last executing test programs: 6m8.289928071s ago: executing program 32 (id=550): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x1e, 0x1, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/stable_node_dups\x00', 0x20000, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000280)=""/222, 0xde) openat$auto_tracing_mark_raw_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/trace_marker_raw\x00', 0xc05, 0x0) writev$auto(r0, &(0x7f0000000100)={0x0, 0x6}, 0x8) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ipvs(&(0x7f00000009c0), 0xffffffffffffffff) close_range$auto(0x2, 0x8, 0x0) socket(0x1e, 0x4, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/kernel/task_delayacct\x00', 0x82080, 0x0) mmap$auto(0x0, 0x2000d, 0x4000000200dc, 0xeb1, 0x404, 0x7fff) socket(0x10, 0x5, 0x0) socket(0x1a, 0x2, 0x0) sysfs$auto(0x2, 0x40, 0x0) r1 = fsopen$auto(0x0, 0x1) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x0) io_uring_setup$auto(0x67bb, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) socket(0xa, 0x2, 0x0) r2 = socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) socket(0x2a, 0x6, 0x84) r3 = io_uring_setup$auto(0x6, 0x0) r4 = socket(0xa, 0x2, 0x88) r5 = bpf$auto(0x0, &(0x7f0000000000)=@link_update={r4, @new_map_fd=r1, 0x8, @old_map_fd=r2}, 0x100) bpf$auto(0x4, &(0x7f0000000040)=@link_update={r5, @new_prog_fd=r6, 0x1, @old_prog_fd=r3}, 0x7) r7 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x90000, 0x0) ioctl$auto_UI_SET_MSCBIT(r7, 0x40045568, &(0x7f00000000c0)=0x3) socket$nl_generic(0x10, 0x3, 0x10) 3m38.887333944s ago: executing program 33 (id=1061): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) listen$auto(0x3, 0x81) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000000200), r1) sendmsg$auto_IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x18, r2, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x20000001}, 0x40c0) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) madvise$auto(0x0, 0x240007, 0x19) prctl$auto(0x1000000003b, 0x1, 0x4, 0x2, 0x7) madvise$auto(0x0, 0x2003f2, 0x15) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(r3, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x24048084) madvise$auto(0x0, 0x200007, 0x19) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/kfence/parameters/sample_interval\x00', 0x102, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x101001, 0x0) bpf$auto(0x2, 0x0, 0x1) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000001c0), 0x101000, 0x0) ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) r5 = openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f0000000340), 0x80200, 0x0) pread64$auto(r5, &(0x7f0000000240)='\x03W\x96l\x15\x00'/21, 0x100000002, 0x100000001) 3m37.934207838s ago: executing program 34 (id=1062): write$auto(0xffffffffffffffff, 0x0, 0x80000000) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) r0 = io_uring_setup$auto(0x1d48, &(0x7f0000000340)={0x7fffffff, 0x10, 0x2, 0x6, 0x7, 0x8, 0xffffffffffffffff, [], {0x6, 0x88, 0x1, 0x80000000, 0x100, 0x83, 0x101, 0x6, 0x8000000000000001}, {0x100, 0x1, 0x10000052, 0x5, 0x11, 0x101, 0x876c5, 0xc9, 0x3}}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff) setgroups$auto(0x8, 0x0) set_mempolicy$auto(0x8003, &(0x7f0000000280)=0x7b, 0x4) r3 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000000180), 0x1541, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0xa, 0x1, 0x44b, 0xce9, 0x5, 0x1007181, 0xd1, 0x7, 0x7, 0x7ff, 0x800c, 0x2, 0x4, 0x80200000000001, 0x381, 0xde3, 0x800000000008, 0x0, 0x10000002, 0x4, 0x39, 0xe, 0x22000, 0x1fc, 0x0, 0xc3f, 0x9, 0x2, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x104, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44cd98b, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, 0x0, 0x0, 0x1, 0x0, 0x2, 0x3, 0x0, 0x4]}, 0xa, 0xd) ioctl$auto__ctl_fops_dm_ioctl(r3, 0xfffffffffffffd02, &(0x7f00000001c0)) sendmsg$auto_NFSD_CMD_THREADS_SET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)={0x30, r2, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NFSD_A_SERVER_SCOPE={0x9, 0x4, 'nfsd\x00'}, @NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0x85}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x2}]}, 0x30}}, 0x4000) io_uring_register$auto(r0, 0x18, 0x0, 0x9) timer_create$auto(0x0, 0x0, 0x0) r4 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r4, 0x0, 0x0) mmap$auto(0x6, 0x4, 0x4000000000dd, 0x40eb1, r4, 0x300000000000) mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r5 = socket(0x22, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x80044942, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x17) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_ETHTOOL_MSG_MM_GET(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x14, 0x0, 0x301, 0x70bd28, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x44808}, 0x2004c894) unshare$auto(0x40000080) mmap$auto(0x0, 0x2020009, 0x2, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) mlock$auto(0xfbea, 0x7fffffffffffffff) 2m26.570580023s ago: executing program 3 (id=1351): mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) write$auto(0xca, &(0x7f0000000000)='\x04>\x01\x01\x00\x00\x00\x01\x00\xb6', 0x9) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/firmware/acpi/interrupts/gpe02\x00', 0x2, 0x0) r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/net/ipv6/conf/wg0/ioam6_id\x00', 0x242, 0x0) mmap$auto(0x0, 0x40009, 0x400df, 0x10, 0x7, 0x28000) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) unshare$auto(0x40000080) ioprio_get$auto(0x3, 0x0) unlink$auto(&(0x7f0000000000)='./file0\x00') sendfile$auto(r1, r0, 0x0, 0x7fffe000) 2m25.550868384s ago: executing program 3 (id=1354): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_proc_clear_refs_operations_internal(0xffffffffffffff9c, &(0x7f0000000600)='/proc/thread-self/clear_refs\x00', 0x2, 0x0) pidfd_send_signal$auto_PIDFD_SIGNAL_PROCESS_GROUP(r0, 0x6e, &(0x7f00000002c0)={@_si_pad}, 0x4) io_submit$auto(0x2, 0x0, &(0x7f0000000040)=&(0x7f0000000000)={0x7fff, 0xb, 0x80008, 0x3, 0x4, 0x3b, 0x2, 0x2, 0x1002, 0x0, 0x7}) writev$auto(0xc8, &(0x7f00000028c0)={&(0x7f0000000000), 0x200}, 0x9) r1 = open(&(0x7f0000000040)='./cgroup.cpu/cgroup.procs\x00', 0x101840, 0x33903f3ada88772b) read$auto(r1, 0x0, 0x1) write$auto(0x3, 0x0, 0xffd8) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r3 = fcntl$getown(0xffffffffffffffff, 0x9) prctl$auto_PR_SET_MM_ARG_START(0xa, 0x8, r3, 0x3, 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_START_P2P_DEVICE(r1, &(0x7f00000005c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000380)={0x228, r2, 0x100, 0x70bd25, 0x25dfdbfb, {}, [@NL80211_ATTR_WIPHY_RETRY_SHORT={0x5, 0x3d, 0x8}, @NL80211_ATTR_WIPHY_TXQ_PARAMS={0x1b2, 0x25, 0x0, 0x1, [@generic="d6264fa54b60a26ebda75b1dcb22177e6a1ec31752eb144a0813458b0c39b4245fd333c3180b98f55787f32984771366a5f015d29082ad3cd1345e68aa909fcbc6e2113d45876bdcc3c4fa3daebf4e065552abbdc513f465d2e144751b2d743409871c8041e5a7ee8071125e839f948c08ca9bf006c49deccb1e2bb3a6367b204b7a8d11ad46fefa2d03cfdbbec0dcebabc5be12e09f8fcf1b71fb4dbf67642e937f5f923fd956788625b3cb60f8faf748c9bc2fa56dfbcbb8760bdd5110c0f6b72ca2e0113c63f84b919be85901e1e2c83068f90574d6", @typed={0x8, 0x88, 0x0, 0x0, @pid=r3}, @typed={0xc1, 0x33, 0x0, 0x0, @binary="13ad3f1fcaed0823b73da636ec62a670a9d13d6fade3b47a98d87d10a618f325b74cea5a65097fd450df7fea9746d3a0a71fcba089d3fec85e991d608048ff7f920dd93f2ca0d1b92c36b95df6115a823fb8b64feba311539f0f637f5e019cb09ef6b068812262702be0c4d993e701047b10a3753c45b83c7609513506e0069d3d0eda9531c6586bc3b4ab7832ac47dc9cb29b2560849bcefa00e6389d3831826b703b1afbea04ad4f564796510972b046efa0663d068c1a3bea2f144b"}, @generic="d43cbffe571bb2c92bb0a0"]}, @NL80211_ATTR_HE_6GHZ_CAPABILITY={0x53, 0x125, "cfd8a5425086513fd6547ac5638f453af96ab0a11526de169ed67ce2e1664be04cefa14c12825631b1b992ec18e27ac4e7cbf0b7108e2296f8fba41298bdaad9bc25f4e2b9fd865674ae5f3e05b82b"}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}]}, 0x228}, 0x1, 0x0, 0x0, 0x48c1}, 0x20000001) ioctl$auto_BLKRRPART(0xffffffffffffffff, 0x125f, 0x700000000000000) r4 = socket(0x10, 0x2, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x6, 0x1, 0x9, 0x7, 0x3d, 0x3ff, 0x1ffde, 0x7, 0x6, 0x2, 0x9, 0x43, 0x6, 0x4, 0xb2, 0x9, 0x3, 0xfffc, 0x80, 0x7, 0x40000, 0x7, 0x2000, 0x200, 0x0, 0x81, 0x0, 0x7, 0x0, 0x0, 0x10000, [0x1000000001, 0x0, 0x6, 0x0, 0x0, 0x3, 0x2, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x2000000]}, 0x202, 0xd) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="10002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) sendmmsg$auto(r4, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x5}, 0x7, 0x0) 2m25.247848322s ago: executing program 3 (id=1355): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket(0xa, 0x3, 0x3b) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x10, 0x2, 0x15) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) r1 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x8001, 0x3, 0x4000eb1, 0xffffffffffffffff, 0x8003) io_uring_setup$auto(0x6, 0x0) r2 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/fb0\x00', 0x20401, 0x0) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000280)='/proc/asound/modules\x00', 0x88400, 0x0) read$auto_proc_reg_file_ops_compat_inode(r3, &(0x7f0000000040)=""/209, 0xd1) ioctl$auto_FBIOPUT_VSCREENINFO(r2, 0x4601, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x20000, 0x0) sendmsg$auto_SMC_NETLINK_GET_DEV_SMCD(r1, &(0x7f0000004380)={0x0, 0x0, &(0x7f0000004340)={&(0x7f0000004300)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB='\v'], 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x810) syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000300), r1) read$auto(r1, &(0x7f0000000100)='nl80211\x00', 0xbe62) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="72010000", @ANYBLOB="12"], 0x1ac}}, 0x40000) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000340)='/dev/v4l-subdev2\x00', 0x80000, 0x0) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) getsockopt$auto(r0, 0x29, 0x30, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) socket(0xa, 0x3, 0x3b) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) socket(0x10, 0x2, 0x15) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) mmap$auto(0x0, 0x8001, 0x3, 0x4000eb1, 0xffffffffffffffff, 0x8003) (async) io_uring_setup$auto(0x6, 0x0) (async) openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/fb0\x00', 0x20401, 0x0) (async) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000280)='/proc/asound/modules\x00', 0x88400, 0x0) (async) read$auto_proc_reg_file_ops_compat_inode(r3, &(0x7f0000000040)=""/209, 0xd1) (async) ioctl$auto_FBIOPUT_VSCREENINFO(r2, 0x4601, 0x0) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x20000, 0x0) (async) sendmsg$auto_SMC_NETLINK_GET_DEV_SMCD(r1, &(0x7f0000004380)={0x0, 0x0, &(0x7f0000004340)={&(0x7f0000004300)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB='\v'], 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x810) (async) syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000300), r1) (async) read$auto(r1, &(0x7f0000000100)='nl80211\x00', 0xbe62) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="72010000", @ANYBLOB="12"], 0x1ac}}, 0x40000) (async) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000340)='/dev/v4l-subdev2\x00', 0x80000, 0x0) (async) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) (async) getsockopt$auto(r0, 0x29, 0x30, 0x0, 0x0) (async) 2m24.827324172s ago: executing program 3 (id=1357): r0 = ioctl$auto_NS_GET_USERNS(0xffffffffffffffff, 0xb701, 0x0) r1 = signalfd$auto(r0, &(0x7f0000000040)={0x498}, 0x3) mq_getsetattr$auto(r1, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x5, 0x402634}, &(0x7f0000000100)={0x5, 0x101, 0x2, 0x4}) flistxattr$auto(r0, &(0x7f0000000000)='/dev/pts/ptmx\x00', 0x7) mmap$auto(0x0, 0x7fffffff, 0x3, 0x15, r1, 0x9db) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f00000001c0)='}[,&*}\x00', &(0x7f0000000080)='nfsd\x00', 0x3, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='}[,&*}\x00', &(0x7f0000000080)={0x220000, 0x0, 0x10}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x3, 0x100) r3 = socketpair$auto(0x8, 0x7, 0x1, 0x0) r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0) ioctl$auto_TIOCSETD2(r4, 0x5423, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ram15\x00', 0x143282, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/vm/overcommit_ratio\x00', 0x202, 0x0) getsockopt$auto_SO_BSDCOMPAT(r2, 0x21b7, 0xe, &(0x7f0000000240)='/dev/pts/ptmx\x00', &(0x7f0000000280)=0x20000000) r5 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/mptcp/pm_type\x00', 0xe0002, 0x0) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001140)='/sys/devices/virtual/block/zram0/comp_algorithm\x00', 0x20b42, 0x0) sendfile$auto(r6, 0x3, 0x0, 0x7) sendfile$auto(0x1, r5, 0x0, 0xc01) write$auto(r5, &(0x7f0000000000)='/proc/keys\x00', 0x26c) openat$auto_evm_key_ops_evm_secfs(0xffffffffffffff9c, &(0x7f0000000140), 0x200, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0xa, 0x3e, 0xfffffffffffffffa, 0x1ffde, 0x6, 0x6, 0x5, 0x9, 0x20003, 0xf830, 0x7, 0xb4, 0x9, 0x3, 0x10000, 0x80, 0x7, 0x0, 0x8000007, 0x2000, 0x460000, 0x0, 0x40084, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0xb, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8, 0x0, 0x4000000000000000, 0x0, 0x0, 0x0, 0x0, 0xb8a0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000]}, 0x1fe, 0x200c) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000226bd7000fedbdf25030000000800030004020000060007000080000008000200", @ANYRES32=0x0, @ANYBLOB="0a00050000000000000000000a00010000000000000000000a0001000000000000000000060007000100000008000200", @ANYRES32=0x0, @ANYBLOB='\b\x00\n'], 0x68}, 0x1, 0x0, 0x0, 0x40080}, 0x40090) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0f0026bd7000fcdbdf9907"], 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="1e00df45", @ANYRES32=r7], 0x1ac}}, 0x0) sendmsg$auto_NL802154_CMD_GET_SEC_DEV(r3, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="b6bc8e7ee17daac6f5aa76b70280202e4f00fa00", @ANYRES16=0x0, @ANYBLOB="00042cbd7000ffdbdf251900000005001f00080000000500120009000000"], 0x24}}, 0x80) socket(0x10, 0x2, 0x0) 2m24.452587846s ago: executing program 3 (id=1359): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/nbd3/queue/iosched/write_expire\x00', 0x20681, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) madvise$auto(0x0, 0xfffffffffffefffd, 0x17) madvise$auto(0x0, 0x20499d, 0x9) madvise$auto(0xd, 0x1, 0x2) capset$auto(&(0x7f0000000200)={0x20080522}, 0x0) semctl$auto_GETPID(0x0, 0x3, 0xb, 0x9) socket(0x2, 0x3, 0xa) 2m9.31521067s ago: executing program 35 (id=1359): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/nbd3/queue/iosched/write_expire\x00', 0x20681, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) madvise$auto(0x0, 0xfffffffffffefffd, 0x17) madvise$auto(0x0, 0x20499d, 0x9) madvise$auto(0xd, 0x1, 0x2) capset$auto(&(0x7f0000000200)={0x20080522}, 0x0) semctl$auto_GETPID(0x0, 0x3, 0xb, 0x9) socket(0x2, 0x3, 0xa) 2m8.689382395s ago: executing program 5 (id=1421): socket(0x2, 0x1, 0x0) r0 = openat$auto_sync_info_debugfs_fops_(0xffffffffffffff9c, &(0x7f0000000180), 0x2000, 0x0) read$auto(r0, &(0x7f0000000080)='\xbb\x00', 0x3) sysfs$auto(0x2, 0x0, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) r1 = socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0xc02, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, r1, 0x300000000000) socket(0xa, 0x3, 0x945) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x1c9201, 0x0) bpf$auto_BPF_LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000200)=@batch={0xfffffffffffffffd, 0x1, 0x8, 0x10001, 0xd9, 0xffffffffffffffff, 0x1, 0xff}, 0x2) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r3, &(0x7f0000004000)={0x0, 0x0, &(0x7f0000003fc0)={0x0}, 0x1, 0x0, 0x0, 0x810}, 0x10) mq_open$auto(&(0x7f0000000400)='\x12\xe6D\b\x9e\x00\x80\x8d\f\xb9w-\xbd!\x9eb\xed\xfb\x0f{\x14S\xc4\xd1\x01gBV\x91\x8f_\xc0.\x84\xfe\x84\xd1s\x05\x01\x06\x00\xb3\x13_Y&\xa9\x88\xe4\xa2\xb0V\x85\x92<\xb6\xdcT \\\xf2\v\xb1\xe2\xd8\xfa\xd8V\xe5\x00\xfa\xe9\xdc\x91<\xce\x18=\x06\xdagq\xb5\r\t\xb2\xde\x99\xd50\xbb\x192\x1c4\x86\xc0\xc1-\xd5\x10\xc3\xfc*[8\x89h\xc5\xba\xff\xc8u5srQ', 0xa7c, 0xc, 0x0) close_range$auto(0x0, 0xfffffffffffff001, 0x2) socket(0x11, 0x80003, 0x300) socket(0x29, 0x5, 0x0) open(&(0x7f0000000040)='./cgroup\x00', 0x80, 0xb5d1af1605322de0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda1\x00', 0x0, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff011) write$auto(r2, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) 2m7.2983769s ago: executing program 5 (id=1425): r0 = openat$auto_nvmf_dev_fops_fabrics(0xffffffffffffff9c, &(0x7f0000000540), 0x80080, 0x0) r1 = mq_open$auto(&(0x7f00000004c0)='\\*)A\x008\x92\xa6\x18?5\xae\x9eD/\xcb\x8f\xae\xc86\x9e\xf5h4\x14\x1c\x82s|?\n\xf0GZ\xad\x1ch\xd3\xdd[v\xa4\xc4\ah\x95\xb5\x06\x167\x9b%w]\xf4\x97lo\xbdQ\x14}L\xad\x1a\x97\x1fV\xb1\x01\xe6jh1\xea\xad+\xfd\xd7\xc5\\\x8c\xef\xc9\x9fd\bt\x85\x97@\xfa&\x85\xe4\x93W\xae\x9f\xe1\x0f\xd7\xf3\x97>\xea55f\xbb\x1b\x1a\x8eA|-\xaaZ\xa0\x00\x00\x00\x00\x00\x00\x11\xe3\xe7w\xbe\xeen\x8a\x12\xda\xae\xfe\r|\x8f\xd1\xa0\xb64\x86\x14\x9c,!\x8a\xd9\xa7\xc5\x12Y\a\xe7^,\xc5+\xf0\xb9_vD\xffr\nz\xd9>\x1a.\f\x1d\x81\x8f\x84\xa89\x92\xe4\x1en\xe9\xa0\rV3f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) r5 = fsopen$auto(0x0, 0x1) read$auto_tracing_buffers_fops_trace(r2, &(0x7f0000000980)=""/190, 0xbe) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x3, 0x1ff, 0x1001, 0x9, 0x717e, 0x0, 0x7, 0x200000000000003, 0xd, 0x2, 0x80003, 0x4, 0x1ffffffffffd, 0xb5, 0xfffffffffffffffe, 0x7, 0x10002, 0x7f, 0x2a2, 0x5, 0xa, 0x22000, 0x200, 0x4, 0x84, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, [0x56, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x400, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb5, 0x1, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0xffffffffffffffff, 0x100000000000]}, 0x1fe, 0xd) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000500)={'netdevsim0\x00'}) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/devices/virtual/net/lapb3/testing\x00', 0xa880, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r6, &(0x7f0000000300)=""/84, 0x54) io_uring_setup$auto(0x2, &(0x7f0000000900)={0x401, 0x10000, 0x9, 0x5, 0x8, 0x710be868, r5, [0x2, 0x4, 0x7], {0xfffffff7, 0x0, 0x9, 0x6, 0x404, 0x401, 0x400, 0x7, 0x5}, {0x80000001, 0x0, 0x3, 0x1, 0x4, 0x3, 0x5, 0x76, 0x4}}) r7 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f00000003c0), 0x1541, 0x0) sendmsg$auto_MACSEC_CMD_GET_TXSC(r4, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="1f8829bd7000fbdbdf25d2380000"], 0x14}, 0x1, 0x0, 0x0, 0x4048046}, 0x94) pread64$auto(r3, &(0x7f00000008c0)='/dev/mapper/control\x00', 0x3, 0x5) ioctl$auto__ctl_fops_dm_ioctl(r7, 0xfffffffffffffd03, &(0x7f00000001c0)) socket(0x15, 0x5, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) read$auto_debugfs_devm_entry_ops_file(r5, &(0x7f0000000400)=""/208, 0xd0) syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'erspan0\x00'}) 2m6.475739241s ago: executing program 5 (id=1429): mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) r0 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) r1 = getpid() process_vm_readv$auto(r1, &(0x7f0000000000)={0x0, 0xfff}, 0x40000000001, &(0x7f0000000180)={&(0x7f0000000140), 0x40000000001243}, 0xa, 0x0) bpf$auto_BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)=@task_fd_query={r1, r0, 0x80000000, 0x0, 0x7, 0x0, r0, 0x6, 0x5}, 0x7f) getrandom$auto(0x0, 0xffffffffff60001f, 0x3) read$auto(0xffffffffffffffff, 0x0, 0x20) seccomp$auto(0x2, 0x10, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) socket(0xa, 0x1, 0x84) listen$auto(0x3, 0x81) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}, 0x54) set_mempolicy$auto(0x6005, &(0x7f0000000040)=0x5, 0x4) bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x9, 0x21eb, 0x7ff, 0x6, 0xa, 0x1000009, 0x5f, 0x0, 0x3}, 0x6f3) ioctl$auto(r0, 0x400454ca, 0x38) io_uring_setup$auto(0xe, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0x7ffffffff0fe}, 0x1) close_range$auto(0x2, 0xa, 0x0) socketpair$auto(0xbcc4, 0x1, 0xc8f, &(0x7f0000000140)=0x10001) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x40, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x400, 0x0) 2m5.46782001s ago: executing program 5 (id=1432): mmap$auto(0x0, 0x20009, 0xe3, 0x100000eb5, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) set_mempolicy$auto(0x6, &(0x7f0000000080)=0x3, 0x21) r0 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cec4\x00', 0x181f82, 0x0) ioctl$auto_CEC_TRANSMIT(r0, 0xc0386105, &(0x7f0000000040)={0x40000000001, 0xfffffffffffffffe, 0x2, 0xffffffff, 0x4e3, 0xffffffff, '\x00', 0xa, 0x26, 0x82, 0x5, 0x4, 0x5, 0x3}) unshare$auto(0x40000080) madvise$auto(0x0, 0x0, 0x5) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x20500, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r2 = open(&(0x7f0000000000)='./cgroup\x00', 0x4201, 0x64) madvise$auto_MADV_DODUMP(0x8, 0x5, 0x11) setsockopt$auto_SO_TIMESTAMPING_NEW(r2, 0x6, 0x41, &(0x7f0000000040)=']\x00', 0x6) r3 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r4 = prctl$auto(0x3e, 0x0, 0x4, 0x8, 0x7fe) r5 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/net/igmp\x00', 0x100, 0x0) pread64$auto(r5, 0x0, 0x40000000f42c, 0x80002) r6 = io_uring_setup$auto(0x7, 0x0) epoll_ctl$auto(0xffffffffffffffff, 0x80000000, r6, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) ioctl$auto_BTRFS_IOC_SEND_32(r3, 0x40449426, &(0x7f00000005c0)={@inferred=r4, 0x4, 0x3, 0xe0, 0x7fff, 0xfffffffe, "fd64ab47b98fa2408fa518c6aeeb26534e24eab2a94d69169092f351"}) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) r7 = socket(0x2b, 0x1, 0x1) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/virtual/misc/hw_random/rng_quality\x00', 0x180, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) getsockopt$auto(r7, 0x0, 0x80, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x21, 0x2, 0x2) 2m4.361543389s ago: executing program 5 (id=1435): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/devices/platform/vidtv.0/i2c-0/delete_device\x00', 0x1, 0x0) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x2) mount$auto(0x0, &(0x7f0000000540)='}[,&*}\x00', &(0x7f0000000040)='nfsd\x00', 0x3, &(0x7f00000003c0)="3dd1fa31") mount$auto(0x0, &(0x7f0000000100)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0x10001, 0x0) rmdir$auto(&(0x7f0000000080)='}[,&*}/file0\x00') mmap$auto(0x0, 0x8, 0x80000000000000df, 0x12, 0x7, 0xf7) r1 = socket(0x10, 0x2, 0x14) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r1, &(0x7f0000003000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="100000001214af"], 0x14}}, 0x4000000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/net/ifb0/flags\x00', 0xb02, 0x0) sendfile$auto(r2, r2, 0x0, 0x3) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/kernel/cad_pid\x00', 0x8101, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/zl10353/parameters/debug\x00', 0x80000, 0x0) read$auto(r3, 0x0, 0x9) write$auto(0x3, 0x0, 0xfdef) write$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000280)='5', 0x1) rmdir$auto(&(0x7f0000000040)='}[,&*}/file0\x00') 2m3.94922953s ago: executing program 5 (id=1436): mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000440)='/dev/snd/midiC2D2\x00', 0x305302, 0x0) r1 = socket(0x2, 0x3, 0x100) openat$auto_ftrace_event_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/tracing/events/vmalloc/free_vmap_area_noflush/filter\x00', 0x2, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0xa, 0x1, 0x9, 0x3, 0x7, 0xfffffffffffffffd, 0x5, 0x3, 0x2000000000230006, 0x0, 0x7, 0x5, 0x2, 0x7, 0xaf, 0x9, 0x2, 0x3, 0x103, 0xfffffffffffffff7, 0x0, 0x0, 0x8000002}, 0x1fe, 0x81) socket(0x10, 0x2, 0x0) r2 = open(&(0x7f0000000080)='v#\xd5\xaf>=\x14\xe6%\xf7\x8a\x8d\x9a\xae\x1a\xd6\xa8\xb8\x1d\xf5(\xb0\x1f\xbd\xcbV\n\"\xe3V\xfeP\xceN\xb2\xc32\xaf\xcc\x80\xfa\xf0\xd4\xd9|\xfe\x03y\xd16\x17\x99R\xca\xe5\xf4\xb4T\xfcv\xfc\xe6\x9cv\a\x00\xc2a\x16\xd1\x8a\x80\x90\x87\xa5s\x10\xed\x93\xd4\x15=\xc0\x1f\x0e\xb0\x18v}\x03!\xf0I\xe3}\x90\x9b\x92[\xfe2<7\xd3\x81\x9a~\xcd\r\x19\x9e\x10(5\xfd\x8b\x82\xd4\xc85\xc3\x93t\t\xd0\x9d\xca^n\xf3\xcb>\x1bO\xcej\xe0\xef\xf2\xd7\xc2}\x18\xd9`AO\x95<\x9aH\vu\xae\xd4\xea\x12\xb8\xd1\n\x01\x83r\x85\xbf*\x18\xa7 S:R\x14\x89Z3\x94\x8bP)\x00', 0x20000, 0x0) mmap$auto(0x1, 0x6, 0x2, 0x2000000000040eb2, r2, 0x308000000000) mmap$auto(0x0, 0x4020009, 0xdf, 0x10000000000eb1, 0x401, 0x8000) close_range$auto(0x0, 0x5, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000004c0)='v#\xd5\xaf>=\x14\xe6%\xf7\x8a\x8d\x9a\xae\x1a\xd6\xa8\xb8\x1d\xf5(\xb0\x1f\xbd\xcbV\n\"\xe3V\xfeP\xceN\xb2\xc32\xaf\xcc\x80\xfa\xf0\xd4\xd9|\xfe\x03y\xd16\x17\x99R\xca\xe5\xf4\xb4T\xfcv\xfc\xe6\x9cv\a\x00\xc2a\x16\xd1\x8a\x80\x90\x87\xa5s\x10\xed\x93\xd4\x15=\xc0\x1f\x0e\xb0\x18v}\x03!\xf0I\xe3}\x90\x9b\x92[\xfe2<7\xd3\x81\x9a~\xcd\r\x19\x9e\x10(5\xfd\x8b\x82\xd4\xc85\xc3\x93t\t\xd0\x9d\xca^n\xf3\xcb>\x1bO\xcej\xe0\xef\xf2\xd7\xc2}\x18\xd9`AO\x95<\x9aH\vu\xae\xd4\xea\x12\xb8\xd1\n\x01\x83r\x85\xbf*\x18\xa7 S:R\x14\x89Z3\x94\x8bP)\x00', 0x40140, 0x12d) rename$auto(&(0x7f00000003c0)='v#\xd5\xaf>=\x14\xe6%\xf7\x8a\x8d\x9a\xae\x1a\xd6\xa8\xb8\x1d\xf5(\xb0\x1f\xbd\xcbV\n\"\xe3V\xfeP\xceN\xb2\xc32\xaf\xcc\x80\xfa\xf0\xd4\xd9|\xfe\x03y\xd16\x17\x99R\xca\xe5\xf4\xb4T\xfcv\xfc\xe6\x9cv\a\x00\xc2a\x16\xd1\x8a\x80\x90\x87\xa5s\x10\xed\x93\xd4\x15=\xc0\x1f\x0e\xb0\x18v}\x03!\xf0I\xe3}\x90\x9b\x92[\xfe2<7\xd3\x81\x9a~\xcd\r\x19\x9e\x10(5\xfd\x8b\x82\xd4\xc85\xc3\x93t\t\xd0\x9d\xca^n\xf3\xcb>\x1bO\xcej\xe0\xef\xf2\xd7\xc2}\x18\xd9`AO\x95<\x9aH\vu\xae\xd4\xea\x12\xb8\xd1\n\x01\x83r\x85\xbf*\x18\xa7 S:R\x14\x89Z3\x94\x8bP)', &(0x7f0000000000)=':-.\x00') r3 = socket(0xa, 0x1, 0x84) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000001300)={'batadv_slave_0\x00', 0x0}) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) name_to_handle_at$auto(0xffffffffffffffff, &(0x7f00000001c0)='/\x00', &(0x7f0000000280)={0xc, 0x200, "970bde1fcf44aca36348351c"}, 0x0, 0x1001) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000001480), r4) sendmsg$auto_ETHTOOL_MSG_CHANNELS_SET(r4, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f0000001c80)={&(0x7f00000008c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r0, @ANYRESDEC=r1, @ANYRES32=r5, @ANYRESDEC=0x0, @ANYBLOB="ca30159deb344198d68560fbd5086ecadf22be7764b9e18f9a9a4f598f354f058fc2f96f17f91275b38cd63fabae2a13829c120b09f62619e7fc0e139ea162b882c7f10e4e5152d324171fcf00687a039fa5fc6720808a38c9c3e79114193e2af332eab5aecd8bae89bc8c95012b8f199425d15a940ef44c53f3d55f90adbfa6d50746add77d69e8cb5c1e14a7e2c067d7b3b72ab6e88dd75b0bf3d5551415baac55fbd32fb4d758233e0f4a97e14db2b16c8484611354c0198fad2e846a07be2f0d2cc0995138bda2b7f62bbd8bdd"], 0x28}, 0x1, 0x100000000000000, 0x0, 0x9dfefc5e47f5c77f}, 0x40000) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/kernel/shm_rmid_forced\x00', 0x141241, 0x0) syz_genetlink_get_family_id$auto_nlctrl(0x0, r3) mmap$auto(0x0, 0xe00006, 0x2, 0x40eb1, 0x602, 0x300000000000) syz_clone(0x3e171491, 0x0, 0xfffffffffffffe1b, 0x0, 0x0, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/nbd7/queue/max_discard_segments\x00', 0x1c1000, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/platform/vhci_hcd.11/usb32/devspec\x00', 0x902, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) ioctl$auto_SCSI_IOCTL_GET_BUS_NUMBER2(0xffffffffffffffff, 0x5386, &(0x7f0000000bc0)) read$auto(0x3, 0x0, 0xfffffd2b) 1m48.580670715s ago: executing program 36 (id=1436): mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000440)='/dev/snd/midiC2D2\x00', 0x305302, 0x0) r1 = socket(0x2, 0x3, 0x100) openat$auto_ftrace_event_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/tracing/events/vmalloc/free_vmap_area_noflush/filter\x00', 0x2, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0xa, 0x1, 0x9, 0x3, 0x7, 0xfffffffffffffffd, 0x5, 0x3, 0x2000000000230006, 0x0, 0x7, 0x5, 0x2, 0x7, 0xaf, 0x9, 0x2, 0x3, 0x103, 0xfffffffffffffff7, 0x0, 0x0, 0x8000002}, 0x1fe, 0x81) socket(0x10, 0x2, 0x0) r2 = open(&(0x7f0000000080)='v#\xd5\xaf>=\x14\xe6%\xf7\x8a\x8d\x9a\xae\x1a\xd6\xa8\xb8\x1d\xf5(\xb0\x1f\xbd\xcbV\n\"\xe3V\xfeP\xceN\xb2\xc32\xaf\xcc\x80\xfa\xf0\xd4\xd9|\xfe\x03y\xd16\x17\x99R\xca\xe5\xf4\xb4T\xfcv\xfc\xe6\x9cv\a\x00\xc2a\x16\xd1\x8a\x80\x90\x87\xa5s\x10\xed\x93\xd4\x15=\xc0\x1f\x0e\xb0\x18v}\x03!\xf0I\xe3}\x90\x9b\x92[\xfe2<7\xd3\x81\x9a~\xcd\r\x19\x9e\x10(5\xfd\x8b\x82\xd4\xc85\xc3\x93t\t\xd0\x9d\xca^n\xf3\xcb>\x1bO\xcej\xe0\xef\xf2\xd7\xc2}\x18\xd9`AO\x95<\x9aH\vu\xae\xd4\xea\x12\xb8\xd1\n\x01\x83r\x85\xbf*\x18\xa7 S:R\x14\x89Z3\x94\x8bP)\x00', 0x20000, 0x0) mmap$auto(0x1, 0x6, 0x2, 0x2000000000040eb2, r2, 0x308000000000) mmap$auto(0x0, 0x4020009, 0xdf, 0x10000000000eb1, 0x401, 0x8000) close_range$auto(0x0, 0x5, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000004c0)='v#\xd5\xaf>=\x14\xe6%\xf7\x8a\x8d\x9a\xae\x1a\xd6\xa8\xb8\x1d\xf5(\xb0\x1f\xbd\xcbV\n\"\xe3V\xfeP\xceN\xb2\xc32\xaf\xcc\x80\xfa\xf0\xd4\xd9|\xfe\x03y\xd16\x17\x99R\xca\xe5\xf4\xb4T\xfcv\xfc\xe6\x9cv\a\x00\xc2a\x16\xd1\x8a\x80\x90\x87\xa5s\x10\xed\x93\xd4\x15=\xc0\x1f\x0e\xb0\x18v}\x03!\xf0I\xe3}\x90\x9b\x92[\xfe2<7\xd3\x81\x9a~\xcd\r\x19\x9e\x10(5\xfd\x8b\x82\xd4\xc85\xc3\x93t\t\xd0\x9d\xca^n\xf3\xcb>\x1bO\xcej\xe0\xef\xf2\xd7\xc2}\x18\xd9`AO\x95<\x9aH\vu\xae\xd4\xea\x12\xb8\xd1\n\x01\x83r\x85\xbf*\x18\xa7 S:R\x14\x89Z3\x94\x8bP)\x00', 0x40140, 0x12d) rename$auto(&(0x7f00000003c0)='v#\xd5\xaf>=\x14\xe6%\xf7\x8a\x8d\x9a\xae\x1a\xd6\xa8\xb8\x1d\xf5(\xb0\x1f\xbd\xcbV\n\"\xe3V\xfeP\xceN\xb2\xc32\xaf\xcc\x80\xfa\xf0\xd4\xd9|\xfe\x03y\xd16\x17\x99R\xca\xe5\xf4\xb4T\xfcv\xfc\xe6\x9cv\a\x00\xc2a\x16\xd1\x8a\x80\x90\x87\xa5s\x10\xed\x93\xd4\x15=\xc0\x1f\x0e\xb0\x18v}\x03!