last executing test programs: 17m22.159152909s ago: executing program 32 (id=416): openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/pcm0p/oss\x00', 0xaa102, 0x0) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x82040, 0x0) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) prctl$auto(0x8004, 0x1, 0x0, 0x1, 0x4) select$auto(0x7, 0x0, 0x0, 0x0, 0x0) capget$auto(0x0, 0xfffffffffffffffe) r0 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$auto_IOCTL_VMCI_VERSION2(r0, 0x7a7, 0x0) ioctl$auto_IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, 0x6) r1 = openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/block/loop9/hctx0/sched_tags_bitmap\x00', 0x101a00, 0x0) r2 = setfsuid$auto(0xee00) r3 = setfsuid$auto(0xee01) setresuid$auto(r2, r3, r3) r4 = pidfd_open$auto(0x1, 0x0) setns(r4, 0x8000000) read$auto_blk_mq_debugfs_fops_blk_mq_debugfs(r1, &(0x7f0000000340)=""/179, 0xb3) ioctl$auto_IOCTL_VMCI_CTX_SET_CPT_STATE(r0, 0x7b2, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x100000a3d9) mmap$auto(0xc, 0x20009, 0x5, 0x14, 0xffffffffffffffff, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000001a40), r5) madvise$auto(0x8000000000, 0x200007, 0x6) msync$auto(0x1ffff000, 0x17ffffffffffffe, 0x400000004) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x181482, 0x0) write$auto(0x3, 0x0, 0xfdef) mmap$auto(0xfffffffffffffffe, 0x499346eb, 0x35, 0x8000000040ebf, 0xd, 0x300000000000) madvise$auto(0x0, 0x2003f0, 0x18) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0xffffffffffffffff, 0x8000000000000000) 15m59.684353358s ago: executing program 33 (id=681): mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) pread64$auto(0xffffffffffffffff, 0x0, 0x5000f42a, 0x100) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r0 = socket(0xa, 0x2, 0x0) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) fcntl$auto_F_ADD_SEALS(r0, 0x409, 0x2) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop5\x00', 0x20000, 0x0) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) ioctl$auto_BLKALIGNOFF(r1, 0x127a, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r2 = socket(0x2, 0x1, 0x106) sendmsg$auto_TIPC_NL_BEARER_GET(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x64, 0x0, 0x20, 0x70bd2a, 0x25dfdbfd, {}, [@TIPC_NLA_NAME_TABLE={0x50, 0x8, 0x0, 0x1, [@typed={0x8, 0xc5, 0x0, 0x0, @fd=r0}, @generic="68ab838a269c8840a2d0b830a2e2d83ba8d9aad268fdbc3e1643e952ceb0e22178b101cf4989fe1259130a81aa33d2fd7897f176404f7f431f35aade2f2099434ddd6b48"]}]}, 0x64}, 0x1, 0x0, 0x0, 0x40c0}, 0x20040810) openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, 0x0, 0x408002, 0x0) r3 = openat$auto_ubi_ctrl_cdev_operations_ubi(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0) ioctl$auto_UBI_IOCATT(r3, 0x40186f40, &(0x7f0000000000)={0xffffffff, 0x1, 0xf7d, 0x8, 0x1, 0x1}) setsockopt$auto(0x3, 0x1, 0x21, 0x0, 0x9) setsockopt$auto(0x3, 0x0, 0x13, 0x0, 0x9) mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snd/controlC0\x00', 0x0, 0x0) unshare$auto(0x40000080) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) setresuid$auto(0xffffffffffffffff, 0x0, 0x0) write$auto(r4, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) 5m31.743953703s ago: executing program 1 (id=2808): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) close_range$auto(0x2, 0x8000, 0x0) (async) r0 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f00000003c0)={0x108, r0, 0x300, 0x70bd2a, 0x25dfdbfc, {}, [@NL80211_ATTR_P2P_OPPPS={0x5, 0xa3, 0x9}, @NL80211_ATTR_MAC_HINT={0x2b, 0xc8, "eb9cd636dc61c3a3414bbc018649d3a4c6677bbad59187d26e51e2193567a97739ee2eff49de16"}, @NL80211_ATTR_VHT_CAPABILITY={0xb7, 0x9d, "044d0e3147d4593ef931c90774f0aa83a5b3e04ecf50ea5704c9fe1957ef2824adf8012389a46cbc1046616cf9382eebb8f337ad08480c1881583e494a2ec4d820873f5c552489ff7927079634c05433080140def0c59d75700857ff1ae19b5f4e1b0944896c7f55625da90cd4f8334202fe458595dd15cc471f2e0ede31fc918961e0000936dd1b90820f54c263f68fb7b92d46d72e4ac724492f5a8d62f9cff3340de136000a6d72e79ebb97affb4598f367"}, @NL80211_ATTR_PID={0x8}]}, 0x108}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) socket(0x10, 0x2, 0x15) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1300f51c230ca8d57a148353e98649c41bf6760b7a44722d45d95d1e6ce26828263b6cd180728dad0000bb8cf47a75d02b9deb7397d42716d660f3ea89bb42d7cb2ac26cae3b4d600247614007f59bc5d7c0796f9a8f6a60f7a0327fc2d82c75f49d8167439693ea98bba91ccd0f7906f84a3af16d2e1960f436e12cecfe584f075060de40ee777ee79d19b7"], 0x1ac}, 0x1, 0x0, 0x0, 0x10}, 0x4004) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) (async) madvise$auto(0x200, 0x401, 0xf6) 5m31.650464387s ago: executing program 1 (id=2810): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) (async) r0 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000200)='/dev/input/event0\x00', 0x60000, 0x0) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) ioctl$auto_dvb_demux_fops_dmxdev(0xffffffffffffffff, 0x403c6f2b, 0x0) (async) readv$auto(0x3, 0x0, 0x8) r1 = io_uring_setup$auto(0x7, 0x0) readv$auto(0x3, &(0x7f0000001100)={0x0, 0xffff}, 0x1) close_range$auto(0x2, 0x8, 0x0) (async) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000001a80)='/dev/bus/usb/031/001\x00', 0x208000, 0x0) r2 = openat$auto_proc_page_owner_operations_page_owner(0xffffffffffffff9c, &(0x7f00000010c0), 0x0, 0x0) clone$auto(0x6, 0xe74b, 0xfffffffffffffffc, 0xfffffffffffffffc, 0x84fffffffd) (async) socket(0x28, 0x1, 0x0) (async) connect$auto(0x3, &(0x7f00000000c0)=@vsock={0x28, 0x0, 0x0, @my=0x1}, 0x55) ioctl$auto(0x3, 0x541b, 0x74) r3 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000040), r1) sendmsg$auto_NETDEV_CMD_BIND_RX(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x70, r3, 0x300, 0x70bd2a, 0x25dfdbfc, {}, [@NETDEV_A_DMABUF_FD={0x8, 0x3, r2}, @NETDEV_A_DMABUF_QUEUES={0x54, 0x2, 0x0, 0x1, [@NETDEV_A_QUEUE_ID={0x8, 0x1, 0x960}, @NETDEV_A_QUEUE_TYPE={0x8, 0x3, 0x3}, @NETDEV_A_QUEUE_ID={0x8, 0x1, 0x7}, @NETDEV_A_QUEUE_TYPE={0x8, 0x3, 0xe361}, @NETDEV_A_QUEUE_ID={0x8, 0x1, 0xaf4d}, @NETDEV_A_QUEUE_TYPE={0x8, 0x3, 0x6}, @NETDEV_A_QUEUE_ID={0x8, 0x1, 0x740}, @NETDEV_A_QUEUE_ID={0x8, 0x1, 0xfffff971}, @NETDEV_A_QUEUE_ID={0x8, 0x1, 0xe}, @NETDEV_A_QUEUE_ID={0x8, 0x1, 0x8}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) 5m31.108675233s ago: executing program 1 (id=2813): semctl$auto(0x7, 0x2, 0x13, 0x1) (async) ioctl$auto_SOUND_MIXER_READ_STEREODEVS2(0xffffffffffffffff, 0x80044dfb, 0x0) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r1 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f00000025c0), 0xffffffffffffffff) (rerun: 64) sendmsg$auto_TIPC_NL_BEARER_ADD(r0, &(0x7f0000006440)={0x0, 0x0, &(0x7f0000006400)={&(0x7f00000027c0)={0x18, r1, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x8840) io_submit$auto(0x6, 0x7f, &(0x7f0000000040)=&(0x7f0000000000)={0x6fffffffffffff, 0xb, 0x8, 0x3, 0x2, 0x3b, 0xfffffffffffffc00, 0x2, 0xfff, 0x0, 0x6}) (async) writev$auto(0xc8, &(0x7f00000028c0)={&(0x7f0000000000), 0x200}, 0x9) (async) setresuid$auto(0xffffffffffffffff, 0xeffffffeffffffff, 0xd2) (async) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/zswap/parameters/compressor\x00', 0xc0002, 0x0) write$auto_ocfs2_control_fops_stack_user(r2, &(0x7f0000003900)='\t', 0x1) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) (async) r3 = open(&(0x7f0000000040)='./cgroup/../file0\x00', 0x0, 0x90) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/net/afs/stats\x00', 0x8200, 0x0) (async) prctl$auto(0x2f, 0xf, 0xffffffffffffffff, 0x0, 0x0) (async) syz_clone3(&(0x7f00000003c0)={0x383201180, 0x0, 0x0, 0x0, {0x1a}, 0x0, 0x0, 0x0, 0x0, 0x0, {r3}}, 0x58) (async) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/memory_hotplug/parameters/online_policy\x00', 0x2, 0x0) (async) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) read$auto(r4, 0x0, 0x800) 5m30.383988972s ago: executing program 1 (id=2817): r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/snd/controlC2\x00', 0x103841, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000100)={{@raw=0x2, 0x85, 0xf67, 0x1, "669cbbd9e9756f22fdffa199e0f106000000000000000b2f4ab8633824f2d2252ca5f200", @raw=0x101}, 0x0, @integer=@value=[0x6, 0x0, 0x5, 0x80, 0xfffffffffffffffe, 0x8b0, 0x4, 0x8000000000000001, 0x100000000000004, 0x2090, 0xf7a, 0x6, 0x3, 0x1, 0x0, 0x7fffffffffffffff, 0x9, 0x3, 0x6, 0x7fffffffffffffff, 0xfffffffffffffffe, 0x6, 0x2, 0x8, 0x10, 0xfffffffffffffffe, 0x3, 0x7, 0x6d, 0x3, 0xfffffffffffffff7, 0x10000, 0x5, 0x6, 0x3ff, 0x5, 0x6, 0x7, 0xa78, 0x100000000000000, 0x4, 0x1, 0x0, 0x29, 0x81, 0x50, 0x5, 0x6, 0x8, 0x2afb, 0x803, 0x80, 0x4, 0x0, 0x4572, 0x9, 0xce13, 0x0, 0x4, 0x6, 0xd, 0x0, 0xfff, 0xc, 0xfffffffffffffffb, 0x6, 0xff, 0x10001, 0x0, 0x9, 0x9, 0x3, 0xd3ad, 0x9, 0x5, 0x7, 0x100000001, 0xffffffffffffffdc, 0x5, 0x1, 0x1000, 0x100000001, 0x100, 0x80000001, 0x8, 0x7, 0x4, 0x8, 0x800000000010, 0xff, 0x6, 0xff8000000, 0x2a4c32e3, 0x800, 0x18, 0x200000000000007, 0x4, 0x57, 0x1, 0x6, 0x7fffffffffffffff, 0x119af68c, 0x3, 0x4, 0x7, 0x6, 0xfffffffffffffffe, 0x8000000000000001, 0x5, 0x8, 0xc8d, 0x7, 0x7, 0x2, 0x9, 0xfffffffffffffff8, 0x4, 0xc, 0x6, 0x3, 0x10001, 0x4bb2, 0x2, 0x400, 0x401, 0x8, 0x7], "282f77b07e718e11749a346177741dc299a28a585e87e0d908e2c8e50de501951d8fcdc4f791a11996aad5af504c0d9927e62ef70b23a13735a4fe805c1ce1b6b1d83d21bb42794ec925b4547a3d52d4b5210392111e181719fef9d685b6534b171d76ad633f94a608b818600a6c8500"}) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x40400, 0x48) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000640), r2) sendmsg$auto_NL802154_CMD_SET_PAN_ID(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000011c0)=ANY=[], 0x1058}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$auto_NL80211_CMD_GET_WIPHY(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000140)=ANY=[@ANYBLOB="18000000", @ANYRES16=r3, @ANYBLOB="810b25bd7080fbdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0xc004) recvmmsg$auto(r2, &(0x7f0000000180)={{0x0, 0x5, 0x0, 0x0, 0x0, 0x2, 0x6}, 0x803}, 0x10a, 0x6, 0x0) faccessat$auto(r1, &(0x7f0000000140)='./cgroup\x00', 0x2) 5m30.276593854s ago: executing program 1 (id=2818): socket(0x11, 0x800, 0x10000) accept$auto(0x3, 0xffffffffffffffff, 0xffffffffffffffff) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS1\x00', 0x20000, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x2000000, &(0x7f0000000080)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0x6}, 0x800}, 0x5, 0x4008) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r1 = socket(0x2, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4ea2, @remote}, 0x6a) sendmmsg$auto(r1, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0x101}, 0x8}, 0x7, 0x20020000) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) write$auto(0x3, 0x0, 0x7fffffff) r2 = socket(0x2, 0x5, 0x106) kexec_load$auto(0x6, 0xb, 0x0, 0xe0000000) openat$auto_tracing_cpumask_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/tracing_cpumask\x00', 0xa901, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) getsockopt$auto(0x3, 0x6, 0xb, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x2, 0xeb1, 0xfffffffffffffffa, 0x8000) bpf$auto(0x0, &(0x7f0000000100)=@bpf_attr_5={@target_fd, 0xffffffffffffffff, 0x9f, 0x0, 0x1, @relative_fd, 0x5}, 0x96) sendmmsg$auto(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, 0x0, 0x106, 0x0, 0x1, 0x697b}, 0xed7138c}, 0x9a6, 0xe000) sendfile$auto(0x1, 0x3, 0x0, 0x74c) pipe$auto(&(0x7f0000000180)=r2) r3 = openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x10303f, 0x0) ioctl$auto_SNAPSHOT_ATOMIC_RESTORE(r3, 0x3304, 0x0) shutdown$auto(0x200000003, 0x2) openat$auto_vhci_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000d00), 0x60100, 0x0) 5m29.351672189s ago: executing program 1 (id=2823): openat$auto_debugfs_devm_entry_ops_file(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/cec/cec6/status\x00', 0x100, 0x0) (async) r0 = openat$auto_debugfs_devm_entry_ops_file(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/cec/cec6/status\x00', 0x100, 0x0) pread64$auto(r0, 0x0, 0x5, 0x3) mq_timedsend$auto(r0, &(0x7f0000000100)='\x06.\x00', 0xfff, 0x9, &(0x7f0000000140)={0x101, 0xffff}) (async) mq_timedsend$auto(r0, &(0x7f0000000100)='\x06.\x00', 0xfff, 0x9, &(0x7f0000000140)={0x101, 0xffff}) r1 = socket(0x2a, 0x3, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) mmap$auto(0x0, 0xc0000000, 0xdb, 0xbf1, 0xffffffffffffffff, 0x8000) mmap$auto(0xc, 0x4000000404, 0x4000000000df, 0x8000000040eb2, 0x4, 0x300000000000) r2 = prctl$auto(0x21, 0x1, 0x0, 0x0, 0x0) syz_clone3(0x0, 0x0) read$auto(0xffffffffffffffff, 0x0, 0x4) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/if_inet6\x00', 0x440, 0x0) mremap$auto(0x1fefff, 0xff, 0x843, 0x3, 0xfffff000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_sc_seq_fops_netdebug(0xffffffffffffff9c, &(0x7f0000000080), 0x1a1400, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup/pids.current\x00', 0x400000, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f0000000240)=""/4110, 0x100e) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) ioctl$auto_XFS_IOC_GETPARENTS_BY_HANDLE(r2, 0xc040583f, &(0x7f0000000000)={{@align=0x2, {0x4005, 0x0, 0x4, 0xc}}, {{[0x10001, 0x2, 0x1, 0x6]}, 0x1000, 0x48, 0x8, 0x0, 0x5f0}}) mmap$auto(0x0, 0x20005, 0x4000000000df, 0xeb1, 0xffffffffffffffff, 0x8000) io_uring_setup$auto(0x6, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) socket(0x25, 0x1, 0x84) (async) socket(0x25, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x801, 0x84) socket(0xa, 0x2, 0x400000) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/per_cpu/cpu1/trace_pipe_raw\x00', 0x82000, 0x0) (async) r4 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/per_cpu/cpu1/trace_pipe_raw\x00', 0x82000, 0x0) close_range$auto(0x2, 0x8, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) ioctl$auto_tracing_buffers_fops_trace(r4, 0x5220, 0x0) ioctl$auto_BTRFS_IOC_QGROUP_ASSIGN(r2, 0x40189429, &(0x7f0000000180)={0x7ffffffffdffffff, 0x1, 0x3}) (async) ioctl$auto_BTRFS_IOC_QGROUP_ASSIGN(r2, 0x40189429, &(0x7f0000000180)={0x7ffffffffdffffff, 0x1, 0x3}) mmap$auto(0x400000, 0x4000020009, 0x7fffffff, 0xeb1, r0, 0x7) (async) mmap$auto(0x400000, 0x4000020009, 0x7fffffff, 0xeb1, r0, 0x7) 5m14.124466574s ago: executing program 34 (id=2823): openat$auto_debugfs_devm_entry_ops_file(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/cec/cec6/status\x00', 0x100, 0x0) (async) r0 = openat$auto_debugfs_devm_entry_ops_file(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/cec/cec6/status\x00', 0x100, 0x0) pread64$auto(r0, 0x0, 0x5, 0x3) mq_timedsend$auto(r0, &(0x7f0000000100)='\x06.\x00', 0xfff, 0x9, &(0x7f0000000140)={0x101, 0xffff}) (async) mq_timedsend$auto(r0, &(0x7f0000000100)='\x06.\x00', 0xfff, 0x9, &(0x7f0000000140)={0x101, 0xffff}) r1 = socket(0x2a, 0x3, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) mmap$auto(0x0, 0xc0000000, 0xdb, 0xbf1, 0xffffffffffffffff, 0x8000) mmap$auto(0xc, 0x4000000404, 0x4000000000df, 0x8000000040eb2, 0x4, 0x300000000000) r2 = prctl$auto(0x21, 0x1, 0x0, 0x0, 0x0) syz_clone3(0x0, 0x0) read$auto(0xffffffffffffffff, 0x0, 0x4) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/if_inet6\x00', 0x440, 0x0) mremap$auto(0x1fefff, 0xff, 0x843, 0x3, 0xfffff000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_sc_seq_fops_netdebug(0xffffffffffffff9c, &(0x7f0000000080), 0x1a1400, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup/pids.current\x00', 0x400000, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f0000000240)=""/4110, 0x100e) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) ioctl$auto_XFS_IOC_GETPARENTS_BY_HANDLE(r2, 0xc040583f, &(0x7f0000000000)={{@align=0x2, {0x4005, 0x0, 0x4, 0xc}}, {{[0x10001, 0x2, 0x1, 0x6]}, 0x1000, 0x48, 0x8, 0x0, 0x5f0}}) mmap$auto(0x0, 0x20005, 0x4000000000df, 0xeb1, 0xffffffffffffffff, 0x8000) io_uring_setup$auto(0x6, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) socket(0x25, 0x1, 0x84) (async) socket(0x25, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x801, 0x84) socket(0xa, 0x2, 0x400000) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/per_cpu/cpu1/trace_pipe_raw\x00', 0x82000, 0x0) (async) r4 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/per_cpu/cpu1/trace_pipe_raw\x00', 0x82000, 0x0) close_range$auto(0x2, 0x8, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) ioctl$auto_tracing_buffers_fops_trace(r4, 0x5220, 0x0) ioctl$auto_BTRFS_IOC_QGROUP_ASSIGN(r2, 0x40189429, &(0x7f0000000180)={0x7ffffffffdffffff, 0x1, 0x3}) (async) ioctl$auto_BTRFS_IOC_QGROUP_ASSIGN(r2, 0x40189429, &(0x7f0000000180)={0x7ffffffffdffffff, 0x1, 0x3}) mmap$auto(0x400000, 0x4000020009, 0x7fffffff, 0xeb1, r0, 0x7) (async) mmap$auto(0x400000, 0x4000020009, 0x7fffffff, 0xeb1, r0, 0x7) 4m34.628501594s ago: executing program 5 (id=2927): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x5, 0x0) clock_nanosleep$auto(0xb, 0x6, 0x0, 0xfffffffffffffffd) ppoll$auto(&(0x7f0000000040)={0xffffffffffffffff, 0x6}, 0x2, &(0x7f0000000080)={0x400, 0x6}, &(0x7f00000000c0)={0xfffffffffffffff9}, 0x8) r1 = openat$auto_rng_chrdev_ops_core(0xffffffffffffff9c, &(0x7f0000000000), 0x8040, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x0, 0x5, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop7\x00', 0x14f340, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) sendmsg$auto_HWSIM_CMD_NEW_RADIO(0xffffffffffffffff, &(0x7f0000002780)={0x0, 0x0, &(0x7f0000002740)={&(0x7f0000000000)=ANY=[@ANYBLOB="a3000000", @ANYRES16=0x0, @ANYBLOB="47582bbd7000fcdbdf25040000002f0011005d2c134bbc"], 0x44}}, 0x4044000) sendmsg$auto_THERMAL_GENL_CMD_TZ_GET_ID(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="21020cbd70c031cd0ce401"], 0x14}, 0x1, 0x0, 0x0, 0x400c050}, 0x4000080) sendmmsg$auto(0x3, 0x0, 0x3, 0x894) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c00000014"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000) r2 = socket(0x10, 0x2, 0x4) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) write$auto(r3, &(0x7f0000000140)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7\xe6\x04\x8c\x83k', 0x1000000007e) ioctl$auto(0x4000000000000c8, 0x400454cc, 0x6f) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/consoles\x00', 0x800, 0x0) write$auto(r2, &(0x7f0000000000)='-\x00', 0x2fb) r4 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card0\x00', 0x109801, 0x0) ioctl$auto(r4, 0x9210640b, 0xffffffffffffffff) mq_notify$auto(0xffffffffffffffff, 0x0) r5 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000180), r0) sendmsg$auto_L2TP_CMD_SESSION_GET(r0, &(0x7f0000000240)={&(0x7f0000000140), 0xc, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="000829bd70000600000008000000050004000720000005000600080000004021660848b95a9afa16083cd31864357e7bdfd5d986217a700c085b27a7394fbd39fc594cb62252acf724657b0d49fd2d5c8d4f59e8cdf2b8288e091447c701000080000000005971c3723824dfae263d3e5d74f3619105021150ad8e8a65351bb80e02b5a628eca209206b849407092297e5d4c0ce1ec8040ec1f3554bb4379eb147c41e3b1c2645c79bed80d353a8387b7344440548986b9c7e90fc410743f5a087e1dc5589ce2deec5d3c52026e9ad76049329e1a757d2e34bd4823a01ce5b0cf75fcd657716f5cd4aa191179e7b0d2abfd4195118"], 0x24}, 0x1, 0x0, 0x0, 0x40840}, 0x41) mmap$auto(0x0, 0x2020009, 0x4, 0xeb2, r1, 0x8000) execve$auto(0x0, 0x0, 0x0) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/platform/dummy_hcd.2/usb3/ep_00/bInterval\x00', 0x80000, 0x0) read$auto(r6, 0x0, 0xa90b) 4m33.283720097s ago: executing program 5 (id=2929): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket(0x23, 0x4, 0x304) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/devices/virtual/net/bond0/bonding/slaves\x00', 0x80002, 0x0) write$auto_ocfs2_control_fops_stack_user(r1, &(0x7f0000000000)="2d2ff4", 0x3) mmap$auto(0x0, 0x3, 0xb, 0x3132, 0x4008df3, 0x0) recvmmsg$auto(r0, &(0x7f0000000100)={{&(0x7f00000003c0)="3a8dea303a706ee15187a24333c61999a7689e654c2f4710f56f045c030e067b2b945d7222d3edb1d58c8140abbf33acc270cc7415715b2ebe1b9aa64000cbec4d47d660595cee60a12300008000000000", 0x406a37, 0x0, 0x6, 0x0, 0x7f, 0x5}, 0xa6}, 0x7, 0xdb22, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/kfence/parameters/sample_interval\x00', 0x20102, 0x0) sendfile$auto(r2, r2, &(0x7f0000000040)=0x2, 0x7) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/usbcore/parameters/quirks\x00', 0xc0202, 0x0) r4 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/veth0/accept_ra_pinfo\x00', 0x2000, 0x0) read$auto(r4, 0x0, 0x1ff) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl802154(&(0x7f00000001c0), 0xffffffffffffffff) r6 = setfsuid$auto(0xee00) setreuid$auto(r6, 0x0) sendmsg$auto_NL802154_CMD_TRIGGER_SCAN(r5, &(0x7f00000004c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000480)={&(0x7f0000001000)=ANY=[@ANYBLOB="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", @ANYRES16=r3, @ANYBLOB="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", @ANYRESDEC=0x0, @ANYBLOB="04002f8008006b00", @ANYRES32, @ANYBLOB="5858606dc35d196156edd240403c455df677373ead5b474ddfcb767be4e648386d56a4f976a9ca7bccbbb4f3b0c5d390c2b5c5f2a960df9aebfd29b24329e7adc3de6c4d4699fe1132efc0e8dc1a2a208b4c5727efd0d94a1b700789d32742dbe6edad1617e263534609b0513cd9c41f40441337fb979636167b193ddaaef6ef432f93c3af7ff511ff674bfc7fdf56a9ea6dea4dd4129f335797d89aad464ea6c71bbb736b0bd2f9ce1f42ab49684f28de77ff9087e32c6c22eab57b71a034b7184a41602f44fc2f8bb5ac187af395d3301fceee4701aaec02422654e180000008003900", @ANYRES32=r2, @ANYRESDEC=r4], 0x278}, 0x1, 0x0, 0x0, 0x1}, 0x4000041) setsockopt$auto(0xffffffffffffffff, 0x7fff, 0xfff, &(0x7f0000000380)='/sys/module/kfence/psrameters/sample_interval\x00', 0x8) write$auto(0xffffffffffffffff, 0x0, 0x1) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'ipvlan1\x00'}) r7 = socket(0x2, 0xa, 0x0) sendmmsg$auto(r7, &(0x7f00000000c0)={{&(0x7f0000000000), 0xd1, &(0x7f0000000080)={0x0, 0x5ea}, 0x1, 0x0, 0x1, 0xaf23}, 0x6}, 0x5, 0x1997b23d) r8 = timerfd_create$auto_CLOCK_BOOTTIME(0x7, 0x0) close_range$auto(0xffffffffffffffff, r8, 0x8000) ioctl$auto__ctl_fops_dm_ioctl(r8, 0x5, 0x0) r9 = syz_genetlink_get_family_id$auto_nfc(&(0x7f0000000880), 0xffffffffffffffff) sendmsg$auto_NFC_CMD_STOP_POLL(r8, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000940)={&(0x7f0000000240)=ANY=[@ANYBLOB="5c651a221f1089c11b0cdba7edb2b8bd757bd92ae69f62540b299a2c0f0bd82ddfa095d261e7bfff0a1ff06ac795412a652b4e8e89b20096fab28031107ab464659295d41d6cdac2934b0bb069eb9fa51e77266940c2174675a3f8805d4a1ea3157f2aea27f648250856fe85f5bfcf45e05bbb287caeb66086b651307b1b8dfae585921abd8d030eed9224602bb0d9822b3b5642de510a849bfdad4cc27a84b1c19ceccb7bba1ccc618b00f70ec33f42cfb543f33decf9e9766520ed5d81e6e4f94d3960d93e7686db1086e2", @ANYRES16=r9, @ANYBLOB="00087f000000fbdbdf250700000000000e0002000000050010000700000006001100010000000800010004000000060011004000000000000a000600000005000f000600000005000c000600000039001500626a0000"], 0x5c}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000080) sendmsg$auto_NFC_CMD_DEP_LINK_UP(r5, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000600)={&(0x7f0000000200)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x40c8000}, 0x4008000) io_uring_setup$auto(0xb, &(0x7f0000000100)={0x3, 0x7, 0x9, 0xf, 0x43d, 0x7f, r4, [0x44b, 0xaa6, 0xffffffff], {0x3, 0x1, 0x1, 0xd6d, 0x6, 0x1, 0x10, 0x8, 0x6}, {0xa, 0xcc9, 0x9, 0xc, 0x81, 0x9, 0x63, 0x43, 0x1ff}}) syz_genetlink_get_family_id$auto_wireguard(&(0x7f0000000500), 0xffffffffffffffff) socket(0x2, 0x802, 0x1) 4m32.07803203s ago: executing program 5 (id=2932): mmap$auto(0x0, 0x2020005, 0x203, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x802, 0x0) read$auto(r0, 0x0, 0xe8) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000001240)='/proc/thread-self/fail-nth\x00', 0xa0302, 0x0) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) madvise$auto(0x110c230000, 0x8031ca, 0x9) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000580)={'geneve1\x00'}) madvise$auto(0x40, 0x3c6c, 0x3) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000180)='/dev/tty12\x00', 0x101840, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) capset$auto(&(0x7f0000000180)={0x19980330}, 0x0) ioctl$auto(r3, 0x4b68, 0xffffffffffffffff) sendmsg$auto_HSR_C_GET_NODE_LIST(r2, 0x0, 0x24064851) msgctl$auto_IPC_SET(0x0, 0x1, &(0x7f0000000340)={{0x6, 0x0, 0xffffffffffffffff, 0x0, 0x80000001, 0x9, 0x4}, 0x0, 0x0, 0x400, 0x4d, 0xaef6, 0x7f, 0x4, 0x0, 0xa4a, 0x1, @raw=0x7, @inferred=0x0}) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x5}, 0x4800) r5 = prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x2, 0x3, r4, 0x33, 0x6) ioctl$auto_SG_EMULATED_HOST(r5, 0x2203, 0x0) close_range$auto(0x2, 0x8, 0x0) 4m27.312634121s ago: executing program 5 (id=2936): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x10, 0x2, 0x0) socket(0x2, 0x3, 0xa) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x8009, @private=0xa010100}, 0x54) prctl$auto(0x3e, 0x20, 0x0, 0x1, 0xaff4) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001b80), r0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/module/zswap/parameters/enabled\x00', 0x62, 0x0) write$auto(r1, &(0x7f0000000440)='ON\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf0F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\xed\'\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb', 0xb8c5) mmap$auto(0x7ff, 0x499, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x10000000400008, 0xdf, 0x9b72, 0x2, 0x40000008000) write$auto_fuse_dev_operations_fuse_i(0xffffffffffffffff, &(0x7f0000000440)="11000000", 0x4) socket(0xf, 0x3, 0x2) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D2\x00', 0x20401, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) io_uring_setup$auto(0xf92b, 0x0) r2 = gettid() futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0x80000001) kill$auto(r2, 0x11) r3 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv6/conf/all/forwarding\x00', 0x42a81, 0x0) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/bdi/43:288/max_ratio_fine\x00', 0x10b142, 0x0) sendfile$auto(r3, r4, 0x0, 0x1000200) mmap$auto(0x0, 0x240009, 0xdf, 0x9b72, 0x7, 0x28000) madvise$auto(0x0, 0x1b6, 0x15) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) futex_waitv$auto(&(0x7f0000000300)={0x0, 0x4, 0x2}, 0x1, 0x0, &(0x7f0000000340)={0x1, 0x800006}, 0x0) madvise$auto(0x0, 0x3, 0x67) sendmsg$auto_ETHTOOL_MSG_PHY_GET(r1, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00042dbd7000ffdbdf252d0000002c0001801400020076657468315f746f5f6272696467650014000200636169663000000000000000000000003c00018008000100", @ANYRES32=0x0, @ANYBLOB="04000100", @ANYRES32=0x0, @ANYBLOB="140002007866726d3000000000000000000000001400020069703665727370616e30000000000000"], 0x7c}, 0x1, 0x0, 0x0, 0x40040c0}, 0x20000080) 4m25.152457122s ago: executing program 5 (id=2941): mlockall$auto(0x7) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) close_range$auto(0x2, 0xa, 0x0) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) fanotify_init$auto(0xff, 0x6) r0 = pipe$auto(0x0) dup2$auto(0x5, 0x4) write$auto(0x6, 0x0, 0x100000001) mmap$auto(0x0, 0x2020009, 0x4, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0xa, 0x3, 0x3a) setsockopt$auto(0x400000000000003, 0x29, 0xd4, 0x0, 0x4) splice$auto(0x4, 0x0, r0, 0x0, 0x80000001, 0x9) mbind$auto(0xf000, 0x8000000000000001, 0x100000000, 0x0, 0x6, 0x2) 4m24.288432193s ago: executing program 5 (id=2942): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = timerfd_create$auto(0x9, 0x0) ioctl$auto(r1, 0x40085400, 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) r3 = open(&(0x7f0000000040)='./cgroup/../file0\x00', 0x0, 0x90) io_uring_register$auto_IORING_REGISTER_SEND_MSG_RING(r0, 0x1f, &(0x7f0000000080)="a038153365f1cbf37dec0212c92be5a96c3a97973070141200ed70aa9216697ca451f421cc1951acf290226de841faab7c64161564da0339a9b5353985a3513b9d5422ea610ce8f4bb822d2c2684d8f7489cda7f1a0307834f5952035dcf0458317f9213e56d6b8641bce964d4640f2bdbd244f419e4c0c2c3eeb1c39bf5dd48c638c6e164b3c46194b3a78f5fca64be3f67790c62aaac57d94995043a7d331751d786368033019a5685b15ebd5470f16b6129b1886b3a83c37d120efda4ffc9eeb844b8d840fac83c964f0f13e8", 0x8) r4 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f00000002c0), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL802154_CMD_SET_CCA_MODE(r5, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000000)={0x28, r4, 0x101, 0x70bd2b, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x64004401}, 0x800) syz_clone3(&(0x7f00000003c0)={0x383201180, 0x0, 0x0, 0x0, {0x1a}, 0x0, 0x0, 0x0, 0x0, 0x0, {r3}}, 0x58) sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)={0x30, r2, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NFSD_A_SERVER_SCOPE={0x9, 0x4, 'nfsd\x00'}, @NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0x85}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x2}]}, 0x30}}, 0x4000) 4m8.295812729s ago: executing program 35 (id=2942): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = timerfd_create$auto(0x9, 0x0) ioctl$auto(r1, 0x40085400, 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) r3 = open(&(0x7f0000000040)='./cgroup/../file0\x00', 0x0, 0x90) io_uring_register$auto_IORING_REGISTER_SEND_MSG_RING(r0, 0x1f, &(0x7f0000000080)="a038153365f1cbf37dec0212c92be5a96c3a97973070141200ed70aa9216697ca451f421cc1951acf290226de841faab7c64161564da0339a9b5353985a3513b9d5422ea610ce8f4bb822d2c2684d8f7489cda7f1a0307834f5952035dcf0458317f9213e56d6b8641bce964d4640f2bdbd244f419e4c0c2c3eeb1c39bf5dd48c638c6e164b3c46194b3a78f5fca64be3f67790c62aaac57d94995043a7d331751d786368033019a5685b15ebd5470f16b6129b1886b3a83c37d120efda4ffc9eeb844b8d840fac83c964f0f13e8", 0x8) r4 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f00000002c0), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL802154_CMD_SET_CCA_MODE(r5, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000000)={0x28, r4, 0x101, 0x70bd2b, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x64004401}, 0x800) syz_clone3(&(0x7f00000003c0)={0x383201180, 0x0, 0x0, 0x0, {0x1a}, 0x0, 0x0, 0x0, 0x0, 0x0, {r3}}, 0x58) sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)={0x30, r2, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NFSD_A_SERVER_SCOPE={0x9, 0x4, 'nfsd\x00'}, @NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0x85}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x2}]}, 0x30}}, 0x4000) 2m46.351637464s ago: executing program 6 (id=3112): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$auto_GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01002d0008000700"/18, @ANYRES32, @ANYBLOB="0800080004"], 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x1c, r1, 0xb3eaee9e9ed11725, 0x70bd29, 0x25c7dbfc, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1000}, 0x64810) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nfc(&(0x7f00000000c0), r2) r3 = syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000080), r2) sendmsg$auto_MACSEC_CMD_UPD_TXSA(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002ec0)={0x14, r3, 0x1, 0x70bd2d, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4008000}, 0x400c8d4) sendmsg$auto_MACSEC_CMD_UPD_RXSC(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40021400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x18, r3, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@MACSEC_ATTR_RXSC_CONFIG={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0xc0}, 0x60000014) r4 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1e00df45"], 0x1ac}}, 0x0) sendmmsg$auto(r4, &(0x7f0000000200)={{0x0, 0xfffffffe, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x10000, &(0x7f0000000340), 0x7, 0xa505}, 0x3}, 0x7, 0x6) 2m45.380434099s ago: executing program 6 (id=3116): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtdblock0\x00', 0x14f602, 0x0) r0 = socket(0x2, 0x5, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x40, r2, 0x1b, 0x74bd26, 0x25dfdbfd, {}, [@OVS_PACKET_ATTR_PROBE={0x4}, @OVS_PACKET_ATTR_ACTIONS={0x10, 0x3, 0x0, 0x1, [@nested={0xc, 0x9, 0x0, 0x1, [@nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4788, 0x33}]}]}]}, @OVS_PACKET_ATTR_PACKET={0x12, 0x1, "898771f1c19f17790485908286dd"}, @OVS_PACKET_ATTR_KEY={0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r3, 0x0, 0x20) r4 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r4, &(0x7f0000000200)={0x0, 0x7}, 0x3) socket(0xa, 0x3, 0x3a) mmap$auto(0x0, 0x20009, 0x6, 0xfffffffffffffffe, 0xffffffffffffffff, 0x8000) write$auto(0xffffffffffffffff, &(0x7f0000000100)='/proc/thread-self/mem\x00', 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x2, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtdblock0\x00', 0x14f602, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r5 = openat$auto_proc_mem_operations_base(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self/mem\x00', 0x924c3, 0x0) write$auto_proc_mem_operations_base(r5, &(0x7f0000001100)="a7c1f7", 0x3) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0xfff, &(0x7f00000000c0)={0x0, 0x1feff}, 0x7, 0x0, 0x5, 0xb}, 0xfff}, 0x8, 0x311) 2m44.379724278s ago: executing program 7 (id=3118): open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x130) fallocate$auto(0x8000000000000003, 0x0, 0x9, 0x4cbd5d) rename$auto(&(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='./file0\x00') open(&(0x7f0000000040)='./file0\x00', 0x1e9e02, 0x61) r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x20342, 0x0) ioctl$auto_SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000)) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(0xffffffffffffffff, 0x0, 0x800) timer_create$auto(0x9, 0x0, 0x0) timer_delete$auto(0x1) read$auto(0x3, 0x0, 0x8080) socket(0xa, 0x1, 0x100) write$auto(0x3, 0x0, 0xffd8) unshare$auto(0x40000080) sendmsg$auto_NFSD_CMD_VERSION_GET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x0, 0x200, 0x70bd28, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40005}, 0x8811) write$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffffff, &(0x7f00000001c0)="624d1bfe595046ab5c98199adf260600de16baef6176e6021e1dce210500e8fdffff0000000000fffffffe00a7ed73de11691c13403c82be", 0x7b) mmap$auto(0x0, 0x40000b, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) bind$auto(0xffffffffffffffff, &(0x7f0000000000)=@in={0x2, 0x3, @multicast1}, 0x6a) connect$auto(0xffffffffffffffff, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x23}}, 0x54) ioctl$auto(0x3, 0x80000541b, 0x38) 2m42.319185916s ago: executing program 6 (id=3122): mmap$auto(0x4, 0x3, 0x400000000002, 0x13, 0x401, 0xfffffffffffffffb) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b7f, 0xffffffffffffffff, 0x4) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) write$auto(0x1, 0x0, 0x80000000) preadv$auto(0x40000000000003, &(0x7f0000000080)={0x0, 0xfffffff9}, 0x6, 0xe27c, 0x8) socket(0x23, 0x5, 0x0) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) r0 = socket(0x2b, 0x1, 0x1) r1 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x80080, 0x0) ioctl$auto_PPPIOCSMRU(r1, 0xc004743e, 0x0) mmap$auto(0x0, 0x2020009, 0x5, 0xeb1, 0xfffffffffffffffa, 0x8000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001480)={'veth0_virt_wifi\x00'}) ioctl$auto_SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, &(0x7f0000000040)="b38fc65a6042f2dc99df8ce9af2a56fcfe744238519bceaee0") mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xffffffffffffffff, 0x300000000000) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000440)='/sys/devices/virtual/thermal/cooling_device1/cur_state\x00', 0xc2082, 0x0) write$auto(r2, 0x0, 0x9) munmap$auto(0x8000, 0xffffffff) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0x3, 0x4) getsockopt$auto_SO_ZEROCOPY(r0, 0x7, 0x3c, 0x0, 0x0) bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x19, 0x4, 0x4, 0x880b, 0x8, 0xd, 0x66b, 0x4, 0x7ff}, 0x6f4) ioctl$auto(0x4000000000000c8, 0x400454d9, 0x3) r3 = ioctl$auto_TUNGETVNETHDRSZ2(0xffffffffffffffff, 0x800454d7, &(0x7f0000000080)=0x3) close_range$auto(r3, 0xfffffffffffff000, 0x5) fanotify_init$auto(0x5, 0x2000000000002) socket$nl_generic(0x10, 0x3, 0x10) socket(0x26, 0x80805, 0x0) clone$auto(0x7, 0x1000000000006, 0x0, 0x0, 0xf) r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/card1/pcm0c/sub0/sw_params\x00', 0x2c2500, 0x0) pread64$auto(r4, 0x0, 0x0, 0xb) 2m39.267684079s ago: executing program 7 (id=3127): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) (async) ioctl$auto(0xffffffffffffffff, 0x4b4b, 0xffffffffffffffff) syz_clone3(0x0, 0x0) (async) futex$auto(0x0, 0xc, 0x1, 0x0, 0x0, 0x7) (async) modify_ldt$auto(0x1, 0x0, 0x10) (async) modify_ldt$auto(0x1, 0x0, 0x10) (async) write$auto(r0, &(0x7f0000000040)='//\xf2\x02', 0x80000002) (async) openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x6, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) (async) clock_nanosleep$auto(0x2, 0x5, 0x0, 0x0) (async, rerun: 64) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) (async, rerun: 64) madvise$auto(0x0, 0x400053, 0x9) r1 = prctl$auto_PR_SET_SECCOMP(0x16, 0xe9, 0xffffffffffffffff, 0x153e, 0x5ae) fcntl$auto_F_OFD_SETLKW(r1, 0x26, 0x1) 2m38.742358531s ago: executing program 6 (id=3128): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r0 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$auto_NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES16=r0, @ANYBLOB="000428bd7000fedbdf25020000000c00060000000000304f651604000a00"], 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x4004800) r1 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189002, 0x0) ioctl$auto_PPPIOCSMRU(r1, 0xc004743e, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snd/controlC0\x00', 0x0, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000) r2 = socket(0xa, 0x1, 0x84) setsockopt$auto(r2, 0x0, 0x40, 0x0, 0x10000) unshare$auto(0x40000080) close_range$auto(0x2, 0x8, 0x0) sysfs$auto(0x2, 0x2, 0x9) r3 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8000, 0x0) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0xe, 0x2, 0x6, 0x5, 0x8, 0xffffffffffffffff, [], {0xd74c, 0x6, 0x2, 0x29f, 0x100, 0x7f, 0x101, 0x6, 0x2}, {0xff, 0x1, 0x10001, 0x7, 0x1, 0x40, 0x76c5, 0x400008, 0x100000005}}) io_uring_enter$auto(r3, 0x9, 0x820e, 0x9, 0x0, 0x18) 2m34.395944048s ago: executing program 7 (id=3134): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x400008, 0x5, 0x9b72, 0x2, 0x6) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2b, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @remote}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000000)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x9, 0xfffffffd}, 0x1}, 0x5, 0x20000000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) prctl$auto_PR_SET_VMA(0x53564d41, 0x0, 0x0, 0x1, 0x2) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0x8000000000000000, 0x15) setrlimit$auto(0x1000, &(0x7f00000000c0)={0xffffffffffffffff, 0x685}) pwrite64$auto(0xffffffffffffffff, 0x0, 0xb, 0x8000) fsconfig$auto(0xffffffffffffffff, 0x8, 0x0, 0x0, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) r1 = openat$auto_hwsim_fops_ps_(0xffffffffffffff9c, &(0x7f0000000580)='/sys/kernel/debug/ieee80211/phy0/hwsim/ps\x00', 0x100, 0x0) read$auto_hwsim_fops_ps_(r1, 0x0, 0x0) ioctl$auto(0x3, 0x80108907, 0x38) prctl$auto_PR_GET_TID_ADDRESS(0x28, 0x2, 0x0, 0x0, 0x40) setsockopt$auto(0x3, 0x6, 0x3, 0x0, 0xd) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mbind$auto(0x0, 0x2091d1, 0x1, 0x0, 0x6, 0x2) write$auto(0x3, 0x0, 0xfffffdef) madvise$auto_MADV_GUARD_INSTALL(0x0, 0x2021000, 0x66) 2m31.954866816s ago: executing program 7 (id=3135): r0 = openat$auto_btrfs_ctl_fops_super(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) socket(0x2, 0x3, 0x2) setsockopt$auto(0x3, 0x0, 0xd1, 0xfffffffffffffffc, 0xfd72) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000001040)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) write$auto(r1, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) mmap$auto(0x0, 0x9, 0x3, 0x8012, 0x3, 0x8000) ioctl$auto_BTRFS_IOC_SCAN_DEV(r0, 0x50009404, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r2 = openat$auto_proc_gid_map_operations_base(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/self/gid_map\x00', 0x2080, 0x0) r3 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000000380), 0x4000, 0x0) ioctl$auto__ctl_fops_dm_ioctl(r3, 0x3, &(0x7f0000000400)="caa8929eabeed14a790137f6123ad9aabb9f56541a4c003cf07d7cf86f94c71f6b43cb376407d5") read$auto(r2, 0x0, 0x3ff) bpf$auto_BPF_TOKEN_CREATE(0x24, &(0x7f00000004c0)=@prog_bind_map={0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffa}, 0x9) bpf$auto_BPF_ITER_CREATE(0x21, &(0x7f00000002c0)=@batch={0x6, 0x1, 0x3, 0x4, 0xffffffff, r4, 0x9, 0xb}, 0x3) mmap$auto(0x0, 0x2000d, 0x4000000200df, 0xeb1, 0x404, 0x8000) r5 = open(&(0x7f00000001c0)='./bus\x00', 0x14bb42, 0x1c0) pwrite64$auto(r5, 0x0, 0xad2b, 0x7ffffffffffffffb) r6 = socket(0xa, 0x2, 0x73) sendto$auto(r6, 0x0, 0xfdef, 0xfe80, &(0x7f0000000000)=@generic={0xa, "e2e18340cba8fe8000"}, 0x1c) sendmsg$auto_GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01002d0008000700"/18, @ANYRES32, @ANYBLOB="0800080004"], 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x0) r7 = socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) write$auto(0x3, 0x0, 0x100082) recvfrom$auto(0x4, 0x0, 0x101d0, 0x3ffffd, 0x0, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1e00df45"], 0x1ac}}, 0x0) r8 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card1\x00', 0x129800, 0x0) bpf$auto(0x9, &(0x7f00000000c0)=@batch={0xcc9d1c0, 0x37, 0xa, 0x7, 0x9, 0x1, 0x6, 0x5851}, 0x17) ioctl$auto(r8, 0xb21064a7, 0x20000a) sendmmsg$auto(r7, &(0x7f0000000200)={{0x0, 0xfffffffe, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f0000000340), 0x7, 0xa505}, 0x800}, 0x7, 0x6) 2m31.265299153s ago: executing program 7 (id=3136): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$auto_GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01002d0008000700"/18, @ANYRES32, @ANYBLOB="0800080004"], 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x0) r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1e00df45"], 0x1ac}}, 0x0) sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0xfffffffe, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f0000000340), 0x7, 0xa505}, 0x900}, 0x7, 0x6) 2m30.668432531s ago: executing program 7 (id=3138): r0 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NFSD_CMD_VERSION_SET(r1, &(0x7f0000003200)={0x0, 0x0, &(0x7f00000031c0)={&(0x7f0000000340)={0x2c, r0, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@NFSD_A_SERVER_PROTO_VERSION={0x4}, @NFSD_A_SERVER_PROTO_VERSION={0x14, 0x1, 0x0, 0x1, [@NFSD_A_VERSION_MINOR={0x8}, @NFSD_A_VERSION_MAJOR={0x8, 0x1, 0xff}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x804}, 0x4004000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x408000) r2 = clone$auto(0x20003b4a, 0xecc, 0x0, 0x0, 0x2) r3 = pidfd_open$auto(r2, 0x0) setns(r3, 0x60020000) 2m30.130479504s ago: executing program 6 (id=3141): mknod$auto(&(0x7f0000000180)=':,\x00', 0xcb, 0xfffffffa) execve$auto(&(0x7f0000000000)=':,\x00', 0x0, 0x0) bpf$auto(0x5, 0x0, 0x6f4) mmap$auto(0x0, 0x20009, 0xe2, 0xffffffffffffffff, 0x3fd, 0x7ffd) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, 0x0, 0x8000) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000200)={{0x0, 0x1f00, 0x0, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) sendmsg$auto_TCP_METRICS_CMD_GET(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x24000084}, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) openat$auto_vhci_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r0 = socket(0x11, 0xa, 0x9) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x5, 0x0) openat$auto_proc_clear_refs_operations_internal(0xffffffffffffff9c, &(0x7f0000000600)='/proc/thread-self/clear_refs\x00', 0x2, 0x0) openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x8800, 0x0) socket(0xa, 0x2, 0x0) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x2, 0x0) r1 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x787806, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = socket(0x10, 0x2, 0x4) close_range$auto(0x2, 0x8, 0x0) socket(0xfde5c708dba9e027, 0xa, 0x20100081) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYRES32=0x0, @ANYRES8=r0, @ANYRES8=r1], 0x18}, 0x1, 0x0, 0x0, 0x60008004}, 0x2000c082) write$auto(r2, &(0x7f0000000000)='-\x00', 0xfdef) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/platform/vhci_hcd.11/usb32/remove\x00', 0x0, 0x0) read$auto(r3, 0x0, 0x20) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) r4 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r4, &(0x7f0000000200)={0x0, 0x7}, 0x3) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001ec0)='/sys/power/mem_sleep\x00', 0x2402, 0x0) 2m28.604705193s ago: executing program 6 (id=3144): socket(0x2, 0x5, 0x0) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_SET_WIPHY(0xffffffffffffffff, 0x0, 0x80) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, 0x0, 0x123042, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) clone$auto(0x1, 0x4, &(0x7f0000000040)=0x2d000000, &(0x7f0000000080)=0x5, 0x80000001) setsockopt$auto_SO_SNDTIMEO_NEW(r0, 0x1, 0x43, &(0x7f0000000540)='veth1_to_batadv\x00', 0x5) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event2\x00', 0x20881, 0x0) mount$auto(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)='nfsd\x00\xee\x1a\x8fg\x1b\x04\xad>\x96\xe9IG\xbe\xc8\x12\xae\xc3\xc0@[\x99\xec\xbf(\xec\xc3\xb2\xf2\x15Zi\xc4S6\'\x14\x05\t\x8c\xd5?\xa0\x00\xd8\xe4\xafW\xcc\xa3\xce\t\xf8p\xc6\x00\x00\x00\x00\xb9\xac\xde\x0e\x90\x18\xf1\x13I\x95\xe12\xaclJ\xba\xeb\xe4\x83Z\xaev\xd7\xd9\xdd\x14\x81\xbe\xab\xed\xd5MI\x830_\xc2\x14O\x84\xaa\x13W\xb7\x06\'fvQ\x95\xc5\xd1\x98\xe3T\xees\xf0\xc2\xad\xae\x99\xeb\xc5\xf0\"\x92\xcdfk\xc7\xe9\x96\r\x91\xb0\xc46\xf2\xfc\xef\xfe\xa0\xc9d\xb3h$\xeb\xad\xa4P\x8f\xc3bM{4RQ\x00\x9d)_\xd81(\x03\xca1\x88|\xe5\x1e\x10\x89X\x01\xe9\xf6g\x95xx\xaf\xa9~m\x05\xa2\xe4\x81\xb9\x92\xda\x13\xfe5\xfb\xc6\xd8>\x01\xd4\x14\x94o\x1b[\xa8]\x9b\x03\x95\xc3\xad\xad\x1d#oi|\x04\x93N\xfa\x17\xf3b\xf6\x00\x00\x00', 0x0, 0x0) getcwd$auto(0x0, 0xffffffffffffffff) fspick$auto(0xffffffffffffffff, 0x0, 0x9) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(0xffffffffffffffff, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d7) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/i8042/serio0/scroll\x00', 0x2062, 0x0) sendmsg$auto_ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000840)=ANY=[@ANYRESDEC=0x0, @ANYRESOCT=0x0, @ANYRESOCT, @ANYRES32=0x0, @ANYRESDEC, @ANYRES32=0x0, @ANYBLOB, @ANYRESOCT, @ANYRESOCT, @ANYRES16, @ANYRES64=r1, @ANYRES16], 0xb4}}, 0x20000054) write$auto(r1, &(0x7f00000001c0)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0xfff) write$auto(r1, 0x0, 0x98c7) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x4, 0x15) unshare$auto(0x40000080) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self/net/rt_cache\x00', 0x2000, 0x0) mmap$auto(0x0, 0x2000d, 0x7, 0xeb1, 0x404, 0x10008000) r2 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) write$auto_console_fops_tty_io(r2, &(0x7f0000001bc0)="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", 0x930) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) close_range$auto(0x2, 0x8, 0x0) io_uring_register$auto(0x2, 0xe, 0x0, 0x20) 2m15.266489332s ago: executing program 36 (id=3138): r0 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NFSD_CMD_VERSION_SET(r1, &(0x7f0000003200)={0x0, 0x0, &(0x7f00000031c0)={&(0x7f0000000340)={0x2c, r0, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@NFSD_A_SERVER_PROTO_VERSION={0x4}, @NFSD_A_SERVER_PROTO_VERSION={0x14, 0x1, 0x0, 0x1, [@NFSD_A_VERSION_MINOR={0x8}, @NFSD_A_VERSION_MAJOR={0x8, 0x1, 0xff}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x804}, 0x4004000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x408000) r2 = clone$auto(0x20003b4a, 0xecc, 0x0, 0x0, 0x2) r3 = pidfd_open$auto(r2, 0x0) setns(r3, 0x60020000) 2m12.703732654s ago: executing program 37 (id=3144): socket(0x2, 0x5, 0x0) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_SET_WIPHY(0xffffffffffffffff, 0x0, 0x80) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, 0x0, 0x123042, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) clone$auto(0x1, 0x4, &(0x7f0000000040)=0x2d000000, &(0x7f0000000080)=0x5, 0x80000001) setsockopt$auto_SO_SNDTIMEO_NEW(r0, 0x1, 0x43, &(0x7f0000000540)='veth1_to_batadv\x00', 0x5) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event2\x00', 0x20881, 0x0) mount$auto(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)='nfsd\x00\xee\x1a\x8fg\x1b\x04\xad>\x96\xe9IG\xbe\xc8\x12\xae\xc3\xc0@[\x99\xec\xbf(\xec\xc3\xb2\xf2\x15Zi\xc4S6\'\x14\x05\t\x8c\xd5?\xa0\x00\xd8\xe4\xafW\xcc\xa3\xce\t\xf8p\xc6\x00\x00\x00\x00\xb9\xac\xde\x0e\x90\x18\xf1\x13I\x95\xe12\xaclJ\xba\xeb\xe4\x83Z\xaev\xd7\xd9\xdd\x14\x81\xbe\xab\xed\xd5MI\x830_\xc2\x14O\x84\xaa\x13W\xb7\x06\'fvQ\x95\xc5\xd1\x98\xe3T\xees\xf0\xc2\xad\xae\x99\xeb\xc5\xf0\"\x92\xcdfk\xc7\xe9\x96\r\x91\xb0\xc46\xf2\xfc\xef\xfe\xa0\xc9d\xb3h$\xeb\xad\xa4P\x8f\xc3bM{4RQ\x00\x9d)_\xd81(\x03\xca1\x88|\xe5\x1e\x10\x89X\x01\xe9\xf6g\x95xx\xaf\xa9~m\x05\xa2\xe4\x81\xb9\x92\xda\x13\xfe5\xfb\xc6\xd8>\x01\xd4\x14\x94o\x1b[\xa8]\x9b\x03\x95\xc3\xad\xad\x1d#oi|\x04\x93N\xfa\x17\xf3b\xf6\x00\x00\x00', 0x0, 0x0) getcwd$auto(0x0, 0xffffffffffffffff) fspick$auto(0xffffffffffffffff, 0x0, 0x9) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(0xffffffffffffffff, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d7) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/i8042/serio0/scroll\x00', 0x2062, 0x0) sendmsg$auto_ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000840)=ANY=[@ANYRESDEC=0x0, @ANYRESOCT=0x0, @ANYRESOCT, @ANYRES32=0x0, @ANYRESDEC, @ANYRES32=0x0, @ANYBLOB, @ANYRESOCT, @ANYRESOCT, @ANYRES16, @ANYRES64=r1, @ANYRES16], 0xb4}}, 0x20000054) write$auto(r1, &(0x7f00000001c0)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0xfff) write$auto(r1, 0x0, 0x98c7) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x4, 0x15) unshare$auto(0x40000080) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self/net/rt_cache\x00', 0x2000, 0x0) mmap$auto(0x0, 0x2000d, 0x7, 0xeb1, 0x404, 0x10008000) r2 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) write$auto_console_fops_tty_io(r2, &(0x7f0000001bc0)="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", 0x930) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) close_range$auto(0x2, 0x8, 0x0) io_uring_register$auto(0x2, 0xe, 0x0, 0x20) 1m34.161570723s ago: executing program 2 (id=3185): mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) r0 = socket(0x2b, 0x1, 0x1) r1 = getsockopt$auto(r0, 0x0, 0x80, 0x0, 0x0) setsockopt$auto(0x3, 0x10000000084, 0xa, 0x0, 0x20) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ovs_packet(0x0, r2) setsockopt$auto(0x3, 0x10000000084, 0x7b, 0x0, 0xd) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x40000) socket(0x10, 0x2, 0x0) close_range$auto(r1, r1, 0xd) 1m30.425634515s ago: executing program 4 (id=3188): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cec7\x00', 0x10b101, 0x0) (async, rerun: 64) socket(0xa, 0x801, 0x84) (async, rerun: 64) ftruncate$auto(0xffffffffffffffff, 0x764) (async) unshare$auto(0x40000080) prctl$auto(0x3e, 0x1, 0xffffffffffffffff, 0x1, 0x0) (async) write$auto(0xffffffffffffffff, 0x0, 0x100000a3d9) (async) r1 = openat$auto_cpu_latency_qos_fops_qos(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) mmap$auto(0x3, 0x400008, 0xdf, 0x9b72, r1, 0x8000) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x0, 0x0) readv$auto(r2, 0x0, 0x1) read$auto(r1, 0x0, 0x86c1) (async) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r3 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, 0x0, 0x0, 0x0) (rerun: 64) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000003fc0)='/dev/bus/usb/017/001\x00', 0xa300, 0x0) (async) ioctl$auto_MON_IOCX_GETX(r3, 0x4018920a, &(0x7f0000000080)={&(0x7f0000000000)={0x7fff, 0xc9, 0x6, 0x5, 0x65, 0x5, 0x7, 0xa, 0x40, 0x100, 0x31a, 0x5, 0x3, @setup="9fef6bd13c8f6103", 0x6, 0x7, 0x6d}, 0x0, 0x9}) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r4 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) close_range$auto(0x2, 0x8, 0x0) (async, rerun: 64) r5 = socket(0x10, 0x2, 0x4) (rerun: 64) close_range$auto(0x2, 0x8, 0x0) (async) r6 = socket(0x10, 0x2, 0xc) sendmsg$auto_TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000003740)={&(0x7f0000000000)=ANY=[@ANYBLOB="b1000000", @ANYRES16, @ANYBLOB="01002dbd7000fddbdf25030000000c0001"], 0x20}, 0x1, 0x0, 0x0, 0x41}, 0x40080) (async, rerun: 64) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000", @ANYRES8=r6, @ANYRES8=r4], 0x18}, 0x1, 0x0, 0x0, 0x60008004}, 0x4000050) (async, rerun: 64) write$auto(r5, &(0x7f0000000000)='-\x00', 0xfdef) socket$nl_generic(0x10, 0x3, 0x10) (async) select$auto(0x7, 0x0, &(0x7f0000000140)={[0x8, 0x6, 0xfffffffffffffffa, 0x5, 0x1001, 0x10001, 0xf, 0x1000, 0xfffffffffffffffd, 0x2, 0x8, 0x9, 0x6, 0x0, 0x1, 0x7fffffff]}, 0x0, 0x0) (async) recvmmsg$auto(r5, &(0x7f00000000c0)={{&(0x7f0000000240)="2d16b037d297ad4088f8470a214e95e57298e9b9c002b203b890a6f9762171963527c9271b2032e188e233a6630d316207d67ed22421ac7f6ac860ef18bc7364befffbe3c021ff839e55", 0x0, &(0x7f0000000040)={&(0x7f0000000300)="152f0fe20b00e008df47a936eb0448c3ec1c64df0d5d30e1ea088b0ac27736d1ba28db4d350fb65ed706545e19490bde7a752324675a4459fda31dd4efdac37d4e4afaee17e0bdead999bb210d7afaa2d2a6e44808ec8080ce8ae29f5d50339408299a48627a1754c2a4f80bf8b1b5cce0e8"}, 0x7fe000, &(0x7f0000000380)="26f710f1f1f2daa774b52f17a0025843032a64c267244adbcccfc97c7e0ab42a1ef8a840e4c81661f0fc9ecc5f131e7cc9ad0cdb6f8c8ef892f49194c986e8ea53401f5490683d62c4", 0x9, 0x7}, 0x40}, 0x8, 0x4, &(0x7f00000001c0)={0x7, 0x9}) (async) ioctl$auto_CEC_S_MODE(r0, 0x40046109, &(0x7f0000002c40)=0xd0) 1m27.702078525s ago: executing program 2 (id=3192): r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x61, 0x100001000000004, 0xfa31, 0x400, 0x8000) futex$auto(0x0, 0xa, 0xf, 0x0, 0x0, 0x8) r2 = syz_genetlink_get_family_id$auto_seg6(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_SEG6_CMD_SETHMAC(r1, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)={0x1c, r2, 0x6c5679fc7dece1a9, 0x70bd27, 0x25dedbff, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x10001}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000014}, 0x400c810) ioctl$auto_SNDCTL_DSP_GETODELAY(r0, 0x80045017, &(0x7f0000000c00)) 1m27.119615572s ago: executing program 2 (id=3194): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000440)='/sys/devices/platform/dummy_udc.1/udc/dummy_udc.1/uevent\x00', 0x40000, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000040)=""/195, 0xc3) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x6, 0x8000) (async, rerun: 64) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (rerun: 64) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) openat$auto_tracing_entries_fops_trace(0xffffffffffffff9c, 0x0, 0x1, 0x0) (async) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/system/node/node1/compact\x00', 0xc2481, 0x0) writev$auto(r2, &(0x7f0000000080)={0x0, 0x1000}, 0x3) (async) connect$auto(0xffffffffffffffff, 0x0, 0x3a) syz_genetlink_get_family_id$auto_smbd_genl(&(0x7f0000000240), 0xffffffffffffffff) (async) mmap$auto(0x0, 0x2000a, 0x10000000000df, 0xeb2, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) r3 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compaction_proactiveness\x00', 0x80, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) (async, rerun: 32) semctl$auto(0xa, 0x2, 0x13, 0xde) (async, rerun: 32) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) (async) setsockopt$auto(0x3, 0x1, 0x4c, 0x0, 0x9) recvmmsg$auto(0x3, 0x0, 0x80000401, 0x4000, 0x0) (async) write$auto(r3, 0x0, 0x5) msync$auto(0x1ffff000, 0x1800000000000fe, 0x400000004) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x800, 0x0) (async) mmap$auto(0x0, 0x5, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtdblock0\x00', 0x4c440, 0x0) 1m26.138526344s ago: executing program 4 (id=3197): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xfffffffffffffffe, 0x8000) syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) madvise$auto(0x0, 0xfffffffffffeffff, 0x10015) socket(0x28, 0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) setsockopt$auto(0x3, 0x1, 0x3c, 0x0, 0x9) r0 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x2000c, 0x4000000000e2, 0x100000000000eb1, r0, 0x8000) sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x24, 0x0, 0x300, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_MCAST_FLAGS_PRIV={0x8, 0x27, 0x8}, @BATADV_ATTR_TQ={0x5, 0x19, 0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x40814}, 0x24008000) socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB=' \x00\''], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) mlock$auto(0x8, 0xfffffffffffffffe) mlock$auto(0x9, 0x3) unshare$auto(0x40000080) quotactl$auto(0x9, 0x0, 0x62a0, 0x0) 1m25.976018501s ago: executing program 2 (id=3199): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x20009, 0xdf, 0x20000000000e31, 0x40000000000a5, 0x8000) (async) bpf$auto_BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000040)=@prog_bind_map={0xffffffffffffffff, 0xffffffffffffffff, 0x6}, 0x1) syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000000), r0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async, rerun: 64) mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) (rerun: 64) madvise$auto(0x0, 0xffffffffffff0006, 0x17) (async) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) 1m24.332430459s ago: executing program 2 (id=3201): mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) r0 = socket(0x2b, 0x1, 0x1) r1 = getsockopt$auto(r0, 0x0, 0x80, 0x0, 0x0) setsockopt$auto(0x3, 0x10000000084, 0xa, 0x0, 0x20) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ovs_packet(0x0, r2) setsockopt$auto(0x3, 0x10000000084, 0x7b, 0x0, 0xd) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x40000) socket(0x10, 0x2, 0x0) close_range$auto(r1, r1, 0xd) 1m23.350480835s ago: executing program 2 (id=3203): mount_setattr$auto(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000640)={0x46, 0x9}, 0x283) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000040), r0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/mm/ksm/ksm_zero_pages\x00', 0x80000, 0x0) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000200)='}[,&*}/file0\x00', &(0x7f0000000080)={0x220000, 0x0, 0x11}, 0x18) read$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f0000000000)=""/45, 0x2d) sendmsg$auto_L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="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", @ANYRES16=r1, @ANYBLOB="01002dbd7000fedbdf2503000000060001005300000008000a00030000003300000048b53abef5c8dfd5a17f0855b9e6861def371bb2581c5e4e849653a511d1f0cf3c4466b3a2e59664a23c30399373e10005000d000800000005001200000000000800090072a60000"], 0x70}, 0x1, 0x0, 0x0, 0x4040044}, 0x24008011) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/max_page_sharing\x00', 0x1ab101, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) migrate_pages$auto(0x0, 0xa, &(0x7f0000000100)=0x5, &(0x7f0000000140)=0x2) syz_clone(0x280, 0x0, 0x0, 0x0, 0x0, 0x0) move_pages$auto(0x0, 0x1002, 0x0, &(0x7f0000001140), 0x0, 0x2) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f00000000c0), 0x40002, 0x0) write$auto(0x3, 0x0, 0xfdef) r3 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000009c0), r0) futex_waitv$auto(&(0x7f0000000000)={0xf, 0x5d94, 0x4, 0x4}, 0x77, 0x0, 0x0, 0x62bd) bpf$auto(0x0, &(0x7f0000000000)=@link_update={0x2, @new_prog_fd=0x4, 0x7, @old_prog_fd=0x8000}, 0xa3) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'veth0_to_team\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'veth0_virt_wifi\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_RINGS_GET(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000540)={0x104, r3, 0x5478eaaa3686070b, 0x70bd29, 0x25dfdbfc, {}, [@ETHTOOL_A_RINGS_HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}]}, @ETHTOOL_A_RINGS_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_RINGS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @ETHTOOL_A_RINGS_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}]}, @ETHTOOL_A_RINGS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xc3}]}, @ETHTOOL_A_RINGS_HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7f}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x8008005}, 0x4004894) 1m22.978477908s ago: executing program 4 (id=3204): r0 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, 0x0, 0x4000, 0x0) mmap$auto(0x0, 0x6, 0x4000000000df, 0x40eb8, 0x401, 0x300000000002) socket(0xa, 0x3, 0x3b) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) sysfs$auto(0x2, 0x23, 0x0) r1 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/set_event\x00', 0x20201, 0x0) write$auto(r1, 0x0, 0x3) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/dev_snmp6/ip6_vti0\x00', 0x1, 0x0) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa}, 0x58) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) ioctl$auto(0x3, 0x40081271, 0x38) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) r3 = socket(0x2, 0x1, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) getsockopt$auto(r3, 0x6, 0x23, 0x0, &(0x7f0000000100)=0x18) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x1, 0x2020009, 0x3, 0xebe, 0xfffffffffffffffa, 0x8000) shmctl$auto_IPC_SET(0xc, 0x1, &(0x7f0000000300)={{0xffffffff, 0xffffffffffffffff, 0xee01, 0x1000, 0xae, 0x9, 0x6}, 0x1, 0x7, 0x2, 