 0000000000000003 [ 471.968049][T12291] RBP: 00007f826bdf2090 R08: 0000000000000000 R09: 0000000000000000 [ 471.968062][T12291] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 471.968075][T12291] R13: 00007f826b1e6038 R14: 00007f826b1e5fa0 R15: 00007ffe980553d8 [ 471.968105][T12291] [ 474.862970][T12332] vivid-003: ================= START STATUS ================= [ 474.896905][T12332] vivid-003: Radio HW Seek Mode: Bounded [ 474.934623][T12332] vivid-003: Radio Programmable HW Seek: false [ 474.971669][T12332] vivid-003: RDS Rx I/O Mode: Block I/O [ 474.983486][T12332] vivid-003: Generate RBDS Instead of RDS: false [ 475.036245][T12332] vivid-003: RDS Reception: true [ 475.066860][T12332] vivid-003: RDS Program Type: 0 inactive [ 475.095842][T12332] vivid-003: RDS PS Name: inactive [ 475.135278][T12332] vivid-003: RDS Radio Text: inactive [ 475.158484][T12332] vivid-003: RDS Traffic Announcement: false inactive [ 475.181837][T12332] vivid-003: RDS Traffic Program: false inactive [ 475.218161][T12332] vivid-003: RDS Music: false inactive [ 475.259104][T12332] vivid-003: ================== END STATUS ================== [ 475.458730][T12342] openvswitch: netlink: Flow actions attr not present in new flow. [ 475.489922][T12341] openvswitch: netlink: Flow actions attr not present in new flow. [ 478.468313][T12371] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1414'. [ 479.360606][T12378] Invalid ELF header magic: != ELF [ 479.591489][T12256] mkiss: ax0: crc mode is auto. [ 482.813001][T12385] FAULT_INJECTION: forcing a failure. [ 482.813001][T12385] name failslab, interval 1, probability 0, space 0, times 0 [ 482.981309][T12385] CPU: 1 UID: 0 PID: 12385 Comm: syz.5.1419 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 482.981361][T12385] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 482.981374][T12385] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 482.981388][T12385] Call Trace: [ 482.981396][T12385] [ 482.981404][T12385] dump_stack_lvl+0x16c/0x1f0 [ 482.981437][T12385] should_fail_ex+0x512/0x640 [ 482.981473][T12385] ? __kmalloc_cache_node_noprof+0x62/0x7a0 [ 482.981505][T12385] should_failslab+0xc2/0x120 [ 482.981537][T12385] __kmalloc_cache_node_noprof+0x75/0x7a0 [ 482.981563][T12385] ? look_up_lock_class+0x6b/0x150 [ 482.981590][T12385] ? __get_vm_area_node+0x101/0x330 [ 482.981628][T12385] ? __get_vm_area_node+0x101/0x330 [ 482.981659][T12385] __get_vm_area_node+0x101/0x330 [ 482.981690][T12385] ? __lock_acquire+0xb8a/0x1c90 [ 482.981724][T12385] __vmalloc_node_range_noprof+0x271/0x1480 [ 482.981759][T12385] ? n_tty_open+0x1a/0x170 [ 482.981789][T12385] ? do_raw_spin_unlock+0x172/0x230 [ 482.981817][T12385] ? n_tty_open+0x1a/0x170 [ 482.981854][T12385] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 482.981888][T12385] ? console_unlock+0x184/0x210 [ 482.981910][T12385] ? __pfx_console_unlock+0x10/0x10 [ 482.981936][T12385] ? __pfx___ldsem_down_write_nested+0x10/0x10 [ 482.981971][T12385] ? n_tty_open+0x1a/0x170 [ 482.982000][T12385] __vmalloc_node_noprof+0xad/0xf0 [ 482.982033][T12385] ? n_tty_open+0x1a/0x170 [ 482.982062][T12385] ? __pfx_n_tty_open+0x10/0x10 [ 482.982093][T12385] n_tty_open+0x1a/0x170 [ 482.982122][T12385] ? __pfx_n_tty_open+0x10/0x10 [ 482.982159][T12385] tty_ldisc_open+0x9f/0x120 [ 482.982181][T12385] tty_ldisc_setup+0x40/0x100 [ 482.982205][T12385] tty_init_dev.part.0+0x1ec/0x500 [ 482.982236][T12385] tty_open+0xa4f/0xf90 [ 482.982270][T12385] ? __pfx_tty_open+0x10/0x10 [ 482.982298][T12385] ? chrdev_open+0x10b/0x6a0 [ 