\xf0I\xe3}\x90\x9b\x92[\xfe2<7\xd3\x81\x9a~\xcd\r\x19\x9e\x10(5\xfd\x8b\x82\xd4\xc85\xc3\x93t\t\xd0\x9d\xca^n\xf3\xcb>\x1bO\xcej\xe0\xef\xf2\xd7\xc2}\x18\xd9`AO\x95<\x9aH\vu\xae\xd4\xea\x12\xb8\xd1\n\x01\x83r\x85\xbf*\x18\xa7 S:R\x14\x89Z3\x94\x8bP)', &(0x7f0000000000)=':-.\x00') r3 = socket(0xa, 0x1, 0x84) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000001300)={'batadv_slave_0\x00', 0x0}) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) name_to_handle_at$auto(0xffffffffffffffff, &(0x7f00000001c0)='/\x00', &(0x7f0000000280)={0xc, 0x200, "970bde1fcf44aca36348351c"}, 0x0, 0x1001) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000001480), r4) sendmsg$auto_ETHTOOL_MSG_CHANNELS_SET(r4, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f0000001c80)={&(0x7f00000008c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r0, @ANYRESDEC=r1, @ANYRES32=r5, @ANYRESDEC=0x0, @ANYBLOB="ca30159deb344198d68560fbd5086ecadf22be7764b9e18f9a9a4f598f354f058fc2f96f17f91275b38cd63fabae2a13829c120b09f62619e7fc0e139ea162b882c7f10e4e5152d324171fcf00687a039fa5fc6720808a38c9c3e79114193e2af332eab5aecd8bae89bc8c95012b8f199425d15a940ef44c53f3d55f90adbfa6d50746add77d69e8cb5c1e14a7e2c067d7b3b72ab6e88dd75b0bf3d5551415baac55fbd32fb4d758233e0f4a97e14db2b16c8484611354c0198fad2e846a07be2f0d2cc0995138bda2b7f62bbd8bdd"], 0x28}, 0x1, 0x100000000000000, 0x0, 0x9dfefc5e47f5c77f}, 0x40000) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/kernel/shm_rmid_forced\x00', 0x141241, 0x0) syz_genetlink_get_family_id$auto_nlctrl(0x0, r3) mmap$auto(0x0, 0xe00006, 0x2, 0x40eb1, 0x602, 0x300000000000) syz_clone(0x3e171491, 0x0, 0xfffffffffffffe1b, 0x0, 0x0, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/nbd7/queue/max_discard_segments\x00', 0x1c1000, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/platform/vhci_hcd.11/usb32/devspec\x00', 0x902, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) ioctl$auto_SCSI_IOCTL_GET_BUS_NUMBER2(0xffffffffffffffff, 0x5386, &(0x7f0000000bc0)) read$auto(0x3, 0x0, 0xfffffd2b) 1m43.497939669s ago: executing program 7 (id=1511): open_by_handle_at$auto(0xffffffffffffffff, 0x0, 0x6) r0 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) write$auto_console_fops_tty_io(r0, &(0x7f0000000000)="c80d1b5d399b4a", 0x7) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/fail-nth\x00', 0x802, 0x0) write$auto(r1, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xcfk', 0x81) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xdcfaeb3549df84fd, 0x0) r2 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000026d00)='/dev/dri/card0\x00', 0x2000, 0x0) ioctl$auto(r2, 0x64c9, r2) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) setgroups$auto(0xe32, 0x0) 1m43.008553715s ago: executing program 7 (id=1513): r0 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/fs/btrfs/features/free_space_tree\x00', 0x40c00, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f0000000140)=""/181, 0xb5) sendmsg$auto_OVS_FLOW_CMD_GET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x2c, r0, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@OVS_FLOW_ATTR_PROBE={0x4}, @OVS_FLOW_ATTR_KEY={0x10, 0x1, 0x0, 0x1, [@nested={0xc, 0x10, 0x0, 0x1, [@nested={0x6, 0x8, 0x0, 0x1, [@generic="1a32"]}]}]}, @OVS_FLOW_ATTR_PROBE={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24040071}, 0x800) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/platform/vkms/graphics/fb0/bits_per_pixel\x00', 0x82942, 0x0) r3 = socket(0x23, 0x80805, 0x0) ioctl$auto(r3, 0x89e0, 0xffffffffffffffff) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000440)='/sys/devices/platform/dummy_hcd.0/usb1/1-0:1.0/usb1-port1/quirks\x00', 0x103a42, 0x0) r4 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/default/forwarding\x00', 0x141241, 0x0) sendfile$auto(r4, 0xffffffffffffffff, 0x0, 0x2) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001b80), r5) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r5, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f0000001e40)={0x14, r6, 0x1, 0x70bd27, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x220000c1}, 0xc0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/apparmor/parameters/audit\x00', 0xb02, 0x0) 1m42.25547011s ago: executing program 7 (id=1514): mmap$auto(0x0, 0x6, 0xc6f, 0x20eb1, 0x40000000000a5, 0x8000) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$auto_THERMAL_GENL_CMD_TZ_GET_TEMP(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="770e0000", @ANYRES16=0x0, @ANYBLOB="080028bd7000fddbdf250300000008000600020000000c0014"], 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x405b) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, r0, 0x8000) prctl$auto(0x1000000003b, 0x100001, 0x4, 0x80a, 0x6) bpf$auto(0x0, &(0x7f0000000780)=@link_update={0xa, @new_map_fd=0x5, 0x4007, @old_prog_fd=0x13b}, 0xa3) sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000336bd7000fedbdf2502"], 0x24}, 0x1, 0x0, 0x0, 0xc005}, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB=' \x00\''], 0x1ac}}, 0x40000) ioctl$auto_UI_END_FF_ERASE(0xffffffffffffffff, 0x400c55cb, &(0x7f0000000080)={0x130, 0x8, 0x10001}) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x2, 0x0) r1 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/fb0\x00', 0x20401, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/v4l-subdev7\x00', 0x0, 0x0) ioctl$auto(0x3, 0xc0305615, 0x38) sendmsg$auto_SMC_NETLINK_GET_FBACK_STATS(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x40000) r3 = socket(0xb, 0x5, 0x5) recvmmsg$auto(r3, &(0x7f0000000140)={{0x0, 0x5b7e, 0x0, 0x0, 0x0, 0x7f, 0x7}, 0x3}, 0x6015, 0x3, 0x0) ppoll$auto(&(0x7f0000000340)={r2, 0x2, 0x401}, 0x2, 0x0, 0x0, 0x8) ioctl$auto_FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000080)) setgroups$auto(0x8, &(0x7f0000000000)=0x5) r4 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x44814}, 0x2000c0c0) sendmmsg$auto(r4, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0x400a507}, 0x800}, 0xa, 0x8) write$auto_proc_mem_operations_base(r0, &(0x7f0000000400)="94c5be883ae7ee95e2bff5f990f6f7249475e8960bf6c1ee8796193bfbd249c19c9460ea0c1c18bb983b84aebb8629e8e9e25558c9bfeb22ed79fdab8065d67eec271b56d08971f043224fe7604598e2506e785c6318c1b7696b10324d1e7db02961facdf9fab2640716f07dd1c617dcb6f1bb648821a53f78be14a6dc8f336e92e389609b991019c180950ed085b91123", 0x91) r5 = openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/block/sda/sched/write1_next_rq\x00', 0xe2fc0, 0x0) read$auto_blk_mq_debugfs_fops_blk_mq_debugfs(r5, &(0x7f0000000340)=""/179, 0xb3) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) ioctl$auto_BLKRRPART(0xffffffffffffffff, 0x125f, 0x700000000000000) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xc2900, 0x0) read$auto(r6, 0x0, 0x7) 1m41.129323011s ago: executing program 7 (id=1519): mmap$auto(0x0, 0x2000d, 0x4000000200df, 0xeb1, 0x404, 0x8000) getresgid$auto(0x0, 0x0, 0x0) r0 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cec4\x00', 0x80402, 0x0) ioctl$auto_CEC_TRANSMIT(r0, 0xc0386105, &(0x7f0000000040)={0x40000000001, 0xfffffffffffffffe, 0x2, 0xffffffff, 0x4e3, 0xffffffff, '\x00', 0xa, 0x26, 0x82, 0x4, 0x4, 0x5, 0x3}) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) 1m40.58055389s ago: executing program 7 (id=1522): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x1, 0x106) sendmsg$auto_MAC802154_HWSIM_CMD_NEW_EDGE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x1778}, 0x1, 0x0, 0x0, 0x20000001}, 0x20040841) bind$auto(r0, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) unshare$auto(0x40000080) madvise$auto(0x0, 0xffffffffffff0001, 0x15) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) r1 = socket(0x2, 0x5, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video42\x00', 0x169000, 0x0) openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/oom_adj\x00', 0x20000, 0x0) socket(0x2, 0x80002, 0x73) sendmmsg$auto(r1, &(0x7f0000000140)={{&(0x7f0000000040), 0x13, &(0x7f00000000c0)={0x0, 0x1a000}, 0x7, 0x0, 0x2, 0x2}, 0x1002}, 0x739618ce, 0x311) 1m39.539247245s ago: executing program 7 (id=1525): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = io_uring_setup$auto(0x6, 0x0) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) (async) mount$auto(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000180)='nfsd\x00', 0x8, 0x0) (async) umount2$auto(&(0x7f0000000000)='.\x00', 0x8) close_range$auto(0x2, 0x8, 0x0) (async) memfd_secret$auto(0x0) (async) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) write$auto(0x3, 0x0, 0xfffffdef) (async) mmap$auto(0x0, 0x810006, 0xffb, 0x8000000008011, r0, 0x8000) mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0xffffffffffffffff, 0x300000000000) (async) r1 = openat$auto_stats_fops_(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) read$auto_stats_fops_(r1, &(0x7f00000000c0)=""/2, 0x2) io_uring_setup$auto(0x6, 0x0) (async) close_range$auto(0x2, 0xffffffffffffffff, 0x0) 1m29.745820206s ago: executing program 6 (id=1565): mmap$auto(0x0, 0xec6, 0x5, 0xeb2, 0x8, 0x1008000) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) r0 = socket(0x10, 0x2, 0x0) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000000), r0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a00"], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x20000800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0x7ffffffff000}, 0x1) close_range$auto(0x2, 0xa, 0x0) socket(0xf, 0x3, 0x1) r1 = socket(0x26, 0x1, 0xfffffffc) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth1_to_batadv\x00', 0x0}) bind$auto(0x3, &(0x7f0000000040)=@can={0x1d, r2}, 0x6a) setsockopt$auto(r1, 0x0, 0x5, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) gettid() kexec_load$auto(0x5, 0x2, &(0x7f0000000040)={@kbuf=0x0, 0x2aa7, 0x6c0000c000, 0xc000}, 0x4) kill$auto(0x0, 0x11) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0xd, 0x2, 0x6, 0x7, 0x8, 0xffffffffffffffff, [], {0x6, 0x6, 0x1, 0x1ff, 0x100, 0x83, 0x101, 0x6, 0x6}, {0x100, 0x1, 0x52, 0x5, 0x1, 0x40, 0x876c5, 0x8, 0x100000000}}) socket(0x11, 0x3, 0x9) r3 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket(0xa, 0x3, 0xff) connect$auto(0x3, &(0x7f00000018c0)=@rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x4}, 0x7) connect$auto(0xffffffffffffffff, &(0x7f0000000140)=@qipcrtr={0x2a, 0x1, 0x3fff}, 0x57) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/erspan0/queues/tx-0/byte_queue_limits/hold_time\x00', 0x2, 0x0) read$auto_ptdump_curusr_fops_(r4, &(0x7f0000000400)=""/76, 0x4c) writev$auto(0x3, &(0x7f0000000100)={&(0x7f0000000000), 0x7114}, 0x8) ioctl$auto_VHOST_SET_OWNER(r3, 0xaf01, 0x5) ioctl$auto(r3, 0x4008af03, 0x0) 1m27.924416317s ago: executing program 6 (id=1568): r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/net/wireless\x00', 0x80, 0x0) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r0, @ANYRESOCT=r0], 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x4) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/mm/transparent_hugepage/hugepages-1024kB/stats/split_failed\x00', 0x0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f00000022c0)=""/43, 0x2b) r2 = socket(0x2, 0x1, 0x106) mount$auto(0x0, 0xfffffffffffffffe, 0x0, 0x80, 0xfffffffffffffffe) getsockopt$auto_SO_REUSEPORT(r2, 0x0, 0xf, &(0x7f0000000040)='$#,\x00', &(0x7f0000000240)=0x6) r3 = socket(0x29, 0x4, 0x88000006) r4 = accept4$auto(r2, &(0x7f0000000080)=@rc={0x1f, @none}, &(0x7f00000001c0)=0x4, 0x7) r5 = openat$auto_tracing_entries_fops_trace(0xffffffffffffff9c, &(0x7f0000008140)='/sys/kernel/debug/tracing/per_cpu/cpu1/buffer_size_kb\x00', 0x80100, 0x0) read$auto_tracing_entries_fops_trace(r5, 0x0, 0x0) sendmsg$auto_NL802154_CMD_SET_PAN_ID(r4, 0x0, 0x1) setsockopt$auto(0x3, 0x1, 0x23, 0x0, 0x9) sendmsg$auto_NL80211_CMD_GET_REG(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x2000c800}, 0x0) mlockall$auto(0x1000) r6 = pidfd_getfd$auto(r2, r3, 0x7) ioctl$auto_FUSE_DEV_IOC_BACKING_OPEN(r6, 0x4010e501, 0x0) ioctl$auto_VFIO_IOMMU_MAP_DMA(r6, 0x3b71, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000080), r7) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'vlan1\x00', 0x0}) sendmsg$auto_NETDEV_CMD_BIND_RX(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=ANY=[@ANYBLOB="240088000039409409d92460e29825bf9aefa05171638e3196870c3e7c5f5e9f50a4c64f7f419553fbe3206fae55c4ce797b0c84662f", @ANYRES16=r8, @ANYBLOB="010027bd7000fedbdf250d00000008000100", @ANYBLOB="080003", @ANYRES64, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x805) unshare$auto(0x40000080) mmap$auto(0x0, 0x20009, 0x7, 0x12, 0xffffffffffffffff, 0xf4e) r10 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000001a40), r10) pread64$auto(r0, 0x0, 0x201, 0xc000) r11 = syz_genetlink_get_family_id$auto_ovs_vport(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000580)={&(0x7f00000003c0)={0x184, r11, 0x100, 0x70bd25, 0x25dfdbff, {}, [@OVS_VPORT_ATTR_STATS={0x44, 0x6, {0x7, 0x4, 0x6, 0x95, 0xb, 0x3, 0xc, 0x8}}, @OVS_VPORT_ATTR_UPCALL_PID={0xb3, 0x5, "c7e41c24d7b1672f229104cfbc41e65d8b4b4e62f750492fb260973a5565802600b83f0c76abcfe17823d65aa700d7c5bb329d07ed929e7af71702da091ad5150e18eca750f86eb58673a15a36945c03721d8ebbe6b66d8ed39c940212b4e5bf1559c33d59dfcb2e592250a667583713842fdff5d1a0d06a46ca6a02e8bf459c18a9f57d0449cf259b95ae9bef5df862e2caf2d5f460431390178e16936c17c197454bcd66ccaa1d331ef5e9849404"}, @OVS_VPORT_ATTR_IFINDEX={0x8, 0x8, r9}, @OVS_VPORT_ATTR_UPCALL_PID={0x6f, 0x5, "3af5619d44fb745feba7e1125bdf8a43b206962c0eaccb6d643e3224c9c578e2daef24f790c1728f0d00fc3455dc330b25e8f03015b33f422dd8af7d6a0dcf227abb5589d7e813ba3adfdbf899f3b7258e6ac7d526357e84eeda1d5eb97af8ca1a1ec85337ac7bfbe038ba"}]}, 0x184}, 0x1, 0x0, 0x0, 0x841}, 0x6000) 1m27.202231828s ago: executing program 6 (id=1571): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) sendmsg$auto_NL80211_CMD_GET_MPATH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40801}, 0xc0c0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/rpc/nfsd.fh/flush\x00', 0x4a141, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/virtual/block/loop1/queue/discard_max_bytes\x00', 0x808882, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r1 = openat$auto_tracing_entries_fops_trace(0xffffffffffffff9c, 0x0, 0x10bb41, 0x0) r2 = openat$auto_bch_chardev_fops_chardev(0xffffffffffffff9c, &(0x7f0000000040), 0x424041, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) timer_create$auto(0x3, 0x0, 0x0) timer_create$auto(0x9, 0x0, 0x0) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/card1/timer_source\x00', 0x8002, 0x0) write$auto(r3, 0x0, 0x200c) mmap$auto(0x0, 0x20009, 0x7fffffff, 0xeb1, 0x401, 0x8000) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/vm/nr_hugepages_mempolicy\x00', 0x141241, 0x0) write$auto(0x3, 0x0, 0xfdef) close_range$auto(0x2, 0xa, 0x0) ioctl$auto_BCH_IOCTL_DISK_RESIZE(r2, 0x4018bc0e, &(0x7f0000000080)={0x5, 0x0, 0x4, 0x1}) mmap$auto(0x0, 0x8, 0x80000000000000df, 0x10004000eb1, 0x8, 0x8000008000) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) r4 = bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0x1, 0xb5, 0xffffffff, 0x3, 0x4, 0xffffffffffffffff, 0xa, "2af051a940806ec05be276cfc83ce63f", 0x0, 0xffffffffffffffff, 0xc7de, 0x8007, 0x2e5, 0x401}, 0x8000010) bpf$auto(0x1a, &(0x7f0000000380)=@link_create={@map_fd, @target_ifindex=r6, 0x100003, 0x81, @uprobe_multi={0x81, 0x1ff, 0x3d7c, 0x0, 0x0, 0x4, 0x0}}, 0x92) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000300), r5) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) sendmsg$auto_NL80211_CMD_GET_PROTOCOL_FEATURES(r5, &(0x7f0000000500)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000580)=ANY=[@ANYRESDEC=r7, @ANYRESHEX=r8, @ANYBLOB="00002bbd7000fedbdf255f0000000800c400040000000800a100", @ANYRESDEC=0x0, @ANYRES8=r1, @ANYRES64=r9, @ANYRESOCT=r0], 0x64}, 0x1, 0x0, 0x0, 0x400c095}, 0x4084) prctl$auto(0x49, 0x73c4a521, 0x0, 0x5, 0x2) syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000000c0), r4) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r10 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/bus/pci/drivers/c3xxx/unbind\x00', 0x183042, 0x0) read$auto(r10, 0x0, 0x9) 1m26.955849577s ago: executing program 6 (id=1572): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) r0 = clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) (async) r1 = signalfd4$auto(0xffffffff, 0x0, 0x8, 0x0) read$auto(r1, 0x0, 0x80000000006) openat$auto_bm_entry_operations_binfmt_misc(0xffffffffffffff9c, 0x0, 0x80400, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_ACT(r2, 0x0, 0x80) (async) shmctl$auto_IPC_SET(0x0, 0x1, &(0x7f00000028c0)={{0x3f8, 0xffffffffffffffff, 0xee01, 0x9, 0xfe, 0xffff, 0x5}, 0x1, 0xfffffffffffffffe, 0xca, 0x2, @raw=0xb, @inferred=0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0}) (async) mmap$auto(0x0, 0x20007, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) close_range$auto(0x2, 0x8, 0x0) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/virtual/tty/ttyr3/dev\x00', 0x7ef3837b7f62005, 0x0) (async) socket(0x11, 0x80003, 0x300) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) (async) ioctl$auto(0x3, 0x80108907, 0x38) io_uring_setup$auto(0xa, 0x0) setsockopt$auto(0x3, 0x1, 0x41, 0x0, 0x88) (async) ioctl$auto_FS_IOC_GETFSSYSFSPATH(r1, 0x80811501, 0xec) (async) tkill$auto(r0, 0x9) 1m25.910378672s ago: executing program 6 (id=1574): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket(0x2b, 0x1, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) close_range$auto(0x0, 0x5, 0x0) pipe$auto(0x0) write$auto(0x1, 0x0, 0x80000000) vmsplice$auto(0x1, &(0x7f0000000000)={0x0, 0x5}, 0x6, 0x8) close_range$auto(0x0, 0xfffffffffffff000, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) futex$auto(0x0, 0x85, 0x8, 0x0, 0x0, 0x80800002) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) r1 = socket(0x2, 0x1, 0x0) setsockopt$auto(r1, 0x6, 0x0, 0x0, 0x44) r2 = syz_genetlink_get_family_id$auto_l2tp(0x0, r0) sendmsg$auto_L2TP_CMD_SESSION_DELETE(r1, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x34, r2, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0xffffffffffffff7f}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @private0={0xfc, 0x0, '\x00', 0x1}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80c1}, 0xc0) sendmsg$auto_NETDEV_CMD_QSTATS_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, 0x0, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@NETDEV_A_QSTATS_IFINDEX={0x8}, @NETDEV_A_QSTATS_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x20001800}, 0x4004) 1m24.960713029s ago: executing program 6 (id=1576): r0 = timerfd_create$auto(0x9, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/devices/virtual/net/lapb0/netdev_group\x00', 0x4a481, 0x0) write$auto(r1, &(0x7f0000000040)='7\x02\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) timerfd_gettime$auto(r0, &(0x7f00000000c0)={{0x1, 0x2}, {0x7, 0x1}}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x24, r3, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@NFSD_A_SERVER_THREADS={0x8, 0x1, 0xfffffffc}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0xffff}]}, 0x24}, 0x1, 0x0, 0x0, 0x4002000}, 0x40010) timerfd_create$auto(0x9, 0x0) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/devices/virtual/net/lapb0/netdev_group\x00', 0x4a481, 0x0) (async) write$auto(r1, &(0x7f0000000040)='7\x02\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) (async) timerfd_gettime$auto(r0, &(0x7f00000000c0)={{0x1, 0x2}, {0x7, 0x1}}) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff) (async) sendmsg$auto_NFSD_CMD_THREADS_SET(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x24, r3, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@NFSD_A_SERVER_THREADS={0x8, 0x1, 0xfffffffc}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0xffff}]}, 0x24}, 0x1, 0x0, 0x0, 0x4002000}, 0x40010) (async) 1m24.283799383s ago: executing program 37 (id=1525): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = io_uring_setup$auto(0x6, 0x0) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) (async) mount$auto(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000180)='nfsd\x00', 0x8, 0x0) (async) umount2$auto(&(0x7f0000000000)='.\x00', 0x8) close_range$auto(0x2, 0x8, 0x0) (async) memfd_secret$auto(0x0) (async) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) write$auto(0x3, 0x0, 0xfffffdef) (async) mmap$auto(0x0, 0x810006, 0xffb, 0x8000000008011, r0, 0x8000) mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0xffffffffffffffff, 0x300000000000) (async) r1 = openat$auto_stats_fops_(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) read$auto_stats_fops_(r1, &(0x7f00000000c0)=""/2, 0x2) io_uring_setup$auto(0x6, 0x0) (async) close_range$auto(0x2, 0xffffffffffffffff, 0x0) 1m9.869026755s ago: executing program 38 (id=1576): r0 = timerfd_create$auto(0x9, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/devices/virtual/net/lapb0/netdev_group\x00', 0x4a481, 0x0) write$auto(r1, &(0x7f0000000040)='7\x02\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) timerfd_gettime$auto(r0, &(0x7f00000000c0)={{0x1, 0x2}, {0x7, 0x1}}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x24, r3, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@NFSD_A_SERVER_THREADS={0x8, 0x1, 0xfffffffc}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0xffff}]}, 0x24}, 0x1, 0x0, 0x0, 0x4002000}, 0x40010) timerfd_create$auto(0x9, 0x0) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/devices/virtual/net/lapb0/netdev_group\x00', 0x4a481, 0x0) (async) write$auto(r1, &(0x7f0000000040)='7\x02\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) (async) timerfd_gettime$auto(r0, &(0x7f00000000c0)={{0x1, 0x2}, {0x7, 0x1}}) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff) (async) sendmsg$auto_NFSD_CMD_THREADS_SET(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x24, r3, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@NFSD_A_SERVER_THREADS={0x8, 0x1, 0xfffffffc}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0xffff}]}, 0x24}, 0x1, 0x0, 0x0, 0x4002000}, 0x40010) (async) 47.872004645s ago: executing program 8 (id=1687): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000000), r0) socket(0x10, 0x3, 0x6) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x21, 0x2, 0xa) sendmsg$auto_NBD_CMD_CONNECT(r1, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40080}, 0x20040000) sendmmsg$auto(0x6, &(0x7f0000000400)={{0x0, 0x3, &(0x7f00000002c0)={0x0, 0x8}, 0x1, &(0x7f0000000300), 0x10, 0x8000000}, 0xed7138c}, 0x6, 0x0) openat$auto_ftrace_event_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/events/vmalloc/alloc_vmap_area/filter\x00', 0x101b00, 0x0) 47.660521867s ago: executing program 8 (id=1689): socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$auto_net_shaper(&(0x7f0000000540), 0xffffffffffffffff) mmap$auto(0x0, 0x1000000002020009, 0x6, 0xebe, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x5, 0x7, 0x13, 0x401, 0x800000000008000) r0 = open(&(0x7f00000000c0)='./file0\x00', 0xa00, 0x4) close_range$auto(0x2, 0x8, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/virtual/tty/ttyr3/dev\x00', 0x7ef3837b7e67005, 0x0) (async) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptybc\x00', 0x80, 0x0) fstat$auto(0x2, 0x0) (async) ioctl$auto_TIOCSETD2(r1, 0x5423, 0x0) (async) ioctl$auto(0x3, 0x5402, r0) (async) r2 = userfaultfd$auto(0x1) ioctl$auto_TUNSETOFFLOAD2(r2, 0x400454d0, &(0x7f0000000000)=0x19) (async) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) (async) close_range$auto(0x2, 0x8, 0x0) select$auto(0xd, 0x0, 0x0, &(0x7f0000000200)={[0x1fe, 0x7f, 0x3, 0x8fd6, 0x3, 0x3, 0x15f4da0a, 0x3, 0x3, 0x7f, 0x1, 0x1, 0xd0, 0x9, 0x200000c, 0x3]}, 0x0) (async) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/security/tomoyo/query\x00', 0x82a02, 0x0) (async) r3 = openat$auto_ftrace_event_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/tracing/events/vmalloc/free_vmap_area_noflush/filter\x00', 0x2, 0x0) (async) r4 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/thread-self/fail-nth\x00', 0x6502, 0x0) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/virtual/net/sit0/napi_defer_hard_irqs\x00', 0x302181, 0x0) read$auto_ftrace_event_filter_fops_trace_events(r3, 0x0, 0x0) (async) read$auto(r5, 0x0, 0x20) (async) writev$auto(r4, &(0x7f0000000200)={0x0, 0xb}, 0x6) (async) write$auto(0x3, 0x0, 0x5c8) (async) statx$auto(r2, 0x0, 0x1000, 0x8, 0x0) (async) r6 = openat$auto_uhid_fops_uhid(0xffffffffffffff9c, &(0x7f0000000080), 0x48880, 0x0) (async) r7 = getpgid$auto(0xffffffffffffffff) mq_notify$auto(r5, &(0x7f00000000c0)={@sival_ptr=&(0x7f0000000340)="faceb2a2033f0d6cb70b3265decd6acc6549c7b486e0f8601ad3507fa063bc46a7606368c04b94ab23059181fb3fed444f2b7477ef73a3714fd2b6fdc6a16a91bfe1243b9211b823d796c4eefce338fdd2c7e437aeaf15404533dbd670326afccf4beaed87d68ecbffe16345926f348104d47de048da17f86e79138dff63d1b1a864f2d4f0e34fcfc4f594014dbf37f6e47a75d6d8b27c6ebbd2bcc863879765c0c8859e8d27f220dc77169e639ecae185d8fd685e508e157a7dfadcb107ce", @inferred=r6, 0xfff, @_tid=r7}) (async) move_pages$auto(0x0, 0x1002, 0x0, &(0x7f0000001140), 0x0, 0x2) adjtimex$auto(&(0x7f0000000200)={0x5f95, 0x0, 0x2, 0x2000000b, 0xff7d, 0xbc58, 0x4000005, 0x0, 0x8, 0x8, 0x80000000, {0x7ff, 0xf423f}, 0x2744, 0x200000001, 0xff, 0x7, 0x0, 0x3c8, 0x8, 0x10, 0xffffffffffffffff, 0x1560cc85, 0x4}) 47.08461693s ago: executing program 8 (id=1694): mprotect$auto(0xfffffffffffffff7, 0x806124, 0x8000000009) mprotect$auto(0x35, 0x1, 0x67) futex_waitv$auto(&(0x7f0000000000)={0xfffffffffffffffd, 0x7e4, 0x2}, 0x1, 0x0, 0x0, 0x623d) r0 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/012/001\x00', 0x0, 0x0) semctl$auto(0x2, 0xff, 0x1, 0x7ff) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) socket(0x10, 0x2, 0x14) sendmsg$auto_CGROUPSTATS_CMD_GET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="250025bd7000fedbdf2504000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x400c9d0}, 0x4080) r1 = socket(0x10, 0x2, 0x4) write$auto(r1, &(0x7f0000000000)='-\x00', 0xfdef) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000002fc0)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000000a14"], 0x14}, 0x1, 0x0, 0x0, 0x80c3}, 0x2000c0c1) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4c084}, 0x51) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="18"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1803, &(0x7f00000002c0)={0x0, 0x100000000002}, 0x1, 0x0, 0x0, 0x7}, 0x7}, 0x3, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/workqueue/raid5wq/nice\x00', 0x80001, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/net/netfilter/nf_conntrack_buckets\x00', 0x101000, 0x0) read$auto(r2, 0x0, 0x1ff) write$auto(0x3, 0x0, 0xfdef) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000140), 0x180b03, 0x0) ioctl$auto_FIGETBSZ(r0, 0x2, 0xffffffffffffffff) 45.205202807s ago: executing program 8 (id=1700): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) munmap$auto(0x8000, 0xffffffff) 44.828736024s ago: executing program 8 (id=1702): r0 = openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, &(0x7f0000000000), 0x18203, 0x0) pidfd_send_signal$auto_PIDFD_SIGNAL_THREAD(r0, 0x9d, &(0x7f00000002c0)={@siginfo_0_0={0x4, 0x2, 0xf, @_sigfault={&(0x7f0000000040), @_addr_bnd={"ca251a800c7265b8", &(0x7f0000000180)="36c08c5f7a8e8e6a9076598422fa5e9b67253730fdb70c4a5989cbc03719007ec456af6b41858414b88dcc419c192a37e512569fd14f19abd521f3c5f8ac90fd02313e198998869439d93738a82121f5627f6510f7184e0f10381e5e253c45", &(0x7f0000000200)="3192c9fe542ed40a3bf53bbcd3b751c6c25218316e8d884bffc0a8ebbb2658aa41aafc61d2e45f39b1f1cde6c1b3bafa1e076e644d64be98f1ab9cef75fe84e0ed381ad8cc0da55964672c6bc0751580c820e85edef5e24cfc8a98c72a4f7c82085e3bf169f348f589bb3c84ac313dc9a6ca907b56bb7b5a9c1ae5a389ddb2e1e1b7e21ce7d811d718254897cd165c85047ad0fc4b76ada7f3d8cf4c6ebb4a884722c4899aab6cd6a39e043cf6dfaa30874e861efcf3cf05ce5174f4d5"}}}}, 0x1) mmap$auto(0x9, 0x80000001, 0xdf, 0x9b76, r0, 0x8000) close_range$auto(0x2, 0x8000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)={0x40, r2, 0x1, 0x70bd2b, 0x25dfdbf9, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x8}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x7}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={'\x00', '\xff\xff', @multicast2}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x0) openat$auto_udmabuf_fops_udmabuf(0xffffffffffffff9c, &(0x7f0000000100), 0x100, 0x0) openat$auto_mISDN_fops_timerdev(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r3 = openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) writev$auto(0xffffffffffffffff, 0x0, 0xa) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r5 = openat$auto_ftrace_system_enable_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/events/vmalloc/enable\x00', 0x80, 0x0) readv$auto(r5, &(0x7f0000000140)={0x0, 0x2}, 0x5) pread64$auto(r3, &(0x7f0000000180)='cifs\x00', 0xfffffffffffffff8, 0x2) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x40001, 0x0) r6 = openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/ieee80211/phy1/netdev:wlan1/tdls_wider_bw\x00', 0x82, 0x0) pwritev$auto(r6, &(0x7f0000000180)={0x0, 0x5}, 0x3, 0x700, 0x5) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) write$auto(r4, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x6]}, 0x0) r7 = io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x223, &(0x7f0000000080)='\b', 0x0) bpf$auto(0x5, &(0x7f00000000c0)=@link_detach={r7}, 0x2) 44.214555998s ago: executing program 8 (id=1705): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000400), r0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x4000008000) r2 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/kcore\x00', 0x10b402, 0x0) pread64$auto(r2, 0x0, 0x800003, 0x1) setrlimit$auto(0x1, 0x0) mlockall$auto(0x7) r3 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/tty0\x00', 0x102, 