last executing test programs: 10m15.287490773s ago: executing program 0 (id=3002): io_uring_setup$auto(0x51, &(0x7f0000000080)={0x7fffffff, 0xfffffeff, 0x400, 0x9, 0x4, 0x8, 0xffffffffffffffff, [0x3, 0x10000], {0x10006, 0x6, 0x2, 0x29f, 0x1, 0x84, 0x101, 0x17f, 0x4}, {0xff, 0x401, 0x5e8, 0x80005, 0x1, 0x7, 0x4, 0x7, 0x9}}) r0 = syz_genetlink_get_family_id$auto_smc_gen_netlink(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$auto_SMC_NETLINK_DISABLE_SEID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000", @ANYRES16=r0], 0x14}, 0x1, 0x0, 0x0, 0x880}, 0x810) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f0000000180), 0x7, 0xa505}, 0x800}, 0x7, 0x4008) 10m15.099635853s ago: executing program 0 (id=3003): r0 = openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000140)='/dev/cuse\x00', 0x1c1041, 0x0) write$auto_fuse_dev_operations_fuse_i(r0, &(0x7f0000000440)="110000000300"/17, 0x11) timer_create$auto(0x2, 0x0, 0x0) mmap$auto(0x0, 0x20009, 0xfff, 0xeb1, 0x401, 0x8000) ioctl$auto_PPPIOCSMRU(0xffffffffffffffff, 0x40047452, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, r0, 0x8003) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000540)='/sys/devices/platform/dummy_hcd.7/usb8/power/wakeup_total_time_ms\x00', 0x0, 0x0) pread64$auto(r1, 0x0, 0x3, 0xfdb) mmap$auto(0x0, 0x80000000000000, 0x4000000000df, 0x400040eb1, 0x401, 0x300000000000) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x2, 0x0) io_uring_setup$auto(0x6, 0x0) socket(0xa, 0x2, 0x73) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) close_range$auto(0x2, 0x8, 0x0) socket(0x11, 0x3, 0x9) openat$auto_dvb_dvr_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000001180), 0xe40, 0x0) unshare$auto(0x40000080) madvise$auto(0x0, 0xffffffffffff0005, 0x17) close_range$auto(0x0, 0x5, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000000), r2) sendmsg$auto_NFSD_CMD_THREADS_GET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r3, 0x1, 0x70bd31, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x400c801}, 0x4000094) openat$auto_force_wakeup_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/bluetooth/hci2/force_wakeup\x00', 0x8742, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x60580, 0x0) r4 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0) r5 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00') ioctl$auto(r5, 0x9004b70b, r5) clone$auto(0x20003b11, 0x8, 0x0, 0x0, 0x7) write$auto(r4, 0x0, 0xe) 9m59.938020818s ago: executing program 32 (id=3003): r0 = openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000140)='/dev/cuse\x00', 0x1c1041, 0x0) write$auto_fuse_dev_operations_fuse_i(r0, &(0x7f0000000440)="110000000300"/17, 0x11) timer_create$auto(0x2, 0x0, 0x0) mmap$auto(0x0, 0x20009, 0xfff, 0xeb1, 0x401, 0x8000) ioctl$auto_PPPIOCSMRU(0xffffffffffffffff, 0x40047452, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, r0, 0x8003) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000540)='/sys/devices/platform/dummy_hcd.7/usb8/power/wakeup_total_time_ms\x00', 0x0, 0x0) pread64$auto(r1, 0x0, 0x3, 0xfdb) mmap$auto(0x0, 0x80000000000000, 0x4000000000df, 0x400040eb1, 0x401, 0x300000000000) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x2, 0x0) io_uring_setup$auto(0x6, 0x0) socket(0xa, 0x2, 0x73) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) close_range$auto(0x2, 0x8, 0x0) socket(0x11, 0x3, 0x9) openat$auto_dvb_dvr_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000001180), 0xe40, 0x0) unshare$auto(0x40000080) madvise$auto(0x0, 0xffffffffffff0005, 0x17) close_range$auto(0x0, 0x5, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000000), r2) sendmsg$auto_NFSD_CMD_THREADS_GET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r3, 0x1, 0x70bd31, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x400c801}, 0x4000094) openat$auto_force_wakeup_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/bluetooth/hci2/force_wakeup\x00', 0x8742, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x60580, 0x0) r4 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0) r5 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00') ioctl$auto(r5, 0x9004b70b, r5) clone$auto(0x20003b11, 0x8, 0x0, 0x0, 0x7) write$auto(r4, 0x0, 0xe) 5m53.891262928s ago: executing program 33 (id=3662): mmap$auto(0x1, 0x400004, 0x800df, 0x9b72, 0x2, 0x0) socket(0x2, 0x2, 0x0) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/ram2/partscan\x00', 0x80200, 0x0) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x50) mmap$auto(0x6, 0x400000002020009, 0x6, 0xeb1, 0xffffffffffffffff, 0x70ada50a) mmap$auto(0x0, 0x100000000c, 0x4000000000de, 0x100000044eb2, 0x10006, 0x300000000000) mprotect$auto(0x0, 0x806121, 0x6) io_uring_setup$auto(0x5b, &(0x7f0000000080)={0x7fffffff, 0xe, 0x2, 0x6, 0x5, 0x8, 0xffffffffffffffff, [], {0xd74c, 0x10000, 0x1, 0x29f, 0x100, 0xfff, 0x101, 0x6, 0x2}, {0xfb, 0x1001, 0x10001, 0x7, 0x1, 0x40, 0x176c5, 0x400005, 0x100000005}}) openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000240)='/dev/binderfs/binder0\x00', 0x80000, 0x0) openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/pcmC1D0c\x00', 0x0, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) kill$auto(0x0, 0x11) msgctl$auto_IPC_INFO(0x7, 0x3, 0x0) ptrace$auto(0x10, 0x0, 0x1, 0x7ff) unshare$auto(0x40000080) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x6, 0x0) select$auto(0x7, 0x0, &(0x7f0000000080)={[0x8, 0xc0b, 0x8, 0x5, 0x2, 0xffffffffffffffff, 0x13, 0x7, 0xb, 0x1, 0xced80000000000, 0x9, 0x6, 0x0, 0x3, 0x7fffffff]}, 0x0, 0x0) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) readv$auto(r0, &(0x7f0000000a80)={0x0, 0x3}, 0x3) close_range$auto(0x2, 0x8, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0xe8, 0x9, 0xffffffffffffffff, 0x1, 0x5, 0x4, 0x15f4da0e, 0xffffffff, 0x9, 0x100000000000000c, 0x8, 0xfffffffffffffffe, 0xfca, 0x9, 0x2, 0x4000000000000d]}, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) close_range$auto(0x2, 0x8000, 0x0) 3m10.47159808s ago: executing program 34 (id=3997): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/devices/platform/i8042/serio0/extra\x00', 0x10b542, 0x0) ptrace$auto(0x10, 0x0, 0x1, 0x7ff) ptrace$auto(0x9, 0x0, 0x200004000009, 0xfffffffffffff6da) unshare$auto(0x40000080) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) timer_settime$auto(0xffffffff, 0x9, &(0x7f0000000140)={{0x7, 0x4}, {0x10}}, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zram0\x00', 0x6e642, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/pci/rescan\x00', 0xb81, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$auto(0x5, &(0x7f0000000040)=@bpf_attr_7={@prog_id=0x8, 0x9, 0x6}, 0xa) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) r1 = socket(0x2, 0x1, 0x106) bind$auto(r1, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) connect$auto(0x3, 0x0, 0x50) r2 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0x1c, r2, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@NFSD_A_SERVER_THREADS={0x8, 0x1, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008000}, 0xc840) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f00000000c0), r3) sendmsg$auto_TIPC_NL_LINK_GET(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x14, r4, 0xc8b61cca5f1dec27, 0x70bd26, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x80) open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x20) chmod$auto(&(0x7f00000000c0)='./file0\x00', 0xf4ba) execve$auto(&(0x7f00000002c0)='./file0\x00', 0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r5 = openat2$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000180)={0x80040, 0x40, 0xe}, 0x18) ioctl$auto_FIDEDUPERANGE(r5, 0xc0189436, 0x3) sysfs$auto(0x2, 0x10000000000002f, 0x0) fsopen$auto(0x0, 0x1) 2m43.093484827s ago: executing program 6 (id=4070): r0 = prctl$auto(0x41, 0x3, 0x0, 0x0, 0x0) landlock_create_ruleset$auto(&(0x7f0000000140)={0x7, 0xdd4, 0x9}, 0x8000000000000002, 0x0) mmap$auto(0x0, 0x400006, 0x2, 0x9b72, 0xffffffffffffffff, 0x8000) r1 = socket(0xa, 0x801, 0x84) getsockopt$auto(r1, 0x84, 0x84, 0x0, 0x0) mprotect$auto(0x110c238000, 0x1, 0x3) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) bpf$auto_BPF_LINK_CREATE(0x1c, &(0x7f0000000240)=@info={r0, 0xb895, 0x5}, 0x1) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) r2 = landlock_create_ruleset$auto(&(0x7f0000000000)={0x6, 0x400, 0x7}, 0x9, 0x0) landlock_add_rule$auto(r2, 0x2, 0x0, 0x0) statmount$auto(0x0, &(0x7f0000000040)={0x0, 0x2, 0x5ae, 0x5, 0x7, 0x6, 0x10000, 0x1, 0xa, 0x8, 0x6, 0x9, 0x200005, 0x4, 0x1ff, 0x2, 0x8, 0x10000, 0x0, 0x6, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, [0x80, 0x0, 0x0, 0x400000000, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0xfffffffffffffffc]}, 0x6, 0x1000000) r3 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000540)='/dev/sequencer2\x00', 0x80011, 0x0) write$auto_seq_oss_f_ops_seq_oss(r3, &(0x7f0000000840)="fda203ba", 0x4) bpf$auto(0x12, &(0x7f0000000040)=@link_detach, 0x26) madvise$auto(0x110c230000, 0x8031ca, 0x9) 2m42.281708189s ago: executing program 6 (id=4071): mmap$auto(0x0, 0x2020009, 0x6, 0xf8, 0xfffffffffffffffa, 0x8000) r0 = socket(0x15, 0x5, 0x0) acct$auto(&(0x7f0000000100)='./cgroup/cgroup.subtree_control\x00') unshare$auto(0x40000080) write$auto(0xca, &(0x7f00000000c0)='\x04>\x01\x01\x00J:\xdd\xfc\xb6\xc6\x0f\xaf\xe3\x0f\xd1V\xb1yz\\\xa6\xed\ag+\xa3p(\xe2\x1b\xdc7\x1b\xc4TM}\xce\x90\xfa9\x957\xec\xd8\xe0TC\x86\xad\xe1G\xc7\xd4\x96\x12h\x84;Y\xe2\x03i\xa1)`\n\xc3\xfeR\x06\x03\xf5/@\xf0\'\xb9\xdf\xe1\xef\v\x19B\xc0\xe2\xac\xa5^\x01D\xef\xaf#\xbc\xa5\xf9J\xdc\xc3),=1\b\x05\x9d\x82\xd4\'\xe8\xfe\xfd\x9a\x9f\x00\x00\x00\x00\x00\x00\x00\x00', 0x7f) truncate$auto(0x0, 0xfffffffffffffffe) io_uring_register$auto_IORING_UNREGISTER_IOWQ_AFF(r0, 0x12, &(0x7f00000001c0)="7f1d033bb87bac758634f3cfac90eaafb0af2a18e44e40913f5a626298e0dcbf8348b8e2cf8a521bcffbd8bea12e98ad0086d73e110ba6c514ea3ae75236cbaf9c094b2b283f2b35a0b4fdc3661ccec38a381f21a78efebab04df85b80782ec1cc2f81ddd2be5ff9eef21c00ec5826e25387b0c21a499912872ccd276610a31f2712db73ac9842c2688b4db2faf38367f2feda9e0f2f8172a25801af0a480624d037933d869f8aceb3a9118441dbfb31a2b18a1655f08a02fa791926742a879198fd18ed9b893e9b26aadb8c658065e38a4a4c1aa63b7515980c7944b88f23", 0x5cd) mmap$auto(0x1, 0x20009, 0x4000000000df, 0xebe, 0x401, 0x8000) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0xe0301, 0x0) mmap$auto(0x0, 0x3, 0x10, 0xeb1, 0x403, 0x8000) mmap$auto(0x0, 0x5b7, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r2 = waitid$auto_P_PID(0x1, 0x0, &(0x7f00000002c0)={@siginfo_0_0={0x6, 0x6, 0x4, @_sigpoll={0x4, r1}}}, 0xec2, &(0x7f0000000340)={{0x401, 0x513}, {0x8000000000000000, 0x3}, 0xfcf, 0x0, 0x2, 0xf, 0x1, 0x2, 0x7, 0x6, 0x1, 0x7b55, 0x7, 0xa03, 0x6, 0x2}) prctl$auto(0x9, 0x400, r2, 0x100000, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) pkey_mprotect$auto(0x800000000000, 0xb, 0x6, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/lockd/parameters/nlm_grace_period\x00', 0x8001, 0x0) write$auto(r3, &(0x7f0000000200)='\x00\x00\x00\x00\xcf\x00l\xa67u\xe1\xe8@?\xdey\x94\x81\xb8\x80d\x92\a4T\xf5\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb4\x1b\x1e\xde\x01\x03`\x036\v\x00\x89E@\xec\xc9\xe9<\xb1\x89\xc7\xcc\xd4kF\xed@\x95\xb0\xdd}\xf1R\x84\xbb\x92\xb86\r>\xe0\xf0\xea\xc1\xc1\x029\x04\xd4|\x95\xa7\x1eB\r\xf1+\xe1\xc6O\xf5\xa6S\x86Q\xb9\xd5\xd1*\x03ds6,\xf6q\x04r5 qq/\x88\xf8\x03\xfaw?\xb6x\x9d\xbd\x87~\xbby\x8cy\xa6\x93m\xa6\xe7\xac\xa3\xf1\x04p\xaf\xc8}\xbc\xe9\xc0\t\xc6\"\x18U\x03\xa0\x18\xc5^\xa7\xc7\xd7\xb5\x15\xb3\xf7\xa6\xfe\x1a6', 0x81) acct$auto(&(0x7f0000000180)='./cgroup/cgroup.subtree_control\x00') 2m37.392834019s ago: executing program 35 (id=4055): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) close_range$auto(0x2, 0x8, 0x0) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000000000), 0xc0402, 0x0) ioctl$auto_posix_clock_file_operations_posix_clock(r1, 0x40043d04, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:09/sun\x00', 0xa0200, 0x0) pread64$auto(r2, 0x0, 0x6, 0x40008) madvise$auto(0x0, 0xffffffffffff0005, 0x17) close_range$auto(0xffffffffffffffff, 0x8, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket(0x2, 0xa, 0x5) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/tracing/per_cpu/cpu1/trace_pipe_raw\x00', 0x10002, 0x0) prctl$auto_PR_TIMER_CREATE_RESTORE_IDS_ON(0x9, 0x1, r0, 0x6, 0x2) openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/set_event\x00', 0x80200, 0x0) modify_ldt$auto(0x11, 0x0, 0x10) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0x2, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000280)='/dev/dri/renderD128\x00', 0x2403, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/thread-self/net/ipv6_route\x00', 0x101000, 0x0) write$auto(r3, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) 2m36.189859001s ago: executing program 6 (id=4075): mmap$auto(0x3, 0x6, 0xe2, 0x9b72, 0xffffffffffffffff, 0x800008000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) ioctl$auto_RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000100)={0x1, 0x3, 0x9, 0x6, 0xfffff0d3, 0x10, 0x6, 0x6, 0x7}) madvise$auto(0x0, 0x7ffff80000000003, 0xa) mmap$auto(0x0, 0x2020009, 0x8, 0x17, 0xffffffffffffffff, 0x97c) sendmsg$auto_NL802154_CMD_SET_CCA_ED_LEVEL(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRESHEX=0x0], 0x1c}, 0x1, 0x0, 0x0, 0x8001}, 0x40000) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/mtrr\x00', 0x0, 0x0) ioctl$auto(r0, 0x400c4d02, r0) read$auto_proc_iter_file_ops_compat_inode(0xffffffffffffffff, &(0x7f0000000180)=""/178, 0xb2) sendmsg$auto_ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, 0x0, 0x2000c840) madvise$auto(0x8000000000000001, 0x2, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000000000008000) openat$auto_proc_pid_attr_operations_base(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/attr/prev\x00', 0x101002, 0x0) prctl$auto(0x1000000003b, 0x1, 0x0, 0x949, 0x104000000000007) select$auto(0x8, 0x0, 0x0, 0x0, 0x0) io_setup$auto(0x7ffe, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = open(&(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x88e40, 0xb5d1af1605322ddc) r2 = open_by_handle_at$auto(0xffffffffffffffff, &(0x7f0000000040)={0x8, 0x2, "0200000000000000"}, 0x6) sendfile$auto(r2, r1, 0x0, 0x2) madvise$auto(0x0, 0xffffffffffff0001, 0x8) r3 = clone$auto(0x100000008, 0x9, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x4000006) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x202, 0x0) getpgid$auto(r3) ioctl$auto_UI_BEGIN_FF_ERASE(r2, 0xc00c55ca, &(0x7f0000000000)={0x3, 0x3, 0xa}) 2m33.95948513s ago: executing program 6 (id=4078): mmap$auto(0x0, 0x2020009, 0x6, 0xf8, 0xfffffffffffffffa, 0x8000) r0 = socket(0x15, 0x5, 0x0) acct$auto(&(0x7f0000000100)='./cgroup/cgroup.subtree_control\x00') unshare$auto(0x40000080) write$auto(0xca, &(0x7f00000000c0)='\x04>\x01\x01\x00J:\xdd\xfc\xb6\xc6\x0f\xaf\xe3\x0f\xd1V\xb1yz\\\xa6\xed\ag+\xa3p(\xe2\x1b\xdc7\x1b\xc4TM}\xce\x90\xfa9\x957\xec\xd8\xe0TC\x86\xad\xe1G\xc7\xd4\x96\x12h\x84;Y\xe2\x03i\xa1)`\n\xc3\xfeR\x06\x03\xf5/@\xf0\'\xb9\xdf\xe1\xef\v\x19B\xc0\xe2\xac\xa5^\x01D\xef\xaf#\xbc\xa5\xf9J\xdc\xc3),=1\b\x05\x9d\x82\xd4\'\xe8\xfe\xfd\x9a\x9f\x00\x00\x00\x00\x00\x00\x00\x00', 0x7f) truncate$auto(0x0, 0xfffffffffffffffe) io_uring_register$auto_IORING_UNREGISTER_IOWQ_AFF(r0, 0x12, &(0x7f00000001c0)="7f1d033bb87bac758634f3cfac90eaafb0af2a18e44e40913f5a626298e0dcbf8348b8e2cf8a521bcffbd8bea12e98ad0086d73e110ba6c514ea3ae75236cbaf9c094b2b283f2b35a0b4fdc3661ccec38a381f21a78efebab04df85b80782ec1cc2f81ddd2be5ff9eef21c00ec5826e25387b0c21a499912872ccd276610a31f2712db73ac9842c2688b4db2faf38367f2feda9e0f2f8172a25801af0a480624d037933d869f8aceb3a9118441dbfb31a2b18a1655f08a02fa791926742a879198fd18ed9b893e9b26aadb8c658065e38a4a4c1aa63b7515980c7944b88f232f9dba0ee500b262c1183a224ddc1980", 0x5cd) mmap$auto(0x1, 0x20009, 0x4000000000df, 0xebe, 0x401, 0x8000) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0xe0301, 0x0) mmap$auto(0x0, 0x3, 0x10, 0xeb1, 0x403, 0x8000) mmap$auto(0x0, 0x5b7, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r2 = waitid$auto_P_PID(0x1, 0x0, &(0x7f00000002c0)={@siginfo_0_0={0x6, 0x6, 0x4, @_sigpoll={0x4, r1}}}, 0xec2, &(0x7f0000000340)={{0x401, 0x513}, {0x8000000000000000, 0x3}, 0xfcf, 0x0, 0x2, 0xf, 0x1, 0x2, 0x7, 0x6, 0x1, 0x7b55, 0x7, 0xa03, 0x6, 0x2}) prctl$auto(0x9, 0x400, r2, 0x100000, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) pkey_mprotect$auto(0x800000000000, 0xb, 0x6, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/lockd/parameters/nlm_grace_period\x00', 0x8001, 0x0) write$auto(r3, &(0x7f0000000200)='\x00\x00\x00\x00\xcf\x00l\xa67u\xe1\xe8@?\xdey\x94\x81\xb8\x80d\x92\a4T\xf5\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb4\x1b\x1e\xde\x01\x03`\x036\v\x00\x89E@\xec\xc9\xe9<\xb1\x89\xc7\xcc\xd4kF\xed@\x95\xb0\xdd}\xf1R\x84\xbb\x92\xb86\r>\xe0\xf0\xea\xc1\xc1\x029\x04\xd4|\x95\xa7\x1eB\r\xf1+\xe1\xc6O\xf5\xa6S\x86Q\xb9\xd5\xd1*\x03ds6,\xf6q\x04r5 qq/\x88\xf8\x03\xfaw?\xb6x\x9d\xbd\x87~\xbby\x8cy\xa6\x93m\xa6\xe7\xac\xa3\xf1\x04p\xaf\xc8}\xbc\xe9\xc0\t\xc6\"\x18U\x03\xa0\x18\xc5^\xa7\xc7\xd7\xb5\x15\xb3\xf7\xa6\xfe\x1a6', 0x81) acct$auto(&(0x7f0000000180)='./cgroup/cgroup.subtree_control\x00') 2m32.200057348s ago: executing program 6 (id=4079): close_range$auto(0x2, 0x8, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(r0, 0x0, 0x24048004) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0x2, 0xa, 0x1) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0) chdir$auto(&(0x7f0000000000)='}[,&*}\x00') r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x40400, 0x48) fchown$auto(r1, 0x0, 0x400) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000) openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/syscall\x00', 0x0, 0x0) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, 0x0, 0x0, 0x0) readv$auto(0x3, &(0x7f00000001c0)={0x0, 0x7fffffffefff}, 0x7) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/bus/netdevsim/new_device\x00', 0x149b01, 0x0) writev$auto(r2, &(0x7f0000000200)={0x0, 0x9}, 0x7) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/platform/vivid.0/video4linux/vbi26/dev\x00', 0x5bb600, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty19\x00', 0x800, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/user\x00') syz_open_procfs$namespace(0x0, &(0x7f0000000040)) mmap$auto(0x0, 0x3, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket(0x2c, 0x1, 0x0) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x80802, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) 2m30.001039796s ago: executing program 6 (id=4081): r0 = socket(0x2, 0x5, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x10000}, 0x7, 0x0, 0x5, 0xb}, 0xfff}, 0x8, 0x311) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x18dd01, 0x0) mmap$auto(0x0, 0x40009, 0x3, 0x9b72, 0x7, 0x28000) bpf$auto(0x0, &(0x7f0000000780)=@link_update={0xa, @new_map_fd=0x5, 0x4007, @old_prog_fd=0x13b}, 0xa3) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = openat$auto_snd_mixer_oss_f_ops_mixer_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x902, 0x0) ioctl$auto(r2, 0x80004508, 0xffffffffffffffff) mmap$auto(0x0, 0x400008, 0xdf, 0x38, 0xffffffffffffffff, 0x200000008000) r3 = epoll_create$auto(0x1) epoll_ctl$auto(r3, 0x1, 0x8000000000000000, 0x0) write$auto(0x1, 0x0, 0x80000000) mprotect$auto(0x0, 0x8000000000000001, 0x8) bpf$auto_BPF_LINK_DETACH(0x22, &(0x7f0000000000)=@link_detach={r1}, 0x8) r4 = openat$auto_buffer_percent_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/buffer_percent\x00', 0x1, 0x0) write$auto(r4, 0x0, 0x7) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/vm/dirty_background_bytes\x00', 0x202, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x6, 0x3, 0xeb1, 0x7, 0x8000) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptya1\x00', 0x20080, 0x0) ioctl$auto(0x3, 0x5420, 0x38) readv$auto(0x3, &(0x7f0000000040)={0x0, 0x36a}, 0x3) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) sendmsg$auto_NL80211_CMD_SET_WIPHY(r5, 0x0, 0x20000084) 2m26.453976437s ago: executing program 5 (id=4083): mmap$auto(0x40000, 0x20009, 0x4000000000e3, 0x200000000eb1, 0x401, 0x7) unshare$auto(0x40000080) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/module/hid_steam/parameters/lizard_mode\x00', 0xc0481, 0x0) write$auto(r0, &(0x7f0000000000)='\x14\xf4\xb6\xc6\x97\xdb\x18B\f\xef\x1dQZ\xa66\xe7\x06\\\xe0)+\x86\xa7\x9bv\xe1\x18\xf5\x83\b\x11\x19\xdd\x1c', 0x7e) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r1 = bpf$auto_BPF_BTF_LOAD(0x12, &(0x7f0000000340)=@raw_tracepoint={0x100000001, 0xffffffffffffffff, 0x0, 0x60}, 0x81) mremap$auto(0x2, 0x4, 0x1, 0x7, 0x100000000) r2 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/smaps_rollup\x00', 0x40000, 0x0) r3 = bpf$auto_BPF_BTF_LOAD(0x12, &(0x7f00000000c0)=@enable_stats={0x6}, 0xc0000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) read$auto_proc_pid_maps_operations_internal(r2, &(0x7f00000020c0)=""/4093, 0xffd) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/block/loop14/queue/dma_alignment\x00', 0x80000, 0x0) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001140)='/sys/devices/virtual/block/zram0/comp_algorithm\x00', 0x20b42, 0x0) sendfile$auto(r5, r5, 0x0, 0x9) read$auto(r4, 0x0, 0x200000020) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) pipe$auto(&(0x7f00000002c0)) r6 = getpid() rt_tgsigqueueinfo$auto(r6, 0x0, 0x21, &(0x7f0000000400)={@siginfo_0_0={0x3, 0x1c51, 0xfffffffe, @_kill={r6, 0x0}}}) shmctl$auto_IPC_INFO(0xfffffff7, 0x3, &(0x7f0000000400)={{0x8003, r7, 0xee01, 0x2, 0x6d6, 0x1, 0xc0}, 0x10, 0xd, 0x0, 0x2, @inferred=r6, @inferred=0xffffffffffffffff, 0x56e, 0x0, &(0x7f00000001c0), &(0x7f0000000200)="61e5326cd47bc3f100ae087f1250e1a36c5d23c37880e43c7f645e2a50e631670f6d73bc9617b824bab5a9b98ff8e44fcf62a18c514208fa22bd4eb5c5987b7382a655818d669d28d9"}) msgctl$auto_IPC_SET(0x8, 0x1, &(0x7f0000000500)={{0x11, 0xee00, 0x0, 0x80, 0xfffffffc, 0x3, 0x3}, &(0x7f0000000480)=0x69, &(0x7f00000004c0)=0xa1, 0x1, 0x81, 0x8000000000000000, 0x7, 0x6, 0x8, 0x8, 0x88e, @raw=0x8000, @inferred=r9}) r10 = socket(0x2, 0x1, 0x106) bind$auto(r10, &(0x7f0000000040)=@xdp={0x2c, 0x5, 0x0, 0x19}, 0x6a) r11 = setfsuid$auto(0xee00) r12 = setfsuid$auto(0xee01) setresuid$auto(r11, r12, r11) sendmsg$auto_THERMAL_GENL_CMD_TZ_GET_TRIP(r1, &(0x7f00000001c0)={&(0x7f0000000040), 0xc, &(0x7f0000000b00)={&(0x7f0000000580)=ANY=[@ANYBLOB="70050000", @ANYRES16=0x0, @ANYBLOB="200028bd7000ffdbdf0900000000080003000400800078010e800c009880040000000000000031012980040057000800ad00", @ANYRES32=0x0, @ANYBLOB="2efe187c5537196c86c80181d1e6b4149ffb464ead175254c321eb0c38246dc743cb7507db89cb46496d06057b6736a217dab4607efd41b305696a3b537185c56f3d239cdb4efa64badefcc33597cb6ef39d04817372fc30be66ec174ad3f41fec3cf3b66353c01ada9ee377e083329de54dd6a30d2306c5b1c27d3a8d860a2a6a1cea16d64eb58efbf10c86c89c21a723649730c3e9627f941af9cd8c376a919b2c56a5f6458d8b44964ce38fc0a771c6bf0c5d6d37a8de2cdaa1d8205a68fa0400628008008100", @ANYRES32=r6, @ANYBLOB="49ac6930517a06ac6c921677d3c1a8eea5c8ba2ba96e52c80cd13e45e52357c32d8cb25e9880be13ea03130c6b4bab3cb9efaee579b5fe524a19dd4561f3b94fd3dc48ad8140740dbf6bb5d39a31d44f5dd8f746c000000008005b000800000014006380040012800c00030000000000010000000800b200", @ANYRES32=r8, @ANYBLOB='\b\x002\x00', @ANYRES32=r3, @ANYBLOB="01200004", @ANYRES32=r10, @ANYBLOB="080008000e000000de020c803a0119802077be8a2a97af277ff9462dfff1e9c27c0e1e6e6d9c385d549e3ceec04af0e32c2a7342e15945f907651c611f67066eb0ba6248e70bcecefd30a8a8b0609a1f980f7556c7fbab795ca9151d27a7b47795260f9a1431473bf6222a566faaa6bfeca5c00e4f7ccf64ac3b49177e3f6ecd147fea294a30a90842d68ccefae0009a31eaf539a55da7c20ad93f2612b8b6ab42d4bb786fb754b7ac1b3a9f7b2d2689872077927b8101ecb5bdf0a3928a85330a47b769bd479949fb6e903e04004500e5811113565b655dfa9e534ec09951bdd4a7a96abdfeb812fad2e012900c6081e1c4bc6641293f10dbeebc2356ffb204331badd829ba651cf092f45e7e6e8d0922ed07d040263c7d2c53881b943a9e4b72292577067347b06f086c8d9f8d1a13c8dd471768deb26fcb0b4bf4aa711bc713fa3ec281e00000e0954daa210885f134e3f947ac24b2eeedf0ebb89b975787c6919f85f60b69a1244a217c98391a23399695930da7e37df7cf1974bcb21afb1ed6347b23f8efc2e19ebbf96a0c90534ebf607abcce901c69a38aa7c43a82519563ee79f00c0030000000000000000000b84431cf5df420bf5f08ead45e77671583d3510c7ef4eb70841efb4333516a0e7c22955228862457b260e0a2a437d964dd3bc23da4252155706a7eed59a2ea8f6466dfbd3b7a4f543b5abf29a5df38ead5703095d1019b08441fa1f62936eb1484018b4dc8db31a82a6f3d831415812ee3b2b519a5b78a8b7b1aa7c7415d9da6f830ff631caf005d80bc0c26ad42d24959cb93b5998433b577a641b6c469ab321ca15b62f38dda23a4d7b06cfad70a04f4c023e63ec1e4ccb39108764cefda1a73b480c9f7c43bc1b784667fd4d7059a26c9edd46524cca84f5c0137ca6fc1d48cfec71c0a8fd9f637d1e138b1b65f4eb398d05a11a446c052b6ac66eed52e845a5a92823bf54cd3cfd0c3703e2a08a0aa89531b7e66ba3ea152cd310c1925d666bdc3580800ac00ac1414aa0800f000", @ANYRES32=r3, @ANYBLOB="0000000800100006000000080007009d000000e4001480edc1ffeafc87040298ec596722735a3b7ea892a3b49a4299ba2b1ea9004a04ae7d7ede47c3505160b200651b733bb3e51a6755f1bfc8968e9269805cdcca32b9a40417ea8e48cd01e24db6062fae5b0b2c53ed30eebeb8f4631746f9e1f34ae92700ffea7ac8a60790902dcb9d43e4dd785dd9f97eb48c72e20d3ae41b0d2f91eca1cd30026e14d7c684d2270df6c81d3d4ef541af88c58eed474e9b4143f5deb107cf8caf60ac9208c1580c01c6ad29e828284770e858881feaba967166841e0e0a04385057cad3247c3fa639e574b61000878004000e8004005e8004001080"], 0x570}, 0x1, 0x0, 0x0, 0x1}, 0x40001) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) socket(0x35, 0x5, 0x1ff9) io_uring_setup$auto(0x6, 0x0) 2m24.671731638s ago: executing program 5 (id=4084): madvise$auto(0x0, 0xffffffffffff0001, 0x15) r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) r1 = socket(0x10, 0x2, 0x0) rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0xfffffffffffffffa, 0x10000006, 0xfffffffe, 0x2}, 0x8006, 0x0, 0x6) rseq$auto(&(0x7f0000000300)={0xd, 0x401, 0x0, 0x20000006, 0xe}, 0x8006, 0x1, 0x6) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000001c0), 0x8000, 0x0) ioctl$auto_KVM_CHECK_EXTENSION(r2, 0xae03, 0xf4) setsockopt$auto(r2, 0x7ff, 0x5, &(0x7f0000000040)='/dev/video7\x00', 0x3) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000000380), r3) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/bus/usb/drivers/gspca_gl860/bind\x00', 0x80300, 0x0) read$auto(r4, 0x0, 0x20000020) r5 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000280)='/proc/thread-self/fail-nth\x00', 0x22800, 0x0) writev$auto(r5, &(0x7f0000000180)={0x0, 0x3}, 0x3) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000400)='/sys/devices/platform/mac802154_hwsim/ieee802154/phy1/net/wpan1/queues/tx-0/byte_queue_limits/stall_thrs\x00', 0x182b02, 0x0) sendfile$auto(r6, r6, 0x0, 0x3) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r7 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189002, 0x0) ioctl$auto_PPPIOCSMRU(r7, 0xc004743e, 0x0) sendmsg$auto_CTRL_CMD_GETFAMILY2(r3, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000", @ANYRESHEX, @ANYRESDEC=r0], 0x14}}, 0x2404c084) sendmsg$auto_NLBL_UNLABEL_C_STATICADDDEF(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="e4010000fed157"], 0x1e4}, 0x1, 0x0, 0x0, 0x84}, 0x44080) syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000000040), r3) syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000000c0), r3) r8 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/radio25\x00', 0x48aa40, 0x0) read$auto_v4l2_fops_v4l2_dev(r8, &(0x7f0000000000)=""/40, 0x28) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000", @ANYBLOB='i\x00Q'], 0x1ac}, 0x1, 0x0, 0x0, 0x40814}, 0x2004c0c4) sendmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x4008) write$auto(r0, &(0x7f0000000000)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x86) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/virtual/block/nbd11/queue/optimal_io_size\x00', 0x22100, 0x0) 2m23.904418554s ago: executing program 5 (id=4085): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_async\x00', 0x183941, 0x0) openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000340), 0x18bc00, 0x0) close_range$auto(0x0, r0, 0x0) openat$auto_set_tracer_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/tracing/current_tracer\x00', 0x220000, 0x0) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/pagemap\x00', 0x200, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0xb, 0xc, 0x1000, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty45\x00', 0x100, 0x0) ioctl$auto_TIOCSTI2(r1, 0x5412, &(0x7f0000000140)="13") ioctl$auto_TIOCSTI2(r1, 0x5412, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/vm/compact_memory\x00', 0x80801, 0x0) socket$nl_generic(0x10, 0x3, 0x10) adjtimex$auto(&(0x7f0000000100)={0xfffffff5, 0x0, 0x1, 0x3, 0xffffffffffffffff, 0x5, 0xc5000000, 0x0, 0x9, 0x94b, 0xc3, {0x6, 0x1ff}, 0xb, 0x64d1, 0x7, 0x6, 0x0, 0x2, 0x7f, 0x7f, 0x4, 0xc5, 0x8}) r2 = openat$auto_ecryptfs_miscdev_fops_miscdev(0xffffffffffffff9c, &(0x7f0000000000), 0x80002, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/system/cpu/cpu0/topology/core_siblings_list\x00', 0x0, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r4 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/v4l-subdev6\x00', 0x169000, 0x0) ioctl$auto(r4, 0xc0305615, r4) adjtimex$auto(&(0x7f0000000200)={0x3, 0x0, 0xfffffffffffffff8, 0x7, 0x0, 0x4, 0x4, 0x0, 0x1, 0x400000000008, 0x5, {0x6, 0x9}, 0x101, 0x2, 0x144a, 0xfffffffe, 0x0, 0x7ff, 0x1000, 0xe, 0x400, 0x7, 0x200}) read$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f0000001080)=""/98, 0x62) r5 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/027/001\x00', 0x4a901, 0x0) ioctl$auto_USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f00000001c0)={0x0, 0xfffe, 0x0}) write$auto_ecryptfs_miscdev_fops_miscdev(r2, 0x0, 0x0) mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) 2m23.535428769s ago: executing program 5 (id=4086): close_range$auto(0x0, 0xfffffffffffff000, 0x2) mmap$auto(0x0, 0x402000a, 0xffffffffffffffff, 0x400eb1, 0x401, 0x8000) ioctl$auto_PPPIOCSMRU(0xffffffffffffffff, 0xc004743e, 0x0) mmap$auto(0x0, 0xb9f, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) mmap$auto(0x7fffffffa000, 0x5, 0x7fffffffffffffff, 0x3132, 0x8d73, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) mincore$auto(0x1000, 0x4000000, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) r0 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r1 = landlock_create_ruleset$auto(&(0x7f0000000000)={0xdaa0, 0x1, 0x9}, 0x9, 0x0) landlock_restrict_self$auto(r0, 0x0) symlink$auto(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00') fchmodat$auto(r1, &(0x7f0000000100)=':,\x00', 0xf2) mknod$auto(&(0x7f0000000180)=':,\x00', 0xc9, 0xfffffffa) execve$auto(&(0x7f0000000040)=':,\x00', &(0x7f00000000c0)=&(0x7f0000000080)='$+[-+\x98%(,\x00', &(0x7f0000000200)=&(0x7f00000001c0)=':,\x00') 2m22.170598301s ago: executing program 5 (id=4087): pidfd_open$auto(0x1, 0x0) openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/pcmC1D0c\x00', 0x20000, 0x0) mmap$auto(0x0, 0x4, 0xc00000072, 0x8b72, 0x1000000002, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0x13, 0x0) chdir$auto(&(0x7f0000000000)='}[,&*}\x00') open(&(0x7f0000000100)='.\x00', 0x0, 0x0) mremap$auto(0x0, 0xffffffffffffffff, 0x3fda, 0x3, 0x7fffffffb000) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f0000001380)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xfc\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\r&\xec\xb8\xb1Z\\\xc9L\xb2\t\xddbH|\xffGP\x97)\xb9:nqn\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc$\xa0\xa5\xce\xca\xe1P\xf7\xe5_\xca\xd5\xd8\xa4g_\xb1\x88\x8cAJS\x11\x8b\xd1%a\xe5DPk\x8c\xf9\xfb\xe0+\xdb\x12\x10.F\x00\xc37\xc7\xbf\x80\xbeu\xe1V\xb2\xc5\xc9\x1a\xc7\xdc}!\x10\xb1\",1%\x0e\xeb\x15\x15me\xe1a\x03\x18{\xb03+\x93*vB\xc6\xf1\xc6\xff\xbbt\x04!\xb6\v\xde2\xc9\x89#\xbaR\xee\x13jF%\xf2\x15\x9a\x82&\x89o\xa9\xd9\xbfFY\x90\x8c\xa0\xe4\x9d\xa2\xcd\x9a\xb5TC\xc4\x9d\x9ePb]\xaa\xc7f\x06N\xc5\xfa{\x02Y\xae\xf4(\xaa\x06);{?\x1e\fu\x19b\xdf$,\x01\"\x94\x00\x00\x00\x00\x003\xcfZ\xaf~<\xba\xb7\xa03\x8c\n*krS\x19Q#\x8f\xfbW\xad\xe0\xb3o\xcb\xf7\xda\x87C\x99\x1a\xa8\xc1\xe3\xc6%\xac\x01@*\xa0\xc4\xedn-lT\xe6*?\'\x9dW=\xa7\x03\x06\x83 IT\xa3\x7ff\xb6\x95\xe5\xd2\n\xaf\x87`\xce%\xf6 &\xa7M5I\x9c\x17h\x8c\xa4\x98\x16\xe0\xd9?Y\x7f\xf6\x85_{\xfd9p$B9_\xd8\xf4\x0e\xd0\xfa\xe7\xb0\xb8\xa0\xd7\a\xff.\"\x81\b\xb0\xb4\x84\xac\xad\x1b\x93~_\xea\xfe7\x03\"\xd9\x1d.\xe5{bHX\x14\xa1\bO\x03[^\x85jP\x89\t\x06GI\xb7\x99\xb2zZf\xc8\xd4\x8d\x1c\x1e\x03\xb9\xa7Nt\xae\xfff\xf9\tx\xae\xa8\x05\xb14\xc6\x9b\x1f\xd3\x01#\xc6\nb\xd4\xb4\xc8?