482.982329][T12385] ? __pfx_tty_open+0x10/0x10 [ 482.982356][T12385] chrdev_open+0x234/0x6a0 [ 482.982383][T12385] ? __pfx_apparmor_file_open+0x10/0x10 [ 482.982421][T12385] ? __pfx_chrdev_open+0x10/0x10 [ 482.982451][T12385] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 482.982484][T12385] do_dentry_open+0x982/0x1530 [ 482.982511][T12385] ? __pfx_chrdev_open+0x10/0x10 [ 482.982546][T12385] vfs_open+0x82/0x3f0 [ 482.982583][T12385] path_openat+0x1de4/0x2cb0 [ 482.982619][T12385] ? __pfx_path_openat+0x10/0x10 [ 482.982646][T12385] ? __lock_acquire+0xb8a/0x1c90 [ 482.982681][T12385] do_filp_open+0x20b/0x470 [ 482.982707][T12385] ? __pfx_do_filp_open+0x10/0x10 [ 482.982754][T12385] ? alloc_fd+0x471/0x7d0 [ 482.982786][T12385] do_sys_openat2+0x11b/0x1d0 [ 482.982840][T12385] ? __pfx_do_sys_openat2+0x10/0x10 [ 482.982888][T12385] __x64_sys_openat+0x174/0x210 [ 482.982924][T12385] ? __pfx___x64_sys_openat+0x10/0x10 [ 482.982973][T12385] do_syscall_64+0xcd/0xfa0 [ 482.983007][T12385] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 482.983031][T12385] RIP: 0033:0x7f826af8f749 [ 482.983050][T12385] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 482.983073][T12385] RSP: 002b:00007f826bdd1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 482.983094][T12385] RAX: ffffffffffffffda RBX: 00007f826b1e6090 RCX: 00007f826af8f749 [ 482.983110][T12385] RDX: 0000000000000800 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 482.983130][T12385] RBP: 00007f826b013f91 R08: 0000000000000000 R09: 0000000000000000 [ 482.983144][T12385] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 482.983158][T12385] R13: 00007f826b1e6128 R14: 00007f826b1e6090 R15: 00007ffe980553d8 [ 482.983190][T12385] [ 483.675697][T12385] syz.5.1419: vmalloc error: size 9128, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 483.690714][T12385] CPU: 1 UID: 0 PID: 12385 Comm: syz.5.1419 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 483.690767][T12385] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 483.690780][T12385] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 483.690794][T12385] Call Trace: [ 483.690803][T12385] [ 483.690813][T12385] dump_stack_lvl+0x16c/0x1f0 [ 483.690847][T12385] warn_alloc+0x248/0x3a0 [ 483.690873][T12385] ? __pfx_warn_alloc+0x10/0x10 [ 483.690893][T12385] ? rcu_is_watching+0x12/0xc0 [ 483.690920][T12385] ? __kmalloc_cache_node_noprof+0x2df/0x7a0 [ 483.690957][T12385] ? __kasan_kmalloc+0x8a/0xb0 [ 483.690985][T12385] ? __get_vm_area_node+0x208/0x330 [ 483.691026][T12385] __vmalloc_node_range_noprof+0xaf5/0x1480 [ 483.691061][T12385] ? do_raw_spin_unlock+0x172/0x230 [ 483.691109][T12385] ? n_tty_open+0x1a/0x170 [ 483.691148][T12385] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 483.691181][T12385] ? console_unlock+0x184/0x210 [ 483.691204][T12385] ? __pfx_console_unlock+0x10/0x10 [ 483.691229][T12385] ? __pfx___ldsem_down_write_nested+0x10/0x10 [ 483.691265][T12385] ? n_tty_open+0x1a/0x170 [ 483.691294][T12385] __vmalloc_node_noprof+0xad/0xf0 [ 483.691327][T12385] ? n_tty_open+0x1a/0x170 [ 483.691356][T12385] ? __pfx_n_tty_open+0x10/0x10 [ 483.691387][T12385] n_tty_open+0x1a/0x170 [ 483.691417][T12385] ? __pfx_n_tty_open+0x10/0x10 [ 483.691446][T12385] tty_ldisc_open+0x9f/0x120 [ 483.691471][T12385] tty_ldisc_setup+0x40/0x100 [ 483.691495][T12385] tty_init_dev.part.0+0x1ec/0x500 [ 483.691526][T12385] tty_open+0xa4f/0xf90 [ 483.691559][T12385] ? __pfx_tty_open+0x10/0x10 [ 483.691586][T12385] ? chrdev_open+0x10b/0x6a0 [ 483.691618][T12385] ? __pfx_tty_open+0x10/0x10 [ 483.691644][T12385] chrdev_open+0x234/0x6a0 [ 483.691671][T12385] ? __pfx_apparmor_file_open+0x10/0x10 [ 483.691707][T12385] ? __pfx_chrdev_open+0x10/0x10 [ 483.691737][T12385] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 483.691769][T12385] do_dentry_open+0x982/0x1530 [ 483.691796][T12385] ? __pfx_chrdev_open+0x10/0x10 [ 483.691830][T12385] vfs_open+0x82/0x3f0 [ 483.691867][T12385] path_openat+0x1de4/0x2cb0 [ 483.691903][T12385] ? __pfx_path_openat+0x10/0x10 [ 483.691930][T12385] ? __lock_acquire+0xb8a/0x1c90 [ 483.691965][T12385] do_filp_open+0x20b/0x470 [ 483.691991][T12385] ? __pfx_do_filp_open+0x10/0x10 [ 483.692038][T12385] ? alloc_fd+0x471/0x7d0 [ 483.692075][T12385] do_sys_openat2+0x11b/0x1d0 [ 483.692110][T12385] ? __pfx_do_sys_openat2+0x10/0x10 [ 483.692157][T12385] __x64_sys_openat+0x174/0x210 [ 483.692192][T12385] ? __pfx___x64_sys_openat+0x10/0x10 [ 483.692240][T12385] do_syscall_64+0xcd/0xfa0 [ 483.692271][T12385] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 483.692294][T12385] RIP: 0033:0x7f826af8f749 [ 483.692312][T12385] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 483.692334][T12385] RSP: 002b:00007f826bdd1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 483.692355][T12385] RAX: ffffffffffffffda RBX: 00007f826b1e6090 RCX: 00007f826af8f749 [ 483.692370][T12385] RDX: 0000000000000800 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 483.692384][T12385] RBP: 00007f826b013f91 R08: 0000000000000000 R09: 0000000000000000 [ 483.692398][T12385] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 483.692412][T12385] R13: 00007f826b1e6128 R14: 00007f826b1e6090 R15: 00007ffe980553d8 [ 483.692443][T12385] [ 484.782677][T12385] Mem-Info: [ 484.792558][T12385] active_anon:30121 inactive_anon:625 isolated_anon:0 [ 484.792558][T12385] active_file:12121 inactive_file:49910 isolated_file:0 [ 484.792558][T12385] unevictable:768 dirty:463 writeback:0 [ 484.792558][T12385] slab_reclaimable:12409 slab_unreclaimable:111949 [ 484.792558][T12385] mapped:57986 shmem:9810 pagetables:1608 [ 484.792558][T12385] sec_pagetables:0 bounce:0 [ 484.792558][T12385] kernel_misc_reclaimable:0 [ 484.792558][T12385] free:1200715 free_pcp:31202 free_cma:0 [ 484.913028][T12385] Node 0 active_anon:120848kB inactive_anon:2500kB active_file:48484kB inactive_file:199508kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:232256kB dirty:1852kB writeback:0kB shmem:38016kB shmem_thp:2048kB shmem_pmdmapped:0kB anon_thp:59392kB kernel_stack:14480kB pagetables:6280kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 485.052889][T12385] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:132kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:152kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 485.155556][T12385] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 485.232879][T12385] lowmem_reserve[]: 0 2485 2487 2487 2487 [ 485.273170][T12385] Node 0 DMA32 free:907156kB boost:0kB min:34364kB low:42952kB high:51540kB reserved_highatomic:0KB free_highatomic:0KB active_anon:118924kB inactive_anon:2500kB active_file:48484kB inactive_file:199508kB unevictable:1536kB writepending:1852kB zspages:0kB present:3129332kB managed:2545068kB mlocked:0kB bounce:0kB free_pcp:96720kB local_pcp:96720kB free_cma:0kB [ 485.347724][T12385] lowmem_reserve[]: 0 0 1 1 1 [ 485.362405][T12385] Node 0 Normal free:4kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 485.432398][T12385] lowmem_reserve[]: 0 0 0 0 0 [ 485.437208][T12385] Node 1 Normal free:3882992kB