0x0) writev$auto(r3, &(0x7f0000000040)={&(0x7f0000000000), 0xff}, 0x1) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x141000, 0x0) sendmsg$auto_NFSD_CMD_VERSION_SET(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000280)={0x130, r1, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@NFSD_A_SERVER_PROTO_VERSION={0x2c, 0x1, 0x0, 0x1, [@NFSD_A_VERSION_MINOR={0x8, 0x2, 0xa00000}, @NFSD_A_VERSION_MAJOR={0x8}, @NFSD_A_VERSION_MAJOR={0x8, 0x1, 0x5b2c}, @NFSD_A_VERSION_MAJOR={0x8, 0x1, 0x9}, @NFSD_A_VERSION_MAJOR={0x8, 0x1, 0x54db5d01}]}, @NFSD_A_SERVER_PROTO_VERSION={0x44, 0x1, 0x0, 0x1, [@NFSD_A_VERSION_ENABLED={0x4}, @NFSD_A_VERSION_MINOR={0x8, 0x2, 0x4}, @NFSD_A_VERSION_ENABLED={0x4}, @NFSD_A_VERSION_MINOR={0x8, 0x2, 0x4de}, @NFSD_A_VERSION_MAJOR={0x8, 0x1, 0x6}, @NFSD_A_VERSION_MINOR={0x8}, @NFSD_A_VERSION_MINOR={0x8, 0x2, 0x2}, @NFSD_A_VERSION_MINOR={0x8, 0x2, 0x4}, @NFSD_A_VERSION_MAJOR={0x8, 0x1, 0x7}]}, @NFSD_A_SERVER_PROTO_VERSION={0x28, 0x1, 0x0, 0x1, [@NFSD_A_VERSION_MAJOR={0x8, 0x1, 0x1e}, @NFSD_A_VERSION_MAJOR={0x8, 0x1, 0xa}, @NFSD_A_VERSION_MAJOR={0x8, 0x1, 0x3b}, @NFSD_A_VERSION_ENABLED={0x4}, @NFSD_A_VERSION_MAJOR={0x8, 0x1, 0x8}]}, @NFSD_A_SERVER_PROTO_VERSION={0x14, 0x1, 0x0, 0x1, [@NFSD_A_VERSION_ENABLED={0x4}, @NFSD_A_VERSION_ENABLED={0x4}, @NFSD_A_VERSION_MINOR={0x8, 0x2, 0x976}]}, @NFSD_A_SERVER_PROTO_VERSION={0x30, 0x1, 0x0, 0x1, [@NFSD_A_VERSION_MINOR={0x8, 0x2, 0x6}, @NFSD_A_VERSION_MAJOR={0x8, 0x1, 0x4}, @NFSD_A_VERSION_MINOR={0x8, 0x2, 0xfff}, @NFSD_A_VERSION_MINOR={0x8, 0x2, 0x3}, @NFSD_A_VERSION_ENABLED={0x4}, @NFSD_A_VERSION_MAJOR={0x8, 0x1, 0x200}]}, @NFSD_A_SERVER_PROTO_VERSION={0x24, 0x1, 0x0, 0x1, [@NFSD_A_VERSION_MAJOR={0x8, 0x1, 0x2}, @NFSD_A_VERSION_ENABLED={0x4}, @NFSD_A_VERSION_ENABLED={0x4}, @NFSD_A_VERSION_ENABLED={0x4}, @NFSD_A_VERSION_MAJOR={0x8, 0x1, 0x6}, @NFSD_A_VERSION_ENABLED={0x4}]}, @NFSD_A_SERVER_PROTO_VERSION={0x1c, 0x1, 0x0, 0x1, [@NFSD_A_VERSION_MAJOR={0x8, 0x1, 0x5}, @NFSD_A_VERSION_MAJOR={0x8, 0x1, 0xe8d}, @NFSD_A_VERSION_ENABLED={0x4}, @NFSD_A_VERSION_ENABLED={0x4}]}]}, 0x130}, 0x1, 0x0, 0x0, 0x24000001}, 0x100488c8) mmap$auto(0x0, 0x400005, 0xfffffffffffffffe, 0x9b72, 0x2, 0x8000) getrlimit$auto(0x9, &(0x7f0000000040)={0x0, 0xf8f}) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r4 = socket(0x11, 0x80003, 0x300) setsockopt$auto(r4, 0x107, 0x12, 0x0, 0x4) setsockopt$auto(0x3, 0x107, 0x16, 0x0, 0x6) close_range$auto(0x2, 0x8, 0x0) socket(0x9, 0x1, 0x4) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptyxb\x00', 0xa000, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/graphics/fbcon/rotate\x00', 0x10b842, 0x0) unshare$auto(0x40000080) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$auto_TIPC_NL_LINK_RESET_STATS(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000003e00)={&(0x7f0000000800)={0x20, r6, 0x935, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0xc, 0x4, 0x0, 0x1, [@nested={0x8, 0x1, 0x0, 0x1, [@typed={0x4, 0xea}]}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x0) openat$auto_trace_time_stamp_mode_fops_trace(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/tracing/timestamp_mode\x00', 0x105100, 0x0) 40.307560252s ago: executing program 1 (id=1711): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/i915/parameters/mitigations\x00', 0x80302, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) socket(0x2, 0x2, 0x0) r1 = openat$auto_ecryptfs_miscdev_fops_miscdev(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0) write$auto(r1, 0x0, 0x5) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) mmap$auto(0x5, 0x6, 0x80000001, 0x14, r1, 0x9) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x9, 0x8, 0x1, 0x2, 0x4, 0x15f4da0e, 0x3, 0xd08, 0xc, 0xc, 0x4, 0x6d3f, 0x9, 0x2, 0x4000000000000d]}, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) r2 = socket(0xa, 0x2, 0x3a) setsockopt$auto(r1, 0x2, 0x7fff, &(0x7f0000000040)='\x00', 0xfffffffb) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x1181, 0x0) read$auto_proc_reg_file_ops_compat_inode(0xffffffffffffffff, 0x0, 0x0) mmap$auto(0x0, 0x200009, 0x2, 0x40eb1, 0x602, 0x300000000000) sendmsg$auto_NL80211_CMD_REGISTER_BEACONS(r2, 0x0, 0x20040880) madvise$auto(0x2000, 0x20499d, 0x9) write$auto(r0, &(0x7f0000000000)='!h\xf3\xec@\xdbS\xcc\x04', 0xa) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x10000000, 0x2020009, 0x203, 0xeb1, 0xfffffffffffffffa, 0x8000) unshare$auto(0x40000080) set_mempolicy$auto(0x6, &(0x7f0000000000)=0x7e, 0x4) 39.404239482s ago: executing program 1 (id=1715): r0 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card0\x00', 0x20800, 0x0) r1 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cec20\x00', 0x1, 0x0) ioctl$auto_CEC_ADAP_S_PHYS_ADDR(r1, 0x40026102, 0x0) ioctl$auto(r0, 0xb21064a7, 0x20000a) 39.178078378s ago: executing program 1 (id=1717): r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/snd/controlC1\x00', 0x802, 0x0) ioctl$auto(r0, 0xc1205531, 0xffffffffffffffff) close_range$auto(0x2, 0x8, 0x0) socket(0x80000000000000a, 0x2, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xa001, 0x0) r2 = syz_genetlink_get_family_id$auto_ipvs(0x0, 0xffffffffffffffff) sendmsg$auto_IPVS_CMD_SET_DEST(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x4c, r2, 0x100, 0x70bd27, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xe}, @IPVS_CMD_ATTR_DEST={0x18, 0x2, 0x0, 0x1, [@typed={0x14, 0x7c, 0x0, 0x0, @ipv6=@mcast1}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x431a}]}, 0x4c}}, 0x20000800) write$auto(r1, &(0x7f0000000040)='\x00'/13, 0x81) statmount$auto(0x0, &(0x7f0000000180)={0x5, 0x1, 0x9, 0x7, 0x5, 0x6, 0x8, 0x7, 0x3, 0x9, 0x9, 0xffff, 0x4, 0x200000000001, 0xb4, 0xb, 0x9, 0x10007, 0x7, 0x10000000000, 0x0, 0x3, 0x22000, 0x203, 0x9, 0x84, 0x0, 0x4, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x7fffffff, 0x9, 0x7, 0x6, 0x0, 0x8, 0xfffffffffffffffd, 0x3, 0x0, 0x10000, 0x8000000000000000, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x2a7, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x1, 0x8000200000000001, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, 0x0, 0x8, 0xffffffffffffffff]}, 0x81, 0x968c) r3 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000000180), 0x1441, 0x0) ioctl$auto__ctl_fops_dm_ioctl(r3, 0xffbffffffffffd0e, &(0x7f00000001c0)) unshare$auto(0x40000082) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r4 = socket(0x2, 0x1, 0x0) bind$auto(r4, &(0x7f0000000040)=@nfc={0x27, 0x0, 0x1, 0x3}, 0x7) sendmmsg$auto(r4, &(0x7f0000000140)={{0x0, 0x12, 0x0, 0x9, 0x0, 0x1f, 0x101}, 0x8}, 0x7, 0x20020000) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) r5 = socket$nl_generic(0x10, 0x3, 0x10) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0xd, 0x3000, 0x6, 0x8, 0x7fffffff, 0xffffffffffffffff, [0x8411], {0x6, 0x6, 0x3, 0x29f, 0xfe, 0x7ffffffb, 0x101, 0x800, 0x3}, {0x2000008, 0x1, 0x52, 0x5, 0x2, 0x40, 0x76c5, 0x8, 0x100000000}}) mmap$auto(0x0, 0x9, 0xffb, 0x8000000008011, 0x3, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) io_uring_enter$auto(0x3, 0x5, 0xffffffff, 0x3, 0x0, 0x2) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'wg0\x00'}) sendmsg$auto_WG_CMD_SET_DEVICE(r5, 0x0, 0x810) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x400201, 0x0) write$auto(0x3, 0x0, 0x7fffffff) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) sendmsg$auto_MACSEC_CMD_ADD_RXSC(0xffffffffffffffff, 0x0, 0x4000040) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) 38.18191052s ago: executing program 1 (id=1718): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) (async) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mbind$auto(0x10001, 0x3, 0x8003, &(0x7f0000000100), 0x3, 0x3) timer_create$auto(0x8, 0x0, 0x0) 37.01531747s ago: executing program 1 (id=1723): mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x2) mount$auto(0x0, &(0x7f0000000540)='}[,&*}\x00', &(0x7f0000000040)='nfsd\x00', 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x2, 0x401) io_uring_setup$auto(0x6, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0xa, 0x801, 0x84) socket(0x2, 0x801, 0x106) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) socket(0xa, 0x2, 0x0) socketpair$auto(0x1e, 0xd, 0x8000000000000000, 0x0) socket(0xa, 0x801, 0x84) socket(0xa, 0x2, 0x3a) io_uring_setup$auto(0x101, 0x0) r3 = socket(0xa, 0x2, 0x8c) close_range$auto(0x0, 0xfffffffffffff000, 0x2) bpf$auto(0xfffffffe, &(0x7f00000001c0)=@bpf_attr_4={0x8081, r2, 0xffff, r3}, 0x800) bpf$auto(0x1, &(0x7f0000000040)=@task_fd_query={0x0, r1, 0x101, 0x3, 0x1, 0x181f, 0xffffffffffffffff, 0x40, 0xa}, 0x7) r4 = openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000000180), 0x10002, 0x0) ioctl$auto_posix_clock_file_operations_posix_clock(r4, 0x40383d0c, 0x0) close_range$auto(r0, 0xfffffffffffff000, 0x2) landlock_create_ruleset$auto(&(0x7f0000000000)={0x0, 0x34, 0x7}, 0x9, 0x0) landlock_restrict_self$auto(r0, 0x0) mount$auto(0x0, &(0x7f0000000140)='}[,&*}\x00', 0x0, 0x800, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189002, 0x0) 36.56383077s ago: executing program 1 (id=1724): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) landlock_create_ruleset$auto(&(0x7f0000000000)={0x6, 0x400, 0x7}, 0x9, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x8000, 0x70) openat$dir(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x8000, 0x70) r0 = socket(0x2b, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @remote}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000000)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xfffffffd}, 0x10001}, 0x5, 0x20000000) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000340)={{0x0, 0x10, &(0x7f00000000c0)={0x0, 0x1fff7}, 0x4, 0x0, 0xa, 0xb}, 0xfff}, 0x5, 0x311) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x6db, 0x0, 0x3ff, 0x0, 0x3, 0x697b}, 0xed7138c}, 0x9a6, 0xc01) 32.68589208s ago: executing program 9 (id=1738): r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/snd/controlC1\x00', 0x802, 0x0) ioctl$auto(r0, 0xc1205531, 0xffffffffffffffff) close_range$auto(0x2, 0x8, 0x0) socket(0x80000000000000a, 0x2, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xa001, 0x0) r2 = syz_genetlink_get_family_id$auto_ipvs(0x0, 0xffffffffffffffff) sendmsg$auto_IPVS_CMD_SET_DEST(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x4c, r2, 0x100, 0x70bd27, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xe}, @IPVS_CMD_ATTR_DEST={0x18, 0x2, 0x0, 0x1, [@typed={0x14, 0x7c, 0x0, 0x0, @ipv6=@mcast1}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x431a}]}, 0x4c}}, 0x20000800) write$auto(r1, &(0x7f0000000040)='\x00'/13, 0x81) statmount$auto(0x0, &(0x7f0000000180)={0x5, 0x1, 0x9, 0x7, 0x5, 0x6, 0x8, 0x7, 0x3, 0x9, 0x9, 0xffff, 0x4, 0x200000000001, 0xb4, 0xb, 0x9, 0x10007, 0x7, 0x10000000000, 0x0, 0x3, 0x22000, 0x203, 0x9, 0x84, 0x0, 0x4, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x7fffffff, 0x9, 0x7, 0x6, 0x0, 0x8, 0xfffffffffffffffd, 0x3, 0x0, 0x10000, 0x8000000000000000, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x2a7, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x1, 0x8000200000000001, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, 0x0, 0x8, 0xffffffffffffffff]}, 0x81, 0x968c) r3 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000000180), 0x1441, 0x0) ioctl$auto__ctl_fops_dm_ioctl(r3, 0xffbffffffffffd0e, &(0x7f00000001c0)) unshare$auto(0x40000082) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r4 = socket(0x2, 0x1, 0x0) bind$auto(r4, &(0x7f0000000040)=@nfc={0x27, 0x0, 0x1, 0x3}, 0x7) sendmmsg$auto(r4, &(0x7f0000000140)={{0x0, 0x12, 0x0, 0x9, 0x0, 0x1f, 0x101}, 0x8}, 0x7, 0x20020000) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) r5 = socket$nl_generic(0x10, 0x3, 0x10) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0xd, 0x3000, 0x6, 0x8, 0x7fffffff, 0xffffffffffffffff, [0x8411], {0x6, 0x6, 0x3, 0x29f, 0xfe, 0x7ffffffb, 0x101, 0x800, 0x3}, {0x2000008, 0x1, 0x52, 0x5, 0x2, 0x40, 0x76c5, 0x8, 0x100000000}}) mmap$auto(0x0, 0x9, 0xffb, 0x8000000008011, 0x3, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) io_uring_enter$auto(0x3, 0x5, 0xffffffff, 0x3, 0x0, 0x2) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'wg0\x00'}) sendmsg$auto_WG_CMD_SET_DEVICE(r5, 0x0, 0x810) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x400201, 0x0) write$auto(0x3, 0x0, 0x7fffffff) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) sendmsg$auto_MACSEC_CMD_ADD_RXSC(0xffffffffffffffff, 0x0, 0x4000040) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) 31.75560528s ago: executing program 9 (id=1740): mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x5b) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x0, 0x9, 0x40ad1, r0, 0x4) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0xa, 0x0) openat$auto_tracing_fops_trace(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/tracing/per_cpu/cpu1/trace\x00', 0x40200, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x74c) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x280, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x82, 0x0) r1 = socket(0x2, 0x1, 0x0) socket(0x2, 0x5, 0x0) r2 = epoll_create$auto(0x7) r3 = socket$nl_generic(0x10, 0x3, 0x10) epoll_ctl$auto(0x5, 0x1, r3, 0x0) capset$auto(0x0, 0x0) epoll_ctl$auto(0x5, 0x3, r3, 0x0) epoll_wait$auto(r2, 0x0, 0xe007, 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000400)='/dev/mtd0\x00', 0x28082, 0x0) write$auto(0xffffffffffffffff, 0x0, 0xfffffffffffffffb) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES64=r1, @ANYBLOB="2f212cbd35878085d3b27171ee9aadc77000fcdbdf25dda08eb3859389ef", @ANYRES32=r6, @ANYRESOCT=r5], 0x20}, 0x1, 0x0, 0x0, 0x8041}, 0x20000000) 30.771502732s ago: executing program 9 (id=1743): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16, @ANYBLOB="1b0026bd7000fedbdf250300000004000800100003800c000280080001b98359a56a0d42dcdcd0091e003fef1885a66783", @ANYRES32=r1, @ANYBLOB="12000100898771f1c19f177904e600000000000000000280"], 0x40}, 0x1, 0x0, 0x0, 0x4004040}, 0x4800) r2 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000003180), r0) sendmsg$auto_ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000003400)={0x0, 0x0, &(0x7f00000033c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="01032abd7080fcdbdf25010000000800028004000180"], 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r3, 0x0, 0x20) r4 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r4, &(0x7f0000000200)={0x0, 0x7}, 0x5) open(0x0, 0x149443, 0x0) openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000140), 0x101001, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, r0, 0x8000) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0x8, 0x0) r5 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x1, 0x0) write$auto_seq_oss_f_ops_seq_oss(r5, 0x0, 0x0) mmap$auto(0x0, 0x20009, 0xffffffffffffffff, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0x5, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/tty12\x00', 0x101840, 0x0) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x2020009, 0x7, 0xeb1, 0xfffffffffffffffa, 0x8000) writev$auto(0x1, &(0x7f0000000100)={0x0, 0x400000000000fdef}, 0x1) ioctl$auto(0x1, 0x541b, 0x8) mmap$auto(0x0, 0x20009, 0xffffffffffffffff, 0xeb1, 0x401, 0x8000) openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cec27\x00', 0x80200, 0x0) 29.255560395s ago: executing program 39 (id=1705): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000400), r0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x4000008000) r2 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/kcore\x00', 0x10b402, 0x0) pread64$auto(r2, 0x0, 0x800003, 0x1) setrlimit$auto(0x1, 0x0) mlockall$auto(0x7) r3 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/tty0\x00', 0x102, 0x0) writev$auto(r3, &(0x7f0000000040)={&(0x7f0000000000), 0xff}, 0x1) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x141000, 0x0) sendmsg$auto_NFSD_CMD_VERSION_SET(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000280)={0x130, r1, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@NFSD_A_SERVER_PROTO_VERSION={0x2c, 0x1, 0x0, 0x1, [@NFSD_A_VERSION_MINOR={0x8, 0x2, 0xa00000}, @NFSD_A_VERSION_MAJOR={0x8}, @NFSD_A_VERSION_MAJOR={0x8, 0x1, 0x5b2c}, @NFSD_A_VERSION_MAJOR={0x8, 0x1, 0x9}, @NFSD_A_VERSION_MAJOR={0x8, 0x1, 0x54db5d01}]}, @NFSD_A_SERVER_PROTO_VERSION={0x44, 0x1, 0x0, 0x1, [@NFSD_A_VERSION_ENABLED={0x4}, @NFSD_A_VERSION_MINOR={0x8, 0x2, 0x4}, @NFSD_A_VERSION_ENABLED={0x4}, @NFSD_A_VERSION_MINOR={0x8, 0x2, 0x4de}, @NFSD_A_VERSION_MAJOR={0x8, 0x1, 0x6}, @NFSD_A_VERSION_MINOR={0x8}, @NFSD_A_VERSION_MINOR={0x8, 0x2, 0x2}, @NFSD_A_VERSION_MINOR={0x8, 0x2, 0x4}, @NFSD_A_VERSION_MAJOR={0x8, 0x1, 0x7}]}, @NFSD_A_SERVER_PROTO_VERSION={0x28, 0x1, 0x0, 0x1, [@NFSD_A_VERSION_MAJOR={0x8, 0x1, 0x1e}, @NFSD_A_VERSION_MAJOR={0x8, 0x1, 0xa}, @NFSD_A_VERSION_MAJOR={0x8, 0x1, 0x3b}, @NFSD_A_VERSION_ENABLED={0x4}, @NFSD_A_VERSION_MAJOR={0x8, 0x1, 0x8}]}, @NFSD_A_SERVER_PROTO_VERSION={0x14, 0x1, 0x0, 0x1, [@NFSD_A_VERSION_ENABLED={0x4}, @NFSD_A_VERSION_ENABLED={0x4}, @NFSD_A_VERSION_MINOR={0x8, 0x2, 0x976}]}, @NFSD_A_SERVER_PROTO_VERSION={0x30, 0x1, 0x0, 0x1, [@NFSD_A_VERSION_MINOR={0x8, 0x2, 0x6}, @NFSD_A_VERSION_MAJOR={0x8, 0x1, 0x4}, @NFSD_A_VERSION_MINOR={0x8, 0x2, 0xfff}, @NFSD_A_VERSION_MINOR={0x8, 0x2, 0x3}, @NFSD_A_VERSION_ENABLED={0x4}, @NFSD_A_VERSION_MAJOR={0x8, 0x1, 0x200}]}, @NFSD_A_SERVER_PROTO_VERSION={0x24, 0x1, 0x0, 0x1, [@NFSD_A_VERSION_MAJOR={0x8, 0x1, 0x2}, @NFSD_A_VERSION_ENABLED={0x4}, @NFSD_A_VERSION_ENABLED={0x4}, @NFSD_A_VERSION_ENABLED={0x4}, @NFSD_A_VERSION_MAJOR={0x8, 0x1, 0x6}, @NFSD_A_VERSION_ENABLED={0x4}]}, @NFSD_A_SERVER_PROTO_VERSION={0x1c, 0x1, 0x0, 0x1, [@NFSD_A_VERSION_MAJOR={0x8, 0x1, 0x5}, @NFSD_A_VERSION_MAJOR={0x8, 0x1, 0xe8d}, @NFSD_A_VERSION_ENABLED={0x4}, @NFSD_A_VERSION_ENABLED={0x4}]}]}, 0x130}, 0x1, 0x0, 0x0, 0x24000001}, 0x100488c8) mmap$auto(0x0, 0x400005, 0xfffffffffffffffe, 0x9b72, 0x2, 0x8000) getrlimit$auto(0x9, &(0x7f0000000040)={0x0, 0xf8f}) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r4 = socket(0x11, 0x80003, 0x300) setsockopt$auto(r4, 0x107, 0x12, 0x0, 0x4) setsockopt$auto(0x3, 0x107, 0x16, 0x0, 0x6) close_range$auto(0x2, 0x8, 0x0) socket(0x9, 0x1, 0x4) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptyxb\x00', 0xa000, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/graphics/fbcon/rotate\x00', 0x10b842, 0x0) unshare$auto(0x40000080) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$auto_TIPC_NL_LINK_RESET_STATS(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000003e00)={&(0x7f0000000800)={0x20, r6, 0x935, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0xc, 0x4, 0x0, 0x1, [@nested={0x8, 0x1, 0x0, 0x1, [@typed={0x4, 0xea}]}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x0) openat$auto_trace_time_stamp_mode_fops_trace(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/tracing/timestamp_mode\x00', 0x105100, 0x0) 29.24582978s ago: executing program 9 (id=1750): openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x90a00, 0x0) request_key$auto_KEY_SPEC_PROCESS_KEYRING(&(0x7f00000006c0)='[{%\xbc::(\x00', 0xfffffffffffffffd, 0x0, 0xfffffffffffffffe) mq_timedsend$auto(0xffffffffffffffff, &(0x7f0000000000)='}&\x00', 0x8, 0xa5, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x8800, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000080), r0) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000100)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002abd7000fbdbdf25040000002d0011002f50136a450cf972f5a3d28479f92a9b221ca46c2d19fda4f47902c296fa844c12cd830900d3c41e5d00000010001a800800010088030000040004801800150080d159789423bc459a32a854b62e129391eb84b7"], 0x6c}, 0x1, 0x0, 0x0, 0x4008040}, 0x40800) sendmsg$auto_ETHTOOL_MSG_FEC_SET(0xffffffffffffffff, 0x0, 0x20004000) unshare$auto(0x40000080) r2 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r2, 0xc0045516, 0x0) unshare$auto(0x40000080) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r3 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f0, 0x15) unshare$auto(0x7) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) mincore$auto(0x1000, 0x4000000, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x2, 0x1, 0x0) listen$auto(0x3, 0x81) getsockopt$auto(r3, 0x6, 0x23, 0x0, &(0x7f00000000c0)=0x6) prctl$auto(0x37, 0x100003, 0x0, 0x0, 0x3) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x182b02, 0x0) 27.503361936s ago: executing program 9 (id=1754): mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket(0x0, 0x80000, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@ethernet={0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x27}}, 0x55) openat$auto_cachefiles_daemon_fops_internal(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) lseek$auto(0x3, 0x7fffffffffffffff, 0x0) mmap$auto(0x0, 0xa00006, 0x400002, 0x40ebe, 0xffffffffffffffff, 0x300000000000) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x3, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0xa, 0x0) mmap$auto(0xe779, 0x400000000007, 0xdf, 0x13, 0xffffffffffffffff, 0x0) socket(0x2b, 0x1, 0x0) socket(0xa, 0x1, 0x84) socket(0x28, 0x5, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) clock_nanosleep$auto(0x408, 0x0, &(0x7f00000000c0)={0x3, 0x2}, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x82202, 0x0) io_uring_setup$auto(0x1, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) ioctl$auto_TIOCSETD2(r1, 0x5423, 0x0) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) socket(0x2, 0x3, 0xa) readahead$auto(r0, 0x6, 0x814c) close_range$auto(0x2, 0xa, 0x0) 26.757937101s ago: executing program 9 (id=1756): mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x6, 0x0) socketpair$auto(0x1d, 0xfffffffd, 0x8000000000000000, 0x0) socket(0x15, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000240)='/dev/video37\x00', 0x8a240, 0x0) read$auto_v4l2_fops_v4l2_dev(r0, &(0x7f0000000280)=""/40, 0x28) read$auto(r0, &(0x7f0000000000)='/dev/video37\x00', 0x81) io_uring_setup$auto(0x1d48, &(0x7f0000000340)={0x7fffffff, 0x10, 0x2, 0x6, 0x7, 0x8, 0xffffffffffffffff, [], {0x6, 0x88, 0x1, 0x80000000, 0x100, 0x83, 0x101, 0x6, 0x8000000000000001}, {0x100, 0x1, 0x10000052, 0x5, 0x11, 0x101, 0x876c5, 0xc9, 0x7}}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)={0x30, r2, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NFSD_A_SERVER_SCOPE={0x9, 0x4, 'nfsd\x00'}, @NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0x85}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x2}]}, 0x30}}, 0x4000) timer_create$auto(0x0, 0x0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, 0x0, 0x0) mmap$auto(0x6, 0x4, 0x4000000000dd, 0x40eb1, 0xffffffffffffffff, 0x300000000000) madvise$auto(0x0, 0x7, 0x17) socket$nl_generic(0x10, 0x3, 0x10) unshare$auto(0x40000080) openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) r3 = socket(0x11, 0x2, 0x6) capset$auto(0x0, &(0x7f0000000000)={0x5, 0x37, 0x10000}) sendmmsg$auto(r3, &(0x7f00000001c0)={{&(0x7f0000000000), 0x1aa, &(0x7f0000000100)={&(0x7f00000003c0), 0x49}, 0x5, &(0x7f0000000180), 0x5, 0x1000}, 0x5}, 0x2, 0x100) close_range$auto(0x2, 0x8, 0x0) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x34d802, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000080), 0x80040, 0x0) ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) 21.38265439s ago: executing program 40 (id=1724): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) landlock_create_ruleset$auto(&(0x7f0000000000)={0x6, 0x400, 0x7}, 0x9, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x8000, 0x70) openat$dir(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x8000, 0x70) r0 = socket(0x2b, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @remote}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000000)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xfffffffd}, 0x10001}, 0x5, 0x20000000) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000340)={{0x0, 0x10, &(0x7f00000000c0)={0x0, 0x1fff7}, 0x4, 0x0, 0xa, 0xb}, 0xfff}, 0x5, 0x311) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x6db, 0x0, 0x3ff, 0x0, 0x3, 0x697b}, 0xed7138c}, 0x9a6, 0xc01) 20.747748811s ago: executing program 2 (id=1767): r0 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x20881, 0x0) mmap$auto(0x0, 0x9, 0xfffffffffffffffa, 0x9b72, r0, 0x4) r1 = openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f00000011c0)='/dev/snd/pcmC0D0p\x00', 0x40, 0x0) lsm_get_self_attr$auto(0xffffffff, 0x0, &(0x7f0000000140)=0x7, 0xfffffff8) ioctl$auto_SNDRV_PCM_IOCTL_HW_REFINE_OLD(r1, 0xc1004110, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) r2 = semctl$auto_GETPID(0x4, 0x1ff, 0xb, 0x5) prctl$auto_PR_SET_MM_ENV_END(0x2, 0xb, r2, 0x3, 0x80000000) prctl$auto_PR_TIMER_CREATE_RESTORE_IDS_GET(0xfffffff8, 0x2, r2, 0x9, 0x7fffffff) setresuid$auto(0x2, 0xffffffffffffffff, 0x200) keyctl$auto(0x5, 0xfffffffd, 0x101, 0x1, 0x4000000000b8c) keyctl$auto(0xb, 0xfffffffd, 0x7, 0xfffffffffff00003, 0x6) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/module/zswap/parameters/compressor\x00', 0x80002, 0x0) write$auto_ocfs2_control_fops_stack_user(r3, &(0x7f0000003900)='\t', 0x1) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/virtio_mmio/parameters/device\x00', 0x80480, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r4, &(0x7f00000003c0)=""/4096, 0x1000) write$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f0000000040)='1', 0x1) r5 = getpgid(0x0) rt_tgsigqueueinfo$auto(0xffffffffffffffff, r5, 0x8, &(0x7f0000000100)={@siginfo_0_0={0x6, 0xe, 0x5, @_sigchld={r5, 0x0, 0x401, 0x5, 0x3}}}) rt_tgsigqueueinfo$auto_SIGCONT(0x0, r2, 0x12, &(0x7f00000001c0)={@siginfo_0_0={0x8, 0x0, 0x80000000, @_timer={r5, 0x8, @sival_ptr=&(0x7f00000000c0)="7e7488dee782d68e426ca12c073ffdd76e38328ae497d60a5ff99d5b6d55eb", 0x4}}}) r6 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/controlC1\x00', 0x40000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, r6, 0x0) socket(0x10, 0x2, 0x4) openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000000)='/dev/usbmon7\x00', 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0xc) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000100), 0x40, 0x0) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/pagetypeinfo\x00', 0x43102, 0x0) 18.633533256s ago: executing program 2 (id=1770): mmap$auto(0x0, 0x400, 0xdf, 0xeb1, 0x401, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) (async) r0 = open(0x0, 0x1652c2, 0xe1d2b27bdc14aa98) (async) sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x3) r1 = socket(0x1e, 0x1, 0x0) connect$auto(r1, 0x0, 0x10) (async) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x2020005, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/block/loop14/queue/dma_alignment\x00', 0x80000, 0x0) read$auto(r2, 0x0, 0x20) socket(0xa, 0x801, 0x84) (async) unshare$auto(0x40000080) (async, rerun: 32) prctl$auto(0x3e, 0x1, 0xffffffffffffffff, 0x1, 0x0) (rerun: 32) write$auto(0xffffffffffffffff, 0x0, 0x100000a3d9) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, 0x0, 0x2000, 0x0) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB="dd861830031eb850d2ecd1b1e213dfa77c7e94b2f1522a891417d5892d2f2306851a9d84969bcecde186577021fadbdc4b91f2e27680e68bd254d04f463a0b59b46b248451cb6e9bc024a2a45306780ecef379da2a7d87958ecc63e923e28f21a88dd81ed46ed8ae2f580ab85b9a388108b09df39bd1579ef93901820600676e562a938b34ae8fa81ed38e1e184a79c1", @ANYRES16=r3, @ANYBLOB="01002dbd7000fcdbdf257e000000"], 0x14}, 0x1, 0x68, 0x0, 0x4000000}, 0x0) r5 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) setreuid$auto(0xffffffffffffffff, 0xffffffffffffffff) (async, rerun: 32) dup$auto(r0) (async, rerun: 32) writev$auto(r5, &(0x7f0000000200)={0x0, 0x7}, 0x3) (async, rerun: 64) landlock_create_ruleset$auto(&(0x7f0000000000)={0x6, 0x3, 0x3}, 0x18, 0xfffffffd) (rerun: 64) r6 = openat$auto_kmsg_fops_printk(0xffffffffffffff9c, &(0x7f0000000080), 0x2140, 0x0) pread64$auto(r6, &(0x7f0000000140)=']}\x00', 0x101, 0x8) (async, rerun: 32) r7 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) (rerun: 32) fadvise64$auto_POSIX_FADV_NORMAL(r7, 0x0, 0x49, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'veth0_virt_wifi\x00', 0x0}) bpf$auto(0x0, &(0x7f00000003c0)=@bpf_attr_5={@target_ifindex=r8, r5, 0x0, 0x5, r1, @relative_fd=r2, 0x8}, 0x6d4) 17.30640529s ago: executing program 2 (id=1772): openat$auto_generic(0xffffffffffffff9c, 0x0, 0x300, 0x0) r0 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000100)='/dev/binderfs/binder0\x00', 0x800, 0x0) close_range$auto(0x2, r0, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ptyrd\x00', 0x0, 0x0) r1 = openat$auto_rng_chrdev_ops_core(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) read$auto_rng_chrdev_ops_core(r1, &(0x7f0000000040)=""/4096, 0xfffffe82) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r2, &(0x7f0000004240)={0x0, 0x0, &(0x7f0000004200)={&(0x7f00000010c0)=ANY=[@ANYBLOB="1c000000", @ANYBLOB="2f2e3b958bce85ef2ac8dbe50e56c1ae67be724a105f82add8aebae026802cc80219983692480b6a69da329570b7dee2203b18d8444c787d4d9184792b86d5f0077206c7007d32bb65c3e85594f38dc6c249c04b00011a2a7a1ff7423fa4b6e866bf8960a7b19fe6c8dea60ff0f498031232084806a6894c4cda411486cbb75a0d912a2c09", @ANYBLOB="010025bd7000fe52f125040000000800170000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x40c8}, 0x4048000) r3 = waitid$auto(0x5, 0xffffffffffffffff, &(0x7f0000000100)={@_si_pad}, 0x3, &(0x7f0000000180)={{0x8, 0x80}, {0x2, 0x6}, 0x4, 0x5, 0x1, 0x3, 0x2000000, 0x8000, 0x7ffffffc, 0x7, 0xb7, 0x5d9, 0x5, 0x7ff, 0x2055}) prctl$auto(0x6, 0x80000000, r3, 0x78, 0xa) r4 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x400000000000d, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x7ffb) preadv2$auto(r4, &(0x7f0000000080)={0x0, 0x80000000}, 0x6, 0xffffffffffffffff, 0x4, 0x2e) ioctl$auto_BLKFLSBUF(r4, 0x1261, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, 0x0, 0x40, 0x0) mmap$auto(0x0, 0x202000a, 0x5, 0xeb1, 0xfffffffffffffffa, 0x8000) r5 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$auto_VHOST_SET_BACKEND_FEATURES(r5, 0x4008af25, &(0x7f0000000000)=0x7) mmap$auto(0x4, 0xa00006, 0x2, 0x100000000040eb1, 0x602, 0x300000000000) openat$auto_tun_fops_tun(0xffffffffffffff9c, 0x0, 0xa1480, 0x0) rseq$auto(&(0x7f0000000580)={0x5, 0x85, 0x9416, 0x1, 0x7, 0x6, "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"}, 0x6, 0x3, 0xff) r6 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000001080)='/dev/snd/midiC2D2\x00', 0x4161c0, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r6, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) mmap$auto(0x1, 0x7, 0xdf, 0x13, 0xffffffffffffffff, 0x10001) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) 16.19191174s ago: executing program 2 (id=1773): open(0x0, 0x161342, 0x100) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socket(0x10, 0x2, 0x0) openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f0000000580)='/dgva/E\x80j\x85\x00\x00\x00\x00\xb58\xd2\xa9\xc6Q\xc7\x93\xacp\x97\x15j\x03\x0fC\x1f\xe5F\xc9\x19\xe6\x8d\xc8C\x91aF?