\xa7\xe2R\xc1\xcf\xd2\xbc\xae\xd1\xc2\x88\"\xf3\xf0\xc0uQy\xec\xfab\xd6\xcd\x16)\x19*E\vm\x8d\x1bG:\x80\'pJ', 0x4100000a3d7) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/card1/pcm0p/sub7/info\x00', 0x208001, 0x0) read$auto_proc_reg_file_ops_compat_inode(r1, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x200007, 0x19) pread64$auto(r0, 0x0, 0x300000002, 0x100000001) mmap$auto(0x0, 0x202000a, 0x5, 0xeb1, 0xfffffffffffffffa, 0x8000) io_setup$auto(0x1, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) preadv2$auto(r2, &(0x7f0000000280)={0x0, 0x80000000}, 0x6, 0x3, 0x4, 0x2e) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_mac80211_hwsim(0x0, 0xffffffffffffffff) r3 = socket(0x29, 0x5, 0x0) write$auto(r3, &(0x7f0000000080)='/de$-audio1\x00', 0x100000a3dc) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) 2m20.357165467s ago: executing program 5 (id=4088): mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) (async) connect$auto(0x3, 0x0, 0x58) prctl$auto(0x3b, 0x1, 0x0, 0x1, 0x7fff) unshare$auto(0x40000080) close_range$auto(0x2, 0x8, 0x0) (async) socket(0x10, 0x2, 0x4) r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x8100, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000040)=0x5) (async) r1 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC2\x00', 0x480, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, &(0x7f0000000580)={{@inferred, 0xf0ee, 0x20009, 0x3, "790eaa00ffff8eac2cdafc1f64010043eeb0b053030001ffff000e000000000100"}, 0x4, 0xfffffffe, 0x402, @inferred, @integer={0x7, 0x9, 0x7fffffffffffffff}, "6cc1294d63a4f1b4285854c5368de438f8cc142ef6df12bf3373a1183bedbd31b642b4059a078fa1c1c61c329794e5311121c760cb9611c78e6947a99807bcc1"}) (async) r2 = socket(0x2b, 0x1, 0x1) (async) r3 = socket(0x2, 0x1, 0x0) setsockopt$auto(r3, 0x0, 0x2, 0x0, 0x0) (async) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r2, 0x0, 0x24084005) (async) setsockopt$auto(0x3, 0x10000000084, 0x81, 0x0, 0x8) (async) r4 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x0, 0x89, 0x3, 0xc, 0x940, 0xfff, 0x3, 0xf518, 0x100002, 0x9, 0x5, 0x800, 0x7, 0xb1, 0x6, 0x5, 0x3, 0x5, 0x7, 0x0, 0x3, 0x7, 0xfffffffc, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x2, [0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0xffffffffffff7ffc, 0x0, 0x0, 0x800000000000000, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x400000, 0x4000000000000000, 0x5, 0x0, 0xfffffffffffffffe, 0x0, 0xfffffffffffffffc, 0x6, 0x0, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3, 0x6d76]}, 0x1fe, 0x81) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x40000) close_range$auto(0x2, 0xa, 0x0) (async) r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe8181, 0x0) ioctl$auto_KVM_CREATE_VM(r5, 0xae01, 0x0) (async) ioctl$auto(0x3, 0xae60, 0x10000000000402) (async) ioctl$auto(0xffffffffffffffff, 0x10000, r4) (async) close_range$auto(0x2, 0x8, 0x0) (async) fsmount$auto(0xffffffffffffffff, 0x3, 0x5a) (async) write$auto_seq_oss_f_ops_seq_oss(0xffffffffffffffff, &(0x7f0000000040), 0x0) (async) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x42140, 0x0) (async) setsockopt$auto(0xffffffffffffffff, 0x2, 0x400, &(0x7f0000000340)='\x00', 0x4) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, r3, 0x8000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nbd15\x00', 0x400, 0x0) 2m18.412463452s ago: executing program 36 (id=4077): mmap$auto(0x0, 0x101, 0x4000000000df, 0xeb1, 0x200000401, 0x8000) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nbd3\x00', 0xc0981, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) preadv2$auto(r0, &(0x7f0000000280)={0x0, 0x80000000}, 0x6, 0x3, 0x4, 0x2a) ioctl$auto_BLKFLSBUF(r0, 0x1261, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb4, r0, 0x7) setrlimit$auto(0x8, 0x0) capset$auto(&(0x7f0000000100)={0x20080522}, 0x0) mmap$auto(0x7fffffffe000, 0x61, 0x100001000000004, 0xfa31, 0x403, 0x8000) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x4100, 0x0) mmap$auto(0xfffffffffffffff8, 0x4, 0x9f, 0x800000000801e, 0xffffffffffffffff, 0x8) mprotect$auto(0x1000, 0x401000, 0x4) close_range$auto(r1, 0xffffffffffffffff, 0x0) r2 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$auto_VHOST_SET_MEM_TABLE(r2, 0x4001af84, 0x0) msgget$auto(0xc, 0x77d9) msgrcv$auto(0x0, 0x0, 0x4, 0x100, 0x23) msgsnd$auto(0x3c, &(0x7f0000000000)={0x1000, 0x5}, 0x8, 0x8) ioctl$auto_VHOST_SET_OWNER(r2, 0xaf01, 0x0) close_range$auto(0x2, 0x8, 0x7bffffff) ioctl$auto_IOCTL_VMCI_DATAGRAM_SEND(0xffffffffffffffff, 0x7ab, 0x0) read$auto(r0, &(0x7f00000000c0)=':&}\\\x00', 0x40) r3 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="1b0026fcffffffdbdf2503000000040008001800038014000c000700000000000000005c56df1300000000000112000100898771f1c19f17790485908286dd00000400028004000800"], 0x4c}, 0x1, 0x0, 0x0, 0x44000884}, 0xc800) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtdblock0\x00', 0x0, 0x0) socket(0x2, 0x1, 0x106) mmap$auto(0x0, 0x2020009, 0x3, 0xeb2, 0xfffffffffffffffb, 0x8000) 2m14.901481176s ago: executing program 37 (id=4081): r0 = socket(0x2, 0x5, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x10000}, 0x7, 0x0, 0x5, 0xb}, 0xfff}, 0x8, 0x311) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x18dd01, 0x0) mmap$auto(0x0, 0x40009, 0x3, 0x9b72, 0x7, 0x28000) bpf$auto(0x0, &(0x7f0000000780)=@link_update={0xa, @new_map_fd=0x5, 0x4007, @old_prog_fd=0x13b}, 0xa3) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = openat$auto_snd_mixer_oss_f_ops_mixer_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x902, 0x0) ioctl$auto(r2, 0x80004508, 0xffffffffffffffff) mmap$auto(0x0, 0x400008, 0xdf, 0x38, 0xffffffffffffffff, 0x200000008000) r3 = epoll_create$auto(0x1) epoll_ctl$auto(r3, 0x1, 0x8000000000000000, 0x0) write$auto(0x1, 0x0, 0x80000000) mprotect$auto(0x0, 0x8000000000000001, 0x8) bpf$auto_BPF_LINK_DETACH(0x22, &(0x7f0000000000)=@link_detach={r1}, 0x8) r4 = openat$auto_buffer_percent_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/buffer_percent\x00', 0x1, 0x0) write$auto(r4, 0x0, 0x7) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/vm/dirty_background_bytes\x00', 0x202, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x6, 0x3, 0xeb1, 0x7, 0x8000) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptya1\x00', 0x20080, 0x0) ioctl$auto(0x3, 0x5420, 0x38) readv$auto(0x3, &(0x7f0000000040)={0x0, 0x36a}, 0x3) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) sendmsg$auto_NL80211_CMD_SET_WIPHY(r5, 0x0, 0x20000084) 2m12.858072991s ago: executing program 7 (id=4093): madvise$auto(0x0, 0xffffffffffff0001, 0x15) r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) write$auto(r0, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) unshare$auto(0x40000080) openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/pcmC1D1p\x00', 0x315041, 0x0) 2m9.526948295s ago: executing program 7 (id=4094): r0 = open(&(0x7f0000000100)='./cgroup\x00', 0x1, 0x0) timer_settime$auto(0x400, 0x88, &(0x7f0000000180)={{0x2, 0x96}, {0xa76}}, &(0x7f00000001c0)={{0xee, 0x3}, {0x16d61ff7, 0xfffffffffffffff9}}) r1 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000240), r0) ioctl$auto_XFS_IOC_ALLOCSP(r0, 0x4030580a, &(0x7f0000000280)={0x1, 0x5629, 0x4, 0x4, 0x6, 0x0}) r3 = pidfd_open$auto(0x1, 0x800) r4 = waitid$auto_P_PIDFD(0x3, r3, 0x0, 0xc, 0x0) prctl$auto_PR_SCHED_CORE_CREATE(0x7, 0x1, r4, 0x5, 0x8) r5 = getpgid(0xffffffffffffffff) sendmsg$auto_OVS_FLOW_CMD_SET(r0, &(0x7f0000001bc0)={&(0x7f0000000200), 0xc, &(0x7f0000001b80)={&(0x7f00000002c0)={0x18a4, r1, 0x10, 0x70bd2a, 0x25dfdbfb, {}, [@OVS_FLOW_ATTR_MASK={0x2dc, 0x7, 0x0, 0x1, [@nested={0x103, 0x5d, 0x0, 0x1, [@generic="671ebd112d34fc2e65f28f2f03124f690009200e9f186996b5a716703835829e9c40c09a7b07c668bd101887b0a02abb9f44b8e858f835b6adc418542ffe7c37cc41e6d92cfb15ebce97ffb7ab29e18f1156f561ab8f4663c71b405c2df8de621158c63681aac8ba8403f403aef7f9afd0eaf7e2647208b942a8b4d2fc17b8e62b39064cbd0846b707a2e49714fc1933b84798ff239a31cf128616fd3c46d0b3c09f339ed9d80127807a3509fcdab9706984edec709b6c1e96c78ae08ca2de7fcd73557a86f9f111ebcae131c1a00ce4b784c965ec67c3bbabf6861cda1a2dd37dae4c", @typed={0x8, 0x49, 0x0, 0x0, @u32=0x6}, @typed={0x14, 0x80, 0x0, 0x0, @ipv6=@mcast2}]}, @typed={0x8, 0xf6, 0x0, 0x0, @u32=0xb}, @nested={0x1cc, 0xa6, 0x0, 0x1, [@nested={0x4, 0x67}, @generic="365229100f0da76ac32699f3e2ba286a8b8bc217f3b95f3b0ef3829d7d8115a1458d1aa8b618606a0db9a1634e23d4d29d50eca5b433185e1ecf6012f18773071c27cf79850ba55c69c15e57b3da77703c13e7af166d10cfd95ba58fd8ff374c6c835c17c8557037e8007c373315fabd2d07", @nested={0x4, 0xb3}, @typed={0x8, 0xf9, 0x0, 0x0, @str='/]:\x00'}, @nested={0x4, 0x38}, @generic="80f2a5f99bb6ed5238ef841ba756fc07060fd74be63bc9de32522c6244fa83cfffae8069924b9aba8461921f57e45b0ec3eb28f4094dcc33d3ab8b15f58bd734442c0882ef325be8ae871c0691f47795484b252088917505c47053ed37a5c9f906d4db8dfbcb5bb5cbd8209f12c815c623b88e1f69", @nested={0x4, 0xec}, @nested={0x4, 0xa1}, @generic="5c9de9a5769d8dd4dcbd5e8cbe1dcace063440994773250f48ddc14a814b73636c81490ff8de9616b5f5fb3fa84b24be93f2b0d48e5436038e525c8812dd413ecee7b7286115a50c132268549c4aa7b090d8aa9e2da4c43ced91539021f29bb28b720d92c08e6d2a32e4582dc8c0a2f09f59ab122744cb5dc64ea571ac7f320817658ab9f5b5e9a699d0eea8b6d8260e8e1c0c1491b7ef8a7d65f0063a4621034a34b77c444bbb033e714e02bbc403f2d64dcbb496e8cd9aa62926120fe79dc3fe255eca23"]}]}, @OVS_FLOW_ATTR_UFID_FLAGS={0x8, 0xa, 0x6}, @OVS_FLOW_ATTR_PROBE={0x4}, @OVS_FLOW_ATTR_ACTIONS={0x1c, 0x2, 0x0, 0x1, [@typed={0x8, 0xce, 0x0, 0x0, @fd=r0}, @typed={0x8, 0x8d, 0x0, 0x0, @pid=r2}, @typed={0x8, 0x59, 0x0, 0x0, @pid=r4}]}, @OVS_FLOW_ATTR_MASK={0x158a, 0x7, 0x0, 0x1, [@generic="1d6ee1aaa2f70b397f69137cb07704427c0f4b7e16905c7e88c25e65", @typed={0x8b, 0x87, 0x0, 0x0, @binary="39f30537a3cfa441bd75a4504b834576f93ad85151aa9a82b16693728a61a6b97bc26cad14fc3b9a9e38c70c298b0500e97f7866a74437ba8ff1b2dd85d3d7500527789b11489d07283ce52c209b4b0d37a001d817da4e8184e07fec6ae98ad55f0541f09469b28e5e01a10983c70d53b588c12e32cfea1a40649777980d0be38d08feb54f8793"}, @nested={0x14b, 0x64, 0x0, 0x1, [@nested={0x4, 0xa3}, @generic="8102a18bcdbb4593db516e422628b28b3a0d224ac5db581c3594ab8ddcf960548e0294475f2fe8aee25c007d6d6438f8261631a33f66683c4814554f872d94fa94c81714fa0bc0c6387ff467544bdefdcce73b160a011418e5b7488fd58c849621fbb1ab5b54f76261f9501515b37ef368ebde78abb9123e02b4de50faac93ce44ddd1c71ec48c8dbc36edd826ee7e8b7f", @nested={0x4, 0x86}, @generic="c712291506c1ee3aeeaea9acb85fe58639bd26c2c274dd607a6115ad220663063e51d0a39d7151d953f358dad9fb950920a2c33ce5355ce2262024942d798f9a1cfb5f838fddd1398b87f07c93308542aeb8bae4bf110e3e7e5cf6e690ec641d19d11fff5a184f9c2f2b9b815f207df841fdcbd690add7b52e268159e59021a290157e4c4fe1a9b95a69db0263ee6a4dca406a924706690aafc96cd274d8acfefa0f21215dc1dec3ebfae03b0507"]}, @generic="ac4c91fab21b58f40d75a2f834a65a2e42588679290383a3ce292846ac451250a6f85cee6e4b1f7e1dbce511c01d2f7724c5a69997ee4b787fd26b772b0ce7e9ea2bc8dbe1aafc9ee090d03227fdf592a339bf8c0f7407bda745ab752c50d4877b88c1d113574f25ada3e61e793ff5ca9166b59ad51eb16031687d5c4117a3224e38f30340e765e23c7fb510cb8c50d73820d0fb1bee2c4d203279791a956106c8", @typed={0x85, 0xa3, 0x0, 0x0, @binary="8a6a2653cc2d5d19377a63891782dbfa9cbe1ba936daa89ad37cae18066ae9f6ddfe83ed6040423b36b7d02f0421f2e3d72b5243b11c39fbea1ef1e173106fd1f755c8f5ba19db541307991a3089289fab374ce15fff794558a83e1641ef9f53e30024c9f22d7908d78e8d6cc737349e54836eb47c790733df965f972e30aa2388"}, @nested={0x32, 0xe8, 0x0, 0x1, [@generic="e733611b632c0fd5e003", @typed={0x4, 0xea}, @typed={0x8, 0x4c, 0x0, 0x0, @ipv4=@multicast1}, @typed={0x8, 0x14e, 0x0, 0x0, @fd=r0}, @typed={0x8, 0xb6, 0x0, 0x0, @fd=r0}, @typed={0x8, 0x51, 0x0, 0x0, @pid=r5}]}, @nested={0x1ee, 0x10c, 0x0, 0x1, [@typed={0x8, 0x5f, 0x0, 0x0, @u32}, @typed={0xa, 0x109, 0x0, 0x0, @str='^\x89[-:\x00'}, @generic="c7d489f10100f31680c1c0d3959c246256db645c7eb08d00d28ad6d38fed7386710e6e74a495b280b010adb5cb2819d270fd80ab1cee46b97d564c3b784f15758444bf76626d9795e1ccfa599f042e37fd0fe6525759d72e6902bb035d23c18e497261fb1d9bf8edc805cd8fad0110d70e09231bf8a7891a2d2b089122f9271709b61c09a88576a2c7c361804b8fe0e8a4fa0e3766a82d0f568a232689302765d72898f97975c47e761e9ef37e8fc54b0353f26f5c21d5188241594e99e9d6b7b6245052621da3401d1170e0a0b248de2a8e9bfee38b96963091dd5612de4dfd3bfa4bbea114ae0c9160ca27f18a", @nested={0x4, 0xc3}, @typed={0xa, 0xc6, 0x0, 0x0, @str='^\x89[-:\x00'}, @nested={0x4, 0x15e}, @generic="99f9f366973f508328848ff82aa79634919e9a274e9ec4d584bddf261f1ca603dcdb12e55f9436f9140286168a04d5268d26e4122392249c4a2a60584b9618cf2c3a9cdb3ae5072d1407453b310281adb4d73c580ddf802ae6716bee924eb6bec0e76a011417712839ad449853c1670f8b080a6852d05620f70ba8fb6976c691b58efa53666e7611c1466b04fcb17e0a069d2ebd0fbdc46e57c9a49dfe5fb9bec536f9a6d3629cab74eefa7c3fdfffb6a275b2c5f9ab98bac5175a631d1500f2106ec5d73beaf7537fa134bf3bc68a14", @generic="4eb2f2f2"]}, @generic="ba5adee6fdfece42bc8a2ffe355b1721664c24109eb79cbd7e6b85d9a16e2aab6cab45069a7a7d1bc1bff480722adfe9ad0957a9b9bae12d8acd67df90bd6f39b5eb419d5a", @generic="5d72aef25af3d1e167ad901a1ce6d078f82447a532e7694f7893946e35526700ea67ae8e4c2a536fcb58d9a2c2d7c03e91c16c8993b8d23b048d578144c5b0df7feeee9f8b071d6e435f63738b0f84d48415f1d4569b8a52d018b34a035820ddd6141697597940914a43c1ea5593298a647e5d63189f423366b43a0e63c1ef4c592f266a74649d8ac764874e7238097ee26cc0c76d9684976c0b0847c56fd9dd0362b4c36d9cd006e5d962725cfda5c0dfe4068be64a62cf9150ad3b4cb82bb38a1a8a60c40ffff2bbd8f9d1658cc41a46107d9f5b56302fa3a7a672aa888d5474a3bbd83bbe116ac97e1b25a74cc35b45505bf364fec0751a3ee7aebc9807de6884182580a56b7ccb16b5688ee4ddb18cbb6c47b316463cdba4080a96128b632b421489bace298e9f0944a2eed1822ad6171e7400023b12139bf2d296286f008e14e9f1198be37ad1381ef61b6b134ea45573ac7fb1263915473b3e86716f180a7e2af45a6d258e27f7a5d92f157bb301735f40f8b2c4d7a9196ffc8631ce0f92919265a854d145b51468124bbccecfcc831698d563f6eb4185246eb8744d21f00ba66d0b06e946fe7b9611522dc1a9342459c06c690647cd768ef06db0641437f0a64cf6eb46134e9b564b6a09c7e978f8715305610d5eac7a9d2fca0c6026b7f1856b9ad7950f2f5a4a1b24708139ec2e69d2329fdc266bbb8f89ea7f87ad5399cffc27243987002f016eb20a4bf9d0cfcfb261f4ea25d7a9fdb3675d27993cbcbaa1a2cb38ac89ffb5a7c233cf0acfb11bb5f7e4799539e410de1c6bed43eaca98919fe0ece81c6a45ac8c7755f9cdf5f37aaf88c4996513d5784bb81971c05347cd9f50938de7a561582456ea683c52245ddbc4bd9e22bb65db2c9616651aaf02ab6b4b21902f83bb32d447705fd0fe1b251e7b8fd5d20d95acd7fb9c4dbdbb23a19ff2d13a4aa5f8b07e3c48d137e2dffc099558ba5eb2c69a69730a98be4abcb339acfa508a8e60e484963ac8929454bfec391fadc889aaba0c5a5520199e63e6b7a2ecd4c333c81067d48b429377b9f2011e6e021b37a1108afe4e859ba0f2d66f02a5c1ffcd2eeb87903f67925924b64689f4cad7ae6b4d26debed5145b3093c161e7a6fed07a633f2b786daab95b15f8d2fbdc542f725f2f508743ae8a895773094f4313540ab82ae0c7339445bdfc8f60560727031801449456be7ee61b741f1a0590af1b7c645d2869a52d2c9afbe3e68c6e32f0b0f86bb0b915aa50dbde2b05535ca8665d53acaec0ec7d382403aea65e342b2255515a4348fe73b9f034b001f5610df003b118eb4940a23168a252c52ce78186e47f21ed55535061d63a6a2e2480b1038cf5b0e4260c0c1d8ab465fd84a46afa8be71652a5cd5924fafc13bd7ed4c2309bf577da2922a42f363849ae8e2d5ae8a28084b4f57b4d39e5c4f9eb656d7eb148f43d4ca882aaf5605e40764972378ebe9b9beba4775839a51ba18d9d43662ef9d557eec737ce85ae36f5cebf93209c00446f9f522f5f2f24f5ed8ee22a369f4b96cfb1897472175dbbf74f2fbbfea2def537b28e1acd6342e521c9e756362972ca0c908d278e4e987c680940dc39accee3c184c2a661e7ce3cc61c93166ee797722b3abb89c6c606d3c2a59a8c41b8447abf9af2aab715cac3e39b8f7a9e71cee2c9b03d16f466339fbc759a5b74e3694e69315c0a93eafe08f3e653138de2df09d50b5691a574bfb1fe27cc463c16dfb88cc64a41bb0ec9f5ff878db327262c5f2f86b176cc754a1877a29250e257dd73f11328e7dec8d0d52b1be8d9d2529920bdcc862d5d2c36ee5952a5c320454cb26748e566cc66a89a0b3bc7d40198734232d6b4360bacf89254c03b66cc10e9052fad0fe0d5316c66d9e1a383c6e8ac6719fbe2e6a6182226145c91fd62d7afd6941d36251564eecdbe9c112f882c8e6585771a2073f219886f1593bf04a17699a9cb66a183bfe159dd4faf3eadb30f0d0f39f26c5fbdfdc70fc1f8e845e046c6c3b37e6913501d7adc12e8aee14b706f5b86cd86f07511592439a2b77db7721376206fbcfd0fda53b9c2054a76f048c777d3d789362ee5e2ee805485043dda4ab98f2100e28152eab7518474ad9a6a8c674cb3c77adf11779c5dbbb9d67d7887a277852530bca9fb196d03a041e608f55e3b53cb18466b239b57026a60b6d2bb0e1320d78e3466a11c7ed256c7ac3bfc978e54f184561a0e988fdf31cf8c808a95d8a30e5b06a80b4fd395fd97670660e058cfb4100c6ab514670ffd6c6869301c0e762f1f8bdd1b1279ca10afabcbed223c9fe01b76c32e44080f49be47c7295129ee725a190dbb160d58faeefe77ce877002342731f5d6289de2cfdbadf87fad6269529c83b3eb55f1eb2e87907616774d28f180710c15ca0ccde651bf40a822e9a09bea325b32230c8fd9e0ef817fa30448fd0a958c435cfa9f3ef644d3094c3a793971056aabfe8296c26d9bb006857518e8c6e855159051dec52df214292659f76bdc44a3f5122cd85a2aa4604237e08e7a8c635b6671b4c87883ab347127bb45e7b6164f5e09ef6b8f4c3fc0a7c764a5c64b4ee665c8e9c50e6da665c7c3e1cf10004d4c1a9526430757fbebb011474e7083a61e20aee124785574daf8730940ad7ce0e295d0fd41e250058927fda33bd45c5579366db73dea55fb5d333608a36c46c310cf690bdd10e2328afa000560fa1e52ab627c5273240bd703a67b9751d8669397ceb8cb21a9b88715117a8f480f6bbeaac747e6ef4d0637670b34ae723d566f3fcab1db3c5613df25c61f3c0a148d04bbca48b7cb947a57882a4a09a6cbbdecef69930c394cf20652e3433ea6d8f66fcc7a6df66adca2b36273ba04de2c38e46331287800bf119e6170aff4dfe7e0ee9ec72eb5e355119db7d762a79c8b8967b7152876fe3f68cb73ac44ff457b159bf93edf5e756fcd278a7937e86587489e389db74d5e72a8d732cc1376a849f012c5e97851df1984d0828e27966d7e2c2ca1388eb281665e5e6a3933c7d458f4e8047decd267a19922c0973a1e7aca08c3f696b53f0e049790f8f4c18bf928c361d2a85f493cac9c62bd20d2a414bc00c75efa35114f0a8c1237e4ff4a4c61e4d049ac35c7c98d1222b73120f1bf689b48d9bc4111f69ef8d1248a48d38e8db3199e83d3c025fb9ddb0977ef0eaf642e9abfd1d8a0b1ba92f125109b4c3ecdfdb2c3180776dc14faeb850046ad91435ca95a226b5825f16d19cadac0e2f55f9e44f92d3ef55f517f52478459508fca1a3b21c1d4be8ec345931c5bdbaaa5a62016ab1310c8b5f5843cd5bfe6bd39b6818047f7c07620e20b7e2e0fee4fd02b709db4c9ef96128c64bd0159260be2858d9407d81650ab0abde512ba6eb611f9e2889212ed572b051192cf92f578ae8b6f44460e6d5862b4e059ca88fcdfe4c518ee29bf807a4e7baafd57bbd6909bf9750f7b67cea25094a78813ce67201497621fe80ddc5989a57f670aaaee3ff8c942c66519a976a919939b49b5d45cc51bbe157f46747efc4c9a56055b92ec40d551c3e9088eb0d1072e28d5097d5009ceb6d9fc3b234bc5bc919698a0a8ed24a46195807be4281f949c0ffd008f8ebcfd010671a2085ba62b29d425fe88331f4bcedd0fab097a4b7331a51867c163641cced50669789f52091acebe67658176629310803e1f4914a8fbd71f19fe8d962f254dfab4ee2a52c3966ef1e814cd7c0910d3cfdc41ef55242bc62eb14d06f3c2732b5c358df9a5bda875bc74610a419a60999dbb89eb9693d1843f14923af4c4266882266ce2c730db6ad3017061672c64518be00cdeedf753ddc96b327fda8c0b3bf9f3b8aebcd5642a163a65d49e40c4045776c05ebfe803eaa13e72c398edb1474452ec1117433c533384d34e27cedeb5ab3586828394dc924ac6e68b140336236c4851cb5c6e6aeb48a7ae910c099515d4324d735651cfc97b97ebf44e0974aa41b643adb531b653401ef14ef65846dbc3b3b4fff99ffd4d5e6dd217c1d3656c61e26c2e76e94e3b1c087570c792b78ea7de0a2a5ae5fb40df5ab4a34f7314562987b4fc5e0e9481d766c68fd0f2d9806f660d131cbfdd6048b2cb092c1a4e0a010dd1a141d576724b8701dcd00dfe94ed30f31cbdeb50c5d1981f07b162b10badad833fe11bcfa74325d2cbf176446e60429c8dc4d3ae0a7ac150418dd8ca181a7a761f6b51b55536ef761404672012130f4364b97abb77e584f176ce81c9571745ceeb64d17bd27c96b7214e0731f855b1aa4ec5f89c06dc2f63b81440bd07742cafd5fe2d91344d205781858a12b18b3beba26004f67dbaafc7c2296e297e22b18bd718d6b9d97469d7e3be91d0dac4eb2dedc748cc0009157ab76ab46ec6213732b04c94f502a9f15912ed12964f75ef933d35a41123459a587e3e7e6cb3cacb2acfe7eb7b93e08747d948b10894d10dafd490fa1d918266f4838dd2f94b2278c1b43e4593025ed1e5ea55fbf85db50a881d14737b8fd90cea66f99ee205fe65d04626d8b90f2c361996694472314acdf798e7ddf2efc142b368fb16c33f234e6dee505a42a0f38e8fcc4a9eac99f45c6acc439618e30683f56ad678937c48a109e92161ef77ec478f32112e1a6612a030647e3656bae70fd1ace5756fb31ec193727ea1636f074c90cbe4789148e8810a9ccc520a5aa07fa0310d91c50ca544eaa778c52e0db81f846603ee7381f5e20f4bbf1bc05a18e62c6fd16fd8142cb0fc4430039cff84dc63a28549691afba8bab544292640c88f7d6d1524360397c6bbefab9f8f59cbf32b6588d49341e5173e8021b6b4f72bcb7c96e2bd5b4a4a15ba6506474e5eaf73b5ebdcd3adbcfed678bb533b93f26f31e9a7bdbb6859402238fe0663ae98974e7db2f9b02d89e408902a2b21189869e0da69097d9b9bb8fec955a77b5ec95587d2835bd49733a5316289ae2dbb8b52be98bce799a8ada7c6feaca2ba08636b0860c677d50d80ac3cbec6d47226c10f0b4e4194c23ac71496df127f4edd9ae0b9dac2222ae3d0f6bb4e58452dabde31578e1ea3af91acc35fa075ee82a7404a1793a4982ea4d91ce8a9a321333c1492a99652e7cc458ac6c3ce731d3aee3df1cf077a7603672ec6d6ffc23dcd09782fe89478e24251de46aa7db8e3d65d7361201102f828d6c13e82691bf3a21d490893b555d3b152b6f271ef5757db90286003af3b27b2971f35770282aed34757732a2a20a04a99cff43187c44f493e3ce3c943d6b9540add49d35f6da21786f332efcdbb306664f7540ed87715a7b5f920b0ba231a11126da968d35950c50de02f4a0b5f555420b9ab67e5a1cf41301a5c38a9eeb7dff65eb72fe4131f1e49e170556e5a6559db0be67c82e49f8d8253f829a1b78607f484940c2fc7ef713e9fdc9322d5d8e66a071e64a99fb388cd9f6dc024d8bc4f4886092e2be40b0765adc440816a1d2caaec7a25d1ca0511ab285b21dba8810232582bf7274ca973f5d64cc27bedefe6b786ef5a497d64a13c10c5c0b379f1748b396050474a0aed31fdf301511f94bd347b062829e1e022afd5698df9b8434732479901bdaf731735a80f8c7281aa00c7c3d032bc32854ad3cc34d7ccb0690a649477aee6cced758907cb603758faf058a2a404c20b0d327151e75e545590c4a74a0f938ff92dca9ee0c49d479ce0765b5d8264cdd9a19e23bd54e536e73202111f90242239dd6334a04b46df66a920383780f02dea76ceb6e030ed08680a92"]}]}, 0x18a4}, 0x1, 0x0, 0x0, 0x40000}, 0x4040) getsockopt$auto_SO_PEERNAME(r0, 0x7, 0x1c, &(0x7f0000000000)='^\x89[-:\x00', &(0x7f0000000140)=0xc0) fcntl$auto(0x3, 0x400, 0x9ec0000000000000) truncate$auto(&(0x7f00000000c0)='./cgroup\x00', 0x6) rename$auto(&(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='./file0\x00') 2m9.248235328s ago: executing program 7 (id=4095): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000080)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x4000000000007, 0xa505}, 0x800}, 0x4, 0x4008) (async) r0 = socket(0x29, 0x2, 0x0) (async) r1 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB="5de1"], 0x1ac}}, 0x40000) (async) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/tty/ttyy8/dev\x00', 0x4002, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f0000000280)="c519cd25cc995fdd11bed8fcfb78bf1f40f8c5259e66f388270d71432059f0ebc5abd326ebd17b0f5e37320d1c9b20af7498752303d6e6fe5a718848b96cc5bb251019286460abfe933c29782ac36d35bad13bd1e9eec1336078f4042d2eceee7eafd2087ac2e87809a9471c13f89fde642996077d98fd55a50f27652d0e60f9ed1ba91d2b4b8195716c5d49020fa865069a469ad5db0059f5cb0e0e03c37447", 0xa0) (async) recvmmsg$auto(r1, &(0x7f0000000040)={{0x0, 0x5, 0x0, 0x5, 0x0, 0x200002, 0x13}, 0x6}, 0xfffffff9, 0x10, 0x0) (async) ioctl$auto(r0, 0x8913, 0x24) 2m7.418177224s ago: executing program 7 (id=4096): r0 = eventfd$auto(0x7) r1 = ioctl$auto_UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000000)={0xffffffffffffffff, 0x28000, 0xd, 0x40}) r3 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sg0\x00', 0x21002, 0x0) ioctl$auto_SG_SET_RESERVED_SIZE2(r3, 0x2275, &(0x7f0000000080)="a4d2b2ceff5671e63cfeb4ff002a086b4472ca72d0000d2618503c2d179dde49065fa06e9507ca4e6fd8e9a4192af1419fb5c04d2e05c6936a1fff12d232f54e86a41b30eed43dd00bfef2f16ba5d19af531d7a9d92792f780c1f47dc32bafab52d9c30e92c1e318223de45adf5fb2454ae1b200c95f50fd8afd4e0eed8350de5f7888d1a4cf4b32be177e5488a48d4e25f4f706354aff923b95ccd0ab4eb746c7c44b0e3232d686101175b4f8e2ec9f54cd536a0d8a6ba6111d4668b78af833efc8e12aa1b0f9af8cd9392e7a2faa") r4 = openat$auto_ctl_device_fops_user(0xffffffffffffff9c, &(0x7f0000000180), 0x14300, 0x0) close_range$auto(r4, 0xffffffffffffffff, 0x5) r5 = ioctl$auto_NS_GET_TGID_IN_PIDNS(r2, 0x8004b709, &(0x7f00000001c0)=0xd54) r6 = fcntl$auto(r4, 0x9, r5) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/tracing/per_cpu/cpu1/trace_pipe_raw\x00', 0x0, 0x0) ioctl$auto_SNDCTL_DSP_SETFMT(r6, 0xc0045005, &(0x7f0000000240)="be914c4bb7661c7a97c7e874c24d835463e1e56a9b8a5c9a63fcd7fad9f75ceb7902ba9998c952c6ad7d9e68eef9cd5aae0a5ad3b491c4872edafbcdd1321da709d94eaf6a0824781ef5f51b2fe00408b957511ce33a45c8a7f6b1b8771017ba7c3f5f9c88ce2828e416270b937ca14df19f84e169368bf8774ea2932d898af7f16262185fc41a037f746ceedb9377e9c5afcdd8a96a567c969d6111cb2892570f31f2664bf0425ef4bc111dd07f51d400cf15bdb8c1f2f69cd369765b108aaf2e4be4872256c78a216b9e7a312f662bd7383e4699cffcc51372d0") flistxattr$auto(r4, &(0x7f0000000340)='/sys/kernel/debug/tracing/per_cpu/cpu1/trace_pipe_raw\x00', 0x5eae) getrandom$auto(&(0x7f0000000380)='/dev/dlm-control\x00', 0xe, 0x3) r7 = ioctl$auto_SW_SYNC_GET_DEADLINE(r6, 0xc0105702, &(0x7f00000003c0)={0x7fffffff, 0x0, r3}) r8 = getsockopt$auto(r7, 0x7, 0x2, &(0x7f0000000400)='/dev/dlm-control\x00', &(0x7f0000000440)=0x6) prctl$auto(0x200, 0x10, r5, 0xffffffffffff8ef3, 0x8) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000480)='/dev/audio\x00', 0x80000, 0x0) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f00000004c0), 0x80, 0x0) r9 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000540), r8) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r1, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x30, r9, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2}, @NL80211_ATTR_MLO_LINK_DISABLED={0x4}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x9}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) sendmsg$auto_KSMBD_EVENT_TREE_CONNECT_RESPONSE(r2, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x14, 0x0, 0x300, 0x70bd29, 0x25dfdbfd, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000001}, 0x4004015) r10 = openat$auto_ns_file_operations_nsfs(0xffffffffffffff9c, &(0x7f0000000740)='/proc/thread-self/ns/cgroup\x00', 0x40, 0x0) ioctl$auto_NS_GET_OWNER_UID(r10, 0xb704, 0x0) mount$auto(&(0x7f0000000780)='bond_slave_0\x00', &(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)='\x00', 0x1, &(0x7f0000000840)="267fda488789d62e76637ff562b6ce1c21ce03fe710149fe23b27cf5ee414b5167415bca941148ca24d7487bdd6b940d4d8e78f94253a67d085b997c022421a4e356d19916bac9e2ad3c3c6d33c3ecfdcc60d3244a4e9fcca75b61fbc5ab2a5b566d2d8c015abc0a38a59b16fcb74a8cc2e24608502eec37a74294282c6b0a602f8dc93cbe4f18f54a08225d453de437f2a6e745c78df9b66603482b8668b9ae8b1a920911dd4dc084669e86e8") madvise$auto(0x81000000000000, 0x0, 0x9) close_range$auto(r0, r1, 0x6) madvise$auto(0xb5, 0x3, 0x5) io_uring_register$auto_IORING_REGISTER_RESIZE_RINGS(r8, 0x21, &(0x7f0000000900)="9a4fcfcb081e9a471cc788b866be9d0c8e1f9eea5d40ef1e8bde2e7128d319f1b6df73e288e848804b8ef804b6a804032ffbf2be9af25a0191e0c811646441b245a92ab833346a4fb72284a89ff600ff563268db911e6cf999c53c7df46e4ab97b8a14d48db36a958e17d856566fd055523cd5326a", 0x2) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_UPDATE_CONNECT_PARAMS(r11, &(0x7f0000000b00)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x100, r9, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@NL80211_ATTR_PREV_BSSID={0xd7, 0x4f, "84554c59698c7b401f90251421d506048f2c9cc011ab0f1b9cf67ee5666374b5045b761c3bc6cd034c95eb2230d58dd9840400a67e66806a5d71e7ab1a7cffa777f8766aa2731f43f4fcae60cb3470b0d0b2e7e3190eb17431c70fe8af48aad998b4ac20a9f6494c7fbba454f218f6f8e7be816d1ed70f30dc7412499eb2d52d4e693fca5941a111994ac43bf4984e08dd943f62ec964eb6e900cf183d0c41491d1bc3f6a6ef667dc985a1aaf1404c993576dbb29c39f009194bc49b89600782f1a0256377e8af669382b43244dd16a0af85cd"}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x4}, @NL80211_ATTR_PMK={0x4}, @NL80211_ATTR_RADAR_BACKGROUND={0x4}]}, 0x100}, 0x1, 0x0, 0x0, 0x4000800}, 0x1) sendmsg$auto_NET_SHAPER_CMD_GET2(0xffffffffffffffff, &(0x7f0000000c80)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x1c, 0x0, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [@NET_SHAPER_A_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) 2m7.064939443s ago: executing program 7 (id=4097): close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189002, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sda\x00', 0x443001f86cb35905, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) mremap$auto(0x4000, 0xb8, 0x13fd4, 0x3, 0x7) unshare$auto(0x40000080) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x1a2b00, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) syz_genetlink_get_family_id$auto_l2tp(0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000000100)='.\x00', 0x595002, 0x408) write$auto(r0, 0x0, 0xfffffdf1) linkat$auto(r0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080)='&&\x00', 0x1000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_macsec(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$auto_MACSEC_CMD_GET_TXSC(r1, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000800)={0x14, r2, 0x195603a1b51df9d, 0x70bd28, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000001}, 0x804) socket(0x11, 0x3, 0x9) mmap$auto(0x0, 0x8010000, 0xffb, 0x8000000008011, 0x3, 0x8000) mount$auto(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)='nfsd\x00\xee\x1a\x8f\xa2~?\xe2\x82fg\xb3G\xbe\xc8\x12\xae\xc3\xc0@[\x99\xec\xbf(\xec\xc3\xb2\xf2\x15Zi\xc4S6\'\x14\x05\t\x8c\xd5?\xa0\x00\xd8\xf6\x04W\xcc\xa3\xce\tI\x95\xe12\xaclJ\xba\xeb\xe4\x83Z\xaev\xd7\xd9\xdd_\x14O\x84\xaa\x13W\xb7\x06\'fvQ\x95\xc5\xed\x98\xe3T\xcdfk\xc7\xe9\x96\r\x91\xb0\xc46\xf2\xfc\xef\xfe\xa0\xc9d\xb3h$\xeb\xad\xa4P\x8f\xc3bM{4RQ\x00\x9d)_\xd81(\x03\xfd\rw\xca1\x88|\xe5\x1e\x10\x89X\x01\xe9\x9bg\x95xx\xaf\xa9~m\x05\xe1\xa8\xda\x80\xc5\x8f\xb41\x81\xf0\xa3\xa2\xe4\x81\xb9\x92\xda\x13\xfe5\xfb\xc6\xd8>\x01\xd4\x14', 0x7, 0x0) r3 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb0\x00', 0x42, 0x0) ioctl$auto_FBIOPUTCMAP(r3, 0x4605, &(0x7f0000000080)="e7c3313675db62a5") r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/system/memory/memory3/online\x00', 0x2062, 0x0) r5 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC2\x00', 0x123801, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r5, 0xc1105517, 0x0) write$auto(r4, &(0x7f0000000440)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb', 0x3) socket$nl_generic(0x10, 0x3, 0x10) shmctl$auto_SHM_UNLOCK(0xffff, 0xc, &(0x7f00000003c0)={{0x7, 0xee01, 0xffffffffffffffff, 0x6, 0x1, 0x1}, 0x2, 0x8, 0x8, 0x4, @inferred=0xffffffffffffffff, @inferred=0xffffffffffffffff, 0x2, 0x0, &(0x7f00000000c0)="e9463e723c549e5e0f26be0fcc54037e29a48411a1ce72dadb483c4d4a66c2bf0d303098", 0x0}) setreuid$auto(r6, r6) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) 2m4.992649645s ago: executing program 38 (id=4088): mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) (async) connect$auto(0x3, 0x0, 0x58) prctl$auto(0x3b, 0x1, 0x0, 0x1, 0x7fff) unshare$auto(0x40000080) close_range$auto(0x2, 0x8, 0x0) (async) socket(0x10, 0x2, 0x4) r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x8100, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000040)=0x5) (async) r1 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC2\x00', 0x480, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, &(0x7f0000000580)={{@inferred, 0xf0ee, 0x20009, 0x3, "790eaa00ffff8eac2cdafc1f64010043eeb0b053030001ffff000e000000000100"}, 0x4, 0xfffffffe, 0x402, @inferred, @integer={0x7, 0x9, 0x7fffffffffffffff}, "6cc1294d63a4f1b4285854c5368de438f8cc142ef6df12bf3373a1183bedbd31b642b4059a078fa1c1c61c329794e5311121c760cb9611c78e6947a99807bcc1"}) (async) r2 = socket(0x2b, 0x1, 0x1) (async) r3 = socket(0x2, 0x1, 0x0) setsockopt$auto(r3, 0x0, 0x2, 0x0, 0x0) (async) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r2, 0x0, 0x24084005) (async) setsockopt$auto(0x3, 0x10000000084, 0x81, 0x0, 0x8) (async) r4 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x0, 0x89, 0x3, 0xc, 0x940, 0xfff, 0x3, 0xf518, 0x100002, 0x9, 0x5, 0x800, 0x7, 0xb1, 0x6, 0x5, 0x3, 0x5, 0x7, 0x0, 0x3, 0x7, 0xfffffffc, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x2, [0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0xffffffffffff7ffc, 0x0, 0x0, 0x800000000000000, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x400000, 0x4000000000000000, 0x5, 0x0, 0xfffffffffffffffe, 0x0, 0xfffffffffffffffc, 0x6, 0x0, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3, 0x6d76]}, 0x1fe, 0x81) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x40000) close_range$auto(0x2, 0xa, 0x0) (async) r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe8181, 0x0) ioctl$auto_KVM_CREATE_VM(r5, 0xae01, 0x0) (async) ioctl$auto(0x3, 0xae60, 0x10000000000402) (async) ioctl$auto(0xffffffffffffffff, 0x10000, r4) (async) close_range$auto(0x2, 0x8, 0x0) (async) fsmount$auto(0xffffffffffffffff, 0x3, 0x5a) (async) write$auto_seq_oss_f_ops_seq_oss(0xffffffffffffffff, &(0x7f0000000040), 0x0) (async) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x42140, 0x0) (async) setsockopt$auto(0xffffffffffffffff, 0x2, 0x400, &(0x7f0000000340)='\x00', 0x4) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, r3, 0x8000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nbd15\x00', 0x400, 0x0) 2m4.96498934s ago: executing program 7 (id=4099): close_range$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x7) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x1, 0x3446) gettid() preadv2$auto(0xffffffffffffffff, 0x0, 0x6, 0x3, 0x4, 0x2e) getdents$auto(0xffffffffffffffff, 0x0, 0x400018) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, 0x0, 0x8000, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram10\x00', 0x14fe02, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x101880, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptyy4\x00', 0x204c81, 0x0) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda\x00', 0x2c402, 0x0) r1 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000980)='/dev/ttye9\x00', 0x102, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) write$auto(0x3, 0x0, 0x100082) sendfile$auto(r1, r0, 0x0, 0x10000) close_range$auto(0x2, 0xa, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) keyctl$auto(0x200000000000020, 0xffffffffffffffff, 0x5, 0x5, 0x8) bpf$auto(0x8000000, 0x0, 0x5) r2 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000040), 0x20904, 0x0) readv$auto(r2, &(0x7f0000000a80)={0x0, 0x2}, 0x2) pipe$auto(&(0x7f0000000140)=0xffffffffffffffff) fcntl$auto_F_ADD_SEALS(r3, 0x409, 0x4) preadv$auto(r2, &(0x7f0000000240)={&(0x7f0000000180)="8312b651eb61adc8c72a08516a716a9b3444a6462dd65bf50238ba4eb284b9d1fddd490eb57a141897132b7bbfa0094d619ea8f13192cbe84973a03abd5b5812ff021f11fc009c25cae1842dbcfb0016a0ff4bb2641d8d41aac8411e354fd006b259fe39ac0b33891bd75661d1b3ca9aab73aa7e0b5eafe575939481644cc4a830d0cfdea34a65c9372190f14d18771cc4610b79784045", 0x2}, 0x7, 0x4, 0x6) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffff6, 0x8000) r4 = socket(0x10, 0x3, 0x9) write$auto(r4, 0x0, 0x5) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/devices.deny\x00', 0x8ea182, 0x0) 1m49.37547189s ago: executing program 39 (id=4099): close_range$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x7) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x1, 0x3446) gettid() preadv2$auto(0xffffffffffffffff, 0x0, 0x6, 0x3, 0x4, 0x2e) getdents$auto(0xffffffffffffffff, 0x0, 0x400018) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, 0x0, 0x8000, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram10\x00', 0x14fe02, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x101880, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptyy4\x00', 0x204c81, 0x0) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda\x00', 0x2c402, 0x0) r1 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000980)='/dev/ttye9\x00', 0x102, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) write$auto(0x3, 0x0, 0x100082) sendfile$auto(r1, r0, 0x0, 0x10000) close_range$auto(0x2, 0xa, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) keyctl$auto(0x200000000000020, 0xffffffffffffffff, 0x5, 0x5, 0x8) bpf$auto(0x8000000, 0x0, 0x5) r2 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000040), 0x20904, 0x0) readv$auto(r2, &(0x7f0000000a80)={0x0, 0x2}, 0x2) pipe$auto(&(0x7f0000000140)=0xffffffffffffffff) fcntl$auto_F_ADD_SEALS(r3, 0x409, 0x4) preadv$auto(r2, &(0x7f0000000240)={&(0x7f0000000180)="8312b651eb61adc8c72a08516a716a9b3444a6462dd65bf50238ba4eb284b9d1fddd490eb57a141897132b7bbfa0094d619ea8f13192cbe84973a03abd5b5812ff021f11fc009c25cae1842dbcfb0016a0ff4bb2641d8d41aac8411e354fd006b259fe39ac0b33891bd75661d1b3ca9aab73aa7e0b5eafe575939481644cc4a830d0cfdea34a65c9372190f14d18771cc4610b79784045", 0x2}, 0x7, 0x4, 0x6) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffff6, 0x8000) r4 = socket(0x10, 0x3, 0x9) write$auto(r4, 0x0, 0x5) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/devices.deny\x00', 0x8ea182, 0x0) 1m47.437721956s ago: executing program 9 (id=4091): r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)) fchdir$auto(r0) (async) mount$auto(0x0, &(0x7f00000000c0)='.