0x280, @raw, @raw=0x5, 0x3, 0x0, &(0x7f0000000140)="4666def67af41b4f051e39fd6511fd6cfab11faa93fdd757f3a42ab52c0db46c7c57737a54cb9ad1fccd9f47e3400debebecee8c4b3ab4b0ecd15cb89799d7a8a423d738e2914ff98f43b494873650cfa841ca9b379cdbceb067f222f9852e4e248e519e6e2d25bc83b3fb9ec16cbc5fe503b9662d19861c9bb377749418140efde7024c7215d323a6c79c5be94bc04ed0d9afbb9c9574ff829522a54b91ef7bcef85e226564639c87b944203a6814a00eea8134d42bc137511ab276827b7ee17d85c2722c34b6d9cd3c095bd1094df859fd44defb05f086d48e42b8cfe4f20b057126cfb78738004716a5e21149cc372c89149624db4102", &(0x7f0000000240)="41b431f15aa64d11716c2908cc9f948827ddb702f4ae4ad578a4d9e2fa81507ca870d066e25696b0b2ac35abb53a8fc6e9df9fdbbc11fe705ab85e88111e5684e28f8599bc486b93eea020ee76a340a548c82e805e2d182d741e51d53c799f7bb722a591e8ac4c48f3317ac8926b8bfb8d1ffa178e0f324273421083410618838dc3"}) socketpair$auto(0x200, 0x2, 0x2, &(0x7f0000000380)=0x848c) socket(0xb, 0xa, 0xd9) setpgid$auto(0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) r4 = socket(0xa, 0x1, 0x84) bind$auto(r4, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @loopback}, 0x54) epoll_ctl$auto_EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f00000000c0)={0x4, 0x3}) write$auto(0x3, 0x0, 0xfdef) 1m19.130681559s ago: executing program 4 (id=3210): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) unshare$auto(0x40000080) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000980), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'dummy0\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_ACT(r1, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000a40)=ANY=[@ANYBLOB=' \x00\n\x00', @ANYRES16=r2, @ANYBLOB="01002dbd7000ffdbdf251a0000000c00018008000100", @ANYRES32=r3, @ANYBLOB], 0x20}}, 0x40000) msgctl$auto_IPC_RMID(0x4, 0x0, &(0x7f0000000240)={{0x0, 0xffffffffffffffff, 0x0, 0x9, 0x5, 0x5, 0x5}, 0x0, &(0x7f0000000200)=0x1, 0x1, 0xfff, 0x9, 0x7, 0x9, 0x4, 0x9, 0xf}) prctl$auto(0x3e, 0x6, 0x0, 0x1, 0xfffffffffffffffc) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) ioctl$auto(0xffffffffffffffff, 0x540a, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x2003f0, 0x15) madvise$auto(0x2, 0x5c61fa2c, 0xf) r6 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x40009, 0xdf, 0x8000009b72, 0xffffffffffffffff, 0x28000) socketpair$auto(0xf, 0x7, 0x8, 0x0) r7 = socket(0x10, 0x3, 0xb) setsockopt$auto(r7, 0x104000000000010e, 0x1, 0x0, 0x16) close_range$auto(0x0, 0xfffffffffffff000, 0x2) sendmsg$auto_OVS_FLOW_CMD_GET(r6, 0x0, 0x800) lchown$auto(&(0x7f0000000040)='./file0\x00', r4, r5) r8 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0) read$auto(r8, 0x0, 0xb4d3) write$auto(0x3, 0x0, 0xffd8) 1m15.892168712s ago: executing program 4 (id=3213): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000001c0), r0) sendmsg$auto_ETHTOOL_MSG_RINGS_SET(r0, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f0000001d80)={&(0x7f0000000080)=ANY=[@ANYBLOB="14005d00"/16, @ANYRES16=r1, @ANYBLOB="010027bd7000fbdbdf2510000000"], 0x14}, 0x1, 0x0, 0x0, 0x4000080}, 0x80000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) socket(0x2a, 0x2, 0x1) (async) r2 = socket(0x2a, 0x2, 0x1) r3 = socket(0x2, 0x5, 0x0) syz_genetlink_get_family_id$auto_vdpa(&(0x7f0000000200), r2) getcwd$auto(0x0, 0xfffffffffffff4c7) (async) getcwd$auto(0x0, 0xfffffffffffff4c7) setsockopt$auto(0x3, 0x10000000084, 0x4, 0x0, 0x4) (async) setsockopt$auto(0x3, 0x10000000084, 0x4, 0x0, 0x4) mmap$auto(0x0, 0x200003, 0x4000000000e3, 0x50eb2, 0xd, 0x300000000000) openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x80040, 0x40, 0xe}, 0x18) (async) openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x80040, 0x40, 0xe}, 0x18) r4 = openat$auto_proc_clear_refs_operations_internal(0xffffffffffffff9c, &(0x7f0000000600)='/proc/thread-self/clear_refs\x00', 0x2, 0x0) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f0000000280)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xd3, 0x0) chown$auto(&(0x7f0000000000)='}[,&*}\x00', 0xffffffffffffffff, 0x0) pidfd_send_signal$auto_PIDFD_SIGNAL_PROCESS_GROUP(r4, 0x6e, &(0x7f00000002c0)={@_si_pad}, 0x4) open(&(0x7f0000000040)='./cgroup.cpu/cgroup.procs\x00', 0x101840, 0x33903f3ada88772b) read$auto(r2, 0x0, 0x6a) write$auto(0x3, 0x0, 0xffd8) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) sendmmsg$auto(r3, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x4}, 0x7, 0x0, 0x2, 0xb}, 0x6}, 0x5, 0x311) ioctl$auto_TUNSETTXFILTER(r3, 0x400454d1, &(0x7f0000000100)=0x4) (async) ioctl$auto_TUNSETTXFILTER(r3, 0x400454d1, &(0x7f0000000100)=0x4) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0x10002}, 0x1) close_range$auto(0x2, 0x8, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000000), r0) 1m15.028023854s ago: executing program 4 (id=3216): mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) r0 = socket(0x2b, 0x1, 0x1) r1 = getsockopt$auto(r0, 0x0, 0x80, 0x0, 0x0) setsockopt$auto(0x3, 0x10000000084, 0xa, 0x0, 0x20) r2 = socket$nl_generic(0x10, 0x3, 0x10) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/fs/ext4/sda1/es_shrinker_info\x00', 0x8880, 0x0) preadv$auto(0x3, &(0x7f0000000040)={0x0, 0x8000000}, 0x3, 0xf8, 0x10) syz_genetlink_get_family_id$auto_ovs_packet(0x0, r2) setsockopt$auto(0x3, 0x10000000084, 0x7b, 0x0, 0xd) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x40000) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/card1/pcm0p/sub0/hw_params\x00', 0x1c1282, 0x0) sync_file_range$auto(r3, 0x4, 0x9, 0x1) socket(0x10, 0x2, 0x0) close_range$auto(r1, r1, 0xd) 1m7.7646744s ago: executing program 38 (id=3203): mount_setattr$auto(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000640)={0x46, 0x9}, 0x283) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000040), r0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/mm/ksm/ksm_zero_pages\x00', 0x80000, 0x0) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000200)='}[,&*}/file0\x00', &(0x7f0000000080)={0x220000, 0x0, 0x11}, 0x18) read$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f0000000000)=""/45, 0x2d) sendmsg$auto_L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1f00e475e65482eb8fd6bcbef314590eb07ffb88d04f954dd3c428268e4f41aefba2be9f585e3cb4c07d530b89cc0bb16627799c059ad747074a44f445c7a61ec4142520e74b9c421f6e2ee863a28ac0425f98982266c6c018de2781395dc4c2ba7cd6bd89f04ee845e3a7fa8363bbed602878ea24ac1710f28becec527ca56cb75e93120a08c267120ea90a1363e728827dfac0e81b04d374b51dfbe93b47b4cdf18c93a582c182aa8490df3b0b19e48aac66e830409637816b963b8407bb0b8bdde641831da62c87151c5074bcbc9609ce1203601f7e107a716649dcbf50657a5a605242ff2457148d3f93109fe03a2e39619dc6f0953d62f96747bc3eaf0c8d1b2684ade1b6dd2cc87fa257b3be7db4283b30807c6a4ab966e8bdcb2e0f6e8f0508163a681b65bf7dd295e6174e02621c10ceb811e65af8c0c05594e4e425", @ANYRES16=r1, @ANYBLOB="01002dbd7000fedbdf2503000000060001005300000008000a00030000003300000048b53abef5c8dfd5a17f0855b9e6861def371bb2581c5e4e849653a511d1f0cf3c4466b3a2e59664a23c30399373e10005000d000800000005001200000000000800090072a60000"], 0x70}, 0x1, 0x0, 0x0, 0x4040044}, 0x24008011) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/max_page_sharing\x00', 0x1ab101, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) migrate_pages$auto(0x0, 0xa, &(0x7f0000000100)=0x5, &(0x7f0000000140)=0x2) syz_clone(0x280, 0x0, 0x0, 0x0, 0x0, 0x0) move_pages$auto(0x0, 0x1002, 0x0, &(0x7f0000001140), 0x0, 0x2) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f00000000c0), 0x40002, 0x0) write$auto(0x3, 0x0, 0xfdef) r3 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000009c0), r0) futex_waitv$auto(&(0x7f0000000000)={0xf, 0x5d94, 0x4, 0x4}, 0x77, 0x0, 0x0, 0x62bd) bpf$auto(0x0, &(0x7f0000000000)=@link_update={0x2, @new_prog_fd=0x4, 0x7, @old_prog_fd=0x8000}, 0xa3) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'veth0_to_team\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'veth0_virt_wifi\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_RINGS_GET(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000540)={0x104, r3, 0x5478eaaa3686070b, 0x70bd29, 0x25dfdbfc, {}, [@ETHTOOL_A_RINGS_HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}]}, @ETHTOOL_A_RINGS_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_RINGS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @ETHTOOL_A_RINGS_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}]}, @ETHTOOL_A_RINGS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xc3}]}, @ETHTOOL_A_RINGS_HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7f}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x8008005}, 0x4004894) 59.571359799s ago: executing program 39 (id=3216): mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) r0 = socket(0x2b, 0x1, 0x1) r1 = getsockopt$auto(r0, 0x0, 0x80, 0x0, 0x0) setsockopt$auto(0x3, 0x10000000084, 0xa, 0x0, 0x20) r2 = socket$nl_generic(0x10, 0x3, 0x10) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/fs/ext4/sda1/es_shrinker_info\x00', 0x8880, 0x0) preadv$auto(0x3, &(0x7f0000000040)={0x0, 0x8000000}, 0x3, 0xf8, 0x10) syz_genetlink_get_family_id$auto_ovs_packet(0x0, r2) setsockopt$auto(0x3, 0x10000000084, 0x7b, 0x0, 0xd) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x40000) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/card1/pcm0p/sub0/hw_params\x00', 0x1c1282, 0x0) sync_file_range$auto(r3, 0x4, 0x9, 0x1) socket(0x10, 0x2, 0x0) close_range$auto(r1, r1, 0xd) 42.371859355s ago: executing program 0 (id=3228): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0x9000000eb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x1, 0x0) ptrace$auto(0x10, r0, 0x4, 0x7ff) ptrace$auto_PTRACE_PEEKSIGINFO(0x4209, r0, 0x8, 0x6) madvise$auto(0x200000000007, 0x1, 0x15) mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x103e81, 0x0) ioctl$auto_TCSBRKP2(r1, 0x5425, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000400)='/proc/sys/net/ipv4/tcp_available_congestion_control\x00', 0x0, 0x0) bpf$auto(0x0, 0x0, 0x4f4) prctl$auto(0x2, 0x1, r0, 0x86, 0x7) sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x3) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/pagemap\x00', 0x50400, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) openat$auto_sg_fops_sg(0xffffffffffffff9c, 0x0, 0x60042, 0x0) io_uring_setup$auto(0x6, 0x0) openat$auto_generic(0xffffffffffffff9c, &(0x7f0000000040)='/proc/kmsg\x00', 0x80900, 0x0) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self/net/rt_cache\x00', 0x2000, 0x0) select$auto(0x10, 0x0, 0x0, &(0x7f0000000140)={[0x1ff, 0x4, 0xd3e, 0x1, 0x948b, 0x3, 0x800295f4da0a, 0x2, 0x3, 0x62, 0x80000001, 0x50a7, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7f, 0xd, 0x1, 0x948f, 0x1005, 0x206, 0xa, 0xfffffffffffffff6, 0x7, 0x9, 0x79d, 0x6, 0x100000000000000, 0xfffffffffffffffc, 0xf]}, 0x0) capset$auto(0x0, 0x0) openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, 0x0, 0x20202, 0x0) 40.274303435s ago: executing program 0 (id=3259): mmap$auto(0x0, 0x4, 0x4000000000e3, 0x10000040eb2, 0x402, 0x300000000000) (async) ioctl$auto___SNDRV_PCM_IOCTL_SYNC_PTR64(0xffffffffffffffff, 0xc0884123, 0x0) (async) setresuid$auto(0xffffffffffffffff, 0x8, 0x8000) setfsuid$auto(0x0) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) (async) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x0) (async, rerun: 64) close_range$auto(0x2, 0x8, 0x0) (async, rerun: 64) socket(0x38, 0xa, 0x200) socket(0xa, 0x1, 0x84) (async) setsockopt$auto(0x400000000000003, 0x29, 0x3, 0x0, 0x4) socket(0xa, 0x5, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) (async) chdir$auto(&(0x7f0000000000)='}[,&*}\x00') unlinkat$auto(0xffffffffffffffff, 0x0, 0x200) open(0x0, 0x0, 0xb5d1af1605322df2) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x109001, 0x0) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r0, 0x0, 0x20) (async) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x140082, 0x0) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000004440), 0xffffffffffffffff) r4 = socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) sendmsg$auto_NFC_CMD_DEV_UP(r4, &(0x7f00000013c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="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"], 0x1c}, 0x1, 0x0, 0x0, 0x400ccd0}, 0x4000000) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'ip6gre0\x00'}) (async, rerun: 32) sendmsg$auto_OVS_DP_CMD_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000004540)={&(0x7f0000000140)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002bbd7000fff8df250100000008000900", @ANYBLOB="0800050006000000110001006f76735f12fffe02000000000200000008000200", @ANYRES32=0x0, @ANYBLOB], 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x2000000) (rerun: 32) 36.518422231s ago: executing program 0 (id=3263): r0 = fcntl$auto(0x0, 0x1, 0xffffffff7ffffffd) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$auto_SNDCTL_SEQ_THRESHOLD(r0, 0x4004510d, &(0x7f0000000600)="4adcfe786e6916cf5b727c56cb0b55c25754919eb6c45827cdcd22f9329216fd7e97698b85fb051b94a1ff269e5d648e20d844682aa2aac6c598e877a8b4f060166e2add6cf4d330ee49ee7a865bcdcb904c8fb6766bae1e9555db3ef36d27929818b2926d4d98a068067c97155dd86828d17189abbf6b6c1d4cf2975c730a611a160e5263ec24735e84f34185004ceefe92e32ed2d30d6e7dd1d6871ea1ae69cf897fc2e82bd49f65c3725c1f84181f9a94eb6a9b221441cf05a428140ec46d08681384ddc9") r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'virt_wifi0\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000880)={0x24, r3, 0x13, 0x70bd26, 0x25dfdbfd, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r5}, @NL80211_ATTR_WIPHY_ANTENNA_TX={0x8, 0x69, 0x3ff}]}, 0x24}, 0x1, 0x0, 0x0, 0x4004080}, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/memory_hotplug/parameters/online_policy\x00', 0x2, 0x0) write$auto_ocfs2_control_fops_stack_user(r6, &(0x7f0000003900)="3e14", 0x2) r7 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f00000000c0), r1) r8 = clone$auto(0x2, 0xf32, &(0x7f0000000300), &(0x7f00000003c0)=0x9, 0x5) r9 = setfsuid$auto(0xee01) getpriority$auto_PRIO_USER(0x2, r9) lstat$auto(&(0x7f0000000040)='./file0\x00', &(0x7f00000004c0)={0x6f, 0x1, 0x8, 0x3, r9, 0xee00, 0x0, 0x6, 0x722, 0x9, 0x7, 0x1, 0x3, 0x2c8ebe2a, 0x7c1, 0x1, 0x4}) sendmsg$auto_TIPC_NL_NAME_TABLE_GET(r4, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000440)={&(0x7f0000000900)={0x18f0, r7, 0x10, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x9d, 0x0, 0x0, @fd=r4}]}, @TIPC_NLA_UNSPEC={0x51, 0x0, "f448dee3d2734b580ef06acb3a16afe9a1785ac3db80e50ae173b70fdb8f78daca28aa04022d32ec9e9e975a90aec61ca8c5bf5caf3e06096117eeedd1033236acd9d380128ec3d10fa50e275c"}, @TIPC_NLA_NAME_TABLE={0x1c5, 0x8, 0x0, 0x1, [@nested={0x128, 0x54, 0x0, 0x1, [@nested={0x4, 0x11e}, @generic="13709c8a5d4e2dd59530804df018df7cfae22ec18a87be2eb709c9a934ecce18d76783d146b19076464e8d7b6032cd481df64c669314a01287f35be5bd74b3ea46913559a1e609933b3f02e0e962d1a34b186e0536e6fcd8d319f868e6c9260dfcee915597e73e6ea7987858f5754b5a", @generic="b35b408d6a6f2ffab62a94609682dc631591f7de255957414ebeb6190816ea15442a9a22b006296e9ccd49773fc5d94d057f9c3b89e9adc944e4fada03523511070a60eac9aec416b8358f8f3c98ba801b4e1e38d50ea9416e907576282cc98e32b0a0b495f74d94324b1c8740429dd6247b28c3eabee0688d8f6c64a8837bf06fcc7f36157b50117c5f5d333d923638528b6266b16aa4e3df8511bbc8cd6a28", @nested={0x4, 0x1a}, @typed={0xc, 0x82, 0x0, 0x0, @u64=0x8000}]}, @nested={0x4, 0xc1}, @generic="f1ce664dc2a6e7804ad7e777c8d004dffda6df19f81aa1d2290905e0f948c82817a5ebbe237ee2deb2100d71e4080c290fe62db0b93b4ff7234df88aabf64bc43e42ffeb08deb06a0a2ce3852c75ac51eac54da522048287e11d81682a0d62637b2a554bf18ed3eee25dcd5f962754011fe1380e54", @typed={0x14, 0x75, 0x0, 0x0, @ipv6=@empty}, @nested={0xc, 0x6c, 0x0, 0x1, [@nested={0x4, 0xc2}, @nested={0x4, 0x106}]}]}, @TIPC_NLA_PUBL={0x11f, 0x3, 0x0, 0x1, [@generic="a6bc312cc09b", @generic="e39a2ad91045d9faf1fb361c5ed214431821af131db40c6ab498d6d07d24a816587b314486dfcf6a32a53e3cd9d673", @nested={0xc, 0xfe, 0x0, 0x1, [@nested={0x4, 0x9}, @nested={0x4, 0xdf}]}, @generic="b28c6e9e1426f82bafa368f05e488302261e31b492d75f66e932814e23eb33a184cf8656ceaeb567586ab0f68a7890432aba9c9f5534ba2b196d1c40404445f13e0aecd6c6365bd1c552635450be19dfce5bb5e5260450850c67542b2d36f06e61f35f3c4f444db3d757fafbdf4c5eb42e0f926fc67ab1674ace", @nested={0x38, 0x147, 0x0, 0x1, [@nested={0x4, 0x12f}, @typed={0x8, 0x78, 0x0, 0x0, @u32=0x4}, @typed={0x8, 0x115, 0x0, 0x0, @ipv4=@empty}, @typed={0x8, 0x27, 0x0, 0x0, @pid=r8}, @typed={0x14, 0x127, 0x0, 0x0, @ipv6=@mcast2}, @nested={0x4, 0x18}]}, @nested={0x27, 0x112, 0x0, 0x1, [@nested={0x4, 0xe1}, @typed={0x4, 0xa4}, @generic="ca0ad7246e2f84707b38e0b23a320efe30e7f7e1c982febc291dec"]}]}, @TIPC_NLA_NET={0x116c, 0x7, 0x0, 0x1, [@nested={0x10, 0x23, 0x0, 0x1, [@typed={0xc, 0xc9, 0x0, 0x0, @u64=0x6}]}, @nested={0x1157, 0x72, 0x0, 0x1, [@typed={0x8, 0xe4, 0x0, 0x0, @u32}, @generic="ecb642f281dd40567f4a26ab7af718ae2eda787c35bbf8aeae6c6002ec9e51e1f750640f83ebd90942c1bbc18af4d9299c294c", @nested={0x4, 0x147}, @typed={0xfc, 0x87, 0x0, 0x0, @binary="7165fca3e55ead9c93e4567ab9862884bd3b9a316d52c8a0e86cf00c92ecd06c4a148049430c9ae24502c96ace61c8b1c49079f0c25f344de4aa9de47404b7ddcf8e0c2d1f7704e1390fc4ccee83ba205dd4a18fda55d56a76893afab6e8fa0696e6c10847b0fae21a579504bc3a9dc316a83455f2480048c1a941cda18b73f6cbb837cdc14fe11e79487a65f1fe315210e1353fa8a62136fb84bfcaac091563eb3324a5e79da92cb44964afb407bcdfd9b3dd75c03747ac948299955b215df775ae57a34d59d38233c52231958937fd71b052e973813ecccdf3d5d77d0a214528f1eed6ed5ea58f3dbadb476b3620f811ce428d01f42348"}, @typed={0x4, 0x6b}, @nested={0x4, 0x65}, @nested={0x4, 0x8b}, @typed={0x8, 0x81, 0x0, 0x0, @uid=r9}, @generic="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", @nested={0x4, 0xdd}]}]}, @TIPC_NLA_NODE={0x427, 0x6, 0x0, 0x1, [@generic="0fbd66166ce880a1bb0b062ca8cec2091ec5b2f6948cf7a853b5075014fd0afb79c278bc0bc17d7490d8e8cc299ace537d5dd4de06f6cb910497eb1f71c9bbc65bac60445e36849f1e27a92c43d4a2b84fe019e1ae1535925967ffd3ecc2edde03ac3bebe28e7c1fb5dc3497cd91078100e1092b73912b", @typed={0x8, 0xe5, 0x0, 0x0, @uid=0xee00}, @typed={0xc, 0xe5, 0x0, 0x0, @u64=0x1}, @generic="01e15e0186741f7fe8dabb333cd04e8e7b95061363558a3f785dafd418dc8a35bfc169", @generic="479815c2791704e67e1b16d25fc084d6b472569d690ad94806fe69cf759ff4135feaa09f948ad32770bbfbb4f5d54d5c480a2db26774c263d727cdd9ffe448d45ea038459186895ea486792e9bc8b1183797c4c0dd01c161a2bfc5f36dd7353876d3137acc6e8569fbbcc2f3330c03bfd28548413bd7c06333ab445263a21cfec41404547bcc948fed0f206abede79648b17af5f6e32f2b65ed1f1aae402dc000f8d55b6bff3b0e7d2585b6993f1ea4b91ba5bf62ea8b32b69c287c8f6fad1f41fc5fc6a61a5c4b143a360aa648f80ce48d22b8a0dc2", @generic="e46863c555268c10eeebba49dc4076a653cefc17339e96dce61e29373a654424d43ac87ab693e5c7876d2f5e6579abe4cb10aa4285a410137502631b43806fb32ba6971185a919e0bcb44b6936b85af3473b49597707ceb688dd5cbeed4b691ad374d51eb8276070a3a19d8fbc7742ceacbbcb6675c3a4a387daf4bff9b41df645ea9e803198c67898db150037b6cd5c90bcb26a4e82e5b68bc17a139ee7346e1ee1e6505162395e212f71742d25e82d0b68568bf5849ba256e741af7621e4aaa887302724f4e54c0cb86a6a755e9a8520db0f7097f9708d0636a86b", @generic="e5dc53d42b0caef50c0f2fecce1775ddc538150426cad9d7ebea5700014cc5367bfe69bc57c5d3de05cc714ab1b7ee7a917e9db744df37d4a24581442248af2d389331d2a8531e81255906d4066bd132d52b553aa984e20776f3d6884759be3fd1fc6880cffebec9f9410d24d6d0462c4927e4f2c7b9d5646f8832e6ef714b947ef5289a4ae0ec264d9e62998ffabe99f795697ae9810db1a0e8015071a79801788e6e24dfb64b0b3cb949540cc3df33380c184a5e04074d38cf354420da7fbcccc5603151", @generic="d0562b5604e6c558f069d2d7bb9eadab438cd496e63790fc0ffbe4673ad4cae23bda9c78c838d5c66a24d622f8d83d2c7d11cc956b2cd601594b1348e7a5cf6f43a0810217f12f3f82a7cf86e12fcb807b55506bc38f7aa8880a8a78a642c99decef3fd3cd95dcb3469b68279ad0295ff5b42be07ca46d4d4c822881b921e04662f8fc4038d230818593fcc5c3939eb03b804f357dba973bf45cf44b357a7801cd725d372e0b0a01e232a7cd0f4fcd079b24cb1ae70d8d2211b18baa48ee45e5535a437bc22fe7f1e74df140cde976c90d6cc899d3f53ee26e325ee4317d67d5390d", @typed={0x8, 0x106, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}, @typed={0x14, 0x103, 0x0, 0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x27}}]}]}, 0x18f0}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) io_uring_setup$auto(0x2, 0x0) r10 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) ioctl$auto_TIOCSETD2(r10, 0x5423, 0x0) io_uring_setup$auto(0x6a, &(0x7f0000000700)={0x2, 0x6, 0x3, 0x9, 0x3, 0x3, r10, [0x10, 0xa9cb, 0x6841c8e5], {0x5, 0x8, 0x9, 0x5, 0xb2d, 0x0, 0xfffffffc, 0x1, 0x400}, {0x5, 0xd96, 0x0, 0x8, 0x7, 0x1, 0x5, 0x222, 0x400}}) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r11 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ttyS2\x00', 0x101f81, 0x0) ioctl$auto_TIOCSETD2(r11, 0x5423, 0x0) ioctl$auto_TIOCVHANGUP2(r10, 0x5437, 0x0) r12 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f00000005c0)={'veth0_to_bridge\x00', 0x0}) bpf$auto(0x0, &(0x7f0000000100)=@bpf_attr_5={@target_ifindex=r13, 0xffffffffffffffff, 0x9c, 0x1, 0x1, @relative_fd, 0x5}, 0x96) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)={0xc4, r2, 0x301, 0x70bd2d, 0x25dfdbff, {0x11, 0x0, 0xfcff}, [@ETHTOOL_A_CHANNELS_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}]}, @ETHTOOL_A_CHANNELS_HEADER={0x4}, @ETHTOOL_A_CHANNELS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @ETHTOOL_A_CHANNELS_HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @ETHTOOL_A_CHANNELS_HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xac49}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}]}]}, 0xc4}}, 0x400c0) 34.065336097s ago: executing program 0 (id=3265): mmap$auto(0x0, 0x241, 0xffffffffffffffff, 0x40eb2, 0xffffffffffffffff, 0x300000000000) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000680)='/dev/snd/midiC2D0\x00', 0x200802, 0x0) write$auto(0xffffffffffffffff, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc3\xdd\xa7\xee$\xf5\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xe6\x06g\x1a\xfc\xa8\x02\vw\xb4\x14\x1d\xed\x9d\xda?U\x953.O\xab\"4\x8a\xbbY8@Z5`f\x0feE\xf2y\xaen\x0f9\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2', 0x100000a3d9) (async) openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000000200), 0x49643, 0x0) r2 = openat$auto_fops_u16_(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/netdevsim/netdevsim4/psample/out_tc\x00', 0x4300, 0x0) (async) r3 = socket(0x11, 0x80003, 0x300) (async) setsockopt$auto(r1, 0x6, 0xfffffffa, 0x0, 0x85) shutdown$auto(r2, 0x6) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x88e, 0x2020011, 0x3, 0x9000080eb3, r3, 0x7ff) (async, rerun: 32) io_uring_setup$auto(0x1, 0x0) (async, rerun: 32) ioctl$auto_TCSBRKP(r0, 0x5425, &(0x7f0000000240)="b10628ba2275a01f3a41227fe7dbbe84aa9d4a0366b10b598ee50c136a33f13f36e0f74c9014a00ee52000c95384ce2bb4e6448d0fb66e7fcb5faac1bbd0ea02937a669e05d09694302bd7d8ff6a8765eccb36fd4a794b420bb5b020a482662788b48c12f1ae6e582ea2ec1edd7750da20db412cfe12beb1a15ddc6726c6a42200f1dbcaf1da9c596f48d3340998e2f19efc219ba5d7bb1f3fd1d847012349033b80c5f761c15985007ac3bcb3b2ee32c5c1c4621e87f6d9dcafa30b80dbebc4") (async, rerun: 64) ptrace$auto(0x10, r4, 0x4, 0x7ff) (async, rerun: 64) ptrace$auto_PTRACE_PEEKSIGINFO(0x4209, r4, 0x8, 0x3) (async) madvise$auto(0x200000000007, 0x1, 0x15) (async, rerun: 32) mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) (async, rerun: 32) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x103e81, 0x0) (async) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/net/ipv6/conf/macvtap0/enhanced_dad\x00', 0xf0440, 0x0) (async) bpf$auto(0x0, 0x0, 0x4f4) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/class/devcoredump/disabled\x00', 0xe3102, 0x0) sendfile$auto(r5, r5, 0x0, 0x3) (async, rerun: 32) mmap$auto(0x0, 0x5, 0x200, 0x1d, 0x401, 0x300000000000) (async, rerun: 32) r6 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (async) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/pagemap\x00', 0x80200, 0x0) (async) ioctl$auto_PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f000000c380)={0x60, 0x0, 0x100000, 0x9, 0xfffffffffffffffe, 0x6, 0x800000000007, 0xbfb, 0x79, 0x400000000000000, 0x400003, 0x2}) write$auto(r6, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) (async) openat$auto_generic(0xffffffffffffff9c, &(0x7f0000000040)='/proc/kmsg\x00', 0x80900, 0x0) 32.455966001s ago: executing program 0 (id=3267): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/devices/virtual/net/rose7/flags\x00', 0x2262, 0x0) write$auto(r0, &(0x7f0000000140)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k\xfc\xb2\x00\x00\x00\x00y\x113!\x05\xa7\xd6M\xce\xd6\'\xdf@\x9f\xf5 \x8b_hw\x8em\xd0\b\xe7~1\xf5\xf8\x93*jH\x85H\x05\xae\xdf\xf0\x15A\xdb$\'\x87', 0x81) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000740), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000440)={0x38, r2, 0x1, 0x74bd2a, 0x25dfdbfc, {}, [@ETHTOOL_A_COALESCE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_TX={0x5, 0x18, 0x1}, @ETHTOOL_A_COALESCE_RATE_SAMPLE_INTERVAL={0x8, 0x17, 0x8}, @ETHTOOL_A_COALESCE_PKT_RATE_HIGH={0x8, 0x12, 0x7}]}, 0x38}, 0x1, 0x0, 0x0, 0x48c1}, 0x0) pipe$auto(&(0x7f0000000080)=r1) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) r4 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) msync$auto(0x0, 0x2000000005, 0x6) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) ioctl$auto_HPET_IRQFREQ(r4, 0x40086806, &(0x7f0000000040)=0x2) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) membarrier$auto(0x1005, 0xe, 0x8) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0xc02, 0x0) socket(0xa, 0x3, 0x3b) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/radio6\x00', 0x8a240, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D2\x00', 0xc8201, 0x0) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) r5 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48442, 0x0) mmap$auto(0x0, 0x1fffe000, 0x4000000000df, 0x10011, 0x401, 0x8000) io_uring_setup$auto(0x401, 0x0) close_range$auto(0x2, 0x8, 0x0) mkdir$auto(&(0x7f00000001c0)='./file0\x00', 0x3d7b) mount$auto(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x8000, 0x0) read$auto(r5, 0x0, 0x1f40) writev$auto(r5, &(0x7f0000000200)={0x0, 0x7}, 0x3) write$auto(r0, &(0x7f0000000640)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V98\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\x80\x04z\xd0I>\x8f\x00\xd7\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x97nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb6\x9f4[!\x0f3u\xaf\x97\x97\x9d\x1dp\xf3\xab\xdfE[5\x86\xa2\xb92\xc0\x15L\xda\xe3\x04\\M\x85}\xdfh\xd2\xd93e\xf61^\x04\x0f\x85\xc7_\xd0\x8d9\xbd\xc6\xf3R\xea\x10\xb9\xa2\x94]\xf2\r\t\xff$\xeb\xfd1\x8d\x97\x80\x81\x95]\xb2H\xf4\x1c\x8c\xcf\x8eM\x0eB\xb0\x83\xa3\bF\xc7\xae\x1a\xa7r\x9c\xfe\xa5\xa0~\xe4o+\x9d\xb0\xa6\xe8\a\x9a}\x88\x0eKd\xe07\xf0\x88\xf2\xb7\xe3\xe3\b\xac\x1e\xa2a0\x83\x0f\x06\x9eD\xd0\xc6\xba\xa4\x13(l\xf6\xbc\x982\xa0@\xda\xe0\x96\xdc0X\x9c\n\xb3fs\xe1\xf5r0, [], {0x6, 0x6, 0x8c48, 0x29a, 0x9, 0x80, 0x104, 0x6, 0x4}, {0x100, 0x1, 0x101, 0x85, 0x2, 0x24, 0xfe000000, 0x8, 0x3}}) r2 = openat$auto_vhci_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000d00), 0x0, 0x0) read$auto_vhci_fops_hci_vhci(r2, &(0x7f0000000d40)=""/16, 0x10) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000140), 0x180b03, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000580)={[0x1ff, 0x8000, 0xd, 0x1, 0x948d, 0x3, 0x10015f4da0a, 0xd, 0x7, 0x64c1, 0x8000001f, 0x8, 0x6d3e, 0xc, 0x2, 0x2]}, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x201, 0x1000000000009, 0x8, 0x14, 0x944, 0x1ffe0, 0x3, 0x4, 0x2, 0x9, 0x5, 0xfff, 0x7, 0x8001, 0x2, 0x5, 0x3, 0x3f, 0x7, 0x0, 0x8, 0x6, 0x0, 0x0, 0x6, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff7]}, 0x201, 0x81) mmap$auto(0x0, 0x2000d, 0x4000000200df, 0xeb1, 0x404, 0x8000) mmap$auto(0x800000000001, 0x1, 0x4000000000000003, 0x80000010, 0xfffffffffffffffa, 0x2) r3 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0) read$auto(r3, 0x0, 0x1f40) r4 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) ioctl$auto_SOUND_MIXER_READ_DEVMASK2(0xffffffffffffffff, 0x80044dfe, &(0x7f0000000440)="02344c282dedf756c11c13bd2b7db0cbba733c503959fbf7bf4d488bae73") writev$auto(r4, &(0x7f00000000c0)={0x0, 0xffffffff}, 0x6) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptyq0\x00', 0x20000, 0x0) getsockopt$auto_SO_TIMESTAMPNS_NEW(r1, 0x2, 0x40, &(0x7f0000000380)=',+{-/#]@!