\\\x00\x13zT\'1fKn\x00-\xedR\x05\xc2\xcd<\xd9\x97N\xc4\x81 d\x9f\\\x96\xc9#\xe6\xd9\xfc\x1f\xf5%\xe6\xdbq\xe6R\x8c9\xc8\xd1*\x9ab\xd4\xad\x05H&\xe2\x05\xe9Ib\xea\xdd\xdfdw*\xa4\x8e\xe4\x8btCgYD\xe5\t\xd6\x01H\xcdR\xe4\x90J\x8a\xb4\x92\xfao\xf65HJA\xd04\'9\x01e\x95\x0e(\xb5\x05\xcc\xf5?K\xa4\x02\x19\x8b\xe2\x90\r_!\x9f\x02\xb8q\x04\x8a\xcdC\x15\x88\xac\xb4w-\xf8D\x82\x8d\xbc\xfd\x90$?\x12\x97C\xb3S\x1e\x00\xc2\xbb\n\x9fuM0xffffffffffffffff, 0x80000001}, 0x350) socket(0x1, 0xe, 0x2) mmap$auto(0x0, 0xa00006, 0x3, 0x40eb1, r0, 0x300000000000) (async) mmap$auto(0x1, 0x40000c, 0xdf, 0x11, 0x2, 0x8002) (async) clock_adjtime$auto(0x1, &(0x7f0000000280)={0xfff, 0x0, 0x6fe, 0x40004, 0x7, 0x4, 0x8227, 0x0, 0x2, 0x0, 0x8, {0x7, 0x800}, 0x101, 0xf8, 0xa, 0xd94, 0x0, 0x1, 0x7, 0x6, 0xa9, 0x3, 0xfffffffe}) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000005c0)='/proc/asound/card1/pcm1p/sub4/xrun_injection\x00', 0x80002, 0x0) writev$auto(r1, &(0x7f0000000240)={0x0, 0x9}, 0xb) (async, rerun: 32) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async, rerun: 32) r2 = socket(0x2, 0x1, 0x106) bind$auto(r2, &(0x7f0000000040)=@in={0x2, 0x3, @broadcast}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) (async) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D2\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) write$auto(r3, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) (async, rerun: 64) userfaultfd$auto(0x1) (async) ioctl$auto(0x3, 0xc018aa3f, 0xf0b) (async) ioctl$auto_FS_IOC_GETFSSYSFSPATH(0xffffffffffffffff, 0x80811501, 0x1) (async) openat2$auto(0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x4, 0x2}, 0x80000001) (async) fanotify_init$auto(0x65, 0x3) (async, rerun: 32) openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f0000000200)='/dev/snd/pcmC1D1c\x00', 0x6042, 0x0) (rerun: 32) write$auto(0x3, 0x0, 0xfffffdef) (async, rerun: 64) r4 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/027/001\x00', 0x4a901, 0x0) (rerun: 64) ioctl$auto_USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f00000001c0)={0x0, 0x5517, 0x0}) (async) select$auto(0x9, 0x0, 0x0, &(0x7f00000002c0)={[0x201, 0x7, 0xd, 0x1, 0x800010000000948b, 0x3, 0x15f4da07, 0xb7e, 0x0, 0x8, 0x80000023, 0x1000, 0x6d3b, 0x9, 0x2, 0x8]}, 0x0) (async, rerun: 32) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) (rerun: 32) write$auto(0x3, 0x0, 0xfffffdef) (async) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/platform/dummy_hcd.1/usb2/2-0:1.0/usb2-port1/disable\x00', 0x102, 0x0) landlock_create_ruleset$auto(&(0x7f00000001c0)={0x8, 0xfffffffffffffff9, 0x2}, 0x8, 0x34) sendfile$auto(r5, r5, 0x0, 0x7) 13.766460691s ago: executing program 2 (id=1778): write$auto(0xffffffffffffffff, &(0x7f0000000040)='//\xf2\x00', 0x80000000) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) r0 = io_uring_setup$auto(0x1d48, &(0x7f0000000340)={0x7fffffff, 0x10, 0x2, 0x6, 0x7, 0x8, 0xffffffffffffffff, [], {0x6, 0x88, 0x1, 0x80000000, 0x100, 0x83, 0x101, 0x6, 0x8000000000000001}, {0x100, 0x1, 0x10000052, 0x5, 0x11, 0x101, 0x876c5, 0xc9, 0x3}}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x11, 0x2, 0x9) mmap$auto(0x0, 0x20009, 0xfffffffffffffffc, 0x13, r2, 0x0) r3 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)={0x30, r3, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NFSD_A_SERVER_SCOPE={0x9, 0x4, 'nfsd\x00'}, @NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0x85}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x2}]}, 0x30}}, 0x4000) io_uring_register$auto(r0, 0x18, 0x0, 0x9) timer_create$auto(0x0, 0x0, 0x0) r4 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r4, 0x0, 0x0) mmap$auto(0x6, 0x4, 0x4000000000dd, 0x40eb1, r4, 0x300000000000) getsockopt$auto_SO_RCVTIMEO_NEW(r4, 0x8, 0x42, &(0x7f0000000000)='^{\x00', &(0x7f0000000180)=0x37d) mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000020c0), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_MM_GET(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x14, r6, 0x301, 0x70bd28, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x44808}, 0x2004c894) unshare$auto(0x40000080) mmap$auto(0x0, 0x2020009, 0x2, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$auto(0xffffffffffffffff, 0x4004550c, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) mlock$auto(0xfbea, 0x7fffffffffffffff) 11.673499907s ago: executing program 41 (id=1756): mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x6, 0x0) socketpair$auto(0x1d, 0xfffffffd, 0x8000000000000000, 0x0) socket(0x15, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000240)='/dev/video37\x00', 0x8a240, 0x0) read$auto_v4l2_fops_v4l2_dev(r0, &(0x7f0000000280)=""/40, 0x28) read$auto(r0, &(0x7f0000000000)='/dev/video37\x00', 0x81) io_uring_setup$auto(0x1d48, &(0x7f0000000340)={0x7fffffff, 0x10, 0x2, 0x6, 0x7, 0x8, 0xffffffffffffffff, [], {0x6, 0x88, 0x1, 0x80000000, 0x100, 0x83, 0x101, 0x6, 0x8000000000000001}, {0x100, 0x1, 0x10000052, 0x5, 0x11, 0x101, 0x876c5, 0xc9, 0x7}}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)={0x30, r2, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NFSD_A_SERVER_SCOPE={0x9, 0x4, 'nfsd\x00'}, @NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0x85}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x2}]}, 0x30}}, 0x4000) timer_create$auto(0x0, 0x0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, 0x0, 0x0) mmap$auto(0x6, 0x4, 0x4000000000dd, 0x40eb1, 0xffffffffffffffff, 0x300000000000) madvise$auto(0x0, 0x7, 0x17) socket$nl_generic(0x10, 0x3, 0x10) unshare$auto(0x40000080) openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) r3 = socket(0x11, 0x2, 0x6) capset$auto(0x0, &(0x7f0000000000)={0x5, 0x37, 0x10000}) sendmmsg$auto(r3, &(0x7f00000001c0)={{&(0x7f0000000000), 0x1aa, &(0x7f0000000100)={&(0x7f00000003c0), 0x49}, 0x5, &(0x7f0000000180), 0x5, 0x1000}, 0x5}, 0x2, 0x100) close_range$auto(0x2, 0x8, 0x0) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x34d802, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000080), 0x80040, 0x0) ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) 4.034509883s ago: executing program 0 (id=1806): mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) mknod$auto(&(0x7f0000000080)='u[,&*}\x00\a\x00\x00\x00?\xa4\x1fN\xa1~5Z\xc7\r\f}M4\xa8m\xe6\x19[11\xab\xff-E\xac9(\xb4O\xa0t4h\x9f-gn\x1f\x01\x00\x00\x00\x00\x00\x00\x00\xaeR\x81\r_\x0e\x19\b\x85\bvv(e\xdax)\t\x15\xf6\xc8\xee\x04\x16\xc1\x9a!\x87I7\x8cD&zg\xb0a\xab|E\xde\x14\xee[\xc8\xc0\xa8Nh\x0f\xa3\xdbT\xb3\xb8\xd2F\xa0\xc4]\xaf\xc43&\xe4\x01\x05\xd2\x15\xf8\xf1!\x9d\x92\xbbH\xd3^aD\x87\xd8\xe7\xd2\xf3[r\xc5S&}D[\x97\xf1\xd9\xf8Y\x1c\x03\x84\xb4\xd7\x16\x19\xe5\x17\x10\xd8fcG:\xfbY8\x17w\x98?\x03@\xe5\x02\x05\x93h\xb9\xf7\xef\x84\x8aGlN\a\x1e\x00\x00\x00\x00\x00\x00\x00\xf1p\xeb\xe9(%\x89\xef\x85\xdfr\xce\x00\x00\x00\x00\xff\x00\xa2M\'d\x12\x1c\x12\xca\xa5_\x8d\xdf\xc5\x8d\x19?\xfc~\xb3X\x14\xa7\xa9M\x87\xfcTW\x1bR\xbci\x8d\x8aNEO\xb3~~\xa8\xa6\x894\x80;s\xb7\xa3V\x1b\x14|\x9e\xd4\x05\x85\x0f!\xab-E\'\x97Y\xb7\xe8fMv_\xf8\xa0S\xef\xb7\b\xe7!T.g\x92\x87\t$\x06\xa4\xfb\x83\x8c\x17^\x82\xe7\xd3\xf6q\x1a\xa0\xf82[W\x90\xdd\xe3\xde\xa9\xde\x94`-\x9a\x1e}\xebO*\xb85,v.\xfc5\xba?vlt\xda%\x06a\x15I\x1f\xe3\x05+\x810T2\xf9\x9b\xc7\xd1\t\x03\xf2\x8d\x8a\x90\xb54\bH<9\xf1\x91 D\x85g,\xaa\xca\xcd\xd5\xcb\x9a\xb1j\xf2F\xce\x14\x92\xf9\xd7\xec\xc5\x1e\x8aq2\xce\x881f\xd7\xd4\x9e\xf6\xb6P\x01\xe8T\xb5X\xb9d-I\xd6\x91\xc3\xe2\x88S\x82l=\x02t$p\t\x8cY\x06\r\x83\xb0\x86\xc6\x84\x1c\xce\xb6\xf0\xdfC\x9fj<\xfe\xa4\x1f\x82L\xe4\x13+H\x00\x00\x00\x00\x00\x00\x00\x01M\x16\xa0\xbeB6\xfb\xa2-\x17\x93Q\x9fKusl5\xa2$M\xb4\x18\x1db\xf3\xce\x8c\xe5Rna\xd5\xbbQ\xc7\xa7+\vH\xc1l\x1bIv\xe8_\x00', 0x1081, 0x8) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00'}) sendmsg$auto_NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x404c0c0}, 0x40c4) r1 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/controlC2\x00', 0x2000, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_READ(r1, 0xc4c85512, &(0x7f00000006c0)={{@raw=0x1, 0x2, 0x2, 0xff, "162629e6b2259bee9878f8e7b039aa20b33e487d34917b4a9acce903cb72dd4cd8dde6d41c914d63af7a9de9", @raw}, 0x0, @integer=@value=[0x400000000006, 0x6, 0x179, 0xfffffffffffff8ad, 0x0, 0xa, 0x89, 0x8, 0x4, 0x7, 0x6, 0x7, 0x100000001, 0x3, 0x7, 0x8, 0x81, 0x9f, 0x8, 0xd, 0xb1, 0x0, 0x3, 0x8, 0x2, 0x10001, 0x1, 0x80100000, 0x8000, 0xffffffff8db4d983, 0x0, 0xee7c, 0xf, 0xfffffffffffffffe, 0x4, 0x1, 0x3, 0x9, 0x804, 0x7, 0x3, 0x4f3, 0xc, 0x4, 0xe02, 0x0, 0xe4, 0x9, 0x6, 0x81, 0x401, 0x3, 0xa, 0x0, 0x400000000000006, 0xa36d, 0x0, 0x6, 0x101, 0x82, 0xc9d, 0x401, 0x9, 0x5, 0x640c, 0x3, 0x1000, 0xff, 0x201, 0x0, 0xec31, 0x9, 0x1ff, 0x0, 0xfff0000000000000, 0x4, 0xbd2a, 0x903, 0x7, 0x7fffffffffffffff, 0x1, 0x1, 0xfffffffffffffffe, 0x0, 0x7eda8566, 0x7, 0x7fffffffffffffff, 0x7, 0x401, 0xfffffffffffffff7, 0x8, 0x14000000000000, 0x6, 0xfffffffffffffffe, 0x0, 0x9, 0x8000000000000001, 0x5, 0x5, 0x1, 0x40, 0x1, 0x7, 0x2, 0x3, 0x400000000000008, 0x1f, 0x8001, 0xc13, 0x800000000000006, 0xbf5, 0x2, 0xa, 0x7, 0xf, 0xe0, 0x1, 0x8, 0x3, 0x7fffffff, 0x6, 0x2, 0x2, 0xa, 0x5, 0x1, 0x7fffffffffffffff, 0x10002], "54a5f1d1dd2f17b169e8263c3a740d6611142f4b3c69d0f6e967c91125d235ac53e1b00d9fddc53d8f56969329274a57d5f4213fb46616a4faa700873d91426befc561500a5391d522c480bd37f8e7f0050cedfc627c6702978a8f018ad9a7b04711dc3a5c6a755e7a506645ea28e2baa4a6786ca43b3d5d976157eb07c3cdb8"}) mmap$auto(0x0, 0x400004, 0x800df, 0x15, 0xfffffffffffffffe, 0x8000) socketpair$auto(0x1e, 0x5, 0x3, 0x0) open(0x0, 0x22240, 0x155) socket(0x2, 0x1, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_snapshot_fops_user(0xffffffffffffff9c, 0x0, 0x80201, 0x0) socket(0x2, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0xffff, @remote}, 0x6a) socket(0x2, 0x1, 0x106) mmap$auto(0x0, 0x7, 0xdf, 0x9b72, 0x7, 0x28000) socket(0xa, 0x1, 0x84) r2 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video1\x00', 0xc0400, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) fsconfig$auto_JFFS2_COMPR_MODE_NONE(r2, 0x9, &(0x7f0000000040)='{6y\xfa\xd6\bk\xf0\xe3\n', 0x0, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd3e, 0x1, 0x948b, 0x7, 0x3, 0x10001, 0x3, 0x5e, 0x80000001, 0x7, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) prctl$auto(0x4e, 0x2, 0x0, 0x100, 0x2) write$auto(r3, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0x11, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948e, 0xffffffffffffffff, 0x15f4da0a, 0x3, 0x1000, 0x62, 0x4000008000001f, 0x7, 0x6d3e, 0x6, 0x2, 0x6]}, 0x0) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xca002, 0x0) sendfile$auto(r4, r4, 0x0, 0x7ffff000) 3.079602761s ago: executing program 0 (id=1807): r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x20342, 0x0) ioctl$auto_SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000)) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x1a9402, 0x0) sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(0xffffffffffffffff, 0x0, 0x800) timer_create$auto(0x9, 0x0, 0x0) timer_delete$auto(0x1) read$auto(0x3, 0x0, 0x8080) socket(0xa, 0x1, 0x100) write$auto(0x3, 0x0, 0xffd8) unshare$auto(0x40000080) write$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffffff, &(0x7f00000001c0)="624d1bfe595046ab5c98199adf260600de16baef6176e6021e1dce210500e8fdffff0000000000fffffffe00a7ed73de11691c13403c82be", 0x7b) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x3, 0x3b) r1 = socket(0x10, 0x3, 0x15) sendmsg$auto_NFSD_CMD_THREADS_SET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x4001}, 0x8045) write$auto(r1, &(0x7f0000000000)='-\x00', 0x2fb) r2 = openat$auto_bch_chardev_fops_chardev(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) ioctl$auto_BCH_IOCTL_DISK_ONLINE(r2, 0x4010bc06, &(0x7f00000000c0)={0xffffffff, 0x0, 0x5}) ioctl$auto_VHOST_SET_VRING_CALL(0xffffffffffffffff, 0x4008af21, &(0x7f0000000100)={0x2, r1}) r4 = syz_genetlink_get_family_id$auto_wireguard(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$auto_WG_CMD_GET_DEVICE(r3, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="10002cbd7000fddbdf250000000008000700000000001400020076657468315f746f5f626174616476000800050007000000094d4679550cdaebd8c4a94d2ac540fea148b96d355fed"], 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x40041) pread64$auto(0xffffffffffffffff, 0x0, 0x206, 0x14a) write$auto(0xca, &(0x7f0000000000)='\x04\x02\x00\r\xfb\xff\xf6\xdd\x90\x806\xc8\xbe\x94\xf2\xa2', 0x2d9) process_mrelease$auto(0xffffffffffffffff, 0x2000040a) timerfd_settime$auto(0xffffffffffffffff, 0x3382, &(0x7f0000000380)={{0x2, 0x8}, {0x8, 0x1000}}, &(0x7f00000003c0)={{0x0, 0x800}, {0x14, 0xff}}) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) write$auto(0x3, 0x0, 0x100082) mmap$auto(0x0, 0x0, 0xdf, 0x10000000009b78, 0xffffffffffffffff, 0x7ffc) ioctl$auto_FS_IOC_GET_ENCRYPTION_NONCE(r3, 0x8010661b, &(0x7f00000002c0)="3e73091f5d2f7158cc952861e16ad1df") 2.972983189s ago: executing program 3 (id=1785): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x15, 0x5, 0x0) bind$auto(r0, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) sendmsg$auto(r0, &(0x7f0000000180)={&(0x7f0000000040), 0x7fc, 0x0, 0x8, 0x0, 0x1, 0x4}, 0x0) (async) sendmsg$auto(r0, &(0x7f0000000180)={&(0x7f0000000040), 0x7fc, 0x0, 0x8, 0x0, 0x1, 0x4}, 0x0) r1 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, 0x0, 0x1, 0x0) ioctl$auto_PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000006ec0)=0x3) (async) ioctl$auto_PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000006ec0)=0x3) write$auto(r1, 0x0, 0xfdef) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x0) (async) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x0) ioprio_get$auto(0x10001, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/devices/system/machinecheck/machinecheck0/bank6\x00', 0x2101, 0x0) write$auto(r2, &(0x7f0000000240)='802.15.4 MAC\x00', 0x3) r3 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_VERSION_GET(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r5, 0x1, 0x70bd27, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x2000c014}, 0x20008040) (async) sendmsg$auto_NFSD_CMD_VERSION_GET(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r5, 0x1, 0x70bd27, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x2000c014}, 0x20008040) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r0, &(0x7f0000000840)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000800)={&(0x7f0000000880)=ANY=[@ANYBLOB='h\a\x00c', @ANYRES16=r3, @ANYBLOB="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"], 0x768}, 0x1, 0x0, 0x0, 0x48004}, 0x20000001) ustat$auto(0x801, 0x0) r6 = socket(0xa, 0x1, 0x84) getsockopt$auto(r6, 0x84, 0x9, 0x0, 0x0) (async) getsockopt$auto(r6, 0x84, 0x9, 0x0, 0x0) socket(0xa, 0x2, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x7f, 0x8000) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) (async) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) r7 = socket(0x1d, 0x2, 0x6) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0x15, 0x5, 0x0) (async) socket(0x15, 0x5, 0x0) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) (async) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) ioctl$auto(0x3, 0xc0104d03, r7) socket(0x10, 0x2, 0x0) 1.956149177s ago: executing program 0 (id=1809): socket(0x2c, 0x3, 0xffffffff) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000000280)={0x1c, r1, 0x9ec6579d452c1f15, 0x70bd2c, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0x1}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x20000080) 1.858302055s ago: executing program 0 (id=1810): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/net/lapb0/statistics/rx_missed_errors\x00', 0x650403, 0x0) r1 = syz_genetlink_get_family_id$auto_ovs_meter(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_OVS_METER_CMD_GET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000300)={&(0x7f00000000c0)={0x21c, r1, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@OVS_METER_ATTR_BANDS={0x1e9, 0x4, 0x0, 0x1, [@typed={0x3f, 0xa4, 0x0, 0x0, @str='/sys/devices/virtual/net/lapb0/statistics/rx_missed_errors\x00'}, @generic="dbd9d43b5a0bdedab9255f1e577e73291b45ecbe9ce4f2ff07c55d80f7b3dabbeac75fa7052f2f8b0aae48d9a5f89806591ce7f4a3e1249b4f8331cbf9281561b5a290ec30d150e64bbd629c36910436fae51158c5ca247aecadda376f6758d6c720e665c91a209c6a3fffc76ce6782a7a2a1d5ee746817238532462bcee7d001fb6e5b36a996e308d9182b9224bd8de48032e0d530a7c6751f197c577dd96773a07e5898ce7a3f23dd169fac79b2186dd6e1b9481", @generic="117814a383459c073d43872530d2b97efbed67adf5e62f34f5a1a89814549c162801919a3dbc61f957173ddcce19ec5114cfa660d4a2da39282f69c643dc089851f78bc7b13d6fc254a6a73e4b370e09a40c9341c3db62ed3e357383c12afda5dda61412e088c391862fcf13f7", @typed={0x14, 0x13e, 0x0, 0x0, @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}}, @typed={0x5, 0x9a, 0x0, 0x0, @str='\x00'}, @generic="5ec32e1ec2bb00f1093bf807e57fe68d603297791ff9f1f571547c82b4fa3a99498f4dd32c332fd947c3de6cf374c608f3c9f24308d7669815215eec8b0406fb0a26676d6cf306a2f689168a8bd638bb40147655490d0b73084e82639176e11a77b82d4c652f02"]}, @OVS_METER_ATTR_KBPS={0x4}, @OVS_METER_ATTR_ID={0x8, 0x1, 0x3}, @OVS_METER_ATTR_KBPS={0x4}, @OVS_METER_ATTR_USED={0xc, 0x5, 0x8}]}, 0x21c}, 0x1, 0x0, 0x0, 0x20004080}, 0x2) write$auto(r0, &(0x7f0000000380)='\x00', 0x8) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_vdpa(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$auto_VDPA_CMD_DEV_GET(r2, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x54, r3, 0x10, 0x70bd2d, 0x25dfdbfc, {}, [@VDPA_ATTR_MGMTDEV_BUS_NAME={0xe, 0x1, 'ovs_meter\x00'}, @VDPA_ATTR_DEV_NET_CFG_MAX_VQP={0x6, 0xc, 0x7017}, @VDPA_ATTR_MGMTDEV_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @VDPA_ATTR_MGMTDEV_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x200480c0}, 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000580), r2) r6 = fcntl$auto_F_GETOWN(r2, 0x9, 0x1000) sendmsg$auto_NL802154_CMD_GET_INTERFACE(r4, &(0x7f00000007c0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000780)={&(0x7f00000005c0)={0x184, r5, 0x2, 0x70bd2c, 0x25dfdbfc, {}, [@NL802154_ATTR_PID={0x8, 0x1c, r6}, @NL802154_ATTR_CCA_OPT={0x8}, @NL802154_ATTR_SEC_ENABLED={0x5, 0x29, 0x1}, @NL802154_ATTR_MAX_BE={0x5, 0x10, 0x3}, @NL802154_ATTR_COORDINATOR={0x148, 0x1e, 0x0, 0x1, [@typed={0x4, 0x8a}, @generic="761aaaeb5dfe1c9b48683f0876ac497c23a3c53f65683bbb43c4eb49943b4cff28ccce602557e93371e9a0aca2cd8a08192d0273943f4138f16e56b036ea765f36a46feaf2abf057deaf533b4a20f94634dbb5b795d5d39f4808013f037251e8c7bcc7aa0f07b6306ef79ca3db6045ddfe6c37cdb749e52a5db3b6c0b3264674602a7b3bd849eb2f31a160e726f2dea15ba439050288a6581fb2dbbfccc1db", @typed={0x8, 0x120, 0x0, 0x0, @uid=0xee00}, @typed={0x8, 0x77, 0x0, 0x0, @fd=r0}, @typed={0x8, 0x19, 0x0, 0x0, @u32=0xffffff7f}, @generic="965f142f7582ded2654384bc469de7ba9a0d0a9ba22076366f7cfcc838b7be620622c1acada9e61d983bb9", @generic="185621b508eef97e3b623f19945376b5a43778045f9f145c88a6de92773c3eb2dfccd52b5b899e47d151a8714ed17650b14737d227a93f41a90d36ae1bfae77a1c4a846ffa44aa24d88f53ec730d5a3e5c9289723311aca5fb6c74a97bf6"]}, @NL802154_ATTR_SUPPORTED_CHANNEL={0x8}]}, 0x184}, 0x1, 0x0, 0x0, 0xdb46b18034040f1}, 0x24000001) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_REGISTER_BEACONS(r7, &(0x7f0000000840)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40004}, 0x4048800) connect$auto(r7, &(0x7f0000000880)=@hci={0x1f, 0x1, 0x2}, 0x0) ioctl$auto_FIOQSIZE(r7, 0x5460, 0xa) r8 = syz_clone(0x10000000, &(0x7f00000008c0)="86695e7adcc2132d50285188fb35169c2a1997dbd0f57b3c57821ad2fac5762acbdc0b6c247e85de18d6eb74eb4a25afe853f2716e1c2a04e49b768a73fbc337d2e6d11b21e754c0506f9075d0", 0x4d, &(0x7f0000000940), &(0x7f0000000980), &(0x7f00000009c0)="9923e55030125969470487a12a85202024c930905e4a24e515ee9681d7acee35dc4c62b509db0595d7d7ec0b63a730ec3fe25a87256af14ad6e204c1da7738a6014c") sendmsg$auto_GTP_CMD_GETPDP(r2, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x5c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @loopback}, @GTPA_I_TEI={0x8, 0x8, 0xc70}, @GTPA_I_TEI={0x8, 0x8, 0x1}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}, @GTPA_VERSION={0x8, 0x2, 0xe}, @GTPA_TID={0xc, 0x3, 0xffffffffffffff72}, @GTPA_MS_ADDR6={0x14, 0xc, @remote}]}, 0x5c}, 0x1, 0x0, 0x0, 0x14}, 0x40000) r9 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000bc0), r7) sendmsg$auto_NL80211_CMD_ABORT_SCAN(r2, &(0x7f0000000d80)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000c00)={0x10c, r9, 0x2, 0x70bd26, 0x25dfdbfb, {}, [@NL80211_ATTR_4ADDR={0x5, 0x53, 0x9}, @NL80211_ATTR_COLOR_CHANGE_COUNT={0x5, 0x12f, 0x6}, @NL80211_ATTR_USE_MFP={0x8, 0x42, 0x9}, @NL80211_ATTR_BSS_SELECT={0xd5, 0xe3, 0x0, 0x1, [@generic="50e2485752d30516f1eaa539653e1f0983e187b1145312de942af8c0f04042ab92f19a2d0d3aa4aa335f92eaf51e6c2bf2c1265c51c67be81db456694bc50a1c52fddea1516099e67ce0fde635372d73945af4505d918e3c219086a65e963e494c576ca627bdb13894a6639fb3ed0ffb407d79d0d9d45ffd63722d", @generic="1836262cc173fc52e27c7a3f31d8d7358ede92b35ef56416a7654f8d545940ae4ed465afcded7590c4a55835c48dc6b48c65705fa90b878b3bc14190e997d7e9b00c24283d46d321b9589852d9051f6658283d33270e"]}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x1}]}, 0x10c}, 0x1, 0x0, 0x0, 0xc000}, 0x8881) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000dc0)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0xe4044, 0x0) sendmsg$auto_KSMBD_EVENT_LOGIN_REQUEST(r4, &(0x7f0000000ec0)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e40)={0x14, 0x0, 0x400, 0x70bd2c, 0x25dfdbff, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x11}, 0x4004000) r10 = prctl$auto_PR_SET_MM_END_CODE(0x8, 0x2, r8, 0x8, 0x5) madvise$auto(0x8, 0x1, 0x2000) preadv2$auto(r2, &(0x7f0000000f40)={&(0x7f0000000f00)="f514605ca2fe778a2fbb48ae8264568d017f6f9c843f36a6b10120c04e177458df532c61e6d9280422472c1eaf9882f5d380b1af759063ab04620766473ce3", 0xd}, 0x4, 0xb, 0x3, 0x200) r11 = socketcall$auto_SYS_SOCKETPAIR(0x8, &(0x7f0000000f80)=0x5) r12 = syz_genetlink_get_family_id$auto_nlbl_unlbl(&(0x7f0000001000), r10) sendmsg$auto_NLBL_UNLABEL_C_ACCEPT(r11, &(0x7f0000001100)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000010c0)={&(0x7f0000001040)={0x44, r12, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast1}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @loopback}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010101}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x4c080) sendmsg$auto_NL80211_CMD_SET_FILS_AAD(r11, &(0x7f0000001300)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000012c0)={&(0x7f0000001180)={0x130, r9, 0x20, 0x70bd2c, 0x25dfdbfe, {}, [@NL80211_ATTR_VIF_RADIO_MASK={0x8, 0x14d, 0x9add}, @NL80211_ATTR_MLO_LINKS={0x10c, 0x138, 0x0, 0x1, [{0x100, 0x0, 0x0, 0x1, [@NL80211_ATTR_TXQ_QUANTUM={0x8, 0x10c, 0x9}, @NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0xe}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x3}, @NL80211_ATTR_STA_EXT_CAPABILITY={0xe0, 0xac, "b79e8e91577f1d586e59e02394d5d750faf0e04e689939e3f4bac53ca1f915ec2bbf425ed04234d67c1b910396a419a521d66d25d79bff2a95fc6b6cd66bd40f5f9a2bfeb13e1591075d85c5d665bdf994cc839c9c875e1d0b5ac47ea873105e33cafa194b7bb8bbdb251b0c2a57ddb2e27aab1baa866f5cd8afcf38e4177207c5886bf776989f54138ea0342f02cd0de0eedf6438bcb1b155f56dcfa956b3d9e24febe25bb20ab18ee040909fb8d00dec19f7720d9ca58c58b397e54117337e86f80b8246db1ac318fac862d0b4022dc596fdf24127c81d424e919c"}]}, {0x4}, {0x4}]}, @NL80211_ATTR_WIPHY_RTS_THRESHOLD={0x8, 0x40, 0x1}]}, 0x130}, 0x1, 0x0, 0x0, 0x4000000}, 0x8001) r13 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000001380), r7) sendmsg$auto_NL80211_CMD_UPDATE_OWE_INFO(r4, &(0x7f0000001440)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001400)={&(0x7f00000013c0)={0x34, r13, 0x0, 0x70bd2c, 0x25dfdbfb, {}, [@NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5, 0x89, 0x4}, @NL80211_ATTR_PUNCT_BITMAP={0x8, 0x142, 0x1}, @NL80211_ATTR_PID={0x8, 0x52, 0xffffffffffffffff}, @NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x4000) 1.824324727s ago: executing program 0 (id=1811): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ram11\x00', 0x24040, 0x0) ioctl$auto_BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000240)={"ef65ce6c00cf81000000ffffffffffffff291d00", 0x3ff, 0x408, 0xffc, 0x400004, 0x200000000040000d, 0x0}) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) r2 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) close_range$auto(r2, 0x8, 0x0) prctl$auto(0x2f, 0xf, 0xffffffffffffffff, 0x0, 0x0) open(0x0, 0x1676c1, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r3 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) pwritev$auto(r3, 0x0, 0x3, 0x1, 0x3ff) shmctl$auto_SHM_UNLOCK(0xa, 0xc, &(0x7f00000000c0)={{0x615, 0xffffffffffffffff, 0xffffffffffffffff, 0xe00c, 0x17, 0x101, 0x9}, 0x0, 0x1, 0xffffffff, 0x6, @raw=0x9, @inferred=r1, 0x7fff, 0x0, &(0x7f0000000000)="2b698402eb3507fab1ee2a5319cb2e007e4cce2e2dc5ae00985dda76f8cc9e87ad66d5292cda114b0090685b8d206c056ea41cbe3581d3ff9ae1cb97ec25db25a103ace6566384d3a6e0106887af356df5c3647dd49db34ea12b100afd72385560a500c6a2909d72416927bdb60993da9079e5ea689b310223dafc67bde8eefeaf49a9c73079a6", &(0x7f00000002c0)="8c9a6254dac8a1054e36a1ab6067d76400538de71310a5de9c672b780583023ad6ff409fe133fa79549ce6ae88a151849e0b11b885f0aa00119720cc0dbe99cd71fec854cd6442aa16f660396d7af032169b5c5d06e4d5e7843432e8a11952a4c9e54b0c66c1666ff33af38057f0cd4f3afee58d9ac1c86a11b24c5f01ed697b21b597edc8e4c39efd763df92f5c456a19fc934e4e1fa80e7f6eeb906d879a472df7df218d27b3f5fece8a527ce3f95f6e81f6aef8d772a0c62e384cdc5a776e94ee72e079d927024e3056b6ca7b437d80ec96e8a29423fd1951"}) r6 = setfsuid$auto(0xee00) r7 = setfsuid$auto(0xee01) setresuid$auto(r6, r7, r6) r8 = getpgid(r5) msgctl$auto_MSG_STAT_ANY(0x101, 0xd, &(0x7f00000003c0)={{0xa, r6, 0xee01, 0x7fff, 0x7, 0x8004, 0x64}, &(0x7f0000000180)=0xf, &(0x7f00000001c0)=0xf0, 0x7ff, 0x83fffffffd, 0x0, 0xd8ea, 0x6, 0xd, 0xf, 0x1, @inferred=r1, @inferred=r8}) setresuid$auto(r4, r7, r9) ioctl$auto_BLKTRACETEARDOWN(r0, 0x1276, 0x0) 1.631416924s ago: executing program 4 (id=1812): io_uring_register$auto_IORING_REGISTER_FILE_ALLOC_RANGE(0xffffffffffffffff, 0x19, &(0x7f0000000140)="993c2650d3c4eb6fbc37c96faedf1e5829c3c09c405d62e1eae31d090999fc31b40e50a5bf9b87629169829238bc3e09a6b77d660536078a464fcf9e39c324ebcc60b4b7585050fc9c4a430b21aa3472425ac5552d9c5e1bb4dfa87b8a9f7d9d5aa12af4aa748138b354283ff3c73bc6ce23d34ba466b5d6d0129f981f0f4483af3711161b021ee44d0612c5e196cb88f7091e01194839600ce7d227c349b530397c824251f07f868ee043de76f6ba46a13d169b8a9113a8690884ce5a31cf", 0x100) mmap$auto(0x0, 0x40007, 0x1039b866, 0x9b72, 0xffffffffffffffff, 0x27ffd) capset$auto(&(0x7f0000000100)={0x20080522}, 0x0) r0 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000001280)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x2, 0x0) write$auto_tomoyo_operations_securityfs_if(r0, &(0x7f00000012c0)="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", 0x10d) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/pts/ptmx\x00', 0x40001, 0x0) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0) r3 = landlock_create_ruleset$auto(&(0x7f0000000040)={0x2, 0x1, 0x600000000}, 0xfffffffffffffff9, 0x9) ioctl$auto_TCFLSH2(r2, 0x80045439, 0x0) ioctl$auto_TIOCSETD2(r1, 0x5423, 0x0) ioctl$auto_UI_DEV_CREATE(r3, 0x5501, 0x0) 1.528378903s ago: executing program 4 (id=1813): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0xc) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$auto(0xffffffffffffffff, 0x37, 0xffffffffffffffff) ioctl$auto_KVM_GET_MSRS(r0, 0xc008ae88, &(0x7f0000000080)={0x2, 0x0, [{0xc0000080, 0x400, 0x718c1257}]}) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000240)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0xa6) r3 = open_by_handle_at$auto(r2, &(0x7f0000000040)={0x8, 0x2, '\a\x00\x00\x00\x00\x00\x00\x00'}, 0x2) write$auto(r3, 0x0, 0x1) signalfd4$auto(0xffffffff, 0x0, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$auto_binder_ctl_fops_binderfs(0xffffffffffffff9c, &(0x7f0000000200), 0xc0400, 0x0) ioctl$auto_BINDER_CTL_ADD(r4, 0xc1086201, &(0x7f0000000240)={"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", 0x4, 0x1}) mmap$auto(0x8000000, 0x4020009, 0xdf, 0xeb2, 0x401, 0x8000) ioctl$auto_TIOCSETD2(0xffffffffffffffff, 0x5423, 0x0) io_uring_setup$auto(0x2, 0x0) r5 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) mmap$auto(0x0, 0x4000b, 0x7, 0x9b72, 0x7, 0x28000) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) eventfd$auto(0x8c) socket(0x10, 0x2, 0x4) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x4, &(0x7f0000000000), 0x1) ioctl$auto_TIOCSETD2(r5, 0x5423, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, r5, 0x8000) 1.249429328s ago: executing program 4 (id=1814): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x4003e, 0x1, 0x0, 0x2, 0x0) setresuid$auto(0xffffffffffffffff, 0x0, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x123002, 0x0) ioctl$auto_SNDCTL_DSP_GETBLKSIZE(r2, 0xc0045004, &(0x7f0000000000)) mmap$auto(0x0, 0x2020009, 0x3, 0xebf, 0xfffffffffffffffa, 0x80000001) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) madvise$auto(0xfffffffffffffffe, 0x240007, 0x17) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x8) madvise$auto(0x0, 0xffffffffffff0005, 0x19) r3 = syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYRES8=r1], 0x3c}}, 0x24048084) madvise$auto(0x0, 0x200007, 0x19) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/devices/platform/vivid.0/video4linux/vbi30/power/control\x00', 0x102, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x101001, 0x0) sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x3) ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$auto_XFS_IOC_FSBULKSTAT(r1, 0xc0205865, &(0x7f00000002c0)={0x0, 0x10001, 0x0, &(0x7f0000000280)=0x2}) r4 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000640)='/dev/snd/controlC0\x00', 0x0, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_TLV_WRITE(r4, 0xc008551b, &(0x7f0000000680)={0x5, 0x9}) mmap$auto(0x0, 0x40009, 0x40000df, 0x9b72, 0x7, 0x28000) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/block/loop14/queue/dma_alignment\x00', 0x80000, 0x0) read$auto(r5, 0x0, 0x20) mmap$auto(0x0, 0x420009, 0x5, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) gettid() 485.241987ms ago: executing program 4 (id=1815): socket(0xa, 0x3, 0x5) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x2, 0x0) bpf$auto_BPF_PROG_ATTACH(0x8, &(0x7f0000000040)=@raw_tracepoint={0x7fffffffffffffff, r0, 0x0, 0x8b6b}, 0x5) 314.437842ms ago: executing program 4 (id=1816): r0 = ioctl$auto_TUNSETLINK(0xffffffffffffffff, 0x400454cd, &(0x7f0000000000)=0xe) ioctl$auto_FS_IOC_GETFSSYSFSPATH(r0, 0x80811501, 0xfffffffffffffff8) read$auto_xfs_dir_file_operations_xfs_file(r0, &(0x7f0000000040)=""/106, 0x6a) ioctl$auto_XFS_IOC_FSGETXATTRA(r0, 0x801c582d, &(0x7f00000000c0)={0x200, 0x1, 0x3, @raw}) r1 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000140), r0) sendmsg$auto_NL802154_CMD_GET_SEC_DEVKEY(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x48, r1, 0x800, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_IFNAME={0x14, 0x4, 'dvmrp0\x00'}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0xa}, @NL802154_ATTR_WPAN_PHY_NAME={0x5, 0x2, '\x00'}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x99}, @NL802154_ATTR_LBT_MODE={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x4040800}, 0x20000001) r2 = ioctl$auto_SIOCGIFHWADDR2(r0, 0x8927, &(0x7f0000000280)="ae9302b058334582bfcf35b476a12a53740b9a3de35f696b37e80dd789f6f0bb09f2f929798e77d4b591ca64f9c91280275e41a2fb62c35ba119b8d4c9e15cc72a2280aa67918c9a81c7af9bacaac1c2166f8197ff752e650adbc2bc0fb7353b9db6baf33e3feebe6b14368740a235424b80a1f1414584867d862aeceaa405f79b9b05c7f2f36b3f9ab8f56c1bb60d7dd697b3f9e293d57aaee9acb9c76f080596d1790a6c93e4589be9aff225070db1a2efdae800c890e4b553c0a5bc4e044196fb5c35bd28489c8f98324250296fb56f") sendmsg$auto_NL80211_CMD_REQ_SET_REG(r2, &(0x7f00000003c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4}, 0xc, 0xfffffffffffffffc, 0x1, 0x0, 0x0, 0x40000000}, 0x4000000) r3 = ioctl$auto_TUNSETSTEERINGEBPF(r0, 0x800454e0, &(0x7f0000000400)=0x80) ioctl$auto_VHOST_NET_SET_BACKEND(r3, 0x4008af30, &(0x7f0000000440)={0xffffffb8, r2}) sendmmsg$auto(r4, &(0x7f0000001640)={{&(0x7f0000000480)="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", 0x3ff, &(0x7f0000001580)={&(0x7f0000000580)="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", 0x8918}, 0x5, &(0x7f00000015c0)="d4c6bcb8751c20e2aac07562a47c646f211671f80aaa19880430d8345451f668927867d7ab86fc3225f213c556f1e6f01dfd619d595eec33287020c01fadebbc393208ec27b0895bfa", 0x5, 0x6}, 0x4}, 0x9f, 0x1000) setsockopt$auto_SO_BUSY_POLL(r0, 0x1, 0x2e, &(0x7f0000001680)='%\x00', 0x10001) r5 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000001700), r0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000001740)={'wg1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000001780)={'nr0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000017c0)={'ip6gretap0\x00', 0x0}) sendmsg$auto_NETDEV_CMD_QUEUE_GET2(r2, &(0x7f0000001880)={&(0x7f00000016c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001840)={&(0x7f0000001800)={0x34, r5, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@NETDEV_A_QUEUE_IFINDEX={0x8, 0x2, r6}, @NETDEV_A_QUEUE_IFINDEX={0x8, 0x2, r7}, @NETDEV_A_QUEUE_IFINDEX={0x8, 0x2, r8}, @NETDEV_A_QUEUE_IFINDEX={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x2004c005}, 0x810) r9 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000001900), r2) sendmsg$auto_NL80211_CMD_TDLS_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000002040)={&(0x7f00000018c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000002000)={&(0x7f0000001940)={0x684, r9, 0x8, 0x70bd2c, 0x25dfdbfc, {}, [@NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0x83, 0xbe, "8a01e068c4977c5b999269ae0b6c20b4a4de0061af9d6122ad39d536b1901317304eddc20444ca8ad5342beca92b4dd49e06e4dec078dec3be3b833d05b7e7e116e9e72c0875a613d31adbe989e64daa13bbb9a8376413505509401150457b006a06634625653baf6fece5e64c67fba2bf468586584db4a4f52de94758a406"}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_PROBE_RESP={0x5ba, 0x91, "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"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x3ff}, @NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x4d3a}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x674}, @NL80211_ATTR_WIPHY_DYN_ACK={0x4}, @NL80211_ATTR_ASSOC_MLD_EXT_CAPA_OPS={0x6, 0x151, 0xa}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xb}]}, 0x684}, 0x1, 0x0, 0x0, 0x4044841}, 0x20000040) r10 = socketcall$auto(0x2, &(0x7f0000002080)=0x9) r11 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000002100), r0) shmctl$auto_IPC_SET(0x5, 0x1, &(0x7f0000002280)={{0x7, 0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffc, 0x34, 0x8a58, 0x2a}, 0x1000, 0x1, 0x9, 0x10000000, @raw=0x2, @inferred=0xffffffffffffffff, 0x3, 0x0, &(0x7f0000002140)="199a95030673e7733a34490105d49d48dba393da7c26884e1088040e32d0b448ca1aa99fcbfdbfeccf8d9223e1b23f4ccce04c9cb6bf187ab915b13c3ddec0e73026502504b566cf73503c4fbdc78ac992cece46c2842b0f1a46600dc3a5f3a248b019ed18954cc9a26c9c470a3bbe06d16d0826eb608529475bfbacb2647ec3a448709bf427d9ea506e2d381763bf5d13551aa9eb7063eb9a0aa1ce44bfc80889e9842d975c7d4092313ae7ee233549fafd210100bc0e713e2ea44790844b9b9f1d72a7bdc6aaa3", &(0x7f0000002240)="fab104a241394a1170739bd162accc98"}) sendmsg$auto_NL80211_CMD_GET_POWER_SAVE(r10, &(0x7f0000002600)={&(0x7f00000020c0)={0x10, 0x0, 0x0, 0x4600100}, 0xc, &(0x7f00000025c0)={&(0x7f0000002300)={0x2bc, r11, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@NL80211_ATTR_S1G_CAPABILITY_MASK={0xb7, 0x129, "e696808573d84ceddd3845ab1a66febd5b9eb4cfd886c66a76f888dd3d095e690c1a8a2ea86f55492b899f8891b65c1d76651063d74dd8d96382bd724196fe55b254b7005dcb6febee34eaf6177b811aafc241bd4271f3b530bb05acc145902c104e0d204e2d1343a9bf353aa2e169d7558855b17b8785ef8067421722a193fa7ba458c2cdd7d76b2091c1fe5d16f7d5ea3e07b0ca0a251f4d92a74851428147365d49dd017c528207d49a33cc621b66e660f6"}, @NL80211_ATTR_CNTDWN_OFFS_BEACON={0x25, 0xba, "c0a7f3c23cacce78cb687b1a29a2154d35fa1664dc6996b823782251c9436ea825"}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_KEY={0xfc, 0x50, 0x0, 0x1, [@nested={0xf8, 0xe6, 0x0, 0x1, [@generic="5dc7e9b30bbb3bb338d0325079989c9f1037daf07b026a2d9cbe4de94bc60f14a6213be763ab0d36964d8a169612b9ec4f8306af8249da5bf854f61904c60ca953200c7f393b2b79cd69803c681ba0805f15ec8212e1d9f0e61399e64acc1743e6cb8ddcdc6c912377c22ad4889b562b2e9f65fd57b37280bd2b6085b443171a15d6c6eebcc08532ef9685d14b0889414773ef3feadfd5c8", @nested={0x4, 0xf1}, @typed={0x14, 0x94, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @generic="2e3002070c889d4350a7f14b6b93a1dd5e3133612e7b1bd5f75112caf7", @typed={0x8, 0xc5, 0x0, 0x0, @uid=r12}, @generic="80f3f9cd8a57ce9f62da92f8e0d98aaa1bf58d9eb3deaf7fe3c60f71780ccc"]}]}, @NL80211_ATTR_RECEIVE_MULTICAST={0x4}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x4}, @NL80211_ATTR_WIPHY_NAME={0xf, 0x2, 'ip6gretap0\x00'}, @NL80211_ATTR_RECEIVE_MULTICAST={0x4}, @NL80211_ATTR_PMKR0_NAME={0xa6, 0x102, "66da940a4b3c3cdf64202ee067babad7a6ee3aee3abb2ee12e9c8b13dcf5f2bef1a67b26c64b488ac7f557faea13a0a90b64e8184eab35a3b4e08f909f772166cf04654a46bf2d7744e25bbee831790305175fab7b5d825ba32209d3e9b0eff2783d6295d97e726edc39065ffb749f3b5925309ec2efeb6378e873a02a702f7fb15f20ac1f3d9065c9901311132bcca0869b671f68fadfa79f424e9b208bb7163d16"}]}, 0x2bc}}, 0x24008000) sendmsg$auto_NL802154_CMD_SET_LBT_MODE(r3, &(0x7f0000002700)={&(0x7f0000002640)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000026c0)={&(0x7f0000002680)={0x1c, r1, 0x100, 0x70bd25, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4010000) r13 = openat$auto_xfs_dir_file_operations_xfs_file(0xffffffffffffff9c, &(0x7f0000002740)='/sys/devices/virtual/bluetooth/hci4\x00', 0x480000, 0x0) ioctl$auto_XFS_IOC_DIOINFO(r13, 0x800c581e, &(0x7f0000002780)={0x8, 0x2a, 0x2}) syz_genetlink_get_family_id$auto_ncsi(&(0x7f00000027c0), r2) ioctl$auto_VFIO_CHECK_EXTENSION(r3, 0x3b65, 0x0) ioctl$auto_EVIOCGMASK(r3, 0x80104592, &(0x7f0000002800)={0x6acac33f, 0x3, 0xaa96}) sendmsg$auto_ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000002ac0)={&(0x7f0000002840)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000002a80)={&(0x7f0000002900)={0x168, 0x0, 0x404, 0x70bd2b, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xf23}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_LINKMODES_HEADER={0x90, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x10001}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}]}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x5}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5}, @ETHTOOL_A_LINKMODES_MASTER_SLAVE_CFG={0x5, 0x7, 0x1}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0xc6d2}, @ETHTOOL_A_LINKMODES_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @ETHTOOL_A_LINKMODES_MASTER_SLAVE_CFG={0x5, 0x7, 0x5a}, @ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0x7}, @ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0x7}]}, 0x168}, 0x1, 0x0, 0x0, 0x20000045}, 0x40) 204.36777ms ago: executing program 4 (id=1817): r0 = socket(0x21, 0x1, 0x2) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) r1 = io_uring_setup$auto(0x40000005, 0x0) close_range$auto(0x2, 0x8, 0x0) recvmmsg$auto(0xffffffffffffffff, 0x0, 0xfffffff9, 0x10, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000180)='/dev/input/event0\x00', 0x2000, 0x0) ioctl$auto_EVIOCGMASK(r2, 0x80104592, &(0x7f0000000000)={0x2000, 0x800004, 0x9}) r3 = openat$auto_fops_ulong_ro_(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/ieee80211/phy17/netdev:wlan1/stations/08:02:11:00:00:00/rx_duplicates\x00', 0x2000, 0x0) syz_genetlink_get_family_id$auto_nl802154(0x0, r0) r4 = io_uring_setup$auto(0x6, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) r5 = syz_genetlink_get_family_id$auto_ovs_vport(&(0x7f0000000200), r0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'ip6erspan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'bond_slave_1\x00', 0x0}) msgctl$auto_IPC_RMID(0x0, 0x0, &(0x7f0000000340)={{0x3, 0xffffffffffffffff, 0xee01, 0x9, 0x9, 0x5, 0x9d}, &(0x7f00000002c0)=0x1, &(0x7f0000000300)=0x40, 0x0, 0x9, 0x39e3, 0x8, 0x43, 0x5, 0x800, 0x7, @raw=0xfffffff8, @raw=0xfffffeff}) r10 = gettid() tkill$auto(r10, 0x7) newfstatat$auto(r4, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)={0xb, 0xfffffffffffffffc, 0x24, 0x3, 0x0, r9, 0x0, 0xf, 0xfffffffffffffffe, 0x8000000000000001, 0x10, 0xd01e, 0x6, 0x80000000, 0x0, 0x1}, 0xfffffe01) sendmsg$auto_OVS_VPORT_CMD_NEW(r4, &(0x7f0000000b00)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000ac0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="d0050000", @ANYRES16=r5, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="14001000fc01000000000000000000000000000008000800", @ANYRES32=r6, @ANYBLOB="100004800c0026000400000000000000b8000500aedeb54984eec4dfaa4d6f845980ec8d58522c8c7816406073d8a7f1c5d5309b5a221123e253f58af4684d528b230f9295183b03daf513aaca92a8464f79ef556371cde03525bfca125601a503af91a916a09771bc9cc703a159d41a6f19d11ef5280d21f98c5d7f2fd70b8e2c32a101d1643c7e1a6c3131d596d927004ca5a5420a116961e6f85c04be875011f7c3795d13863ed0d0462de5dbb2e0a1a28581253e9bcf7da47f73f9b4f00bdffc41b8efef74b908000800", @ANYRES32=r7, @ANYBLOB="08000200fbffffff0e0003005b295c2b2a7d245e2400000044000a8008001600", @ANYRES32, @ANYBLOB="10009e800a0057005b2d285e2f00000008003900", @ANYRES32=r8, @ANYBLOB="0400698014003c00fc02000000000000000000000000000108002800", @ANYRES32=r10, @ANYBLOB="360204803469da42691659baf248f13ae27e85045f4fbfbd9fa6ca321d934db75f3be17b7e74b9c5fc2a0a9d9de800f9be1ce3241b198c133defadd5e42c9d4fd7e61c008a800c00570009000000000000000400118008009800", @ANYRES32=r1, @ANYBLOB="400041800c00bb00", @ANYRES32=r4, @ANYBLOB="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", @ANYRES32=r11, @ANYBLOB="20f4a40bafeaf5a54d49c6fe1f859e392777218ad22ca62bf369e71a92188941b2b08fe30499fe663d5f5b49356b18b8c428c44158e0381edcd6b2d50400bf80040043800000"], 0x5d0}, 0x1, 0x0, 0x0, 0x4808}, 0x404c050) ioctl$auto_VHOST_GET_FEATURES2(r4, 0x8008af00, &(0x7f0000000140)=0x7) setsockopt$auto_SO_RCVBUF(r3, 0x5, 0x8, &(0x7f00000000c0)='/sys/kernel/debug/ieee80211/phy17/netdev:wlan1/stations/08:02:11:00:00:00/rx_duplicates\x00', 0x2040000) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) sysfs$auto(0x2, 0x100000000000033, 0x0) fsopen$auto(0x0, 0x1) migrate_pages$auto(0x0, 0x10001, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) 0s ago: executing program 0 (id=1818): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x14fa02, 0x0) mmap$auto(0x0, 0x810004, 0x400000000ffb, 0x8000000008011, 0x3, 0x8000) setresuid$auto(0x0, 0x0, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr$auto(0x0, 0x0, 0x7b) r1 = socket(0xa, 0x2, 0x73) sendto$auto(r1, 0x0, 0x402, 0x436, &(0x7f0000000000)=@generic={0xa, "e2e18340cba8fe8000"}, 0x1c) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) keyctl$auto(0x6, 0xfffffffb, 0x2, 0x0, 0x8) r2 = open(0x0, 0x0, 0x408) getdents$auto(r2, 0x0, 0x400018) r3 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f000000c340)='/proc/thread-self/pagemap\x00', 0x8000, 0x0) ioctl$auto_PAGEMAP_SCAN(r3, 0xc0606610, &(0x7f000000c380)={0x60, 0xf4, 0x100000, 0x7fffffffefff, 0xfffffffffffffffe, 0x1, 0x8, 0xbff, 0x2c, 0x2c, 0x3, 0x2}) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) preadv2$auto(r0, &(0x7f0000000080)={0x0, 0x80000000}, 0x6, 0xffffffffffffffff, 0x4, 0x2e) kernel console output (not intermixed with test programs): 64_after_hwframe+0x77/0x7f [ 508.282001][T13386] RIP: 0033:0x7f7a79f8f7c9 [ 508.282016][T13386] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 508.282033][T13386] RSP: 002b:00007f7a7ad63038 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 508.282049][T13386] RAX: ffffffffffffffda RBX: 00007f7a7a1e5fa0 RCX: 00007f7a79f8f7c9 [ 508.282060][T13386] RDX: fffffffffffffffd RSI: fffffffffffffffc RDI: 0000000000000012 [ 508.282071][T13386] RBP: 00007f7a7a013f91 R08: 0000000000000001 R09: 0000000000000000 [ 508.282080][T13386] R10: fffffffffffffffd R11: 0000000000000246 R12: 0000000000000000 [ 508.282090][T13386] R13: 00007f7a7a1e6038 R14: 00007f7a7a1e5fa0 R15: 00007ffe2a308fa8 [ 508.282113][T13386] [ 508.887672][T13389] zswap: compressor û not available [ 509.180616][T13402] device-mapper: ioctl: Invalid ioctl structure: uuid ýÿÿÿÿÿÿÿ, name , dev 700010007 [ 510.488308][T13428] zswap: compressor not available [ 511.199850][T13428] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 511.251029][T13428] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 511.289113][T13428] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 511.321141][T13428] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 511.358379][T13428] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 511.377292][T13452] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1420'. [ 511.403120][ T6770] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 511.412739][ T6770] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 511.421231][ T6770] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 511.428901][ T6770] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 511.438955][ T6770] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 512.173778][T13449] chnl_net:caif_netlink_parms(): no params data found [ 512.550183][T13449] bridge0: port 1(bridge_slave_0) entered blocking state [ 512.567451][ T6770] Bluetooth: hci0: command 0x0c1a tx timeout [ 512.620504][T13449] bridge0: port 1(bridge_slave_0) entered disabled state [ 512.658301][T13449] bridge_slave_0: entered allmulticast mode [ 512.693555][T13449] bridge_slave_0: entered promiscuous mode [ 512.729710][T13449] bridge0: port 2(bridge_slave_1) entered blocking state [ 512.767932][T13449] bridge0: port 2(bridge_slave_1) entered disabled state [ 512.809152][T13449] bridge_slave_1: entered allmulticast mode [ 512.822399][T13481] hub 1-0:1.0: USB hub found [ 512.845913][T13481] hub 1-0:1.0: 1 port detected [ 512.850836][T13449] bridge_slave_1: entered promiscuous mode [ 512.985043][T13449] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 513.059768][T13449] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 513.209809][T13449] team0: Port device team_slave_0 added [ 513.254305][T13449] team0: Port device team_slave_1 added [ 513.275658][ T6770] Bluetooth: hci1: command 0x0c1a tx timeout [ 513.355980][T12171] Bluetooth: hci4: command 0x0c1a tx timeout [ 513.362041][ T6770] Bluetooth: hci3: command 0x0c1a tx timeout [ 513.436143][ T6770] Bluetooth: hci5: command 0x0419 tx timeout [ 513.445820][T13449] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 513.483994][T13449] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 513.525054][ T6770] Bluetooth: hci2: command tx timeout [ 513.571014][T13449] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 513.630287][T13449] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 513.645008][T13449] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 513.709854][T13449] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 513.754603][T13496] zswap: compressor not available [ 513.870831][T13449] hsr_slave_0: entered promiscuous mode [ 513.877547][T13449] hsr_slave_1: entered promiscuous mode [ 513.884049][T13449] debugfs: 'hsr0' already exists in 'hsr' [ 513.892125][T13449] Cannot create hsr debugfs directory [ 514.153141][ T6770] Bluetooth: hci0: unexpected event 0x36 length: 123 > 7 [ 514.192183][T13449] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 514.237852][T13449] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 514.261567][T13449] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 514.284600][T13449] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 514.429412][T13502] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 514.485106][T13502] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 514.501704][T13502] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 514.519419][T13502] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 514.538383][T13449] 8021q: adding VLAN 0 to HW filter on device bond0 [ 514.553677][T13502] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 514.574769][T13502] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 514.593436][T13502] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 514.619988][T13502] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 514.674869][T13449] 8021q: adding VLAN 0 to HW filter on device team0 [ 514.783291][ T8090] bridge0: port 1(bridge_slave_0) entered blocking state [ 514.790465][ T8090] bridge0: port 1(bridge_slave_0) entered forwarding state [ 514.855043][ T8090] bridge0: port 2(bridge_slave_1) entered blocking state [ 514.862557][ T8090] bridge0: port 2(bridge_slave_1) entered forwarding state [ 515.835855][ T6770] Bluetooth: hci0: command 0x0c1a tx timeout [ 516.396007][T13449] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 516.438010][T13544] FAULT_INJECTION: forcing a failure. [ 516.438010][T13544] name failslab, interval 1, probability 0, space 0, times 0 [ 516.489525][T13544] CPU: 0 UID: 0 PID: 13544 Comm: syz.2.1437 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 516.489572][T13544] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 516.489582][T13544] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 516.489592][T13544] Call Trace: [ 516.489598][T13544] [ 516.489604][T13544] dump_stack_lvl+0x16c/0x1f0 [ 516.489636][T13544] should_fail_ex+0x512/0x640 [ 516.489661][T13544] ? kmem_cache_alloc_lru_noprof+0x66/0x770 [ 516.489685][T13544] should_failslab+0xc2/0x120 [ 516.489712][T13544] kmem_cache_alloc_lru_noprof+0x87/0x770 [ 516.489733][T13544] ? __d_alloc+0x35/0xa80 [ 516.489763][T13544] ? __d_alloc+0x35/0xa80 [ 516.489788][T13544] __d_alloc+0x35/0xa80 [ 516.489816][T13544] d_alloc_pseudo+0x1c/0xc0 [ 516.489835][T13544] alloc_file_pseudo+0xcf/0x230 [ 516.489854][T13544] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 516.489872][T13544] ? alloc_fd+0x471/0x7d0 [ 516.489900][T13544] sock_alloc_file+0x50/0x210 [ 516.489927][T13544] __sys_socket+0x1c0/0x260 [ 516.489944][T13544] ? __pfx___sys_socket+0x10/0x10 [ 516.489962][T13544] ? xfd_validate_state+0x61/0x180 [ 516.489977][T13544] ? __pfx_ksys_write+0x10/0x10 [ 516.490005][T13544] __x64_sys_socket+0x72/0xb0 [ 516.490022][T13544] ? lockdep_hardirqs_on+0x7c/0x110 [ 516.490061][T13544] do_syscall_64+0xcd/0xf80 [ 516.490090][T13544] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 516.490107][T13544] RIP: 0033:0x7f7a79f8f7c9 [ 516.490121][T13544] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 516.490138][T13544] RSP: 002b:00007f7a7ad63038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 516.490155][T13544] RAX: ffffffffffffffda RBX: 00007f7a7a1e5fa0 RCX: 00007f7a79f8f7c9 [ 516.490166][T13544] RDX: 0000000000000106 RSI: 0000000000000801 RDI: 0000000000000002 [ 516.490176][T13544] RBP: 00007f7a7a013f91 R08: 0000000000000000 R09: 0000000000000000 [ 516.490186][T13544] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 516.490196][T13544] R13: 00007f7a7a1e6038 R14: 00007f7a7a1e5fa0 R15: 00007ffe2a308fa8 [ 516.490218][T13544] [ 517.011664][ T6782] Bluetooth: hci2: command 0x040f tx timeout [ 517.019000][ T6770] Bluetooth: hci5: command 0x0419 tx timeout [ 517.045389][ T8322] Bluetooth: hci1: command 0x0c1a tx timeout [ 517.051438][T12171] Bluetooth: hci3: command 0x0c1a tx timeout [ 517.057671][ T7134] Bluetooth: hci4: command 0x0c1a tx timeout [ 517.508432][T13449] veth0_vlan: entered promiscuous mode [ 517.540829][T13449] veth1_vlan: entered promiscuous mode [ 517.642822][T13449] veth0_macvtap: entered promiscuous mode [ 517.675745][T13449] veth1_macvtap: entered promiscuous mode [ 517.727442][T13449] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 517.763563][T13449] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 517.802290][ T8091] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 517.840597][ T8091] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 517.877810][ T8091] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 517.909401][ T8091] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 517.937889][T13565] FAULT_INJECTION: forcing a failure. [ 517.937889][T13565] name failslab, interval 1, probability 0, space 0, times 0 [ 517.971897][T13565] CPU: 0 UID: 0 PID: 13565 Comm: syz.6.1441 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 517.971934][T13565] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 517.971944][T13565] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 517.971953][T13565] Call Trace: [ 517.971960][T13565] [ 517.971966][T13565] dump_stack_lvl+0x16c/0x1f0 [ 517.971997][T13565] should_fail_ex+0x512/0x640 [ 517.972019][T13565] ? __kmalloc_cache_noprof+0x5f/0x800 [ 517.972041][T13565] should_failslab+0xc2/0x120 [ 517.972066][T13565] __kmalloc_cache_noprof+0x80/0x800 [ 517.972083][T13565] ? do_raw_spin_unlock+0x172/0x230 [ 517.972114][T13565] ? snd_mixer_oss_open+0x11d/0x300 [ 517.972140][T13565] ? snd_card_file_add+0x26e/0x340 [ 517.972161][T13565] ? snd_mixer_oss_open+0x11d/0x300 [ 517.972186][T13565] snd_mixer_oss_open+0x11d/0x300 [ 517.972210][T13565] ? __pfx_snd_mixer_oss_open+0x10/0x10 [ 517.972236][T13565] soundcore_open+0x40c/0x580 [ 517.972264][T13565] ? __pfx_soundcore_open+0x10/0x10 [ 517.972290][T13565] chrdev_open+0x234/0x6a0 [ 517.972317][T13565] ? __pfx_apparmor_file_open+0x10/0x10 [ 517.972338][T13565] ? __pfx_chrdev_open+0x10/0x10 [ 517.972363][T13565] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 517.972393][T13565] do_dentry_open+0x748/0x1590 [ 517.972416][T13565] ? __pfx_chrdev_open+0x10/0x10 [ 517.972445][T13565] vfs_open+0x82/0x3f0 [ 517.972465][T13565] path_openat+0x2078/0x3140 [ 517.972496][T13565] ? __pfx_path_openat+0x10/0x10 [ 517.972528][T13565] do_filp_open+0x20b/0x470 [ 517.972553][T13565] ? __pfx_do_filp_open+0x10/0x10 [ 517.972592][T13565] ? alloc_fd+0x471/0x7d0 [ 517.972620][T13565] do_sys_openat2+0x11f/0x280 [ 517.972638][T13565] ? __pfx_do_sys_openat2+0x10/0x10 [ 517.972663][T13565] __x64_sys_openat+0x174/0x210 [ 517.972681][T13565] ? __pfx___x64_sys_openat+0x10/0x10 [ 517.972708][T13565] do_syscall_64+0xcd/0xf80 [ 517.972734][T13565] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 517.972751][T13565] RIP: 0033:0x7f4bb798f7c9 [ 517.972765][T13565] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 517.972781][T13565] RSP: 002b:00007f4bb5bee038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 517.972798][T13565] RAX: ffffffffffffffda RBX: 00007f4bb7be5fa0 RCX: 00007f4bb798f7c9 [ 517.972809][T13565] RDX: 0000000000000902 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 517.972819][T13565] RBP: 00007f4bb7a13f91 R08: 0000000000000000 R09: 0000000000000000 [ 517.972828][T13565] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 517.972838][T13565] R13: 00007f4bb7be6038 R14: 00007f4bb7be5fa0 R15: 00007ffe33b42438 [ 517.972859][T13565] [ 518.694369][ T8091] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 518.711634][ T8091] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 518.787194][ T8090] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 518.811307][ T8090] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 519.115923][T12171] Bluetooth: hci2: command 0x040f tx timeout [ 520.083994][T13594] zswap: compressor not available [ 520.187879][T13602] Invalid ELF header magic: != ELF [ 520.595859][T13613] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 520.608950][T13597] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 520.639124][T13597] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 520.680882][T13597] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 520.712403][T13597] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 520.743031][T13597] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 520.778299][T13597] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 521.497256][T13642] netlink: 206 bytes leftover after parsing attributes in process `syz.6.1458'. [ 521.530741][T13642] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1458'. [ 522.081029][T12171] Bluetooth: hci0: command 0x0c1a tx timeout [ 522.636195][T12171] Bluetooth: hci1: command 0x0c1a tx timeout [ 522.715547][ T7134] Bluetooth: hci4: command 0x0c1a tx timeout [ 522.723500][T12171] Bluetooth: hci3: command 0x0c1a tx timeout [ 522.800404][ T7134] Bluetooth: hci5: command 0x0419 tx timeout [ 522.806495][T12171] Bluetooth: hci2: command 0x040f tx timeout [ 523.499253][T13680] netlink: 330 bytes leftover after parsing attributes in process `syz.7.1464'. [ 524.226688][T13696] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 524.363081][T13696] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 524.410129][T13696] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 524.462479][T13696] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 524.511502][T13696] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 524.568083][T13696] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 526.051118][T13735] device-mapper: ioctl: Invalid ioctl structure: uuid ýÿÿÿÿÿÿÿ, name , dev 700010007 [ 526.235618][T12171] Bluetooth: hci0: command 0x0c1a tx timeout [ 526.241774][ T7134] Bluetooth: hci1: command 0x0c1a tx timeout [ 526.411702][T12171] Bluetooth: hci5: unexpected subevent 0x01 length: 123 > 18 [ 526.475674][ T8322] Bluetooth: hci4: command 0x0c1a tx timeout [ 526.481787][T12171] Bluetooth: hci3: command 0x0c1a tx timeout [ 526.556898][T12171] Bluetooth: hci5: command 0x0419 tx timeout [ 526.635976][T12171] Bluetooth: hci2: command 0x040f tx timeout [ 527.696218][T13772] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 528.090336][ T30] audit: type=1800 audit(1765107309.915:13): pid=13783 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1484" name="dbroot" dev="configfs" ino=49222 res=0 errno=0 [ 528.645419][T12171] Bluetooth: hci5: command 0x0419 tx timeout [ 528.715784][ T7134] Bluetooth: hci2: command 0x040f tx timeout [ 530.396716][T13827] netlink: 206 bytes leftover after parsing attributes in process `syz.6.1487'. [ 530.435647][T13827] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1487'. [ 530.720647][ T7134] Bluetooth: hci5: command 0x0419 tx timeout [ 530.968642][T13839] futex_wake_op: syz.6.1491 tries to shift op by -2048; fix this program [ 531.606857][T12171] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 531.617733][T12171] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 