\x00', &(0x7f00000001c0)='nfsd\x00\xee\x1a\x8f\xa2~?\xe2\x82fg\xb3G\xbe\xc8\x12\xae\xc3\xc0@[\x99\xec\xbf(\xec\xc3\xb2\xf2\x15Zi\xc4S6\'\x14\x05\t\x8c\xd5?\xa0\x00\xd8\xe4\xafW\xcc\xa3\xce\tI\x95\xe12\xaclJ\xba\xeb\xe4\x83Z\xaev\xd7\xd9\xdd_\x14O\x84\xaa\x13W\xb7\x06\'fvQ\x95\xc5\xd1\x98\xe3T\xcdfk\xc7\xe9\x96\r\x91\xb0\xc46\xf2\xfc\xef\xfe\xa0\xc9d\xb3h$\xeb\xad\xa4P\x8f\xc3bM{4RQ\x00\x9d)_\xd81(\x03\xfd\rw\xca1\x88|\xe5\x1e\x10\x89X\x01\xe9\xf6g\x95xx\xaf\xa9~m\x05\xe1\xa8\xda\x80\xc5\x8f\xb41\x81\xf0\xa3\xa2\xe4\x81\xb9\x92\xda\x13\xfe5\xfb\xc6\xd8>\x01\xd4\x14', 0x5, 0x0) (async) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/pagemap\x00', 0x600, 0x0) mmap$auto(0x0, 0x400008, 0xdd, 0x9b72, 0x2, 0x20000000008000) (async) madvise$auto(0x0, 0xffffffffffff0001, 0x15) (async) r1 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) r2 = ioctl$auto_NS_GET_TGID_IN_PIDNS(r1, 0x8004b709, &(0x7f0000000000)=0x3ee4) prctl$auto_PR_SET_MM_ENV_START(0x1000, 0xa, r2, 0xfff, 0x21) (async) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) (async, rerun: 64) unshare$auto(0x40000080) (async, rerun: 64) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) unshare$auto(0x20000) (async) syslog$auto(0x3, &(0x7f0000000080)='..\x00k\xac\x8c\x1d\x0e\x98\x80\xd2\xaf\xa1\xf2\x1e\xe1R1\xa2\x8e\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\xa6\xf4#+\xfa\xd7\x01\xb9j<\v\xf47\n\xa7\xd2\x8b\x11e1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\x84q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa24X@\xadD\xf8\x9d\xf3 \xd2]\xc4\x13G\x1d\x04!\xc1\xeb.e$\xfb\xa3KU\xcf\xc1\x7fFD\x99\xf5v\v\x9dS\xc11P\xa3\xe9\xb0SqL\x85\xea\xb2\x9cY\x83.I\xca\x92\x1c\xc4\x13CV=\x92\x17c\x87iOt\x14On\x15=\v\xf0 \xc5\x8b~\xd6\xd4\xc7\xa3a\x1c\x06\x17\xb3\x88\x8c\xf1L\xba\x89a\xfd\xa5\xc6\x7fU\x00\xe5\x9b', 0x5) (async) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/asound/card1/timer_source\x00', 0x20080, 0x0) (async) unshare$auto(0x10) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/class/zram-control/hot_remove\x00', 0x8001, 0x0) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vcan0\x00'}) r4 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/fb0\x00', 0x20401, 0x0) ioctl$auto_TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000080)=0x68) (async) ioctl$auto_FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000080)) (async, rerun: 64) mknod$auto(&(0x7f0000000180)=':,\x00', 0xc9, 0xfffffffa) (async, rerun: 64) prctl$auto(0x43, 0x17, 0x0, 0x0, 0x0) (async, rerun: 32) execve$auto(&(0x7f0000000040)=':,\x00', &(0x7f00000000c0)=&(0x7f0000000080)='$+[-+\x98%(,\x00', &(0x7f0000000200)=&(0x7f00000001c0)=':,\x00') (rerun: 32) fchdir$auto(r3) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptyd9\x00', 0x10300, 0x0) (async, rerun: 64) mount$auto(0x0, &(0x7f00000000c0)='.\x00', 0x0, 0xdef, 0x0) (rerun: 64) 1m43.728313456s ago: executing program 0 (id=4098): mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4007) r0 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x16bd00, 0x0) pread64$auto(r0, 0x0, 0x100000001, 0x400000000000100) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x400008, 0x200, 0x3a, 0xffffffffffffffff, 0x3) r1 = openat$auto_rb_simple_fops_trace(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/tracing/tracing_on\x00', 0x8001, 0x0) write$auto(r1, 0x0, 0x9) sysfs$auto(0x2, 0x10000000000002c, 0x0) fsopen$auto(0x0, 0x1) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS0\x00', 0x149942, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000380), 0xffffffffffffffff) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0xa, 0x0) clock_settime$auto(0x14, 0x0) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002abd7000fbdbdf25040000002d0011009b"], 0x44}, 0x1, 0x0, 0x0, 0x4008040}, 0x40800) 1m42.141716508s ago: executing program 0 (id=4107): mmap$auto(0x0, 0x8, 0xdf, 0x91, 0x401, 0x0) bpf$auto(0x5, &(0x7f0000000100)=@task_fd_query={0x2, 0xffffffffffffffff, 0x3, 0x0, 0x200085, 0x10001, 0x9, 0x6, 0x8001}, 0x100) r0 = getpid() process_vm_readv$auto(r0, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000100), 0xffffffff}, 0x6, 0x0) r1 = socket(0x1e, 0x5, 0x0) ioctl$auto(r1, 0x8941, 0x8) unshare$auto(0x40000080) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/net/dev_mcast\x00', 0x40280, 0x0) pread64$auto(r2, &(0x7f00000000c0)='veth1\xe7#\x16T+\xee\x03\xc4\x1c\a\xdfa\x8b[,>\xa9\xd2\xef\xb0\xfb{b^\xef\x93\x97\x06H\xcb\xe7g\xea\x9dE\xc0\xdc\x1e\x02`\x00Z\x9d|\x8f\x92\xe09\xe1hBJL\x1e\"F\xc4\xd0z\xac5+I\xfbb\x9d\x97.]\x95H\f&_\x8d1\x83\x90,\x01\x8ab\xe6P\xb8J\xc4\xc3&\xe3\x05\x7fl\x18\xf40\x18x\x88\x86\xe6{\xdb\x1c\xfef\xf1x\xc9vKq\xd4/N&\x1f\xae\xa8\x9b\xb2\xdbZ\xed\x16a}\xa9gj\xc2mt\x87&\xf7Z\xf1u\xf0\x14\x00\x00\x00\x00\x00\x00\x00i\xb9\xc8\xc6V5]\x06/\xb1`\xd9X\xe5\xfc$\a\xf3S\xbb\xe99\xf1PZ\x81\x8f\xfc\xa4w\\\x84B\x03+\xa2\xe1\xb4\x9dv\xe1\xd7\b9\xc3.\x96I\x98\x00\x00\x00\x00\x00', 0x200000000004, 0xfc) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x40000, 0x0) openat$auto_sg_fops_sg(0xffffffffffffff9c, 0x0, 0x82802, 0x0) ioctl$auto_CEC_ADAP_S_LOG_ADDRS(0xffffffffffffffff, 0xc05c6104, &(0x7f0000000100)={'\x00', 0x0, 0x6, 0x2, 0x9b3, 0x9, "0200000002000000997e763f222ce1", '\x00', "0001410c", '\x00', ["f5404de9641f0000000060c1", "70d9a9a3af9f39d000000001", "ef5ac4927ad89c5c00"]}) ioctl$auto_CEC_TRANSMIT(0xffffffffffffffff, 0xc0386105, &(0x7f0000000000)={0x80006, 0x3, 0x7, 0x1, 0x2, 0x7fffffff, "9b2189084142725dff0d933475a77466", 0xb, 0x5, 0x9, 0x5, 0x2, 0x4, 0x2}) mmap$auto(0x0, 0x402000b, 0xdf, 0xeb1, 0x401, 0x8000) mkdir$auto(&(0x7f0000000080)='./file0\x00', 0x7ff) r3 = open$dir(&(0x7f0000000000)='./file0\x00', 0x10000, 0x6) fcntl$auto_F_OFD_SETLK(r3, 0x25, 0x101) open(&(0x7f00000001c0)='./file1\x00', 0x175242, 0xe1d2b27bdc14aa98) rename$auto(&(0x7f0000000480)='./file1\x00', &(0x7f0000000040)='./file0/file0\x00') r4 = openat$auto_ima_measure_policy_ops_ima_fs(0xffffffffffffff9c, &(0x7f0000000000), 0x14b540, 0x0) write$auto(r4, &(0x7f0000000040)='#[-#\x00', 0x4) madvise$auto(0x0, 0xffffffffffff0005, 0x17) r5 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000080), 0x48180, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f0000000280)={{0x1, 0x3968, 0x1, 0x1, 0x1}, "654c6dbc7a4d30983899a7e1325bc5d82b3f184410ba9f74e82a3fa6c3ccf1bf"}) prctl$auto_PR_SCHED_CORE_GET(0x2, 0x0, 0x0, 0x401, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x40000) io_uring_setup$auto(0x6, 0x0) write$auto_fops_init_pkru_pkeys(0xffffffffffffffff, &(0x7f00000002c0)="e9f626995924113370b64fe1795eb9aff26ccfac0f3e02486c9ad362085b57a4c5097ec8b5e62908f617800a335fe64254ee9c384ef7a07fddeb4a3b6fe923e6e4eefc014ab2122402bbf398027daf", 0x4f) 1m38.843775892s ago: executing program 0 (id=4110): madvise$auto(0x0, 0xffffffffffff0001, 0x15) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000140)='/dev/radio16\x00', 0x402, 0x0) ppoll$auto(&(0x7f00000001c0)={0xffffffffffffffff, 0x8, 0x400}, 0xaf, &(0x7f0000000200)={0x6, 0x3}, 0x0, 0x8) unshare$auto(0x8000400) socket(0x2b, 0x1, 0x0) r0 = socket(0x10, 0x2, 0xf) bpf$auto(0x0, &(0x7f0000000680)=@bpf_attr_4={0x1e, r0, 0x24000000, r0}, 0x210) socket(0x2, 0x3, 0xa) io_uring_setup$auto(0x1, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x40000000c07) fcntl$auto(0x0, 0x407, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptye9\x00', 0x101e81, 0x0) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r1, &(0x7f0000000180)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8\xa6\xb6\xaa\x96/OX\xba\x02\xc5\xc6B\x1d}Y\xbc@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf\xd6f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8', 0x100000a3d6) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x60042, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/midiC2D0\x00', 0x40, 0x0) select$auto(0xb, 0x0, 0x0, &(0x7f0000000240)={[0x10000000000001ff, 0x8001, 0xff1, 0x20, 0x12, 0x100000000000004, 0x3c2a19d5, 0xa2f9, 0x1, 0x9, 0x8, 0x3, 0x1, 0x5, 0xa, 0x5]}, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) write$auto(0x3, 0x0, 0xfdf3) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0xffff) syz_open_procfs$namespace(0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) 1m37.372137196s ago: executing program 0 (id=4112): write$auto(0xca, &(0x7f00000002c0)='\x04>2\x1e!\xe2\x00\x94\xf2\xa2\x00\x00\x8d\xa9p\xcc\xccV\xf9ozi\xb2:\x19\x92r\xcc9\x99f\xc5\xed\x84fe\x8a\x8c\xd3*\xfe\x1dE\xa1W8\x03\xcb\tSK\xb4\x893\xf3Q\x7f\xd1|\xefp\xb1\xb3\xcer8\b=\xa4y\xd4\x88\xbc\xe0\xd1\x03\x108a\x90KG,\xf8\v\x88\xe2+\xcb\xf2v\x8bL\xa6\xaa}\x1b\xa5\xd8\x98\xc9\\f\xccT\xa1\x05\x14\x84\xbb\aF,\xc8\xc7u\x93\xe8?\x92\t\xa9`\xff\x93l\x93\xac\n\xdd\xa4\n\x8e\xec\x14\x02|\xf7\xc4\xa0\x06h\xc0\x8f\xf3g6\xb8\x1a\x18\xf2\x93\t\xe8ips\xa7\x9a\x1cFPi\x13\x89DRSO\x97\xb1\xc3\xb8Q\xa2\xb2\xa8\xc3\xd3\xf9\xd4Y\x8d\x8d\xad\x8f[\xbe\xe5\xf1\x9f\x01s\x8eg\x05\xe8\xf9\x8f\xa6g\v', 0x80) utimensat$auto(0x2, 0x0, 0x0, 0x1000) msgsnd$auto(0x0, 0x0, 0x8, 0x9) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0xfffffffffffffffd, 0xa, 0xdd36, 0x8fd4, 0x948b, 0x9, 0x15f4da0a, 0x7ff, 0x10000000000002, 0x3739aae3, 0x2, 0x3, 0x1, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0) syz_genetlink_get_family_id$auto_smc_gen_netlink(0x0, 0xffffffffffffffff) write$auto_ocfs2_control_fops_stack_user(0xffffffffffffffff, &(0x7f0000003900), 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xc2902, 0x0) read$auto(r0, 0x0, 0x20) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r1 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r2 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000100), r1) sendmsg$auto_TIPC_NL_MON_GET(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, r2, 0x10, 0x70bd26, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@typed={0xf, 0x85, 0x0, 0x0, @str='/dev/loop6\x00'}]}, @TIPC_NLA_NET={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1000}, 0x4000001) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000400), r3) sendmsg$auto_NFSD_CMD_VERSION_SET(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)={0x28, r4, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@NFSD_A_SERVER_PROTO_VERSION={0x14, 0x1, 0x0, 0x1, [@NFSD_A_VERSION_MINOR={0x8}, @NFSD_A_VERSION_MAJOR={0x8, 0x1, 0x2}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x24000001}, 0x4004840) unshare$auto(0x40000080) setresgid$auto(0x0, 0x6, 0x0) r5 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop6\x00', 0x40203, 0x0) ioctl$auto_SG_GET_RESERVED_SIZE(r5, 0x4c06, 0xfffffffffffffffd) 1m32.369645224s ago: executing program 40 (id=4091): r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)) fchdir$auto(r0) (async) mount$auto(0x0, &(0x7f00000000c0)='.\x00', &(0x7f00000001c0)='nfsd\x00\xee\x1a\x8f\xa2~?\xe2\x82fg\xb3G\xbe\xc8\x12\xae\xc3\xc0@[\x99\xec\xbf(\xec\xc3\xb2\xf2\x15Zi\xc4S6\'\x14\x05\t\x8c\xd5?\xa0\x00\xd8\xe4\xafW\xcc\xa3\xce\tI\x95\xe12\xaclJ\xba\xeb\xe4\x83Z\xaev\xd7\xd9\xdd_\x14O\x84\xaa\x13W\xb7\x06\'fvQ\x95\xc5\xd1\x98\xe3T\xcdfk\xc7\xe9\x96\r\x91\xb0\xc46\xf2\xfc\xef\xfe\xa0\xc9d\xb3h$\xeb\xad\xa4P\x8f\xc3bM{4RQ\x00\x9d)_\xd81(\x03\xfd\rw\xca1\x88|\xe5\x1e\x10\x89X\x01\xe9\xf6g\x95xx\xaf\xa9~m\x05\xe1\xa8\xda\x80\xc5\x8f\xb41\x81\xf0\xa3\xa2\xe4\x81\xb9\x92\xda\x13\xfe5\xfb\xc6\xd8>\x01\xd4\x14', 0x5, 0x0) (async) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/pagemap\x00', 0x600, 0x0) mmap$auto(0x0, 0x400008, 0xdd, 0x9b72, 0x2, 0x20000000008000) (async) madvise$auto(0x0, 0xffffffffffff0001, 0x15) (async) r1 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) r2 = ioctl$auto_NS_GET_TGID_IN_PIDNS(r1, 0x8004b709, &(0x7f0000000000)=0x3ee4) prctl$auto_PR_SET_MM_ENV_START(0x1000, 0xa, r2, 0xfff, 0x21) (async) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) (async, rerun: 64) unshare$auto(0x40000080) (async, rerun: 64) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) unshare$auto(0x20000) (async) syslog$auto(0x3, &(0x7f0000000080)='..\x00k\xac\x8c\x1d\x0e\x98\x80\xd2\xaf\xa1\xf2\x1e\xe1R1\xa2\x8e\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\xa6\xf4#+\xfa\xd7\x01\xb9j<\v\xf47\n\xa7\xd2\x8b\x11e1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\x84q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa24X@\xadD\xf8\x9d\xf3 \xd2]\xc4\x13G\x1d\x04!\xc1\xeb.e$\xfb\xa3KU\xcf\xc1\x7fFD\x99\xf5v\v\x9dS\xc11P\xa3\xe9\xb0SqL\x85\xea\xb2\x9cY\x83.I\xca\x92\x1c\xc4\x13CV=\x92\x17c\x87iOt\x14On\x15=\v\xf0 \xc5\x8b~\xd6\xd4\xc7\xa3a\x1c\x06\x17\xb3\x88\x8c\xf1L\xba\x89a\xfd\xa5\xc6\x7fU\x00\xe5\x9b', 0x5) (async) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/asound/card1/timer_source\x00', 0x20080, 0x0) (async) unshare$auto(0x10) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/class/zram-control/hot_remove\x00', 0x8001, 0x0) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vcan0\x00'}) r4 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/fb0\x00', 0x20401, 0x0) ioctl$auto_TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000080)=0x68) (async) ioctl$auto_FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000080)) (async, rerun: 64) mknod$auto(&(0x7f0000000180)=':,\x00', 0xc9, 0xfffffffa) (async, rerun: 64) prctl$auto(0x43, 0x17, 0x0, 0x0, 0x0) (async, rerun: 32) execve$auto(&(0x7f0000000040)=':,\x00', &(0x7f00000000c0)=&(0x7f0000000080)='$+[-+\x98%(,\x00', &(0x7f0000000200)=&(0x7f00000001c0)=':,\x00') (rerun: 32) fchdir$auto(r3) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptyd9\x00', 0x10300, 0x0) (async, rerun: 64) mount$auto(0x0, &(0x7f00000000c0)='.\x00', 0x0, 0xdef, 0x0) (rerun: 64) 1m22.364618986s ago: executing program 41 (id=4112): write$auto(0xca, &(0x7f00000002c0)='\x04>2\x1e!\xe2\x00\x94\xf2\xa2\x00\x00\x8d\xa9p\xcc\xccV\xf9ozi\xb2:\x19\x92r\xcc9\x99f\xc5\xed\x84fe\x8a\x8c\xd3*\xfe\x1dE\xa1W8\x03\xcb\tSK\xb4\x893\xf3Q\x7f\xd1|\xefp\xb1\xb3\xcer8\b=\xa4y\xd4\x88\xbc\xe0\xd1\x03\x108a\x90KG,\xf8\v\x88\xe2+\xcb\xf2v\x8bL\xa6\xaa}\x1b\xa5\xd8\x98\xc9\\f\xccT\xa1\x05\x14\x84\xbb\aF,\xc8\xc7u\x93\xe8?\x92\t\xa9`\xff\x93l\x93\xac\n\xdd\xa4\n\x8e\xec\x14\x02|\xf7\xc4\xa0\x06h\xc0\x8f\xf3g6\xb8\x1a\x18\xf2\x93\t\xe8ips\xa7\x9a\x1cFPi\x13\x89DRSO\x97\xb1\xc3\xb8Q\xa2\xb2\xa8\xc3\xd3\xf9\xd4Y\x8d\x8d\xad\x8f[\xbe\xe5\xf1\x9f\x01s\x8eg\x05\xe8\xf9\x8f\xa6g\v', 0x80) utimensat$auto(0x2, 0x0, 0x0, 0x1000) msgsnd$auto(0x0, 0x0, 0x8, 0x9) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0xfffffffffffffffd, 0xa, 0xdd36, 0x8fd4, 0x948b, 0x9, 0x15f4da0a, 0x7ff, 0x10000000000002, 0x3739aae3, 0x2, 0x3, 0x1, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0) syz_genetlink_get_family_id$auto_smc_gen_netlink(0x0, 0xffffffffffffffff) write$auto_ocfs2_control_fops_stack_user(0xffffffffffffffff, &(0x7f0000003900), 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xc2902, 0x0) read$auto(r0, 0x0, 0x20) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r1 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r2 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000100), r1) sendmsg$auto_TIPC_NL_MON_GET(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, r2, 0x10, 0x70bd26, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@typed={0xf, 0x85, 0x0, 0x0, @str='/dev/loop6\x00'}]}, @TIPC_NLA_NET={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1000}, 0x4000001) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000400), r3) sendmsg$auto_NFSD_CMD_VERSION_SET(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)={0x28, r4, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@NFSD_A_SERVER_PROTO_VERSION={0x14, 0x1, 0x0, 0x1, [@NFSD_A_VERSION_MINOR={0x8}, @NFSD_A_VERSION_MAJOR={0x8, 0x1, 0x2}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x24000001}, 0x4004840) unshare$auto(0x40000080) setresgid$auto(0x0, 0x6, 0x0) r5 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop6\x00', 0x40203, 0x0) ioctl$auto_SG_GET_RESERVED_SIZE(r5, 0x4c06, 0xfffffffffffffffd) 1m17.000583664s ago: executing program 8 (id=4134): r0 = io_uring_setup$auto(0x59, &(0x7f0000000080)={0x80000002, 0x201d, 0x3000, 0xfffffff8, 0x7, 0x8400a, 0xffffffffffffffff, [], {0x6, 0x0, 0x4, 0x29c, 0x1, 0x4, 0x1, 0x7, 0x1}, {0x10100, 0x1, 0x52, 0x88, 0x2, 0x8, 0x76c5, 0x8, 0x5}}) fsconfig$auto_SHMEM_HUGE_DENY(r0, 0x0, &(0x7f0000000140)='\\!:\x00', 0x0, 0xffffffffffffffff) mmap$auto(0x0, 0x810004, 0xff8, 0x8000000008010, 0x3, 0x8000) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_NBD_CMD_STATUS(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000440)=ANY=[@ANYBLOB="98050000", @ANYRES16=0x0, @ANYBLOB="000126bd7000ffdbdf25050000000c000600b100000000000000040207805dc987531dd54cca3f5aaf767b67ed93de5bf541de73c1301a846771563f42b3b4aa1af8a33a1db5ea61dfb86894139a6af0abad567bea473f96db2b0f6504facb33b4497c3973fbb29b258f51e6158346f82e9a606c388c65f1bd3e91bf5292382a5790aa0bccdac72afcd0a76dce82e4091fb671598ffaaa341144b9cc549f8f515f0040b9fc65ce9d6d581a11dae7b47aa11a9c7c58e764bbf0f6a1bcbcf93286fdd62e34a5eab2b0831c3d49ce280f6cc5a45dfd76d3730ba94c34c654a53793e137d9ea064e6f5b15ac3c7da4fc646b7e73c42c23fe0b38e7ab673dde47fc9ddff0ef224bb9c1df76384822131ff4d2c2c1470e22e92509420c007d0008000000000000000800eb008ef50000", @ANYRES32=0x0, @ANYBLOB="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"], 0x598}}, 0x40000c0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x2, 0x0) r2 = openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$auto_dma_heap_fops_dma_heap(r2, 0xffffffffffdffe00, &(0x7f0000000140)) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer\x00', 0x10080, 0x0) close_range$auto(0x2, 0x8, 0x0) 1m16.728521481s ago: executing program 8 (id=4135): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r0 = open(&(0x7f0000000100)='.\x00', 0x595002, 0x408) write$auto(r0, 0x0, 0xfffffdf1) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x86, 0x0) r1 = socket(0xa, 0x5, 0x0) getsockopt$auto(r1, 0x84, 0x13, 0x0, 0x0) linkat$auto(r0, 0x0, 0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x1000) r2 = socket(0xa, 0x2, 0x3a) setsockopt$auto(r2, 0x29, 0x43, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_netdev(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$auto_NETDEV_CMD_PAGE_POOL_GET(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)={0x20, r4, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@NETDEV_A_PAGE_POOL_ID={0xc, 0x1, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x14}, 0x4) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x2, 0x0) socket(0x1e, 0x1, 0x0) socket(0x2, 0x5, 0x0) epoll_create$auto(0x4) socket$nl_generic(0x10, 0x3, 0x10) capset$auto(0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) epoll_ctl$auto(0x5, 0x1, r5, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/virtual/graphics/fbcon/rotate_all\x00', 0xa001, 0x0) write$auto(r6, &(0x7f0000000000)='3\xc7\xff\xff\xff\xdd\x00\b(Ks\x0f\x87|P\x11\xd1li0\x89\x85\x90QM\xd6wfF\xf1x\xb3;c\tP\x03\x84\x97\x99\x83\x97\x81:\xf3\xa3o5\xc5\x86\xed\xa4\x18]\xa3\xc9\x0f\xff\xdak\xb0m\xe1U\xb3\xa2\xee\xdcTJQO\x98\xc8w\x8c\xe7\x00\x00\x00\x1dj\x1e\xebQT\xdd\x9b\x00'/101, 0x9) epoll_ctl$auto(0x5, 0x3, r5, 0x0) 1m14.950447795s ago: executing program 8 (id=4137): mmap$auto(0x0, 0x8, 0x1000000004, 0x9b72, 0x2, 0x8000) socket(0x200000000000011, 0x2, 0x0) mmap$auto(0x3, 0x20009, 0x8, 0xeb5, 0x40000000000a5, 0x1) io_uring_setup$auto(0x2, 0x0) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) r1 = openat$auto_ftrace_avail_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/available_events\x00', 0x0, 0x0) preadv$auto(r1, &(0x7f0000000100)={&(0x7f0000000040), 0x82}, 0x8, 0xe637, 0x6) ioctl$auto_TIOCSETD2(r0, 0x5423, 0x0) r2 = io_uring_setup$auto(0x1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_ioam6(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$auto_IOAM6_CMD_NS_SET_SCHEMA(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002abd7000fddbdf2507000000080004001801000006000100ff030000a2aae45443f70b6f883ef121fc367cb73672c469ffb4907a51c7007f805f73d82e942968a14b8e78b80967f5c73038493ff32422069bd6693a5d0bfe2a2b6cf6e25b0fc7e47fda0448e09c5c172fc8998702a2be"], 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0) r5 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptyrc\x00', 0x101f81, 0x0) ioctl$auto_TIOCSETD2(r5, 0x5423, 0x0) openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f00000004c0), 0x2202, 0x0) ioctl$auto_TIOCVHANGUP2(r0, 0x5437, 0x0) syz_genetlink_get_family_id$auto_seg6(&(0x7f0000000040), r2) clone3$auto(&(0x7f00000000c0)={0x3, 0xdb, 0x7, 0x5, 0xac9f, 0x42f4, 0x1, 0x8, 0x3, 0x9, 0x7ff}, 0x4) msgctl$auto_IPC_SET(0x1, 0x1, &(0x7f00000001c0)={{0x0, 0xffffffffffffffff, 0xee00, 0x1, 0xa2, 0x2, 0x3}, 0x0, &(0x7f0000000180)=0x4, 0x1c8, 0xdb0, 0x4, 0x6, 0x80, 0xff56, 0x1004, 0x9, @raw=0x3, @raw=0x4}) mprotect$auto(0x110c230000, 0xa588, 0x6) mmap$auto(0x0, 0x400008, 0x5d, 0x9b72, 0x2, 0x8000) r6 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$auto(r6, 0x10e, 0x20005, 0xfffffffffffffffe, 0x0) mremap$auto(0x110c231000, 0xfffffffffffffffc, 0x101, 0x3, 0x0) timer_create$auto(0xfffffffa, &(0x7f0000000100)={@sival_ptr=0x0, @inferred, 0x1, @_tid=0xffffffffffffffff}, 0x0) timer_settime$auto(0x40, 0xeb17, &(0x7f0000000180)={{0xf, 0x10007}, {0xfffffffffffffffd, 0x2}}, 0x0) timer_gettime$auto(0x0, 0x0) getpgid(0xffffffffffffffff) getpid() socket(0x10, 0x2, 0xc) 1m13.7557059s ago: executing program 8 (id=4140): landlock_create_ruleset$auto(&(0x7f0000000140)={0x4, 0x1, 0x9}, 0xe, 0x0) socket(0x2c, 0x3, 0x0) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty6\x00', 0x14400, 0x0) ioctl$auto(r0, 0x80045430, r0) (async) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/netdevsim2/new_port\x00', 0x183a41, 0x0) writev$auto(r1, &(0x7f00000002c0)={&(0x7f0000000480)='4r', 0x5}, 0x1) (async) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) (async) connect$auto(0x3, &(0x7f0000000000)=@generic={0x11, "0000e100"}, 0x58) prctl$auto(0x3e, 0x0, 0x0, 0x40003, 0x0) (async) write$auto(0xca, 0x0, 0x10) (async) mmap$auto(0x0, 0x202000d, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) (async) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/virtual/block/loop8/queue/scheduler\x00', 0x808040, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f0000001100)=""/4105, 0x1009) (async) sendmsg$auto_SMC_NETLINK_GET_DEV_SMCR(0xffffffffffffffff, 0x0, 0x40) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) (async) unshare$auto(0x40000080) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) (async) unshare$auto(0x20000080) (async) syz_clone3(&(0x7f0000000040)={0x28020400, 0x0, 0x0, 0x0, {0x35}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async) madvise$auto(0x110c230000, 0x1, 0x9) (async) io_setup$auto(0x7ffe, 0x0) (async) madvise$auto(0x0, 0xfff, 0x3) (async) mmap$auto(0x0, 0x3, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) (async) r3 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x101001, 0x0) ioctl$auto_UI_DEV_SETUP(r3, 0x405c5503, &(0x7f00000001c0)={{0x9, 0xf2cf, 0x8, 0x80}, "6a034a07c7b82d90b69a39e32576f893fb4a3836d61c9100fefbbabea6ef9368c7996e841f3f1561d4992f726b0a6c36b0b2fd1678e816201cf562367fe6596824588a2e3d84ba165f00", 0xa}) (async) ioctl$auto_UI_DEV_CREATE(r3, 0x5501, 0x0) mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) (async) setreuid$auto(0x0, 0x0) (async) futimesat$auto(0xda, 0x0, 0x0) (async) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) 1m9.911138393s ago: executing program 8 (id=4143): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/net/ifb0/statistics/tx_fifo_errors\x00', 0x0, 0x0) openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/ieee80211/phy0/misc\x00', 0x20a40, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptya7\x00', 0x725801, 0x0) socket$nl_generic(0x10, 0x3, 0x10) read$auto(0x3, 0x0, 0x8080) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) r1 = ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, 0x0, 0x2000, 0x0) r2 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/005/001\x00', 0x12081, 0x0) ioctl$auto_USBDEVFS_SUBMITURB32(r2, 0x802c550a, &(0x7f0000000080)={0x4, 0xb, 0x3, 0x9, 0x7, 0x1, 0x7, 0x800, 0x4, 0xff, 0x0, 0x2}) mmap$auto(0x0, 0xa00006, 0x400002, 0x40eb1, 0x602, 0x300000000000) socket(0x2, 0x1, 0x106) syz_clone(0x4100000, 0x0, 0x0, 0x0, 0x0, 0x0) mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) ioctl$auto_KVM_GET_MSRS(0xffffffffffffffff, 0x4068aea3, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) ioctl$auto_KVM_GET_MSRS(r1, 0x4068aea3, &(0x7f0000000040)={0x80, 0x100000}) ioctl$auto_RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) mknod$auto(&(0x7f0000000180)=':,\x00', 0xc9, 0xfffffffa) execve$auto(&(0x7f0000000040)=':,\x00', 0x0, 0x0) r3 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, 0x0, 0x48402, 0x0) read$auto(r3, 0x0, 0x80000000) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) msync$auto(0x1ffff000, 0x17ffffffffffffc, 0x400000004) socket(0x22, 0xa, 0x6) mmap$auto(0x0, 0x30009, 0x4000000000df, 0x4000eb2, 0x401, 0x8000) mkdir$auto(&(0x7f0000000040)='./cgroup/../file0\x00', 0x1) 1m6.456919823s ago: executing program 8 (id=4144): landlock_restrict_self$auto(0xffffffffffffffff, 0xc) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) close_range$auto(0x2, 0x8, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/snd/controlC2\x00', 0x101802, 0x0) ioctl$auto(0x3, 0x80045530, 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2, 0xe2, 0xeb1, 0x405, 0xfffffffffffffff9) r1 = socket(0xa, 0x5, 0x0) setsockopt$auto(r1, 0x10000000084, 0x79, 0x0, 0xd) r2 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002a40), r0) sendmsg$auto_NFSD_CMD_LISTENER_SET(r0, &(0x7f00000050c0)={0x0, 0x5c1e, &(0x7f0000005080)={&(0x7f0000002a80)={0x14, r2, 0x1, 0x70bd25, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008050) sendmsg$auto_NFSD_CMD_LISTENER_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x14, r2, 0x1, 0x70bd27, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0xeda47ee5ad433e65}, 0x20000000) r3 = socket$nl_generic(0x10, 0x3, 0x10) settimeofday$auto(&(0x7f0000000040)={0x8001, 0x1}, &(0x7f0000000080)={0x5, 0x6}) r4 = syz_genetlink_get_family_id$auto_hsr(&(0x7f0000000180), r3) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) pread64$auto(0xffffffffffffffff, 0x0, 0x3ef, 0x9) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) mremap$auto(0x4000, 0x8000b8, 0x13fd4, 0x3, 0xfffff000) sendmsg$auto_HSR_C_GET_NODE_LIST(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x14, r4, 0x1, 0x70bda6, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x20000080}, 0x20000800) r5 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000200)='/proc/kcore\x00', 0x28000, 0x0) pread64$auto(r5, 0x0, 0x840003, 0x40000000002e72) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$auto_OVS_FLOW_CMD_NEW(r6, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000140)={0x1c, r7, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@OVS_FLOW_ATTR_PROBE={0x4}, @OVS_FLOW_ATTR_PROBE={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x40) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) execve$auto(&(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0)=&(0x7f0000000280)='\x00', &(0x7f0000000340)=&(0x7f0000000300)='/proc/kcore\x00') mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) 51.361670938s ago: executing program 42 (id=4144): landlock_restrict_self$auto(0xffffffffffffffff, 0xc) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) close_range$auto(0x2, 0x8, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/snd/controlC2\x00', 0x101802, 0x0) ioctl$auto(0x3, 0x80045530, 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2, 0xe2, 0xeb1, 0x405, 0xfffffffffffffff9) r1 = socket(0xa, 0x5, 0x0) setsockopt$auto(r1, 0x10000000084, 0x79, 0x0, 0xd) r2 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002a40), r0) sendmsg$auto_NFSD_CMD_LISTENER_SET(r0, &(0x7f00000050c0)={0x0, 0x5c1e, &(0x7f0000005080)={&(0x7f0000002a80)={0x14, r2, 0x1, 0x70bd25, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008050) sendmsg$auto_NFSD_CMD_LISTENER_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x14, r2, 0x1, 0x70bd27, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0xeda47ee5ad433e65}, 0x20000000) r3 = socket$nl_generic(0x10, 0x3, 0x10) settimeofday$auto(&(0x7f0000000040)={0x8001, 0x1}, &(0x7f0000000080)={0x5, 0x6}) r4 = syz_genetlink_get_family_id$auto_hsr(&(0x7f0000000180), r3) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) pread64$auto(0xffffffffffffffff, 0x0, 0x3ef, 0x9) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) mremap$auto(0x4000, 0x8000b8, 0x13fd4, 0x3, 0xfffff000) sendmsg$auto_HSR_C_GET_NODE_LIST(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x14, r4, 0x1, 0x70bda6, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x20000080}, 0x20000800) r5 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000200)='/proc/kcore\x00', 0x28000, 0x0) pread64$auto(r5, 0x0, 0x840003, 0x40000000002e72) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$auto_OVS_FLOW_CMD_NEW(r6, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000140)={0x1c, r7, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@OVS_FLOW_ATTR_PROBE={0x4}, @OVS_FLOW_ATTR_PROBE={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x40) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) execve$auto(&(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0)=&(0x7f0000000280)='\x00', &(0x7f0000000340)=&(0x7f0000000300)='/proc/kcore\x00') mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) 17.135266089s ago: executing program 4 (id=4226): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x7, 0xdf, 0xeb1, 0x401, 0x8000) r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x20342, 0x0) ioctl$auto_SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, 0x0) ioctl$auto_SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000380)="7a47301037954c081c9a0bb84bb7b04ef84993eab91abe1686f43e43d786e964e8f04455bd620de9f3fb6d65e6c078c1a672c549dbc7876cb528ba081a81d884bfc00dd4eef57cedc0cc4156ff6a5b0aa8ba9511fe2b07c6e7f4732fe36ba218aa5b0ff402f2e6adb8ea60886c1e52c60d7d87e4c0551386501763ad098eb2b9602f83b2a643399f10dfdb0f4018b401be4db675d0acf8d348c26acf338cbe20fcb76439ca602a3c022f4463a8820f1c6f865d24e058af98f0c48bf552c3f6cc28c09d9054347db3c28701c67fa1e57d81b881638b518dd8e24969b7fd10406fcf6eb9bb66bf56ed7568510c72b380fa6efbca845bde90f7672708000000000000003513") mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) r1 = openat$auto_kmsg_fops_printk(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) lseek$auto(0x3, 0x7fffffffffffffff, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0x10001}, 0x4) r2 = socket(0x8, 0x2, 0x0) setsockopt$auto(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x7) r3 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x123002, 0x0) write$auto(r3, &(0x7f0000000080)='/dev/audio\x00', 0x80000000) r4 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x147) execve$auto(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r5 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000200), r4) sendmsg$auto_NL80211_CMD_GET_STATION(r2, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x30, r5, 0x10, 0x70bd2b, 0x25dfdbfb, {}, [@NL80211_ATTR_SCHED_SCAN_DELAY={0x8}, @NL80211_ATTR_RECEIVE_MULTICAST={0x4}, @NL80211_ATTR_STA_PLINK_ACTION={0x5}, @NL80211_ATTR_WPA_VERSIONS={0x8, 0x4b, 0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x200408c1}, 0x4000000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) execve$auto(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) execve$auto(&(0x7f0000000040)='./file0\x00', &(0x7f00000004c0)=&(0x7f0000000340)='#\xdc\xfe\xd8E\xc8\x8bu4\xd9n\xcb\xca\xc7zw \x96\x9ejh\xad\x9eEc\xae\x1e\x89\x92\x9a\xbbP[B\xae\x9cf)\x15\xac\x90)l\x06\xf0\t\x12\x05zz\xa6\xb3\xce=\x00\x00\x00\x00\x00/\xc4T\x1f\xe5P\xff\xb4\xb7s0\x02\xc5\x81\x93\xc6\xc8\xb6Sp\x1a{8\xfc\xe0,X\xc7BU\xd0\x97\x7f1\x16\x99\x04\xabu/a(\x02\x7f\xbb\xbd\x906\xa8\xce\xee\xcd\xd7\t\x00\xfb\x83\xc8\x8aO\xe9\xbe=\xf7\xf4\x84,\x06\xd3j\x99b\xe6\xf6Y3A\xbb\xa4\xb2\f\x1b\xc3\x8a,g\xc6\xe8[\xdf\x88\x01\x9f7\xb5\x19m\xd8L\x84j\x8c\xec\xdf\x1a\xbd\xc5\x94\xb9\xb7\xd5\xa4\xc0\f-6\xfe\xa8\xed/u\x81_G\xfeR\xbb\x12\x16\xb8*\xa9\xc9\xe81\x9d\x06\xbbC\x17\xbb\xe6|\x97\xabB4J\xed+-\xf8u0/n\xcf\x8b\x95\x9d\xab\xa8\xc47\xa6\x0e\xdeOq\\\xc3\'{\b\xd3m\x94\xc2\xdd{\xeaO\x0e\xe4\xe0\xb9N:\xd60\x17,\x06\xc7B#Y0\x99\xeb\x874\xab?