boost:0kB min:55512kB low:69388kB high:83264kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:132kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:28128kB local_pcp:28128kB free_cma:0kB [ 485.512473][T12385] lowmem_reserve[]: 0 0 0 0 0 [ 485.517300][T12385] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 485.563178][T12385] Node 0 DMA32: 1809*4kB (UME) 1268*8kB (UME) 804*16kB (UME) 476*32kB (UME) 210*64kB (ME) 659*128kB (UME) 324*256kB (ME) 170*512kB (UME) 60*1024kB (UM) 4*2048kB (M) 128*4096kB (UM) = 907172kB [ 485.611101][T12385] Node 0 Normal: 1*4kB (U) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 485.650283][T12385] Node 1 Normal: 142*4kB (UME) 81*8kB (UM) 45*16kB (UME) 187*32kB (UME) 70*64kB (UME) 19*128kB (UME) 6*256kB (ME) 2*512kB (UM) 3*1024kB (UME) 2*2048kB (ME) 942*4096kB (M) = 3882992kB [ 485.692588][T12385] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 485.712741][T12385] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 485.733491][T12385] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 485.759335][T12385] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 485.782616][T12385] 71736 total pagecache pages [ 485.792615][T12385] 16 pages in swap cache [ 485.802683][T12385] Free swap = 124932kB [ 485.806882][T12385] Total swap = 124996kB [ 485.822604][T12385] 2097051 pages RAM [ 485.828491][T12385] 0 pages HighMem/MovableOnly [ 485.842631][T12385] 428694 pages reserved [ 485.846834][T12385] 0 pages cma reserved [ 485.859979][T12385] tty tty29: ldisc open failed (-12), clearing slot 28 [ 486.327283][ T31] INFO: task syz-executor:5827 blocked for more than 143 seconds. [ 486.340051][ T31] Tainted: G U W L XTNJ syzkaller #0 [ 486.362888][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 486.432922][ T31] task:syz-executor state:D stack:23400 pid:5827 tgid:5827 ppid:1 task_flags:0x400140 flags:0x00080002 [ 486.496405][ T31] Call Trace: [ 486.499724][ T31] [ 486.502657][ T31] __schedule+0x1190/0x5de0 [ 486.623019][ T31] ? check_path.constprop.0+0x24/0x50 [ 486.628467][ T31] ? __lock_acquire+0x622/0x1c90 [ 486.733059][ T31] ? __pfx___schedule+0x10/0x10 [ 486.737972][ T31] ? find_held_lock+0x2b/0x80 [ 486.742656][ T31] ? schedule+0x2d7/0x3a0 [ 486.832385][ T31] ? nfsd_shutdown_threads+0x5b/0xf0 [ 486.878914][ T31] schedule+0xe7/0x3a0 [ 486.883050][ T31] schedule_preempt_disabled+0x13/0x30 [ 486.909339][ T31] __mutex_lock+0x818/0x1060 [ 486.942651][ T31] ? __lock_acquire+0x622/0x1c90 [ 486.961316][ T31] ? nfsd_shutdown_threads+0x5b/0xf0 [ 486.987277][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 487.013437][ T31] ? net_generic+0xea/0x2a0 [ 487.018724][ T31] ? nfsd_shutdown_threads+0x5b/0xf0 [ 487.044530][ T31] nfsd_shutdown_threads+0x5b/0xf0 [ 487.049704][ T31] nfsd_umount+0x48/0xe0 [ 487.073230][ T31] deactivate_locked_super+0xc1/0x1a0 [ 487.078648][ T31] deactivate_super+0xde/0x100 [ 487.114547][ T31] cleanup_mnt+0x225/0x450 [ 487.126384][ T31] task_work_run+0x150/0x240 [ 487.131019][ T31] ? __pfx_task_work_run+0x10/0x10 [ 487.153263][ T31] ? __pfx___x64_sys_umount+0x10/0x10 [ 487.160851][ T31] exit_to_user_mode_loop+0xec/0x130 [ 487.173266][ T31] do_syscall_64+0x426/0xfa0 [ 487.177891][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 487.206885][ T31] RIP: 0033:0x7f86b1990a77 [ 487.211358][ T31] RSP: 002b:00007fffc920be08 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 487.233515][ T31] RAX: 0000000000000000 RBX: 00007f86b1a13d7d RCX: 00007f86b1990a77 [ 487.241526][ T31] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fffc920bec0 [ 487.273357][ T31] RBP: 00007fffc920bec0 R08: 0000000000000000 R09: 0000000000000000 [ 487.281372][ T31] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fffc920cf50 [ 487.305116][ T31] R13: 00007f86b1a13d7d R14: 0000000000051d01 R15: 00007fffc920cf90 [ 487.313230][ T31] [ 487.333436][ T31] INFO: task syz.3.920:10078 blocked for more than 144 seconds. [ 487.341099][ T31] Tainted: G U W L XTNJ syzkaller #0 [ 487.383433][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 487.415080][ T31] task:syz.3.920 state:D stack:27672 pid:10078 tgid:10077 ppid:5837 task_flags:0x400140 flags:0x00080002 [ 487.453817][ T31] Call Trace: [ 487.457132][ T31] [ 487.460067][ T31] __schedule+0x1190/0x5de0 [ 487.492265][ T31] ? check_path.constprop.0+0x24/0x50 [ 487.513448][ T31] ? __lock_acquire+0x622/0x1c90 [ 487.518439][ T31] ? __pfx___schedule+0x10/0x10 [ 487.523307][ T31] ? find_held_lock+0x2b/0x80 [ 487.563773][ T31] ? schedule+0x2d7/0x3a0 [ 487.573671][ T31] ? nfsd_nl_version_set_doit+0xc4/0x7a0 [ 487.579341][ T31] schedule+0xe7/0x3a0 [ 487.623693][ T31] schedule_preempt_disabled+0x13/0x30 [ 487.629202][ T31] __mutex_lock+0x818/0x1060 [ 487.673779][ T31] ? nfsd_nl_version_set_doit+0xc4/0x7a0 [ 487.679468][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 487.733528][ T31] ? __nla_validate_parse+0x600/0x2880 [ 487.739065][ T31] ? __pfx___nla_validate_parse+0x10/0x10 [ 487.763595][ T31] ? nfsd_nl_version_set_doit+0xc4/0x7a0 [ 487.769359][ T31] nfsd_nl_version_set_doit+0xc4/0x7a0 [ 487.799423][ T31] ? __pfx_nfsd_nl_version_set_doit+0x10/0x10 [ 487.833836][ T31] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 487.868969][ T31] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 487.883662][ T31] genl_family_rcv_msg_doit+0x209/0x2f0 [ 487.889268][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 487.913633][ T31] ? rcu_is_watching+0x12/0xc0 [ 487.918458][ T31] ? bpf_lsm_capable+0x9/0x10 [ 487.923154][ T31] ? security_capable+0x7e/0x260 [ 487.943712][ T31] genl_rcv_msg+0x55c/0x800 [ 487.948292][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 487.953339][ T31] ? __pfx_nfsd_nl_version_set_doit+0x10/0x10 [ 487.981257][ T31] netlink_rcv_skb+0x158/0x420 [ 487.994609][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 487.999677][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 488.023750][ T31] ? netlink_deliver_tap+0x1ae/0xd30 [ 488.029089][ T31] genl_rcv+0x28/0x40 [ 488.033095][ T31] netlink_unicast+0x5aa/0x870 [ 488.053902][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 488.059233][ T31] ? __pfx___might_resched+0x10/0x10 [ 488.073962][ T31] netlink_sendmsg+0x8c8/0xdd0 [ 488.078769][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 488.104457][ T31] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 488.124414][ T31] ____sys_sendmsg+0xa98/0xc70 [ 488.129229][ T31] ? copy_msghdr_from_user+0x10a/0x160 [ 488.144943][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 488.150267][ T31] ? __pfx_futex_wake_mark+0x10/0x10 [ 488.164163][ T31] ___sys_sendmsg+0x134/0x1d0 [ 488.168880][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 488.198930][ T31] ? __lock_acquire+0x622/0x1c90 [ 488.204682][ T31] __sys_sendmsg+0x16d/0x220 [ 488.213964][ T31] ? __pfx___sys_sendmsg+0x10/0x10 [ 488.233979][ T31] ? __x64_sys_futex+0x1e0/0x4c0 [ 488.238981][ T31] do_syscall_64+0xcd/0xfa0 [ 488.243500][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 488.264871][ T31] RIP: 0033:0x7ff678b8f749 [ 488.269329][ T31] RSP: 