531.629226][T12171] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 531.638334][T12171] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 531.649383][T12171] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 531.914957][T13853] FAULT_INJECTION: forcing a failure. [ 531.914957][T13853] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 532.061368][T13853] CPU: 0 UID: 0 PID: 13853 Comm: syz.2.1495 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 532.061408][T13853] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 532.061417][T13853] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 532.061427][T13853] Call Trace: [ 532.061433][T13853] [ 532.061440][T13853] dump_stack_lvl+0x16c/0x1f0 [ 532.061470][T13853] should_fail_ex+0x512/0x640 [ 532.061498][T13853] _copy_from_user+0x2e/0xd0 [ 532.061522][T13853] __sys_bpf+0x248/0x4980 [ 532.061551][T13853] ? futex_private_hash_put+0x160/0x1b0 [ 532.061572][T13853] ? __pfx___sys_bpf+0x10/0x10 [ 532.061601][T13853] ? __pfx_futex_wake+0x10/0x10 [ 532.061627][T13853] ? _raw_spin_unlock_irq+0x23/0x50 [ 532.061653][T13853] ? _raw_spin_unlock_irq+0x2e/0x50 [ 532.061679][T13853] ? do_futex+0x122/0x350 [ 532.061709][T13853] ? __pfx___x64_sys_timer_create+0x10/0x10 [ 532.061734][T13853] ? xfd_validate_state+0x61/0x180 [ 532.061749][T13853] ? __pfx___do_sys_prctl+0x10/0x10 [ 532.061772][T13853] __x64_sys_bpf+0x78/0xc0 [ 532.061787][T13853] ? lockdep_hardirqs_on+0x7c/0x110 [ 532.061813][T13853] do_syscall_64+0xcd/0xf80 [ 532.061849][T13853] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 532.061867][T13853] RIP: 0033:0x7f7a79f8f7c9 [ 532.061881][T13853] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 532.061898][T13853] RSP: 002b:00007f7a7ad63038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 532.061915][T13853] RAX: ffffffffffffffda RBX: 00007f7a7a1e5fa0 RCX: 00007f7a79f8f7c9 [ 532.061926][T13853] RDX: 0000000000000092 RSI: 0000000000000000 RDI: 0000000000000000 [ 532.061936][T13853] RBP: 00007f7a7a013f91 R08: 0000000000000000 R09: 0000000000000000 [ 532.061946][T13853] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 532.061956][T13853] R13: 00007f7a7a1e6038 R14: 00007f7a7a1e5fa0 R15: 00007ffe2a308fa8 [ 532.061978][T13853] [ 532.273166][T13853] FAULT_INJECTION: forcing a failure. [ 532.273166][T13853] name failslab, interval 1, probability 0, space 0, times 0 [ 532.286260][T13853] CPU: 0 UID: 0 PID: 13853 Comm: syz.2.1495 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 532.286299][T13853] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 532.286309][T13853] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 532.286320][T13853] Call Trace: [ 532.286325][T13853] [ 532.286332][T13853] dump_stack_lvl+0x16c/0x1f0 [ 532.286362][T13853] should_fail_ex+0x512/0x640 [ 532.286387][T13853] ? kmem_cache_alloc_noprof+0x62/0x770 [ 532.286409][T13853] should_failslab+0xc2/0x120 [ 532.286439][T13853] kmem_cache_alloc_noprof+0x83/0x770 [ 532.286460][T13853] ? do_timer_create+0x201/0x14c0 [ 532.286486][T13853] ? do_timer_create+0x201/0x14c0 [ 532.286506][T13853] do_timer_create+0x201/0x14c0 [ 532.286529][T13853] ? do_futex+0x122/0x350 [ 532.286549][T13853] ? __pfx_do_timer_create+0x10/0x10 [ 532.286569][T13853] ? __pfx_do_futex+0x10/0x10 [ 532.286590][T13853] ? cap_task_prctl+0x2af/0xa80 [ 532.286615][T13853] __x64_sys_timer_create+0x199/0x1d0 [ 532.286638][T13853] ? __pfx___x64_sys_timer_create+0x10/0x10 [ 532.286663][T13853] ? xfd_validate_state+0x61/0x180 [ 532.286678][T13853] ? __pfx___do_sys_prctl+0x10/0x10 [ 532.286704][T13853] do_syscall_64+0xcd/0xf80 [ 532.286732][T13853] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 532.286751][T13853] RIP: 0033:0x7f7a79f8f7c9 [ 532.286765][T13853] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 532.286782][T13853] RSP: 002b:00007f7a7ad63038 EFLAGS: 00000246 ORIG_RAX: 00000000000000de [ 532.286799][T13853] RAX: ffffffffffffffda RBX: 00007f7a7a1e5fa0 RCX: 00007f7a79f8f7c9 [ 532.286810][T13853] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000009 [ 532.286820][T13853] RBP: 00007f7a7a013f91 R08: 0000000000000000 R09: 0000000000000000 [ 532.286830][T13853] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 532.286840][T13853] R13: 00007f7a7a1e6038 R14: 00007f7a7a1e5fa0 R15: 00007ffe2a308fa8 [ 532.286861][T13853] [ 532.952517][T13867] phram: not enough arguments [ 532.979132][T13848] chnl_net:caif_netlink_parms(): no params data found [ 533.239181][T13876] device-mapper: ioctl: Invalid ioctl structure: uuid ýÿÿÿÿÿÿÿ, name , dev 700010007 [ 533.327956][T13848] bridge0: port 1(bridge_slave_0) entered blocking state [ 533.346665][T13848] bridge0: port 1(bridge_slave_0) entered disabled state [ 533.412090][T13848] bridge_slave_0: entered allmulticast mode [ 533.431289][T13848] bridge_slave_0: entered promiscuous mode [ 533.452542][T13848] bridge0: port 2(bridge_slave_1) entered blocking state [ 533.460556][T13848] bridge0: port 2(bridge_slave_1) entered disabled state [ 533.477938][T13848] bridge_slave_1: entered allmulticast mode [ 533.493514][T13848] bridge_slave_1: entered promiscuous mode [ 533.592543][T13848] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 533.633768][T13848] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 533.676071][T12171] Bluetooth: hci6: command tx timeout [ 533.754051][T13848] team0: Port device team_slave_0 added [ 533.789741][T13848] team0: Port device team_slave_1 added [ 533.881757][T13848] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 533.903074][T13848] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 533.970059][T13848] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 534.018121][T13848] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 534.056790][T13848] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 534.176118][T13848] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 534.437070][T13848] hsr_slave_0: entered promiscuous mode [ 534.451236][T13848] hsr_slave_1: entered promiscuous mode [ 534.465093][T13848] debugfs: 'hsr0' already exists in 'hsr' [ 534.478446][T13848] Cannot create hsr debugfs directory [ 535.749616][T13848] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 535.758334][T12171] Bluetooth: hci6: command tx timeout [ 535.869712][T13920] nbd: must specify at least one socket [ 535.925103][T13848] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 536.007556][T13848] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 536.055245][T13918] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.6.1509: iget: checksum invalid [ 536.120907][T13918] faux_driver regulatory: loading /lib/firmware/updates/syzkaller/regulatory.db failed with error -74 [ 536.184411][T13918] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.6.1509: iget: checksum invalid [ 536.242559][T13918] faux_driver regulatory: loading /lib/firmware/updates/regulatory.db failed with error -74 [ 536.263563][T13848] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 536.321980][T13918] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.6.1509: iget: checksum invalid [ 536.355667][T13918] faux_driver regulatory: loading /lib/firmware/syzkaller/regulatory.db failed with error -74 [ 536.408723][T13918] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.6.1509: iget: checksum invalid [ 536.462431][T13918] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -74 [ 536.495991][T13931] FAULT_INJECTION: forcing a failure. [ 536.495991][T13931] name fail_futex, interval 1, probability 0, space 0, times 0 [ 536.527499][T13918] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -74 [ 536.552394][T13931] CPU: 0 UID: 0 PID: 13931 Comm: syz.7.1511 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 536.552433][T13931] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 536.552442][T13931] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 536.552452][T13931] Call Trace: [ 536.552458][T13931] [ 536.552465][T13931] dump_stack_lvl+0x16c/0x1f0 [ 536.552497][T13931] should_fail_ex+0x512/0x640 [ 536.552525][T13931] get_futex_key+0x1d0/0x15f0 [ 536.552546][T13931] ? __lock_acquire+0x436/0x2890 [ 536.552562][T13931] ? __pfx_get_futex_key+0x10/0x10 [ 536.552582][T13931] ? trace_sched_set_need_resched_tp+0xf3/0x130 [ 536.552614][T13931] futex_wait_setup+0x9d/0x570 [ 536.552645][T13931] __futex_wait+0x193/0x2f0 [ 536.552669][T13931] ? __pfx___futex_wait+0x10/0x10 [ 536.552697][T13931] ? __pfx_futex_wake_mark+0x10/0x10 [ 536.552724][T13931] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 536.552745][T13931] ? __hrtimer_setup+0x176/0x280 [ 536.552768][T13931] ? ktime_add_safe+0x60/0x70 [ 536.552792][T13931] futex_wait+0xe8/0x380 [ 536.552823][T13931] ? __pfx_futex_wait+0x10/0x10 [ 536.552845][T13931] ? __lock_acquire+0x436/0x2890 [ 536.552863][T13931] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 536.552892][T13931] do_futex+0x229/0x350 [ 536.552912][T13931] ? __pfx_do_futex+0x10/0x10 [ 536.552930][T13931] ? rcu_is_watching+0x12/0xc0 [ 536.552954][T13931] ? ktime_get+0x200/0x310 [ 536.552970][T13931] ? lockdep_hardirqs_on+0x7c/0x110 [ 536.552997][T13931] ? read_tsc+0x9/0x20 [ 536.553023][T13931] __x64_sys_futex+0x1e0/0x4c0 [ 536.553046][T13931] ? __pfx___x64_sys_futex+0x10/0x10 [ 536.553066][T13931] ? xfd_validate_state+0x61/0x180 [ 536.553089][T13931] do_syscall_64+0xcd/0xf80 [ 536.553117][T13931] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 536.553135][T13931] RIP: 0033:0x7fb7ec78f7c9 [ 536.553149][T13931] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 536.553166][T13931] RSP: 002b:00007ffed01100f8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 536.553184][T13931] RAX: ffffffffffffffda RBX: 0000000000082f78 RCX: 00007fb7ec78f7c9 [ 536.553195][T13931] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fb7ec9e5fac [ 536.553205][T13931] RBP: 0000000000000032 R08: 00007fb7ed566000 R09: 00000006d01103ef [ 536.553215][T13931] R10: 00007ffed01101f0 R11: 0000000000000246 R12: 00007fb7ec9e5fac [ 536.553225][T13931] R13: 00007ffed01101f0 R14: 0000000000082faa R15: 00007ffed0110210 [ 536.553247][T13931] [ 536.832789][T13918] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 536.924190][T13936] FAULT_INJECTION: forcing a failure. [ 536.924190][T13936] name failslab, interval 1, probability 0, space 0, times 0 [ 536.939310][T13936] CPU: 0 UID: 0 PID: 13936 Comm: syz.6.1512 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 536.939349][T13936] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 536.939359][T13936] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 536.939369][T13936] Call Trace: [ 536.939375][T13936] [ 536.939382][T13936] dump_stack_lvl+0x16c/0x1f0 [ 536.939412][T13936] should_fail_ex+0x512/0x640 [ 536.939443][T13936] ? __kmalloc_cache_noprof+0x5f/0x800 [ 536.939465][T13936] should_failslab+0xc2/0x120 [ 536.939492][T13936] __kmalloc_cache_noprof+0x80/0x800 [ 536.939511][T13936] ? snd_seq_port_connect+0x61/0x580 [ 536.939543][T13936] ? snd_seq_port_connect+0x61/0x580 [ 536.939569][T13936] snd_seq_port_connect+0x61/0x580 [ 536.939596][T13936] ? _raw_read_unlock+0x28/0x50 [ 536.939620][T13936] ? check_subscription_permission.isra.0+0xf5/0x240 [ 536.939653][T13936] snd_seq_ioctl_subscribe_port+0x209/0x4b0 [ 536.939672][T13936] ? __pfx_snd_seq_ioctl_subscribe_port+0x10/0x10 [ 536.939703][T13936] ? do_raw_spin_lock+0x12c/0x2b0 [ 536.939730][T13936] call_seq_client_ctl+0x9f/0x110 [ 536.939759][T13936] snd_seq_kernel_client_ctl+0x77/0xd0 [ 536.939788][T13936] snd_seq_oss_midi_open+0x5ab/0x6a0 [ 536.939810][T13936] ? __pfx_snd_seq_oss_midi_open+0x10/0x10 [ 536.939838][T13936] ? snd_seq_oss_midi_reset+0x11a/0x4c0 [ 536.939866][T13936] ? __mutex_lock+0x27b/0x1ca0 [ 536.939886][T13936] snd_seq_oss_synth_reset+0x437/0x900 [ 536.939907][T13936] ? __pfx___mutex_lock+0x10/0x10 [ 536.939923][T13936] ? __pfx_snd_seq_oss_synth_reset+0x10/0x10 [ 536.939945][T13936] ? __pfx___fsnotify_parent+0x10/0x10 [ 536.939976][T13936] snd_seq_oss_reset+0x73/0x290 [ 536.939993][T13936] ? __pfx_odev_release+0x10/0x10 [ 536.940019][T13936] snd_seq_oss_release+0x7c/0x180 [ 536.940036][T13936] odev_release+0x56/0xa0 [ 536.940062][T13936] __fput+0x402/0xb70 [ 536.940084][T13936] task_work_run+0x150/0x240 [ 536.940104][T13936] ? __pfx_task_work_run+0x10/0x10 [ 536.940121][T13936] ? __do_sys_close_range+0x278/0x730 [ 536.940154][T13936] exit_to_user_mode_loop+0xfb/0x540 [ 536.940178][T13936] do_syscall_64+0x4ee/0xf80 [ 536.940207][T13936] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 536.940225][T13936] RIP: 0033:0x7f4bb798f7c9 [ 536.940239][T13936] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 536.940257][T13936] RSP: 002b:00007f4bb5bee038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 536.940274][T13936] RAX: 0000000000000000 RBX: 00007f4bb7be5fa0 RCX: 00007f4bb798f7c9 [ 536.940285][T13936] RDX: 0000000000000000 RSI: fffffffffffff000 RDI: 0000000000000000 [ 536.940296][T13936] RBP: 00007f4bb7a13f91 R08: 0000000000000000 R09: 0000000000000000 [ 536.940306][T13936] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 536.940315][T13936] R13: 00007f4bb7be6038 R14: 00007f4bb7be5fa0 R15: 00007ffe33b42438 [ 536.940338][T13936] [ 537.346240][T13848] 8021q: adding VLAN 0 to HW filter on device bond0 [ 537.374269][T13848] 8021q: adding VLAN 0 to HW filter on device team0 [ 537.387969][ T6777] bridge0: port 1(bridge_slave_0) entered blocking state [ 537.395757][ T6777] bridge0: port 1(bridge_slave_0) entered forwarding state [ 537.411581][ T6777] bridge0: port 2(bridge_slave_1) entered blocking state [ 537.418895][ T6777] bridge0: port 2(bridge_slave_1) entered forwarding state [ 537.742433][T13848] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 537.840454][T12171] Bluetooth: hci6: command tx timeout [ 537.959905][T13952] netlink: 330 bytes leftover after parsing attributes in process `syz.7.1514'. [ 538.246751][T13958] netlink: 206 bytes leftover after parsing attributes in process `syz.6.1516'. [ 538.304630][T13958] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1516'. [ 538.622777][T13848] veth0_vlan: entered promiscuous mode [ 538.812501][T13848] veth1_vlan: entered promiscuous mode [ 538.868771][T13971] openvswitch: netlink: Duplicate key (type 15). [ 538.971355][T13848] veth0_macvtap: entered promiscuous mode [ 539.020562][T13848] veth1_macvtap: entered promiscuous mode [ 539.100304][T13848] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 539.189106][T13848] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 539.253227][ T8093] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 539.320569][ T8093] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 539.416930][T13980] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input27 [ 539.438253][ T8093] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 539.542702][ T8093] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 539.813904][T13982] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input28 [ 539.909957][ T6965] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 539.918268][T12171] Bluetooth: hci6: command tx timeout [ 539.926431][ T6965] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 540.193543][ T6772] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 540.243599][ T6772] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 541.498638][T14019] device-mapper: ioctl: Invalid ioctl structure: uuid ýÿÿÿÿÿÿÿ, name , dev 700010007 [ 541.993851][T14024] zswap: compressor not available [ 542.450194][T14042] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 542.566439][T14045] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 542.629139][T14043] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 544.881093][T14090] device-mapper: ioctl: Invalid ioctl structure: uuid ýÿÿÿÿÿÿÿ, name , dev 700010007 [ 545.050909][T14098] netlink: 206 bytes leftover after parsing attributes in process `syz.6.1546'. [ 545.072203][T14098] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1546'. [ 545.230521][T14101] FAULT_INJECTION: forcing a failure. [ 545.230521][T14101] name failslab, interval 1, probability 0, space 0, times 0 [ 545.263110][T14101] CPU: 0 UID: 0 PID: 14101 Comm: syz.6.1548 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 545.263151][T14101] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 545.263160][T14101] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 545.263169][T14101] Call Trace: [ 545.263175][T14101] [ 545.263183][T14101] dump_stack_lvl+0x16c/0x1f0 [ 545.263214][T14101] should_fail_ex+0x512/0x640 [ 545.263238][T14101] ? kmem_cache_alloc_node_noprof+0x65/0x800 [ 545.263262][T14101] should_failslab+0xc2/0x120 [ 545.263288][T14101] kmem_cache_alloc_node_noprof+0x86/0x800 [ 545.263308][T14101] ? __alloc_skb+0x156/0x410 [ 545.263332][T14101] ? __alloc_skb+0x156/0x410 [ 545.263349][T14101] __alloc_skb+0x156/0x410 [ 545.263368][T14101] ? __alloc_skb+0x35d/0x410 [ 545.263387][T14101] ? __pfx___alloc_skb+0x10/0x10 [ 545.263410][T14101] ? netlink_has_listeners+0x20f/0x430 [ 545.263438][T14101] alloc_uevent_skb+0x7d/0x210 [ 545.263458][T14101] kobject_uevent_env+0xca4/0x1870 [ 545.263482][T14101] ? bus_to_subsys+0x131/0x160 [ 545.263504][T14101] device_add+0x10dd/0x1950 [ 545.263522][T14101] ? __pfx_device_add+0x10/0x10 [ 545.263537][T14101] ? kfree+0x2f8/0x6e0 [ 545.263554][T14101] ? input_register_device+0xc56/0x1180 [ 545.263578][T14101] ? mark_held_locks+0x49/0x80 [ 545.263598][T14101] input_register_device+0x7e8/0x1180 [ 545.263621][T14101] ? atkbd_set_device_attrs+0x864/0xa90 [ 545.263650][T14101] atkbd_set_scroll+0x238/0x370 [ 545.263668][T14101] ? __pfx_atkbd_set_scroll+0x10/0x10 [ 545.263686][T14101] ? mark_held_locks+0x49/0x80 [ 545.263702][T14101] ? __pfx_atkbd_set_scroll+0x10/0x10 [ 545.263719][T14101] atkbd_attr_set_helper.isra.0+0x12e/0x260 [ 545.263740][T14101] ? __pfx_atkbd_do_set_scroll+0x10/0x10 [ 545.263757][T14101] dev_attr_store+0x58/0x80 [ 545.263783][T14101] ? __pfx_dev_attr_store+0x10/0x10 [ 545.263808][T14101] sysfs_kf_write+0xf2/0x150 [ 545.263827][T14101] kernfs_fop_write_iter+0x3af/0x570 [ 545.263850][T14101] ? __pfx_sysfs_kf_write+0x10/0x10 [ 545.263868][T14101] vfs_write+0x7d3/0x11d0 [ 545.263892][T14101] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 545.263919][T14101] ? __pfx_vfs_write+0x10/0x10 [ 545.263957][T14101] ksys_write+0x12a/0x250 [ 545.263980][T14101] ? __pfx_ksys_write+0x10/0x10 [ 545.264018][T14101] do_syscall_64+0xcd/0xf80 [ 545.264046][T14101] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 545.264063][T14101] RIP: 0033:0x7f4bb798f7c9 [ 545.264078][T14101] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 545.264096][T14101] RSP: 002b:00007f4bb5bee038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 545.264117][T14101] RAX: ffffffffffffffda RBX: 00007f4bb7be5fa0 RCX: 00007f4bb798f7c9 [ 545.264128][T14101] RDX: 0000000000000081 RSI: 00002000000001c0 RDI: 000000000000000a [ 545.264138][T14101] RBP: 00007f4bb7a13f91 R08: 0000000000000000 R09: 0000000000000000 [ 545.264148][T14101] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 545.264158][T14101] R13: 00007f4bb7be6038 R14: 00007f4bb7be5fa0 R15: 00007ffe33b42438 [ 545.264181][T14101] [ 545.584307][T14101] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input29 [ 546.185904][T14111] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1549'. [ 546.506940][T14110] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1549'. [ 547.731629][T14135] netlink: 'syz.2.1549': attribute type 10 has an invalid length. [ 548.273821][ T30] audit: type=1800 audit(2053.050:14): pid=14141 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.1555" name="dbroot" dev="configfs" ino=51945 res=0 errno=0 [ 549.276793][T14157] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 550.262570][T14177] netlink: 206 bytes leftover after parsing attributes in process `syz.2.1561'. [ 550.274634][T14183] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1565'. [ 550.363532][T14177] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1561'. [ 551.284243][T14210] Kernel: The 'panic_print' parameter is now deprecated. Please use 'panic_sys_info' and 'panic_console_replay' instead. [ 551.860468][T14186] kexec: Could not allocate control_code_buffer [ 552.232099][T14228] warning: `syz.6.1568' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 553.843559][T14255] FAULT_INJECTION: forcing a failure. [ 553.843559][T14255] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 554.010889][T14255] CPU: 0 UID: 0 PID: 14255 Comm: syz.2.1573 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 554.010929][T14255] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 554.010938][T14255] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 554.010948][T14255] Call Trace: [ 554.010954][T14255] [ 554.010961][T14255] dump_stack_lvl+0x16c/0x1f0 [ 554.010993][T14255] should_fail_ex+0x512/0x640 [ 554.011020][T14255] should_fail_alloc_page+0xe7/0x130 [ 554.011050][T14255] prepare_alloc_pages+0x401/0x670 [ 554.011080][T14255] __alloc_frozen_pages_noprof+0x18b/0x2430 [ 554.011106][T14255] ? lock_acquire+0x179/0x330 [ 554.011123][T14255] ? find_held_lock+0x2b/0x80 [ 554.011147][T14255] ? mark_held_locks+0x49/0x80 [ 554.011163][T14255] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 554.011184][T14255] ? finish_task_switch.isra.0+0x207/0xbd0 [ 554.011211][T14255] ? rcu_is_watching+0x12/0xc0 [ 554.011244][T14255] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 554.011272][T14255] ? policy_nodemask+0xea/0x4e0 [ 554.011299][T14255] alloc_pages_mpol+0x1fb/0x550 [ 554.011326][T14255] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 554.011357][T14255] alloc_pages_noprof+0x131/0x390 [ 554.011384][T14255] __pmd_alloc+0x3b/0x9c0 [ 554.011412][T14255] __handle_mm_fault+0xbeb/0x2bb0 [ 554.011436][T14255] ? __pfx___handle_mm_fault+0x10/0x10 [ 554.011471][T14255] handle_mm_fault+0x3fe/0xad0 [ 554.011492][T14255] __get_user_pages+0x54e/0x3590 [ 554.011527][T14255] ? __pfx___get_user_pages+0x10/0x10 [ 554.011558][T14255] populate_vma_page_range+0x267/0x3f0 [ 554.011587][T14255] ? __pfx_populate_vma_page_range+0x10/0x10 [ 554.011621][T14255] ? __pfx_find_vma_intersection+0x10/0x10 [ 554.011647][T14255] ? do_mmap+0x69c/0x1210 [ 554.011673][T14255] __mm_populate+0x1d8/0x380 [ 554.011701][T14255] ? __pfx___mm_populate+0x10/0x10 [ 554.011728][T14255] ? up_write+0x282/0x4e0 [ 554.011750][T14255] vm_mmap_pgoff+0x37f/0x470 [ 554.011777][T14255] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 554.011805][T14255] ? __x64_sys_futex+0x1e0/0x4c0 [ 554.011825][T14255] ? __x64_sys_futex+0x1e9/0x4c0 [ 554.011848][T14255] ksys_mmap_pgoff+0x7d/0x5c0 [ 554.011871][T14255] ? xfd_validate_state+0x61/0x180 [ 554.011891][T14255] __x64_sys_mmap+0x125/0x190 [ 554.011910][T14255] do_syscall_64+0xcd/0xf80 [ 554.011939][T14255] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 554.011957][T14255] RIP: 0033:0x7f7a79f8f7c9 [ 554.011971][T14255] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 554.011989][T14255] RSP: 002b:00007f7a7ad42038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 554.012006][T14255] RAX: ffffffffffffffda RBX: 00007f7a7a1e6090 RCX: 00007f7a79f8f7c9 [ 554.012017][T14255] RDX: 00000000000000df RSI: 0000000000400005 RDI: 0000000000000000 [ 554.012027][T14255] RBP: 00007f7a7a013f91 R08: 0000000000000002 R09: 0000000000008000 [ 554.012037][T14255] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 554.012047][T14255] R13: 00007f7a7a1e6128 R14: 00007f7a7a1e6090 R15: 00007ffe2a308fa8 [ 554.012070][T14255] [ 554.822307][T14257] futex_wake_op: syz.6.1574 tries to shift op by -2048; fix this program [ 555.926388][ T7134] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 555.936729][ T7134] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 555.945062][ T7134] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 555.953257][ T7134] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 555.960975][ T7134] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 556.088851][T14284] netlink: 206 bytes leftover after parsing attributes in process `syz.8.1581'. [ 556.136094][T14284] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1581'. [ 556.476212][T14281] chnl_net:caif_netlink_parms(): no params data found [ 556.749822][T14281] bridge0: port 1(bridge_slave_0) entered blocking state [ 556.782418][T14281] bridge0: port 1(bridge_slave_0) entered disabled state [ 556.805580][T14281] bridge_slave_0: entered allmulticast mode [ 556.836751][T14281] bridge_slave_0: entered promiscuous mode [ 556.898718][T14281] bridge0: port 2(bridge_slave_1) entered blocking state [ 556.945484][T14281] bridge0: port 2(bridge_slave_1) entered disabled state [ 556.965628][T14281] bridge_slave_1: entered allmulticast mode [ 557.000560][T14281] bridge_slave_1: entered promiscuous mode [ 557.251602][T14281] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 557.305926][T14281] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 557.669297][T14281] team0: Port device team_slave_0 added [ 557.707774][T14281] team0: Port device team_slave_1 added [ 557.837380][T14281] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 557.875067][T14281] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 557.996938][ T7134] Bluetooth: hci7: command tx timeout [ 558.012310][T14281] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 558.267074][T14281] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 558.301831][T14281] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 558.447866][T14281] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 558.692357][T14281] hsr_slave_0: entered promiscuous mode [ 558.722958][T14281] hsr_slave_1: entered promiscuous mode [ 558.751627][T14281] debugfs: 'hsr0' already exists in 'hsr' [ 558.781263][T14281] Cannot create hsr debugfs directory [ 559.588124][T14281] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 559.836844][T14281] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 559.871832][T14281] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 559.919390][T14281] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 560.076230][ T7134] Bluetooth: hci7: command tx timeout [ 560.727666][T14281] 8021q: adding VLAN 0 to HW filter on device bond0 [ 560.907442][T14281] 8021q: adding VLAN 0 to HW filter on device team0 [ 560.950481][ T8101] bridge0: port 1(bridge_slave_0) entered blocking state [ 560.957687][ T8101] bridge0: port 1(bridge_slave_0) entered forwarding state [ 561.031628][ T8101] bridge0: port 2(bridge_slave_1) entered blocking state [ 561.039249][ T8101] bridge0: port 2(bridge_slave_1) entered forwarding state [ 561.249671][T14367] netlink: 206 bytes leftover after parsing attributes in process `syz.8.1591'. [ 561.288519][T14369] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1591'. [ 562.128672][T14281] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 562.166445][T12171] Bluetooth: hci7: command tx timeout [ 563.017456][T14281] veth0_vlan: entered promiscuous mode [ 563.112061][T14281] veth1_vlan: entered promiscuous mode [ 563.204075][T14400] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 563.242543][T14281] veth0_macvtap: entered promiscuous mode [ 563.248679][T14400] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 563.273527][T14281] veth1_macvtap: entered promiscuous mode [ 563.356581][T14281] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 563.448420][T14281] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 563.476796][ T8089] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 563.514542][T14403] blktrace: Concurrent blktraces are not allowed on loop2 [ 563.535936][ T8089] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 563.640310][ T8089] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 563.719315][ T8089] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 563.936519][ T8089] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 563.992157][ T8089] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 564.094785][ T6902] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 564.111505][ T6902] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 564.238537][T12171] Bluetooth: hci7: command tx timeout [ 568.582979][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 568.595566][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 569.314980][T14504] Format for adding new device is "id port_count num_queues" (uint uint unit). [ 569.401427][T12171] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18 [ 569.466824][T14513] netlink: zone id is out of range [ 569.472232][T14513] netlink: zone id is out of range [ 569.553675][T14515] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1615'. [ 569.604853][T14513] netlink: zone id is out of range [ 569.670637][T14513] netlink: zone id is out of range [ 569.736447][T14513] netlink: zone id is out of range [ 569.782415][T14513] netlink: zone id is out of range [ 569.834982][T14513] netlink: zone id is out of range [ 569.888597][T14513] netlink: zone id is out of range [ 569.981124][T14513] netlink: zone id is out of range [ 570.028962][T14513] netlink: zone id is out of range [ 570.114484][T14529] netlink: 32 bytes leftover after parsing attributes in process `syz.9.1617'. [ 570.229669][T14527] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.9.1617: iget: checksum invalid [ 570.369618][T14527] faux_driver regulatory: loading /lib/firmware/updates/syzkaller/regulatory.db failed with error -74 [ 570.563164][ T8322] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 570.573804][ T8322] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 570.582571][ T8322] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 570.591383][ T8322] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 570.602707][ T8322] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 