\xc8\x82\xe5\x8f\xb7\x91\xc2\xbe\xb2\x02\xfe\xd3k\xd5\xdcZ\xdcP\x8e+\xd8\xc7C\xcb\x15\x13c\xbf\xe8\xbd\"\x8f3\"\x14\xf8(\xda\x19\xcd\xec\x03.\xd9^\xc3A\xda\r[\x1a\xda\\#/\xd4\xaf\xd0\xe8\xa2\xdd\xc5{\xfa\xe0\x90\x8f\x99lQ\xec\x84h^\x11+\x93\b\xe0c\xe6\xd22\xf9\xa5', 0x0) ioctl$auto_SNDCTL_DSP_SYNC(r3, 0x5001, 0x0) ioctl$auto_SNDCTL_DSP_GETODELAY(r3, 0x80045017, &(0x7f0000000180)) ioctl$auto(0xc8, 0x800454e1, 0x5c8d) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) read$auto(0x3, 0x0, 0x8080) write$auto(r1, &(0x7f0000000500)='/dev/audio\x00', 0x6) sendmsg$auto_SMC_NETLINK_DUMP_UEID(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x4004050}, 0x4008004) write$auto(0xffffffffffffffff, 0x0, 0x81) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) 14.209250572s ago: executing program 2 (id=4233): openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_congestion_control\x00', 0x121682, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2506, &(0x7f00000002c0)={0x0, 0xae}, 0x5, 0x0, 0x3, 0x3a32182}, 0x4}, 0x3, 0x9) recvmmsg$auto(0x4, 0x0, 0x7, 0xe, 0x0) recvfrom$auto(0x4, 0x0, 0x101d0, 0x3ffffd, 0x0, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x891, 0x0) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttynull\x00', 0x0, 0x0) read$auto(r0, 0x0, 0xfffffdef) move_pages$auto(0x0, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) ioctl$auto(0x3, 0x402c542b, 0x38) ioctl$auto_TIOCSTI2(r0, 0x5412, 0x0) connect$auto(0xffffffffffffffff, 0x0, 0x50) unshare$auto(0x40000080) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000100)='/dev/bus/usb/008/001\x00', 0x402, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/bond0/bonding/arp_interval\x00', 0xa4b42, 0x0) write$auto(0xffffffffffffffff, &(0x7f0000000280)='9\x00d1L\xf0\x15\xba\xa17=(\x18\xdd\xff\xec\v\xb5^\xa1/[vv\x19\x00\x7f0\xa30\xc7\x9d\x1f]\xf8\xe04\xe7s\x9a\xd3H\xd3F\x819+\x90S\x10\xb2\b\xf8)\xe4IU\t\xb8\r\x9a\x8e\'Q\xfb\xb5I\x0f\x96;\xc7\\2V\x01g\xf8\xce\xbb\x9d\xa2c2\x00\x7f\xa1:\ax\xbc\x17\xde\x0e<\x00\x00\x00\x00\x00\x00\x00\x06\xc8\xf4\xdf\xcc\x9b\xd7D\xd7ARq', 0x40) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/pagemap\x00', 0x12501, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/pci0000:00/waiting_for_supplier\x00', 0x80800, 0x0) write$auto(0xffffffffffffffff, &(0x7f0000003000)='/sys/kernel/debug/split_huge_pages\x00', 0x9) r2 = openat$auto_ubi_ctrl_cdev_operations_ubi(0xffffffffffffff9c, 0x0, 0x80000, 0x0) ioctl$auto_UBI_IOCATT(r2, 0x40186f40, &(0x7f0000000080)={0xffffffff, 0x6, 0x1, 0x5, 0x5, 0x77}) sendfile$auto(r1, r1, 0x0, 0x4f64a1d5) waitid$auto_P_PID(0x1, 0x0, &(0x7f00000001c0)={@_si_pad}, 0x9, &(0x7f0000000340)={{0x0, 0x3935}, {0x4, 0x3}, 0x8000000000648, 0x0, 0x10001, 0x9aa, 0xffffffffffffffff, 0x2, 0x8, 0xd3f, 0x4, 0xc, 0x7, 0x4, 0x8001, 0xc}) 12.983044148s ago: executing program 4 (id=4235): fsconfig$auto_SHMEM_HUGE_DENY(0xffffffffffffffff, 0x0, &(0x7f0000000140)='\\!:\x00', 0x0, 0xffffffffffffffff) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x6, 0x8000) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000) bpf$auto(0x1, &(0x7f0000000000)=@batch={0xfffffffffffffffb, 0x44, 0x2, 0x9, 0x81, 0xffffffffffffffff, 0x2, 0x8}, 0x100000cf) socket(0x15, 0x5, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000280)='/dev/bus/usb/028/001\x00', 0xa801, 0x0) ioctl$auto_USBDEVFS_SUBMITURB32(r0, 0x802c550a, &(0x7f0000000300)=ANY=[@ANYBLOB="020000060000e6ff040000000100400008"]) open(&(0x7f0000000000)='./file0\x00', 0x4242, 0xe1d2b27bdc14ab3f) r1 = open(&(0x7f0000000000)='./file0\x00', 0x4242, 0xe1d2b27bdc14aabc) fcntl$auto(r1, 0x400, 0x1) close_range$auto(0x2, 0x8, 0x0) r2 = socket(0x10, 0x2, 0x4) close_range$auto(0x2, 0x8, 0x0) r3 = socket(0x10, 0x2, 0xc) sendmsg$auto_HWSIM_CMD_TX_INFO_FRAME(0xffffffffffffffff, &(0x7f0000006940)={0x0, 0x0, &(0x7f0000006900)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000", @ANYRES16=0x0, @ANYBLOB="ff00f4"], 0x18}, 0x1, 0x0, 0x0, 0x20000041}, 0x800) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000", @ANYRES8=r3, @ANYBLOB="01"], 0x18}, 0x1, 0x0, 0x0, 0x60008004}, 0x80) write$auto(r2, &(0x7f0000000000)='-\x00', 0xfdef) truncate$auto(&(0x7f0000000080)='./file0\x00', 0x7f) setsockopt$auto(0x3, 0x1, 0x26, 0x0, 0x9) r4 = socket(0x10, 0x3, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200"], 0x1ac}}, 0x40000) recvmmsg$auto(r4, &(0x7f0000000040)={{0x0, 0x5, 0x0, 0x5, 0x0, 0x200002, 0x13}, 0x803}, 0xfffffff9, 0x10, 0x0) modify_ldt$auto(0x11, 0x0, 0x10) ioctl$auto_TIOCSTI2(0xffffffffffffffff, 0x5412, 0x0) stat$auto(0x0, 0x0) sendmsg$auto_NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001cc0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008080}, 0x4000) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) close_range$auto(0x2, 0x8, 0x0) 11.657451047s ago: executing program 4 (id=4237): r0 = socket(0x10, 0x80000, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) (async) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) ioctl$auto_TIOCSETD2(r1, 0x5423, 0x0) (async) getsockopt$auto_SO_PASSCRED(r0, 0x2, 0x10, &(0x7f00000000c0)=':\x00', &(0x7f0000000100)=0x1) (async) timer_settime$auto(0xffffffff, 0x9, &(0x7f0000000140)={{0x7, 0x4}, {0x10}}, 0x0) (async) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zram0\x00', 0x212100, 0x0) write$auto(r2, &(0x7f0000000400)='odev/audio1\x00', 0x100000a3d9) (async) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b73, 0xffffffffffffffff, 0x83fe) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) getrandom$auto(0x0, 0xa, 0x3) (async) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) ioctl$auto(r3, 0x4b67, 0x1) (async) io_uring_setup$auto(0x1, 0x0) (async) r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ttyS2\x00', 0x101f81, 0x0) ioctl$auto_TIOCSETD2(r4, 0x5423, 0x0) ioctl$auto_TIOCVHANGUP2(r1, 0x5437, 0x0) 11.336488718s ago: executing program 2 (id=4239): r0 = io_uring_setup$auto(0x59, &(0x7f0000000080)={0x80000002, 0x201d, 0x3000, 0xfffffff8, 0x7, 0x8400a, 0xffffffffffffffff, [], {0x6, 0x0, 0x4, 0x29c, 0x1, 0x4, 0x1, 0x7, 0x1}, {0x10100, 0x1, 0x52, 0x88, 0x2, 0x8, 0x76c5, 0x8, 0x5}}) fsconfig$auto_SHMEM_HUGE_DENY(r0, 0x0, &(0x7f0000000140)='\\!:\x00', 0x0, 0xffffffffffffffff) mmap$auto(0x0, 0x810004, 0xff8, 0x8000000008010, 0x3, 0x8000) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_NBD_CMD_STATUS(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000440)=ANY=[@ANYBLOB="980500", @ANYRES16=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="f7f822f83d9095a148cc90f861769adf05dc7bc266d3cad2ba244ff1f053a1445a89d22f16cac1aeb3b27813126f323c01db623c227d171ec8985a12eb1bd80afd8348d801d768e5514ada8e5e6b2ff00a063ba768589a8a080de2e60427db307273a90937c9bf622ecd123caa5f5b172a8b32208baaf839e32f7a1b55df59d995bb1e0346e0c1b6ad1bacc2e507301879cc7015c15cf906b0bc709cad2e0235d2489de777b239599c05b8623872ce5aad77bc03bc1667178b0c81eb934cb280bd1416414f891586ce048a4ede9e2cc1f2a9c09c5bf4c26e6bfc5e7c42a2935a09fa8bec3b7236885349030980280073800800d400ac1e01010400978004000e8014002b00ff010000000000000000000000000001413c15a145576e08b011afc20b7cc18aee6e5d0a4c0fbd06147b441b383239e190d17964e5457f0919856bf44d7b3d4384aaf00c07ad1ab971586ae56e5ba45c59104943505934d8fabb836217971248e989f836c1b345ac6f03e46196e52e43b169237b9e91cc04bda27108c61b4ad3a0b2d3055cffee0c94c5a10c098f9e9505536b76ed6dddda8c6bd6065e21beac0d09d44706b3719022e0b563ffc9f1d2a652d09c2d99baa4438abe687c33a80540f634c0a2960f23d96d441049fb48501e7305f8bd06009d007d0000000c008100090000000000000042020d8014007600fe8000000000000000000000000000aa2259ec8215447450ac34bc33b4f8e1bcdb61922348e81c5b58f5618b69e73f4b3b4f2b72fcf4a10733f00b74671375c3ce82d89e0a5c46bb19e91e62e6b7b44e08163ece40fef800bbfecce23d148526650b0cc2c15763c86715fb96e69f3a152a66b1225248adce1db66d862c3a98bd972802b3fe0afcfcfbf4c7a9adaf2e73e55ea8bfb5eb6127ca3d06384a1640595df734217db397cd38f1b6f60827e9ccb7e6f1384f625b93ca69b79cd36746aab389536e7c5f12a0ebbdbc562f7e3e8fa10cf1b3a45c4fc41158acb5e2f7c0ad81aabb1400370000000000000000000000ffff00000000190006002f6465762f646d615f686561702f73797374656d00000000080005000700000004006480c7fdea010aaaadadcb61ebc0b7c99820e498277b43ac73582ddfa36ebb66b7ba7613fee72aabf13fe64092a2184d53ea6dec42ba5177b7e04c7606214c8cc08b2d98e651a688d779eeedb970a77a1873364f9e4b68a121ae0818c66c78a26361c40498c4bb6e6206b4e298fa88bf5f73794d68a26799438905158160bcf628ed72f88f4eb5c762051a9922a8eca7a5ba9db26e417872d6e770c7f475190da03932b541de27fa03a80702cd4e1833b996895b1cadcf0c0d2c175e8d2fc51d4ac9113054dff60fa44b5c58d7f9b9be719656b3d51532662b37d0adf1557202284acbe28c031801434d3075c8cf6364114134dcf2e44b5ab5beb64bcde01e7d1bca2a54481469070d1d20cd282612a7c2453b1f7db0a56a7919107fe300000000000c0006007b030000000000000f000a002f6465762f707479636400000c0005000400000000000000"], 0x598}}, 0x40000c0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x2, 0x0) r2 = openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$auto_dma_heap_fops_dma_heap(r2, 0xffffffffffdffe00, &(0x7f0000000140)) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer\x00', 0x10080, 0x0) close_range$auto(0x2, 0x8, 0x0) 10.998172336s ago: executing program 2 (id=4240): openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sg0\x00', 0x282, 0x0) (async) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sg0\x00', 0x282, 0x0) kcmp$auto(0x1, 0x100000001, 0x1, 0x4, 0x24000) mmap$auto(0x0, 0x40009, 0x1ff, 0x9b72, 0x7, 0x28000) (async) mmap$auto(0x0, 0x40009, 0x1ff, 0x9b72, 0x7, 0x28000) close_range$auto(0x0, 0xffffeffe, 0x2) (async) close_range$auto(0x0, 0xffffeffe, 0x2) unshare$auto(0x40000080) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) (async) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) socket(0x2a, 0x2, 0x9) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r0 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000140), 0xffffffffffffffff) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x3ff, 0x7, 0xd77, 0x3, 0x4000007181, 0x81, 0x7, 0x3, 0x9a89, 0x5, 0x8, 0x800, 0x1fffffffffff, 0xb4, 0x7, 0x2, 0x10007, 0x80, 0xfffffffffffffffc, 0x0, 0xa, 0x22004, 0x200, 0x4, 0x84, 0x0, 0x0, 0x0, 0x0, 0x80001, [0x0, 0x0, 0x10001, 0x9cf, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffe, 0x0, 0x0, 0x5, 0x0, 0x0, 0x100000000, 0x3ffffffffff, 0x3, 0x4, 0x5, 0x80800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xcc, 0x4000000002, 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0, 0x100000003, 0x100000000, 0x0, 0x0, 0x80000, 0x0, 0x9]}, 0x205, 0xe) sendmsg$auto_NETDEV_CMD_QUEUE_GET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r0, @ANYBLOB="010025bd7000fbdbdf0002"], 0x1c}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) (async) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) socket(0x2, 0x80802, 0x0) (async) socket(0x2, 0x80802, 0x0) socket(0x10, 0x2, 0x0) (async) r1 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x40814}, 0x2004c0c4) sendmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0x3f, &(0x7f0000000380)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xda5c}, 0x80000000}, 0x7, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/platform/dummy_hcd.7/usb8/ltm_capable\x00', 0x181800, 0x0) pread64$auto(r2, 0x0, 0xedd, 0x4) (async) pread64$auto(r2, 0x0, 0xedd, 0x4) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/kernel/perf_event_max_sample_rate\x00', 0xd97f760c479e8c8e, 0x0) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/fs/btrfs/features/rmdir_subvol\x00', 0x40000, 0x0) preadv$auto(r3, 0x0, 0x7, 0xbbf, 0x69bf) r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/tty12\x00', 0x101c40, 0x0) sendmsg$auto_NL80211_CMD_EXTERNAL_AUTH(0xffffffffffffffff, 0x0, 0x55) r5 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) ioctl$auto(r4, 0x541c, r5) (async) ioctl$auto(r4, 0x541c, r5) ioctl$auto_SNDCTL_DSP_SYNC(0xffffffffffffffff, 0x5001, 0x0) 10.755360859s ago: executing program 4 (id=4241): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) preadv2$auto(r0, &(0x7f0000000280)={0x0, 0x80000000}, 0x6, 0x3, 0x4, 0x2a) ioctl$auto_BLKFLSBUF(r0, 0x1261, 0x0) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) syz_clone3(&(0x7f0000000180)={0xa7102000, 0x0, 0x0, 0x0, {0x2a}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram12\x00', 0x0, 0x0) mmap$auto(0xfffffffffffffff8, 0x4, 0x7fff, 0x800000000801e, 0xffffffffffffffff, 0x9) ioctl$auto_BLKFLSBUF(r1, 0x1261, 0x0) mmap$auto(0x0, 0x8000, 0xdf, 0xeb1, 0x401, 0x8000) r2 = socket(0x1, 0x3, 0x0) getsockopt$auto(r2, 0x26, 0x7, 0x0, 0x0) epoll_create$auto(0x15) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x0) syz_clone(0x2000011, 0x0, 0x0, 0x0, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0xc) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000080), 0x103040, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) setuid$auto(0xe) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) setsockopt$auto(0x3, 0x1, 0x1, 0x0, 0x9) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r4) ioctl$auto_KVM_GET_MSRS(r3, 0xc008aeb0, 0x0) mmap$auto(0x4, 0xa00006, 0xfffffffffffffffe, 0x100000000040eb2, 0x602, 0x300000000000) mmap$auto(0x4, 0x4, 0xdf, 0x400000009b72, 0x7, 0x7) 8.839821185s ago: executing program 2 (id=4243): mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) ioctl$auto_FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, 0x2) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r0 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) openat$auto_ext4_dir_operations_ext4(0xffffffffffffff9c, 0x0, 0x40000, 0x0) mkdir$auto(&(0x7f0000000240)='}[,&*}\x00', 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) chroot$auto(&(0x7f0000000000)='}[,&*}\x00') madvise$auto(0xfffffffffffffffe, 0x10001, 0x539) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) unshare$auto(0x40000080) ioctl$auto_RNDADDENTROPY2(0xffffffffffffffff, 0x40085203, &(0x7f0000000440)=[0xfff, 0xedc0]) sendmmsg$auto(0x3, 0x0, 0x787b, 0x7000000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/security/tomoyo/exception_policy\x00', 0xc000, 0x0) pread64$auto(r1, 0x0, 0xe5e, 0x1ffffffff) read$auto(r0, 0x0, 0x8) r2 = openat$auto_ftrace_event_format_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/debug/tracing/events/vmalloc/purge_vmap_area_lazy/format\x00', 0x40, 0x0) pread64$auto(r2, 0x0, 0x3, 0xfdd) mmap$auto(0x9, 0x5, 0x40218cf642, 0xfd, r2, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) socket(0x23, 0x80805, 0x0) inotify_init1$auto(0x3000000000000) mmap$auto(0x400000000000, 0x2020009, 0x8000000126, 0x7fd, 0xffffffffffffffff, 0x800) r3 = socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) bind$auto(0x3, &(0x7f0000000040)=@ethernet={0x1, @link_local}, 0x6a) close_range$auto(0x2, r3, 0x0) mmap$auto(0x100, 0x200006, 0x100000023cd, 0x40eb1, 0x602, 0x300000000000) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000005940)='/sys/kernel/security/tomoyo/profile\x00', 0x40802, 0x0) 6.738823739s ago: executing program 4 (id=4248): r0 = io_uring_setup$auto(0x59, &(0x7f0000000080)={0x80000002, 0x201d, 0x3000, 0xfffffff8, 0x7, 0x8400a, 0xffffffffffffffff, [], {0x6, 0x0, 0x4, 0x29c, 0x1, 0x4, 0x1, 0x7, 0x1}, {0x10100, 0x1, 0x52, 0x88, 0x2, 0x8, 0x76c5, 0x8, 0x5}}) fsconfig$auto_SHMEM_HUGE_DENY(r0, 0x0, &(0x7f0000000140)='\\!:\x00', 0x0, 0xffffffffffffffff) mmap$auto(0x0, 0x810004, 0xff8, 0x8000000008010, 0x3, 0x8000) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_NBD_CMD_STATUS(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000440)=ANY=[@ANYBLOB="980500", @ANYRES16=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="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"], 0x598}}, 0x40000c0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x2, 0x0) r2 = openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$auto_dma_heap_fops_dma_heap(r2, 0xffffffffffdffe00, &(0x7f0000000140)) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer\x00', 0x10080, 0x0) close_range$auto(0x2, 0x8, 0x0) 6.253946847s ago: executing program 1 (id=4251): mmap$auto(0x7, 0x400008, 0x7ffffffb, 0x13, 0xffffffffffffffff, 0x9) r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x1, 0x0) close_range$auto(0x2, 0xa, 0x0) socket(0x18, 0xa, 0x1) socket(0xa, 0x2, 0x0) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55) sendmmsg$auto(0xffffffffffffffff, 0x0, 0x9a9, 0x7) r1 = epoll_create$auto(0x8800001) epoll_ctl$auto(r1, 0x1, r0, 0x0) mmap$auto(0x0, 0xe981, 0x800000000df, 0xeb1, 0xffffffffffffffff, 0x200008000) recvmmsg$auto(r1, 0x0, 0x2, 0x100000, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(0x0, r2) process_vm_readv$auto(0x0, 0x0, 0x1, 0x0, 0x6, 0x4a7) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) ioctl$auto_TIOCEXCL(r1, 0x540c, &(0x7f0000000200)="bca1104e4e204aa0f69a8a8bbd7e4fdf96492663d5e79e11f25b691cdc287b9e321166a25f18a2015b9ce1c79458f8ad4e0bcede583d6d16d14f3cb790e94f702c13e870a5ce434d6236b9b0d6e63597482e7c9df75f31c54050fb59563156") socket(0x2a, 0x1, 0x8) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e1000000ff000000deff00"}, 0x58) wait4$auto(0x0, &(0x7f0000000080)=0x800, 0x5, &(0x7f0000000100)={{0xd, 0xfffffffffffffffb}, {0x2e}, 0x5, 0x2, 0xfb, 0xb9, 0x7, 0x3ff, 0x8001, 0x2, 0x3, 0x100000001, 0x3, 0x0, 0x5, 0x7}) openat$auto_proc_mounts_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/thread-self/mounts\x00', 0xc0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0xa00006, 0x400002, 0x40ebe, 0xffffffffffffffff, 0x300000000000) sendmsg$auto_ETHTOOL_MSG_PSE_SET(0xffffffffffffffff, 0x0, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, 0x0, 0x42, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7fffffe) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/nfs/parameters/nfs_idmap_cache_timeout\x00', 0xc2902, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) 5.674556024s ago: executing program 4 (id=4252): mmap$auto(0x0, 0x202000d, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) socket(0x11, 0xa, 0x300) recvmmsg$auto(0x3, 0x0, 0x10000, 0x2000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) read$auto(0xffffffffffffffff, 0x0, 0x9a28) unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r1 = socket(0xf, 0x3, 0xb) ioctl$auto_XFS_IOC_ALLOCSP64(0xffffffffffffffff, 0x40305824, 0x0) sendmsg$auto_NL802154_CMD_GET_SEC_DEV(r1, 0x0, 0x4040) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) r2 = openat$auto_proc_pid_numa_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000880)='/proc/thread-self/numa_maps\x00', 0x28100, 0x0) pread64$auto(r2, 0x0, 0x10001, 0x3) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r3 = socket(0x2b, 0x1, 0x1) setsockopt$auto(r3, 0x29, 0x20, 0x0, 0x20) getsockopt$auto_SO_SNDLOWAT(0xffffffffffffffff, 0x1ff, 0x13, &(0x7f0000000040)='.[-+-&}\x00', &(0x7f0000000080)=0x7fffffff) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) clock_adjtime$auto(0x0, 0x0) 4.623508059s ago: executing program 1 (id=4254): r0 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002a40), 0xffffffffffffffff) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) mincore$auto(0x1000, 0x8001, 0x0) fcntl$auto(0x8000000000000001, 0x26, 0x8) getpid() fcntl$auto(0x8000000000000001, 0x25, 0x8) sendmsg$auto_NFSD_CMD_LISTENER_SET(0xffffffffffffffff, &(0x7f00000050c0)={0x0, 0x0, &(0x7f0000005080)={&(0x7f0000002a80)={0x14, r0, 0x1, 0x70bd27, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4c000}, 0x20008050) connect$auto(0x3, 0x0, 0x55) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) eventfd$auto(0x8c) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/system/memory/memory12/power/control\x00', 0x100, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xae00, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$auto(0x3, 0x4018aebd, r1) close_range$auto(0x0, r1, 0x2) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_NFSD_CMD_LISTENER_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xeda47ee5ad433e65}, 0x20000000) 4.536531877s ago: executing program 3 (id=4255): r0 = socket(0xa, 0x2, 0x0) close_range$auto(0x2, 0xffffffffffffffff, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/vhci_hcd.0/usb9/idVendor\x00', 0x2400, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x40000000c07) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) setrlimit$auto(0x7, &(0x7f0000000080)={0x0, 0x6}) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x2, 0x0) ioctl$auto(0x4000000000000c8, 0x400454d8, 0x3) ioctl$auto(0x3, 0xae41, r0) 4.049352593s ago: executing program 1 (id=4256): close_range$auto(0x2, 0x8, 0x0) openat$auto_tracing_cpumask_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/tracing_cpumask\x00', 0x8301, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) openat$auto_ubifs_dir_operations_ubifs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/bluetooth/hci1/rfkill6/power\x00', 0x105000, 0x0) openat$auto_tomoyo_self_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000040), 0x2002, 0x0) prctl$auto_PR_SET_VMA(0x53564d41, 0x7, 0x9, 0x1, 0x8) socket(0x11, 0xa, 0x10) sendmmsg$auto(0x4, 0x0, 0x9a5, 0xa) sendmmsg$auto(0x3, 0x0, 0x9a6, 0xa00) close_range$auto(0x2, 0x8, 0x0) 4.039174567s ago: executing program 3 (id=4257): mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) io_uring_setup$auto(0x4, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x40, r1, 0x1b, 0x74bd26, 0x25dfdbfd, {}, [@OVS_PACKET_ATTR_PROBE={0x4}, @OVS_PACKET_ATTR_ACTIONS={0x10, 0x3, 0x0, 0x1, [@nested={0xc, 0x9, 0x0, 0x1, [@nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0x33}]}]}]}, @OVS_PACKET_ATTR_PACKET={0x12, 0x1, "898771f1c19f17790485908288a8"}, @OVS_PACKET_ATTR_KEY={0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) close_range$auto(0x2, 0x8, 0x0) socket(0x2b, 0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) ioctl$auto_TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, 0x0) mincore$auto(0x1000, 0x4000000, 0x0) semctl$auto_SETALL(0x0, 0xc, 0x11, 0x81) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'xfrm0\x00'}) sendmsg$auto_ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x2000000, 0x28000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20004000}, 0x2000c031) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="0c0000001400c7"], 0x2c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4830) write$auto(0xffffffffffffffff, &(0x7f0000000000)='-\x00', 0x2fb) recvmmsg$auto(r2, 0x0, 0x10000, 0x301, 0x0) 3.441071812s ago: executing program 2 (id=4258): socket(0x2, 0x5, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) connect$auto(0x3, &(0x7f0000000040)=@vsock={0x28, 0x0, 0x2710, @host}, 0x55) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4000894}, 0x4000000) bpf$auto(0x0, &(0x7f00000001c0)=@test={0xffffffffffffffff, 0xffff, 0xfffff0b6, 0xffff, 0x84, 0xac1, 0x2, 0x36242398, 0xfffff5b2, 0x3bb, 0x8000007, 0xffff, 0x6, 0x81, 0x68198}, 0x6f3) sendmsg$auto_ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="d4000000", @ANYRES16=0x0, @ANYBLOB="100027bd7000fbdbdf2518000000200001800247eea41fac000014000200766574683100000000000000000000000800070063fbffff0500060001000000840002803d00488013b37090badc49d6dc93876646d25a4d297d01cd3b7da38d12889cc50d505f353dc42d0a3c0a14c7b46428910708003600", @ANYRES32=0x0, @ANYBLOB="0400b3800000003d003b800400a4800c009a00008000000000000004008680c16ab1b1b39dcaa14b6af7dcc011b43cf706e562811c62b28a702b72e0a87126700294f2350000000c000180080003"], 0xd4}, 0x1, 0x0, 0x0, 0x20000010}, 0x20008000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x800) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x26000, 0x0) r0 = socket(0x10, 0x2, 0xc) r1 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000001c0), 0xffffffffffffffff) r2 = socket(0x10, 0x2, 0xc) r3 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$auto_CTRL_CMD_GETPOLICY(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='q\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="10002cbd7000fbdbdf250a00000a08000a000500000031efd50006"], 0x10e}}, 0x10004010) sendmsg$auto_CTRL_CMD_GETPOLICY(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)={0x14, r1, 0x400, 0x70bd28, 0x25dfdbfb, {0xa, 0x0, 0xa00}}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x2000000) r4 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/set_event\x00', 0x20201, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) write$auto(r4, 0x0, 0x4) r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000080), 0x82401, 0x0) copy_file_range$auto(r5, 0x0, r5, 0x0, 0x10000, 0x80000001) write$auto(0xffffffffffffffff, 0x0, 0x7f) mmap$auto(0x0, 0x4005, 0x2, 0x40eb2, 0x401, 0x300000000000) sendmsg$auto_NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, 0x0, 0x0) unshare$auto(0x40000080) unshare$auto(0x40000080) socket(0x2, 0x3, 0xa) 3.316285004s ago: executing program 1 (id=4259): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0\x00'}) close_range$auto(0x0, 0xffffffffffffffff, 0x2) socket(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x801, 0x84) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/usb/drivers/igorplugusb/uevent\x00', 0x60301, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000000040)='\x00', 0x1) r2 = socket(0x18, 0x5, 0x1) connect$auto(r2, &(0x7f0000000000)=@in={0x2, 0x100}, 0x3a) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) 2.954307969s ago: executing program 1 (id=4260): mkdir$auto(&(0x7f00000000c0)='}[,&*}\x00', 0xfffe) migrate_pages$auto(0xffffffffffffffff, 0x8, 0x0, &(0x7f00000001c0)=0x7a) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x2000c, 0xdf, 0xe31, 0x40000000000a5, 0x8000) syz_genetlink_get_family_id$auto_802_15_4_mac(0x0, 0xffffffffffffffff) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) setsockopt$auto(0x3, 0x1, 0x4c, 0x0, 0x9) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) utimensat$auto(0xffffffffffffffff, &(0x7f0000000300)='\x00', &(0x7f0000000100)={0x6, 0x3ffffffc}, 0x1000) fcntl$auto(0x3, 0x4, 0xa553) sendfile$auto(0x6, 0x3, 0x0, 0xfffffdef) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x1f00) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x67, 0x20009, 0x4000000000e1, 0xeb1, 0xd4, 0x2) ioctl$auto(0xc8, 0x400454d4, 0xe) process_vm_readv$auto(0x0, 0x0, 0x1, 0x0, 0x2, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) sendfile$auto(0x1, 0x3, 0x0, 0x7ff) sendto$auto(0x3, 0x0, 0x7, 0x101, 0x0, 0x6) syz_genetlink_get_family_id$auto_l2tp(0x0, 0xffffffffffffffff) ioctl$auto_SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) unshare$auto(0x8100000) r0 = open(&(0x7f0000000100)='.\x00', 0x0, 0x408) getdents64$auto(r0, 0x0, 0x18) readv$auto(0xffffffffffffffff, 0x0, 0x3) 2.61655255s ago: executing program 3 (id=4261): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0xa, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x800) r0 = socket(0x10, 0x3, 0x6) sendmsg$auto_ETHTOOL_MSG_LINKMODES_SET(r0, 0x0, 0x50) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4004881}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1200", @ANYRES32], 0x1ac}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x7fff, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x40007}, 0x3, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) listen$auto(0x3, 0x81) 2.361843925s ago: executing program 3 (id=4262): r0 = openat$auto_urandom_fops_random(0xffffffffffffff9c, &(0x7f0000001400), 0x0, 0x0) fcntl$auto_F_UNLCK(r0, 0x8, 0x2) sendmsg$auto_ETHTOOL_MSG_PHY_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022bbd7000fcdbdf252d"], 0x14}, 0x1, 0x0, 0x0, 0x4000810}, 0x20008004) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB="1b000000", @ANYBLOB="1e0027"], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40000) r1 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x4008) close_range$auto(0x2, 0xa, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/zswap/parameters/compressor\x00', 0x149182, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x2002, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/platform/i8042/serio0/bind_mode\x00', 0x1a2302, 0x0) sendfile$auto(0x3, r2, 0x0, 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket(0xa, 0x5, 0x84) setsockopt$auto(r4, 0x10000000084, 0x23, 0x0, 0x10) r5 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_FLOW_CMD_GET(r6, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x28, r5, 0x1, 0x70bd25, 0x25dfdc02, {}, [@OVS_FLOW_ATTR_PROBE={0x4}, @OVS_FLOW_ATTR_KEY={0x10, 0x1, 0x0, 0x1, [@nested={0xc, 0x10, 0x0, 0x1, [@typed={0x8, 0x1, 0x0, 0x0, @fd}]}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x200400f0}, 0x800) syz_genetlink_get_family_id$auto_tipcv2(0x0, r3) shmctl$auto_SHM_STAT(0x1, 0xd, &(0x7f0000000200)={{0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffff80, 0x401}, 0x2, 0xfffe, 0x8, 0x10001, @inferred, @inferred=0xffffffffffffffff, 0x7, 0x0, &(0x7f0000000100), &(0x7f00000001c0)}) sendmsg$auto_TIPC_NL_SOCK_GET(r6, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000940)=ANY=[], 0x614}, 0x1, 0x0, 0x0, 0xc004}, 0x50) mmap$auto(0x0, 0x2a, 0xdf, 0x9b72, 0x1000, 0x28000) capset$auto(&(0x7f0000000040)={0x69, 0x0}, &(0x7f0000000080)={0x7, 0x7f}) prctl$auto(0x400003b, 0x1, r7, 0x5, 0x2) io_uring_setup$auto(0x401, 0x0) shmat$auto(0x0, &(0x7f0000000000)='(\x00', 0xfffffffb) 1.584860176s ago: executing program 3 (id=4263): r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000540)='/dev/ttyS2\x00', 0x201, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_LINKMODES_GET(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r2, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7ff}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x101}]}]}, 0x28}}, 0x28008001) (async) ioctl$auto_TIOCSTI2(r0, 0x5412, &(0x7f0000000040)) 1.291326362s ago: executing program 3 (id=4264): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x2, 0x0) openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f0000000100)={0x20041, 0x9, 0x2}, 0x18) socket(0x2, 0x1, 0x106) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) mmap$auto(0x0, 0xe983, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) r2 = socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) io_uring_setup$auto(0x401, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$auto(r2, 0x84, 0x1, 0x0, 0x0) r3 = epoll_create$auto(0x70c) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000a00), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_LISTENER_GET(r4, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000a40)={0x14, r5, 0x1, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0xc800}, 0x20004080) mmap$auto(0x0, 0x5, 0xdf, 0x9b72, 0x2, 0x8000) socketpair$auto(0x1, 0x803, 0x3800, 0x0) r6 = socket(0x15, 0x5, 0x0) getsockopt$auto(r6, 0x114, 0x271f, 0xfffffffffffffffc, 0x0) epoll_ctl$auto(r3, 0x1, r0, 0x0) ioctl$auto_RNDADDTOENTCNT(r3, 0x40045201, &(0x7f0000000000)=0x9de9) socket(0x10, 0x2, 0x0) statmount$auto(0x0, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x828, 0x9, 0x8000000000000000, 0x9f, 0x7, 0x9, 0x8, 0x2, 0x9, 0x3, 0x8, 0x0, 0x200000000000f, 0x100, 0x1, 0xfff, 0x2cf8, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0xe3c, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES8=0x0], 0x1ac}, 0x1, 0x0, 0x0, 0x240c0000}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/debug/tracing/events/vmalloc/filter\x00', 0x210800, 0x0) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 608.925792ms ago: executing program 1 (id=4265): openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x240882, 0x0) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/pagemap\x00', 0x80240, 0x0) mmap$auto(0x0, 0x400008, 0x6a1, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x7ffffffffffffffc, 0xc) statmount$auto(0x0, &(0x7f0000000800)={0x8, 0x1, 0xc, 0x3, 0xffff, 0x940, 0x1ffe0, 0x3, 0x6, 0x2, 0x9, 0x5, 0x2, 0x7, 0xb0, 0x6, 0xfffffffffffffff8, 0xfffffffc, 0x4, 0x7, 0x0, 0x3, 0x9, 0x0, 0x0, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0xfffffffffffffffe, 0x200000000, 0x8, 0xea7, 0x0, 0x1, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x1fe, 0x81) futex_waitv$auto(0x0, 0x1, 0x0, 0x0, 0x623d) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) clone$auto(0x20003b11, 0x8, 0x0, 0x0, 0x7) mmap$auto(0x0, 0x400009, 0x20df, 0x9b72, 0xffffffffffffffff, 0x8000) mseal$auto(0x0, 0x7dda, 0x0) mmap$auto(0x0, 0x2020009, 0x7, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x4000000000002) r0 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000980)='/proc/self/pagemap\x00', 0x2, 0x0) read$auto(r0, 0x0, 0x39b8) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) madvise$auto(0x110c230000, 0x1fffffe, 0x9) name_to_handle_at$auto(0xffffffffffffffff, &(0x7f00000001c0)='/\x00', 0x0, 0x0, 0x1001) mmap$auto(0x0, 0x40009, 0x3, 0x9b72, 0x7, 0x28000) unshare$auto(0x40000080) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x14be02, 0x0) pread64$auto(0xffffffffffffffff, 0x0, 0xeda5, 0xc86) r1 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/controlC1\x00', 0x2000, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_READ(r1, 0xc4c85512, &(0x7f00000002c0)={{@raw=0x5, 0x7aabb7ea, 0x0, 0xa2, "c6e47a44a36664a5e709f0e4c97056bc9fa32c617bb88dc98fa7591aefc4647f5af349f8e1e79c823b22958f"}, 0x1, @enumerated=@item=[0x5, 0x1, 0x1, 0xc, 0x4, 0x6, 0x0, 0x8, 0x4, 0x3, 0x7, 0x0, 0x3, 0x40, 0x40, 0x40, 0x5, 0x4, 0x8, 0x7, 0x8, 0x3, 0x6820, 0xb3, 0x9efe, 0x6, 0x72, 0x8, 0x5, 0x931c, 0x2f, 0x3, 0xff, 0xfffffffb, 0x80000000, 0x74814ca1, 0x0, 0xd0, 0x20, 0x3, 0x6, 0x10001, 0x5, 0x0, 0xffffffd9, 0x9, 0x3, 0x10, 0x3, 0x12, 0x6578, 0xfffffff9, 0x2, 0x1b, 0xa9, 0x6, 0x7, 0x3, 0xca92, 0x82, 0x9, 0x2, 0xa, 0xb4b3, 0x2, 0x7, 0x3ff, 0x6, 0x5, 0x9, 0x63a4183b, 0x0, 0x4d84, 0x3bc, 0x2, 0x0, 0x8, 0x10, 0x10000, 0x30f5, 0x8000, 0x56f, 0x7, 0x4, 0x1ff, 0x10001, 0x3, 0xffff, 0x40, 0x17, 0x8, 0x6, 0x6, 0x5, 0x1ff, 0x65bb, 0x29, 0x7, 0xfffffffe, 0x4, 0x5, 0x2, 0x3, 0xf2, 0xe, 0x0, 0x6, 0xffffffff, 0x0, 0xa896, 0x2, 0x1, 0x200, 0x7, 0x2, 0x8, 0x4, 0xf04, 0x6, 0x3, 0xe9b, 0x12d, 0x9, 0x4, 0x5, 0x3, 0x8, 0x40000000], "4570dcfd140074f863fc1385c4fd7abe6fce96c0b442897f58fd7d975d164deff4eef5b9f9173fa400163669eae95125d4bd68ca00000000000000008d501b1329af8d4108ac0400000000040000a1b2dfae0f309c6ea588833d7d134b13d8cb3ef95bf5ed43801c280c02a5a853512e6f730d43226f00af1c5ac268ecc1d18f"}) waitid$auto_P_PGID(0x2, 0x0, 0x0, 0x4, 0x0) writev$auto(0x3, 0x0, 0x8) r2 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0) write$auto(r2, &(0x7f0000000600)='1\x00\\\xa0\x04\x06\x00\x00\x00*\x8d\x14\xfa 3\x00\xad1\xcc\xeb&{q\xe0$\xcd\x81Zm\xeb\xe39LC{\xf8\xa09\xe9\x05\xfc\xddUw4e\xc6\t}k\x14\xcah\xba\x16\xdc\x00\x88\x11\x000\xb3z\xe4\xb9\x97\x90z\xb41&YH\xd6\xa2\x06\xbc \b\xd7\xee\x8a:\xd9\x88\x8f\x06)l\xe4\x83\xbc\xd1wOa\xb6\x93\xe7\xb7\xbb\xdc\x98\xba\\\x15\x0e\xdc1D\x8b@\x9btfi\xaf\xdf\xee\v\x8e\xa2P\x93\x19\xea\x04\x00\x00\x00\x00\x00\x00\x005=\xc0\x9d-\xaf\xfd\xc7\x87\x00\x00\x00\xe6f\x00\xa4q\xec\x82\x95\x01\xfc7\x86\xd0\xd2\x93\xa7?