002b:00007ff679a94038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 488.293817][ T31] RAX: ffffffffffffffda RBX: 00007ff678de5fa0 RCX: 00007ff678b8f749 [ 488.301835][ T31] RDX: 0000000000000844 RSI: 00002000000004c0 RDI: 0000000000000003 [ 488.333850][ T31] RBP: 00007ff678c13f91 R08: 0000000000000000 R09: 0000000000000000 [ 488.341890][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 488.374569][ T31] R13: 00007ff678de6038 R14: 00007ff678de5fa0 R15: 00007ffe8217a2f8 [ 488.382599][ T31] [ 488.411935][ T31] [ 488.411935][ T31] Showing all locks held in the system: [ 488.493943][ T31] 3 locks held by kworker/u8:0/12: [ 488.499096][ T31] #0: ffff88813ff29948 ((wq_completion)events_unbound#2){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 488.573965][ T31] #1: ffffc90000117d00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 488.604830][ T31] #2: ffffffff900eb2c8 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0x51/0xc0 [ 488.626220][ T31] 1 lock held by khungtaskd/31: [ 488.631102][ T31] #0: ffffffff8e3c45e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0 [ 488.704086][ T31] 2 locks held by syz-executor/5827: [ 488.709413][ T31] #0: ffff88803073e0e0 (&type->s_umount_key#52){++++}-{4:4}, at: deactivate_super+0xd6/0x100 [ 488.767277][ T31] #1: ffffffff8e7ed348 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 488.806183][ T31] 2 locks held by syz.0.872/9869: [ 488.811274][ T31] #0: ffffffff9018f090 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 488.845694][ T31] #1: ffffffff8e7ed348 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x687/0xbc0 [ 488.885764][ T31] 2 locks held by syz.3.920/10078: [ 488.890914][ T31] #0: ffffffff9018f090 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 488.926748][ T31] #1: ffffffff8e7ed348 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_version_set_doit+0xc4/0x7a0 [ 488.974149][ T31] 2 locks held by syz.7.1104/10982: [ 488.979396][ T31] #0: ffffffff9018f090 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 489.024215][ T31] #1: ffffffff8e7ed348 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0xd5/0x1b10 [ 489.046124][ T31] 2 locks held by syz.6.1152/11191: [ 489.051350][ T31] #0: ffffffff9018f090 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 489.074258][ T31] #1: ffffffff8e7ed348 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x687/0xbc0 [ 489.097954][ T31] 2 locks held by syz-executor/11204: [ 489.103349][ T31] #0: ffff8880320900e0 (&type->s_umount_key#52){++++}-{4:4}, at: deactivate_super+0xd6/0x100 [ 489.138365][ T31] #1: ffffffff8e7ed348 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 489.164283][ T31] 2 locks held by syz.9.1398/12313: [ 489.170238][ T31] 2 locks held by syz.5.1420/12396: [ 489.184846][ T31] #0: ffffffff900eb2c8 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x38/0x230 [ 489.193856][ T31] #1: ffffffff8e3cfb78 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x284/0x3c0 [ 489.230317][ T31] [ 489.256996][ T31] ============================================= [ 489.256996][ T31] [ 489.311832][ T31] NMI backtrace for cpu 1 [ 489.311853][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 489.311898][ T31] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 489.311910][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 489.311924][ T31] Call Trace: [ 489.311930][ T31] [ 489.311938][ T31] dump_stack_lvl+0x116/0x1f0 [ 489.311970][ T31] nmi_cpu_backtrace+0x27b/0x390 [ 489.312003][ T31] ? _raw_spin_unlock_irqrestore+0x61/0x80 [ 489.312030][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 