570.612699][T14527] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.9.1617: iget: checksum invalid [ 570.716367][T14527] faux_driver regulatory: loading /lib/firmware/updates/regulatory.db failed with error -74 [ 570.770391][T14527] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.9.1617: iget: checksum invalid [ 570.804343][T14527] faux_driver regulatory: loading /lib/firmware/syzkaller/regulatory.db failed with error -74 [ 570.837247][T14539] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1620'. [ 570.886296][T14527] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.9.1617: iget: checksum invalid [ 570.924485][T14527] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -74 [ 570.993981][T14527] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -74 [ 571.042291][T14527] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 571.444415][ T7134] Bluetooth: hci0: command 0x0c1a tx timeout [ 571.642890][T14536] chnl_net:caif_netlink_parms(): no params data found [ 571.925024][T14550] FAULT_INJECTION: forcing a failure. [ 571.925024][T14550] name failslab, interval 1, probability 0, space 0, times 0 [ 571.939566][T14554] FAULT_INJECTION: forcing a failure. [ 571.939566][T14554] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 571.955252][T14536] bridge0: port 1(bridge_slave_0) entered blocking state [ 571.978512][T14536] bridge0: port 1(bridge_slave_0) entered disabled state [ 571.986025][T14550] CPU: 0 UID: 0 PID: 14550 Comm: syz.2.1622 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 571.986065][T14550] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 571.986075][T14550] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 571.986085][T14550] Call Trace: [ 571.986091][T14550] [ 571.986098][T14550] dump_stack_lvl+0x16c/0x1f0 [ 571.986128][T14550] should_fail_ex+0x512/0x640 [ 571.986152][T14550] ? __kmalloc_cache_noprof+0x5f/0x800 [ 571.986174][T14550] should_failslab+0xc2/0x120 [ 571.986200][T14550] __kmalloc_cache_noprof+0x80/0x800 [ 571.986219][T14550] ? alloc_super+0x52/0xd00 [ 571.986243][T14550] ? alloc_super+0x52/0xd00 [ 571.986263][T14550] alloc_super+0x52/0xd00 [ 571.986283][T14550] ? sget_fc+0xd3/0xc20 [ 571.986308][T14550] sget_fc+0x116/0xc20 [ 571.986340][T14550] ? __pfx_set_anon_super_fc+0x10/0x10 [ 571.986361][T14550] ? __pfx_mqueue_fill_super+0x10/0x10 [ 571.986381][T14550] get_tree_nodev+0x28/0x190 [ 571.986404][T14550] mqueue_get_tree+0xf1/0x130 [ 571.986423][T14550] vfs_get_tree+0x8e/0x330 [ 571.986442][T14550] fc_mount_longterm+0x1a/0x270 [ 571.986464][T14550] mq_init_ns+0x482/0x810 [ 571.986488][T14550] copy_ipcs+0x3db/0x790 [ 571.986512][T14550] create_new_namespaces+0x20a/0xab0 [ 571.986535][T14550] ? security_capable+0x7e/0x260 [ 571.986557][T14550] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 571.986582][T14550] ksys_unshare+0x45b/0xa40 [ 571.986609][T14550] ? __pfx_ksys_unshare+0x10/0x10 [ 571.986636][T14550] ? xfd_validate_state+0x61/0x180 [ 571.986658][T14550] __x64_sys_unshare+0x31/0x40 [ 571.986683][T14550] do_syscall_64+0xcd/0xf80 [ 571.986710][T14550] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 571.986727][T14550] RIP: 0033:0x7f7a79f8f7c9 [ 571.986741][T14550] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 571.986757][T14550] RSP: 002b:00007f7a7ad42038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 571.986774][T14550] RAX: ffffffffffffffda RBX: 00007f7a7a1e6090 RCX: 00007f7a79f8f7c9 [ 571.986785][T14550] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000008000000 [ 571.986795][T14550] RBP: 00007f7a7a013f91 R08: 0000000000000000 R09: 0000000000000000 [ 571.986805][T14550] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 571.986814][T14550] R13: 00007f7a7a1e6128 R14: 00007f7a7a1e6090 R15: 00007ffe2a308fa8 [ 571.986836][T14550] [ 571.989719][T14554] CPU: 0 UID: 0 PID: 14554 Comm: syz.9.1623 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 571.989763][T14554] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 571.989773][T14554] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 571.989782][T14554] Call Trace: [ 571.989789][T14554] [ 571.989796][T14554] dump_stack_lvl+0x16c/0x1f0 [ 571.989825][T14554] should_fail_ex+0x512/0x640 [ 571.989853][T14554] _copy_to_iter+0x29f/0x1710 [ 571.989878][T14554] ? chacha_block_generic+0x211/0x330 [ 571.989903][T14554] ? __pfx__copy_to_iter+0x10/0x10 [ 571.989927][T14554] ? lockdep_hardirqs_on+0x7c/0x110 [ 571.989953][T14554] ? crng_make_state+0x48e/0x6c0 [ 571.989978][T14554] get_random_bytes_user+0x17f/0x3c0 [ 571.990000][T14554] ? __pfx_get_random_bytes_user+0x10/0x10 [ 571.990020][T14554] ? do_writev+0x218/0x340 [ 571.990046][T14554] ? do_futex+0x122/0x350 [ 571.990071][T14554] ? import_ubuf+0x1b6/0x220 [ 571.990092][T14554] ? __UNIQUE_ID_modinfo_903+0x642a261b/0xffffffffffeca5fc [ 571.990118][T14554] __x64_sys_getrandom+0x183/0x290 [ 571.990141][T14554] ? __pfx___x64_sys_getrandom+0x10/0x10 [ 571.990174][T14554] do_syscall_64+0xcd/0xf80 [ 571.990201][T14554] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 571.990224][T14554] RIP: 0033:0x7fbc9fb8f7c9 [ 571.990242][T14554] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 571.990259][T14554] RSP: 002b:00007fbca09a9038 EFLAGS: 00000246 ORIG_RAX: 000000000000013e [ 571.990276][T14554] RAX: ffffffffffffffda RBX: 00007fbc9fde5fa0 RCX: 00007fbc9fb8f7c9 [ 571.990288][T14554] RDX: 0000000000000003 RSI: ffffffffff60001f RDI: 0000000000000000 [ 571.990299][T14554] RBP: 00007fbc9fc13f91 R08: 0000000000000000 R09: 0000000000000000 [ 571.990309][T14554] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 571.990319][T14554] R13: 00007fbc9fde6038 R14: 00007fbc9fde5fa0 R15: 00007ffd8cccb3e8 [ 571.990344][T14554] ? __UNIQUE_ID_modinfo_903+0x642a261b/0xffffffffffeca5fc [ 571.990373][T14554] [ 572.544353][T14536] bridge_slave_0: entered allmulticast mode [ 572.551994][T14536] bridge_slave_0: entered promiscuous mode [ 572.561520][T14536] bridge0: port 2(bridge_slave_1) entered blocking state [ 572.568750][T14536] bridge0: port 2(bridge_slave_1) entered disabled state [ 572.576408][T14536] bridge_slave_1: entered allmulticast mode [ 572.583825][T14536] bridge_slave_1: entered promiscuous mode [ 572.614630][T14536] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 572.626532][T14536] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 572.678332][T14536] team0: Port device team_slave_0 added [ 572.686052][T14536] team0: Port device team_slave_1 added [ 572.712557][T14536] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 572.719859][T14536] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 572.746420][T14536] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 572.758748][T14536] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 572.765761][T14536] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 572.794032][T14536] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 572.836338][T14536] hsr_slave_0: entered promiscuous mode [ 572.842900][T14536] hsr_slave_1: entered promiscuous mode [ 572.849478][T14536] debugfs: 'hsr0' already exists in 'hsr' [ 572.855223][T14536] Cannot create hsr debugfs directory [ 572.984429][ T8322] Bluetooth: hci8: command tx timeout [ 573.179403][T14571] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 573.207584][T14571] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 573.228552][T14573] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1627'. [ 573.523631][ T8322] Bluetooth: hci0: command 0x0c1a tx timeout [ 573.854932][T14572] netlink: 206 bytes leftover after parsing attributes in process `syz.8.1627'. [ 574.287843][T14599] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff888078001dc0 pfn:0x78001 [ 574.352795][T14599] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 574.379190][T14599] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000 [ 574.435503][T14599] raw: ffff888078001dc0 ffff888142e8ec00 00000001ffffffff 0000000000000000 [ 574.485791][T14599] page dumped because: unmovable page [ 574.491350][T14599] page_owner tracks the page as allocated [ 574.550918][T14599] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x12c02(GFP_NOIO|__GFP_HIGHMEM|__GFP_NOWARN|__GFP_NORETRY), pid 9, tgid 9 (kworker/0:0), ts 515524522846, free_ts 498901860911 [ 574.655830][T14599] post_alloc_hook+0x1af/0x220 [ 574.660814][T14599] get_page_from_freelist+0xd0b/0x31a0 [ 574.681062][T14605] netlink: 'syz.9.1635': attribute type 11 has an invalid length. [ 574.706650][T14599] __alloc_frozen_pages_noprof+0x25f/0x2430 [ 574.712608][T14599] __alloc_pages_noprof+0xb/0x1b0 [ 574.765932][T14599] pcpu_populate_chunk+0x110/0xb10 [ 574.771090][T14599] pcpu_balance_workfn+0x839/0xe00 [ 574.805457][T14599] process_one_work+0x9ba/0x1b20 [ 574.810439][T14599] worker_thread+0x6c8/0xf10 [ 574.815116][T14599] kthread+0x3c5/0x780 [ 574.895441][T14599] ret_from_fork+0x983/0xb10 [ 574.900304][T14599] ret_from_fork_asm+0x1a/0x30 [ 574.948388][T14599] page last free pid 13216 tgid 13213 stack trace: [ 574.955008][T14599] __free_frozen_pages+0x7df/0x1170 [ 575.010775][T14599] kimage_free_page_list+0x130/0x230 [ 575.042799][ T7134] Bluetooth: hci8: command tx timeout [ 575.054405][T14599] kimage_alloc_control_pages+0x3d3/0xa00 [ 575.076685][T14619] FAULT_INJECTION: forcing a failure. [ 575.076685][T14619] name failslab, interval 1, probability 0, space 0, times 0 [ 575.091172][T14599] do_kexec_load+0x439/0x860 [ 575.101968][T14599] __x64_sys_kexec_load+0x1bf/0x230 [ 575.135068][T14599] do_syscall_64+0xcd/0xf80 [ 575.142569][T14619] CPU: 0 UID: 0 PID: 14619 Comm: syz.9.1637 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 575.142608][T14619] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 575.142618][T14619] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 575.142627][T14619] Call Trace: [ 575.142633][T14619] [ 575.142641][T14619] dump_stack_lvl+0x16c/0x1f0 [ 575.142670][T14619] should_fail_ex+0x512/0x640 [ 575.142694][T14619] ? __kmalloc_cache_noprof+0x5f/0x800 [ 575.142716][T14619] should_failslab+0xc2/0x120 [ 575.142741][T14619] __kmalloc_cache_noprof+0x80/0x800 [ 575.142760][T14619] ? allocate_file_region_entries+0x1a0/0x620 [ 575.142781][T14619] ? trace_mm_page_alloc+0x11b/0x180 [ 575.142808][T14619] ? allocate_file_region_entries+0x1a0/0x620 [ 575.142828][T14619] ? _raw_spin_unlock+0x28/0x50 [ 575.142850][T14619] allocate_file_region_entries+0x1a0/0x620 [ 575.142875][T14619] ? __pfx_allocate_file_region_entries+0x10/0x10 [ 575.142904][T14619] region_chg+0x85/0x140 [ 575.142925][T14619] __vma_reservation_common+0x43b/0x740 [ 575.142948][T14619] ? __pfx___vma_reservation_common+0x10/0x10 [ 575.142969][T14619] ? filemap_get_entry+0x1a7/0x3b0 [ 575.142994][T14619] alloc_hugetlb_folio+0x8ff/0x14c0 [ 575.143023][T14619] ? __pfx_alloc_hugetlb_folio+0x10/0x10 [ 575.143052][T14619] ? __filemap_get_folio_mpol+0x32f/0xc60 [ 575.143077][T14619] hugetlb_no_page+0x10fa/0x2140 [ 575.143102][T14619] hugetlb_fault+0x5ed/0x1730 [ 575.143122][T14619] ? __pfx_hugetlb_fault+0x10/0x10 [ 575.143147][T14619] ? find_vma+0xbf/0x140 [ 575.143168][T14619] ? __pfx_find_vma+0x10/0x10 [ 575.143193][T14619] handle_mm_fault+0x95d/0xad0 [ 575.143214][T14619] do_user_addr_fault+0x7a6/0x1370 [ 575.143235][T14619] ? futex_hash_put+0x3e/0x50 [ 575.143252][T14619] ? rcu_is_watching+0x12/0xc0 [ 575.143278][T14619] exc_page_fault+0x64/0xc0 [ 575.143303][T14619] asm_exc_page_fault+0x26/0x30 [ 575.143319][T14619] RIP: 0010:rep_movs_alternative+0x30/0x90 [ 575.143340][T14619] Code: 83 f9 08 73 25 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 cc cc cc cc 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 <48> 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 [ 575.143357][T14619] RSP: 0018:ffffc900045ffda0 EFLAGS: 00050212 [ 575.143379][T14619] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 0000000000000010 [ 575.143390][T14619] RDX: fffff520008bffd2 RSI: 0000000000000000 RDI: ffffc900045ffe80 [ 575.143400][T14619] RBP: 0000000000000010 R08: 0000000000000001 R09: fffff520008bffd1 [ 575.143410][T14619] R10: ffffc900045ffe8f R11: ffff88802f6629b0 R12: 0000000000000000 [ 575.143420][T14619] R13: ffffc900045ffe80 R14: 1ffff920008bffc4 R15: ffffc900045ffe80 [ 575.143443][T14619] _copy_from_user+0x98/0xd0 [ 575.143467][T14619] write_ldt+0xfc/0xd20 [ 575.143492][T14619] ? __pfx_write_ldt+0x10/0x10 [ 575.143523][T14619] __x64_sys_modify_ldt+0xb1/0x170 [ 575.143544][T14619] do_syscall_64+0xcd/0xf80 [ 575.143577][T14619] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 575.143594][T14619] RIP: 0033:0x7fbc9fb8f7c9 [ 575.143607][T14619] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 575.143623][T14619] RSP: 002b:00007fbca09a9038 EFLAGS: 00000246 ORIG_RAX: 000000000000009a [ 575.143638][T14619] RAX: ffffffffffffffda RBX: 00007fbc9fde5fa0 RCX: 00007fbc9fb8f7c9 [ 575.143648][T14619] RDX: 0000000000000010 RSI: 0000000000000000 RDI: 0000000000000001 [ 575.143657][T14619] RBP: 00007fbc9fc13f91 R08: 0000000000000000 R09: 0000000000000000 [ 575.143667][T14619] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 575.143676][T14619] R13: 00007fbc9fde6038 R14: 00007fbc9fde5fa0 R15: 00007ffd8cccb3e8 [ 575.143699][T14619] [ 575.513663][T14599] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 575.883673][T14536] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 576.054586][T14536] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 576.091453][T14536] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 576.146211][T14536] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 576.772679][T14536] 8021q: adding VLAN 0 to HW filter on device bond0 [ 576.976607][T14536] 8021q: adding VLAN 0 to HW filter on device team0 [ 577.061909][ T8096] bridge0: port 1(bridge_slave_0) entered blocking state [ 577.069266][ T8096] bridge0: port 1(bridge_slave_0) entered forwarding state [ 577.121660][ T7134] Bluetooth: hci8: command tx timeout [ 577.193012][ T8096] bridge0: port 2(bridge_slave_1) entered blocking state [ 577.200253][ T8096] bridge0: port 2(bridge_slave_1) entered forwarding state [ 578.613634][T14536] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 578.758818][T14695] nbd: must specify at least one socket [ 578.909215][T14694] snd_aloop snd_aloop.0: control 7:265:7:ª¸è:2 is already present [ 578.953175][T14536] veth0_vlan: entered promiscuous mode [ 579.077164][T14536] veth1_vlan: entered promiscuous mode [ 579.201919][ T8322] Bluetooth: hci8: command tx timeout [ 579.396843][T14536] veth0_macvtap: entered promiscuous mode [ 579.483880][T14536] veth1_macvtap: entered promiscuous mode [ 579.675739][ T7134] Bluetooth: hci9: Opcode 0x0c03 failed: -110 [ 579.969292][T14536] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 580.011513][ T30] audit: type=1326 audit(2084.790:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14717 comm="syz.9.1652" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fbc9fb8f7c9 code=0x0 [ 580.107650][T14536] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 580.198910][ T8101] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 580.252083][ T8101] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 580.337679][ T8101] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 580.408840][ T8101] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 580.817699][ T6861] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 580.860514][ T6861] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 581.106608][ T7134] Bluetooth: hci7: unexpected subevent 0x01 length: 123 > 18 [ 581.153689][ T6861] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 581.198893][ T6861] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 582.997849][T14782] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input30 [ 584.403260][T14802] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1662'. [ 585.200093][T14836] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1665'. [ 585.278372][T14839] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1665'. [ 586.053333][T14862] FAULT_INJECTION: forcing a failure. [ 586.053333][T14862] name failslab, interval 1, probability 0, space 0, times 0 [ 586.131273][T14862] CPU: 0 UID: 0 PID: 14862 Comm: syz.2.1672 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 586.131314][T14862] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 586.131323][T14862] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 586.131333][T14862] Call Trace: [ 586.131339][T14862] [ 586.131346][T14862] dump_stack_lvl+0x16c/0x1f0 [ 586.131376][T14862] should_fail_ex+0x512/0x640 [ 586.131399][T14862] ? kmem_cache_alloc_lru_noprof+0x66/0x770 [ 586.131423][T14862] should_failslab+0xc2/0x120 [ 586.131448][T14862] kmem_cache_alloc_lru_noprof+0x87/0x770 [ 586.131469][T14862] ? __d_alloc+0x35/0xa80 [ 586.131498][T14862] ? __d_alloc+0x35/0xa80 [ 586.131522][T14862] __d_alloc+0x35/0xa80 [ 586.131550][T14862] d_alloc_pseudo+0x1c/0xc0 [ 586.131570][T14862] alloc_file_pseudo+0xcf/0x230 [ 586.131589][T14862] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 586.131607][T14862] ? alloc_fd+0x471/0x7d0 [ 586.131634][T14862] sock_alloc_file+0x50/0x210 [ 586.131659][T14862] __sys_socket+0x1c0/0x260 [ 586.131676][T14862] ? __pfx___sys_socket+0x10/0x10 [ 586.131693][T14862] ? xfd_validate_state+0x61/0x180 [ 586.131714][T14862] __x64_sys_socket+0x72/0xb0 [ 586.131730][T14862] ? lockdep_hardirqs_on+0x7c/0x110 [ 586.131755][T14862] do_syscall_64+0xcd/0xf80 [ 586.131782][T14862] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 586.131800][T14862] RIP: 0033:0x7f7a79f8f7c9 [ 586.131814][T14862] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 586.131830][T14862] RSP: 002b:00007f7a7ad63038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 586.131846][T14862] RAX: ffffffffffffffda RBX: 00007f7a7a1e5fa0 RCX: 00007f7a79f8f7c9 [ 586.131857][T14862] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000025 [ 586.131867][T14862] RBP: 00007f7a7a013f91 R08: 0000000000000000 R09: 0000000000000000 [ 586.131877][T14862] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 586.131886][T14862] R13: 00007f7a7a1e6038 R14: 00007f7a7a1e5fa0 R15: 00007ffe2a308fa8 [ 586.131907][T14862] [ 587.011069][T14876] ALSA: mixer_oss: invalid OSS volume '' [ 587.442319][ T30] audit: type=1400 audit(2092.220:16): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=14882 comm="syz.1.1674" [ 587.922736][T14888] zswap: compressor not available [ 588.539835][T14914] bond0: no command found in slaves file - use +ifname or -ifname [ 589.372079][T14936] FAULT_INJECTION: forcing a failure. [ 589.372079][T14936] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 589.470028][T14936] CPU: 0 UID: 0 PID: 14936 Comm: syz.1.1683 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 589.470069][T14936] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 589.470079][T14936] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 589.470089][T14936] Call Trace: [ 589.470095][T14936] [ 589.470183][T14936] dump_stack_lvl+0x16c/0x1f0 [ 589.470214][T14936] should_fail_ex+0x512/0x640 [ 589.470242][T14936] should_fail_alloc_page+0xe7/0x130 [ 589.470269][T14936] prepare_alloc_pages+0x401/0x670 [ 589.470299][T14936] __alloc_frozen_pages_noprof+0x18b/0x2430 [ 589.470326][T14936] ? __lock_acquire+0x436/0x2890 [ 589.470347][T14936] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 589.470376][T14936] ? is_bpf_text_address+0x8a/0x1a0 [ 589.470398][T14936] ? bpf_ksym_find+0x124/0x1c0 [ 589.470415][T14936] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 589.470443][T14936] ? is_bpf_text_address+0x94/0x1a0 [ 589.470463][T14936] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 589.470489][T14936] ? policy_nodemask+0xea/0x4e0 [ 589.470516][T14936] alloc_pages_mpol+0x1fb/0x550 [ 589.470541][T14936] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 589.470571][T14936] folio_alloc_mpol_noprof+0x36/0x2f0 [ 589.470588][T14936] shmem_alloc_folio+0x135/0x160 [ 589.470615][T14936] shmem_alloc_and_add_folio+0x494/0xc20 [ 589.470637][T14936] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 589.470657][T14936] ? shmem_allowable_huge_orders+0xd4/0x3f0 [ 589.470680][T14936] shmem_get_folio_gfp+0x67f/0x1610 [ 589.470703][T14936] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 589.470727][T14936] shmem_fault+0x1fe/0xa00 [ 589.470746][T14936] ? __pfx_shmem_fault+0x10/0x10 [ 589.470763][T14936] ? trace_kmem_cache_alloc+0x28/0xb0 [ 589.470787][T14936] ? ptlock_alloc+0x1f/0x70 [ 589.470805][T14936] ? lockdep_init_map_type+0x5c/0x270 [ 589.470822][T14936] ? __raw_spin_lock_init+0x3a/0x110 [ 589.470845][T14936] __do_fault+0x10d/0x490 [ 589.470866][T14936] do_fault+0x302/0x1ad0 [ 589.470888][T14936] ? __pfx_filemap_map_pages+0x10/0x10 [ 589.470907][T14936] ? __pmd_alloc+0x6aa/0x9c0 [ 589.470933][T14936] __handle_mm_fault+0x1919/0x2bb0 [ 589.470955][T14936] ? __pfx___handle_mm_fault+0x10/0x10 [ 589.470984][T14936] ? find_vma+0xbf/0x140 [ 589.471005][T14936] ? __pfx_find_vma+0x10/0x10 [ 589.471034][T14936] handle_mm_fault+0x3fe/0xad0 [ 589.471054][T14936] do_user_addr_fault+0x7a6/0x1370 [ 589.471077][T14936] ? rcu_is_watching+0x12/0xc0 [ 589.471109][T14936] exc_page_fault+0x64/0xc0 [ 589.471136][T14936] asm_exc_page_fault+0x26/0x30 [ 589.471151][T14936] RIP: 0010:rep_movs_alternative+0x33/0x90 [ 589.471173][T14936] Code: 73 25 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 cc cc cc cc 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 8b 06 <48> 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb [ 589.471190][T14936] RSP: 0018:ffffc9000bc67d90 EFLAGS: 00050246 [ 589.471205][T14936] RAX: 0000000000000000 RBX: 0000000000000008 RCX: 0000000000000008 [ 589.471215][T14936] RDX: fffff5200178cfc5 RSI: ffffc9000bc67e20 RDI: 000000000000556d [ 589.471226][T14936] RBP: 000000000000556d R08: 0000000000000000 R09: fffff5200178cfc4 [ 589.471236][T14936] R10: ffffc9000bc67e27 R11: ffff888034430b30 R12: ffffc9000bc67e20 [ 589.471247][T14936] R13: 0000000000005575 R14: 00007ffffffff000 R15: 0000000000000000 [ 589.471269][T14936] _copy_to_user+0xbb/0xd0 [ 589.471294][T14936] do_fcntl+0x13f4/0x1660 [ 589.471312][T14936] ? __pfx_do_fcntl+0x10/0x10 [ 589.471336][T14936] ? tomoyo_file_fcntl+0x6c/0xc0 [ 589.471358][T14936] __x64_sys_fcntl+0x163/0x200 [ 589.471378][T14936] do_syscall_64+0xcd/0xf80 [ 589.471405][T14936] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 589.471422][T14936] RIP: 0033:0x7fc96eb8f7c9 [ 589.471437][T14936] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 589.471452][T14936] RSP: 002b:00007fc96cdf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000048 [ 589.471467][T14936] RAX: ffffffffffffffda RBX: 00007fc96ede5fa0 RCX: 00007fc96eb8f7c9 [ 589.471478][T14936] RDX: 000000000000556d RSI: 000000000000040b RDI: 0000000000000004 [ 589.471487][T14936] RBP: 00007fc96ec13f91 R08: 0000000000000000 R09: 0000000000000000 [ 589.471497][T14936] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 589.471506][T14936] R13: 00007fc96ede6038 R14: 00007fc96ede5fa0 R15: 00007ffec7ef0878 [ 589.471529][T14936] [ 591.519583][T14948] FAULT_INJECTION: forcing a failure. [ 591.519583][T14948] name failslab, interval 1, probability 0, space 0, times 0 [ 591.607949][T14948] CPU: 0 UID: 0 PID: 14948 Comm: syz.9.1686 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 591.607989][T14948] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 591.607999][T14948] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 591.608009][T14948] Call Trace: [ 591.608015][T14948] [ 591.608022][T14948] dump_stack_lvl+0x16c/0x1f0 [ 591.608053][T14948] should_fail_ex+0x512/0x640 [ 591.608078][T14948] ? fs_reclaim_acquire+0xae/0x150 [ 591.608106][T14948] should_failslab+0xc2/0x120 [ 591.608131][T14948] kmem_cache_alloc_noprof+0x83/0x770 [ 591.608159][T14948] ? __pfx_map_id_range_down+0x10/0x10 [ 591.608182][T14948] ? security_inode_alloc+0x3b/0x2b0 [ 591.608207][T14948] ? security_inode_alloc+0x3b/0x2b0 [ 591.608228][T14948] security_inode_alloc+0x3b/0x2b0 [ 591.608250][T14948] inode_init_always_gfp+0xced/0x1040 [ 591.608279][T14948] alloc_inode+0x86/0x240 [ 591.608297][T14948] sock_alloc+0x40/0x280 [ 591.608323][T14948] __sock_create+0xc2/0x8a0 [ 591.608343][T14948] __sys_socket+0x14d/0x260 [ 591.608360][T14948] ? __pfx___sys_socket+0x10/0x10 [ 591.608376][T14948] ? xfd_validate_state+0x61/0x180 [ 591.608391][T14948] ? __pfx___do_sys_close_range+0x10/0x10 [ 591.608421][T14948] __x64_sys_socket+0x72/0xb0 [ 591.608437][T14948] ? lockdep_hardirqs_on+0x7c/0x110 [ 591.608463][T14948] do_syscall_64+0xcd/0xf80 [ 591.608491][T14948] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 591.608508][T14948] RIP: 0033:0x7fbc9fb8f7c9 [ 591.608523][T14948] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 591.608540][T14948] RSP: 002b:00007fbca09a9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 591.608557][T14948] RAX: ffffffffffffffda RBX: 00007fbc9fde5fa0 RCX: 00007fbc9fb8f7c9 [ 591.608568][T14948] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 591.608578][T14948] RBP: 00007fbc9fc13f91 R08: 0000000000000000 R09: 0000000000000000 [ 591.608588][T14948] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 591.608597][T14948] R13: 00007fbc9fde6038 R14: 00007fbc9fde5fa0 R15: 00007ffd8cccb3e8 [ 591.608619][T14948] [ 591.608640][T14948] net_ratelimit: 36 callbacks suppressed [ 591.608649][T14948] socket: no more sockets [ 592.796490][T14986] FAULT_INJECTION: forcing a failure. [ 592.796490][T14986] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 592.903012][T14986] CPU: 0 UID: 0 PID: 14986 Comm: syz.1.1692 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 592.903052][T14986] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 592.903062][T14986] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 592.903072][T14986] Call Trace: [ 592.903078][T14986] [ 592.903085][T14986] dump_stack_lvl+0x16c/0x1f0 [ 592.903123][T14986] should_fail_ex+0x512/0x640 [ 592.903164][T14986] should_fail_alloc_page+0xe7/0x130 [ 592.903193][T14986] prepare_alloc_pages+0x401/0x670 [ 592.903222][T14986] __alloc_frozen_pages_noprof+0x18b/0x2430 [ 592.903248][T14986] ? __lock_acquire+0x436/0x2890 [ 592.903269][T14986] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 592.903302][T14986] ? is_bpf_text_address+0x8a/0x1a0 [ 592.903324][T14986] ? bpf_ksym_find+0x124/0x1c0 [ 592.903341][T14986] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 592.903368][T14986] ? is_bpf_text_address+0x94/0x1a0 [ 592.903388][T14986] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 592.903415][T14986] ? policy_nodemask+0xea/0x4e0 [ 592.903441][T14986] alloc_pages_mpol+0x1fb/0x550 [ 592.903466][T14986] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 592.903496][T14986] folio_alloc_mpol_noprof+0x36/0x2f0 [ 592.903514][T14986] shmem_alloc_folio+0x135/0x160 [ 592.903541][T14986] shmem_alloc_and_add_folio+0x494/0xc20 [ 592.903563][T14986] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 592.903583][T14986] ? shmem_allowable_huge_orders+0xd4/0x3f0 [ 592.903606][T14986] shmem_get_folio_gfp+0x67f/0x1610 [ 592.903629][T14986] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 592.903653][T14986] shmem_fault+0x1fe/0xa00 [ 592.903672][T14986] ? __pfx_shmem_fault+0x10/0x10 [ 592.903689][T14986] ? trace_kmem_cache_alloc+0x28/0xb0 [ 592.903714][T14986] ? ptlock_alloc+0x1f/0x70 [ 592.903732][T14986] ? lockdep_init_map_type+0x5c/0x270 [ 592.903749][T14986] ? __raw_spin_lock_init+0x3a/0x110 [ 592.903772][T14986] __do_fault+0x10d/0x490 [ 592.903793][T14986] do_fault+0x302/0x1ad0 [ 592.903816][T14986] ? __pfx_filemap_map_pages+0x10/0x10 [ 592.903835][T14986] ? __pmd_alloc+0x6aa/0x9c0 [ 592.903861][T14986] __handle_mm_fault+0x1919/0x2bb0 [ 592.903884][T14986] ? __pfx___handle_mm_fault+0x10/0x10 [ 592.903913][T14986] ? find_vma+0xbf/0x140 [ 592.903934][T14986] ? __pfx_find_vma+0x10/0x10 [ 592.903958][T14986] handle_mm_fault+0x3fe/0xad0 [ 592.903979][T14986] do_user_addr_fault+0x7a6/0x1370 [ 592.904002][T14986] ? rcu_is_watching+0x12/0xc0 [ 592.904028][T14986] exc_page_fault+0x64/0xc0 [ 592.904060][T14986] asm_exc_page_fault+0x26/0x30 [ 592.904076][T14986] RIP: 0010:rep_movs_alternative+0x33/0x90 [ 592.904097][T14986] Code: 73 25 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 cc cc cc cc 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 8b 06 <48> 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb [ 592.904114][T14986] RSP: 0018:ffffc9000bcefd90 EFLAGS: 00050246 [ 592.904135][T14986] RAX: 0000000000000000 RBX: 0000000000000008 RCX: 0000000000000008 [ 592.904145][T14986] RDX: fffff5200179dfc5 RSI: ffffc9000bcefe20 RDI: 000000000000556d [ 592.904155][T14986] RBP: 000000000000556d R08: 0000000000000000 R09: fffff5200179dfc4 [ 592.904165][T14986] R10: ffffc9000bcefe27 R11: ffff8880281366b0 R12: ffffc9000bcefe20 [ 592.904176][T14986] R13: 0000000000005575 R14: 00007ffffffff000 R15: 0000000000000000 [ 592.904198][T14986] _copy_to_user+0xbb/0xd0 [ 592.904222][T14986] do_fcntl+0x13f4/0x1660 [ 592.904241][T14986] ? __pfx_do_fcntl+0x10/0x10 [ 592.904265][T14986] ? tomoyo_file_fcntl+0x6c/0xc0 [ 592.904288][T14986] __x64_sys_fcntl+0x163/0x200 [ 592.904308][T14986] do_syscall_64+0xcd/0xf80 [ 592.904335][T14986] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 592.904352][T14986] RIP: 0033:0x7fc96eb8f7c9 [ 592.904366][T14986] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 592.904382][T14986] RSP: 002b:00007fc96cdf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000048 [ 592.904397][T14986] RAX: ffffffffffffffda RBX: 00007fc96ede5fa0 RCX: 00007fc96eb8f7c9 [ 592.904407][T14986] RDX: 000000000000556d RSI: 000000000000040b RDI: 0000000000000004 [ 592.904416][T14986] RBP: 00007fc96ec13f91 R08: 0000000000000000 R09: 0000000000000000 [ 592.904426][T14986] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 592.904435][T14986] R13: 