\xc5\xf3\xaf\xe5\x17\x96\xc6\xbd=\x9a=\xe8\xf22\xab\x83\x9f\xc2\xc2\x8f\x1fQ|\x91&\x15\x0f\x18\xbc\xd3\xd6\xd7P\bTb\xfaL\xfcio\xa3\xe1d#-R\x91}\xe4\x88\xf6\xcc\xd5e\xb1Va\xa4Z\'w\xee\x94`>\x99\x00\xef\xe5\x9cs\xaa\x8e<\x96\xafgM\xadY\xae\xf5\xe4\xb3\x9d\x18\x0f\xcc\x80\tGb\xf5\x8c\xf4\xbc\xaf\x7f\x87\'\x9f\x0ff\x03m\xaf+D\xee\xcd\xd9\xfe\xe2)\x830}\xcc\xadC\xdd\xea\xb1\x8d\x06xj^U\xc0<\xfe\xc3U\xf8\x1ff\xe1\xd8\x14\t\xa8l]\xeb\xb6\xef\x04\x8f\xff\xfc\x97\x91\xdbN\x81\xfd\xf2\x9e\x18\x85G\xc7\xef\x86;\xd5\xd9\xd8\x18wq.%\xa9l\xc8\xdaC\x93\xc6\xc6\xd5p8\xa5\xb1\xd78\xcf+n\xf7T6\t0\xdb`\x88\x02\x92t\xabh\x91\xea\xcc\xb8\x0f~\x1f\xf3\\\xcd3\x99\xc57y\xa4\nM\xee \xc1\x81\x80\xf8I9\'\x97\xe9Y\xec\xf4\x05\xac\xe2Q\x15\xec\xc3z)(\xb9 \b\x00\x00\x00|\x852\xc15\x93\x83\xb2\xf4\x87/\xba>\xc2\x9d\xc5\xf9\x19-V\xb8\xc9\x88z\b\xb7\xe3\xad\xdc\xfb\x1eyg\x80\x99\xd9\x88\x1be\xec6\x7f\x15\xf9\xcf2\x9b\xb0\xbf\x00\xb4\x98\x89\xf9\xa6\xf1>b\xd5', 0x4db) 0s ago: executing program 2 (id=4266): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) preadv2$auto(r0, &(0x7f0000000280)={0x0, 0x80000000}, 0x6, 0x3, 0x4, 0x2e) ioctl$auto_BLKFLSBUF(r0, 0x1261, 0x0) write$auto(0xca, 0x0, 0x0) r1 = open(&(0x7f0000000100)='.\x00', 0x0, 0x408) getdents$auto(r1, 0x0, 0x400018) read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000000040)=""/186, 0xba) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) lstat$auto(0x0, &(0x7f0000000180)={0x3, 0x9, 0xf, 0x5, 0x0, 0xee01, 0x0, 0x10, 0x7, 0x7, 0x23, 0x5319, 0x71, 0x6, 0xfffffffffffffff8, 0x40, 0x9}) timerfd_create$auto(0x9, 0x0) r3 = socket(0xa, 0x1, 0x84) close_range$auto(0x2, 0x8, 0x0) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) setsockopt$auto(0x3, 0x1, 0x10, 0x0, 0x9) recvmmsg$auto(r3, &(0x7f0000000240)={{0x0, 0xbd, 0x0, 0x8, 0x0, 0x80, 0x9}, 0xfffffffb}, 0x4, 0x8, 0x0) close_range$auto(0x2, 0xffffffffffffffff, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x18, 0xa, 0x1) socket(0xb, 0x8000d, 0x0) socket(0x18, 0xa, 0x1) socket(0xa, 0x2, 0x0) r4 = landlock_create_ruleset$auto(&(0x7f0000000140)={0xdaa0, 0x1, 0x9}, 0x9, 0x0) landlock_restrict_self$auto(r4, 0x3) connect$auto(0x3, &(0x7f00000006c0)=@in={0x2, 0x7, @local}, 0x55) syz_genetlink_get_family_id$auto_nl80211(0x0, r2) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r2) kernel console output (not intermixed with test programs): y -2048; fix this program [ 1291.780212][T24063] FAULT_INJECTION: forcing a failure. [ 1291.780212][T24063] name failslab, interval 1, probability 0, space 0, times 0 [ 1291.930371][T24063] CPU: 0 UID: 0 PID: 24063 Comm: syz.3.3752 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1291.930406][T24063] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1291.930414][T24063] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1291.930425][T24063] Call Trace: [ 1291.930432][T24063] [ 1291.930440][T24063] dump_stack_lvl+0x100/0x190 [ 1291.930468][T24063] should_fail_ex.cold+0x5/0xa [ 1291.930492][T24063] should_failslab+0xc2/0x120 [ 1291.930520][T24063] __kmalloc_cache_noprof+0x91/0x6c0 [ 1291.930538][T24063] ? rcu_is_watching+0x12/0xc0 [ 1291.930563][T24063] ? snd_card_file_add+0x52/0x320 [ 1291.930595][T24063] ? __pfx_snd_pcm_playback_open+0x10/0x10 [ 1291.930616][T24063] snd_card_file_add+0x52/0x320 [ 1291.930642][T24063] ? snd_lookup_minor_data+0xc7/0x180 [ 1291.930669][T24063] ? __pfx_snd_pcm_playback_open+0x10/0x10 [ 1291.930690][T24063] snd_pcm_open+0xf1/0x710 [ 1291.930710][T24063] ? __mutex_unlock_slowpath+0x35d/0x930 [ 1291.930743][T24063] ? __pfx_snd_pcm_open+0x10/0x10 [ 1291.930762][T24063] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1291.930802][T24063] ? __pfx_snd_pcm_playback_open+0x10/0x10 [ 1291.930822][T24063] snd_pcm_playback_open+0x86/0xe0 [ 1291.930851][T24063] snd_open+0x201/0x450 [ 1291.930877][T24063] ? __pfx_snd_open+0x10/0x10 [ 1291.930902][T24063] chrdev_open+0x234/0x6a0 [ 1291.930921][T24063] ? __pfx_apparmor_file_open+0x10/0x10 [ 1291.930943][T24063] ? __pfx_chrdev_open+0x10/0x10 [ 1291.930964][T24063] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 1291.930991][T24063] do_dentry_open+0x6ab/0x14d0 [ 1291.931010][T24063] ? __pfx_chrdev_open+0x10/0x10 [ 1291.931034][T24063] vfs_open+0x82/0x3f0 [ 1291.931060][T24063] path_openat+0x2873/0x4280 [ 1291.931088][T24063] ? __pfx_path_openat+0x10/0x10 [ 1291.931113][T24063] do_file_open+0x20e/0x430 [ 1291.931134][T24063] ? __pfx_do_file_open+0x10/0x10 [ 1291.931168][T24063] ? alloc_fd+0x471/0x7a0 [ 1291.931189][T24063] ? do_getname+0x191/0x390 [ 1291.931214][T24063] do_sys_openat2+0x10f/0x1e0 [ 1291.931239][T24063] ? __pfx_do_sys_openat2+0x10/0x10 [ 1291.931265][T24063] ? do_raw_spin_lock+0x128/0x260 [ 1291.931291][T24063] __x64_sys_openat+0x12d/0x210 [ 1291.931316][T24063] ? __pfx___x64_sys_openat+0x10/0x10 [ 1291.931350][T24063] do_syscall_64+0x115/0x840 [ 1291.931366][T24063] ? clear_bhb_loop+0x40/0x90 [ 1291.931388][T24063] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1291.931407][T24063] RIP: 0033:0x7f1174f9ce59 [ 1291.931423][T24063] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1291.931441][T24063] RSP: 002b:00007f1175eb6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1291.931459][T24063] RAX: ffffffffffffffda RBX: 00007f1175216090 RCX: 00007f1174f9ce59 [ 1291.931471][T24063] RDX: 0000000000000001 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 1291.931483][T24063] RBP: 00007f1175032e6f R08: 0000000000000000 R09: 0000000000000000 [ 1291.931494][T24063] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1291.931505][T24063] R13: 00007f1175216128 R14: 00007f1175216090 R15: 00007ffc80a32148 [ 1291.931527][T24063] [ 1293.329984][T24075] program syz.2.3756 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1293.423895][T24075] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1294.609972][T24084] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3757'. [ 1294.890051][T24087] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1294.956875][T24087] random: crng reseeded on system resumption [ 1297.474814][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 1297.483494][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 1297.798002][T24126] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1297.882976][T24126] random: crng reseeded on system resumption [ 1300.171687][T24144] ERROR: Out of memory at tomoyo_memory_ok. [ 1302.584706][T24138] Process accounting resumed [ 1302.593598][T24143] Process accounting paused [ 1302.842404][T11593] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 1302.854875][T11593] Bluetooth: hci1: Invalid handle: 0x3a4a > 0x0eff [ 1302.865181][T11593] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18 [ 1302.872827][T11593] Bluetooth: hci2: Invalid handle: 0x3a4a > 0x0eff [ 1305.479929][T24173] Process accounting resumed [ 1305.603330][T24174] Process accounting resumed [ 1306.114059][T24204] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1306.831440][T24203] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3780'. [ 1308.585466][T11593] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 1308.593191][T11593] Bluetooth: hci1: Invalid handle: 0x3a4a > 0x0eff [ 1309.252218][T11593] Bluetooth: hci5: unexpected subevent 0x01 length: 123 > 18 [ 1309.259991][T11593] Bluetooth: hci5: Invalid handle: 0x3a4a > 0x0eff [ 1310.107375][T23251] Process accounting resumed [ 1310.237397][T24234] Process accounting resumed [ 1311.085718][T24249] usb usb35: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1311.251611][T24249] vhci_hcd vhci_hcd.1: SetHubDepth req not supported for USB 2.0 roothub [ 1311.343883][T24239] Process accounting resumed [ 1312.584304][T24268] zswap: compressor not available [ 1314.266951][T24286] ERROR: Out of memory at tomoyo_memory_ok. [ 1315.342367][T11593] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 1315.351830][T11593] Bluetooth: hci3: Invalid handle: 0x3a4a > 0x0eff [ 1315.504671][T24297] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1316.223995][T23251] Process accounting resumed [ 1317.212954][T24314] ERROR: Out of memory at tomoyo_memory_ok. [ 1317.916523][T24293] Process accounting resumed [ 1320.384776][T24347] ERROR: Out of memory at tomoyo_memory_ok. [ 1321.261270][T11593] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18 [ 1321.271719][T11593] Bluetooth: hci2: Invalid handle: 0x3a4a > 0x0eff [ 1321.575967][T11593] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 1321.583658][T11593] Bluetooth: hci3: Invalid handle: 0x3a4a > 0x0eff [ 1323.134521][ T5745] Process accounting resumed [ 1323.286297][T24361] Process accounting resumed [ 1323.686478][ T5745] Process accounting resumed [ 1323.886195][T24374] Process accounting resumed [ 1324.678071][T24389] sg_write: data in/out 124/2 bytes for SCSI command 0x61-- guessing data in; [ 1324.678071][T24389] program syz.4.3817 not setting count and/or reply_len properly [ 1326.802239][T24416] random: crng reseeded on system resumption [ 1328.845411][T24429] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1331.212412][T24450] netlink: 'syz.3.3829': attribute type 23 has an invalid length. [ 1331.374910][T24450] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3829'. [ 1331.562373][T24453] netlink: 504 bytes leftover after parsing attributes in process `syz.4.3830'. [ 1331.623596][T24454] netlink: 354 bytes leftover after parsing attributes in process `syz.4.3830'. [ 1332.906224][T11593] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 1333.292594][T24479] ERROR: Out of memory at tomoyo_memory_ok. [ 1333.890878][T24492] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1334.186442][T24468] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1334.248097][T24468] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1334.575563][T11593] Bluetooth: hci5: command 0x0c1a tx timeout [ 1336.247978][T11593] Bluetooth: hci0: command 0x0c1a tx timeout [ 1336.328243][T11593] Bluetooth: hci1: command 0x0c1a tx timeout [ 1336.363498][T24468] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1336.380321][T24468] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1336.410403][T24468] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1336.423725][T24468] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1336.446962][T24468] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1336.783805][T24496] netlink: 504 bytes leftover after parsing attributes in process `syz.5.3841'. [ 1336.875286][T24503] netlink: 354 bytes leftover after parsing attributes in process `syz.5.3841'. [ 1337.493819][T24517] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3848'. [ 1337.720892][T24517] bridge0: entered promiscuous mode [ 1337.755000][T24517] bridge0: entered allmulticast mode [ 1338.113429][T24508] program syz.3.3847 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1338.124646][T24525] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3849'. [ 1338.192572][T24508] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1338.218910][T24525] nbd: must specify at least one socket [ 1338.378850][T24531] ERROR: Out of memory at tomoyo_memory_ok. [ 1338.398449][T17449] Bluetooth: hci2: command 0x0c1a tx timeout [ 1338.404729][T24493] Bluetooth: hci1: command 0x0c1a tx timeout [ 1338.478200][T17449] Bluetooth: hci3: command 0x0c1a tx timeout [ 1340.548180][T17449] Bluetooth: hci3: command 0x0c1a tx timeout [ 1341.569045][T24511] Process accounting paused [ 1341.681050][T24537] Process accounting paused [ 1341.951270][T17449] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18 [ 1341.958787][T17449] Bluetooth: hci2: Invalid handle: 0x3a4a > 0x0eff [ 1342.497183][T24558] __vm_enough_memory: pid: 24558, comm: syz.5.3854, bytes: 4398046457856 not enough memory for the allocation [ 1342.618547][T17449] Bluetooth: hci3: command 0x0c1a tx timeout [ 1343.302701][ T10] Process accounting resumed [ 1343.457983][T24545] Process accounting resumed [ 1344.243906][T24582] sd 0:0:1:0: PR command failed: 1026 [ 1344.297075][T24582] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 1344.345589][T24582] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 1344.950660][T24585] netlink: 342 bytes leftover after parsing attributes in process `syz.4.3862'. [ 1345.389173][T24493] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18 [ 1345.397091][T24493] Bluetooth: hci2: Invalid handle: 0x3a4a > 0x0eff [ 1346.962957][T24604] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1347.080374][T17449] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 1347.572867][T24610] busy [ 1347.980000][T17449] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 1347.987591][T17449] Bluetooth: hci1: Invalid handle: 0x3a4a > 0x0eff [ 1348.050472][T24590] Process accounting resumed [ 1349.810667][T24606] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1349.887186][T24606] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1349.915695][ T5745] Process accounting resumed [ 1349.933632][T24606] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1349.970405][T24638] __vm_enough_memory: pid: 24638, comm: syz.4.3876, bytes: 4398046457856 not enough memory for the allocation [ 1349.993982][T24606] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1350.041887][T24606] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1350.064184][T24620] Process accounting resumed [ 1350.084197][T24639] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1350.421074][T17449] Bluetooth: hci5: command 0x0c1a tx timeout [ 1350.778165][T24641] FAULT_INJECTION: forcing a failure. [ 1350.778165][T24641] name failslab, interval 1, probability 0, space 0, times 0 [ 1351.085674][T17449] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 1351.093376][T17449] Bluetooth: hci1: Invalid handle: 0x3a4a > 0x0eff [ 1351.105442][T24641] CPU: 0 UID: 0 PID: 24641 Comm: syz.4.3876 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1351.105476][T24641] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1351.105484][T24641] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1351.105495][T24641] Call Trace: [ 1351.105502][T24641] [ 1351.105510][T24641] dump_stack_lvl+0x100/0x190 [ 1351.105538][T24641] should_fail_ex.cold+0x5/0xa [ 1351.105563][T24641] should_failslab+0xc2/0x120 [ 1351.105590][T24641] __kmalloc_cache_noprof+0x91/0x6c0 [ 1351.105610][T24641] ? find_held_lock+0x2b/0x80 [ 1351.105634][T24641] ? fqdir_init+0x4f/0x1f0 [ 1351.105729][T24641] fqdir_init+0x4f/0x1f0 [ 1351.105759][T24641] nf_ct_net_init+0x3d/0x370 [ 1351.105799][T24641] ? __pfx_nf_ct_net_init+0x10/0x10 [ 1351.105820][T24641] ops_init+0x1e2/0x5f0 [ 1351.105846][T24641] setup_net+0x118/0x3a0 [ 1351.105871][T24641] ? __pfx_setup_net+0x10/0x10 [ 1351.105895][T24641] ? mutex_init_lockdep+0xf1/0x120 [ 1351.105925][T24641] copy_net_ns+0x46f/0x7c0 [ 1351.105952][T24641] create_new_namespaces+0x3ea/0xac0 [ 1351.105979][T24641] unshare_nsproxy_namespaces+0xf2/0x220 [ 1351.106002][T24641] ksys_unshare+0x438/0xab0 [ 1351.106030][T24641] ? __pfx_ksys_unshare+0x10/0x10 [ 1351.106063][T24641] __x64_sys_unshare+0x31/0x40 [ 1351.106088][T24641] do_syscall_64+0x115/0x840 [ 1351.106106][T24641] ? clear_bhb_loop+0x40/0x90 [ 1351.106129][T24641] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1351.106147][T24641] RIP: 0033:0x7fb61759ce59 [ 1351.106164][T24641] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1351.106183][T24641] RSP: 002b:00007fb618521028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1351.106201][T24641] RAX: ffffffffffffffda RBX: 00007fb617816090 RCX: 00007fb61759ce59 [ 1351.106214][T24641] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 1351.106225][T24641] RBP: 00007fb617632e6f R08: 0000000000000000 R09: 0000000000000000 [ 1351.106237][T24641] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1351.106248][T24641] R13: 00007fb617816128 R14: 00007fb617816090 R15: 00007ffff501a6e8 [ 1351.106272][T24641] [ 1352.001104][T24493] Bluetooth: hci1: command 0x0c1a tx timeout [ 1352.007476][T24493] Bluetooth: hci0: command 0x0c1a tx timeout [ 1352.015801][T24493] Bluetooth: hci2: command 0x0c1a tx timeout [ 1352.141294][T17449] Bluetooth: hci3: command 0x0c1a tx timeout [ 1353.127091][T17449] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 1353.136532][T17449] Bluetooth: hci3: Invalid handle: 0x3a4a > 0x0eff [ 1353.575568][T24653] Process accounting resumed [ 1354.077871][T24670] netlink: 504 bytes leftover after parsing attributes in process `syz.3.3884'. [ 1354.143727][T24672] netlink: 354 bytes leftover after parsing attributes in process `syz.3.3884'. [ 1355.285255][ T10] Process accounting resumed [ 1355.441977][T24678] Process accounting resumed [ 1356.222742][T24698] FAULT_INJECTION: forcing a failure. [ 1356.222742][T24698] name failslab, interval 1, probability 0, space 0, times 0 [ 1356.370958][T24698] CPU: 0 UID: 0 PID: 24698 Comm: syz.2.3889 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1356.370993][T24698] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1356.371000][T24698] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1356.371011][T24698] Call Trace: [ 1356.371018][T24698] [ 1356.371026][T24698] dump_stack_lvl+0x100/0x190 [ 1356.371055][T24698] should_fail_ex.cold+0x5/0xa [ 1356.371080][T24698] should_failslab+0xc2/0x120 [ 1356.371108][T24698] kmem_cache_alloc_noprof+0x91/0x6a0 [ 1356.371132][T24698] ? sk_prot_alloc+0x60/0x2a0 [ 1356.371163][T24698] sk_prot_alloc+0x60/0x2a0 [ 1356.371190][T24698] sk_alloc+0x36/0xe80 [ 1356.371212][T24698] tipc_sk_create+0xfc/0x23c0 [ 1356.371247][T24698] ? __sock_create+0x2f3/0x860 [ 1356.371275][T24698] ? __sock_create+0x2f3/0x860 [ 1356.371308][T24698] __sock_create+0x339/0x860 [ 1356.371340][T24698] __sys_socketpair+0x1e4/0x5b0 [ 1356.371360][T24698] ? __pfx___sys_socketpair+0x10/0x10 [ 1356.371391][T24698] ? xfd_validate_state+0x129/0x190 [ 1356.371420][T24698] __x64_sys_socketpair+0x96/0x100 [ 1356.371437][T24698] ? lockdep_hardirqs_on+0x78/0x100 [ 1356.371466][T24698] do_syscall_64+0x115/0x840 [ 1356.371482][T24698] ? clear_bhb_loop+0x40/0x90 [ 1356.371504][T24698] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1356.371522][T24698] RIP: 0033:0x7f784a99ce59 [ 1356.371538][T24698] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1356.371556][T24698] RSP: 002b:00007f784b84a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 1356.371574][T24698] RAX: ffffffffffffffda RBX: 00007f784ac16090 RCX: 00007f784a99ce59 [ 1356.371586][T24698] RDX: 8000000000000000 RSI: 0000000000000004 RDI: 000000000000001e [ 1356.371597][T24698] RBP: 00007f784aa32e6f R08: 0000000000000000 R09: 0000000000000000 [ 1356.371608][T24698] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1356.371619][T24698] R13: 00007f784ac16128 R14: 00007f784ac16090 R15: 00007ffc502fca58 [ 1356.371642][T24698] [ 1357.903164][T18779] Process accounting resumed [ 1357.946109][T24691] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1357.992503][T24691] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1358.033600][T24691] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1358.425015][T24691] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1358.460463][T24691] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1358.605860][T24713] bond0: option slaves: interface -]=,Do does not exist! [ 1358.631749][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 1358.639163][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 1359.030781][T17449] Bluetooth: hci5: unexpected subevent 0x01 length: 123 > 18 [ 1359.038488][T17449] Bluetooth: hci5: Invalid handle: 0x3a4a > 0x0eff [ 1359.375140][T24708] Process accounting resumed [ 1359.657645][T17449] Bluetooth: hci5: command 0x0c1a tx timeout [ 1360.055798][T24493] Bluetooth: hci0: command 0x0c1a tx timeout [ 1360.061881][T17449] Bluetooth: hci1: command 0x0c1a tx timeout [ 1360.139980][T24735] ptrace attach of "ci-qemu-gce-upstream-auto/syz-executor exec"[23735] was attempted by ""[24735] [ 1360.235667][T17449] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18 [ 1360.243250][T17449] Bluetooth: hci2: Invalid handle: 0x3a4a > 0x0eff [ 1360.453858][T24493] Bluetooth: hci2: command 0x0c1a tx timeout [ 1360.533752][T24493] Bluetooth: hci3: command 0x0c1a tx timeout [ 1361.274850][T24717] Process accounting resumed [ 1361.638980][ T5745] Process accounting resumed [ 1361.824497][T24746] FAULT_INJECTION: forcing a failure. [ 1361.824497][T24746] name failslab, interval 1, probability 0, space 0, times 0 [ 1361.910759][T24746] CPU: 0 UID: 0 PID: 24746 Comm: syz.3.3898 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1361.910793][T24746] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1361.910801][T24746] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1361.910813][T24746] Call Trace: [ 1361.910820][T24746] [ 1361.910828][T24746] dump_stack_lvl+0x100/0x190 [ 1361.910857][T24746] should_fail_ex.cold+0x5/0xa [ 1361.910885][T24746] should_failslab+0xc2/0x120 [ 1361.910912][T24746] __kmalloc_cache_noprof+0x91/0x6c0 [ 1361.910932][T24746] ? rcu_is_watching+0x12/0xc0 [ 1361.910957][T24746] ? snd_card_file_add+0x52/0x320 [ 1361.910988][T24746] ? __pfx_snd_pcm_playback_open+0x10/0x10 [ 1361.911009][T24746] snd_card_file_add+0x52/0x320 [ 1361.911036][T24746] ? snd_lookup_minor_data+0xc7/0x180 [ 1361.911064][T24746] ? __pfx_snd_pcm_playback_open+0x10/0x10 [ 1361.911085][T24746] snd_pcm_open+0xf1/0x710 [ 1361.911105][T24746] ? __mutex_unlock_slowpath+0x35d/0x930 [ 1361.911139][T24746] ? __pfx_snd_pcm_open+0x10/0x10 [ 1361.911159][T24746] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1361.911199][T24746] ? __pfx_snd_pcm_playback_open+0x10/0x10 [ 1361.911219][T24746] snd_pcm_playback_open+0x86/0xe0 [ 1361.911240][T24746] snd_open+0x201/0x450 [ 1361.911272][T24746] ? __pfx_snd_open+0x10/0x10 [ 1361.911298][T24746] chrdev_open+0x234/0x6a0 [ 1361.911317][T24746] ? __pfx_apparmor_file_open+0x10/0x10 [ 1361.911339][T24746] ? __pfx_chrdev_open+0x10/0x10 [ 1361.911359][T24746] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 1361.911386][T24746] do_dentry_open+0x6ab/0x14d0 [ 1361.911405][T24746] ? __pfx_chrdev_open+0x10/0x10 [ 1361.911430][T24746] vfs_open+0x82/0x3f0 [ 1361.911456][T24746] path_openat+0x2873/0x4280 [ 1361.911485][T24746] ? __pfx_path_openat+0x10/0x10 [ 1361.911511][T24746] do_file_open+0x20e/0x430 [ 1361.911532][T24746] ? __pfx_do_file_open+0x10/0x10 [ 1361.911568][T24746] ? alloc_fd+0x471/0x7a0 [ 1361.911590][T24746] ? do_getname+0x191/0x390 [ 1361.911619][T24746] do_sys_openat2+0x10f/0x1e0 [ 1361.911644][T24746] ? __pfx_do_sys_openat2+0x10/0x10 [ 1361.911670][T24746] ? do_raw_spin_lock+0x128/0x260 [ 1361.911697][T24746] __x64_sys_openat+0x12d/0x210 [ 1361.911723][T24746] ? __pfx___x64_sys_openat+0x10/0x10 [ 1361.911757][T24746] do_syscall_64+0x115/0x840 [ 1361.911773][T24746] ? clear_bhb_loop+0x40/0x90 [ 1361.911796][T24746] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1361.911815][T24746] RIP: 0033:0x7f1174f9ce59 [ 1361.911830][T24746] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1361.911848][T24746] RSP: 002b:00007f1175eb6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1361.911866][T24746] RAX: ffffffffffffffda RBX: 00007f1175216090 RCX: 00007f1174f9ce59 [ 1361.911879][T24746] RDX: 0000000000000001 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 1361.911890][T24746] RBP: 00007f1175032e6f R08: 0000000000000000 R09: 0000000000000000 [ 1361.911901][T24746] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1361.911912][T24746] R13: 00007f1175216128 R14: 00007f1175216090 R15: 00007ffc80a32148 [ 1361.911934][T24746] [ 1362.787535][T24733] Process accounting resumed [ 1363.480665][T24759] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3901'. [ 1364.059241][T24765] ERROR: Out of memory at tomoyo_memory_ok. [ 1366.022689][T23251] Process accounting resumed [ 1366.150076][T24773] Process accounting resumed [ 1368.261453][T24802] netlink: 'syz.3.3907': attribute type 1 has an invalid length. [ 1368.317169][T24802] netlink: 33 bytes leftover after parsing attributes in process `syz.3.3907'. [ 1369.690721][T24810] FAULT_INJECTION: forcing a failure. [ 1369.690721][T24810] name failslab, interval 1, probability 0, space 0, times 0 [ 1369.770187][T24810] CPU: 0 UID: 0 PID: 24810 Comm: syz.2.3910 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1369.770222][T24810] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1369.770230][T24810] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1369.770241][T24810] Call Trace: [ 1369.770249][T24810] [ 1369.770257][T24810] dump_stack_lvl+0x100/0x190 [ 1369.770286][T24810] should_fail_ex.cold+0x5/0xa [ 1369.770321][T24810] should_failslab+0xc2/0x120 [ 1369.770349][T24810] __kmalloc_noprof+0xfc/0x820 [ 1369.770375][T24810] ? apply_wqattrs_prepare+0xfe/0xbb0 [ 1369.770400][T24810] apply_wqattrs_prepare+0xfe/0xbb0 [ 1369.770420][T24810] ? __alloc_workqueue+0xafd/0x1940 [ 1369.770451][T24810] apply_workqueue_attrs_locked+0x64/0xe0 [ 1369.770474][T24810] __alloc_workqueue+0xf55/0x1940 [ 1369.770505][T24810] alloc_workqueue_noprof+0xc7/0x130 [ 1369.770529][T24810] ? __pfx_alloc_workqueue_noprof+0x10/0x10 [ 1369.770557][T24810] ? __kmalloc_noprof+0x343/0x820 [ 1369.770581][T24810] ? ieee80211_register_hw+0x16c0/0x4580 [ 1369.770609][T24810] ieee80211_register_hw+0x2117/0x4580 [ 1369.770632][T24810] ? mark_lock+0x9c1/0xa20 [ 1369.770667][T24810] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 1369.770695][T24810] ? __pfx___debug_object_init+0x10/0x10 [ 1369.770732][T24810] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1369.770760][T24810] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 1369.770783][T24810] ? __hrtimer_setup+0x208/0x330 [ 1369.770807][T24810] mac80211_hwsim_new_radio+0x2acc/0x64c0 [ 1369.770905][T24810] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 1369.770938][T24810] hwsim_new_radio_nl+0xc6b/0x13f0 [ 1369.770964][T24810] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1369.770994][T24810] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1e5/0x2f0 [ 1369.771020][T24810] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1ef/0x2f0 [ 1369.771047][T24810] genl_family_rcv_msg_doit+0x214/0x300 [ 1369.771070][T24810] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1369.771090][T24810] ? genl_get_cmd+0x3e7/0x760 [ 1369.771114][T24810] ? bpf_lsm_capable+0x9/0x10 [ 1369.771136][T24810] ? security_capable+0x80/0x260 [ 1369.771155][T24810] ? ns_capable+0xd2/0xf0 [ 1369.771181][T24810] genl_rcv_msg+0x560/0x800 [ 1369.771203][T24810] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1369.771223][T24810] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1369.771255][T24810] netlink_rcv_skb+0x159/0x420 [ 1369.771285][T24810] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1369.771306][T24810] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1369.771351][T24810] ? netlink_deliver_tap+0x1ae/0xcc0 [ 1369.771383][T24810] genl_rcv+0x28/0x40 [ 1369.771399][T24810] netlink_unicast+0x585/0x850 [ 1369.771432][T24810] ? __pfx_netlink_unicast+0x10/0x10 [ 1369.771468][T24810] netlink_sendmsg+0x8b0/0xda0 [ 1369.771501][T24810] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1369.771534][T24810] ? apparmor_socket_sendmsg+0x15b/0x270 [ 1369.771558][T24810] ____sys_sendmsg+0xa4d/0xbe0 [ 1369.771586][T24810] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1369.771617][T24810] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1369.771656][T24810] ___sys_sendmsg+0x190/0x1e0 [ 1369.771694][T24810] ? __pfx____sys_sendmsg+0x10/0x10 [ 1369.771721][T24810] ? __lock_acquire+0x49f/0x1a40 [ 1369.771767][T24810] __sys_sendmsg+0x160/0x210 [ 1369.771790][T24810] ? __pfx___sys_sendmsg+0x10/0x10 [ 1369.771826][T24810] do_syscall_64+0x115/0x840 [ 1369.771845][T24810] ? clear_bhb_loop+0x40/0x90 [ 1369.771868][T24810] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1369.771887][T24810] RIP: 0033:0x7f784a99ce59 [ 1369.771906][T24810] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1369.771923][T24810] RSP: 002b:00007f784b86b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1369.771942][T24810] RAX: ffffffffffffffda RBX: 00007f784ac15fa0 RCX: 00007f784a99ce59 [ 1369.771954][T24810] RDX: 0000000000040000 RSI: 0000200000000000 RDI: 000000000000000a [ 1369.771965][T24810] RBP: 00007f784aa32e6f R08: 0000000000000000 R09: 0000000000000000 [ 1369.771976][T24810] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1369.771986][T24810] R13: 00007f784ac16038 R14: 00007f784ac15fa0 R15: 00007ffc502fca58 [ 1369.772011][T24810] [ 1373.501146][T24826] NFSD: Failed to start, no listeners configured. [ 1374.080636][T24835] netlink: 504 bytes leftover after parsing attributes in process `syz.3.3917'. [ 1374.157421][T24835] netlink: 354 bytes leftover after parsing attributes in process `syz.3.3917'. [ 1374.395988][T24838] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3918'. [ 1374.605882][T24838] team0 (unregistering): Port device team_slave_0 removed [ 1374.685971][T24838] team0 (unregistering): Port device team_slave_1 removed [ 1378.640291][T24886] ERROR: Out of memory at tomoyo_memory_ok. [ 1379.238261][ T5745] Process accounting resumed [ 1379.348603][T24893] netlink: 504 bytes leftover after parsing attributes in process `syz.3.3929'. [ 1379.421283][T24893] netlink: 354 bytes leftover after parsing attributes in process `syz.3.3929'. [ 1379.950548][T24898] futex_wake_op: syz.3.3930 tries to shift op by -2048; fix this program [ 1380.196785][T24901] FAULT_INJECTION: forcing a failure. [ 1380.196785][T24901] name failslab, interval 1, probability 0, space 0, times 0 [ 1380.352400][T24901] CPU: 0 UID: 0 PID: 24901 Comm: syz.5.3931 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1380.352440][T24901] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1380.352448][T24901] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1380.352459][T24901] Call Trace: [ 1380.352466][T24901] [ 1380.352475][T24901] dump_stack_lvl+0x100/0x190 [ 1380.352510][T24901] should_fail_ex.cold+0x5/0xa [ 1380.352537][T24901] should_failslab+0xc2/0x120 [ 1380.352567][T24901] kmem_cache_alloc_noprof+0x91/0x6a0 [ 1380.352592][T24901] ? do_epoll_ctl_file+0x2375/0x3640 [ 1380.352620][T24901] do_epoll_ctl_file+0x2375/0x3640 [ 1380.352650][T24901] ? __pfx_do_epoll_ctl_file+0x10/0x10 [ 1380.352677][T24901] ? __fget_files+0x215/0x3d0 [ 1380.352700][T24901] ? __fget_files+0x21f/0x3d0 [ 1380.352722][T24901] ? do_epoll_ctl+0xfd/0x1a0 [ 1380.352743][T24901] do_epoll_ctl+0xfd/0x1a0 [ 1380.352765][T24901] ? __pfx_do_epoll_ctl+0x10/0x10 [ 1380.352788][T24901] ? rep_movs_alternative+0x30/0xa0 [ 1380.352817][T24901] __x64_sys_epoll_ctl+0x15c/0x1e0 [ 1380.352840][T24901] ? __pfx___x64_sys_epoll_ctl+0x10/0x10 [ 1380.352870][T24901] do_syscall_64+0x115/0x840 [ 1380.352886][T24901] ? clear_bhb_loop+0x40/0x90 [ 1380.352909][T24901] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1380.352928][T24901] RIP: 0033:0x7ff97379ce59 [ 1380.352945][T24901] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1380.352962][T24901] RSP: 002b:00007ff974613028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 1380.352981][T24901] RAX: ffffffffffffffda RBX: 00007ff973a16090 RCX: 00007ff97379ce59 [ 1380.352993][T24901] RDX: 0000000000000003 RSI: 0000000000000001 RDI: 0000000000000004 [ 1380.353003][T24901] RBP: 00007ff973832e6f R08: 0000000000000000 R09: 0000000000000000 [ 1380.353014][T24901] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1380.353025][T24901] R13: 00007ff973a16128 R14: 00007ff973a16090 R15: 00007ffc72379148 [ 1380.353048][T24901] [ 1381.012789][T24898] 0x000000000001-0x000000020000 : "" [ 1381.157979][T24898] ftl_cs: FTL header corrupt! [ 1381.525710][T24907] ERROR: Out of memory at tomoyo_memory_ok. [ 