489.312064][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 489.312101][ T31] watchdog+0xf3f/0x1170 [ 489.312127][ T31] ? rcu_is_watching+0x12/0xc0 [ 489.312151][ T31] ? __pfx_watchdog+0x10/0x10 [ 489.312170][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 489.312199][ T31] ? __kthread_parkme+0x19e/0x250 [ 489.312229][ T31] ? __pfx_watchdog+0x10/0x10 [ 489.312249][ T31] kthread+0x3c5/0x780 [ 489.312282][ T31] ? __pfx_kthread+0x10/0x10 [ 489.312315][ T31] ? rcu_is_watching+0x12/0xc0 [ 489.312339][ T31] ? __pfx_kthread+0x10/0x10 [ 489.312372][ T31] ret_from_fork+0x675/0x7d0 [ 489.312404][ T31] ? __pfx_kthread+0x10/0x10 [ 489.312436][ T31] ret_from_fork_asm+0x1a/0x30 [ 489.312481][ T31] [ 489.888755][ T12] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 490.047455][ T12] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 490.134985][ T12] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 490.208214][ T12] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 490.456220][ T12] bridge_slave_1: left allmulticast mode [ 490.475261][ T12] bridge_slave_1: left promiscuous mode [ 490.481437][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 490.537921][ T12] bridge_slave_0: left allmulticast mode [ 490.560468][ T12] bridge_slave_0: left promiscuous mode [ 490.585179][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 491.684691][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 491.717478][ T12] bond0 (unregistering): Released all slaves [ 491.805598][T12386] mkiss: ax0: crc mode is auto. [ 492.411516][ T12] hsr_slave_0: left promiscuous mode [ 492.456707][ T12] hsr_slave_1: left promiscuous mode [ 492.475193][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 492.512790][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 492.556820][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 492.564239][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 492.641310][ T12] veth0_macvtap: left promiscuous mode [ 492.673700][ T12] veth1_vlan: left promiscuous mode [ 492.697253][ T12] veth0_vlan: left promiscuous mode [ 493.386002][ T12] team0 (unregistering): Port device team_slave_1 removed [ 493.424161][ T12] team0 (unregistering): Port device team_slave_0 removed [ 494.038970][ T12] team0: left allmulticast mode [ 494.043868][ T12] team_slave_1: left allmulticast mode [ 494.081164][ T12] team0: left promiscuous mode [ 494.108505][ T12] team_slave_1: left promiscuous mode [ 494.114225][ T12] bridge0: port 3(team0) entered disabled state [ 494.178301][ T12] bridge_slave_1: left allmulticast mode [ 494.183983][ T12] bridge_slave_1: left promiscuous mode [ 494.223955][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 494.267726][ T12] bridge_slave_0: left allmulticast mode [ 494.273417][ T12] bridge_slave_0: left promiscuous mode [ 494.306977][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 494.983603][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 494.994831][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 495.005190][ T12] bond0 (unregistering): Released all slaves [ 495.083025][ T12] tipc: Left network mode [ 495.316243][ T12] hsr_slave_0: left promiscuous mode [ 495.328740][ T12] hsr_slave_1: left promiscuous mode [ 495.371183][ T12] veth1_macvtap: left promiscuous mode [ 495.376720][ T12] veth0_macvtap: left promiscuous mode [ 495.400500][ T12] veth1_vlan: left promiscuous mode [ 495.405778][ T12] veth0_vlan: left promiscuous mode [ 496.160387][ T12] team0 (unregistering): Port device team_slave_1 removed