\\]@$##\x98%(}\x00', 0x0) syz_genetlink_get_family_id$auto_ovs_packet(0x0, 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x801}, 0x40000) 18.507317944s ago: executing program 9 (id=3287): socket(0x11, 0x3, 0x9) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r0, &(0x7f0000000080)='/dev/audio1\x00', 0x100000a3d9) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_tcp_metrics(&(0x7f0000000ac0), 0xffffffffffffffff) sendmsg$auto_TCP_METRICS_CMD_GET(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000bc0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$auto_BATADV_CMD_GET_TRANSTABLE_LOCAL(r1, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x1c, r2, 0x305, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40008}, 0x0) sendmsg$auto_VDPA_CMD_DEV_VSTATS_GET(r1, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)={0x18c, 0x0, 0x300, 0x70bd26, 0x25dfdbff, {}, [@VDPA_ATTR_DEV_NAME={0x14, 0x4, 'bridge_slave_0\x00'}, @VDPA_ATTR_DEV_NET_CFG_MACADDR={0x87, 0xa, "539ae3343e275733aecc88279d563b9702666b70fb8eba2740814571878228856a5b052025adc4c6331fc6a29e7dfff018e37a388e67cd77884a9c454921b994a88079184a19c049770d2fb0c1e2d4d7e945a30a000d955337d60a85673d5a935c0ff5f2347f0071481b2175204d7744099577a74e159e9cc590d8213a07ffb95732fc"}, @VDPA_ATTR_DEV_NET_CFG_MACADDR={0xdb, 0xa, "df5e870687e2b0ca566f41d3df83cf83589cb69ea55edd6bad5254b986dd81cb373156dbdc21af3caded5e90abb8dd9addc3d9e9587047777c25f96a2f69f69ae6b2e485d5cc70c1e329f8582a3c6f4f6414ad25df2d4e8763ef8b3dd8175fcdbd93d7bcf6ead92c3cf69563cb3edbc37e892755621e8f6a0b60ddb260daa35f548b772974610db7e1ce9feb881c61a6c018e41cf78c7993099fd7f73a3acc18eee60d1aa51008a452d1b0033ce859cc3b050369f5880742fcb0bf4daf0f31a84b8c3387252d71a058cc92614dd75a583891bf9f9bfaf3"}]}, 0x18c}, 0x1, 0x0, 0x0, 0x4000850}, 0x4004) unshare$auto(0x40000080) r5 = openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/block/nbd5/rqos/wbt/inflight\x00', 0x600, 0x0) pread64$auto(r5, 0x0, 0x4, 0x7ff) r6 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/tracing/set_event\x00', 0x121000, 0x0) pread64$auto(r6, &(0x7f0000000080)='MAC80211_HWSIM\x00', 0x3, 0x8) capset$auto(0x0, &(0x7f0000000000)={0x1, 0x6, 0x48}) r7 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/net/wireless\x00', 0x80, 0x0) openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/set_event\x00', 0x420000, 0x0) pread64$auto(r7, 0x0, 0x201, 0xc000) 14.730882755s ago: executing program 9 (id=3288): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x400008, 0x5, 0x9b72, 0x2, 0x6) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2b, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @remote}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000000)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x9, 0xfffffffd}, 0x1}, 0x5, 0x20000000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) prctl$auto_PR_SET_VMA(0x53564d41, 0x0, 0x0, 0x1, 0x2) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0x8000000000000000, 0x15) pwrite64$auto(0xffffffffffffffff, 0x0, 0xb, 0x8000) fsconfig$auto(0xffffffffffffffff, 0x8, 0x0, 0x0, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) openat$auto_hwsim_fops_ps_(0xffffffffffffff9c, &(0x7f0000000580)='/sys/kernel/debug/ieee80211/phy0/hwsim/ps\x00', 0x100, 0x0) ioctl$auto(0x3, 0x80108907, 0x38) prctl$auto_PR_GET_TID_ADDRESS(0x28, 0x2, 0x0, 0x0, 0x40) setsockopt$auto(0x3, 0x6, 0x3, 0x0, 0xd) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mbind$auto(0x0, 0x2091d1, 0x1, 0x0, 0x6, 0x2) write$auto(0x3, 0x0, 0xfffffdef) madvise$auto_MADV_GUARD_INSTALL(0x0, 0x2021000, 0x66) 14.60879345s ago: executing program 3 (id=3289): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x0, 0x100000000008000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x60742, 0x0) epoll_create$auto(0x4) socket(0x28, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f00000011c0), 0xa2741, 0x0) write$auto_snd_seq_f_ops_seq_clientmgr(r0, &(0x7f00000000c0)="621c1bfe595046ab5c98199adf6ad9cdc5b2fcff030000021e1dcedc5f00e8fdffff00c291dfb4000001e49f34dc422231cf4d40d401d5f8", 0x38) socket$nl_generic(0x10, 0x3, 0x10) epoll_ctl$auto(0x5, 0x1, 0x8000000000000000, 0x0) epoll_create$auto(0x3e) mmap$auto(0x0, 0x40009, 0xe2, 0x9b72, 0x7, 0x28000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000001380), 0x0, 0x0) io_uring_setup$auto(0x7, 0x0) read$auto(0x3, 0x0, 0x80) close_range$auto(0x0, 0x5, 0x0) fanotify_init$auto(0x5, 0x2000000000002) inotify_init1$auto(0x3000000000000) socket(0x15, 0x5, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup/cgroup.type\x00', 0x103042, 0x0) sendmsg$auto_SMC_NETLINK_GET_DEV_SMCD(0xffffffffffffffff, &(0x7f0000004380)={0x0, 0x0, &(0x7f0000004340)={&(0x7f0000004300)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB='\v'], 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x810) 14.107056775s ago: executing program 40 (id=3268): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu/hugetlb.1GB.failcnt\x00', 0x14bb00, 0x0) mmap$auto(0x0, 0x40009, 0x3, 0x9b72, 0x7, 0x28000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) r0 = socket(0x26, 0x5, 0x0) lsm_list_modules$auto(0x0, 0x0, 0x0) getsockopt$auto(r0, 0x0, 0x50, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x7, 0xeb1, 0xfffffffffffffffa, 0x8000) writev$auto(0x1, &(0x7f0000000100)={0x0, 0x400000000000fdef}, 0x1) pread64$auto(0xffffffffffffffff, 0x0, 0x7fc, 0x400) r1 = openat$auto_tracing_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/tracing/trace\x00', 0x600, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x74c) unshare$auto(0x40000080) mmap$auto(0xfffffffffffffffc, 0x400006, 0x8, 0x167d, 0xffffffffffffffff, 0x3) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r2 = socket(0xa, 0x2, 0x88) capset$auto(0x0, 0x0) sendmmsg$auto(0xffffffffffffffff, 0x0, 0x800, 0x100) setsockopt$auto(r2, 0x29, 0x10, 0x0, 0x1) socket(0xa, 0x801, 0x84) mmap$auto(0xffffffffffffffff, 0x400008, 0xdf, 0x9b72, 0x2, 0x6) bind$auto(r1, 0x0, 0xffffffe6) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) unshare$auto(0x40000080) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0xa0202, 0x0) listxattr$auto(&(0x7f0000000000)='./file0\x00', 0x0, 0xf) r3 = openat$auto_force_wakeup_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/bluetooth/hci2/force_wakeup\x00', 0x2180, 0x0) read$auto_force_wakeup_fops_hci_vhci(r3, &(0x7f0000000080)=""/249, 0xf9) 13.593290029s ago: executing program 3 (id=3291): shmget$auto(0x0, 0xfffffffffeffffff, 0x69c2) write$auto(0x3, 0x0, 0x100082) close_range$auto(0x2, 0x8, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/module/nvme_core/parameters/max_retries\x00', 0x101342, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/module/zswap/parameters/compressor\x00', 0x840042, 0x0) write$auto_ocfs2_control_fops_stack_user(r2, &(0x7f0000003900)='\t', 0x1) r3 = open(&(0x7f0000000000)='./cgroup\x00', 0x0, 0x64) fchdir$auto(r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) read$auto_trace_fops_debugfs(r5, 0x0, 0x0) ioctl$auto_X86_IOC_WRMSR_REGS(r5, 0xc02063a1, &(0x7f0000000000)=[0x2, 0x2, 0x4, 0x0, 0x2, 0x200, 0x3, 0x7]) ioctl$auto_AUTOFS_IOC_PROTOSUBVER(r5, 0x80049367, &(0x7f0000000340)) r6 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_INTERFACE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x14, r6, 0xb01, 0x70bd27, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x4000084) fanotify_init$auto(0x65, 0x2) sendmsg$auto_NL80211_CMD_STOP_SCHED_SCAN(r0, &(0x7f0000000300)={&(0x7f0000000280), 0xc, &(0x7f00000002c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="14010002", @ANYRES16=r6, @ANYBLOB="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"], 0x114}, 0x1, 0x0, 0x0, 0x1}, 0x0) mount$auto(0x0, &(0x7f00000000c0)='.\x00', &(0x7f00000001c0)='nfsd\x00\xee\x1a\x8f\xa2~?\xe2\x82fg\xb3G\xbe\xc8\x12\xae\xc3\xc0@[\x99\xec\xbf(\xec\xc3\xb2\xf2\x15Zi\xc4S6\'\x14\x05\t\x8c\xd5?\xa0\x00\xd8\xe4\xafW\xcc\xa3\xce\tI\x95\xe12\xaclJ\xba\xeb\xe4\x83Z\xaev\xd7\xd9\xdd_\x14O\x84\xaa\x13W\xb7\x06\'fvQ\x95\xc5\xd1\x98\xe3T\xcdfk\xc7\xe9\x96\r\x91\xb0\xc46\xf2\xfc\xef\xfe\xa0\xc9d\xb3h$\xeb\xad\xa4P\x8f\xc3bM{4RQ\x00\x9d)_\xd81(\x03\xfd\rw\xca1\x88|\xe5\x1e\x10\x89X\x01\xe9\xf6g\x95xx\xaf\xa9~m\x05\xe1\xa8\xda\x80\xc5\x8f\xb41\x81\xf0\xa3\xa2\xe4\x81\xb9\x92\xda\x13\xfe5\xfb\xc6\xd8>\x01\xd4\x14', 0x5, 0x0) umount2$auto(&(0x7f0000000000)='.\x00', 0x1) sendfile$auto(r1, 0x3, 0x0, 0xc01) r7 = socket(0x9, 0x5, 0x11) getsockopt$auto_SO_PEERPIDFD(r7, 0x5, 0x4d, 0x0, 0x0) r8 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), r0) fstat$auto(r1, &(0x7f0000000780)={0x4000000000008, 0x8000000000000008, 0x2, 0x1, 0xffffffffffffffff, 0xee01, 0x0, 0xffff, 0x0, 0xc, 0x70fed512, 0xfe, 0x8, 0x10001, 0xfffffffffffffff9, 0x8000000000000001, 0x5}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'macvlan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'dvmrp0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'lo\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_STRSET_GET(r4, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000840)=ANY=[@ANYRESHEX=r7, @ANYRESHEX=r3, @ANYRES64=r5, @ANYRES64, @ANYBLOB="0800c600", @ANYRES32=r9, @ANYRES8, @ANYRES64=r2, @ANYRES8=r10, @ANYRES32=r4, @ANYBLOB="50000180290301002446c32ed551042efc50e75d78d30305d0fde2b86e8d145aae737963583562ff0254a24e04d47be1fafcfc099a59a92d5259970ba934f9a46a7b69cbdcd660ed1b38c442ac02bfabf94f78d6b1825d6280179c6d1ce3830369a383bd4839aefe2f61f4d5884d8bcdd4", @ANYRES32=r11, @ANYRESHEX, @ANYRES32=r12, @ANYBLOB="08000100", @ANYRES8=r0, @ANYRES64=r8], 0x164}, 0x1, 0x0, 0x0, 0x40004}, 0x4004) openat$auto_stats_seq_fops_netdebug(0xffffffffffffff9c, &(0x7f0000000440), 0x280040, 0x0) 12.163772056s ago: executing program 8 (id=3293): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x0) r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x40242, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/block/ram9/diskseq\x00', 0x0, 0x0) read$auto(r1, 0x0, 0x20) writev$auto(r0, &(0x7f00000000c0)={0x0, 0x10}, 0x3) mremap$auto(0x200000004000, 0x4, 0x4, 0x3, 0x100000000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x1000, 0xdf, 0x9b72, 0x2, 0x8000) r2 = socket(0x1d, 0x2, 0x6) r3 = socket(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$auto(r2, &(0x7f0000000040)=@can={0x1d, r4, 0xfd}, 0x6a) sendto$auto(0x3, 0x0, 0x79, 0x2, 0x0, 0x20) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r5 = open(&(0x7f0000000100)='.\x00', 0x595002, 0x408) write$auto(r5, 0x0, 0xfffffdf1) linkat$auto(r5, 0x0, 0xffffffffffffff9c, &(0x7f0000000080)='&&\x00', 0x1000) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000300), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000840)={'wlan1\x00', 0x0}) sendmsg$auto_NL80211_CMD_DEL_PMK(r6, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="01002cbd7000fbdbdf259700000008000300", @ANYRES32=r8], 0x1c}, 0x1, 0x0, 0x0, 0x48880}, 0x80) fsetxattr$auto(r5, &(0x7f0000000000)=':\xbf+,\x8a}\x00', &(0x7f00000001c0), 0x7bf, 0x1) mprotect$auto(0x0, 0x8000000000000001, 0x8) 10.411908628s ago: executing program 9 (id=3294): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x14fa02, 0x0) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x14fa02, 0x0) mmap$auto(0x0, 0x810004, 0x400000000ffb, 0x8000000008011, 0x3, 0x8000) setresuid$auto(0x0, 0x0, 0x0) sendmsg$auto_NL80211_CMD_GET_STATION(0xffffffffffffffff, 0x0, 0x8000) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0xfffffffffffffffc, 0x40, 0x0) mmap$auto(0x0, 0x400008, 0xe3, 0x9b72, 0x2, 0x8000) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptyee\x00', 0x121880, 0x0) ioctl$auto_TCFLSH2(r1, 0x80045439, 0x0) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f0000000340)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc3*F\xf9\xff\'\xad\rK\xfe\xb9\v\x961\xbe\xe7\xa6\xdcd\xfd\x91\b\x05\xba\xca0\xa5\x1d\x02\x9f\xb7\xf6w\xd4}\xa7\xbc\xe4\xc8\xeb\xdc\x84\x90\\\xd7T\xc8\xa3\xe07\xcb\xac\xe8\x12P\xc0\x15\xe3\xdcr|\xef\xdc\xf9\xd9z\xfa\xfe\x10A7\x18\xc9z\xd5\xde\xf1<\x16\xd5-1D\x97\xc5V\x14x\xddT\xc0Jt\x13U\x18\xfc\xddZ).C\x10\xc1\x1e\xbb_\xcd\xc0m\xc8\xf2\x8a\f)MW\x82\xeb\xfa\xaa\xd2\x9b\xb65\x8f\xfc-tl\x16\xf3\xeab\xc2\xab\x0f\xfe\xb2\xe2d/\x97V \xc5\x9f8\xb6\x05\x01g\x0e<\xd3(\xedi\xc6\xc6t\xe2L9\x9a.\xf8Y.\x89\xdf\x8cz\xfe\x82\xd1', 0x2) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x181500, 0x0) open_by_handle_at$auto(r2, 0x0, 0x4295) mmap$auto(0x0, 0x6, 0x4000002, 0x40eb2, 0xffffffffffffffff, 0x308000000000) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, 0x0, 0x1c8340, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) socketpair$auto(0x1, 0xffffffff, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x155) r3 = socket(0x2, 0x80802, 0x0) setsockopt$auto(r3, 0x11, 0x67, 0x0, 0x8) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) connect$auto(0x3, &(0x7f0000000180)=@in={0x2, 0x0, @multicast1}, 0x55) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) migrate_pages$auto(0x0, 0xa, &(0x7f0000000100)=0x5, &(0x7f0000000140)=0x2) sched_setattr$auto(0x0, 0x0, 0x7b) r4 = openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000000000), 0x880183, 0x0) ioctl$auto_USB_RAW_IOCTL_EP0_READ(r4, 0xc0085504, &(0x7f0000000040)={0x6, 0x0, 0x8001}) 8.376585166s ago: executing program 9 (id=3295): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x802, 0x0) r0 = openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/snd/pcmC1D0p\x00', 0x101080, 0x0) ioctl$auto_SNDRV_PCM_IOCTL_INFO(r0, 0x5452, &(0x7f0000001e40)={0x2, 0x1, 0x5, 0xc, "e95874bb90baf73338e2278b336f66d9f24da88bcc9fbfeb0b938f002fce8d3d405da0043f932a0a972f0c7afdbf870c91e3c9d8cf8f552b7224bd2f6eb0ae15", "3459595e78d266039a6b8db235ea9e73739e5019b4a4b442c93381b23f3a956f63cb871a8cc775f9ae62723c8882c7ac613aeecb0f8f87a759fb71392f8a369cc8ef7eed27fe7d3ab1fc0b23981b7194", "5f5af60aa7da18adb80fef26e964f184e8764aab7edfb83c36a97c17cb9ffa8d", 0x39, 0x2, 0x13, 0x7, '\x00', "c044ade8bf1a11e296938543ce1bcb5372d12e1815e4e5a4adc8ecafe3c08f5745fa2f5ac5b828c4453517a78700b1841810a3d79d3d2bd84a067270ca188fff"}) close_range$auto(0x2, 0x8, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) madvise$auto(0x40, 0x3c6c, 0x3) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000180)='/dev/tty12\x00', 0x101840, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) capset$auto(&(0x7f0000000180)={0x19980330}, 0x0) msgctl$auto_IPC_SET(0x0, 0x1, &(0x7f0000000340)={{0x6, 0x0, 0xffffffffffffffff, 0x0, 0x80000001, 0x9, 0x4}, 0x0, 0x0, 0x400, 0x4d, 0xaef6, 0x7f, 0x4, 0x0, 0xa4a, 0x1, @raw=0x7}) 7.867743332s ago: executing program 9 (id=3296): openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/event2\x00', 0x42140, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x0, 0x100000000008000) sysfs$auto(0x2, 0x3f, 0x0) fsopen$auto(0x0, 0x1) setreuid$auto(0x0, 0x0) socket(0xa, 0x3, 0x1) mmap$auto(0x0, 0x8, 0x8000, 0x9b72, 0x2, 0x10001) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "00800000ffefffffff0200000001"}, 0x55) setsockopt$auto(0x400000000000003, 0x29, 0x6, 0x0, 0x3) mmap$auto(0x0, 0x400408, 0xff, 0x9b76, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/security/tomoyo/query\x00', 0x20600, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptye9\x00', 0x101e81, 0x0) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop7\x00', 0xe00, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card0/pcm0c/sub6/info\x00', 0xa0000, 0x0) ioctl$auto(0x3, 0x402c542b, 0x38) r1 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000980)='/dev/ttye9\x00', 0x102, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r2) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYRES16=r3, @ANYBLOB="2f212dbd7000fcdbdf", @ANYRES32=r4, @ANYBLOB="08009e"], 0x24}}, 0x4000000) r5 = setfsuid$auto(0xee01) msgctl$auto_IPC_STAT(0x6, 0x2, &(0x7f00000002c0)={{0x9, 0x0, 0xee00, 0x11, 0x1, 0x9, 0x7fff}, 0x0, 0x0, 0x69d, 0x583f, 0x401, 0x890, 0x9, 0x8001, 0x6, 0x8, @inferred=0xffffffffffffffff}) setresuid$auto(0xee01, r5, r6) sendmsg$auto_NL80211_CMD_START_NAN(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f00000009c0)=ANY=[], 0xb8c}, 0x1, 0x0, 0x0, 0x811}, 0x20040e1) sendfile$auto(r1, r0, 0x0, 0x10000) close_range$auto(0x2, 0x8, 0x0) openat$auto_nvram_misc_fops_nvram(0xffffffffffffff9c, &(0x7f0000000140), 0x21e000, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/pnp0/00:04/00:04:0/00:04:0.0/tty/ttyS0/iomem_reg_shift\x00', 0x180, 0x0) keyctl$auto(0x7, 0xfffffffffffffffd, 0xffffffffffffffff, r7, 0x5d7) 7.787203677s ago: executing program 8 (id=3297): socket(0x2, 0x3, 0xa) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x9, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001b80), r1) write$auto(0xffffffffffffffff, &(0x7f0000000440)='ON\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf0F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\xed\'\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb', 0xb8c5) mmap$auto(0x0, 0xe983, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) write$auto_fuse_dev_operations_fuse_i(0xffffffffffffffff, &(0x7f0000000440)="11000000", 0x4) sendmsg$auto_NL80211_CMD_UPDATE_FT_IES(r1, &(0x7f0000001240)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001200)={&(0x7f00000011c0)={0x1c, 0x0, 0x8, 0x70bd2d, 0x25dfdbfb, {}, [@NL80211_ATTR_STA_AID={0x6, 0x10, 0xfffa}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x1) socket(0xf, 0x3, 0x2) ioctl$auto_TIOCNXCL2(r0, 0x540d, &(0x7f0000001140)="2ad6d6fc55834ef9c7c6b98918b47d79b4ac95cd6b3c52897bfb1114efcbf79f1f083ad19afda178174ec403264f3861e548cecf84ec44e707676920481ad46e2d7388aba16f155e0bb352b9adedfd45edeed3d8a325998e825b7fc75abaeb1c0b6eb44ac92134fecc1be22bb4f9eb") openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D2\x00', 0x20401, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) io_uring_setup$auto(0x1, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001100)='./cgroup.net/blkio.throttle.io_service_bytes_recursive\x00', 0xa0040, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f00000000c0)=""/4096, 0x1000) futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0x80000001) gettid() futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0x80000001) r3 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv6/conf/all/forwarding\x00', 0x42a81, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) select$auto(0x7, 0x0, &(0x7f0000000080)={[0x209c, 0xe9e, 0x4, 0x19, 0x1000, 0x47, 0xc, 0x200000f, 0x0, 0x0, 0xe, 0xd59, 0x101, 0xff, 0x2, 0x3]}, 0x0, 0x0) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x1000) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/bdi/43:288/max_ratio_fine\x00', 0x10b142, 0x0) sendfile$auto(r3, r4, 0x0, 0x1000200) 7.108988173s ago: executing program 9 (id=3298): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x14fa02, 0x0) mmap$auto(0x0, 0x810004, 0x400000000ffb, 0x8000000008011, 0x3, 0x8000) (async) mmap$auto(0x0, 0x810004, 0x400000000ffb, 0x8000000008011, 0x3, 0x8000) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0xa0302, 0x0) (async) r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0xa0302, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/module/usbcore/parameters/quirks\x00', 0x1c1643, 0x0) writev$auto(r0, 0x0, 0x3) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000400)='/sys/devices/virtual/block/loop12/integrity/protection_interval_bytes\x00', 0x80000, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f00000004c0)=""/206, 0xce) unshare$auto(0x40000080) mmap$auto(0x0, 0x2000d, 0x7, 0xeb1, 0x404, 0x10008000) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x38ca40, 0x0) open(0x0, 0x22240, 0x154) mmap$auto(0x800000000, 0xbfd, 0x10001, 0x16, 0xfffffffffffffffa, 0x8000) (async) mmap$auto(0x800000000, 0xbfd, 0x10001, 0x16, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0xc, 0x0) (async) io_uring_setup$auto(0xc, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000001f00), 0xffffffffffffffff) (async) r3 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000001f00), 0xffffffffffffffff) sendmsg$auto_TIPC_NL_BEARER_ENABLE(r2, &(0x7f0000003a80)={0x0, 0x0, &(0x7f0000003a40)={&(0x7f0000000080)={0x24, r3, 0x1, 0x70bd2e, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x10, 0x1, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @str='@):^\\/\\\x00'}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x24040804) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/virtual/block/loop5/hidden\x00', 0xa0140, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180)={0x400000, 0x180, 0x14}, 0x18) read$auto_kernfs_file_fops_kernfs_internal(r4, &(0x7f0000000040)=""/212, 0xd4) (async) read$auto_kernfs_file_fops_kernfs_internal(r4, &(0x7f0000000040)=""/212, 0xd4) mprotect$auto(0x0, 0x8000000000000001, 0x8) (async) mprotect$auto(0x0, 0x8000000000000001, 0x8) mprotect$auto(0x0, 0x806121, 0x6) 4.90187544s ago: executing program 8 (id=3299): r0 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000040), 0x8300, 0x0) msync$auto(0x200000, 0x2000000005, 0x6) mq_notify$auto(r0, &(0x7f0000000180)={@sival_int=0xe, @inferred, 0xb89, @_sigev_thread={0x0, &(0x7f0000000100)}}) mmap$auto(0x0, 0x3000c, 0x4000000000df, 0x4000eb1, 0x401, 0x10000) ioctl$auto_EVIOCSREP(0xffffffffffffffff, 0x40084503, 0x0) ioctl$auto_RTC_PIE_ON(r0, 0x7005, 0x0) readv$auto(r0, &(0x7f00000004c0)={0x0, 0x4}, 0x5) close_range$auto(0x2, 0x8000, 0x0) mmap$auto(0x0, 0x2000a, 0x10000000000df, 0xeb2, 0x401, 0x8000) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) r1 = open(0x0, 0x261c2, 0x84) close_range$auto(0x2, 0x8, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_GET_WOWLAN(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x0) setreuid$auto(0x0, 0x0) rseq$auto(&(0x7f0000000100)={0xe, 0x401, 0x0, 0x6, 0xffffffff, 0xffffff4d, "72c53335fbfa2eb3845b1e63c778855a687803e12d1eb2d43e0e6215fa"}, 0x8000, 0x0, 0x6) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/input/event0\x00', 0x3496c2, 0x0) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r4) ioctl$auto_KVM_GET_MSRS(r3, 0x4140aecd, &(0x7f0000000040)={0x7}) r5 = socket(0xa, 0x2, 0x88) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) bpf$auto(0x0, &(0x7f0000000280)=@bpf_attr_5={@target_ifindex=r7, r6, 0x8, 0x1, 0xffffffffffffffff, @relative_fd=r2, 0xe600}, 0xf) bpf$auto(0x2, &(0x7f0000000340)=@raw_tracepoint={0x5, r1, 0x0, 0x2}, 0xc) 4.207633853s ago: executing program 8 (id=3300): r0 = prctl$auto_PR_TIMER_CREATE_RESTORE_IDS_GET(0x7, 0x2, 0x0, 0xb380, 0x1) syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000080), 0xffffffffffffffff) mmap$auto(0x0, 0x2020009, 0x8000000000000003, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/block/loop14/queue/dma_alignment\x00', 0x80000, 0x0) read$auto(r1, 0x0, 0x20) openat$auto_dfs_global_fops_debug(0xffffffffffffff9c, 0x0, 0xd2a01, 0x0) io_uring_setup$auto(0x10059, &(0x7f0000000080)={0x7fffffff, 0xd, 0x11, 0x6, 0x7fff, 0x8, 0xffffffffffffffff, [0x0, 0x0, 0x1], {0x6, 0x6, 0xe, 0x2df, 0x500, 0x81, 0x101, 0x6, 0x6}, {0x100, 0x1, 0x52, 0x5, 0x10001, 0x40, 0x76c5, 0x8, 0x7fffffffffffffff}}) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r2, &(0x7f0000000200)={0x0, 0x7}, 0x3) pwrite64$auto(0xc8, &(0x7f0000000040)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x86\xdde\x1cJ\x99\x00\x00\x00\x00\x00\x00\xfd\xfd\xd3\xd3\x1d\xf8\xbe\x01\x00\x00\x00\'\x03\x00\x00\x9f\x1e\xf9\xa4*\x01\x00\x00\x00^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e#\xae\xa9i8W\xe5Iq\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd0\xbdn\x1d\x00\xeb]B\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00'/231, 0xfdf2, 0x3a) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x801, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) open(0x0, 0x22240, 0x55) semctl$auto(0x80001ff, 0x804, 0x13, 0x4) keyctl$auto(0x1, 0x7, 0x100, 0x8, 0x4) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x2, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/controlC1\x00', 0xa02, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/graphics/fbcon/rotate\x00', 0x10b842, 0x0) write$auto(r3, &(0x7f00000000c0)='\xce*+#\x00\x0e\xdf\x0fwF\xa3\x94\xf5\xc2\x14\x0f\xe0\xd2\xd6\x84f\xf3\f\xe8y\xce-K\xaf\x02UVp\'\xa8\xa1,\x80\x88\xbe\xe5\t\x15\v\xb4n\xe67\xa6\x8d\xf5)\x8e)B\x10\xc6\x95\xcf\xfcd\xdfx{8\xb6LgE\x94\x95\xf4\x18%h\xcd\xf0\x9e\x11\xfa0\x1c\xa1\x93\x9a\xa4', 0x2302f95f) msgctl$auto_MSG_STAT(0x0, 0xb, &(0x7f0000000140)={{0x4, 0xee00, 0xee00, 0x800080, 0x4, 0x40, 0x9}, &(0x7f00000000c0)=0xc7, 0x0, 0x9, 0x4, 0x6e08, 0x10, 0x10, 0x3, 0x81, 0xd977, @raw=0x2, @inferred=0xffffffffffffffff}) sendmsg$auto_TIPC_NL_SOCK_GET(r0, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x4002000) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000040), 0x28201, 0x0) write$auto(r4, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x60042, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio1\x00', 0x80e42, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/adsp1\x00', 0x20342, 0x0) 434.897174ms ago: executing program 8 (id=3301): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_CTRL_CMD_GETPOLICY(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r1, 0x1, 0x70bd27, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) 0s ago: executing program 8 (id=3302): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x802, 0x0) socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) syz_genetlink_get_family_id$auto_802_15_4_mac(0x0, 0xffffffffffffffff) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) setsockopt$auto(0x3, 0x1, 0x4c, 0x0, 0x9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) ioctl$auto_SG_NEXT_CMD_LEN(0xffffffffffffffff, 0x2283, 0x0) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) madvise$auto(0x0, 0x2003f0, 0x17) mmap$auto(0x5, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x4000000007ffc) sendmsg$auto_SMC_NETLINK_FLUSH_UEID(r0, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000000007000fedbdf250c000000b614901ec23f792395d5398f1bc618090e2def81851c74c552e9dc28eb794a3427da0ca07b4442b224ec2b20fc84cbaf1bb107a89a0a55c0e77b8b688aa51e6308841269"], 0x58}, 0x1, 0x0, 0x0, 0x5}, 0x0) unshare$auto(0x8000000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) madvise$auto(0x40, 0x3c6c, 0x3) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_THERMAL_GENL_CMD_TZ_GET_GOV(r1, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x44, 0x0, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [@THERMAL_GENL_ATTR_THRESHOLD_TEMP={0x8, 0x19, 0x8}, @THERMAL_GENL_ATTR_TZ_TRIP_TYPE={0x8, 0x6, 0x3}, @THERMAL_GENL_ATTR_TZ_TRIP_TYPE={0x8, 0x6, 0xfffff301}, @THERMAL_GENL_ATTR_TZ_TRIP_TYPE={0x8, 0x6, 0x91}, @THERMAL_GENL_ATTR_CPU_CAPABILITY_EFFICIENCY={0x8, 0x17, 0x5}, @THERMAL_GENL_ATTR_TZ_CDEV_WEIGHT={0x8, 0xb, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000801}, 0x20000) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="236aa348", @ANYRES16=r2, @ANYBLOB="020029bd7000ffdbdf251f0000000800ef0000080000050008008100000092004f00696f455bbe8a36888fa48ed6042e67f3ff00044a38d7e2df844ebe49d4b468cfe452f206a99307b30f84b995b74fc162d3f602dd483c43d5deea3f1fc326b7cb1abe0c273b4595c06a770c5fda1e5fa77c862e25a4f111aa5b7e638cea09d23afc4a57955093b543c84405ed918aaab250f464a38eb16b9ed7d3901975aff4f62e23fe6c2f6a135c5bca49e909c400000c005800020000000000000008000c000300000014001b8004000200040003000400030004000300050019017f000000"], 0xe8}, 0x1, 0x0, 0x0, 0x800}, 0x4800) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000180)='/dev/tty12\x00', 0x101840, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sysfs$auto(0x5, 0x3d, 0x7) fsopen$auto(0x0, 0x1) close_range$auto(0x2, 0x8, 0x0) msgctl$auto_IPC_SET(0x0, 0x1, &(0x7f0000000340)={{0x6, 0x0, 0xffffffffffffffff, 0x0, 0x80000001, 0x9, 0x4}, 0x0, 0x0, 0x400, 0x4d, 0xaef6, 0x7f, 0x4, 0x0, 0xa4a, 0x1, @raw=0x7}) kernel console output (not intermixed with test programs): 6 R12: 0000000000000000 [ 986.626008][T19440] R13: 00007f2600de6038 R14: 00007f2600de5fa0 R15: 00007ffe156c1088 [ 986.626030][T19440] [ 988.006189][T13105] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 988.084847][T13105] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 988.353274][T13105] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 988.912744][T13105] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 989.224831][T13105] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 990.696616][T19471] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -12 [ 990.825463][T19471] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -12 [ 991.004825][T19471] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 991.754796][T13105] Bluetooth: hci2: command tx timeout [ 993.112987][T19445] chnl_net:caif_netlink_parms(): no params data found [ 993.154308][T19437] Process accounting paused [ 993.834999][T13105] Bluetooth: hci2: command tx timeout [ 993.914471][T19445] bridge0: port 1(bridge_slave_0) entered blocking state [ 994.015640][T19445] bridge0: port 1(bridge_slave_0) entered disabled state [ 994.022928][T19445] bridge_slave_0: entered allmulticast mode [ 994.186159][T19445] bridge_slave_0: entered promiscuous mode [ 994.265890][T19445] bridge0: port 2(bridge_slave_1) entered blocking state [ 994.273027][T19445] bridge0: port 2(bridge_slave_1) entered disabled state [ 994.455123][T19445] bridge_slave_1: entered allmulticast mode [ 994.545048][T19445] bridge_slave_1: entered promiscuous mode [ 994.866890][T19445] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 995.017198][T19445] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 995.223216][T19478] Process accounting resumed [ 995.352040][T19445] team0: Port device team_slave_0 added [ 995.486032][T19445] team0: Port device team_slave_1 added [ 995.917118][T13105] Bluetooth: hci2: command tx timeout [ 996.066844][T19445] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 996.073813][T19445] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 996.425705][T19506] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2875'. [ 996.488125][T19445] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 996.715689][T19445] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 996.722671][T19445] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 997.079111][T19445] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 997.765854][T19445] hsr_slave_0: entered promiscuous mode [ 997.833029][T19445] hsr_slave_1: entered promiscuous mode [ 997.907571][T19445] debugfs: 'hsr0' already exists in 'hsr' [ 997.984347][T19445] Cannot create hsr debugfs directory [ 998.065215][ T30] audit: type=1806 audit(8277292728.160:28): xattr="." res=0 [ 998.267458][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 998.273777][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 999.035230][T13105] Bluetooth: hci2: command 0x0c1a tx timeout [ 999.041676][ T43] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 999.681861][T19535] sp0: Synchronizing with TNC [ 999.912952][T19536] ptp ptp0: new virtual clock ptp1 [ 1000.026215][T19536] ptp ptp0: new virtual clock ptp2 [ 1000.110159][T19536] ptp ptp0: new virtual clock ptp3 [ 1000.196245][T19536] ptp ptp0: new virtual clock ptp4 [ 1000.295867][T19536] ptp ptp0: new virtual clock ptp5 [ 1000.493834][T19536] ptp ptp0: new virtual clock ptp6 [ 1000.567724][T19536] failed to create ptp aux_worker -4 [ 1001.198012][T13105] Bluetooth: hci2: command 0x0c1a tx timeout [ 1001.204445][ T43] Bluetooth: hci2: Opcode 0x0406 failed: -110 [ 1001.222686][T19445] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1001.365403][T19445] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1001.519465][T19445] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1001.699068][T19445] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1002.686103][T19445] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1002.697343][T19564] erspan0: entered allmulticast mode [ 1002.967234][T19445] 8021q: adding VLAN 0 to HW filter on device team0 [ 1003.209436][T18290] bridge0: port 1(bridge_slave_0) entered blocking state [ 1003.216664][T18290] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1003.372413][T18290] bridge0: port 2(bridge_slave_1) entered blocking state [ 1003.379601][T18290] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1003.435170][T13105] Bluetooth: hci2: command 0x0c1a tx timeout [ 1003.442530][ T43] Bluetooth: hci2: Opcode 0x0406 failed: -110 [ 1005.521316][T19445] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1007.987678][T19445] veth0_vlan: entered promiscuous mode [ 1008.131007][T19445] veth1_vlan: entered promiscuous mode [ 1008.426608][T19445] veth0_macvtap: entered promiscuous mode [ 1008.577824][T19445] veth1_macvtap: entered promiscuous mode [ 1008.799283][T19445] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1008.970511][T19445] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1009.265060][T13138] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1009.376148][T13138] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1009.560824][T13138] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1009.675982][T13138] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1010.174866][T13242] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1010.182725][T13242] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1010.489495][T13093] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1010.579870][T13093] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1011.308221][T19652] debugfs: '!PjE ùrõ£Ò„yù*›"¤l-ý¤ôy–ú„L̓÷ÓÄ]' already exists in 'ieee80211' [ 1014.748157][T19677] Process accounting resumed [ 1016.765668][T19693] scsi_strcpy_devinfo: vendor string 'íÙ/&cžÀ~n] ò | [ 1016.765668][T19693] MÅ' is too long [ 1016.934837][T19693] scsi_strcpy_devinfo: model string '’Dd5‚ ÕK€2bÛ [ 1016.934837][T19693] ††½WÏõ›ú «ú' is too long [ 1018.128143][T19706] random: crng reseeded on system resumption [ 1018.435632][T19713] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2913'. [ 1018.726460][T19713] .