1382.103768][T24865] Process accounting resumed [ 1382.314908][T24910] busy [ 1383.897038][T24920] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3935'. [ 1385.452712][T24943] FAULT_INJECTION: forcing a failure. [ 1385.452712][T24943] name failslab, interval 1, probability 0, space 0, times 0 [ 1385.543506][T24943] CPU: 0 UID: 0 PID: 24943 Comm: syz.5.3941 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1385.543541][T24943] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1385.543548][T24943] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1385.543559][T24943] Call Trace: [ 1385.543567][T24943] [ 1385.543575][T24943] dump_stack_lvl+0x100/0x190 [ 1385.543604][T24943] should_fail_ex.cold+0x5/0xa [ 1385.543630][T24943] should_failslab+0xc2/0x120 [ 1385.543658][T24943] kmem_cache_alloc_noprof+0x91/0x6a0 [ 1385.543684][T24943] ? __kernfs_new_node+0xd2/0xa10 [ 1385.543707][T24943] __kernfs_new_node+0xd2/0xa10 [ 1385.543728][T24943] ? __pfx___kernfs_new_node+0x10/0x10 [ 1385.543755][T24943] ? find_held_lock+0x2b/0x80 [ 1385.543781][T24943] ? kernfs_root+0xee/0x2a0 [ 1385.543807][T24943] ? kernfs_root+0xee/0x2a0 [ 1385.543839][T24943] kernfs_new_node+0x117/0x150 [ 1385.543862][T24943] __kernfs_create_file+0x53/0x350 [ 1385.543888][T24943] sysfs_add_file_mode_ns+0x207/0x3c0 [ 1385.543927][T24943] sysfs_merge_group+0x194/0x340 [ 1385.543958][T24943] ? __pfx_sysfs_merge_group+0x10/0x10 [ 1385.543990][T24943] ? bus_add_device+0x2e2/0x6c0 [ 1385.544075][T24943] ? __pfx_bus_add_device+0x10/0x10 [ 1385.544096][T24943] ? __pfx_dev_add_physical_location+0x10/0x10 [ 1385.544155][T24943] dpm_sysfs_add+0x237/0x280 [ 1385.544212][T24943] device_add+0x9f4/0x1970 [ 1385.544243][T24943] ? __pfx_device_add+0x10/0x10 [ 1385.544270][T24943] ? lockdep_init_map_type+0x5c/0x250 [ 1385.544291][T24943] ? __init_waitqueue_head+0xca/0x150 [ 1385.544319][T24943] rfkill_register+0x1ad/0xb30 [ 1385.544350][T24943] nfc_register_device+0x11f/0x3e0 [ 1385.544372][T24943] nci_register_device+0x7f1/0xb80 [ 1385.544400][T24943] ? __pfx_nci_register_device+0x10/0x10 [ 1385.544429][T24943] ? lockdep_init_map_type+0x5c/0x250 [ 1385.544451][T24943] virtual_ncidev_open+0x141/0x220 [ 1385.544481][T24943] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 1385.544509][T24943] misc_open+0x26d/0x450 [ 1385.544530][T24943] ? __pfx_misc_open+0x10/0x10 [ 1385.544548][T24943] chrdev_open+0x234/0x6a0 [ 1385.544568][T24943] ? __pfx_apparmor_file_open+0x10/0x10 [ 1385.544591][T24943] ? __pfx_chrdev_open+0x10/0x10 [ 1385.544611][T24943] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 1385.544638][T24943] do_dentry_open+0x6ab/0x14d0 [ 1385.544656][T24943] ? __pfx_chrdev_open+0x10/0x10 [ 1385.544681][T24943] vfs_open+0x82/0x3f0 [ 1385.544708][T24943] path_openat+0x2873/0x4280 [ 1385.544737][T24943] ? __pfx_path_openat+0x10/0x10 [ 1385.544763][T24943] do_file_open+0x20e/0x430 [ 1385.544785][T24943] ? __pfx_do_file_open+0x10/0x10 [ 1385.544821][T24943] ? alloc_fd+0x471/0x7a0 [ 1385.544841][T24943] ? do_getname+0x191/0x390 [ 1385.544867][T24943] do_sys_openat2+0x10f/0x1e0 [ 1385.544893][T24943] ? __pfx_do_sys_openat2+0x10/0x10 [ 1385.544925][T24943] ? __fget_files+0x21f/0x3d0 [ 1385.544948][T24943] __x64_sys_openat+0x12d/0x210 [ 1385.544974][T24943] ? __pfx___x64_sys_openat+0x10/0x10 [ 1385.545009][T24943] do_syscall_64+0x115/0x840 [ 1385.545026][T24943] ? clear_bhb_loop+0x40/0x90 [ 1385.545050][T24943] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1385.545069][T24943] RIP: 0033:0x7ff97379ce59 [ 1385.545087][T24943] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1385.545106][T24943] RSP: 002b:00007ff974634028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1385.545125][T24943] RAX: ffffffffffffffda RBX: 00007ff973a15fa0 RCX: 00007ff97379ce59 [ 1385.545137][T24943] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 1385.545148][T24943] RBP: 00007ff973832e6f R08: 0000000000000000 R09: 0000000000000000 [ 1385.545159][T24943] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1385.545170][T24943] R13: 00007ff973a16038 R14: 00007ff973a15fa0 R15: 00007ffc72379148 [ 1385.545195][T24943] [ 1386.698672][T24954] Process accounting paused [ 1388.508953][T24970] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1389.409989][T24978] hub 3-0:1.0: USB hub found [ 1389.540267][T24978] hub 3-0:1.0: 1 port detected [ 1390.607628][T24978] usb usb3: authorized to connect [ 1391.276129][T24999] Process accounting paused [ 1391.593987][T25005] netlink: 85 bytes leftover after parsing attributes in process `syz.5.3950'. [ 1391.879123][T24983] Process accounting paused [ 1394.831218][T25036] vivid-007: ================= START STATUS ================= [ 1394.918737][T25036] vivid-007: Generate PTS: true [ 1394.984316][T25036] vivid-007: Generate SCR: true [ 1395.111468][T25036] tpg source WxH: 320x240 (Y'CbCr) [ 1395.111491][T25036] tpg field: 1 [ 1395.111499][T25036] tpg crop: (0,0)/320x240 [ 1395.111512][T25036] tpg compose: (0,0)/320x240 [ 1395.111524][T25036] tpg colorspace: 8 [ 1395.111532][T25036] tpg transfer function: 0/0 [ 1395.111541][T25036] tpg Y'CbCr encoding: 0/0 [ 1395.111550][T25036] tpg quantization: 0/0 [ 1395.111559][T25036] tpg RGB range: 0/2 [ 1395.111568][T25036] vivid-007: ================== END STATUS ================== [ 1395.682052][T25048] netlink: 504 bytes leftover after parsing attributes in process `syz.2.3960'. [ 1395.689973][T25048] netlink: 354 bytes leftover after parsing attributes in process `syz.2.3960'. [ 1397.715183][T25075] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3964'. [ 1397.895814][T25083] netlink: 330 bytes leftover after parsing attributes in process `syz.3.3969'. [ 1398.063054][T23633] EXT4-fs (sda1): Delayed block allocation failed for inode 2027 at logical offset 3 with max blocks 3 with error 117 [ 1398.080520][T25075] tunl0: entered promiscuous mode [ 1398.172141][T23633] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1398.172141][T23633] [ 1398.197836][T25075] tunl0: entered allmulticast mode [ 1398.999402][T17449] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 1399.007885][T17449] Bluetooth: hci1: Invalid handle: 0x3a4a > 0x0eff [ 1401.399596][T25123] netlink: 322 bytes leftover after parsing attributes in process `syz.4.3985'. [ 1402.860212][T25152] netlink: 504 bytes leftover after parsing attributes in process `syz.4.3980'. [ 1402.933874][T25154] netlink: 354 bytes leftover after parsing attributes in process `syz.4.3980'. [ 1405.281869][T17449] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 1405.289699][T17449] Bluetooth: hci1: Invalid handle: 0x3a4a > 0x0eff [ 1405.528800][T25193] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1408.451692][T25201] netlink: 'syz.3.3993': attribute type 1 has an invalid length. [ 1408.530850][T25201] netlink: 306 bytes leftover after parsing attributes in process `syz.3.3993'. [ 1409.977077][T25232] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1412.830342][T25232] Process accounting paused [ 1413.279675][T25256] ovs_: entered promiscuous mode [ 1415.005930][T25275] nvme_fabrics: missing parameter 'transport=%s' [ 1415.098335][T25275] nvme_fabrics: missing parameter 'nqn=%s' [ 1416.015941][T17449] Bluetooth: hci5: unexpected subevent 0x01 length: 123 > 18 [ 1416.023732][T17449] Bluetooth: hci5: Invalid handle: 0x3a4a > 0x0eff [ 1417.684187][T13354] Process accounting resumed [ 1417.897096][T25286] Process accounting resumed [ 1418.147776][T25310] FAULT_INJECTION: forcing a failure. [ 1418.147776][T25310] name failslab, interval 1, probability 0, space 0, times 0 [ 1418.261588][T25310] CPU: 0 UID: 0 PID: 25310 Comm: syz.2.4014 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1418.261622][T25310] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1418.261630][T25310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1418.261641][T25310] Call Trace: [ 1418.261647][T25310] [ 1418.261655][T25310] dump_stack_lvl+0x100/0x190 [ 1418.261684][T25310] should_fail_ex.cold+0x5/0xa [ 1418.261710][T25310] should_failslab+0xc2/0x120 [ 1418.261737][T25310] __kmalloc_noprof+0xfc/0x820 [ 1418.261759][T25310] ? trace_kmalloc+0xeb/0x110 [ 1418.261786][T25310] ? lsm_blob_alloc+0x68/0x90 [ 1418.261819][T25310] lsm_blob_alloc+0x68/0x90 [ 1418.261848][T25310] security_sk_alloc+0x2d/0x290 [ 1418.261870][T25310] sk_prot_alloc+0x12a/0x2a0 [ 1418.261900][T25310] sk_alloc+0x36/0xe80 [ 1418.261922][T25310] __netlink_create+0x5e/0x2c0 [ 1418.261946][T25310] ? __wake_up+0x3f/0x60 [ 1418.261973][T25310] netlink_create+0x29b/0x610 [ 1418.261999][T25310] ? __pfx_genl_bind+0x10/0x10 [ 1418.262018][T25310] ? __pfx_genl_unbind+0x10/0x10 [ 1418.262035][T25310] ? __pfx_genl_release+0x10/0x10 [ 1418.262056][T25310] __sock_create+0x339/0x860 [ 1418.262089][T25310] __sys_socket+0x14d/0x260 [ 1418.262117][T25310] ? exc_page_fault+0x6f/0xd0 [ 1418.262146][T25310] ? __pfx___sys_socket+0x10/0x10 [ 1418.262182][T25310] __x64_sys_socket+0x72/0xb0 [ 1418.262211][T25310] ? lockdep_hardirqs_on+0x78/0x100 [ 1418.262247][T25310] do_syscall_64+0x115/0x840 [ 1418.262264][T25310] ? clear_bhb_loop+0x40/0x90 [ 1418.262287][T25310] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1418.262306][T25310] RIP: 0033:0x7f784a99e6c7 [ 1418.262323][T25310] Code: f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 0f 1f 44 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1418.262342][T25310] RSP: 002b:00007f784b869f98 EFLAGS: 00000286 ORIG_RAX: 0000000000000029 [ 1418.262360][T25310] RAX: ffffffffffffffda RBX: 00007f784ac15fa0 RCX: 00007f784a99e6c7 [ 1418.262372][T25310] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 1418.262383][T25310] RBP: 00000000ffffffff R08: 0000000000000000 R09: 0000000000000000 [ 1418.262395][T25310] R10: 0000200000000640 R11: 0000000000000286 R12: 0000000000000000 [ 1418.262406][T25310] R13: 00007f784ac16038 R14: 00007f784ac15fa0 R15: 00007ffc502fca58 [ 1418.262430][T25310] [ 1418.743317][T25292] Process accounting resumed [ 1419.823571][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 1419.831999][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 1422.086764][T25356] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1422.378160][T25262] Process accounting resumed [ 1422.422090][T25262] Process accounting resumed [ 1422.510905][T25262] Process accounting resumed [ 1422.591169][T25262] Process accounting resumed [ 1422.778022][T25365] Process accounting resumed [ 1423.850988][T25385] nvme_fabrics: missing parameter 'transport=%s' [ 1423.977592][T25385] nvme_fabrics: missing parameter 'nqn=%s' [ 1424.561541][T25405] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1424.726405][T24493] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1424.745256][T24493] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1424.757616][T24493] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1424.782451][T24493] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1424.797737][T24493] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1425.742847][T25425] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1425.852536][T25425] ptrace attach of "ci-qemu-gce-upstream-auto/syz-executor exec"[20599] was attempted by ""[25425] [ 1426.930440][T24493] Bluetooth: hci4: command tx timeout [ 1426.997992][T25431] FAULT_INJECTION: forcing a failure. [ 1426.997992][T25431] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1427.231048][T25431] CPU: 0 UID: 0 PID: 25431 Comm: syz.2.4034 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1427.231082][T25431] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1427.231090][T25431] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1427.231100][T25431] Call Trace: [ 1427.231107][T25431] [ 1427.231115][T25431] dump_stack_lvl+0x100/0x190 [ 1427.231144][T25431] should_fail_ex.cold+0x5/0xa [ 1427.231176][T25431] get_futex_key+0xf74/0x14f0 [ 1427.231200][T25431] ? __pfx_get_futex_key+0x10/0x10 [ 1427.231220][T25431] ? lock_acquire+0x1b9/0x370 [ 1427.231243][T25431] futex_wake+0xf4/0x5e0 [ 1427.231271][T25431] ? __pfx_futex_wake+0x10/0x10 [ 1427.231296][T25431] ? find_held_lock+0x2b/0x80 [ 1427.231321][T25431] ? exit_mm_release+0x19/0x30 [ 1427.231351][T25431] do_futex+0x2b2/0x440 [ 1427.231373][T25431] ? __pfx_do_futex+0x10/0x10 [ 1427.231393][T25431] ? __might_fault+0xc5/0x140 [ 1427.231419][T25431] mm_release+0x24a/0x2f0 [ 1427.231441][T25431] do_exit+0x707/0x2ae0 [ 1427.231470][T25431] ? __pfx_do_exit+0x10/0x10 [ 1427.231497][T25431] ? do_raw_spin_lock+0x128/0x260 [ 1427.231517][T25431] ? find_held_lock+0x2b/0x80 [ 1427.231540][T25431] ? get_signal+0x7e0/0x21e0 [ 1427.231564][T25431] do_group_exit+0xd5/0x2a0 [ 1427.231593][T25431] get_signal+0x1ec7/0x21e0 [ 1427.231623][T25431] ? __pfx_get_signal+0x10/0x10 [ 1427.231646][T25431] ? do_futex+0x190/0x440 [ 1427.231669][T25431] arch_do_signal_or_restart+0x91/0x7a0 [ 1427.231692][T25431] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1427.231718][T25431] ? fdget_pos+0x2c0/0x380 [ 1427.231743][T25431] exit_to_user_mode_loop+0x139/0x6f0 [ 1427.231763][T25431] ? rcu_is_watching+0x12/0xc0 [ 1427.231788][T25431] do_syscall_64+0x652/0x840 [ 1427.231806][T25431] ? clear_bhb_loop+0x40/0x90 [ 1427.231829][T25431] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1427.231848][T25431] RIP: 0033:0x7f784a99ce59 [ 1427.231865][T25431] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1427.231883][T25431] RSP: 002b:00007f784b8290e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1427.231902][T25431] RAX: fffffffffffffe00 RBX: 00007f784ac16188 RCX: 00007f784a99ce59 [ 1427.231914][T25431] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f784ac16188 [ 1427.231926][T25431] RBP: 00007f784ac16180 R08: 0000000000000000 R09: 0000000000000000 [ 1427.231937][T25431] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1427.231948][T25431] R13: 00007f784ac16218 R14: 00007ffc502fc970 R15: 00007ffc502fca58 [ 1427.231972][T25431] [ 1429.003902][T24493] Bluetooth: hci4: command tx timeout [ 1429.009666][T23632] EXT4-fs (sda1): Delayed block allocation failed for inode 2028 at logical offset 1348 with max blocks 8 with error 117 [ 1429.062626][T23632] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1429.062626][T23632] [ 1429.125382][T23632] EXT4-fs (sda1): Delayed block allocation failed for inode 2027 at logical offset 3 with max blocks 1 with error 117 [ 1429.198989][T23632] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1429.198989][T23632] [ 1431.066967][T24493] Bluetooth: hci4: command tx timeout [ 1431.749525][T25466] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1432.484204][T25409] bridge0: port 1(bridge_slave_0) entered blocking state [ 1432.526157][T25409] bridge0: port 1(bridge_slave_0) entered disabled state [ 1432.591592][T25409] bridge_slave_0: entered allmulticast mode [ 1432.650385][T25409] bridge_slave_0: entered promiscuous mode [ 1432.716724][T25409] bridge0: port 2(bridge_slave_1) entered blocking state [ 1432.778833][T25409] bridge0: port 2(bridge_slave_1) entered disabled state [ 1432.833190][T25409] bridge_slave_1: entered allmulticast mode [ 1432.887980][T25409] bridge_slave_1: entered promiscuous mode [ 1433.135074][T24493] Bluetooth: hci4: command tx timeout [ 1433.297861][T25409] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1433.386915][T25409] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1433.621099][T25409] team0: Port device team_slave_0 added [ 1433.662503][T25409] team0: Port device team_slave_1 added [ 1433.844026][T25409] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1433.885825][T25409] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1434.030846][T25409] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1434.128021][T25409] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1434.185346][T25409] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1434.392677][T25409] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1434.697174][T25409] hsr_slave_0: entered promiscuous mode [ 1434.744343][T25409] hsr_slave_1: entered promiscuous mode [ 1434.794867][T25409] debugfs: 'hsr0' already exists in 'hsr' [ 1434.848247][T25409] Cannot create hsr debugfs directory [ 1436.209518][T25498] netlink: 354 bytes leftover after parsing attributes in process `syz.5.4044'. [ 1437.859583][T25409] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1438.284644][T25409] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1438.354156][T25409] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1438.417701][T25409] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1438.758604][T25409] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1438.858035][T25409] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1438.926103][T25409] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1439.047395][T25409] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1439.269523][T24493] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 1439.277122][T24493] Bluetooth: hci3: Invalid handle: 0x3a4a > 0x0eff [ 1439.678573][T24493] Bluetooth: hci5: unexpected subevent 0x01 length: 123 > 18 [ 1439.686047][T24493] Bluetooth: hci5: Invalid handle: 0x3a4a > 0x0eff [ 1440.701656][T25542] FAULT_INJECTION: forcing a failure. [ 1440.701656][T25542] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1440.781250][T25542] CPU: 0 UID: 0 PID: 25542 Comm: syz.4.4053 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1440.781285][T25542] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1440.781292][T25542] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1440.781303][T25542] Call Trace: [ 1440.781309][T25542] [ 1440.781317][T25542] dump_stack_lvl+0x100/0x190 [ 1440.781345][T25542] should_fail_ex.cold+0x5/0xa [ 1440.781371][T25542] get_futex_key+0x295/0x14f0 [ 1440.781393][T25542] ? __pfx_get_futex_key+0x10/0x10 [ 1440.781412][T25542] ? lock_acquire+0x1b9/0x370 [ 1440.781444][T25542] futex_wake+0xf4/0x5e0 [ 1440.781472][T25542] ? __pfx_futex_wake+0x10/0x10 [ 1440.781498][T25542] ? find_held_lock+0x2b/0x80 [ 1440.781529][T25542] ? exit_mm_release+0x19/0x30 [ 1440.781557][T25542] do_futex+0x2b2/0x440 [ 1440.781580][T25542] ? __pfx_do_futex+0x10/0x10 [ 1440.781599][T25542] ? __might_fault+0xc5/0x140 [ 1440.781625][T25542] mm_release+0x24a/0x2f0 [ 1440.781646][T25542] do_exit+0x707/0x2ae0 [ 1440.781677][T25542] ? __pfx_do_exit+0x10/0x10 [ 1440.781704][T25542] ? do_raw_spin_lock+0x128/0x260 [ 1440.781725][T25542] ? find_held_lock+0x2b/0x80 [ 1440.781748][T25542] ? get_signal+0x7e0/0x21e0 [ 1440.781772][T25542] do_group_exit+0xd5/0x2a0 [ 1440.781802][T25542] get_signal+0x1ec7/0x21e0 [ 1440.781831][T25542] ? __pfx_get_signal+0x10/0x10 [ 1440.781854][T25542] ? do_futex+0x190/0x440 [ 1440.781877][T25542] arch_do_signal_or_restart+0x91/0x7a0 [ 1440.781898][T25542] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1440.781923][T25542] ? __x64_sys_openat+0x12d/0x210 [ 1440.781956][T25542] exit_to_user_mode_loop+0x139/0x6f0 [ 1440.781975][T25542] ? rcu_is_watching+0x12/0xc0 [ 1440.782000][T25542] do_syscall_64+0x652/0x840 [ 1440.782018][T25542] ? clear_bhb_loop+0x40/0x90 [ 1440.782041][T25542] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1440.782061][T25542] RIP: 0033:0x7fb61759ce59 [ 1440.782078][T25542] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1440.782096][T25542] RSP: 002b:00007fb6185210e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1440.782115][T25542] RAX: fffffffffffffe00 RBX: 00007fb617816098 RCX: 00007fb61759ce59 [ 1440.782131][T25542] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fb617816098 [ 1440.782143][T25542] RBP: 00007fb617816090 R08: 0000000000000000 R09: 0000000000000000 [ 1440.782154][T25542] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1440.782165][T25542] R13: 00007fb617816128 R14: 00007ffff501a600 R15: 00007ffff501a6e8 [ 1440.782188][T25542] [ 1441.352462][T25409] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1441.436465][T25409] 8021q: adding VLAN 0 to HW filter on device team0 [ 1441.629370][T15426] bridge0: port 1(bridge_slave_0) entered blocking state [ 1441.637042][T15426] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1441.697267][T18779] Process accounting resumed [ 1441.709475][T15426] bridge0: port 2(bridge_slave_1) entered blocking state [ 1441.716793][T15426] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1442.407897][T25409] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1442.446847][T25409] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1442.562270][T25527] Process accounting resumed [ 1443.007422][T25537] Process accounting resumed [ 1445.274788][T25409] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1446.578797][T25599] random: crng reseeded on system resumption [ 1446.673169][T25409] veth0_vlan: entered promiscuous mode [ 1446.699058][T25604] rnbd_client L202: map_device: Unknown parameter or missing value '0="/' [ 1446.777487][T25409] veth1_vlan: entered promiscuous mode [ 1446.812527][T25600] can: request_module (can-proto-0) failed. [ 1446.930964][T25409] veth0_macvtap: entered promiscuous mode [ 1446.953757][T25599] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.2.4061: iget: checksum invalid [ 1446.990135][T25409] veth1_macvtap: entered promiscuous mode [ 1447.030637][T25599] faux_driver regulatory: loading /lib/firmware/updates/syzkaller/regulatory.db failed with error -74 [ 1447.100417][T25409] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1447.162518][T25599] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.2.4061: iget: checksum invalid [ 1447.213222][T25409] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1447.254953][T25603] ERROR: Out of memory at tomoyo_memory_ok. [ 1447.303467][T25599] faux_driver regulatory: loading /lib/firmware/updates/regulatory.db failed with error -74 [ 1447.325394][T13587] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1447.379236][T13587] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1447.396768][T25599] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.2.4061: iget: checksum invalid [ 1447.438626][T13587] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1447.477918][T25607] random: crng reseeded on system resumption [ 1447.518312][T13587] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1447.537708][T25599] faux_driver regulatory: loading /lib/firmware/syzkaller/regulatory.db failed with error -74 [ 1447.677525][T25599] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.2.4061: iget: checksum invalid [ 1447.797223][T25599] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -74 [ 1447.923593][T25599] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -74 [ 1448.013807][T25599] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 1448.059271][T23637] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1448.123906][T23637] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1448.271417][T13588] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1448.309237][T13588] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1448.913016][T25610] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.2.4064: iget: checksum invalid [ 1449.017577][T25610] faux_driver regulatory: loading /lib/firmware/updates/syzkaller/regulatory.db failed with error -74 [ 1449.114673][T25611] blktrace: Concurrent blktraces are not allowed on loop2 [ 1449.197509][T25610] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.2.4064: iget: checksum invalid [ 1449.415425][T25610] faux_driver regulatory: loading /lib/firmware/updates/regulatory.db failed with error -74 [ 1449.498246][T25610] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.2.4064: iget: checksum invalid [ 1449.645748][T25610] faux_driver regulatory: loading /lib/firmware/syzkaller/regulatory.db failed with error -74 [ 1449.742838][T25610] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.2.4064: iget: checksum invalid [ 1449.788287][T24493] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 1449.795817][T24493] Bluetooth: hci3: Invalid handle: 0x3a4a > 0x0eff [ 1449.846281][T25610] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -74 [ 1449.914846][T25610] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -74 [ 1450.002698][T25610] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 1451.179225][ T5745] Process accounting resumed [ 1451.326189][T25621] Process accounting resumed [ 1452.134784][T25641] netlink: 342 bytes leftover after parsing attributes in process `syz.5.4069'. [ 1452.476851][T24493] Bluetooth: hci4: unexpected subevent 0x01 length: 123 > 18 [ 1452.487982][T24493] Bluetooth: hci4: Invalid handle: 0x3a4a > 0x0eff [ 1452.542488][T25641] FAULT_INJECTION: forcing a failure. [ 1452.542488][T25641] name failslab, interval 1, probability 0, space 0, times 0 [ 1452.771195][T25641] CPU: 0 UID: 0 PID: 25641 Comm: syz.5.4069 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1452.771232][T25641] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1452.771239][T25641] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1452.771252][T25641] Call Trace: [ 1452.771260][T25641] [ 1452.771269][T25641] dump_stack_lvl+0x100/0x190 [ 1452.771298][T25641] should_fail_ex.cold+0x5/0xa [ 1452.771322][T25641] should_failslab+0xc2/0x120 [ 1452.771350][T25641] kmem_cache_alloc_noprof+0x91/0x6a0 [ 1452.771375][T25641] ? fib_trie_unmerge+0x220/0xbd0 [ 1452.771407][T25641] fib_trie_unmerge+0x220/0xbd0 [ 1452.771438][T25641] ? __pfx_fib_trie_unmerge+0x10/0x10 [ 1452.771465][T25641] ? __pfx___mutex_lock+0x10/0x10 [ 1452.771491][T25641] fib_unmerge+0xee/0x510 [ 1452.771507][T25641] ? __pfx_fib_nl2rule.constprop.0+0x10/0x10 [ 1452.771592][T25641] fib4_rule_configure+0x383/0x10c0 [ 1452.771636][T25641] fib_newrule+0x356/0x1ed0 [ 1452.771667][T25641] ? rcu_is_watching+0x12/0xc0 [ 1452.771694][T25641] ? __pfx_fib_newrule+0x10/0x10 [ 1452.771721][T25641] ? kfree_skbmem+0x160/0x210 [ 1452.771748][T25641] ? kmem_cache_free+0x127/0x6b0 [ 1452.771767][T25641] ? skb_release_data+0x6ca/0x8e0 [ 1452.771805][T25641] ? find_held_lock+0x2b/0x80 [ 1452.771828][T25641] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 1452.771877][T25641] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 1452.771903][T25641] ? __pfx_fib_nl_newrule+0x10/0x10 [ 1452.771933][T25641] rtnetlink_rcv_msg+0x95e/0xe90 [ 1452.771960][T25641] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1452.771991][T25641] ? ref_tracker_free+0x37e/0x6c0 [ 1452.772035][T25641] netlink_rcv_skb+0x159/0x420 [ 1452.772067][T25641] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1452.772094][T25641] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1452.772131][T25641] ? netlink_deliver_tap+0x1ae/0xcc0 [ 1452.772165][T25641] netlink_unicast+0x585/0x850 [ 1452.772197][T25641] ? __pfx_netlink_unicast+0x10/0x10 [ 1452.772233][T25641] netlink_sendmsg+0x8b0/0xda0 [ 1452.772270][T25641] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1452.772303][T25641] ? apparmor_socket_sendmsg+0x15b/0x270 [ 1452.772326][T25641] ____sys_sendmsg+0xa4d/0xbe0 [ 1452.772353][T25641] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1452.772383][T25641] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1452.772409][T25641] ? event_filter_pid_sched_wakeup_probe_post+0x128/0x270 [ 1452.772445][T25641] ? rcu_is_watching+0x12/0xc0 [ 1452.772468][T25641] ? ___sys_sendmsg+0x19d/0x1e0 [ 1452.772494][T25641] ? kfree+0x1e5/0x6c0 [ 1452.772510][T25641] ? preempt_schedule_thunk+0x16/0x40 [ 1452.772533][T25641] ___sys_sendmsg+0x190/0x1e0 [ 1452.772562][T25641] ? __pfx____sys_sendmsg+0x10/0x10 [ 1452.772591][T25641] ? futex_hash+0x311/0x400 [ 1452.772628][T25641] ? __pfx___might_resched+0x10/0x10 [ 1452.772663][T25641] __sys_sendmmsg+0x20c/0x440 [ 1452.772688][T25641] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1452.772717][T25641] ? __pfx_do_futex+0x10/0x10 [ 1452.772737][T25641] ? bpf_lsm_capable+0x9/0x10 [ 1452.772770][T25641] ? xfd_validate_state+0x129/0x190 [ 1452.772800][T25641] __x64_sys_sendmmsg+0x9c/0x100 [ 1452.772821][T25641] ? lockdep_hardirqs_on+0x78/0x100 [ 1452.773010][T25641] do_syscall_64+0x115/0x840 [ 1452.773033][T25641] ? clear_bhb_loop+0x40/0x90 [ 1452.773057][T25641] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1452.773077][T25641] RIP: 0033:0x7ff97379ce59 [ 1452.773095][T25641] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1452.773113][T25641] RSP: 002b:00007ff974613028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1452.773133][T25641] RAX: ffffffffffffffda RBX: 00007ff973a16090 RCX: 00007ff97379ce59 [ 1452.773172][T25641] RDX: 0000000000000003 RSI: 0000200000000080 RDI: 0000000000000003 [ 1452.773183][T25641] RBP: 00007ff973832e6f R08: 0000000000000000 R09: 0000000000000000 [ 1452.773195][T25641] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1452.773219][T25641] R13: 00007ff973a16128 R14: 00007ff973a16090 R15: 00007ffc72379148 [ 1452.773244][T25641] [ 1453.803002][T13354] Process accounting resumed [ 1454.045089][T25648] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4072'. [ 1457.087816][T20599] Process accounting resumed [ 1457.962986][T17449] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1457.985284][T17449] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1458.016547][T17449] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1458.031699][T17449] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1458.051556][T17449] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1458.244406][T25643] Process accounting resumed [ 1458.543436][T25661] MTRR 2 not used [ 1460.180248][T17449] Bluetooth: hci6: command tx timeout [ 1460.876476][T17449] Bluetooth: hci4: unexpected subevent 0x01 length: 123 > 18 [ 1460.885473][T17449] Bluetooth: hci4: Invalid handle: 0x3a4a > 0x0eff [ 1461.824295][T25651] bridge0: port 1(bridge_slave_0) entered blocking state [ 1461.878058][T25651] bridge0: port 1(bridge_slave_0) entered disabled state [ 1461.922965][T25651] bridge_slave_0: entered allmulticast mode [ 1461.966520][T25651] bridge_slave_0: entered promiscuous mode [ 1462.014324][T25651] bridge0: port 2(bridge_slave_1) entered blocking state [ 1462.068005][ T5697] Process accounting resumed [ 1462.072775][T25651] bridge0: port 2(bridge_slave_1) entered disabled state [ 1462.121166][T25651] bridge_slave_1: entered allmulticast mode [ 1462.176773][T25651] bridge_slave_1: entered promiscuous mode [ 1462.221676][T25679] Process accounting resumed [ 1462.249182][T17449] Bluetooth: hci6: command tx timeout [ 1462.725147][T25651] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1462.819246][T25651] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1463.708478][T25651] team0: Port device team_slave_0 added [ 1463.767372][T25651] team0: Port device team_slave_1 added [ 1464.317807][T17449] Bluetooth: hci6: command tx timeout [ 1464.542597][T25651] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1464.599563][T25651] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1464.801328][T25651] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1464.884591][T25651] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1464.915681][T25651] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1465.036352][T25651] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1465.357469][T25651] hsr_slave_0: entered promiscuous mode [ 1465.381954][T25651] hsr_slave_1: entered promiscuous mode [ 1465.407755][T25651] debugfs: 'hsr0' already exists in 'hsr' [ 1465.440007][T25651] Cannot create hsr debugfs directory [ 1466.384924][T17449] Bluetooth: hci6: command tx timeout [ 1467.678339][T25651] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1467.932942][T25651] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1467.981137][T25651] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1468.067909][T25651] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1468.309912][T25651] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1468.387500][T25651] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1468.443075][T25651] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1468.525762][T25651] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1469.255676][T25651] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1469.358633][T25651] 8021q: adding VLAN 0 to HW filter on device team0 [ 1469.433645][T15425] bridge0: port 1(bridge_slave_0) entered blocking state [ 1469.440858][T15425] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1469.540917][T15425] bridge0: port 2(bridge_slave_1) entered blocking state [ 1469.548144][T15425] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1471.376956][T25737] ERROR: Out of memory at tomoyo_memory_ok. [ 1471.778710][T25651] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1472.465896][T25747] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1472.956768][T25651] veth0_vlan: entered promiscuous mode [ 1473.057490][T25651] veth1_vlan: entered promiscuous mode [ 1473.216331][T25651] veth0_macvtap: entered promiscuous mode [ 1473.269364][T25651] veth1_macvtap: entered promiscuous mode [ 1473.383221][T25651] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1473.447947][T25651] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1473.530112][T23630] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1473.590270][T23630] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1473.655041][T23630] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1473.701311][T23630] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1474.524743][T11772] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1474.576341][T11772] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1474.686252][T11772] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1474.709947][T11772] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1476.675947][T24493] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1476.698402][T24493] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1476.711019][T24493] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1476.727132][T24493] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1476.741146][T24493] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1476.849264][T11772] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1477.431934][T11772] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1477.895589][T11772] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1478.185918][T11772] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1478.881062][T24493] Bluetooth: hci2: command tx timeout [ 1479.672169][T11772] team0: left allmulticast mode [ 1479.726893][T11772] team_slave_0: left allmulticast mode [ 1479.774148][T11772] team_slave_1: left allmulticast mode [ 1479.855622][T11772] team0: left promiscuous mode [ 1479.895984][T11772] team_slave_0: left promiscuous mode [ 1479.941639][T11772] team_slave_1: left promiscuous mode [ 1479.985461][T11772] bridge0: port 3(team0) entered disabled state [ 1480.043193][T23643] EXT4-fs (sda1): Delayed block allocation failed for inode 2027 at logical offset 3 with max blocks 2 with error 117 [ 1480.089828][T11772] bridge_slave_1: left allmulticast mode [ 1480.134743][T11772] bridge_slave_1: left promiscuous mode [ 1480.155298][T23643] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1480.155298][T23643] [ 1480.175435][T11772] bridge0: port 2(bridge_slave_1) entered disabled state [ 1480.274308][T17449] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1480.295069][T17449] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1480.309096][T17449] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1480.326267][T17449] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1480.360327][T17449] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1480.433759][T11772] bridge_slave_0: left allmulticast mode [ 1480.522823][T11772] bridge_slave_0: left promiscuous mode [ 1480.556483][T11772] bridge0: port 1(bridge_slave_0) entered disabled state [ 1480.870851][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 1480.877446][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 1480.948176][T17449] Bluetooth: hci2: command tx timeout [ 1481.677146][T11772] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1481.768381][T11772] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1481.808903][T11772] bond0 (unregistering): Released all slaves [ 1481.868252][T25805] FAULT_INJECTION: forcing a failure. [ 1481.868252][T25805] name failslab, interval 1, probability 0, space 0, times 0 [ 1481.923641][ T5287] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1481.980188][T25805] CPU: 0 UID: 0 PID: 25805 Comm: syz.7.4093 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1481.980221][T25805] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1481.980229][T25805] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1481.980241][T25805] Call Trace: [ 1481.980249][T25805] [ 1481.980257][T25805] dump_stack_lvl+0x100/0x190 [ 1481.980287][T25805] should_fail_ex.cold+0x5/0xa [ 1481.980312][T25805] should_failslab+0xc2/0x120 [ 1481.980339][T25805] kmem_cache_alloc_lru_noprof+0x8d/0x6a0 [ 1481.980372][T25805] ? __d_alloc+0x35/0xa50 [ 1481.980397][T25805] __d_alloc+0x35/0xa50 [ 1481.980420][T25805] d_alloc+0x4a/0x1e0 [ 1481.980442][T25805] lookup_one_qstr_excl+0x171/0x250 [ 1481.980470][T25805] start_dirop+0x59/0xb0 [ 1481.980488][T25805] simple_start_creating+0xf9/0x110 [ 1481.980508][T25805] ? __pfx_simple_start_creating+0x10/0x10 [ 1481.980535][T25805] ? mntput+0x70/0xa0 [ 1481.980563][T25805] ? simple_pin_fs+0xa3/0x190 [ 1481.980592][T25805] debugfs_start_creating.part.0+0x82/0x170 [ 1481.980623][T25805] __debugfs_create_file+0xb3/0x4f0 [ 1481.980652][T25805] debugfs_create_file_full+0x41/0x60 [ 1481.980681][T25805] ref_tracker_dir_debugfs+0x19e/0x2e0 [ 1481.980712][T25805] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 1481.980740][T25805] ? ida_alloc_range+0x70d/0x830 [ 1481.980775][T25805] ? kasan_save_track+0x14/0x30 [ 1481.980801][T25805] ? __kasan_kmalloc+0xaa/0xb0 [ 1481.980825][T25805] ? lockdep_init_map_type+0x5c/0x250 [ 1481.980848][T25805] preinit_net.part.0+0x252/0x920 [ 1481.980875][T25805] copy_net_ns+0x339/0x7c0 [ 1481.980903][T25805] create_new_namespaces+0x3ea/0xac0 [ 1481.980929][T25805] unshare_nsproxy_namespaces+0xf2/0x220 [ 1481.980962][T25805] ksys_unshare+0x438/0xab0 [ 1481.980991][T25805] ? __pfx_ksys_unshare+0x10/0x10 [ 1481.981023][T25805] __x64_sys_unshare+0x31/0x40 [ 1481.981051][T25805] do_syscall_64+0x115/0x840 [ 1481.981073][T25805] ? clear_bhb_loop+0x40/0x90 [ 1481.981095][T25805] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1481.981114][T25805] RIP: 0033:0x7fac5659ce59 [ 1481.981132][T25805] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1481.981149][T25805] RSP: 002b:00007fac57381028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1481.981172][T25805] RAX: ffffffffffffffda RBX: 00007fac56815fa0 RCX: 00007fac5659ce59 [ 1481.981189][T25805] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 1481.981200][T25805] RBP: 00007fac56632e6f R08: 0000000000000000 R09: 0000000000000000 [ 1481.981211][T25805] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1481.981221][T25805] R13: 00007fac56816038 R14: 00007fac56815fa0 R15: 00007ffd8233d9f8 [ 1481.981249][T25805] [ 1482.643247][T17449] Bluetooth: hci7: command tx timeout [ 1483.060072][T17449] Bluetooth: hci2: command tx timeout [ 1483.285412][T11772] ovs_: left promiscuous mode [ 1484.444920][T25760] bridge0: port 1(bridge_slave_0) entered blocking state [ 1484.485064][T25760] bridge0: port 1(bridge_slave_0) entered disabled state [ 1484.520787][T25760] bridge_slave_0: entered allmulticast mode [ 1484.559579][T25760] bridge_slave_0: entered promiscuous mode [ 1484.641933][T25760] bridge0: port 2(bridge_slave_1) entered blocking state [ 1484.680823][T25760] bridge0: port 2(bridge_slave_1) entered disabled state [ 1484.699669][T17449] Bluetooth: hci7: command tx timeout [ 1484.743009][T25760] bridge_slave_1: entered allmulticast mode [ 1484.783383][T25760] bridge_slave_1: entered promiscuous mode [ 1484.992088][T11772] hsr_slave_0: left promiscuous mode [ 1485.041709][T11772] hsr_slave_1: left promiscuous mode [ 1485.075000][T11772] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1485.085895][T17449] Bluetooth: hci2: command tx timeout [ 1485.125859][T11772] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1485.171954][T11772] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1485.209916][T11772] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1485.447701][T11772] veth1_macvtap: left promiscuous mode [ 1485.476084][T11772] veth0_macvtap: left promiscuous mode [ 1485.517041][T11772] veth1_vlan: left promiscuous mode [ 1485.551306][T11772] veth0_vlan: left promiscuous mode [ 1486.444263][T11772] team0 (unregistering): Port device team_slave_1 removed [ 1486.498811][T11772] team0 (unregistering): Port device team_slave_0 removed [ 1486.757544][T17449] Bluetooth: hci7: command tx timeout [ 1486.926632][ T5287] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1487.137735][T25760] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1487.201399][T25845] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1487.214480][T25760] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1487.512867][T25760] team0: Port device team_slave_0 added [ 1487.626240][T25760] team0: Port device team_slave_1 added [ 1488.003203][T25760] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1488.056234][T25760] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1488.186373][T25852] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x18000 [ 1488.229832][T25760] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1488.246838][T25852] flags: 0xfff00000002000(reserved|node=0|zone=1|lastcpupid=0x7ff) [ 1488.291443][T25760] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1488.300202][T25852] raw: 00fff00000002000 ffffea0000600008 ffffea0000600008 0000000000000000 [ 1488.335241][T25760] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1488.388334][T25852] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 1488.440127][T25852] page dumped because: unmovable page [ 1488.473488][T25852] page_owner info is not present (never set?) [ 1488.481808][ T4974] ERROR: Out of memory at tomoyo_memory_ok. [ 1488.497266][T25760] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1488.826875][T17449] Bluetooth: hci7: command tx timeout [ 1488.881697][T25760] hsr_slave_0: entered promiscuous mode [ 1488.909191][T25760] hsr_slave_1: entered promiscuous mode [ 1488.943756][T25760] debugfs: 'hsr0' already exists in 'hsr' [ 1488.976310][T25760] Cannot create hsr debugfs directory [ 1489.550229][ T5287] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1489.701257][T25792] bridge0: port 1(bridge_slave_0) entered blocking state [ 1489.735685][T25792] bridge0: port 1(bridge_slave_0) entered disabled state [ 1489.767433][T25792] bridge_slave_0: entered allmulticast mode [ 1489.798672][T25792] bridge_slave_0: entered promiscuous mode [ 1489.850518][T25792] bridge0: port 2(bridge_slave_1) entered blocking state [ 1489.890957][T25792] bridge0: port 2(bridge_slave_1) entered disabled state [ 1489.931150][T25792] bridge_slave_1: entered allmulticast mode [ 1489.995792][T25792] bridge_slave_1: entered promiscuous mode [ 1490.030835][T24493] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1490.052336][T24493] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1490.063605][T24493] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1490.082654][T24493] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1490.103457][T24493] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1490.412872][T25792] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1490.531967][T25792] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1490.765501][T25792] team0: Port device team_slave_0 added [ 1490.841406][T25792] team0: Port device team_slave_1 added [ 1491.119383][T25792] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1491.170059][T25792] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1491.317817][T25792] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1491.793018][T25792] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1491.837514][T25792] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1491.949621][T25792] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1492.111649][ T5287] 8021q: adding VLAN 0 to HW filter on device eth4 [ 1492.172248][T24493] Bluetooth: hci8: command tx timeout [ 1492.476124][T25792] hsr_slave_0: entered promiscuous mode [ 1492.509513][T25792] hsr_slave_1: entered promiscuous mode [ 1492.525761][T25792] debugfs: 'hsr0' already exists in 'hsr' [ 1492.546705][T25792] Cannot create hsr debugfs directory [ 1492.564436][T25760] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1492.599638][T25760] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1492.677968][T25760] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1492.720635][T25760] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1492.794578][T25760] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1492.828557][T25760] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1492.855817][T25760] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1492.890409][T25760] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1493.815482][T25792] netdevsim netdevsim9 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1494.239092][T24493] Bluetooth: hci8: command tx timeout [ 1494.321884][T25760] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1494.471080][T25760] 8021q: adding VLAN 0 to HW filter on device team0 [ 1494.667117][T23643] bridge0: port 1(bridge_slave_0) entered blocking state [ 1494.674275][T23643] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1494.777498][T15425] bridge0: port 2(bridge_slave_1) entered blocking state [ 1494.784761][T15425] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1495.309301][T25875] bridge0: port 1(bridge_slave_0) entered blocking state [ 1495.340536][T25875] bridge0: port 1(bridge_slave_0) entered disabled state [ 1495.365092][T25875] bridge_slave_0: entered allmulticast mode [ 1495.389662][T25875] bridge_slave_0: entered promiscuous mode [ 1495.429377][T25875] bridge0: port 2(bridge_slave_1) entered blocking state [ 1495.456549][T25875] bridge0: port 2(bridge_slave_1) entered disabled state [ 1495.485067][T25875] bridge_slave_1: entered allmulticast mode [ 1495.509468][T25875] bridge_slave_1: entered promiscuous mode [ 1495.809259][T25875] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1495.841061][T25875] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1496.099454][T25875] team0: Port device team_slave_0 added [ 1496.160412][T25792] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1496.230067][T25792] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1496.275274][T25875] team0: Port device team_slave_1 added [ 1496.319818][T24493] Bluetooth: hci8: command tx timeout [ 1496.359649][T25792] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1496.408414][T25792] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1496.498817][T25792] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1496.562693][T25792] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1496.606924][T25792] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1496.656699][T25792] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1496.709136][T25875] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1496.745790][T25875] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1496.885224][T25875] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1496.931580][T25875] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1496.973443][T25875] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1497.097495][T25875] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1497.329514][T25875] hsr_slave_0: entered promiscuous mode [ 1497.366202][T25875] hsr_slave_1: entered promiscuous mode [ 1497.399747][T25875] debugfs: 'hsr0' already exists in 'hsr' [ 1497.434171][T25875] Cannot create hsr debugfs directory [ 1498.102529][T25760] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1498.376586][T24493] Bluetooth: hci8: command tx timeout [ 1498.758716][T25875] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1498.953978][T25792] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1499.195456][T25875] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1499.357820][T25792] 8021q: adding VLAN 0 to HW filter on device team0 [ 1499.425563][T11772] bridge0: port 1(bridge_slave_0) entered blocking state [ 1499.432740][T11772] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1499.519483][T11584] bridge0: port 2(bridge_slave_1) entered blocking state [ 1499.526656][T11584] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1499.670823][T25875] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1499.986797][T25760] veth0_vlan: entered promiscuous mode [ 1500.095449][T25760] veth1_vlan: entered promiscuous mode [ 1500.318483][T25760] veth0_macvtap: entered promiscuous mode [ 1500.379164][T25760] veth1_macvtap: entered promiscuous mode [ 1500.533193][T25760] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1500.849985][T25760] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1500.960076][T15425] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1501.014443][T15425] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1501.042243][T15425] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1501.144701][T15425] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1501.428939][T25875] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1501.516198][T25875] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1501.566353][T25875] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1501.648157][T25875] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1501.757832][T25875] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1501.793552][T25875] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1501.857276][T25875] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1501.912654][T25875] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1501.993378][T15425] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1502.054077][T15425] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1502.192968][T11559] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1502.238834][T11559] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1502.538245][T25875] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1502.590727][T25792] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1502.728228][T25875] 8021q: adding VLAN 0 to HW filter on device team0 [ 1502.797052][T15425] bridge0: port 1(bridge_slave_0) entered blocking state [ 1502.804274][T15425] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1502.921653][T15425] bridge0: port 2(bridge_slave_1) entered blocking state [ 1502.928844][T15425] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1504.090026][T25792] veth0_vlan: entered promiscuous mode [ 1504.167557][T25792] veth1_vlan: entered promiscuous mode [ 1504.436205][T25792] veth0_macvtap: entered promiscuous mode [ 1504.533006][T25792] veth1_macvtap: entered promiscuous mode [ 1504.683817][T25792] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1504.786775][T25792] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1504.905331][T11772] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1504.986968][T11772] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1505.046506][T11772] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1505.131707][T11772] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1505.818104][T11584] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1505.905066][T11584] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1506.139500][T25875] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1506.226511][T17449] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 1506.250581][T17449] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 1506.262226][T17449] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 1506.282933][T15425] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1506.296204][T17449] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 1506.313097][T17449] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 1506.441647][T15425] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1506.632108][T25875] veth0_vlan: entered promiscuous mode [ 1506.741433][T25875] veth1_vlan: entered promiscuous mode [ 1506.966217][T25875] veth0_macvtap: entered promiscuous mode [ 1507.075119][T25875] veth1_macvtap: entered promiscuous mode [ 1507.248500][T25875] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1507.346748][T25875] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1507.462418][T11559] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1507.540369][T11559] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1507.635231][T11559] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1507.693850][T11559] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1508.404671][T17449] Bluetooth: hci9: command tx timeout [ 1509.907591][T11559] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1509.991807][T11559] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1510.369880][T11559] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1510.454539][T11559] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1510.475155][T17449] Bluetooth: hci9: command tx timeout [ 1512.023411][T26005] bridge0: port 1(bridge_slave_0) entered blocking state [ 1512.090838][T26005] bridge0: port 1(bridge_slave_0) entered disabled state [ 1512.137588][T26005] bridge_slave_0: entered allmulticast mode [ 1512.178843][T26005] bridge_slave_0: entered promiscuous mode [ 1512.231768][T26005] bridge0: port 2(bridge_slave_1) entered blocking state [ 1512.281178][T26005] bridge0: port 2(bridge_slave_1) entered disabled state [ 1512.337200][T26005] bridge_slave_1: entered allmulticast mode [ 1512.389376][T26005] bridge_slave_1: entered promiscuous mode [ 1512.428190][ T29] audit: type=1800 audit(2147483715.233:114): pid=26090 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.4106" name="lu_gp_id" dev="configfs" ino=137557 res=0 errno=0 [ 1512.547486][T17449] Bluetooth: hci9: command tx timeout [ 1512.635931][T26005] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1512.724319][T26005] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1512.908598][T26005] team0: Port device team_slave_0 added [ 1512.957778][T26005] team0: Port device team_slave_1 added [ 1513.195970][T26005] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1513.255701][T26005] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1513.413393][T26005] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1513.551239][T26005] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1513.580743][T26005] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1513.671397][T26005] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1514.271200][T26005] hsr_slave_0: entered promiscuous mode [ 1514.289989][T26005] hsr_slave_1: entered promiscuous mode [ 1514.320129][T26005] debugfs: 'hsr0' already exists in 'hsr' [ 1514.345452][T26005] Cannot create hsr debugfs directory [ 1514.614458][T17449] Bluetooth: hci9: command tx timeout [ 1514.820014][T26111] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4108'. [ 1515.930918][T26005] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1516.421527][T26005] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1517.062722][T26005] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1517.179990][T17449] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18 [ 1517.187711][T17449] Bluetooth: hci2: Invalid handle: 0x3a4a > 0x0eff [ 1517.391661][T26005] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1518.720125][T26005] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1518.817587][T25809] Process accounting resumed [ 1518.894929][T26123] Process accounting resumed [ 1519.049793][T26005] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1519.085869][T26005] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1519.136538][T26005] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1519.382642][T26005] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1519.474215][T26005] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1519.497365][T26005] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1519.623490][T26005] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1520.906116][T26005] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1521.062477][T26005] 8021q: adding VLAN 0 to HW filter on device team0 [ 1521.119484][T15426] bridge0: port 1(bridge_slave_0) entered blocking state [ 1521.126652][T15426] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1521.206240][T15426] bridge0: port 2(bridge_slave_1) entered blocking state [ 1521.213473][T15426] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1522.682039][T24493] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 1522.708103][T24493] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 1522.718202][T24493] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 1522.726424][T24493] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 1522.736338][T24493] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 1523.347399][T26005] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1523.639460][T26005] veth0_vlan: entered promiscuous mode [ 1523.727040][T26005] veth1_vlan: entered promiscuous mode [ 1523.946879][T26005] veth0_macvtap: entered promiscuous mode [ 1524.015728][T26005] veth1_macvtap: entered promiscuous mode [ 1524.146864][T26005] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1524.248589][T26005] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1524.644684][T15425] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1524.735559][T15425] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1524.869494][T26174] netlink: 20 bytes leftover after parsing attributes in process `syz.8.4116'. [ 1524.894167][T24493] Bluetooth: hci10: command tx timeout [ 1524.920678][T15425] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1524.986395][T15425] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1525.055437][T26174] hsr_slave_0: left promiscuous mode [ 1525.076434][T26174] hsr_slave_1: left promiscuous mode [ 1525.906797][T15425] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1525.974534][T15425] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1526.322867][T15425] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1526.379524][T15425] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1526.947963][T24493] Bluetooth: hci10: command tx timeout [ 1527.076035][T26157] bridge0: port 1(bridge_slave_0) entered blocking state [ 1527.116443][T26157] bridge0: port 1(bridge_slave_0) entered disabled state [ 1527.148464][T26157] bridge_slave_0: entered allmulticast mode [ 1527.193497][T26157] bridge_slave_0: entered promiscuous mode [ 1527.230577][T26157] bridge0: port 2(bridge_slave_1) entered blocking state [ 1527.268595][T26157] bridge0: port 2(bridge_slave_1) entered disabled state [ 1527.294496][T26157] bridge_slave_1: entered allmulticast mode [ 1527.315150][T26197] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1527.338217][T26157] bridge_slave_1: entered promiscuous mode [ 1527.512481][T26157] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1527.593099][T26157] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1527.783670][T26157] team0: Port device team_slave_0 added [ 1527.819757][T26157] team0: Port device team_slave_1 added [ 1528.143691][T24493] Bluetooth: hci2: unexpected event 0x02 length: 1021 > 260 [ 1528.166912][T26206] ima: policy update failed [ 1528.240128][T26157] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1528.268787][T26157] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1528.336796][ T29] audit: type=1802 audit(4294967297.371:115): pid=26206 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.8.4120" res=0 errno=0 [ 1528.451098][T26157] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1528.533003][T26157] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1528.555302][T26157] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1528.656238][T26157] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1529.018114][T24493] Bluetooth: hci10: command tx timeout [ 1529.083101][T26157] hsr_slave_0: entered promiscuous mode [ 1529.122352][T26157] hsr_slave_1: entered promiscuous mode [ 1529.149823][T26157] debugfs: 'hsr0' already exists in 'hsr' [ 1529.169964][T26157] Cannot create hsr debugfs directory [ 1531.086172][T24493] Bluetooth: hci10: command tx timeout [ 1531.106412][T26157] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1531.720638][T26157] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1531.955838][T26157] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1532.587198][T26157] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1532.852361][T17449] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 1532.877120][T17449] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 1532.888086][T17449] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 1532.901846][T17449] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 1532.909687][T17449] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 1533.902063][T26250] vivid-007: ================= START STATUS ================= [ 1533.933541][T26250] vivid-007: Generate PTS: true [ 1533.966223][T26250] vivid-007: Generate SCR: true [ 1534.005841][T26250] tpg source WxH: 320x240 (Y'CbCr) [ 1534.023701][T26250] tpg field: 1 [ 1534.031987][T26250] tpg crop: (0,0)/320x240 [ 1534.042701][T26250] tpg compose: (0,0)/320x240 [ 1534.054725][T26250] tpg colorspace: 8 [ 1534.063595][T26250] tpg transfer function: 0/0 [ 1534.074531][T26250] tpg Y'CbCr encoding: 0/0 [ 1534.090422][T26250] tpg quantization: 0/0 [ 1534.100854][T26250] tpg RGB range: 0/2 [ 1534.111536][T26250] vivid-007: ================== END STATUS ================== [ 1534.812658][T26157] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1534.893280][T26157] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1534.931904][T26258] netlink: 354 bytes leftover after parsing attributes in process `syz.1.4128'. [ 1534.953962][T26157] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1534.992667][T24493] Bluetooth: hci11: command tx timeout [ 1535.019000][T26157] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1535.068124][T26157] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1535.115701][T26157] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1535.150178][T26157] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1535.195348][T26157] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1536.483049][T26157] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1536.590649][T26157] 8021q: adding VLAN 0 to HW filter on device team0 [ 1536.672663][T23643] bridge0: port 1(bridge_slave_0) entered blocking state [ 1536.679939][T23643] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1536.844136][T23643] bridge0: port 2(bridge_slave_1) entered blocking state [ 1536.851308][T23643] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1537.055078][T17449] Bluetooth: hci11: command tx timeout [ 1537.323215][T26240] bridge0: port 1(bridge_slave_0) entered blocking state [ 1537.363022][T26240] bridge0: port 1(bridge_slave_0) entered disabled state [ 1537.395597][T26240] bridge_slave_0: entered allmulticast mode [ 1537.430188][T26240] bridge_slave_0: entered promiscuous mode [ 1537.522865][T26240] bridge0: port 2(bridge_slave_1) entered blocking state [ 1537.578998][T26240] bridge0: port 2(bridge_slave_1) entered disabled state [ 1537.624245][T26240] bridge_slave_1: entered allmulticast mode [ 1537.668550][T26240] bridge_slave_1: entered promiscuous mode [ 1537.904138][T26240] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1537.998335][T26240] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1538.307810][T26240] team0: Port device team_slave_0 added [ 1538.369177][T26240] team0: Port device team_slave_1 added [ 1538.633603][T26240] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1538.692004][T26240] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1538.842994][T26240] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1538.916862][T26240] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1538.959056][T26240] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1539.127195][T17449] Bluetooth: hci11: command tx timeout [ 1539.139632][T26240] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1539.549355][T26240] hsr_slave_0: entered promiscuous mode [ 1539.600977][T26240] hsr_slave_1: entered promiscuous mode [ 1539.651415][T26240] debugfs: 'hsr0' already exists in 'hsr' [ 1539.696122][T26240] Cannot create hsr debugfs directory [ 1541.193594][T17449] Bluetooth: hci11: command tx timeout [ 1541.212851][T26334] input: jJǸ-9%vJ86 as /devices/virtual/input/input21 [ 1541.481546][T26157] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1541.994715][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 1542.001259][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 1542.165953][T26353] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1544.241561][T26157] veth0_vlan: entered promiscuous mode [ 1544.354949][T26157] veth1_vlan: entered promiscuous mode [ 1544.614400][T26157] veth0_macvtap: entered promiscuous mode [ 1544.700445][T26157] veth1_macvtap: entered promiscuous mode [ 1545.578775][T26157] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1545.765185][T26157] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1545.941149][T23642] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1546.008204][T23642] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1546.018211][T23642] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1546.221730][T23642] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1546.282364][T26240] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1546.371425][T26240] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1546.434945][T26240] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1546.516359][T26240] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1546.574259][T26240] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1546.673277][T26240] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1546.725514][T26240] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1546.871075][T26240] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1546.970565][T26377] ERROR: Out of memory at tomoyo_memory_ok. [ 1547.001037][T26353] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1547.548125][T23637] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1547.611808][T23637] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1548.211676][T26353] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1548.383992][T23639] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1548.432291][T23639] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1548.663427][T26353] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1549.000205][T26353] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1549.153367][T24493] Bluetooth: hci4: command 0x0406 tx timeout [ 1549.683613][T26353] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1550.001904][T26240] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1550.039702][T26431] ERROR: Out of memory at tomoyo_memory_ok. [ 1550.131176][T26240] 8021q: adding VLAN 0 to HW filter on device team0 [ 1550.227067][T23642] bridge0: port 1(bridge_slave_0) entered blocking state [ 1550.234258][T23642] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1550.352014][T11559] bridge0: port 2(bridge_slave_1) entered blocking state [ 1550.359229][T11559] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1550.660154][T11772] EXT4-fs (sda1): Delayed block allocation failed for inode 2027 at logical offset 3 with max blocks 1 with error 117 [ 1550.766692][T11772] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1550.766692][T11772] [ 1553.267630][T26240] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1554.589148][T26523] netlink: 'syz.3.4159': attribute type 1 has an invalid length. [ 1554.621446][T26240] veth0_vlan: entered promiscuous mode [ 1554.799907][T26240] veth1_vlan: entered promiscuous mode [ 1555.105739][T26240] veth0_macvtap: entered promiscuous mode [ 1555.165236][T26240] veth1_macvtap: entered promiscuous mode [ 1555.324317][T26240] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1555.505126][T26240] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1555.653637][T23635] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1555.724385][T23635] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1555.832191][T23635] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1555.903070][T23635] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1557.195774][T23635] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1557.301283][T23635] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1557.578943][T11559] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1557.644718][T11559] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1559.431624][T26589] FAULT_INJECTION: forcing a failure. [ 1559.431624][T26589] name failslab, interval 1, probability 0, space 0, times 0 [ 1559.588838][T26589] CPU: 0 UID: 0 PID: 26589 Comm: syz.4.4166 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1559.588872][T26589] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1559.588880][T26589] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1559.588891][T26589] Call Trace: [ 1559.588898][T26589] [ 1559.588906][T26589] dump_stack_lvl+0x100/0x190 [ 1559.588936][T26589] should_fail_ex.cold+0x5/0xa [ 1559.588961][T26589] should_failslab+0xc2/0x120 [ 1559.588990][T26589] __kmalloc_cache_noprof+0x91/0x6c0 [ 1559.589010][T26589] ? rcu_is_watching+0x12/0xc0 [ 1559.589034][T26589] ? snd_card_file_add+0x52/0x320 [ 1559.589068][T26589] ? __pfx_snd_pcm_playback_open+0x10/0x10 [ 1559.589089][T26589] snd_card_file_add+0x52/0x320 [ 1559.589115][T26589] ? snd_lookup_minor_data+0xc7/0x180 [ 1559.589142][T26589] ? __pfx_snd_pcm_playback_open+0x10/0x10 [ 1559.589162][T26589] snd_pcm_open+0xf1/0x710 [ 1559.589182][T26589] ? __mutex_unlock_slowpath+0x35d/0x930 [ 1559.589215][T26589] ? __pfx_snd_pcm_open+0x10/0x10 [ 1559.589234][T26589] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1559.589273][T26589] ? __pfx_snd_pcm_playback_open+0x10/0x10 [ 1559.589293][T26589] snd_pcm_playback_open+0x86/0xe0 [ 1559.589314][T26589] snd_open+0x201/0x450 [ 1559.589339][T26589] ? __pfx_snd_open+0x10/0x10 [ 1559.589364][T26589] chrdev_open+0x234/0x6a0 [ 1559.589384][T26589] ? __pfx_apparmor_file_open+0x10/0x10 [ 1559.589406][T26589] ? __pfx_chrdev_open+0x10/0x10 [ 1559.589427][T26589] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 1559.589454][T26589] do_dentry_open+0x6ab/0x14d0 [ 1559.589472][T26589] ? __pfx_chrdev_open+0x10/0x10 [ 1559.589496][T26589] vfs_open+0x82/0x3f0 [ 1559.589522][T26589] path_openat+0x2873/0x4280 [ 1559.589550][T26589] ? __pfx_path_openat+0x10/0x10 [ 1559.589575][T26589] do_file_open+0x20e/0x430 [ 1559.589596][T26589] ? __pfx_do_file_open+0x10/0x10 [ 1559.589630][T26589] ? alloc_fd+0x471/0x7a0 [ 1559.589651][T26589] ? do_getname+0x191/0x390 [ 1559.589676][T26589] do_sys_openat2+0x10f/0x1e0 [ 1559.589702][T26589] ? __pfx_do_sys_openat2+0x10/0x10 [ 1559.589731][T26589] ? do_raw_spin_lock+0x128/0x260 [ 1559.589758][T26589] __x64_sys_openat+0x12d/0x210 [ 1559.589783][T26589] ? __pfx___x64_sys_openat+0x10/0x10 [ 1559.589825][T26589] do_syscall_64+0x115/0x840 [ 1559.589842][T26589] ? clear_bhb_loop+0x40/0x90 [ 1559.589864][T26589] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1559.589883][T26589] RIP: 0033:0x7f780739ce59 [ 1559.589900][T26589] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1559.589919][T26589] RSP: 002b:00007f7808274028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1559.589938][T26589] RAX: ffffffffffffffda RBX: 00007f7807616090 RCX: 00007f780739ce59 [ 1559.589951][T26589] RDX: 0000000000000001 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 1559.589962][T26589] RBP: 00007f7807432e6f R08: 0000000000000000 R09: 0000000000000000 [ 1559.589974][T26589] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1559.589985][T26589] R13: 00007f7807616128 R14: 00007f7807616090 R15: 00007ffc80e1b098 [ 1559.590009][T26589] [ 1562.363008][T26613] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1562.462603][T26612] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1563.233503][T25760] Process accounting paused [ 1563.812543][T26628] block nbd0: NBD_DISCONNECT [ 1563.860578][T26628] block nbd0: Send disconnect failed -32 [ 1563.953012][T24493] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 1563.971098][T24493] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 1563.983488][T24493] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 1564.002450][T24493] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 1564.014335][T24493] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 1564.138593][T26628] block nbd0: shutting down sockets [ 1566.104190][T24493] Bluetooth: hci12: command tx timeout [ 1568.173313][T24493] Bluetooth: hci12: command tx timeout [ 1568.918952][T26712] ubi0: attaching mtd0 [ 1568.991147][T26712] ubi0: scanning is finished [ 1569.211424][T26712] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 1569.807712][T26638] bridge0: port 1(bridge_slave_0) entered blocking state [ 1569.865518][T26638] bridge0: port 1(bridge_slave_0) entered disabled state [ 1569.923542][T26638] bridge_slave_0: entered allmulticast mode [ 1569.999224][T26638] bridge_slave_0: entered promiscuous mode [ 1570.056790][T26712] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 1570.105266][T26638] bridge0: port 2(bridge_slave_1) entered blocking state [ 1570.168514][T26638] bridge0: port 2(bridge_slave_1) entered disabled state [ 1570.205528][T26734] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4182'. [ 1570.226992][T26638] bridge_slave_1: entered allmulticast mode [ 1570.243677][T24493] Bluetooth: hci12: command tx timeout [ 1570.273389][T26740] FAULT_INJECTION: forcing a failure. [ 1570.273389][T26740] name failslab, interval 1, probability 0, space 0, times 0 [ 1570.299658][T26638] bridge_slave_1: entered promiscuous mode [ 1570.400605][T26740] CPU: 0 UID: 0 PID: 26740 Comm: syz.1.4183 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1570.400640][T26740] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1570.400647][T26740] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1570.400658][T26740] Call Trace: [ 1570.400665][T26740] [ 1570.400672][T26740] dump_stack_lvl+0x100/0x190 [ 1570.400702][T26740] should_fail_ex.cold+0x5/0xa [ 1570.400727][T26740] should_failslab+0xc2/0x120 [ 1570.400754][T26740] __kmalloc_noprof+0xfc/0x820 [ 1570.400778][T26740] ? __d_alloc+0x650/0xa50 [ 1570.400810][T26740] __d_alloc+0x650/0xa50 [ 1570.400834][T26740] d_alloc_parallel+0x105/0x14b0 [ 1570.400869][T26740] ? __pfx_d_alloc_parallel+0x10/0x10 [ 1570.400896][T26740] ? __pfx___might_resched+0x10/0x10 [ 1570.400928][T26740] ? try_to_unlazy+0x296/0x910 [ 1570.400958][T26740] ? down_read+0x13b/0x4c0 [ 1570.400979][T26740] ? __pfx_down_read+0x10/0x10 [ 1570.401000][T26740] __lookup_slow+0x98/0x320 [ 1570.401026][T26740] lookup_slow+0x50/0x70 [ 1570.401051][T26740] link_path_walk+0x1377/0x1cc0 [ 1570.401087][T26740] path_openat+0x1c9/0x4280 [ 1570.401110][T26740] ? stack_trace_save+0x8e/0xc0 [ 1570.401139][T26740] ? stack_depot_save_flags+0x27/0x9d0 [ 1570.401171][T26740] ? __pfx_path_openat+0x10/0x10 [ 1570.401189][T26740] ? kasan_save_stack+0x3f/0x50 [ 1570.401211][T26740] ? kasan_save_stack+0x30/0x50 [ 1570.401233][T26740] ? kasan_save_track+0x14/0x30 [ 1570.401261][T26740] ? __kasan_kmalloc+0xaa/0xb0 [ 1570.401282][T26740] ? __kmalloc_cache_noprof+0x2e5/0x6c0 [ 1570.401301][T26740] ? do_getname+0x238/0x390 [ 1570.401322][T26740] ? acct_on+0x93/0xa00 [ 1570.401344][T26740] ? __x64_sys_acct+0x81/0x1e0 [ 1570.401370][T26740] do_file_open+0x20e/0x430 [ 1570.401391][T26740] ? __pfx_do_file_open+0x10/0x10 [ 1570.401431][T26740] ? find_held_lock+0x2b/0x80 [ 1570.401455][T26740] ? __might_fault+0xc5/0x140 [ 1570.401475][T26740] ? __might_fault+0xc5/0x140 [ 1570.401498][T26740] file_open_name+0x1c3/0x3e0 [ 1570.401524][T26740] ? __pfx_file_open_name+0x10/0x10 [ 1570.401554][T26740] ? do_getname+0x191/0x390 [ 1570.401579][T26740] acct_on+0xa6/0xa00 [ 1570.401604][T26740] ? __pfx_acct_on+0x10/0x10 [ 1570.401636][T26740] ? bpf_lsm_capable+0x9/0x10 [ 1570.401657][T26740] ? security_capable+0x80/0x260 [ 1570.401681][T26740] __x64_sys_acct+0x81/0x1e0 [ 1570.401705][T26740] ? lockdep_hardirqs_on+0x78/0x100 [ 1570.401736][T26740] do_syscall_64+0x115/0x840 [ 1570.401752][T26740] ? clear_bhb_loop+0x40/0x90 [ 1570.401775][T26740] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1570.401803][T26740] RIP: 0033:0x7f4f60d9ce59 [ 1570.401820][T26740] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1570.401838][T26740] RSP: 002b:00007f4f61bf7028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a3 [ 1570.401857][T26740] RAX: ffffffffffffffda RBX: 00007f4f61015fa0 RCX: 00007f4f60d9ce59 [ 1570.401869][T26740] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000440 [ 1570.401881][T26740] RBP: 00007f4f60e32e6f R08: 0000000000000000 R09: 0000000000000000 [ 1570.401892][T26740] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1570.401904][T26740] R13: 00007f4f61016038 R14: 00007f4f61015fa0 R15: 00007ffda4077fd8 [ 1570.401929][T26740] [ 1571.341809][T26638] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1571.393960][T26638] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1571.839400][T26638] team0: Port device team_slave_0 added [ 1571.897847][T26638] team0: Port device team_slave_1 added [ 1572.049265][T26638] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1572.109763][T26638] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1572.229630][T26756] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1572.266366][T26638] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1572.320385][T26638] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1572.336885][T26756] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4186'. [ 1572.346115][T24493] Bluetooth: hci12: command tx timeout [ 1572.370260][T26638] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1572.504234][T26638] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1572.597160][T26756] bridge0: port 1(bridge_slave_0) entered disabled state [ 1572.971037][T26756] bridge_slave_0 (unregistering): left allmulticast mode [ 1572.985872][T26756] bridge_slave_0 (unregistering): left promiscuous mode [ 1573.039578][T26756] bridge0: port 1(bridge_slave_0) entered disabled state [ 1574.847152][T26638] hsr_slave_0: entered promiscuous mode [ 1574.882786][T26638] hsr_slave_1: entered promiscuous mode [ 1574.919169][T26638] debugfs: 'hsr0' already exists in 'hsr' [ 1574.959629][T26638] Cannot create hsr debugfs directory [ 1576.921103][T26638] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1576.985301][T26638] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1577.001867][T26792] [U]  [ 1577.031548][T26638] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1577.092037][T26638] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1577.138878][T26638] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1577.215799][T26638] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1577.297027][T26638] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1577.362572][T26638] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1577.755090][ T29] audit: type=1800 audit(32798.623:116): pid=26812 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.4193" name="dbroot" dev="configfs" ino=142488 res=0 errno=0 [ 1577.868353][T26819] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1577.940129][T26638] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1578.120341][T26638] 8021q: adding VLAN 0 to HW filter on device team0 [ 1578.212128][T23637] bridge0: port 1(bridge_slave_0) entered blocking state [ 1578.219385][T23637] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1578.353450][T23637] bridge0: port 2(bridge_slave_1) entered blocking state [ 1578.360723][T23637] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1578.442315][T26824] FAULT_INJECTION: forcing a failure. [ 1578.442315][T26824] name failslab, interval 1, probability 0, space 0, times 0 [ 1578.569735][T26824] CPU: 0 UID: 0 PID: 26824 Comm: syz.1.4194 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1578.569768][T26824] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1578.569776][T26824] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1578.569787][T26824] Call Trace: [ 1578.569794][T26824] [ 1578.569802][T26824] dump_stack_lvl+0x100/0x190 [ 1578.569832][T26824] should_fail_ex.cold+0x5/0xa [ 1578.569860][T26824] should_failslab+0xc2/0x120 [ 1578.569888][T26824] kmem_cache_alloc_noprof+0x91/0x6a0 [ 1578.569911][T26824] ? current_cpuset_is_being_rebound+0xf6/0x370 [ 1578.569934][T26824] ? sp_alloc+0x27/0x160 [ 1578.569954][T26824] sp_alloc+0x27/0x160 [ 1578.569972][T26824] mpol_set_shared_policy+0xa5/0x890 [ 1578.569995][T26824] ? __pfx_shmem_set_policy+0x10/0x10 [ 1578.570021][T26824] mbind_range+0x339/0x550 [ 1578.570043][T26824] do_mbind+0x7dc/0xfd0 [ 1578.570068][T26824] ? __pfx_do_mbind+0x10/0x10 [ 1578.570086][T26824] ? find_held_lock+0x2b/0x80 [ 1578.570111][T26824] ? ksys_write+0x190/0x250 [ 1578.570137][T26824] ? __pfx_get_nodes+0x10/0x10 [ 1578.570167][T26824] kernel_mbind+0x1b7/0x200 [ 1578.570187][T26824] ? __pfx_kernel_mbind+0x10/0x10 [ 1578.570213][T26824] do_syscall_64+0x115/0x840 [ 1578.570230][T26824] ? clear_bhb_loop+0x40/0x90 [ 1578.570252][T26824] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1578.570272][T26824] RIP: 0033:0x7f4f60d9ce59 [ 1578.570288][T26824] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1578.570307][T26824] RSP: 002b:00007f4f61bd6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed [ 1578.570325][T26824] RAX: ffffffffffffffda RBX: 00007f4f61016090 RCX: 00007f4f60d9ce59 [ 1578.570345][T26824] RDX: 0000000000000004 RSI: 00000000002091d2 RDI: 0000000000000000 [ 1578.570356][T26824] RBP: 00007f4f60e32e6f R08: 0000002000000006 R09: 0000000000000002 [ 1578.570367][T26824] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1578.570379][T26824] R13: 00007f4f61016128 R14: 00007f4f61016090 R15: 00007ffda4077fd8 [ 1578.570408][T26824] [ 1579.767687][T24493] Bluetooth: hci6: command 0x0406 tx timeout [ 1579.936609][T26638] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1580.911508][T26851] blktrace: Concurrent blktraces are not allowed on nbd5 [ 1581.153294][T26859] [U]  [ 1582.637134][T26887] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4205'. [ 1582.779640][T26887] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1582.816716][T26888] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4205'. [ 1582.885805][T26887] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1584.850785][T26887] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1584.877806][T26887] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1585.453055][T26888] macvtap0: entered promiscuous mode [ 1585.469368][T26888] macvtap0: entered allmulticast mode [ 1585.482569][T26888] veth0_macvtap: entered allmulticast mode [ 1586.574007][T26638] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1586.661767][T17449] Bluetooth: hci9: unexpected subevent 0x01 length: 123 > 18 [ 1586.671446][T17449] Bluetooth: hci9: Invalid handle: 0x3a4a > 0x0eff [ 1587.177662][ T5745] Process accounting resumed [ 1587.987998][T26638] veth0_vlan: entered promiscuous mode [ 1588.193949][T26638] veth1_vlan: entered promiscuous mode [ 1588.631404][T26638] veth0_macvtap: entered promiscuous mode [ 1588.785295][T26638] veth1_macvtap: entered promiscuous mode [ 1589.113909][T26638] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1589.175114][T26906] Process accounting resumed [ 1589.315652][T26638] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1589.406389][T11559] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1589.455338][T11559] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1589.516483][T11559] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1589.579925][T11559] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1591.056815][T11559] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1591.106316][T11559] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1592.595772][T23632] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1592.641627][T23632] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1593.001290][T25222] NFSD: Failed to start, no listeners configured. [ 1596.176061][T26972] FAULT_INJECTION: forcing a failure. [ 1596.176061][T26972] name failslab, interval 1, probability 0, space 0, times 0 [ 1596.404350][T26972] CPU: 0 UID: 0 PID: 26972 Comm: syz.3.4222 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1596.404386][T26972] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1596.404394][T26972] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1596.404405][T26972] Call Trace: [ 1596.404412][T26972] [ 1596.404419][T26972] dump_stack_lvl+0x100/0x190 [ 1596.404448][T26972] should_fail_ex.cold+0x5/0xa [ 1596.404473][T26972] should_failslab+0xc2/0x120 [ 1596.404499][T26972] kmem_cache_alloc_noprof+0x91/0x6a0 [ 1596.404524][T26972] ? d_instantiate+0x8a/0xb0 [ 1596.404546][T26972] ? d_instantiate+0x8a/0xb0 [ 1596.404567][T26972] ? alloc_empty_file+0x5b/0x1c0 [ 1596.404596][T26972] alloc_empty_file+0x5b/0x1c0 [ 1596.404620][T26972] alloc_file_pseudo+0x183/0x290 [ 1596.404646][T26972] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 1596.404669][T26972] ? alloc_fd+0x471/0x7a0 [ 1596.404696][T26972] ? do_raw_spin_unlock+0x145/0x1e0 [ 1596.404721][T26972] __anon_inode_getfile+0xe8/0x280 [ 1596.404749][T26972] anon_inode_getfile_fmode+0x37/0xa0 [ 1596.404775][T26972] do_eventfd+0x159/0x2b0 [ 1596.404805][T26972] __x64_sys_eventfd+0x32/0x50 [ 1596.404835][T26972] do_syscall_64+0x115/0x840 [ 1596.404852][T26972] ? clear_bhb_loop+0x40/0x90 [ 1596.404875][T26972] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1596.404894][T26972] RIP: 0033:0x7f5dbdd9ce59 [ 1596.404910][T26972] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1596.404928][T26972] RSP: 002b:00007f5dbeb8f028 EFLAGS: 00000246 ORIG_RAX: 000000000000011c [ 1596.404946][T26972] RAX: ffffffffffffffda RBX: 00007f5dbe015fa0 RCX: 00007f5dbdd9ce59 [ 1596.404958][T26972] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 1596.404968][T26972] RBP: 00007f5dbde32e6f R08: 0000000000000000 R09: 0000000000000000 [ 1596.404980][T26972] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1596.404991][T26972] R13: 00007f5dbe016038 R14: 00007f5dbe015fa0 R15: 00007ffe66fcd0f8 [ 1596.405013][T26972] [ 1597.711542][T17449] Bluetooth: hci12: unexpected subevent 0x01 length: 123 > 18 [ 1597.721160][T17449] Bluetooth: hci12: Invalid handle: 0x3a4a > 0x0eff [ 1598.120601][T26995] ERROR: Out of memory at tomoyo_memory_ok. [ 1599.154211][ T5697] Process accounting resumed [ 1599.353759][T26990] Process accounting resumed [ 1600.112917][T24493] Bluetooth: hci2: command 0x0406 tx timeout [ 1601.903787][T27033] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4235'. [ 1602.006839][T27034] netlink: 25 bytes leftover after parsing attributes in process `syz.4.4235'. [ 1603.128574][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 1603.145231][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 1605.192253][T24493] Bluetooth: hci7: command 0x0406 tx timeout [ 1605.835121][T27070] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4244'. [ 1607.081173][ T29] audit: type=1800 audit(32828.085:117): pid=27079 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.4246" name="SYSV00000008" dev="hugetlbfs" ino=0 res=0 errno=0 [ 1608.001664][T27095] netlink: 'syz.1.4249': attribute type 2 has an invalid length. [ 1608.419984][T27105] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4250'. [ 1608.489733][T27106] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4250'. [ 1611.297024][T27136] netlink: 85 bytes leftover after parsing attributes in process `syz.2.4258'. [ 1611.348272][T27138] synth uevent: /bus/usb/drivers/igorplugusb: unknown uevent action string [ 1612.342147][T27155] openvswitch: netlink: IPv4 tunnel dst address is zero [ 1615.210464][ T30] INFO: task syz-executor:17446 blocked for more than 143 seconds. [ 1615.218996][ T30] Tainted: G U L syzkaller #0 [ 1615.249894][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1615.300305][ T30] task:syz-executor state:D stack:23848 pid:17446 tgid:17446 ppid:1 task_flags:0x400140 flags:0x00080002 [ 1615.351851][ T30] Call Trace: [ 1615.367042][ T30] [ 1615.370358][T24493] Bluetooth: hci8: command 0x0406 tx timeout [ 1615.405132][ T30] __schedule+0x125c/0x6730 [ 1615.420637][ T30] ? do_raw_spin_lock+0x128/0x260 [ 1615.437106][ T30] ? __pfx___schedule+0x10/0x10 [ 1615.456221][ T30] ? find_held_lock+0x2b/0x80 [ 1615.473555][ T30] ? schedule+0x225/0x2c0 [ 1615.493414][ T30] schedule+0xdd/0x2c0 [ 1615.507074][ T30] schedule_preempt_disabled+0x13/0x30 [ 1615.526425][ T30] __mutex_lock+0xccc/0x1bd0 [ 1615.543885][ T30] ? nfsd_shutdown_threads+0x5b/0xf0 [ 1615.586933][ T30] ? __lock_acquire+0x49f/0x1a40 [ 1615.602655][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 1615.617992][ T30] ? net_generic+0xea/0x2a0 [ 1615.632827][ T30] ? net_generic+0xea/0x2a0 [ 1615.649134][ T30] ? nfsd_shutdown_threads+0x5b/0xf0 [ 1615.669547][ T30] nfsd_shutdown_threads+0x5b/0xf0 [ 1615.692153][ T30] nfsd_umount+0x3b/0x60 [ 1615.706472][ T30] deactivate_locked_super+0xc1/0x1b0 [ 1615.723081][ T30] deactivate_super+0xe7/0x110 [ 1615.739495][ T30] cleanup_mnt+0x21f/0x450 [ 1615.754163][ T30] task_work_run+0x150/0x240 [ 1615.771920][ T30] ? __pfx_task_work_run+0x10/0x10 [ 1615.800186][ T30] exit_to_user_mode_loop+0x1d8/0x6f0 [ 1615.817291][ T30] ? rcu_is_watching+0x12/0xc0 [ 1615.838506][ T30] do_syscall_64+0x652/0x840 [ 1615.870031][ T30] ? clear_bhb_loop+0x40/0x90 [ 1615.879776][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1615.910881][ T30] RIP: 0033:0x7f784a99e097 [ 1615.934734][ T30] RSP: 002b:00007ffc502fbcc8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 1615.958337][ T30] RAX: 0000000000000000 RBX: 00007f784aa322ca RCX: 00007f784a99e097 [ 1615.985882][ T30] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc502fbd80 [ 1616.019979][ T30] RBP: 00007ffc502fbd80 R08: 00007ffc502fcd80 R09: 00000000ffffffff [ 1616.049266][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc502fce10 [ 1616.076550][ T30] R13: 00007f784aa322ca R14: 000000000016567a R15: 00007ffc502fce50 [ 1616.125438][ T30] [ 1616.138339][ T30] INFO: task syz-executor:25409 blocked for more than 144 seconds. [ 1616.198238][ T30] Tainted: G U L syzkaller #0 [ 1616.238538][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1616.276987][ T30] task:syz-executor state:D stack:23896 pid:25409 tgid:25409 ppid:1 task_flags:0x400140 flags:0x00080002 [ 1616.351487][ T30] Call Trace: [ 1616.370604][ T30] [ 1616.384603][ T30] __schedule+0x125c/0x6730 [ 1616.411143][ T30] ? do_raw_spin_lock+0x128/0x260 [ 1616.435422][ T30] ? __pfx___schedule+0x10/0x10 [ 1616.459603][ T30] ? find_held_lock+0x2b/0x80 [ 1616.480407][ T30] ? schedule+0x225/0x2c0 [ 1616.510629][ T30] schedule+0xdd/0x2c0 [ 1616.534618][ T30] schedule_preempt_disabled+0x13/0x30 [ 1616.565128][ T30] __mutex_lock+0xccc/0x1bd0 [ 1616.584838][ T30] ? nfsd_shutdown_threads+0x5b/0xf0 [ 1616.609233][ T30] ? __lock_acquire+0x49f/0x1a40 [ 1616.626840][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 1616.643756][ T30] ? net_generic+0xea/0x2a0 [ 1616.665588][ T30] ? net_generic+0xea/0x2a0 [ 1616.681686][ T30] ? nfsd_shutdown_threads+0x5b/0xf0 [ 1616.698995][ T30] nfsd_shutdown_threads+0x5b/0xf0 [ 1616.730342][ T30] nfsd_umount+0x3b/0x60 [ 1616.748393][ T30] deactivate_locked_super+0xc1/0x1b0 [ 1616.767325][ T30] deactivate_super+0xe7/0x110 [ 1616.786459][ T30] cleanup_mnt+0x21f/0x450 [ 1616.807992][ T30] task_work_run+0x150/0x240 [ 1616.822953][ T30] ? __pfx_task_work_run+0x10/0x10 [ 1616.841200][ T30] exit_to_user_mode_loop+0x1d8/0x6f0 [ 1616.859198][ T30] ? rcu_is_watching+0x12/0xc0 [ 1616.876532][ T30] do_syscall_64+0x652/0x840 [ 1616.911650][ T30] ? clear_bhb_loop+0x40/0x90 [ 1616.927478][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1616.948077][ T30] RIP: 0033:0x7f144d99e097 [ 1616.965584][ T30] RSP: 002b:00007ffe247e6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 1616.996722][ T30] RAX: 0000000000000000 RBX: 00007f144da322ca RCX: 00007f144d99e097 [ 1617.031043][ T30] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe247e60e0 [ 1617.062691][ T30] RBP: 00007ffe247e60e0 R08: 00007ffe247e70e0 R09: 00000000ffffffff [ 1617.088367][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe247e7170 [ 1617.127871][ T30] R13: 00007f144da322ca R14: 00000000001662d6 R15: 00007ffe247e71b0 [ 1617.152302][ T30] [ 1617.162564][ T30] [ 1617.162564][ T30] Showing all locks held in the system: [ 1617.220940][ T30] 1 lock held by khungtaskd/30: [ 1617.239533][ T30] #0: ffffffff8e7e5ec0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 1617.285632][ T30] 5 locks held by kworker/u12:1/11559: [ 1617.309524][ T30] #0: ffff88801c6c6140 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x12b1/0x1940 [ 1617.365058][ T30] #1: ffffc90003e2fd08 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x988/0x1940 [ 1617.421253][ T30] #2: ffffffff906289c8 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xb8/0x920 [ 1617.475876][ T30] #3: ffffffff906415c0 (rtnl_mutex){+.+.}-{4:4}, at: ops_undo_list+0x7ec/0xab0 [ 1617.531155][ T30] #4: ffffffff8e7f1968 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x27f/0x3c0 [ 1617.586768][ T30] 2 locks held by syz-executor/17446: [ 1617.613917][ T30] #0: ffff888079f220d8 (&type->s_umount_key#53){+.+.}-{4:4}, at: deactivate_super+0xdf/0x110 [ 1617.688313][ T30] #1: ffffffff8ec6f080 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 1617.734317][ T30] 1 lock held by syz.0.3003/20434: [ 1617.766736][ T30] 2 locks held by getty/23298: [ 1617.789537][ T30] #0: ffff888035e160a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 1617.838404][ T30] #1: ffffc900024fa2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x14e0 [ 1617.887662][ T30] 1 lock held by syz.1.3662/23552: [ 1617.931079][ T30] 2 locks held by kworker/u12:19/23635: [ 1617.958800][ T30] #0: ffff88801e7be140 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_one_work+0x12b1/0x1940 [ 1618.005054][ T30] #1: ffffc90004ca7d08 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_one_work+0x988/0x1940 [ 1618.042774][ T30] 2 locks held by syz-executor/23735: [ 1618.061413][ T30] #0: ffff8880564e40d8 (&type->s_umount_key#53){+.+.}-{4:4}, at: deactivate_super+0xdf/0x110 [ 1618.106340][ T30] #1: ffffffff8ec6f080 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 1618.139987][ T30] 2 locks held by syz.3.3997/25222: [ 1618.159462][ T30] #0: ffffffff906efe68 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1618.185055][ T30] #1: ffffffff8ec6f080 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x8c8/0x1100 [ 1618.237577][ T30] 2 locks held by syz-executor/25409: [ 1618.249690][ T30] #0: ffff8880331ae0d8 (&type->s_umount_key#53){+.+.}-{4:4}, at: deactivate_super+0xdf/0x110 [ 1618.282335][ T30] #1: ffffffff8ec6f080 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 1618.313950][ T30] 2 locks held by syz-executor/25651: [ 1618.344771][ T30] #0: ffff88805be560d8 (&type->s_umount_key#53){+.+.}-{4:4}, at: deactivate_super+0xdf/0x110 [ 1618.377736][ T30] #1: ffffffff8ec6f080 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 1618.446852][ T30] 2 locks held by syz-executor/25792: [ 1618.469106][ T30] #0: ffff8880654880d8 (&type->s_umount_key#53){+.+.}-{4:4}, at: deactivate_super+0xdf/0x110 [ 1618.513295][ T30] #1: ffffffff8ec6f080 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 1618.566178][ T30] 2 locks held by syz.0.4112/26127: [ 1618.589947][ T30] #0: ffffffff906efe68 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1618.625076][ T30] #1: ffffffff8ec6f080 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_version_set_doit+0xc4/0x7a0 [ 1618.679281][ T30] 2 locks held by syz.8.4144/26405: [ 1618.703695][ T30] #0: ffffffff906efe68 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1618.744870][ T30] #1: ffffffff8ec6f080 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0xd5/0x1a80 [ 1618.793541][ T30] 2 locks held by syz.8.4144/26409: [ 1618.816651][ T30] #0: ffffffff906efe68 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1618.857570][ T30] #1: ffffffff8ec6f080 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0xd5/0x1a80 [ 1618.910019][ T30] 2 locks held by syz.3.4264/27163: [ 1618.932099][ T30] #0: ffffffff906efe68 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1618.975143][ T30] #1: ffffffff8ec6f080 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_get_doit+0x13f/0x7c0 [ 1619.026684][ T30] 4 locks held by syz.1.4265/27169: [ 1619.064442][ T30] [ 1619.083486][ T30] ============================================= [ 1619.083486][ T30] [ 1619.136899][ T30] NMI backtrace for cpu 0 [ 1619.136920][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Tainted: G U L syzkaller #0 PREEMPT(full) [ 1619.136949][ T30] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1619.136956][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1619.136967][ T30] Call Trace: [ 1619.136974][ T30] [ 1619.136982][ T30] dump_stack_lvl+0x100/0x190 [ 1619.137012][ T30] nmi_cpu_backtrace.cold+0x12d/0x151 [ 1619.137038][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1619.137064][ T30] nmi_trigger_cpumask_backtrace+0x21c/0x2a0 [ 1619.137093][ T30] sys_info+0x141/0x190 [ 1619.137115][ T30] watchdog+0xcb1/0x1030 [ 1619.137149][ T30] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1619.137177][ T30] ? __pfx_watchdog+0x10/0x10 [ 1619.137206][ T30] ? __kthread_parkme+0x18c/0x230 [ 1619.137232][ T30] ? kthread+0x13a/0x450 [ 1619.137256][ T30] ? __pfx_watchdog+0x10/0x10 [ 1619.137283][ T30] kthread+0x370/0x450 [ 1619.137308][ T30] ? __pfx_kthread+0x10/0x10 [ 1619.137335][ T30] ret_from_fork+0x72b/0xd50 [ 1619.137368][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 1619.137393][ T30] ? __switch_to+0x800/0x10f0 [ 1619.137410][ T30] ? __switch_to_asm+0x39/0x70 [ 1619.137438][ T30] ? __pfx_kthread+0x10/0x10 [ 1619.137465][ T30] ret_from_fork_asm+0x1a/0x30 [ 1619.137502][ T30] [ 1619.830708][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 1619.837609][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Tainted: G U L syzkaller #0 PREEMPT(full) [ 1619.848314][ T30] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1619.853514][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1619.863586][ T30] Call Trace: [ 1619.866872][ T30] [ 1619.869836][ T30] dump_stack_lvl+0x100/0x190 [ 1619.874549][ T30] vpanic+0x552/0x970 [ 1619.878537][ T30] ? __pfx_vpanic+0x10/0x10 [ 1619.883752][ T30] ? nmi_trigger_cpumask_backtrace+0x1c7/0x2a0 [ 1619.889932][ T30] panic+0xd1/0xe0 [ 1619.893666][ T30] ? __pfx_panic+0x10/0x10 [ 1619.898089][ T30] ? nmi_trigger_cpumask_backtrace+0x1fa/0x2a0 [ 1619.904427][ T30] ? nmi_trigger_cpumask_backtrace+0x260/0x2a0 [ 1619.910588][ T30] ? nmi_trigger_cpumask_backtrace+0x26a/0x2a0 [ 1619.916757][ T30] ? watchdog.cold+0x1ec/0x234 [ 1619.921533][ T30] ? watchdog+0xcc1/0x1030 [ 1619.925955][ T30] watchdog.cold+0x1fd/0x234 [ 1619.930548][ T30] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1619.936623][ T30] ? __pfx_watchdog+0x10/0x10 [ 1619.941327][ T30] ? __kthread_parkme+0x18c/0x230 [ 1619.946389][ T30] ? kthread+0x13a/0x450 [ 1619.950667][ T30] ? __pfx_watchdog+0x10/0x10 [ 1619.955357][ T30] kthread+0x370/0x450 [ 1619.959435][ T30] ? __pfx_kthread+0x10/0x10 [ 1619.964033][ T30] ret_from_fork+0x72b/0xd50 [ 1619.968633][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 1619.973760][ T30] ? __switch_to+0x800/0x10f0 [ 1619.978437][ T30] ? __switch_to_asm+0x39/0x70 [ 1619.983212][ T30] ? __pfx_kthread+0x10/0x10 [ 1619.987826][ T30] ret_from_fork_asm+0x1a/0x30 [ 1619.992614][ T30] [ 1619.995692][ T30] Kernel Offset: disabled [ 1620.000038][ T30] Rebooting in 86400 seconds..