^: entered promiscuous mode [ 1019.548881][T19720] FAULT_INJECTION: forcing a failure. [ 1019.548881][T19720] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1019.716445][T19720] CPU: 1 UID: 0 PID: 19720 Comm: syz.5.2915 Not tainted syzkaller #0 PREEMPT(full) [ 1019.716473][T19720] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1019.716483][T19720] Call Trace: [ 1019.716489][T19720] [ 1019.716496][T19720] dump_stack_lvl+0x16c/0x1f0 [ 1019.716523][T19720] should_fail_ex+0x512/0x640 [ 1019.716553][T19720] strncpy_from_user+0x3b/0x2e0 [ 1019.716580][T19720] getname_flags.part.0+0x8f/0x550 [ 1019.716608][T19720] getname_flags+0x93/0xf0 [ 1019.716626][T19720] do_sys_openat2+0xb8/0x1d0 [ 1019.716652][T19720] ? __pfx_do_sys_openat2+0x10/0x10 [ 1019.716684][T19720] __x64_sys_openat+0x174/0x210 [ 1019.716710][T19720] ? __pfx___x64_sys_openat+0x10/0x10 [ 1019.716736][T19720] ? syscall_user_dispatch+0x78/0x140 [ 1019.716759][T19720] do_syscall_64+0xcd/0xfa0 [ 1019.716781][T19720] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1019.716797][T19720] RIP: 0033:0x7fbdbd78f7c9 [ 1019.716811][T19720] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1019.716828][T19720] RSP: 002b:00007fbdbe5dc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1019.716845][T19720] RAX: ffffffffffffffda RBX: 00007fbdbd9e5fa0 RCX: 00007fbdbd78f7c9 [ 1019.716856][T19720] RDX: 000000000004ad03 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 1019.716866][T19720] RBP: 00007fbdbd813f91 R08: 0000000000000000 R09: 0000000000000000 [ 1019.716877][T19720] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1019.716886][T19720] R13: 00007fbdbd9e6038 R14: 00007fbdbd9e5fa0 R15: 00007ffc0496ee28 [ 1019.716908][T19720] [ 1021.202615][T13105] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 1021.585739][T19726] netlink: 334 bytes leftover after parsing attributes in process `syz.5.2917'. [ 1022.333348][T19728] zswap: compressor 000 not available [ 1023.720854][T19746] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1023.795288][T19746] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1023.876816][T19746] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1023.964420][T19746] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1024.039625][T19746] CPU0 is offline. [ 1024.210532][T19740] Process accounting resumed [ 1024.715645][T19760] random: crng reseeded on system resumption [ 1024.980005][T19760] FAULT_INJECTION: forcing a failure. [ 1024.980005][T19760] name failslab, interval 1, probability 0, space 0, times 0 [ 1024.993063][T19760] CPU: 1 UID: 0 PID: 19760 Comm: syz.4.2925 Not tainted syzkaller #0 PREEMPT(full) [ 1024.993088][T19760] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1024.993099][T19760] Call Trace: [ 1024.993106][T19760] [ 1024.993113][T19760] dump_stack_lvl+0x16c/0x1f0 [ 1024.993140][T19760] should_fail_ex+0x512/0x640 [ 1024.993170][T19760] should_failslab+0xc2/0x120 [ 1024.993195][T19760] __kmalloc_cache_noprof+0x72/0x780 [ 1024.993214][T19760] ? tipc_nametbl_insert_publ+0x5a/0x1720 [ 1024.993241][T19760] ? tipc_nametbl_insert_publ+0x5a/0x1720 [ 1024.993265][T19760] tipc_nametbl_insert_publ+0x5a/0x1720 [ 1024.993289][T19760] ? do_raw_spin_lock+0x12c/0x2b0 [ 1024.993316][T19760] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1024.993342][T19760] ? net_generic+0xea/0x2a0 [ 1024.993367][T19760] tipc_nametbl_publish+0x137/0x280 [ 1024.993393][T19760] tipc_sk_publish+0x1d8/0x430 [ 1024.993418][T19760] ? __pfx_tipc_sk_publish+0x10/0x10 [ 1024.993443][T19760] ? __local_bh_enable_ip+0xa4/0x120 [ 1024.993467][T19760] tipc_sk_bind+0x16f/0x380 [ 1024.993492][T19760] tipc_bind+0x190/0x2a0 [ 1024.993517][T19760] __sys_bind+0x1a7/0x260 [ 1024.993542][T19760] ? __pfx___sys_bind+0x10/0x10 [ 1024.993572][T19760] ? xfd_validate_state+0x61/0x180 [ 1024.993602][T19760] __x64_sys_bind+0x72/0xb0 [ 1024.993624][T19760] ? lockdep_hardirqs_on+0x7c/0x110 [ 1024.993644][T19760] do_syscall_64+0xcd/0xfa0 [ 1024.993666][T19760] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1024.993683][T19760] RIP: 0033:0x7f35fcf8f7c9 [ 1024.993697][T19760] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1024.993713][T19760] RSP: 002b:00007f35fdd96038 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 1024.993730][T19760] RAX: ffffffffffffffda RBX: 00007f35fd1e5fa0 RCX: 00007f35fcf8f7c9 [ 1024.993741][T19760] RDX: 0000000000000066 RSI: 0000200000000040 RDI: 0000000000000008 [ 1024.993751][T19760] RBP: 00007f35fd013f91 R08: 0000000000000000 R09: 0000000000000000 [ 1024.993761][T19760] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1024.993771][T19760] R13: 00007f35fd1e6038 R14: 00007f35fd1e5fa0 R15: 00007ffc489e3a78 [ 1024.993792][T19760] [ 1025.523857][T13105] Bluetooth: hci4: command 0x0c1a tx timeout [ 1025.836956][T13105] Bluetooth: hci0: command 0x0c1a tx timeout [ 1025.917923][T13105] Bluetooth: hci1: command 0x0c1a tx timeout [ 1025.994974][T13105] Bluetooth: hci3: command 0x0c1a tx timeout [ 1026.249456][T19783] bond0: no command found in slaves file - use +ifname or -ifname [ 1026.851112][T19786] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2930'. [ 1027.084772][ T30] audit: type=1807 audit(8277292757.180:29): UNKNOWN=0"û]$|Ë1jë0B|d™¹ýÓ‰OŸ¬+ö×/ÉéxÔóÈõWÓ¦–Ó^¸´gq%ḦrêOŽ res=0 [ 1027.238607][ T30] audit: type=1802 audit(8277292757.250:30): pid=19789 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.2.2931" res=0 errno=0 [ 1027.332961][T19793] FAULT_INJECTION: forcing a failure. [ 1027.332961][T19793] name failslab, interval 1, probability 0, space 0, times 0 [ 1027.526090][T19793] CPU: 1 UID: 0 PID: 19793 Comm: syz.5.2932 Not tainted syzkaller #0 PREEMPT(full) [ 1027.526116][T19793] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1027.526127][T19793] Call Trace: [ 1027.526133][T19793] [ 1027.526141][T19793] dump_stack_lvl+0x16c/0x1f0 [ 1027.526168][T19793] should_fail_ex+0x512/0x640 [ 1027.526194][T19793] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 1027.526216][T19793] should_failslab+0xc2/0x120 [ 1027.526240][T19793] kmem_cache_alloc_noprof+0x75/0x6e0 [ 1027.526258][T19793] ? __kernfs_new_node+0xd2/0x8e0 [ 1027.526285][T19793] ? __kernfs_new_node+0xd2/0x8e0 [ 1027.526306][T19793] __kernfs_new_node+0xd2/0x8e0 [ 1027.526330][T19793] ? __pfx___kernfs_new_node+0x10/0x10 [ 1027.526359][T19793] ? find_held_lock+0x2b/0x80 [ 1027.526377][T19793] ? kernfs_root+0xee/0x2a0 [ 1027.526403][T19793] kernfs_new_node+0x13c/0x1e0 [ 1027.526432][T19793] __kernfs_create_file+0x53/0x350 [ 1027.526452][T19793] sysfs_add_file_mode_ns+0x207/0x3c0 [ 1027.526479][T19793] sysfs_merge_group+0x1aa/0x340 [ 1027.526503][T19793] ? __pfx_sysfs_merge_group+0x10/0x10 [ 1027.526529][T19793] ? __pfx_dev_add_physical_location+0x10/0x10 [ 1027.526556][T19793] ? bus_to_subsys+0x131/0x160 [ 1027.526577][T19793] dpm_sysfs_add+0x237/0x280 [ 1027.526605][T19793] device_add+0x9a6/0x1aa0 [ 1027.526633][T19793] ? __pfx_device_add+0x10/0x10 [ 1027.526659][T19793] ? lockdep_init_map_type+0x5c/0x280 [ 1027.526683][T19793] ? __init_waitqueue_head+0xca/0x150 [ 1027.526705][T19793] rfkill_register+0x1ad/0xb40 [ 1027.526725][T19793] nfc_register_device+0x11f/0x3c0 [ 1027.526748][T19793] nci_register_device+0x7f1/0xb80 [ 1027.526766][T19793] ? __pfx_nci_register_device+0x10/0x10 [ 1027.526786][T19793] ? lockdep_init_map_type+0x5c/0x280 [ 1027.526814][T19793] virtual_ncidev_open+0x141/0x220 [ 1027.526834][T19793] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 1027.526852][T19793] misc_open+0x26d/0x450 [ 1027.526878][T19793] ? __pfx_misc_open+0x10/0x10 [ 1027.526903][T19793] chrdev_open+0x234/0x6a0 [ 1027.526923][T19793] ? __pfx_apparmor_file_open+0x10/0x10 [ 1027.526949][T19793] ? __pfx_chrdev_open+0x10/0x10 [ 1027.526971][T19793] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 1027.527001][T19793] do_dentry_open+0x982/0x1530 [ 1027.527022][T19793] ? __pfx_chrdev_open+0x10/0x10 [ 1027.527047][T19793] vfs_open+0x82/0x3f0 [ 1027.527076][T19793] path_openat+0x1de4/0x2cb0 [ 1027.527109][T19793] ? __pfx_path_openat+0x10/0x10 [ 1027.527130][T19793] ? __lock_acquire+0xb8a/0x1c90 [ 1027.527156][T19793] do_filp_open+0x20b/0x470 [ 1027.527177][T19793] ? __pfx_do_filp_open+0x10/0x10 [ 1027.527213][T19793] ? alloc_fd+0x471/0x7d0 [ 1027.527238][T19793] do_sys_openat2+0x11b/0x1d0 [ 1027.527263][T19793] ? __pfx_do_sys_openat2+0x10/0x10 [ 1027.527297][T19793] __x64_sys_openat+0x174/0x210 [ 1027.527323][T19793] ? __pfx___x64_sys_openat+0x10/0x10 [ 1027.527359][T19793] do_syscall_64+0xcd/0xfa0 [ 1027.527382][T19793] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1027.527399][T19793] RIP: 0033:0x7fbdbd78f7c9 [ 1027.527414][T19793] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1027.527430][T19793] RSP: 002b:00007fbdbe5dc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1027.527447][T19793] RAX: ffffffffffffffda RBX: 00007fbdbd9e5fa0 RCX: 00007fbdbd78f7c9 [ 1027.527458][T19793] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 1027.527469][T19793] RBP: 00007fbdbd813f91 R08: 0000000000000000 R09: 0000000000000000 [ 1027.527479][T19793] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1027.527488][T19793] R13: 00007fbdbd9e6038 R14: 00007fbdbd9e5fa0 R15: 00007ffc0496ee28 [ 1027.527512][T19793] [ 1028.426317][T19757] Process accounting paused [ 1031.547003][T19798] ima: policy update failed [ 1031.558137][ T30] audit: type=1802 audit(8277292761.650:31): pid=19798 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.2931" res=0 errno=0 [ 1034.605805][T19838] zswap: compressor 000 not available [ 1035.264888][T19856] FAULT_INJECTION: forcing a failure. [ 1035.264888][T19856] name failslab, interval 1, probability 0, space 0, times 0 [ 1035.425033][T19856] CPU: 1 UID: 0 PID: 19856 Comm: syz.4.2943 Not tainted syzkaller #0 PREEMPT(full) [ 1035.425059][T19856] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1035.425070][T19856] Call Trace: [ 1035.425078][T19856] [ 1035.425086][T19856] dump_stack_lvl+0x16c/0x1f0 [ 1035.425112][T19856] should_fail_ex+0x512/0x640 [ 1035.425138][T19856] ? __kmalloc_noprof+0xca/0x880 [ 1035.425157][T19856] should_failslab+0xc2/0x120 [ 1035.425182][T19856] __kmalloc_noprof+0xdd/0x880 [ 1035.425198][T19856] ? devlink_fmsg_put_value+0xaa/0x2d0 [ 1035.425226][T19856] ? devlink_fmsg_put_value+0xaa/0x2d0 [ 1035.425248][T19856] devlink_fmsg_put_value+0xaa/0x2d0 [ 1035.425274][T19856] devlink_fmsg_string_pair_put+0xc1/0x1b0 [ 1035.425301][T19856] nsim_dev_dummy_fmsg_put+0x77/0x1e0 [ 1035.425329][T19856] devlink_health_do_dump+0x243/0x620 [ 1035.425358][T19856] devlink_health_report+0x6c3/0xb00 [ 1035.425387][T19856] ? __pfx_devlink_health_report+0x10/0x10 [ 1035.425414][T19856] ? _copy_from_user+0x59/0xd0 [ 1035.425444][T19856] nsim_dev_health_break_write+0x166/0x210 [ 1035.425468][T19856] ? __pfx_nsim_dev_health_break_write+0x10/0x10 [ 1035.425499][T19856] full_proxy_write+0x131/0x1a0 [ 1035.425525][T19856] ? __pfx_full_proxy_write+0x10/0x10 [ 1035.425547][T19856] vfs_write+0x2a0/0x11d0 [ 1035.425570][T19856] ? __pfx___mutex_lock+0x10/0x10 [ 1035.425592][T19856] ? __pfx_vfs_write+0x10/0x10 [ 1035.425617][T19856] ? __fget_files+0x20e/0x3c0 [ 1035.425642][T19856] ksys_write+0x12a/0x250 [ 1035.425660][T19856] ? __pfx_ksys_write+0x10/0x10 [ 1035.425686][T19856] do_syscall_64+0xcd/0xfa0 [ 1035.425709][T19856] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1035.425726][T19856] RIP: 0033:0x7f35fcf8f7c9 [ 1035.425740][T19856] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1035.425756][T19856] RSP: 002b:00007f35fdd96038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1035.425773][T19856] RAX: ffffffffffffffda RBX: 00007f35fd1e5fa0 RCX: 00007f35fcf8f7c9 [ 1035.425784][T19856] RDX: 0000000000000006 RSI: 0000200000005900 RDI: 0000000000000009 [ 1035.425794][T19856] RBP: 00007f35fd013f91 R08: 0000000000000000 R09: 0000000000000000 [ 1035.425804][T19856] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1035.425814][T19856] R13: 00007f35fd1e6038 R14: 00007f35fd1e5fa0 R15: 00007ffc489e3a78 [ 1035.425842][T19856] [ 1039.395704][T19880] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 1039.865821][T19878] FAULT_INJECTION: forcing a failure. [ 1039.865821][T19878] name failslab, interval 1, probability 0, space 0, times 0 [ 1040.014814][T19878] CPU: 1 UID: 0 PID: 19878 Comm: syz.4.2951 Not tainted syzkaller #0 PREEMPT(full) [ 1040.014840][T19878] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1040.014851][T19878] Call Trace: [ 1040.014857][T19878] [ 1040.014865][T19878] dump_stack_lvl+0x16c/0x1f0 [ 1040.015059][T19878] should_fail_ex+0x512/0x640 [ 1040.015089][T19878] ? kmem_cache_alloc_node_noprof+0x65/0x770 [ 1040.015112][T19878] should_failslab+0xc2/0x120 [ 1040.015136][T19878] kmem_cache_alloc_node_noprof+0x78/0x770 [ 1040.015155][T19878] ? __alloc_skb+0x2b2/0x380 [ 1040.015187][T19878] ? __alloc_skb+0x2b2/0x380 [ 1040.015232][T19878] __alloc_skb+0x2b2/0x380 [ 1040.015260][T19878] ? __pfx___alloc_skb+0x10/0x10 [ 1040.015291][T19878] ? netlink_has_listeners+0x20f/0x430 [ 1040.015317][T19878] alloc_uevent_skb+0x7d/0x210 [ 1040.015345][T19878] kobject_uevent_env+0xca4/0x1870 [ 1040.015374][T19878] ? queue_work_on+0x12a/0x1f0 [ 1040.015389][T19878] ? bus_to_subsys+0x131/0x160 [ 1040.015410][T19878] driver_bound+0x164/0x230 [ 1040.015434][T19878] device_bind_driver+0x3a/0x70 [ 1040.015456][T19878] mac80211_hwsim_new_radio+0x3e8/0x50b0 [ 1040.015486][T19878] ? __asan_memset+0x23/0x50 [ 1040.015504][T19878] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 1040.015530][T19878] hwsim_new_radio_nl+0xba2/0x1330 [ 1040.015550][T19878] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1040.015576][T19878] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 1040.015599][T19878] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 1040.015625][T19878] genl_family_rcv_msg_doit+0x209/0x2f0 [ 1040.015649][T19878] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1040.015678][T19878] ? bpf_lsm_capable+0x9/0x10 [ 1040.015701][T19878] ? security_capable+0x7e/0x260 [ 1040.015726][T19878] ? ns_capable+0xd7/0x110 [ 1040.015747][T19878] genl_rcv_msg+0x55c/0x800 [ 1040.015771][T19878] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1040.015793][T19878] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1040.015819][T19878] netlink_rcv_skb+0x158/0x420 [ 1040.015837][T19878] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1040.015860][T19878] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1040.015887][T19878] ? netlink_deliver_tap+0x1ae/0xd30 [ 1040.015908][T19878] genl_rcv+0x28/0x40 [ 1040.015926][T19878] netlink_unicast+0x5aa/0x870 [ 1040.015952][T19878] ? __pfx_netlink_unicast+0x10/0x10 [ 1040.015979][T19878] netlink_sendmsg+0x8c8/0xdd0 [ 1040.016001][T19878] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1040.016023][T19878] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 1040.016053][T19878] ____sys_sendmsg+0xa98/0xc70 [ 1040.016075][T19878] ? copy_msghdr_from_user+0x10a/0x160 [ 1040.016093][T19878] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1040.016120][T19878] ? __pfx_futex_wake_mark+0x10/0x10 [ 1040.016150][T19878] ___sys_sendmsg+0x134/0x1d0 [ 1040.016168][T19878] ? __pfx____sys_sendmsg+0x10/0x10 [ 1040.016198][T19878] ? __lock_acquire+0x622/0x1c90 [ 1040.016251][T19878] __sys_sendmsg+0x16d/0x220 [ 1040.016269][T19878] ? __pfx___sys_sendmsg+0x10/0x10 [ 1040.016287][T19878] ? __x64_sys_futex+0x1e0/0x4c0 [ 1040.016325][T19878] do_syscall_64+0xcd/0xfa0 [ 1040.016349][T19878] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1040.016367][T19878] RIP: 0033:0x7f35fcf8f7c9 [ 1040.016384][T19878] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1040.016401][T19878] RSP: 002b:00007f35fdd96038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1040.016419][T19878] RAX: ffffffffffffffda RBX: 00007f35fd1e5fa0 RCX: 00007f35fcf8f7c9 [ 1040.016431][T19878] RDX: 0000000000008000 RSI: 0000200000000200 RDI: 0000000000000008 [ 1040.016443][T19878] RBP: 00007f35fd013f91 R08: 0000000000000000 R09: 0000000000000000 [ 1040.016454][T19878] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1040.016464][T19878] R13: 00007f35fd1e6038 R14: 00007f35fd1e5fa0 R15: 00007ffc489e3a78 [ 1040.016488][T19878] [ 1040.914765][T19880] CIFS mount error: No usable UNC path provided in device string! [ 1040.914765][T19880] [ 1041.185324][T19880] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1045.011335][T19889] Process accounting paused [ 1045.609363][T19903] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(16) [ 1049.886116][T19941] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2966'. [ 1050.124888][T19936] block nbd7: not configured, cannot reconfigure [ 1050.170979][T19941] vlan1: entered promiscuous mode [ 1050.476003][T19941] vlan1: entered allmulticast mode [ 1050.481157][T19941] veth0_vlan: entered allmulticast mode [ 1053.093425][T13156] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1053.114973][T13156] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1053.125418][T13156] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1053.154972][T13156] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1053.162554][T13156] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1055.276556][T13105] Bluetooth: hci5: command tx timeout [ 1055.552532][T19956] chnl_net:caif_netlink_parms(): no params data found [ 1056.071260][T19976] netlink: 25 bytes leftover after parsing attributes in process `syz.2.2975'. [ 1057.356453][T13105] Bluetooth: hci5: command tx timeout [ 1057.637056][T19956] bridge0: port 1(bridge_slave_0) entered blocking state [ 1057.672101][T19956] bridge0: port 1(bridge_slave_0) entered disabled state [ 1057.778201][T19956] bridge_slave_0: entered allmulticast mode [ 1057.868938][T19956] bridge_slave_0: entered promiscuous mode [ 1058.036373][T19956] bridge0: port 2(bridge_slave_1) entered blocking state [ 1058.135089][T19956] bridge0: port 2(bridge_slave_1) entered disabled state [ 1058.207476][T19956] bridge_slave_1: entered allmulticast mode [ 1058.323994][T19956] bridge_slave_1: entered promiscuous mode [ 1058.627001][T19956] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1058.707132][T19959] Process accounting resumed [ 1058.865622][T19988] netlink: 342 bytes leftover after parsing attributes in process `syz.6.2977'. [ 1058.963273][T19956] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1059.396068][T19956] team0: Port device team_slave_0 added [ 1059.436594][T13105] Bluetooth: hci5: command tx timeout [ 1059.496393][T19956] team0: Port device team_slave_1 added [ 1059.679768][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1059.686628][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1060.266742][T20004] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(8.0.1), cmd(2) [ 1060.357162][T19956] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1060.364253][T19956] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1060.507784][T20004] zswap: compressor ‹?:ÃÚ·ëNr%qƒ' e£²ï€èáÏWmÈŸÏ6§æœø$W›’^öÒb)Dƒ [ 1060.507784][T20004] áúF÷*?­‘7î[§øèêtý“¸‹¤×úxŸ Eÿý1RF¸ÄhÆ"â¶Q¥±XãÆQÒx¯Y•ø’>þêš{v–p#x0’Îä'ŒÐýæ not available [ 1060.764861][T19956] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1061.516235][T13105] Bluetooth: hci5: command tx timeout [ 1061.532339][T19956] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1061.634927][T19956] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1061.944920][T19956] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1062.716625][T19956] hsr_slave_0: entered promiscuous mode [ 1062.795646][T19956] hsr_slave_1: entered promiscuous mode [ 1062.801786][T19956] debugfs: 'hsr0' already exists in 'hsr' [ 1062.960905][T19956] Cannot create hsr debugfs directory [ 1066.402718][T19956] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1066.631363][T19956] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1066.775131][T19956] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1067.024901][T20023] mkiss: ax0: crc mode is auto. [ 1067.219957][T19956] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1067.255894][T20023] kAFS: Invalid Command on /proc/fs/afs/cells file [ 1067.335964][T20023] queue_state_write: operation too long [ 1067.341647][T20023] queue_state_write: use 'run', 'start' or 'kick' [ 1068.717873][T19956] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1068.874619][T19956] 8021q: adding VLAN 0 to HW filter on device team0 [ 1069.139923][T18292] bridge0: port 1(bridge_slave_0) entered blocking state [ 1069.147352][T18292] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1069.348593][T18292] bridge0: port 2(bridge_slave_1) entered blocking state [ 1069.355777][T18292] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1069.642201][T19956] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1069.844896][T19956] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1071.330393][T20060] FAULT_INJECTION: forcing a failure. [ 1071.330393][T20060] name failslab, interval 1, probability 0, space 0, times 0 [ 1071.537539][T19956] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1071.774204][T20060] CPU: 1 UID: 0 PID: 20060 Comm: syz.4.2992 Not tainted syzkaller #0 PREEMPT(full) [ 1071.774232][T20060] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1071.774242][T20060] Call Trace: [ 1071.774249][T20060] [ 1071.774256][T20060] dump_stack_lvl+0x16c/0x1f0 [ 1071.774283][T20060] should_fail_ex+0x512/0x640 [ 1071.774309][T20060] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 1071.774330][T20060] should_failslab+0xc2/0x120 [ 1071.774355][T20060] kmem_cache_alloc_noprof+0x75/0x6e0 [ 1071.774373][T20060] ? alloc_empty_file+0x55/0x1e0 [ 1071.774402][T20060] ? alloc_empty_file+0x55/0x1e0 [ 1071.774424][T20060] alloc_empty_file+0x55/0x1e0 [ 1071.774449][T20060] alloc_file_pseudo+0x13a/0x230 [ 1071.774476][T20060] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 1071.774501][T20060] ? alloc_fd+0x471/0x7d0 [ 1071.774523][T20060] sock_alloc_file+0x50/0x210 [ 1071.774543][T20060] __sys_socket+0x1c0/0x260 [ 1071.774567][T20060] ? __pfx___sys_socket+0x10/0x10 [ 1071.774590][T20060] ? xfd_validate_state+0x61/0x180 [ 1071.774614][T20060] ? __pfx_ksys_write+0x10/0x10 [ 1071.774657][T20060] __x64_sys_socket+0x72/0xb0 [ 1071.774686][T20060] ? lockdep_hardirqs_on+0x7c/0x110 [ 1071.774707][T20060] do_syscall_64+0xcd/0xfa0 [ 1071.774730][T20060] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1071.774747][T20060] RIP: 0033:0x7f35fcf8f7c9 [ 1071.774762][T20060] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1071.774779][T20060] RSP: 002b:00007f35fdd54038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1071.774797][T20060] RAX: ffffffffffffffda RBX: 00007f35fd1e6180 RCX: 00007f35fcf8f7c9 [ 1071.774808][T20060] RDX: 000000000000003a RSI: 0000000000000002 RDI: 000000000000000a [ 1071.774818][T20060] RBP: 00007f35fd013f91 R08: 0000000000000000 R09: 0000000000000000 [ 1071.774829][T20060] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1071.774839][T20060] R13: 00007f35fd1e6218 R14: 00007f35fd1e6180 R15: 00007ffc489e3a78 [ 1071.774862][T20060] [ 1074.528335][T19956] veth0_vlan: entered promiscuous mode [ 1074.568033][T20079] binder: 20077:20079 ioctl 400c620e 0 returned -22 [ 1074.878271][T19956] veth1_vlan: entered promiscuous mode [ 1075.246437][T19956] veth0_macvtap: entered promiscuous mode [ 1075.386675][T19956] veth1_macvtap: entered promiscuous mode [ 1075.552268][T19956] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1075.747226][T19956] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1076.597239][T13138] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1076.686562][T13138] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1076.990620][T13138] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1077.104791][T13138] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1077.856717][T20084] Process accounting resumed [ 1077.915754][T13092] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1077.923597][T13092] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1078.616177][T20104] random: crng reseeded on system resumption [ 1078.977792][T18290] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1079.085010][T18290] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1079.363011][T20102] FAULT_INJECTION: forcing a failure. [ 1079.363011][T20102] name failslab, interval 1, probability 0, space 0, times 0 [ 1079.497320][T20102] CPU: 1 UID: 0 PID: 20102 Comm: syz.2.2998 Not tainted syzkaller #0 PREEMPT(full) [ 1079.497346][T20102] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1079.497357][T20102] Call Trace: [ 1079.497363][T20102] [ 1079.497371][T20102] dump_stack_lvl+0x16c/0x1f0 [ 1079.497397][T20102] should_fail_ex+0x512/0x640 [ 1079.497423][T20102] ? kmem_cache_alloc_node_noprof+0x65/0x770 [ 1079.497446][T20102] should_failslab+0xc2/0x120 [ 1079.497470][T20102] kmem_cache_alloc_node_noprof+0x78/0x770 [ 1079.497488][T20102] ? __alloc_skb+0x2b2/0x380 [ 1079.497520][T20102] ? __alloc_skb+0x2b2/0x380 [ 1079.497544][T20102] ? add_uevent_var+0x286/0x3a0 [ 1079.497566][T20102] __alloc_skb+0x2b2/0x380 [ 1079.497592][T20102] ? __pfx___alloc_skb+0x10/0x10 [ 1079.497617][T20102] ? __pfx_add_uevent_var+0x10/0x10 [ 1079.497645][T20102] ? __asan_memcpy+0x3c/0x60 [ 1079.497665][T20102] alloc_uevent_skb+0x7d/0x210 [ 1079.497697][T20102] ? __pfx_device_namespace+0x10/0x10 [ 1079.497724][T20102] kobject_uevent_env+0x11cc/0x1870 [ 1079.497754][T20102] ? bus_to_subsys+0x131/0x160 [ 1079.497775][T20102] device_add+0x10dd/0x1aa0 [ 1079.497804][T20102] ? __pfx_device_add+0x10/0x10 [ 1079.497831][T20102] ? lockdep_init_map_type+0x5c/0x280 [ 1079.497857][T20102] ? __init_waitqueue_head+0xca/0x150 [ 1079.497878][T20102] netdev_register_kobject+0x1a9/0x3d0 [ 1079.497903][T20102] register_netdevice+0x13dc/0x2270 [ 1079.497928][T20102] ? __pfx_register_netdevice+0x10/0x10 [ 1079.497954][T20102] __ip_tunnel_create+0x540/0x6e0 [ 1079.497977][T20102] ? __pfx___ip_tunnel_create+0x10/0x10 [ 1079.498005][T20102] ip_tunnel_init_net+0x22f/0x7d0 [ 1079.498030][T20102] ? __pfx_ip_tunnel_init_net+0x10/0x10 [ 1079.498057][T20102] ? ops_init+0x77/0x5f0 [ 1079.498077][T20102] ? __pfx_erspan_init_net+0x10/0x10 [ 1079.498094][T20102] ops_init+0x1e2/0x5f0 [ 1079.498114][T20102] setup_net+0x100/0x390 [ 1079.498132][T20102] ? __pfx_setup_net+0x10/0x10 [ 1079.498151][T20102] ? debug_mutex_init+0x37/0x70 [ 1079.498171][T20102] copy_net_ns+0x2f8/0x690 [ 1079.498194][T20102] create_new_namespaces+0x3ea/0xa90 [ 1079.498219][T20102] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 1079.498240][T20102] ksys_unshare+0x45b/0xa40 [ 1079.498264][T20102] ? __pfx_ksys_unshare+0x10/0x10 [ 1079.498287][T20102] ? xfd_validate_state+0x61/0x180 [ 1079.498318][T20102] __x64_sys_unshare+0x31/0x40 [ 1079.498341][T20102] do_syscall_64+0xcd/0xfa0 [ 1079.498363][T20102] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1079.498380][T20102] RIP: 0033:0x7f2600b8f7c9 [ 1079.498395][T20102] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1079.498411][T20102] RSP: 002b:00007f2601a5f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1079.498434][T20102] RAX: ffffffffffffffda RBX: 00007f2600de5fa0 RCX: 00007f2600b8f7c9 [ 1079.498448][T20102] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 1079.498458][T20102] RBP: 00007f2600c13f91 R08: 0000000000000000 R09: 0000000000000000 [ 1079.498469][T20102] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1079.498479][T20102] R13: 00007f2600de6038 R14: 00007f2600de5fa0 R15: 00007ffe156c1088 [ 1079.498501][T20102] [ 1082.786660][T20124] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3003'. [ 1083.095027][T20132] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3004'. [ 1083.725434][T20129] HfR: entered promiscuous mode [ 1083.875158][T20132] HfR: left promiscuous mode [ 1084.657144][T20140] input: jJǸ-¶š9ã%vø“û¨lÐQ  J86Ö‘ as /devices/virtual/input/input80 [ 1086.050054][T20148] usbcore.quirks: string doesn't fit in 127 chars. [ 1086.538101][T20152] netlink: 334 bytes leftover after parsing attributes in process `syz.4.3011'. [ 1087.160778][T20164] FAULT_INJECTION: forcing a failure. [ 1087.160778][T20164] name failslab, interval 1, probability 0, space 0, times 0 [ 1087.323099][T20164] CPU: 1 UID: 0 PID: 20164 Comm: syz.4.3015 Not tainted syzkaller #0 PREEMPT(full) [ 1087.323126][T20164] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1087.323136][T20164] Call Trace: [ 1087.323142][T20164] [ 1087.323149][T20164] dump_stack_lvl+0x16c/0x1f0 [ 1087.323176][T20164] should_fail_ex+0x512/0x640 [ 1087.323203][T20164] ? kmem_cache_alloc_lru_noprof+0x66/0x6e0 [ 1087.323225][T20164] should_failslab+0xc2/0x120 [ 1087.323250][T20164] kmem_cache_alloc_lru_noprof+0x79/0x6e0 [ 1087.323269][T20164] ? shmem_alloc_inode+0x25/0x50 [ 1087.323295][T20164] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 1087.323316][T20164] ? shmem_alloc_inode+0x25/0x50 [ 1087.323337][T20164] shmem_alloc_inode+0x25/0x50 [ 1087.323359][T20164] alloc_inode+0x64/0x240 [ 1087.323383][T20164] new_inode+0x22/0x1c0 [ 1087.323405][T20164] ? trace_cap_capable+0x18d/0x200 [ 1087.323432][T20164] shmem_get_inode+0x19a/0xfb0 [ 1087.323457][T20164] ? __vm_enough_memory+0x184/0x3f0 [ 1087.323482][T20164] __shmem_file_setup+0x279/0x330 [ 1087.323511][T20164] shmem_zero_setup+0x93/0x1a0 [ 1087.323539][T20164] __mmap_region+0x2076/0x27a0 [ 1087.323560][T20164] ? __pfx___mmap_region+0x10/0x10 [ 1087.323583][T20164] ? finish_task_switch.isra.0+0x21c/0xc10 [ 1087.323604][T20164] ? rcu_is_watching+0x12/0xc0 [ 1087.323622][T20164] ? finish_task_switch.isra.0+0x221/0xc10 [ 1087.323639][T20164] ? lockdep_hardirqs_on+0x7c/0x110 [ 1087.323663][T20164] ? finish_task_switch.isra.0+0x221/0xc10 [ 1087.323702][T20164] ? __pfx___schedule+0x10/0x10 [ 1087.323747][T20164] ? trace_cap_capable+0x18d/0x200 [ 1087.323778][T20164] mmap_region+0x1ab/0x3f0 [ 1087.323796][T20164] ? __get_unmapped_area+0x267/0x440 [ 1087.323821][T20164] do_mmap+0xa3e/0x1210 [ 1087.323848][T20164] ? __pfx_do_mmap+0x10/0x10 [ 1087.323871][T20164] ? __pfx_down_write_killable+0x10/0x10 [ 1087.323900][T20164] vm_mmap_pgoff+0x29e/0x470 [ 1087.323926][T20164] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 1087.323949][T20164] ? __pfx_get_nodes+0x10/0x10 [ 1087.323973][T20164] ? __x64_sys_futex+0x1e0/0x4c0 [ 1087.323996][T20164] ? __x64_sys_futex+0x1e9/0x4c0 [ 1087.324023][T20164] ksys_mmap_pgoff+0x7d/0x5c0 [ 1087.324044][T20164] ? xfd_validate_state+0x61/0x180 [ 1087.324068][T20164] ? __pfx_kernel_mbind+0x10/0x10 [ 1087.324102][T20164] __x64_sys_mmap+0x125/0x190 [ 1087.324131][T20164] do_syscall_64+0xcd/0xfa0 [ 1087.324154][T20164] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1087.324171][T20164] RIP: 0033:0x7f35fcf8f7c9 [ 1087.324186][T20164] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1087.324203][T20164] RSP: 002b:00007f35fdd75038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1087.324221][T20164] RAX: ffffffffffffffda RBX: 00007f35fd1e6090 RCX: 00007f35fcf8f7c9 [ 1087.324232][T20164] RDX: 00004000000000df RSI: 0000000000020009 RDI: 0000000000000000 [ 1087.324243][T20164] RBP: 00007f35fd013f91 R08: 0000000000000401 R09: 0000000000008000 [ 1087.324254][T20164] R10: 0000000000000eb1 R11: 0000000000000246 R12: 0000000000000000 [ 1087.324264][T20164] R13: 00007f35fd1e6128 R14: 00007f35fd1e6090 R15: 00007ffc489e3a78 [ 1087.324287][T20164] [ 1089.101561][T20180] Process accounting paused [ 1090.265939][T20202] FAULT_INJECTION: forcing a failure. [ 1090.265939][T20202] name failslab, interval 1, probability 0, space 0, times 0 [ 1090.683447][T20202] CPU: 1 UID: 0 PID: 20202 Comm: syz.4.3024 Not tainted syzkaller #0 PREEMPT(full) [ 1090.683472][T20202] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1090.683482][T20202] Call Trace: [ 1090.683489][T20202] [ 1090.683496][T20202] dump_stack_lvl+0x16c/0x1f0 [ 1090.683523][T20202] should_fail_ex+0x512/0x640 [ 1090.683557][T20202] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 1090.683578][T20202] should_failslab+0xc2/0x120 [ 1090.683602][T20202] kmem_cache_alloc_noprof+0x75/0x6e0 [ 1090.683620][T20202] ? __kernfs_new_node+0xd2/0x8e0 [ 1090.683646][T20202] ? __kernfs_new_node+0xd2/0x8e0 [ 1090.683667][T20202] __kernfs_new_node+0xd2/0x8e0 [ 1090.683693][T20202] ? __pfx___kernfs_new_node+0x10/0x10 [ 1090.683722][T20202] ? find_held_lock+0x2b/0x80 [ 1090.683740][T20202] ? kernfs_root+0xee/0x2a0 [ 1090.683767][T20202] kernfs_new_node+0x13c/0x1e0 [ 1090.683796][T20202] __kernfs_create_file+0x53/0x350 [ 1090.683817][T20202] sysfs_add_file_mode_ns+0x207/0x3c0 [ 1090.683843][T20202] internal_create_group+0x578/0xf30 [ 1090.683872][T20202] ? __pfx_internal_create_group+0x10/0x10 [ 1090.683899][T20202] ? kernfs_create_link+0x1bd/0x240 [ 1090.683920][T20202] internal_create_groups+0x9d/0x150 [ 1090.683944][T20202] device_add+0x6d1/0x1aa0 [ 1090.683974][T20202] ? __pfx_device_add+0x10/0x10 [ 1090.683999][T20202] ? lockdep_init_map_type+0x5c/0x280 [ 1090.684024][T20202] ? __init_waitqueue_head+0xca/0x150 [ 1090.684046][T20202] rfkill_register+0x1ad/0xb40 [ 1090.684065][T20202] nfc_register_device+0x11f/0x3c0 [ 1090.684094][T20202] nci_register_device+0x7f1/0xb80 [ 1090.684113][T20202] ? __pfx_nci_register_device+0x10/0x10 [ 1090.684133][T20202] ? lockdep_init_map_type+0x5c/0x280 [ 1090.684161][T20202] virtual_ncidev_open+0x141/0x220 [ 1090.684181][T20202] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 1090.684199][T20202] misc_open+0x26d/0x450 [ 1090.684225][T20202] ? __pfx_misc_open+0x10/0x10 [ 1090.684250][T20202] chrdev_open+0x234/0x6a0 [ 1090.684270][T20202] ? __pfx_apparmor_file_open+0x10/0x10 [ 1090.684296][T20202] ? __pfx_chrdev_open+0x10/0x10 [ 1090.684318][T20202] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 1090.684341][T20202] do_dentry_open+0x982/0x1530 [ 1090.684362][T20202] ? __pfx_chrdev_open+0x10/0x10 [ 1090.684387][T20202] vfs_open+0x82/0x3f0 [ 1090.684414][T20202] path_openat+0x1de4/0x2cb0 [ 1090.684441][T20202] ? __pfx_path_openat+0x10/0x10 [ 1090.684462][T20202] ? __lock_acquire+0xb8a/0x1c90 [ 1090.684487][T20202] do_filp_open+0x20b/0x470 [ 1090.684506][T20202] ? __pfx_do_filp_open+0x10/0x10 [ 1090.684543][T20202] ? alloc_fd+0x471/0x7d0 [ 1090.684573][T20202] do_sys_openat2+0x11b/0x1d0 [ 1090.684598][T20202] ? __pfx_do_sys_openat2+0x10/0x10 [ 1090.684632][T20202] __x64_sys_openat+0x174/0x210 [ 1090.684658][T20202] ? __pfx___x64_sys_openat+0x10/0x10 [ 1090.684694][T20202] do_syscall_64+0xcd/0xfa0 [ 1090.684717][T20202] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1090.684736][T20202] RIP: 0033:0x7f35fcf8f7c9 [ 1090.684750][T20202] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1090.684767][T20202] RSP: 002b:00007f35fdd96038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1090.684784][T20202] RAX: ffffffffffffffda RBX: 00007f35fd1e5fa0 RCX: 00007f35fcf8f7c9 [ 1090.684795][T20202] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 1090.684806][T20202] RBP: 00007f35fd013f91 R08: 0000000000000000 R09: 0000000000000000 [ 1090.684819][T20202] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1090.684831][T20202] R13: 00007f35fd1e6038 R14: 00007f35fd1e5fa0 R15: 00007ffc489e3a78 [ 1090.684855][T20202] [ 1096.215259][T13105] Bluetooth: hci2: ISO packet for unknown connection handle 0 [ 1096.667572][T20245] kAFS: unparsable volume name [ 1098.959363][T20269] netlink: 334 bytes leftover after parsing attributes in process `syz.7.3038'. [ 1099.204855][T20263] netlink: 268 bytes leftover after parsing attributes in process `syz.7.3038'. [ 1099.213919][T20263] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 1101.141377][T20291] FAULT_INJECTION: forcing a failure. [ 1101.141377][T20291] name failslab, interval 1, probability 0, space 0, times 0 [ 1101.318764][T20291] CPU: 1 UID: 0 PID: 20291 Comm: syz.7.3045 Not tainted syzkaller #0 PREEMPT(full) [ 1101.318796][T20291] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1101.318807][T20291] Call Trace: [ 1101.318814][T20291] [ 1101.318821][T20291] dump_stack_lvl+0x16c/0x1f0 [ 1101.318848][T20291] should_fail_ex+0x512/0x640 [ 1101.318875][T20291] ? kmem_cache_alloc_node_noprof+0x65/0x770 [ 1101.318897][T20291] should_failslab+0xc2/0x120 [ 1101.318921][T20291] kmem_cache_alloc_node_noprof+0x78/0x770 [ 1101.318938][T20291] ? __alloc_skb+0x2b2/0x380 [ 1101.318969][T20291] ? __alloc_skb+0x2b2/0x380 [ 1101.318994][T20291] __alloc_skb+0x2b2/0x380 [ 1101.319020][T20291] ? __pfx___alloc_skb+0x10/0x10 [ 1101.319051][T20291] ? idr_get_next+0xec/0x150 [ 1101.319069][T20291] ? __pfx_idr_get_next+0x10/0x10 [ 1101.319091][T20291] ctrl_build_family_msg+0x36/0xa0 [ 1101.319116][T20291] ctrl_getfamily+0x354/0x540 [ 1101.319138][T20291] ? __pfx_ctrl_getfamily+0x10/0x10 [ 1101.319161][T20291] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 1101.319183][T20291] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 1101.319211][T20291] genl_family_rcv_msg_doit+0x209/0x2f0 [ 1101.319234][T20291] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1101.319256][T20291] ? genl_get_cmd+0x194/0x580 [ 1101.319283][T20291] ? __radix_tree_lookup+0x21f/0x2c0 [ 1101.319305][T20291] genl_rcv_msg+0x55c/0x800 [ 1101.319330][T20291] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1101.319351][T20291] ? __pfx_ctrl_getfamily+0x10/0x10 [ 1101.319382][T20291] netlink_rcv_skb+0x158/0x420 [ 1101.319400][T20291] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1101.319423][T20291] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1101.319451][T20291] ? netlink_deliver_tap+0x1ae/0xd30 [ 1101.319479][T20291] genl_rcv+0x28/0x40 [ 1101.319498][T20291] netlink_unicast+0x5aa/0x870 [ 1101.319519][T20291] ? __pfx_netlink_unicast+0x10/0x10 [ 1101.319547][T20291] netlink_sendmsg+0x8c8/0xdd0 [ 1101.319569][T20291] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1101.319591][T20291] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 1101.319621][T20291] __sys_sendto+0x4a3/0x520 [ 1101.319648][T20291] ? __pfx___sys_sendto+0x10/0x10 [ 1101.319683][T20291] ? fd_install+0x225/0x750 [ 1101.319712][T20291] ? xfd_validate_state+0x61/0x180 [ 1101.319741][T20291] __x64_sys_sendto+0xe0/0x1c0 [ 1101.319766][T20291] ? do_syscall_64+0x91/0xfa0 [ 1101.319786][T20291] ? lockdep_hardirqs_on+0x7c/0x110 [ 1101.319807][T20291] do_syscall_64+0xcd/0xfa0 [ 1101.319829][T20291] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1101.319846][T20291] RIP: 0033:0x7ff6b359165c [ 1101.319860][T20291] Code: 2a 5f 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5f 02 00 48 8b [ 1101.319877][T20291] RSP: 002b:00007ff6b43f5ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 1101.319895][T20291] RAX: ffffffffffffffda RBX: 00007ff6b43f5fc0 RCX: 00007ff6b359165c [ 1101.319906][T20291] RDX: 0000000000000020 RSI: 00007ff6b43f6010 RDI: 0000000000000008 [ 1101.319916][T20291] RBP: 0000000000000000 R08: 00007ff6b43f5f14 R09: 000000000000000c [ 1101.319927][T20291] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000008 [ 1101.319937][T20291] R13: 00007ff6b43f5f68 R14: 00007ff6b43f6010 R15: 0000000000000000 [ 1101.319960][T20291] [ 1101.639296][ C1] vkms_vblank_simulate: vblank timer overrun [ 1102.006064][T20294] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3045'. [ 1102.198616][T20294] bridge0: port 2(bridge_slave_1) entered disabled state [ 1102.718409][T20294] bridge_slave_1 (unregistering): left allmulticast mode [ 1102.814949][T20294] bridge_slave_1 (unregistering): left promiscuous mode [ 1102.905291][T20294] bridge0: port 2(bridge_slave_1) entered disabled state [ 1104.832968][T20315] zswap: compressor not available [ 1108.445675][T20313] Process accounting paused [ 1112.012896][T20385] zswap: compressor not available [ 1115.925393][T13105] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 1115.977586][T20439] FAULT_INJECTION: forcing a failure. [ 1115.977586][T20439] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1116.109929][T20439] CPU: 1 UID: 0 PID: 20439 Comm: syz.4.3079 Not tainted syzkaller #0 PREEMPT(full) [ 1116.109955][T20439] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1116.109965][T20439] Call Trace: [ 1116.109972][T20439] [ 1116.109979][T20439] dump_stack_lvl+0x16c/0x1f0 [ 1116.110005][T20439] should_fail_ex+0x512/0x640 [ 1116.110035][T20439] get_futex_key+0x1d0/0x1560 [ 1116.110061][T20439] ? __pfx_get_futex_key+0x10/0x10 [ 1116.110084][T20439] ? __pfx___schedule+0x10/0x10 [ 1116.110102][T20439] ? do_raw_spin_unlock+0x172/0x230 [ 1116.110123][T20439] futex_wait_setup+0x9d/0x550 [ 1116.110146][T20439] __futex_wait+0x193/0x2f0 [ 1116.110162][T20439] ? __pfx___futex_wait+0x10/0x10 [ 1116.110182][T20439] ? __pfx_futex_wake_mark+0x10/0x10 [ 1116.110211][T20439] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 1116.110237][T20439] ? __hrtimer_setup+0x176/0x280 [ 1116.110264][T20439] ? ktime_add_safe+0x60/0x70 [ 1116.110292][T20439] futex_wait+0xe8/0x380 [ 1116.110307][T20439] ? __pfx_futex_wait+0x10/0x10 [ 1116.110322][T20439] ? __lock_acquire+0xb8a/0x1c90 [ 1116.110357][T20439] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 1116.110392][T20439] do_futex+0x229/0x350 [ 1116.110416][T20439] ? __pfx_do_futex+0x10/0x10 [ 1116.110437][T20439] ? rcu_is_watching+0x12/0xc0 [ 1116.110455][T20439] ? ktime_get+0x200/0x310 [ 1116.110475][T20439] ? lockdep_hardirqs_on+0x7c/0x110 [ 1116.110496][T20439] ? read_tsc+0x9/0x20 [ 1116.110519][T20439] __x64_sys_futex+0x1e0/0x4c0 [ 1116.110546][T20439] ? __pfx___x64_sys_futex+0x10/0x10 [ 1116.110570][T20439] ? xfd_validate_state+0x61/0x180 [ 1116.110601][T20439] do_syscall_64+0xcd/0xfa0 [ 1116.110624][T20439] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1116.110641][T20439] RIP: 0033:0x7f35fcf8f7c9 [ 1116.110656][T20439] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1116.110673][T20439] RSP: 002b:00007ffc489e3bd8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1116.110694][T20439] RAX: ffffffffffffffda RBX: 000000000011071c RCX: 00007f35fcf8f7c9 [ 1116.110706][T20439] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f35fd1e5fac [ 1116.110717][T20439] RBP: 0000000000000032 R08: 00007f35fdd97000 R09: 00000011489e3ecf [ 1116.110727][T20439] R10: 00007ffc489e3cd0 R11: 0000000000000246 R12: 00007f35fd1e5fac [ 1116.110738][T20439] R13: 00007ffc489e3cd0 R14: 000000000011074e R15: 00007ffc489e3cf0 [ 1116.110761][T20439] [ 1116.350863][ C1] vkms_vblank_simulate: vblank timer overrun [ 1118.046385][T13105] Bluetooth: hci3: command 0x0c1a tx timeout [ 1120.995706][T20451] Process accounting resumed [ 1121.139375][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1121.155916][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1121.646453][T20474] Invalid ELF header magic: != ELF [ 1123.631480][T20487] zswap: compressor not available [ 1124.694983][T20498] sd 0:0:1:0: PR command failed: 1026 [ 1124.700502][T20498] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 1124.845267][T20498] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 1124.889207][T20500] ima: policy update failed [ 1124.893856][ T30] audit: type=1802 audit(8277292854.990:32): pid=20500 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.7.3094" res=0 errno=0 [ 1126.523796][T20517] netlink: 'syz.7.3100': attribute type 1 has an invalid length. [ 1126.646271][T20517] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1127.739765][T20533] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3104'. [ 1127.908982][T20538] netlink: 354 bytes leftover after parsing attributes in process `syz.6.3104'. [ 1128.226365][T20542] FAULT_INJECTION: forcing a failure. [ 1128.226365][T20542] name failslab, interval 1, probability 0, space 0, times 0 [ 1128.584984][T20542] CPU: 1 UID: 0 PID: 20542 Comm: syz.2.3105 Not tainted syzkaller #0 PREEMPT(full) [ 1128.585011][T20542] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1128.585022][T20542] Call Trace: [ 1128.585028][T20542] [ 1128.585036][T20542] dump_stack_lvl+0x16c/0x1f0 [ 1128.585062][T20542] should_fail_ex+0x512/0x640 [ 1128.585089][T20542] ? __kmalloc_noprof+0xca/0x880 [ 1128.585108][T20542] should_failslab+0xc2/0x120 [ 1128.585133][T20542] __kmalloc_noprof+0xdd/0x880 [ 1128.585148][T20542] ? __asan_memcpy+0x3c/0x60 [ 1128.585163][T20542] ? handler_new_ref+0x1b0/0xc60 [ 1128.585190][T20542] ? handler_new_ref+0x1b0/0xc60 [ 1128.585211][T20542] handler_new_ref+0x1b0/0xc60 [ 1128.585238][T20542] v4l2_ctrl_new+0x196c/0x2190 [ 1128.585277][T20542] ? __pfx_v4l2_ctrl_new+0x10/0x10 [ 1128.585298][T20542] ? __pfx_v4l2_ctrl_new+0x10/0x10 [ 1128.585326][T20542] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1128.585361][T20542] v4l2_ctrl_new_std+0x1be/0x290 [ 1128.585391][T20542] ? __pfx_v4l2_ctrl_new_std+0x10/0x10 [ 1128.585413][T20542] ? __pfx_v4l2_ctrl_new_std+0x10/0x10 [ 1128.585439][T20542] ? trace_kmalloc+0x2b/0xd0 [ 1128.585463][T20542] ? v4l2_ctrl_handler_init_class+0x201/0x350 [ 1128.585489][T20542] ? media_request_object_init+0x100/0x180 [ 1128.585510][T20542] vicodec_open+0x1d9/0xf70 [ 1128.585528][T20542] ? kobject_get_unless_zero+0x156/0x1e0 [ 1128.585554][T20542] v4l2_open+0x1d2/0x5e0 [ 1128.585574][T20542] ? __pfx_v4l2_open+0x10/0x10 [ 1128.585592][T20542] chrdev_open+0x234/0x6a0 [ 1128.585613][T20542] ? __pfx_apparmor_file_open+0x10/0x10 [ 1128.585639][T20542] ? __pfx_chrdev_open+0x10/0x10 [ 1128.585661][T20542] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 1128.585684][T20542] do_dentry_open+0x982/0x1530 [ 1128.585705][T20542] ? __pfx_chrdev_open+0x10/0x10 [ 1128.585730][T20542] vfs_open+0x82/0x3f0 [ 1128.585757][T20542] path_openat+0x1de4/0x2cb0 [ 1128.585784][T20542] ? __pfx_path_openat+0x10/0x10 [ 1128.585804][T20542] ? __lock_acquire+0xb8a/0x1c90 [ 1128.585830][T20542] do_filp_open+0x20b/0x470 [ 1128.585849][T20542] ? __pfx_do_filp_open+0x10/0x10 [ 1128.585883][T20542] ? alloc_fd+0x471/0x7d0 [ 1128.585907][T20542] do_sys_openat2+0x11b/0x1d0 [ 1128.585932][T20542] ? __pfx_do_sys_openat2+0x10/0x10 [ 1128.585966][T20542] __x64_sys_openat+0x174/0x210 [ 1128.585991][T20542] ? __pfx___x64_sys_openat+0x10/0x10 [ 1128.586026][T20542] do_syscall_64+0xcd/0xfa0 [ 1128.586049][T20542] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1128.586066][T20542] RIP: 0033:0x7f2600b8f7c9 [ 1128.586081][T20542] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1128.586098][T20542] RSP: 002b:00007f2601a3e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1128.586115][T20542] RAX: ffffffffffffffda RBX: 00007f2600de6090 RCX: 00007f2600b8f7c9 [ 1128.586126][T20542] RDX: 0000000000000000 RSI: 0000200000000100 RDI: ffffffffffffff9c [ 1128.586137][T20542] RBP: 00007f2600c13f91 R08: 0000000000000000 R09: 0000000000000000 [ 1128.586147][T20542] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1128.586157][T20542] R13: 00007f2600de6128 R14: 00007f2600de6090 R15: 00007ffe156c1088 [ 1128.586180][T20542] [ 1130.549082][T20552] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3109'. [ 1130.768497][T20552] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1131.566714][T20552] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1135.693911][T20594] zswap: compressor not available [ 1137.958710][T20618] Console: switching to colour VGA+ 80x25 syzkaller syzkaller login: [ 1140.233005][T20632] bond0: invalid ARP target specified [ 1140.548553][T20620] Process accounting resumed [ 1141.375811][T20644] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3129'. [ 1141.565994][T20654] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3129'. [ 1147.455887][T20673] netlink: 334 bytes leftover after parsing attributes in process `syz.7.3135'. [ 1148.015970][T20675] netlink: 334 bytes leftover after parsing attributes in process `syz.7.3136'. [ 1148.157389][T20677] netlink: 'syz.2.3137': attribute type 11 has an invalid length. [ 1149.495064][T20694] random: crng reseeded on system resumption [ 1150.797663][T20704] vhci_hcd: invalid port number 16 [ 1150.874842][T20704] vhci_hcd: invalid port number 16 [ 1151.979469][T20716] Process accounting paused [ 1154.573062][T20748] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3153'. [ 1156.848453][T20758] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1156.957037][T20758] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1156.963099][T20758] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1157.078400][T20758] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1157.084344][T20758] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1157.238582][T20758] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1157.305207][T20758] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1157.371975][T20758] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 1157.456583][T20758] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 1157.537881][T20758] CPU0 is offline. [ 1158.636795][T13156] Bluetooth: hci4: command 0x0c1a tx timeout [ 1159.035161][T13156] Bluetooth: hci1: command 0x0c1a tx timeout [ 1159.041205][T13156] Bluetooth: hci0: command 0x0c1a tx timeout [ 1159.115879][T13156] Bluetooth: hci3: command 0x0c1a tx timeout [ 1159.288008][T13156] Bluetooth: hci2: command 0x0c1a tx timeout [ 1159.354894][T13156] Bluetooth: hci5: command 0x0c1a tx timeout [ 1161.195674][T13156] Bluetooth: hci3: command 0x0c1a tx timeout [ 1161.434933][T13156] Bluetooth: hci5: command 0x0c1a tx timeout [ 1161.785767][T13105] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1161.804933][T13105] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1161.813300][T13105] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1161.821222][T13105] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1161.835309][T13105] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1163.019220][T20776] chnl_net:caif_netlink_parms(): no params data found [ 1163.517843][T13105] Bluetooth: hci5: command 0x0c1a tx timeout [ 1163.835051][T20776] bridge0: port 1(bridge_slave_0) entered blocking state [ 1163.842182][T20776] bridge0: port 1(bridge_slave_0) entered disabled state [ 1163.916847][T13105] Bluetooth: hci6: command tx timeout [ 1163.996487][T20776] bridge_slave_0: entered allmulticast mode [ 1164.096274][T20776] bridge_slave_0: entered promiscuous mode [ 1164.201357][T20776] bridge0: port 2(bridge_slave_1) entered blocking state [ 1164.286097][T20776] bridge0: port 2(bridge_slave_1) entered disabled state [ 1164.424926][T20776] bridge_slave_1: entered allmulticast mode [ 1164.468103][T20776] bridge_slave_1: entered promiscuous mode [ 1164.820370][T20776] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1165.237426][T20776] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1165.811169][T13156] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1165.838415][T13156] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1165.865117][T13156] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1165.872867][T13156] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1165.880553][T13156] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1165.995552][T13105] Bluetooth: hci6: command tx timeout [ 1166.261083][T20776] team0: Port device team_slave_0 added [ 1166.342685][T20776] team0: Port device team_slave_1 added [ 1167.327414][T20776] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1167.334386][T20776] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1167.684003][T20776] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1167.995987][T13105] Bluetooth: hci7: command tx timeout [ 1168.058584][T20776] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1168.078013][T13105] Bluetooth: hci6: command tx timeout [ 1168.161082][T20776] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1168.328546][T13156] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1168.345469][T13156] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1168.356068][T13156] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1168.365988][T13156] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1168.373423][T13156] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1168.514856][T20776] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1169.075883][T20776] hsr_slave_0: entered promiscuous mode [ 1169.145517][T20776] hsr_slave_1: entered promiscuous mode [ 1169.151622][T20776] debugfs: 'hsr0' already exists in 'hsr' [ 1169.276043][T20776] Cannot create hsr debugfs directory [ 1170.078567][T13156] Bluetooth: hci7: command tx timeout [ 1170.165098][T13156] Bluetooth: hci6: command tx timeout [ 1170.475144][T13105] Bluetooth: hci8: command tx timeout [ 1170.665136][T20796] chnl_net:caif_netlink_parms(): no params data found [ 1170.902929][T20813] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3163'. [ 1172.155902][T13105] Bluetooth: hci7: command tx timeout [ 1172.564794][T13105] Bluetooth: hci8: command tx timeout [ 1172.912797][T20801] chnl_net:caif_netlink_parms(): no params data found [ 1173.661658][T20796] bridge0: port 1(bridge_slave_0) entered blocking state [ 1173.755140][T20796] bridge0: port 1(bridge_slave_0) entered disabled state [ 1173.762369][T20796] bridge_slave_0: entered allmulticast mode [ 1173.896223][T20796] bridge_slave_0: entered promiscuous mode [ 1173.985782][T20796] bridge0: port 2(bridge_slave_1) entered blocking state [ 1173.992909][T20796] bridge0: port 2(bridge_slave_1) entered disabled state [ 1174.164873][T20796] bridge_slave_1: entered allmulticast mode [ 1174.171984][T20796] bridge_slave_1: entered promiscuous mode [ 1174.235934][T13105] Bluetooth: hci7: command tx timeout [ 1174.634986][T13105] Bluetooth: hci8: command tx timeout [ 1174.825579][T20796] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1174.937700][T20796] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1175.150327][T20801] bridge0: port 1(bridge_slave_0) entered blocking state [ 1175.229346][T20801] bridge0: port 1(bridge_slave_0) entered disabled state [ 1175.300157][T20801] bridge_slave_0: entered allmulticast mode [ 1175.357665][T20801] bridge_slave_0: entered promiscuous mode [ 1175.481363][T20776] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1175.709667][T20801] bridge0: port 2(bridge_slave_1) entered blocking state [ 1175.784777][T20801] bridge0: port 2(bridge_slave_1) entered disabled state [ 1175.852772][T20801] bridge_slave_1: entered allmulticast mode [ 1175.904439][T20801] bridge_slave_1: entered promiscuous mode [ 1176.148410][T20776] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1176.215857][T20776] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1176.312302][T20796] team0: Port device team_slave_0 added [ 1176.378632][T20796] team0: Port device team_slave_1 added [ 1176.507705][T20801] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1176.689291][T20776] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1176.715197][T13105] Bluetooth: hci8: command tx timeout [ 1176.919737][T20801] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1177.314247][T20796] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1177.384652][T20796] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1177.620259][T20796] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1177.725043][T20796] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1177.732018][T20796] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1178.024707][T20796] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1178.310799][T20801] team0: Port device team_slave_0 added [ 1178.377071][T20801] team0: Port device team_slave_1 added [ 1178.620693][T20796] hsr_slave_0: entered promiscuous mode [ 1178.722209][T20796] hsr_slave_1: entered promiscuous mode [ 1178.767352][T20796] debugfs: 'hsr0' already exists in 'hsr' [ 1178.773112][T20796] Cannot create hsr debugfs directory [ 1179.046974][T20801] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1179.134704][T20801] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1179.396019][T20801] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1179.524844][T20801] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1179.604706][T20801] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1179.857673][T20801] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1180.773017][T20801] hsr_slave_0: entered promiscuous mode [ 1180.859248][T20801] hsr_slave_1: entered promiscuous mode [ 1180.915696][T20801] debugfs: 'hsr0' already exists in 'hsr' [ 1180.921486][T20801] Cannot create hsr debugfs directory [ 1181.998834][T20776] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1182.561668][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1182.568095][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1182.659173][T20776] 8021q: adding VLAN 0 to HW filter on device team0 [ 1182.902682][T18294] bridge0: port 1(bridge_slave_0) entered blocking state [ 1182.909877][T18294] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1183.121327][T18294] bridge0: port 2(bridge_slave_1) entered blocking state [ 1183.128475][T18294] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1183.783547][T20776] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1183.956075][T20776] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1184.259562][T20796] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1184.399477][T20796] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1184.621544][T20796] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1185.347586][T20796] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1185.627628][T20776] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1185.978253][T20801] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1186.857416][T20801] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1186.975985][T20801] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1187.570314][T20801] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1187.894223][T20796] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1188.072850][T20796] 8021q: adding VLAN 0 to HW filter on device team0 [ 1188.248363][T18292] bridge0: port 1(bridge_slave_0) entered blocking state [ 1188.255523][T18292] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1188.597220][T18290] bridge0: port 2(bridge_slave_1) entered blocking state [ 1188.604336][T18290] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1189.095536][T20776] veth0_vlan: entered promiscuous mode [ 1189.171852][T20776] veth1_vlan: entered promiscuous mode [ 1189.552535][T20776] veth0_macvtap: entered promiscuous mode [ 1189.723378][T20776] veth1_macvtap: entered promiscuous mode [ 1189.828712][T20801] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1190.000950][T20776] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1190.138009][T20776] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1190.252774][T20801] 8021q: adding VLAN 0 to HW filter on device team0 [ 1190.494680][T18294] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1190.506181][T13092] bridge0: port 1(bridge_slave_0) entered blocking state [ 1190.513274][T13092] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1190.705990][T13092] bridge0: port 2(bridge_slave_1) entered blocking state [ 1190.713212][T13092] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1190.960906][T18294] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1191.037009][T18294] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1191.316353][T18294] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1191.497046][T20796] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1191.925044][T18290] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1191.932972][T18290] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1192.243243][T18292] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1192.344720][T18292] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1193.299851][T20801] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1193.725671][T20796] veth0_vlan: entered promiscuous mode [ 1195.056490][T20796] veth1_vlan: entered promiscuous mode [ 1195.504283][T20796] veth0_macvtap: entered promiscuous mode [ 1195.628884][T20796] veth1_macvtap: entered promiscuous mode [ 1196.081607][T20796] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1196.278935][T20796] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1197.040070][T13120] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1197.124728][T13120] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1197.340166][T13120] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1197.430100][T13120] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1197.565806][T20801] veth0_vlan: entered promiscuous mode [ 1197.954878][T20801] veth1_vlan: entered promiscuous mode [ 1198.619064][T20801] veth0_macvtap: entered promiscuous mode [ 1198.743952][T20801] veth1_macvtap: entered promiscuous mode [ 1198.854751][T18290] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1198.970895][T18290] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1199.233802][T20801] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1199.447605][T13092] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1199.468439][T20801] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1199.544684][T13092] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1199.747067][T13120] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1199.868249][T13120] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1200.458804][T13120] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1200.606428][T13120] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1201.529036][T20934] zswap: compressor not available [ 1201.993347][T13120] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1202.104760][T13120] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1202.417803][T18292] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1202.535410][T18292] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1204.239846][T20964] Invalid ELF header magic: != ELF [ 1204.889252][T20970] netlink: 'syz.4.3183': attribute type 27 has an invalid length. [ 1205.005031][T20970] netlink: 334 bytes leftover after parsing attributes in process `syz.4.3183'. [ 1205.243399][T20978] random: crng reseeded on system resumption [ 1205.530038][T20978] FAULT_INJECTION: forcing a failure. [ 1205.530038][T20978] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1205.714751][T20978] CPU: 1 UID: 0 PID: 20978 Comm: syz.8.3184 Not tainted syzkaller #0 PREEMPT(full) [ 1205.714779][T20978] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1205.714790][T20978] Call Trace: [ 1205.714798][T20978] [ 1205.714806][T20978] dump_stack_lvl+0x16c/0x1f0 [ 1205.714832][T20978] should_fail_ex+0x512/0x640 [ 1205.714862][T20978] should_fail_alloc_page+0xe7/0x130 [ 1205.714888][T20978] prepare_alloc_pages+0x3c2/0x610 [ 1205.714916][T20978] __alloc_frozen_pages_noprof+0x18b/0x2470 [ 1205.714942][T20978] ? find_held_lock+0x2b/0x80 [ 1205.714960][T20978] ? is_bpf_text_address+0x8a/0x1a0 [ 1205.714984][T20978] ? bpf_ksym_find+0x124/0x1c0 [ 1205.715003][T20978] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1205.715021][T20978] ? is_bpf_text_address+0x94/0x1a0 [ 1205.715045][T20978] ? kernel_text_address+0x8d/0x100 [ 1205.715061][T20978] ? __kernel_text_address+0xd/0x40 [ 1205.715076][T20978] ? unwind_get_return_address+0x59/0xa0 [ 1205.715104][T20978] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1205.715133][T20978] ? policy_nodemask+0xea/0x4e0 [ 1205.715158][T20978] alloc_pages_mpol+0x1fb/0x550 [ 1205.715183][T20978] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1205.715208][T20978] ? kasan_save_stack+0x33/0x60 [ 1205.715227][T20978] ? kasan_save_track+0x14/0x30 [ 1205.715245][T20978] ? __kasan_kmalloc+0xaa/0xb0 [ 1205.715263][T20978] ? __get_vm_area_node+0x101/0x330 [ 1205.715290][T20978] alloc_pages_noprof+0x131/0x390 [ 1205.715314][T20978] get_free_pages_noprof+0x10/0xb0 [ 1205.715334][T20978] kasan_populate_vmalloc+0x9f/0x2d0 [ 1205.715353][T20978] ? alloc_vmap_area+0x8b5/0x29e0 [ 1205.715379][T20978] alloc_vmap_area+0x960/0x29e0 [ 1205.715416][T20978] ? __pfx_alloc_vmap_area+0x10/0x10 [ 1205.715444][T20978] __get_vm_area_node+0x1ca/0x330 [ 1205.715472][T20978] __vmalloc_node_range_noprof+0x271/0x1480 [ 1205.715502][T20978] ? n_tty_open+0x1a/0x170 [ 1205.715533][T20978] ? n_tty_open+0x1a/0x170 [ 1205.715560][T20978] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1205.715584][T20978] ? look_up_lock_class+0x59/0x150 [ 1205.715609][T20978] ? __pfx___ldsem_down_write_nested+0x10/0x10 [ 1205.715635][T20978] ? n_tty_open+0x1a/0x170 [ 1205.715655][T20978] __vmalloc_node_noprof+0xad/0xf0 [ 1205.715689][T20978] ? n_tty_open+0x1a/0x170 [ 1205.715709][T20978] ? __pfx_n_tty_open+0x10/0x10 [ 1205.715733][T20978] n_tty_open+0x1a/0x170 [ 1205.715754][T20978] ? __pfx_n_tty_open+0x10/0x10 [ 1205.715775][T20978] tty_ldisc_open+0x9f/0x120 [ 1205.715792][T20978] tty_ldisc_setup+0x40/0x100 [ 1205.715810][T20978] tty_init_dev.part.0+0x1ec/0x500 [ 1205.715833][T20978] tty_open+0xa4f/0xf90 [ 1205.715858][T20978] ? __pfx_tty_open+0x10/0x10 [ 1205.715879][T20978] ? chrdev_open+0x10b/0x6a0 [ 1205.715903][T20978] ? __pfx_tty_open+0x10/0x10 [ 1205.715923][T20978] chrdev_open+0x234/0x6a0 [ 1205.715942][T20978] ? __pfx_apparmor_file_open+0x10/0x10 [ 1205.715968][T20978] ? __pfx_chrdev_open+0x10/0x10 [ 1205.715989][T20978] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 1205.716014][T20978] do_dentry_open+0x982/0x1530 [ 1205.716034][T20978] ? __pfx_chrdev_open+0x10/0x10 [ 1205.716064][T20978] vfs_open+0x82/0x3f0 [ 1205.716092][T20978] path_openat+0x1de4/0x2cb0 [ 1205.716119][T20978] ? __pfx_path_openat+0x10/0x10 [ 1205.716139][T20978] ? __lock_acquire+0xb8a/0x1c90 [ 1205.716165][T20978] do_filp_open+0x20b/0x470 [ 1205.716184][T20978] ? __pfx_do_filp_open+0x10/0x10 [ 1205.716220][T20978] ? alloc_fd+0x471/0x7d0 [ 1205.716245][T20978] do_sys_openat2+0x11b/0x1d0 [ 1205.716271][T20978] ? __pfx_do_sys_openat2+0x10/0x10 [ 1205.716305][T20978] __x64_sys_openat+0x174/0x210 [ 1205.716331][T20978] ? __pfx___x64_sys_openat+0x10/0x10 [ 1205.716366][T20978] do_syscall_64+0xcd/0xfa0 [ 1205.716389][T20978] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1205.716406][T20978] RIP: 0033:0x7fd2ae58f7c9 [ 1205.716421][T20978] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1205.716436][T20978] RSP: 002b:00007fd2af351038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1205.716453][T20978] RAX: ffffffffffffffda RBX: 00007fd2ae7e6090 RCX: 00007fd2ae58f7c9 [ 1205.716464][T20978] RDX: 0000000000020000 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 1205.716475][T20978] RBP: 00007fd2ae613f91 R08: 0000000000000000 R09: 0000000000000000 [ 1205.716485][T20978] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1205.716495][T20978] R13: 00007fd2ae7e6128 R14: 00007fd2ae7e6090 R15: 00007ffe285678d8 [ 1205.716519][T20978] [ 1206.615377][T20978] syz.8.3184: vmalloc error: size 9128, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1206.795274][T20978] CPU: 1 UID: 0 PID: 20978 Comm: syz.8.3184 Not tainted syzkaller #0 PREEMPT(full) [ 1206.795300][T20978] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1206.795311][T20978] Call Trace: [ 1206.795317][T20978] [ 1206.795325][T20978] dump_stack_lvl+0x16c/0x1f0 [ 1206.795351][T20978] warn_alloc+0x248/0x3a0 [ 1206.795371][T20978] ? __pfx_warn_alloc+0x10/0x10 [ 1206.795390][T20978] ? __get_vm_area_node+0x2cd/0x330 [ 1206.795418][T20978] ? __get_vm_area_node+0x2cd/0x330 [ 1206.795440][T20978] ? __get_vm_area_node+0x1dc/0x330 [ 1206.795462][T20978] ? __get_vm_area_node+0x208/0x330 [ 1206.795490][T20978] __vmalloc_node_range_noprof+0xaf5/0x1480 [ 1206.795523][T20978] ? n_tty_open+0x1a/0x170 [ 1206.795551][T20978] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1206.795575][T20978] ? look_up_lock_class+0x59/0x150 [ 1206.795599][T20978] ? __pfx___ldsem_down_write_nested+0x10/0x10 [ 1206.795636][T20978] ? n_tty_open+0x1a/0x170 [ 1206.795658][T20978] __vmalloc_node_noprof+0xad/0xf0 [ 1206.795683][T20978] ? n_tty_open+0x1a/0x170 [ 1206.795705][T20978] ? __pfx_n_tty_open+0x10/0x10 [ 1206.795729][T20978] n_tty_open+0x1a/0x170 [ 1206.795750][T20978] ? __pfx_n_tty_open+0x10/0x10 [ 1206.795773][T20978] tty_ldisc_open+0x9f/0x120 [ 1206.795790][T20978] tty_ldisc_setup+0x40/0x100 [ 1206.795807][T20978] tty_init_dev.part.0+0x1ec/0x500 [ 1206.795830][T20978] tty_open+0xa4f/0xf90 [ 1206.795855][T20978] ? __pfx_tty_open+0x10/0x10 [ 1206.795875][T20978] ? chrdev_open+0x10b/0x6a0 [ 1206.795898][T20978] ? __pfx_tty_open+0x10/0x10 [ 1206.795917][T20978] chrdev_open+0x234/0x6a0 [ 1206.795937][T20978] ? __pfx_apparmor_file_open+0x10/0x10 [ 1206.795963][T20978] ? __pfx_chrdev_open+0x10/0x10 [ 1206.795986][T20978] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 1206.796014][T20978] do_dentry_open+0x982/0x1530 [ 1206.796034][T20978] ? __pfx_chrdev_open+0x10/0x10 [ 1206.796059][T20978] vfs_open+0x82/0x3f0 [ 1206.796087][T20978] path_openat+0x1de4/0x2cb0 [ 1206.796114][T20978] ? __pfx_path_openat+0x10/0x10 [ 1206.796135][T20978] ? __lock_acquire+0xb8a/0x1c90 [ 1206.796161][T20978] do_filp_open+0x20b/0x470 [ 1206.796188][T20978] ? __pfx_do_filp_open+0x10/0x10 [ 1206.796226][T20978] ? alloc_fd+0x471/0x7d0 [ 1206.796251][T20978] do_sys_openat2+0x11b/0x1d0 [ 1206.796277][T20978] ? __pfx_do_sys_openat2+0x10/0x10 [ 1206.796312][T20978] __x64_sys_openat+0x174/0x210 [ 1206.796339][T20978] ? __pfx___x64_sys_openat+0x10/0x10 [ 1206.796374][T20978] do_syscall_64+0xcd/0xfa0 [ 1206.796398][T20978] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1206.796415][T20978] RIP: 0033:0x7fd2ae58f7c9 [ 1206.796429][T20978] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1206.796446][T20978] RSP: 002b:00007fd2af351038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1206.796463][T20978] RAX: ffffffffffffffda RBX: 00007fd2ae7e6090 RCX: 00007fd2ae58f7c9 [ 1206.796475][T20978] RDX: 0000000000020000 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 1206.796485][T20978] RBP: 00007fd2ae613f91 R08: 0000000000000000 R09: 0000000000000000 [ 1206.796496][T20978] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1206.796506][T20978] R13: 00007fd2ae7e6128 R14: 00007fd2ae7e6090 R15: 00007ffe285678d8 [ 1206.796530][T20978] [ 1207.144704][T20978] Mem-Info: [ 1207.147867][T20978] active_anon:3729 inactive_anon:16818 isolated_anon:0 [ 1207.147867][T20978] active_file:20486 inactive_file:38475 isolated_file:0 [ 1207.147867][T20978] unevictable:768 dirty:412 writeback:0 [ 1207.147867][T20978] slab_reclaimable:14790 slab_unreclaimable:116968 [ 1207.147867][T20978] mapped:48974 shmem:2779 pagetables:1367 [ 1207.147867][T20978] sec_pagetables:0 bounce:0 [ 1207.147867][T20978] kernel_misc_reclaimable:0 [ 1207.147867][T20978] free:1219056 free_pcp:10548 free_cma:0 [ 1207.193725][T20978] Node 0 active_anon:14916kB inactive_anon:67272kB active_file:81872kB inactive_file:153768kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:195868kB dirty:1648kB writeback:0kB shmem:9580kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:47104kB kernel_stack:13744kB pagetables:5316kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1207.228241][T20978] Node 1 active_anon:0kB inactive_anon:0kB active_file:72kB inactive_file:132kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:28kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:152kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1207.259902][T20978] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1207.289984][T20978] lowmem_reserve[]: 0 2485 2487 2487 2487 [ 1207.295794][T20978] Node 0 DMA32 free:946452kB boost:0kB min:34364kB low:42952kB high:51540kB reserved_highatomic:0KB free_highatomic:0KB active_anon:14916kB inactive_anon:67272kB active_file:81872kB inactive_file:153768kB unevictable:1536kB writepending:1648kB zspages:40kB present:3129332kB managed:2545056kB mlocked:0kB bounce:0kB free_pcp:42156kB local_pcp:42156kB free_cma:0kB [ 1207.331515][T20978] lowmem_reserve[]: 0 0 1 1 1 [ 1207.337781][T20978] Node 0 Normal free:12kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:20kB local_pcp:20kB free_cma:0kB [ 1207.367874][T20978] lowmem_reserve[]: 0 0 0 0 0 [ 1207.372611][T20978] Node 1 Normal free:3914400kB boost:0kB min:55512kB low:69388kB high:83264kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:72kB inactive_file:132kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1207.404574][T20978] lowmem_reserve[]: 0 0 0 0 0 [ 1207.409348][T20978] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1207.423988][T20978] Node 0 DMA32: 1353*4kB (UME) 1774*8kB (UME) 1511*16kB (UME) 1227*32kB (UME) 622*64kB (UME) 576*128kB (UME) 441*256kB (UME) 256*512kB (UME) 126*1024kB (UME) 2*2048kB (UM) 91*4096kB (M) = 946404kB [ 1207.445099][T20978] Node 0 Normal: 1*4kB (U) 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 1207.457507][T20978] Node 1 Normal: 174*4kB (UME) 49*8kB (UME) 38*16kB (UME) 226*32kB (UME) 115*64kB (UME) 38*128kB (UME) 14*256kB (UME) 7*512kB (UME) 1*1024kB (M) 3*2048kB (UME) 947*4096kB (M) = 3914400kB [ 1207.515315][T20978] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1207.544716][T20978] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 1207.554037][T20978] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1207.629900][T20978] Node 1 hugepages_total=3 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 1207.725184][T20978] 61738 total pagecache pages [ 1207.731565][T20978] 2 pages in swap cache [ 1207.804685][T20978] Free swap = 124952kB [ 1207.808872][T20978] Total swap = 124996kB [ 1207.813042][T20978] 2097051 pages RAM [ 1207.914988][T20978] 0 pages HighMem/MovableOnly [ 1207.919701][T20978] 428697 pages reserved [ 1207.923972][T20978] 0 pages cma reserved [ 1208.054952][T20978] pty pty16: ldisc open failed (-12), clearing slot 16 [ 1208.257249][T20985] tty tty12: ldisc open failed (-12), clearing slot 11 [ 1210.195882][T21013] virtio-pci 0000:00:04.0: [Firmware Bug]: Overriding NUMA node to 1. Contact your vendor for updates. [ 1211.956298][T21020] Invalid ELF header magic: != ELF [ 1212.905725][T21032] FAULT_INJECTION: forcing a failure. [ 1212.905725][T21032] name failslab, interval 1, probability 0, space 0, times 0 [ 1213.092276][T21032] CPU: 1 UID: 0 PID: 21032 Comm: syz.8.3196 Tainted: G I syzkaller #0 PREEMPT(full) [ 1213.092308][T21032] Tainted: [I]=FIRMWARE_WORKAROUND [ 1213.092316][T21032] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1213.092326][T21032] Call Trace: [ 1213.092332][T21032] [ 1213.092340][T21032] dump_stack_lvl+0x16c/0x1f0 [ 1213.092366][T21032] should_fail_ex+0x512/0x640 [ 1213.092393][T21032] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 1213.092414][T21032] should_failslab+0xc2/0x120 [ 1213.092439][T21032] kmem_cache_alloc_noprof+0x75/0x6e0 [ 1213.092456][T21032] ? seq_open+0x55/0x170 [ 1213.092484][T21032] ? seq_open+0x55/0x170 [ 1213.092505][T21032] seq_open+0x55/0x170 [ 1213.092529][T21032] __seq_open_private+0x3e/0xd0 [ 1213.092554][T21032] tracing_open+0x25f/0xdf0 [ 1213.092581][T21032] do_dentry_open+0x982/0x1530 [ 1213.092610][T21032] ? __pfx_tracing_open+0x10/0x10 [ 1213.092636][T21032] vfs_open+0x82/0x3f0 [ 1213.092663][T21032] path_openat+0x1de4/0x2cb0 [ 1213.092689][T21032] ? __pfx_path_openat+0x10/0x10 [ 1213.092709][T21032] ? __lock_acquire+0xb8a/0x1c90 [ 1213.092736][T21032] do_filp_open+0x20b/0x470 [ 1213.092755][T21032] ? __pfx_do_filp_open+0x10/0x10 [ 1213.092790][T21032] ? alloc_fd+0x471/0x7d0 [ 1213.092813][T21032] do_sys_openat2+0x11b/0x1d0 [ 1213.092839][T21032] ? __pfx_do_sys_openat2+0x10/0x10 [ 1213.092872][T21032] __x64_sys_openat+0x174/0x210 [ 1213.092898][T21032] ? __pfx___x64_sys_openat+0x10/0x10 [ 1213.092931][T21032] do_syscall_64+0xcd/0xfa0 [ 1213.092954][T21032] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1213.092971][T21032] RIP: 0033:0x7fd2ae58f7c9 [ 1213.092986][T21032] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1213.093002][T21032] RSP: 002b:00007fd2af372038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1213.093019][T21032] RAX: ffffffffffffffda RBX: 00007fd2ae7e5fa0 RCX: 00007fd2ae58f7c9 [ 1213.093030][T21032] RDX: 0000000000002040 RSI: 0000200000000100 RDI: ffffffffffffff9c [ 1213.093041][T21032] RBP: 00007fd2ae613f91 R08: 0000000000000000 R09: 0000000000000000 [ 1213.093051][T21032] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1213.093061][T21032] R13: 00007fd2ae7e6038 R14: 00007fd2ae7e5fa0 R15: 00007ffe285678d8 [ 1213.093082][T21032] [ 1218.944167][T13156] Bluetooth: hci8: unexpected subevent 0x01 length: 123 > 18 [ 1219.123163][T21085] netlink: set zone limit has 8 unknown bytes [ 1219.263411][T21089] netlink: del zone limit has 8 unknown bytes [ 1219.559513][T21085] HfR: entered promiscuous mode [ 1219.688535][T21089] netlink: 40 bytes leftover after parsing attributes in process `syz.9.3208'. [ 1220.956354][T13105] Bluetooth: hci8: command tx timeout [ 1223.564543][T19853] svc: failed to register nfsdv3 RPC service (errno 512). [ 1223.656420][T19853] svc: failed to register nfsaclv3 RPC service (errno 512). [ 1225.698952][T21133] debugfs: '!PjE ùrõ£Ò„yù*›"¤l-ý¤ôy–ú„L̓÷ÓÄ]' already exists in 'ieee80211' [ 1226.838517][T21141] netlink: 342 bytes leftover after parsing attributes in process `syz.8.3220'. [ 1229.246346][T21148] FAULT_INJECTION: forcing a failure. [ 1229.246346][T21148] name failslab, interval 1, probability 0, space 0, times 0 [ 1229.404842][T21148] CPU: 1 UID: 0 PID: 21148 Comm: syz.8.3221 Tainted: G I syzkaller #0 PREEMPT(full) [ 1229.404874][T21148] Tainted: [I]=FIRMWARE_WORKAROUND [ 1229.404881][T21148] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1229.404892][T21148] Call Trace: [ 1229.404898][T21148] [ 1229.404906][T21148] dump_stack_lvl+0x16c/0x1f0 [ 1229.404933][T21148] should_fail_ex+0x512/0x640 [ 1229.404960][T21148] ? fs_reclaim_acquire+0xae/0x150 [ 1229.404986][T21148] should_failslab+0xc2/0x120 [ 1229.405010][T21148] kmem_cache_alloc_noprof+0x75/0x6e0 [ 1229.405027][T21148] ? __pfx_map_id_range_down+0x10/0x10 [ 1229.405043][T21148] ? security_inode_alloc+0x3b/0x2b0 [ 1229.405073][T21148] ? security_inode_alloc+0x3b/0x2b0 [ 1229.405098][T21148] security_inode_alloc+0x3b/0x2b0 [ 1229.405125][T21148] inode_init_always_gfp+0xce4/0x1030 [ 1229.405147][T21148] alloc_inode+0x86/0x240 [ 1229.405171][T21148] sock_alloc+0x40/0x280 [ 1229.405192][T21148] sock_create_lite+0x82/0x120 [ 1229.405213][T21148] __netlink_kernel_create+0xbd/0x750 [ 1229.405234][T21148] ? __pfx___netlink_kernel_create+0x10/0x10 [ 1229.405259][T21148] fib_net_init+0x26d/0x3f0 [ 1229.405279][T21148] ? __pfx___register_sysctl_table+0x10/0x10 [ 1229.405306][T21148] ? __pfx_fib_net_init+0x10/0x10 [ 1229.405326][T21148] ? lockdep_init_map_type+0x5c/0x280 [ 1229.405351][T21148] ? __pfx_nl_fib_input+0x10/0x10 [ 1229.405374][T21148] ? devinet_init_net+0x5c2/0x910 [ 1229.405398][T21148] ? __pfx_fib_net_init+0x10/0x10 [ 1229.405417][T21148] ops_init+0x1e2/0x5f0 [ 1229.405448][T21148] setup_net+0x100/0x390 [ 1229.405466][T21148] ? __pfx_setup_net+0x10/0x10 [ 1229.405486][T21148] ? debug_mutex_init+0x37/0x70 [ 1229.405507][T21148] copy_net_ns+0x2f8/0x690 [ 1229.405531][T21148] create_new_namespaces+0x3ea/0xa90 [ 1229.405557][T21148] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 1229.405579][T21148] ksys_unshare+0x45b/0xa40 [ 1229.405603][T21148] ? __pfx_ksys_unshare+0x10/0x10 [ 1229.405628][T21148] ? xfd_validate_state+0x61/0x180 [ 1229.405659][T21148] __x64_sys_unshare+0x31/0x40 [ 1229.405681][T21148] do_syscall_64+0xcd/0xfa0 [ 1229.405703][T21148] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1229.405720][T21148] RIP: 0033:0x7fd2ae58f7c9 [ 1229.405735][T21148] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1229.405752][T21148] RSP: 002b:00007fd2af351038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1229.405769][T21148] RAX: ffffffffffffffda RBX: 00007fd2ae7e6090 RCX: 00007fd2ae58f7c9 [ 1229.405780][T21148] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 1229.405791][T21148] RBP: 00007fd2ae613f91 R08: 0000000000000000 R09: 0000000000000000 [ 1229.405801][T21148] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1229.405811][T21148] R13: 00007fd2ae7e6128 R14: 00007fd2ae7e6090 R15: 00007ffe285678d8 [ 1229.405833][T21148] [ 1230.119495][T21144] zswap: compressor - not available [ 1230.177367][T13092] EXT4-fs (sda1): Delayed block allocation failed for inode 2029 at logical offset 1358 with max blocks 11 with error 117 [ 1230.220954][T13092] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1230.220954][T13092] [ 1230.434496][T13092] EXT4-fs (sda1): Delayed block allocation failed for inode 2031 at logical offset 3552 with max blocks 23 with error 117 [ 1230.589598][T13092] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1230.589598][T13092] [ 1232.194973][T21166] zswap: compressor not available [ 1233.454986][T13105] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 1233.474833][T13105] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 1233.484020][T13105] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 1233.493699][T13105] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 1233.501950][T13105] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 1233.536672][T21178] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1234.135931][T21187] usb usb36: usbfs: process 21187 (syz.9.3232) did not claim interface 0 before use [ 1235.036493][T21176] chnl_net:caif_netlink_parms(): no params data found [ 1235.594925][T13105] Bluetooth: hci9: command tx timeout [ 1235.817254][T21176] bridge0: port 1(bridge_slave_0) entered blocking state [ 1235.866415][T21176] bridge0: port 1(bridge_slave_0) entered disabled state [ 1235.873665][T21176] bridge_slave_0: entered allmulticast mode [ 1236.005936][T21176] bridge_slave_0: entered promiscuous mode [ 1236.076167][T21176] bridge0: port 2(bridge_slave_1) entered blocking state [ 1236.180546][T21176] bridge0: port 2(bridge_slave_1) entered disabled state [ 1236.267645][T21176] bridge_slave_1: entered allmulticast mode [ 1236.358828][T21176] bridge_slave_1: entered promiscuous mode [ 1236.640893][T21176] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1236.816337][T21176] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1237.098329][T13105] Bluetooth: hci7: Received unexpected HCI Event 0x00 [ 1237.157020][T21176] team0: Port device team_slave_0 added [ 1237.254976][T21176] team0: Port device team_slave_1 added [ 1237.580200][T21176] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1237.660618][T21176] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1237.699872][T13105] Bluetooth: hci9: command tx timeout [ 1237.975072][T21176] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1238.107933][T21176] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1238.214784][T21176] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1238.512002][T21176] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1239.007645][T21176] hsr_slave_0: entered promiscuous mode [ 1239.014034][T21176] hsr_slave_1: entered promiscuous mode [ 1239.158750][T21176] debugfs: 'hsr0' already exists in 'hsr' [ 1239.241436][T21176] Cannot create hsr debugfs directory [ 1239.755043][T13105] Bluetooth: hci9: command tx timeout [ 1241.607076][T21235] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input81 [ 1241.835905][T13105] Bluetooth: hci9: command tx timeout [ 1242.065392][T13156] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 1242.105257][T21241] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 1242.118039][T21241] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 1242.129112][T21241] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 1242.141942][T21241] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 1242.397372][T21236] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input82 [ 1243.069747][T21176] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1243.319853][T21176] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1243.637533][T21176] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1243.781443][T21176] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1244.009024][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1244.015436][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1244.236950][T13105] Bluetooth: hci10: command tx timeout [ 1244.771565][T21239] chnl_net:caif_netlink_parms(): no params data found [ 1244.931108][T21176] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1245.330229][T21176] 8021q: adding VLAN 0 to HW filter on device team0 [ 1245.562433][T18292] bridge0: port 1(bridge_slave_0) entered blocking state [ 1245.569644][T18292] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1245.950081][T18294] bridge0: port 2(bridge_slave_1) entered blocking state [ 1245.957296][T18294] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1246.038531][T21262] zswap: compressor not available [ 1246.261844][T21176] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1246.325825][T13105] Bluetooth: hci10: command tx timeout [ 1246.454940][T21176] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1246.816731][T21239] bridge0: port 1(bridge_slave_0) entered blocking state [ 1246.864906][T21239] bridge0: port 1(bridge_slave_0) entered disabled state [ 1246.872168][T21239] bridge_slave_0: entered allmulticast mode [ 1247.028236][T21239] bridge_slave_0: entered promiscuous mode [ 1247.128341][T21239] bridge0: port 2(bridge_slave_1) entered blocking state [ 1247.225016][T21239] bridge0: port 2(bridge_slave_1) entered disabled state [ 1247.294190][T21239] bridge_slave_1: entered allmulticast mode [ 1247.395922][T21239] bridge_slave_1: entered promiscuous mode [ 1247.652831][T21239] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1247.878797][T21239] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1248.337597][T21239] team0: Port device team_slave_0 added [ 1248.373661][T21176] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1248.395376][T13105] Bluetooth: hci10: command tx timeout [ 1248.647557][T21239] team0: Port device team_slave_1 added [ 1249.166184][T21239] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1249.173168][T21239] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1249.199108][ C1] vkms_vblank_simulate: vblank timer overrun [ 1249.625350][T21239] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1249.758993][T21239] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1249.856641][T21239] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1249.882559][ C1] vkms_vblank_simulate: vblank timer overrun [ 1250.223422][T21239] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1250.369639][T21176] veth0_vlan: entered promiscuous mode [ 1250.475604][T13105] Bluetooth: hci10: command tx timeout [ 1250.830892][T21176] veth1_vlan: entered promiscuous mode [ 1251.093985][T21176] veth0_macvtap: entered promiscuous mode [ 1251.361747][T21176] veth1_macvtap: entered promiscuous mode [ 1251.477676][T21239] hsr_slave_0: entered promiscuous mode [ 1251.484437][T21239] hsr_slave_1: entered promiscuous mode [ 1251.620795][T21239] debugfs: 'hsr0' already exists in 'hsr' [ 1251.701025][T21239] Cannot create hsr debugfs directory [ 1252.501102][T21176] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1252.827388][T21176] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1253.349791][T18294] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1253.444876][T18294] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1253.851610][T18294] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1253.951554][T18294] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1254.078639][T21305] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1255.255010][T18292] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1255.262852][T18292] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1255.753620][T18292] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1255.844633][T18292] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1257.756612][T21239] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1257.893019][T21239] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1258.114797][T21239] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1258.255825][T21239] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1258.659810][T21319] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3258'. [ 1259.045882][T21319] veth1_macvtap: left promiscuous mode [ 1259.121059][T21333] FAULT_INJECTION: forcing a failure. [ 1259.121059][T21333] name failslab, interval 1, probability 0, space 0, times 0 [ 1259.273529][T21333] CPU: 1 UID: 8 PID: 21333 Comm: syz.0.3259 Tainted: G I syzkaller #0 PREEMPT(full) [ 1259.273560][T21333] Tainted: [I]=FIRMWARE_WORKAROUND [ 1259.273567][T21333] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1259.273577][T21333] Call Trace: [ 1259.273584][T21333] [ 1259.273591][T21333] dump_stack_lvl+0x16c/0x1f0 [ 1259.273617][T21333] should_fail_ex+0x512/0x640 [ 1259.273644][T21333] ? fs_reclaim_acquire+0xae/0x150 [ 1259.273669][T21333] should_failslab+0xc2/0x120 [ 1259.273694][T21333] __kmalloc_noprof+0xdd/0x880 [ 1259.273711][T21333] ? tomoyo_encode2+0x100/0x3e0 [ 1259.273734][T21333] ? tomoyo_encode2+0x100/0x3e0 [ 1259.273753][T21333] tomoyo_encode2+0x100/0x3e0 [ 1259.273775][T21333] tomoyo_encode+0x29/0x50 [ 1259.273794][T21333] tomoyo_realpath_from_path+0x18f/0x6e0 [ 1259.273817][T21333] ? tomoyo_profile+0x47/0x60 [ 1259.273842][T21333] tomoyo_path_number_perm+0x245/0x580 [ 1259.273869][T21333] ? tomoyo_path_number_perm+0x237/0x580 [ 1259.273899][T21333] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1259.273929][T21333] ? put_user_ifreq+0x89/0xc0 [ 1259.273969][T21333] ? find_held_lock+0x2b/0x80 [ 1259.273987][T21333] ? hook_file_ioctl_common+0x145/0x410 [ 1259.274010][T21333] ? __fget_files+0x20e/0x3c0 [ 1259.274032][T21333] security_file_ioctl+0x9b/0x240 [ 1259.274051][T21333] __x64_sys_ioctl+0xb7/0x210 [ 1259.274079][T21333] do_syscall_64+0xcd/0xfa0 [ 1259.274103][T21333] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1259.274121][T21333] RIP: 0033:0x7f9559d8f7c9 [ 1259.274135][T21333] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1259.274152][T21333] RSP: 002b:00007f955ac0e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1259.274169][T21333] RAX: ffffffffffffffda RBX: 00007f9559fe5fa0 RCX: 00007f9559d8f7c9 [ 1259.274180][T21333] RDX: 0000200000000000 RSI: 0000000000008933 RDI: 0000000000000007 [ 1259.274190][T21333] RBP: 00007f9559e13f91 R08: 0000000000000000 R09: 0000000000000000 [ 1259.274201][T21333] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1259.274211][T21333] R13: 00007f9559fe6038 R14: 00007f9559fe5fa0 R15: 00007ffc10ac04a8 [ 1259.274233][T21333] [ 1259.274257][T21333] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1260.898852][T21239] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1261.117669][T21239] 8021q: adding VLAN 0 to HW filter on device team0 [ 1261.392868][T18292] bridge0: port 1(bridge_slave_0) entered blocking state [ 1261.400068][T18292] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1261.589302][T18292] bridge0: port 2(bridge_slave_1) entered blocking state [ 1261.596466][T18292] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1261.874515][T21239] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1262.124113][T21239] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1262.822001][T21349] zswap: compressor not available [ 1265.219524][T21239] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1265.591786][T21373] FAULT_INJECTION: forcing a failure. [ 1265.591786][T21373] name failslab, interval 1, probability 0, space 0, times 0 [ 1265.668864][T21239] veth0_vlan: entered promiscuous mode [ 1265.796946][T21378] netlink: 1140 bytes leftover after parsing attributes in process `syz.8.3266'. [ 1265.810275][T21239] veth1_vlan: entered promiscuous mode [ 1265.935604][T21373] CPU: 1 UID: 0 PID: 21373 Comm: syz.8.3266 Tainted: G I syzkaller #0 PREEMPT(full) [ 1265.935636][T21373] Tainted: [I]=FIRMWARE_WORKAROUND [ 1265.935643][T21373] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1265.935653][T21373] Call Trace: [ 1265.935660][T21373] [ 1265.935667][T21373] dump_stack_lvl+0x16c/0x1f0 [ 1265.935694][T21373] should_fail_ex+0x512/0x640 [ 1265.935720][T21373] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 1265.935739][T21373] should_failslab+0xc2/0x120 [ 1265.935764][T21373] kmem_cache_alloc_noprof+0x75/0x6e0 [ 1265.935783][T21373] ? skb_clone+0x190/0x3f0 [ 1265.935804][T21373] ? skb_clone+0x190/0x3f0 [ 1265.935819][T21373] skb_clone+0x190/0x3f0 [ 1265.935837][T21373] netlink_deliver_tap+0xabd/0xd30 [ 1265.935860][T21373] netlink_unicast+0x64c/0x870 [ 1265.935882][T21373] ? __pfx_netlink_unicast+0x10/0x10 [ 1265.935909][T21373] netlink_sendmsg+0x8c8/0xdd0 [ 1265.935932][T21373] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1265.935953][T21373] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 1265.935983][T21373] ____sys_sendmsg+0xa98/0xc70 [ 1265.936006][T21373] ? copy_msghdr_from_user+0x10a/0x160 [ 1265.936023][T21373] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1265.936050][T21373] ? __pfx_futex_wake_mark+0x10/0x10 [ 1265.936081][T21373] ___sys_sendmsg+0x134/0x1d0 [ 1265.936100][T21373] ? __pfx____sys_sendmsg+0x10/0x10 [ 1265.936115][T21373] ? __lock_acquire+0x622/0x1c90 [ 1265.936166][T21373] __sys_sendmsg+0x16d/0x220 [ 1265.936184][T21373] ? __pfx___sys_sendmsg+0x10/0x10 [ 1265.936200][T21373] ? __x64_sys_futex+0x1e0/0x4c0 [ 1265.936247][T21373] do_syscall_64+0xcd/0xfa0 [ 1265.936270][T21373] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1265.936288][T21373] RIP: 0033:0x7fd2ae58f7c9 [ 1265.936302][T21373] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1265.936319][T21373] RSP: 002b:00007fd2af351038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1265.936336][T21373] RAX: ffffffffffffffda RBX: 00007fd2ae7e6090 RCX: 00007fd2ae58f7c9 [ 1265.936348][T21373] RDX: 0000000004000040 RSI: 00002000000000c0 RDI: 000000000000000a [ 1265.936358][T21373] RBP: 00007fd2ae613f91 R08: 0000000000000000 R09: 0000000000000000 [ 1265.936369][T21373] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1265.936379][T21373] R13: 00007fd2ae7e6128 R14: 00007fd2ae7e6090 R15: 00007ffe285678d8 [ 1265.936402][T21373] [ 1265.936446][T21378] netlink: 'syz.8.3266': attribute type 2 has an invalid length. [ 1266.339295][T21239] veth0_macvtap: entered promiscuous mode [ 1266.751151][T21239] veth1_macvtap: entered promiscuous mode [ 1267.343051][T21239] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1267.592926][T21239] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1268.042509][T13092] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1268.133771][T13092] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1268.439089][T13092] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1268.816510][T13092] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1269.069473][T21373] netlink: 1140 bytes leftover after parsing attributes in process `syz.8.3266'. [ 1269.205347][T21373] netlink: 'syz.8.3266': attribute type 2 has an invalid length. [ 1269.913336][T13242] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1270.014806][T13242] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1270.238213][T13092] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1270.352389][T13092] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1270.975013][T21401] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1271.025860][T21400] FAULT_INJECTION: forcing a failure. [ 1271.025860][T21400] name failslab, interval 1, probability 0, space 0, times 0 [ 1271.236509][T21400] CPU: 1 UID: 0 PID: 21400 Comm: syz.9.3271 Tainted: G I syzkaller #0 PREEMPT(full) [ 1271.236541][T21400] Tainted: [I]=FIRMWARE_WORKAROUND [ 1271.236548][T21400] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1271.236558][T21400] Call Trace: [ 1271.236564][T21400] [ 1271.236572][T21400] dump_stack_lvl+0x16c/0x1f0 [ 1271.236599][T21400] should_fail_ex+0x512/0x640 [ 1271.236626][T21400] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 1271.236646][T21400] should_failslab+0xc2/0x120 [ 1271.236670][T21400] kmem_cache_alloc_noprof+0x75/0x6e0 [ 1271.236687][T21400] ? seq_open+0x55/0x170 [ 1271.236714][T21400] ? __pfx_blk_mq_debugfs_show+0x10/0x10 [ 1271.236732][T21400] ? seq_open+0x55/0x170 [ 1271.236753][T21400] seq_open+0x55/0x170 [ 1271.236775][T21400] ? __pfx_blk_mq_debugfs_show+0x10/0x10 [ 1271.236793][T21400] single_open+0xfc/0x1f0 [ 1271.236817][T21400] blk_mq_debugfs_open+0xde/0x1b0 [ 1271.236837][T21400] ? __pfx_blk_mq_debugfs_open+0x10/0x10 [ 1271.236854][T21400] full_proxy_open_regular+0x1b9/0x360 [ 1271.236882][T21400] do_dentry_open+0x982/0x1530 [ 1271.236902][T21400] ? __pfx_full_proxy_open_regular+0x10/0x10 [ 1271.236931][T21400] vfs_open+0x82/0x3f0 [ 1271.236958][T21400] path_openat+0x1de4/0x2cb0 [ 1271.236984][T21400] ? __pfx_path_openat+0x10/0x10 [ 1271.237005][T21400] ? __lock_acquire+0xb8a/0x1c90 [ 1271.237030][T21400] do_filp_open+0x20b/0x470 [ 1271.237049][T21400] ? __pfx_do_filp_open+0x10/0x10 [ 1271.237083][T21400] ? alloc_fd+0x471/0x7d0 [ 1271.237106][T21400] do_sys_openat2+0x11b/0x1d0 [ 1271.237130][T21400] ? __pfx_do_sys_openat2+0x10/0x10 [ 1271.237171][T21400] __x64_sys_openat+0x174/0x210 [ 1271.237196][T21400] ? __pfx___x64_sys_openat+0x10/0x10 [ 1271.237230][T21400] do_syscall_64+0xcd/0xfa0 [ 1271.237252][T21400] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1271.237269][T21400] RIP: 0033:0x7f1bda38f7c9 [ 1271.237284][T21400] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1271.237301][T21400] RSP: 002b:00007f1bdb221038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1271.237318][T21400] RAX: ffffffffffffffda RBX: 00007f1bda5e5fa0 RCX: 00007f1bda38f7c9 [ 1271.237330][T21400] RDX: 0000000000002000 RSI: 0000200000000200 RDI: ffffffffffffff9c [ 1271.237340][T21400] RBP: 00007f1bda413f91 R08: 0000000000000000 R09: 0000000000000000 [ 1271.237350][T21400] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1271.237360][T21400] R13: 00007f1bda5e6038 R14: 00007f1bda5e5fa0 R15: 00007ffcfa506138 [ 1271.237382][T21400] [ 1271.785563][T21406] random: crng reseeded on system resumption [ 1273.755273][T21430] FAULT_INJECTION: forcing a failure. [ 1273.755273][T21430] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1273.930930][T21430] CPU: 1 UID: 0 PID: 21430 Comm: syz.8.3276 Tainted: G I syzkaller #0 PREEMPT(full) [ 1273.930962][T21430] Tainted: [I]=FIRMWARE_WORKAROUND [ 1273.930969][T21430] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1273.930978][T21430] Call Trace: [ 1273.930985][T21430] [ 1273.930993][T21430] dump_stack_lvl+0x16c/0x1f0 [ 1273.931020][T21430] should_fail_ex+0x512/0x640 [ 1273.931050][T21430] _copy_from_iter+0x29f/0x1720 [ 1273.931080][T21430] ? __alloc_skb+0x200/0x380 [ 1273.931107][T21430] ? __pfx__copy_from_iter+0x10/0x10 [ 1273.931140][T21430] ? netlink_autobind.isra.0+0x158/0x370 [ 1273.931166][T21430] netlink_sendmsg+0x820/0xdd0 [ 1273.931188][T21430] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1273.931210][T21430] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 1273.931238][T21430] ____sys_sendmsg+0xa98/0xc70 [ 1273.931260][T21430] ? copy_msghdr_from_user+0x10a/0x160 [ 1273.931277][T21430] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1273.931303][T21430] ? __pfx_futex_wake_mark+0x10/0x10 [ 1273.931333][T21430] ___sys_sendmsg+0x134/0x1d0 [ 1273.931351][T21430] ? __pfx____sys_sendmsg+0x10/0x10 [ 1273.931366][T21430] ? __lock_acquire+0x622/0x1c90 [ 1273.931414][T21430] __sys_sendmsg+0x16d/0x220 [ 1273.931431][T21430] ? __pfx___sys_sendmsg+0x10/0x10 [ 1273.931447][T21430] ? __x64_sys_futex+0x1e0/0x4c0 [ 1273.931483][T21430] do_syscall_64+0xcd/0xfa0 [ 1273.931506][T21430] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1273.931523][T21430] RIP: 0033:0x7fd2ae58f7c9 [ 1273.931537][T21430] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1273.931553][T21430] RSP: 002b:00007fd2af372038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1273.931570][T21430] RAX: ffffffffffffffda RBX: 00007fd2ae7e5fa0 RCX: 00007fd2ae58f7c9 [ 1273.931580][T21430] RDX: 0000000000000810 RSI: 0000200000004380 RDI: 0000000000000006 [ 1273.931591][T21430] RBP: 00007fd2ae613f91 R08: 0000000000000000 R09: 0000000000000000 [ 1273.931601][T21430] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1273.931611][T21430] R13: 00007fd2ae7e6038 R14: 00007fd2ae7e5fa0 R15: 00007ffe285678d8 [ 1273.931633][T21430] [ 1274.635240][T13105] Bluetooth: hci11: Opcode 0x0c03 failed: -110 [ 1275.801414][T21430] netlink: 338 bytes leftover after parsing attributes in process `syz.8.3276'. [ 1276.155286][T21437] sp0: Synchronizing with TNC [ 1277.065157][T21453] FAULT_INJECTION: forcing a failure. [ 1277.065157][T21453] name failslab, interval 1, probability 0, space 0, times 0 [ 1277.288126][T21453] CPU: 1 UID: 0 PID: 21453 Comm: syz.8.3281 Tainted: G I syzkaller #0 PREEMPT(full) [ 1277.288158][T21453] Tainted: [I]=FIRMWARE_WORKAROUND [ 1277.288165][T21453] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1277.288175][T21453] Call Trace: [ 1277.288182][T21453] [ 1277.288189][T21453] dump_stack_lvl+0x16c/0x1f0 [ 1277.288217][T21453] should_fail_ex+0x512/0x640 [ 1277.288243][T21453] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 1277.288265][T21453] should_failslab+0xc2/0x120 [ 1277.288289][T21453] kmem_cache_alloc_noprof+0x75/0x6e0 [ 1277.288306][T21453] ? seq_open+0x55/0x170 [ 1277.288333][T21453] ? __pfx_blk_mq_debugfs_show+0x10/0x10 [ 1277.288350][T21453] ? seq_open+0x55/0x170 [ 1277.288372][T21453] seq_open+0x55/0x170 [ 1277.288393][T21453] ? __pfx_blk_mq_debugfs_show+0x10/0x10 [ 1277.288411][T21453] single_open+0xfc/0x1f0 [ 1277.288435][T21453] blk_mq_debugfs_open+0xde/0x1b0 [ 1277.288454][T21453] ? __pfx_blk_mq_debugfs_open+0x10/0x10 [ 1277.288471][T21453] full_proxy_open_regular+0x1b9/0x360 [ 1277.288499][T21453] do_dentry_open+0x982/0x1530 [ 1277.288519][T21453] ? __pfx_full_proxy_open_regular+0x10/0x10 [ 1277.288549][T21453] vfs_open+0x82/0x3f0 [ 1277.288576][T21453] path_openat+0x1de4/0x2cb0 [ 1277.288602][T21453] ? __pfx_path_openat+0x10/0x10 [ 1277.288622][T21453] ? __lock_acquire+0xb8a/0x1c90 [ 1277.288648][T21453] do_filp_open+0x20b/0x470 [ 1277.288667][T21453] ? __pfx_do_filp_open+0x10/0x10 [ 1277.288701][T21453] ? alloc_fd+0x471/0x7d0 [ 1277.288724][T21453] do_sys_openat2+0x11b/0x1d0 [ 1277.288749][T21453] ? __pfx_do_sys_openat2+0x10/0x10 [ 1277.288781][T21453] __x64_sys_openat+0x174/0x210 [ 1277.288807][T21453] ? __pfx___x64_sys_openat+0x10/0x10 [ 1277.288841][T21453] do_syscall_64+0xcd/0xfa0 [ 1277.288864][T21453] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1277.288881][T21453] RIP: 0033:0x7fd2ae58f7c9 [ 1277.288896][T21453] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1277.288912][T21453] RSP: 002b:00007fd2af372038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1277.288928][T21453] RAX: ffffffffffffffda RBX: 00007fd2ae7e5fa0 RCX: 00007fd2ae58f7c9 [ 1277.288939][T21453] RDX: 0000000000002000 RSI: 0000200000000200 RDI: ffffffffffffff9c [ 1277.288950][T21453] RBP: 00007fd2ae613f91 R08: 0000000000000000 R09: 0000000000000000 [ 1277.288960][T21453] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1277.288970][T21453] R13: 00007fd2ae7e6038 R14: 00007fd2ae7e5fa0 R15: 00007ffe285678d8 [ 1277.288991][T21453] [ 1280.466319][T21474] random: crng reseeded on system resumption [ 1280.621510][T21471] FAULT_INJECTION: forcing a failure. [ 1280.621510][T21471] name failslab, interval 1, probability 0, space 0, times 0 [ 1280.836866][T21471] CPU: 1 UID: 0 PID: 21471 Comm: syz.3.3286 Tainted: G I syzkaller #0 PREEMPT(full) [ 1280.836897][T21471] Tainted: [I]=FIRMWARE_WORKAROUND [ 1280.836904][T21471] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1280.836914][T21471] Call Trace: [ 1280.836921][T21471] [ 1280.836929][T21471] dump_stack_lvl+0x16c/0x1f0 [ 1280.836955][T21471] should_fail_ex+0x512/0x640 [ 1280.836981][T21471] ? __kmalloc_cache_noprof+0x5f/0x780 [ 1280.837001][T21471] should_failslab+0xc2/0x120 [ 1280.837025][T21471] __kmalloc_cache_noprof+0x72/0x780 [ 1280.837042][T21471] ? alloc_tty_struct+0x96/0x8c0 [ 1280.837073][T21471] ? alloc_tty_struct+0x96/0x8c0 [ 1280.837097][T21471] alloc_tty_struct+0x96/0x8c0 [ 1280.837118][T21471] ? __pfx_alloc_tty_struct+0x10/0x10 [ 1280.837146][T21471] pty_common_install+0x1c7/0xb30 [ 1280.837176][T21471] ? __pfx_pty_install+0x10/0x10 [ 1280.837204][T21471] tty_init_dev.part.0+0x9c/0x500 [ 1280.837227][T21471] tty_open+0xa4f/0xf90 [ 1280.837253][T21471] ? __pfx_tty_open+0x10/0x10 [ 1280.837273][T21471] ? chrdev_open+0x10b/0x6a0 [ 1280.837298][T21471] ? __pfx_tty_open+0x10/0x10 [ 1280.837318][T21471] chrdev_open+0x234/0x6a0 [ 1280.837338][T21471] ? __pfx_apparmor_file_open+0x10/0x10 [ 1280.837364][T21471] ? __pfx_chrdev_open+0x10/0x10 [ 1280.837386][T21471] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 1280.837410][T21471] do_dentry_open+0x982/0x1530 [ 1280.837431][T21471] ? __pfx_chrdev_open+0x10/0x10 [ 1280.837456][T21471] vfs_open+0x82/0x3f0 [ 1280.837483][T21471] path_openat+0x1de4/0x2cb0 [ 1280.837510][T21471] ? __pfx_path_openat+0x10/0x10 [ 1280.837531][T21471] ? __lock_acquire+0xb8a/0x1c90 [ 1280.837557][T21471] do_filp_open+0x20b/0x470 [ 1280.837576][T21471] ? __pfx_do_filp_open+0x10/0x10 [ 1280.837611][T21471] ? alloc_fd+0x471/0x7d0 [ 1280.837635][T21471] do_sys_openat2+0x11b/0x1d0 [ 1280.837660][T21471] ? __pfx_do_sys_openat2+0x10/0x10 [ 1280.837694][T21471] __x64_sys_openat+0x174/0x210 [ 1280.837720][T21471] ? __pfx___x64_sys_openat+0x10/0x10 [ 1280.837754][T21471] do_syscall_64+0xcd/0xfa0 [ 1280.837777][T21471] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1280.837794][T21471] RIP: 0033:0x7fdcccf8f7c9 [ 1280.837809][T21471] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1280.837825][T21471] RSP: 002b:00007fdccde13038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1280.837842][T21471] RAX: ffffffffffffffda RBX: 00007fdccd1e5fa0 RCX: 00007fdcccf8f7c9 [ 1280.837853][T21471] RDX: 0000000000020000 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 1280.837863][T21471] RBP: 00007fdccd013f91 R08: 0000000000000000 R09: 0000000000000000 [ 1280.837873][T21471] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1280.837884][T21471] R13: 00007fdccd1e6038 R14: 00007fdccd1e5fa0 R15: 00007ffdabaea918 [ 1280.837907][T21471] [ 1286.524750][T21493] zswap: compressor not available [ 1287.037689][T21241] Bluetooth: hci6: command 0x0406 tx timeout [ 1287.219391][T21509] FAULT_INJECTION: forcing a failure. [ 1287.219391][T21509] name failslab, interval 1, probability 0, space 0, times 0 [ 1287.404200][T21509] CPU: 1 UID: 0 PID: 21509 Comm: syz.8.3293 Tainted: G I syzkaller #0 PREEMPT(full) [ 1287.404232][T21509] Tainted: [I]=FIRMWARE_WORKAROUND [ 1287.404239][T21509] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1287.404250][T21509] Call Trace: [ 1287.404256][T21509] [ 1287.404264][T21509] dump_stack_lvl+0x16c/0x1f0 [ 1287.404290][T21509] should_fail_ex+0x512/0x640 [ 1287.404317][T21509] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 1287.404338][T21509] should_failslab+0xc2/0x120 [ 1287.404369][T21509] kmem_cache_alloc_noprof+0x75/0x6e0 [ 1287.404387][T21509] ? vm_area_dup+0x27/0x8d0 [ 1287.404406][T21509] ? vm_area_dup+0x27/0x8d0 [ 1287.404420][T21509] vm_area_dup+0x27/0x8d0 [ 1287.404437][T21509] __split_vma+0x18e/0x1070 [ 1287.404456][T21509] ? __pfx___split_vma+0x10/0x10 [ 1287.404477][T21509] ? flush_tlb_mm_range+0x36a/0x17a0 [ 1287.404504][T21509] ? __page_table_check_ptes_set+0x1ae/0x420 [ 1287.404527][T21509] vms_gather_munmap_vmas+0x1cb/0x1340 [ 1287.404547][T21509] ? move_page_tables+0x140d/0x4230 [ 1287.404567][T21509] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 1287.404583][T21509] ? move_page_tables+0xf9e/0x4230 [ 1287.404612][T21509] do_vmi_align_munmap+0x286/0x7e0 [ 1287.404632][T21509] ? __pfx_do_vmi_align_munmap+0x10/0x10 [ 1287.404681][T21509] do_vmi_munmap+0x204/0x3e0 [ 1287.404701][T21509] move_vma+0xb5f/0x1770 [ 1287.404722][T21509] ? __pfx_move_vma+0x10/0x10 [ 1287.404751][T21509] ? vrm_set_new_addr+0x208/0x290 [ 1287.404770][T21509] mremap_to+0x1b7/0x450 [ 1287.404788][T21509] do_mremap+0x13a8/0x2020 [ 1287.404807][T21509] ? futex_private_hash_put+0x50/0x190 [ 1287.404835][T21509] ? __pfx_do_mremap+0x10/0x10 [ 1287.404856][T21509] ? do_writev+0x218/0x340 [ 1287.404880][T21509] __do_sys_mremap+0x119/0x170 [ 1287.404897][T21509] ? __pfx___do_sys_mremap+0x10/0x10 [ 1287.404920][T21509] ? __x64_sys_futex+0x1e0/0x4c0 [ 1287.404957][T21509] do_syscall_64+0xcd/0xfa0 [ 1287.404980][T21509] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1287.404997][T21509] RIP: 0033:0x7fd2ae58f7c9 [ 1287.405012][T21509] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1287.405028][T21509] RSP: 002b:00007fd2af372038 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 1287.405045][T21509] RAX: ffffffffffffffda RBX: 00007fd2ae7e5fa0 RCX: 00007fd2ae58f7c9 [ 1287.405057][T21509] RDX: 0000000000000004 RSI: 0000000000000004 RDI: 0000200000004000 [ 1287.405067][T21509] RBP: 00007fd2ae613f91 R08: 0000000100000000 R09: 0000000000000000 [ 1287.405077][T21509] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 1287.405087][T21509] R13: 00007fd2ae7e6038 R14: 00007fd2ae7e5fa0 R15: 00007ffe285678d8 [ 1287.405110][T21509] [ 1288.427455][T21241] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 1288.661267][T21241] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 1288.854929][T21241] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 1289.404747][T21241] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 1289.651530][T18292] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1289.675047][T21241] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 1290.651849][T18292] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1291.040016][T18292] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1291.958316][T18292] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1292.074783][T13156] Bluetooth: hci11: command tx timeout [ 1292.237641][T13156] Bluetooth: hci7: command 0x0406 tx timeout [ 1292.243684][T13156] Bluetooth: hci8: command 0x0406 tx timeout [ 1292.779916][T21510] chnl_net:caif_netlink_parms(): no params data found [ 1293.044697][T21528] tipc: Enabling of bearer <@):^\/\> rejected, media not registered [ 1293.801437][T18292] bridge_slave_1: left allmulticast mode [ 1293.877303][T18292] bridge_slave_1: left promiscuous mode [ 1293.883046][T18292] bridge0: port 2(bridge_slave_1) entered disabled state [ 1294.078731][T18292] bridge_slave_0: left allmulticast mode [ 1294.084402][T18292] bridge_slave_0: left promiscuous mode [ 1294.169653][T13105] Bluetooth: hci11: command tx timeout [ 1294.214838][T18292] bridge0: port 1(bridge_slave_0) entered disabled state [ 1296.235149][T13105] Bluetooth: hci11: command tx timeout [ 1297.051933][T18292] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1297.149370][T18292] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1297.236318][T18292] bond0 (unregistering): Released all slaves [ 1297.526793][T21510] bridge0: port 1(bridge_slave_0) entered blocking state [ 1297.644071][T21510] bridge0: port 1(bridge_slave_0) entered disabled state [ 1297.724913][T21510] bridge_slave_0: entered allmulticast mode [ 1297.789184][T21510] bridge_slave_0: entered promiscuous mode [ 1298.196479][T21510] bridge0: port 2(bridge_slave_1) entered blocking state [ 1298.203592][T21510] bridge0: port 2(bridge_slave_1) entered disabled state [ 1298.315914][T13105] Bluetooth: hci11: command tx timeout [ 1298.321649][T21510] bridge_slave_1: entered allmulticast mode [ 1298.386468][T21510] bridge_slave_1: entered promiscuous mode [ 1298.902868][T21510] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1299.035409][ T31] INFO: task syz.7.3138:20679 blocked for more than 143 seconds. [ 1299.043176][ T31] Tainted: G I syzkaller #0 [ 1299.057465][T21510] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1299.165022][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1299.273583][ T31] task:syz.7.3138 state:D stack:27528 pid:20679 tgid:20678 ppid:19956 task_flags:0x400140 flags:0x00080002 [ 1299.472431][ T31] Call Trace: [ 1299.544845][ T31] [ 1299.547845][ T31] __schedule+0x1190/0x5de0 [ 1299.552354][ T31] ? check_path.constprop.0+0x24/0x50 [ 1299.730702][ T31] ? __lock_acquire+0x622/0x1c90 [ 1299.789478][ T31] ? __pfx___schedule+0x10/0x10 [ 1299.794384][ T31] ? find_held_lock+0x2b/0x80 [ 1299.904777][ T31] ? schedule+0x2d7/0x3a0 [ 1299.909160][ T31] ? nfsd_nl_version_set_doit+0xc4/0x7a0 [ 1300.015712][ T31] schedule+0xe7/0x3a0 [ 1300.019834][ T31] schedule_preempt_disabled+0x13/0x30 [ 1300.134643][ T31] __mutex_lock+0x818/0x1060 [ 1300.139281][ T31] ? nfsd_nl_version_set_doit+0xc4/0x7a0 [ 1300.264811][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1300.269895][ T31] ? __nla_validate_parse+0x600/0x2880 [ 1300.374698][ T31] ? __pfx___nla_validate_parse+0x10/0x10 [ 1300.380472][ T31] ? nfsd_nl_version_set_doit+0xc4/0x7a0 [ 1300.492646][ T31] nfsd_nl_version_set_doit+0xc4/0x7a0 [ 1300.574647][ T31] ? __pfx_nfsd_nl_version_set_doit+0x10/0x10 [ 1300.614661][ T31] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 1300.622074][ T31] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 1300.764686][ T31] genl_family_rcv_msg_doit+0x209/0x2f0 [ 1300.770292][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1300.874670][ T31] ? rcu_is_watching+0x12/0xc0 [ 1300.879487][ T31] ? bpf_lsm_capable+0x9/0x10 [ 1300.884174][ T31] ? security_capable+0x7e/0x260 [ 1300.994858][ T31] genl_rcv_msg+0x55c/0x800 [ 1300.999419][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1301.084632][ T31] ? __pfx_nfsd_nl_version_set_doit+0x10/0x10 [ 1301.090747][ T31] netlink_rcv_skb+0x158/0x420 [ 1301.194634][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1301.199703][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1301.298871][ T31] ? netlink_deliver_tap+0x1ae/0xd30 [ 1301.304204][ T31] genl_rcv+0x28/0x40 [ 1301.374783][ T31] netlink_unicast+0x5aa/0x870 [ 1301.379590][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 1301.466071][ T31] netlink_sendmsg+0x8c8/0xdd0 [ 1301.504950][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1301.510270][ T31] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 1301.595454][ T31] ____sys_sendmsg+0xa98/0xc70 [ 1301.600273][ T31] ? copy_msghdr_from_user+0x10a/0x160 [ 1301.704805][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1301.710182][ T31] ? __pfx_futex_wake_mark+0x10/0x10 [ 1301.804828][ T31] ___sys_sendmsg+0x134/0x1d0 [ 1301.809552][ T31] ? find_held_lock+0x2b/0x80 [ 1301.814232][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 1301.936770][ T31] ? __lock_acquire+0x622/0x1c90 [ 1301.941788][ T31] __sys_sendmsg+0x16d/0x220 [ 1302.025983][ T31] ? __pfx___sys_sendmsg+0x10/0x10 [ 1302.031256][ T31] ? __x64_sys_futex+0x1e0/0x4c0 [ 1302.124659][ T31] do_syscall_64+0xcd/0xfa0 [ 1302.129213][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1302.224640][ T31] RIP: 0033:0x7ff6b358f7c9 [ 1302.229098][ T31] RSP: 002b:00007ff6b43f7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1302.324649][ T31] RAX: ffffffffffffffda RBX: 00007ff6b37e5fa0 RCX: 00007ff6b358f7c9 [ 1302.332669][ T31] RDX: 0000000004004000 RSI: 0000200000003200 RDI: 0000000000000003 [ 1302.484911][ T31] RBP: 00007ff6b3613f91 R08: 0000000000000000 R09: 0000000000000000 [ 1302.556824][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1302.624760][ T31] R13: 00007ff6b37e6038 R14: 00007ff6b37e5fa0 R15: 00007fffed6dad48 [ 1302.632780][ T31] [ 1302.727559][ T31] INFO: task syz.6.3144:20706 blocked for more than 147 seconds. [ 1302.904800][ T31] Tainted: G I syzkaller #0 [ 1302.911344][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1303.062225][ T31] task:syz.6.3144 state:D stack:27448 pid:20706 tgid:20705 ppid:19445 task_flags:0x400140 flags:0x00080002 [ 1303.184617][ T31] Call Trace: [ 1303.187942][ T31] [ 1303.190916][ T31] __schedule+0x1190/0x5de0 [ 1303.284886][ T31] ? check_path.constprop.0+0x24/0x50 [ 1303.290328][ T31] ? __lock_acquire+0x622/0x1c90 [ 1303.390355][ T31] ? __pfx___schedule+0x10/0x10 [ 1303.429882][ T31] ? find_held_lock+0x2b/0x80 [ 1303.471819][ T31] ? schedule+0x2d7/0x3a0 [ 1303.510355][ T31] ? nfsd_shutdown_threads+0x5b/0xf0 [ 1303.564665][ T31] schedule+0xe7/0x3a0 [ 1303.568791][ T31] schedule_preempt_disabled+0x13/0x30 [ 1303.664654][ T31] __mutex_lock+0x818/0x1060 [ 1303.714779][ T31] ? __lock_acquire+0x622/0x1c90 [ 1303.719788][ T31] ? nfsd_shutdown_threads+0x5b/0xf0 [ 1303.814646][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1303.819724][ T31] ? net_generic+0xea/0x2a0 [ 1303.824244][ T31] ? nfsd_shutdown_threads+0x5b/0xf0 [ 1303.944832][ T31] nfsd_shutdown_threads+0x5b/0xf0 [ 1303.950017][ T31] nfsd_umount+0x48/0xe0 [ 1303.954274][ T31] deactivate_locked_super+0xc1/0x1a0 [ 1304.079256][ T31] deactivate_super+0xde/0x100 [ 1304.134618][ T31] cleanup_mnt+0x225/0x450 [ 1304.139075][ T31] task_work_run+0x150/0x240 [ 1304.143680][ T31] ? __pfx_task_work_run+0x10/0x10 [ 1304.274989][ T31] ? __pfx___x64_sys_mount+0x10/0x10 [ 1304.280325][ T31] exit_to_user_mode_loop+0xec/0x130 [ 1304.364814][ T31] do_syscall_64+0x426/0xfa0 [ 1304.369453][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1304.454696][ T31] RIP: 0033:0x7f70f958f7c9 [ 1304.459162][ T31] RSP: 002b:00007f70fa3f9038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1304.574659][ T31] RAX: fffffffffffffffe RBX: 00007f70f97e5fa0 RCX: 00007f70f958f7c9 [ 1304.582664][ T31] RDX: 0000200000000100 RSI: 00002000000000c0 RDI: 0000000000000000 [ 1304.715850][ T31] RBP: 00007f70f9613f91 R08: 0000000000000000 R09: 0000000000000000 [ 1304.723875][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1304.869846][ T31] R13: 00007f70f97e6038 R14: 00007f70f97e5fa0 R15: 00007ffd32d60018 [ 1304.934680][ T31] [ 1305.014684][ T31] [ 1305.014684][ T31] Showing all locks held in the system: [ 1305.022430][ T31] 1 lock held by khungtaskd/31: [ 1305.164825][ T31] #0: ffffffff8e3c45e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0 [ 1305.274989][ T31] 2 locks held by kworker/1:4/5890: [ 1305.280217][ T31] #0: ffff88813ff15948 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 1305.448363][ T31] #1: ffffc9000456fd00 (free_ipc_work){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 1305.459289][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1305.465674][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1305.534602][ T31] 2 locks held by kworker/u10:4/13138: [ 1305.540095][ T31] #0: ffff88813ff29148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 1305.734791][ T31] #1: ffff8880b8524088 (psi_seq){-.-.}-{0:0}, at: __schedule+0x1861/0x5de0 [ 1305.743564][ T31] 2 locks held by syz.4.1989/15528: [ 1305.858906][ T31] #0: ffff88806018e0e0 (&type->s_umount_key#52){++++}-{4:4}, at: deactivate_super+0xd6/0x100 [ 1305.974828][ T31] #1: ffffffff8e7ed348 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 1305.984478][ T31] 5 locks held by kworker/u10:10/18292: [ 1306.144696][ T31] #0: ffff88801ba9f148 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 1306.254613][ T31] #1: ffffc90004a9fd00 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 1306.344784][ T31] #2: ffffffff900d52b0 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xad/0x8b0 [ 1306.354166][ T31] #3: ffffffff900eb6c8 (rtnl_mutex){+.+.}-{4:4}, at: wiphy_unregister+0x13d/0xc50 [ 1306.514784][ T31] #4: ffff88805dad0788 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: wiphy_unregister+0x147/0xc50 [ 1306.594666][ T31] 3 locks held by kworker/u10:12/18294: [ 1306.600242][ T31] #0: ffff888030d69948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 1306.756421][ T31] #1: ffffc90003eefd00 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 1306.864738][ T31] #2: ffffffff900eb6c8 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x12/0x30 [ 1306.874286][ T31] 1 lock held by syz.1.2823/19276: [ 1307.004800][ T31] 2 locks held by syz.5.2942/19853: [ 1307.010038][ T31] #0: ffffffff9018f490 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1307.134682][ T31] #1: ffffffff8e7ed348 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x687/0xbc0 [ 1307.234822][ T31] 2 locks held by getty/20629: [ 1307.239657][ T31] #0: ffff88803528d0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 1307.363522][ T31] #1: ffffc90002fd22f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x14f0 [ 1307.454769][ T31] 2 locks held by syz.7.3138/20679: [ 1307.504815][ T31] #0: ffffffff9018f490 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1307.513041][ T31] #1: ffffffff8e7ed348 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_version_set_doit+0xc4/0x7a0 [ 1307.664777][ T31] 2 locks held by syz.6.3144/20706: [ 1307.734697][ T31] #0: ffff88805a2600e0 (&type->s_umount_key#52){++++}-{4:4}, at: deactivate_super+0xd6/0x100 [ 1307.824989][ T31] #1: ffffffff8e7ed348 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 1307.915544][ T31] 2 locks held by syz-executor/20776: [ 1307.920961][ T31] #0: ffff88805b41e0e0 (&type->s_umount_key#52){++++}-{4:4}, at: deactivate_super+0xd6/0x100 [ 1308.054657][ T31] #1: ffffffff8e7ed348 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 1308.064321][ T31] 2 locks held by syz.2.3203/21060: [ 1308.194668][ T31] #0: ffff88801c3480e0 (&type->s_umount_key#52){++++}-{4:4}, at: deactivate_super+0xd6/0x100 [ 1308.294791][ T31] #1: ffffffff8e7ed348 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 1308.304442][ T31] 2 locks held by syz.3.3291/21497: [ 1308.429606][ T31] #0: ffff8880753ce0e0 (&type->s_umount_key#52){++++}-{4:4}, at: deactivate_super+0xd6/0x100 [ 1308.524651][ T31] #1: ffffffff8e7ed348 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 1308.534312][ T31] 2 locks held by syz-executor/21510: [ 1308.654884][ T31] #0: ffffffff8f492c00 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x113/0x2c0 [ 1308.664522][ T31] #1: ffffffff900eb6c8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x600/0x2000 [ 1308.763743][ T31] 1 lock held by syz.9.3298/21533: [ 1308.875099][ T31] #0: ffffffff8e3cfb78 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x1a3/0x3c0 [ 1308.964696][ T31] 5 locks held by syz.8.3302/21552: [ 1308.969925][ T31] #0: ffff8880334d0dc8 (&hdev->req_lock){+.+.}-{4:4}, at: hci_dev_do_close+0x26/0x90