00007fc96ede6038 R14: 00007fc96ede5fa0 R15: 00007ffec7ef0878 [ 592.904457][T14986] [ 593.610599][T14953] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1686'. [ 594.155892][T11422] NFSD: Failed to start, no listeners configured. [ 595.195086][T15034] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 595.694518][T15047] FAULT_INJECTION: forcing a failure. [ 595.694518][T15047] name failslab, interval 1, probability 0, space 0, times 0 [ 595.759336][T15047] CPU: 0 UID: 0 PID: 15047 Comm: syz.1.1703 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 595.759382][T15047] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 595.759391][T15047] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 595.759401][T15047] Call Trace: [ 595.759407][T15047] [ 595.759414][T15047] dump_stack_lvl+0x16c/0x1f0 [ 595.759445][T15047] should_fail_ex+0x512/0x640 [ 595.759469][T15047] ? kmem_cache_alloc_noprof+0x62/0x770 [ 595.759491][T15047] should_failslab+0xc2/0x120 [ 595.759516][T15047] kmem_cache_alloc_noprof+0x83/0x770 [ 595.759535][T15047] ? ptlock_alloc+0x1f/0x70 [ 595.759557][T15047] ? ptlock_alloc+0x1f/0x70 [ 595.759572][T15047] ptlock_alloc+0x1f/0x70 [ 595.759588][T15047] pte_alloc_one+0x84/0x3d0 [ 595.759612][T15047] __do_fault+0x320/0x490 [ 595.759634][T15047] do_fault+0x302/0x1ad0 [ 595.759660][T15047] ? __pfx_filemap_map_pages+0x10/0x10 [ 595.759679][T15047] ? __pmd_alloc+0x6aa/0x9c0 [ 595.759705][T15047] __handle_mm_fault+0x1919/0x2bb0 [ 595.759728][T15047] ? __pfx___handle_mm_fault+0x10/0x10 [ 595.759757][T15047] ? find_vma+0xbf/0x140 [ 595.759778][T15047] ? __pfx_find_vma+0x10/0x10 [ 595.759803][T15047] handle_mm_fault+0x3fe/0xad0 [ 595.759823][T15047] do_user_addr_fault+0x7a6/0x1370 [ 595.759847][T15047] ? rcu_is_watching+0x12/0xc0 [ 595.759873][T15047] exc_page_fault+0x64/0xc0 [ 595.759899][T15047] asm_exc_page_fault+0x26/0x30 [ 595.759915][T15047] RIP: 0010:rep_movs_alternative+0x33/0x90 [ 595.759936][T15047] Code: 73 25 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 cc cc cc cc 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 8b 06 <48> 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb [ 595.759953][T15047] RSP: 0018:ffffc9000be97d90 EFLAGS: 00050246 [ 595.759968][T15047] RAX: 0000000000000000 RBX: 0000000000000008 RCX: 0000000000000008 [ 595.759978][T15047] RDX: fffff520017d2fc5 RSI: ffffc9000be97e20 RDI: 000000000000556d [ 595.759988][T15047] RBP: 000000000000556d R08: 0000000000000000 R09: fffff520017d2fc4 [ 595.759998][T15047] R10: ffffc9000be97e27 R11: ffff888027cba9b0 R12: ffffc9000be97e20 [ 595.760008][T15047] R13: 0000000000005575 R14: 00007ffffffff000 R15: 0000000000000000 [ 595.760030][T15047] _copy_to_user+0xbb/0xd0 [ 595.760055][T15047] do_fcntl+0x13f4/0x1660 [ 595.760073][T15047] ? __pfx_do_fcntl+0x10/0x10 [ 595.760097][T15047] ? tomoyo_file_fcntl+0x6c/0xc0 [ 595.760119][T15047] __x64_sys_fcntl+0x163/0x200 [ 595.760139][T15047] do_syscall_64+0xcd/0xf80 [ 595.760166][T15047] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 595.760183][T15047] RIP: 0033:0x7fc96eb8f7c9 [ 595.760196][T15047] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 595.760213][T15047] RSP: 002b:00007fc96cdf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000048 [ 595.760228][T15047] RAX: ffffffffffffffda RBX: 00007fc96ede5fa0 RCX: 00007fc96eb8f7c9 [ 595.760240][T15047] RDX: 000000000000556d RSI: 000000000000040b RDI: 0000000000000004 [ 595.760250][T15047] RBP: 00007fc96ec13f91 R08: 0000000000000000 R09: 0000000000000000 [ 595.760260][T15047] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 595.760278][T15047] R13: 00007fc96ede6038 R14: 00007fc96ede5fa0 R15: 00007ffec7ef0878 [ 595.760301][T15047] [ 598.978537][T15099] synth uevent: /bus/hid/drivers/zeroplus: unknown uevent action string [ 599.724632][T15111] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [0] [ 599.837139][T15113] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 599.845431][T15111] Setting dangerous option i915.mitigations - tainting kernel [ 599.885127][T15113] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 599.906548][T15111] Bad "i915.mitigations=!hóì@ÛSÌ", 'hóì@ÛSÌ' is unknown [ 600.276297][T15120] bond0: option lp_interval: invalid value () [ 600.282759][T15120] bond0: option lp_interval: allowed values 1 - 2147483647 [ 600.807329][T15136] device-mapper: ioctl: Invalid ioctl structure: uuid ýÿÿÿÿÿÿÿ, name , dev 700010007 [ 603.445845][T15188] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input31 [ 603.598097][T15189] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input32 [ 604.018894][T15196] FAULT_INJECTION: forcing a failure. [ 604.018894][T15196] name failslab, interval 1, probability 0, space 0, times 0 [ 604.069536][T15196] CPU: 0 UID: 0 PID: 15196 Comm: syz.2.1726 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 604.069576][T15196] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 604.069586][T15196] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 604.069596][T15196] Call Trace: [ 604.069602][T15196] [ 604.069622][T15196] dump_stack_lvl+0x16c/0x1f0 [ 604.069653][T15196] should_fail_ex+0x512/0x640 [ 604.069678][T15196] ? __kmalloc_noprof+0xca/0x910 [ 604.069698][T15196] should_failslab+0xc2/0x120 [ 604.069725][T15196] __kmalloc_noprof+0xeb/0x910 [ 604.069743][T15196] ? __register_sysctl_table+0xb3/0x1900 [ 604.069770][T15196] ? __register_sysctl_table+0xb3/0x1900 [ 604.069792][T15196] __register_sysctl_table+0xb3/0x1900 [ 604.069818][T15196] ? is_module_address+0x5f/0xf0 [ 604.069843][T15196] ? __pfx___register_sysctl_table+0x10/0x10 [ 604.069865][T15196] ? is_module_address+0x69/0xf0 [ 604.069891][T15196] ? register_net_sysctl_sz+0x222/0x3d0 [ 604.069910][T15196] ? __asan_memcpy+0x3c/0x60 [ 604.069931][T15196] sctp_sysctl_net_register+0x15d/0x200 [ 604.069960][T15196] ? __pfx_sctp_defaults_init+0x10/0x10 [ 604.069986][T15196] sctp_defaults_init+0x6d2/0xd90 [ 604.070013][T15196] ? __pfx_sctp_defaults_init+0x10/0x10 [ 604.070038][T15196] ops_init+0x1e2/0x5f0 [ 604.070065][T15196] setup_net+0x11d/0x3a0 [ 604.070089][T15196] ? __pfx_setup_net+0x10/0x10 [ 604.070111][T15196] ? lockdep_init_map_type+0x5c/0x270 [ 604.070128][T15196] ? mutex_init_lockep+0x110/0x150 [ 604.070152][T15196] copy_net_ns+0x351/0x7c0 [ 604.070180][T15196] create_new_namespaces+0x3ea/0xab0 [ 604.070208][T15196] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 604.070233][T15196] ksys_unshare+0x45b/0xa40 [ 604.070259][T15196] ? __pfx_ksys_unshare+0x10/0x10 [ 604.070286][T15196] ? xfd_validate_state+0x61/0x180 [ 604.070315][T15196] __x64_sys_unshare+0x31/0x40 [ 604.070342][T15196] do_syscall_64+0xcd/0xf80 [ 604.070439][T15196] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 604.070462][T15196] RIP: 0033:0x7f7a79f8f7c9 [ 604.070478][T15196] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 604.070496][T15196] RSP: 002b:00007f7a7ad63038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 604.070513][T15196] RAX: ffffffffffffffda RBX: 00007f7a7a1e5fa0 RCX: 00007f7a79f8f7c9 [ 604.070524][T15196] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 604.070534][T15196] RBP: 00007f7a7a013f91 R08: 0000000000000000 R09: 0000000000000000 [ 604.070545][T15196] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 604.070555][T15196] R13: 00007f7a7a1e6038 R14: 00007f7a7a1e5fa0 R15: 00007ffe2a308fa8 [ 604.070577][T15196] [ 604.777023][T15204] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1730'. [ 604.797981][T15204] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 607.276273][T15249] device-mapper: ioctl: Invalid ioctl structure: uuid ýÿÿÿÿÿÿÿ, name , dev 700010007 [ 607.900860][ T7134] Bluetooth: hci0: unexpected subevent 0x03 length: 253 > 9 [ 609.247405][T15276] FAULT_INJECTION: forcing a failure. [ 609.247405][T15276] name failslab, interval 1, probability 0, space 0, times 0 [ 609.325399][T15276] CPU: 0 UID: 0 PID: 15276 Comm: syz.9.1743 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 609.325439][T15276] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 609.325449][T15276] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 609.325459][T15276] Call Trace: [ 609.325466][T15276] [ 609.325473][T15276] dump_stack_lvl+0x16c/0x1f0 [ 609.325503][T15276] should_fail_ex+0x512/0x640 [ 609.325527][T15276] ? __kmalloc_cache_noprof+0x5f/0x800 [ 609.325549][T15276] should_failslab+0xc2/0x120 [ 609.325575][T15276] __kmalloc_cache_noprof+0x80/0x800 [ 609.325594][T15276] ? snd_seq_oss_open+0x55/0xa20 [ 609.325614][T15276] ? snd_seq_oss_open+0x55/0xa20 [ 609.325628][T15276] snd_seq_oss_open+0x55/0xa20 [ 609.325648][T15276] odev_open+0x79/0xc0 [ 609.325672][T15276] ? __pfx_odev_open+0x10/0x10 [ 609.325696][T15276] soundcore_open+0x40c/0x580 [ 609.325733][T15276] ? __pfx_soundcore_open+0x10/0x10 [ 609.325760][T15276] chrdev_open+0x234/0x6a0 [ 609.325785][T15276] ? __pfx_apparmor_file_open+0x10/0x10 [ 609.325807][T15276] ? __pfx_chrdev_open+0x10/0x10 [ 609.325833][T15276] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 609.325865][T15276] do_dentry_open+0x748/0x1590 [ 609.325896][T15276] ? __pfx_chrdev_open+0x10/0x10 [ 609.325926][T15276] vfs_open+0x82/0x3f0 [ 609.325946][T15276] path_openat+0x2078/0x3140 [ 609.325977][T15276] ? __pfx_path_openat+0x10/0x10 [ 609.326009][T15276] do_filp_open+0x20b/0x470 [ 609.326034][T15276] ? __pfx_do_filp_open+0x10/0x10 [ 609.326074][T15276] ? alloc_fd+0x471/0x7d0 [ 609.326105][T15276] do_sys_openat2+0x11f/0x280 [ 609.326123][T15276] ? __pfx_do_sys_openat2+0x10/0x10 [ 609.326139][T15276] ? __pfx___might_resched+0x10/0x10 [ 609.326163][T15276] ? blkcg_maybe_throttle_current+0x650/0xf30 [ 609.326195][T15276] __x64_sys_openat+0x174/0x210 [ 609.326213][T15276] ? __pfx___x64_sys_openat+0x10/0x10 [ 609.326240][T15276] do_syscall_64+0xcd/0xf80 [ 609.326268][T15276] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 609.326286][T15276] RIP: 0033:0x7fbc9fb8f7c9 [ 609.326300][T15276] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 609.326317][T15276] RSP: 002b:00007fbca09a9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 609.326334][T15276] RAX: ffffffffffffffda RBX: 00007fbc9fde5fa0 RCX: 00007fbc9fb8f7c9 [ 609.326345][T15276] RDX: 0000000000000001 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 609.326355][T15276] RBP: 00007fbc9fc13f91 R08: 0000000000000000 R09: 0000000000000000 [ 609.326364][T15276] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 609.326374][T15276] R13: 00007fbc9fde6038 R14: 00007fbc9fde5fa0 R15: 00007ffd8cccb3e8 [ 609.326396][T15276] [ 610.163631][T15294] FAULT_INJECTION: forcing a failure. [ 610.163631][T15294] name failslab, interval 1, probability 0, space 0, times 0 [ 610.205995][T15294] CPU: 0 UID: 0 PID: 15294 Comm: syz.2.1748 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 610.206035][T15294] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 610.206046][T15294] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 610.206056][T15294] Call Trace: [ 610.206062][T15294] [ 610.206069][T15294] dump_stack_lvl+0x16c/0x1f0 [ 610.206099][T15294] should_fail_ex+0x512/0x640 [ 610.206134][T15294] ? kmem_cache_alloc_noprof+0x62/0x770 [ 610.206158][T15294] should_failslab+0xc2/0x120 [ 610.206184][T15294] kmem_cache_alloc_noprof+0x83/0x770 [ 610.206204][T15294] ? vm_area_alloc+0x1f/0x160 [ 610.206225][T15294] ? vm_area_alloc+0x1f/0x160 [ 610.206240][T15294] vm_area_alloc+0x1f/0x160 [ 610.206256][T15294] __mmap_region+0x107a/0x2a00 [ 610.206277][T15294] ? __lock_acquire+0x436/0x2890 [ 610.206294][T15294] ? __pfx___mmap_region+0x10/0x10 [ 610.206319][T15294] ? lock_acquire+0x179/0x330 [ 610.206343][T15294] ? finish_task_switch.isra.0+0x207/0xbd0 [ 610.206407][T15294] ? rcu_is_watching+0x12/0xc0 [ 610.206436][T15294] mmap_region+0x1ab/0x3f0 [ 610.206455][T15294] ? __get_unmapped_area+0x267/0x3f0 [ 610.206481][T15294] do_mmap+0xa3e/0x1210 [ 610.206509][T15294] ? __pfx_do_mmap+0x10/0x10 [ 610.206533][T15294] ? __pfx_down_write_killable+0x10/0x10 [ 610.206556][T15294] vm_mmap_pgoff+0x29e/0x470 [ 610.206583][T15294] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 610.206606][T15294] ? do_sigaltstack.constprop.0+0x547/0x800 [ 610.206627][T15294] ? __x64_sys_futex+0x1e0/0x4c0 [ 610.206645][T15294] ? __x64_sys_futex+0x1e9/0x4c0 [ 610.206667][T15294] ksys_mmap_pgoff+0x7d/0x5c0 [ 610.206689][T15294] ? xfd_validate_state+0x61/0x180 [ 610.206708][T15294] __x64_sys_mmap+0x125/0x190 [ 610.206728][T15294] do_syscall_64+0xcd/0xf80 [ 610.206755][T15294] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 610.206773][T15294] RIP: 0033:0x7f7a79f8f7c9 [ 610.206787][T15294] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 610.206804][T15294] RSP: 002b:00007f7a7ad42038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 610.206821][T15294] RAX: ffffffffffffffda RBX: 00007f7a7a1e6090 RCX: 00007f7a79f8f7c9 [ 610.206832][T15294] RDX: 0000000000000003 RSI: 0000000002020009 RDI: 0000000000000000 [ 610.206842][T15294] RBP: 00007f7a7a013f91 R08: fffffffffffffffa R09: 0000000000008000 [ 610.206852][T15294] R10: 0000000000000eb1 R11: 0000000000000246 R12: 0000000000000000 [ 610.206862][T15294] R13: 00007f7a7a1e6128 R14: 00007f7a7a1e6090 R15: 00007ffe2a308fa8 [ 610.206891][T15294] [ 610.754087][ T8322] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 610.765005][ T8322] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 610.773867][ T8322] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 610.782116][ T8322] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 610.792975][ T8322] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 610.942450][T15300] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !PjE ùrõ£Ò„yù*›"¤l-ý¤ôy–ú„ [ 611.672886][T15297] chnl_net:caif_netlink_parms(): no params data found [ 612.208082][T15297] bridge0: port 1(bridge_slave_0) entered blocking state [ 612.247446][T15297] bridge0: port 1(bridge_slave_0) entered disabled state [ 612.313109][T15297] bridge_slave_0: entered allmulticast mode [ 612.408041][T15297] bridge_slave_0: entered promiscuous mode [ 612.546562][T15297] bridge0: port 2(bridge_slave_1) entered blocking state [ 612.586005][T15297] bridge0: port 2(bridge_slave_1) entered disabled state [ 612.688267][T15297] bridge_slave_1: entered allmulticast mode [ 612.715603][T15297] bridge_slave_1: entered promiscuous mode [ 612.849412][ T8322] Bluetooth: hci9: command tx timeout [ 612.997529][T15297] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 613.053106][T15297] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 613.258529][T15297] team0: Port device team_slave_0 added [ 613.295633][T15297] team0: Port device team_slave_1 added [ 613.398834][T15297] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 613.457635][T15297] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 613.566900][T15297] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 613.632702][T15297] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 613.666307][T15297] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 613.766996][T15297] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 614.011610][T15297] hsr_slave_0: entered promiscuous mode [ 614.036266][T15297] hsr_slave_1: entered promiscuous mode [ 614.062341][T15297] debugfs: 'hsr0' already exists in 'hsr' [ 614.104033][T15297] Cannot create hsr debugfs directory [ 614.608042][T15360] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 614.918481][ T8322] Bluetooth: hci9: command tx timeout [ 615.086216][T15373] netlink: 138 bytes leftover after parsing attributes in process `syz.2.1760'. [ 615.341839][T15377] netlink: 178 bytes leftover after parsing attributes in process `syz.2.1761'. [ 615.449603][T15297] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 615.503692][T15297] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 615.546519][T15297] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 615.586461][T15297] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 615.850609][T15297] 8021q: adding VLAN 0 to HW filter on device bond0 [ 615.919943][T15297] 8021q: adding VLAN 0 to HW filter on device team0 [ 615.987255][ T6772] bridge0: port 1(bridge_slave_0) entered blocking state [ 615.995299][ T6772] bridge0: port 1(bridge_slave_0) entered forwarding state [ 616.053095][ T6772] bridge0: port 2(bridge_slave_1) entered blocking state [ 616.060652][ T6772] bridge0: port 2(bridge_slave_1) entered forwarding state [ 616.700212][T15297] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 616.860918][T15297] veth0_vlan: entered promiscuous mode [ 616.921946][T15297] veth1_vlan: entered promiscuous mode [ 616.988228][ T8322] Bluetooth: hci9: command tx timeout [ 617.074010][T15297] veth0_macvtap: entered promiscuous mode [ 617.101226][T15297] veth1_macvtap: entered promiscuous mode [ 617.145724][T15297] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 617.182677][T15297] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 617.219397][ T7820] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 617.249870][ T7820] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 617.292045][ T7820] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 617.353950][ T7820] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 617.635754][ T6861] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 617.643610][ T6861] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 617.861930][T15060] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 617.903375][T15060] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 618.779985][ T7134] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 618.790532][ T7134] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 618.801356][ T7134] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 618.810846][ T7134] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 618.821914][ T7134] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 619.057149][ T7134] Bluetooth: hci9: command tx timeout [ 619.197939][T15456] FAULT_INJECTION: forcing a failure. [ 619.197939][T15456] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 619.264186][T15456] CPU: 0 UID: 0 PID: 15456 Comm: syz.0.1766 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 619.264226][T15456] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 619.264235][T15456] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 619.264246][T15456] Call Trace: [ 619.264251][T15456] [ 619.264258][T15456] dump_stack_lvl+0x16c/0x1f0 [ 619.264290][T15456] should_fail_ex+0x512/0x640 [ 619.264317][T15456] _copy_from_user+0x2e/0xd0 [ 619.264341][T15456] get_timespec64+0x8b/0x1b0 [ 619.264358][T15456] ? __pfx_get_timespec64+0x10/0x10 [ 619.264375][T15456] ? ktime_get+0x200/0x310 [ 619.264396][T15456] __x64_sys_futex+0x288/0x4c0 [ 619.264419][T15456] ? __pfx___x64_sys_futex+0x10/0x10 [ 619.264439][T15456] ? xfd_validate_state+0x61/0x180 [ 619.264462][T15456] do_syscall_64+0xcd/0xf80 [ 619.264491][T15456] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 619.264509][T15456] RIP: 0033:0x7f031bf8f7c9 [ 619.264523][T15456] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 619.264541][T15456] RSP: 002b:00007ffea5c430a8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 619.264558][T15456] RAX: ffffffffffffffda RBX: 0000000000097311 RCX: 00007f031bf8f7c9 [ 619.264569][T15456] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f031c1e5fac [ 619.264580][T15456] RBP: 0000000000000032 R08: 00007f031cddc000 R09: 00000017a5c4339f [ 619.264590][T15456] R10: 00007ffea5c431a0 R11: 0000000000000246 R12: 00007f031c1e5fac [ 619.264601][T15456] R13: 00007ffea5c431a0 R14: 0000000000097343 R15: 00007ffea5c431c0 [ 619.264622][T15456] [ 619.689200][T15452] chnl_net:caif_netlink_parms(): no params data found [ 619.780342][T15465] zswap: compressor not available [ 619.979520][T15452] bridge0: port 1(bridge_slave_0) entered blocking state [ 619.979622][T15452] bridge0: port 1(bridge_slave_0) entered disabled state [ 619.979729][T15452] bridge_slave_0: entered allmulticast mode [ 619.980881][T15452] bridge_slave_0: entered promiscuous mode [ 620.044045][T15452] bridge0: port 2(bridge_slave_1) entered blocking state [ 620.044170][T15452] bridge0: port 2(bridge_slave_1) entered disabled state [ 620.044324][T15452] bridge_slave_1: entered allmulticast mode [ 620.045824][T15452] bridge_slave_1: entered promiscuous mode [ 620.221425][T15452] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 620.238417][T15452] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 620.338899][T15452] team0: Port device team_slave_0 added [ 620.346025][T15452] team0: Port device team_slave_1 added [ 620.423452][T15452] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 620.423470][T15452] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 620.423492][T15452] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 620.437253][T15452] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 620.437269][T15452] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 620.437292][T15452] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 620.564566][T15452] hsr_slave_0: entered promiscuous mode [ 620.567191][T15452] hsr_slave_1: entered promiscuous mode [ 620.567752][T15452] debugfs: 'hsr0' already exists in 'hsr' [ 620.567769][T15452] Cannot create hsr debugfs directory [ 620.887647][ T7134] Bluetooth: hci10: command tx timeout [ 621.189158][T15452] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 621.392113][T15452] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 621.519009][T15452] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 621.635562][T15452] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 622.138356][T15452] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 622.204209][T15452] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 622.284025][T15452] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 622.323937][T15452] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 622.956975][ T7134] Bluetooth: hci10: command tx timeout [ 623.152545][T15452] 8021q: adding VLAN 0 to HW filter on device bond0 [ 623.308507][T15452] 8021q: adding VLAN 0 to HW filter on device team0 [ 623.371304][ T6772] bridge0: port 1(bridge_slave_0) entered blocking state [ 623.378563][ T6772] bridge0: port 1(bridge_slave_0) entered forwarding state [ 623.449249][ T6772] bridge0: port 2(bridge_slave_1) entered blocking state [ 623.456527][ T6772] bridge0: port 2(bridge_slave_1) entered forwarding state [ 623.809257][T15560] FAULT_INJECTION: forcing a failure. [ 623.809257][T15560] name fail_futex, interval 1, probability 0, space 0, times 0 [ 623.874712][T15560] CPU: 0 UID: 0 PID: 15560 Comm: syz.2.1773 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 623.874751][T15560] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 623.874760][T15560] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 623.874769][T15560] Call Trace: [ 623.874776][T15560] [ 623.874783][T15560] dump_stack_lvl+0x16c/0x1f0 [ 623.874813][T15560] should_fail_ex+0x512/0x640 [ 623.874836][T15560] ? fput+0x70/0xf0 [ 623.874853][T15560] get_futex_key+0x1d0/0x15f0 [ 623.874876][T15560] ? __pfx_get_futex_key+0x10/0x10 [ 623.874895][T15560] ? __handle_mm_fault+0x5a8/0x2bb0 [ 623.874917][T15560] futex_wait_setup+0x9d/0x570 [ 623.874947][T15560] __futex_wait+0x193/0x2f0 [ 623.874971][T15560] ? __pfx___futex_wait+0x10/0x10 [ 623.874992][T15560] ? find_held_lock+0x2b/0x80 [ 623.875018][T15560] ? __pfx_futex_wake_mark+0x10/0x10 [ 623.875044][T15560] ? futex_hash+0x2c5/0x380 [ 623.875064][T15560] ? futex_private_hash_put+0x160/0x1b0 [ 623.875083][T15560] futex_wait+0xe8/0x380 [ 623.875106][T15560] ? __pfx_futex_wait+0x10/0x10 [ 623.875140][T15560] do_futex+0x229/0x350 [ 623.875159][T15560] ? __pfx_do_futex+0x10/0x10 [ 623.875178][T15560] ? do_fcntl+0x268/0x1660 [ 623.875198][T15560] __x64_sys_futex+0x1e0/0x4c0 [ 623.875220][T15560] ? __pfx___x64_sys_futex+0x10/0x10 [ 623.875240][T15560] ? tomoyo_file_fcntl+0x6c/0xc0 [ 623.875260][T15560] ? fput+0x70/0xf0 [ 623.875278][T15560] do_syscall_64+0xcd/0xf80 [ 623.875306][T15560] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 623.875323][T15560] RIP: 0033:0x7f7a79f8f7c9 [ 623.875337][T15560] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 623.875354][T15560] RSP: 002b:00007f7a7ad630e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 623.875370][T15560] RAX: ffffffffffffffda RBX: 00007f7a7a1e5fa8 RCX: 00007f7a79f8f7c9 [ 623.875381][T15560] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f7a7a1e5fa8 [ 623.875391][T15560] RBP: 00007f7a7a1e5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 623.875401][T15560] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 623.875410][T15560] R13: 00007f7a7a1e6038 R14: 00007ffe2a308ec0 R15: 00007ffe2a308fa8 [ 623.875431][T15560] [ 624.531342][T15452] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 625.030399][ T7134] Bluetooth: hci10: command tx timeout [ 625.220460][T15586] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 625.474130][T15586] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 625.482540][T15586] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 625.719843][T15452] veth0_vlan: entered promiscuous mode [ 625.776255][T15452] veth1_vlan: entered promiscuous mode [ 625.788716][T15586] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 625.892690][T15452] veth0_macvtap: entered promiscuous mode [ 625.928034][T15452] veth1_macvtap: entered promiscuous mode [ 626.000253][T15452] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 626.047600][T15452] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 626.119358][ T6786] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 626.161061][ T6786] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 626.203936][ T6786] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 626.235313][ T6786] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 626.451184][ T7266] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 626.508419][ T7266] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 626.603703][T15616] kernel read not supported for file /set_event_pid (pid: 15616 comm: syz.0.1779) [ 626.626806][ T6792] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 626.657395][ T6792] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 626.713570][ T30] audit: type=1800 audit(4179.642:17): pid=15616 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1779" name="set_event_pid" dev="tracefs" ino=1055 res=0 errno=0 [ 626.942553][T15625] netlink: 206 bytes leftover after parsing attributes in process `syz.0.1780'. [ 626.999500][T15625] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1780'. [ 627.096242][ T7134] Bluetooth: hci10: command tx timeout [ 627.311644][ T30] audit: type=1800 audit(4180.265:18): pid=15637 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1781" name="trace_pipe" dev="tracefs" ino=1181 res=0 errno=0 [ 628.851532][ T8322] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 628.866921][ T8322] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 628.875552][ T8322] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 628.884380][ T8322] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 628.891979][ T8322] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 629.463675][T15680] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 629.521990][T15679] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 629.823609][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 629.831770][T15688] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 629.848293][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 629.928159][T15690] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 630.054611][T15673] chnl_net:caif_netlink_parms(): no params data found [ 630.074074][T15690] netlink: 'syz.4.1789': attribute type 1 has an invalid length. [ 630.324148][T15673] bridge0: port 1(bridge_slave_0) entered blocking state [ 630.341863][T15673] bridge0: port 1(bridge_slave_0) entered disabled state [ 630.370673][T15673] bridge_slave_0: entered allmulticast mode [ 630.386958][T15673] bridge_slave_0: entered promiscuous mode [ 630.432322][T15673] bridge0: port 2(bridge_slave_1) entered blocking state [ 630.467249][T15673] bridge0: port 2(bridge_slave_1) entered disabled state [ 630.484412][T15673] bridge_slave_1: entered allmulticast mode [ 630.502247][T15673] bridge_slave_1: entered promiscuous mode [ 630.595081][T15673] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 630.684770][T15673] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 630.823451][T15673] team0: Port device team_slave_0 added [ 630.912662][T15673] team0: Port device team_slave_1 added [ 630.918970][ T8322] Bluetooth: hci11: command tx timeout [ 631.115305][T15710] FAULT_INJECTION: forcing a failure. [ 631.115305][T15710] name fail_futex, interval 1, probability 0, space 0, times 0 [ 631.165627][T15710] CPU: 0 UID: 0 PID: 15710 Comm: syz.4.1792 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 631.165669][T15710] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 631.165679][T15710] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 631.165689][T15710] Call Trace: [ 631.165695][T15710] [ 631.165702][T15710] dump_stack_lvl+0x16c/0x1f0 [ 631.165733][T15710] should_fail_ex+0x512/0x640 [ 631.165757][T15710] ? fput+0x70/0xf0 [ 631.165775][T15710] get_futex_key+0x1d0/0x15f0 [ 631.165805][T15710] ? __pfx_get_futex_key+0x10/0x10 [ 631.165824][T15710] ? __handle_mm_fault+0x5a8/0x2bb0 [ 631.165846][T15710] futex_wait_setup+0x9d/0x570 [ 631.165876][T15710] __futex_wait+0x193/0x2f0 [ 631.165901][T15710] ? __pfx___futex_wait+0x10/0x10 [ 631.165923][T15710] ? find_held_lock+0x2b/0x80 [ 631.165948][T15710] ? __pfx_futex_wake_mark+0x10/0x10 [ 631.165975][T15710] ? futex_hash+0x2c5/0x380 [ 631.165994][T15710] ? futex_private_hash_put+0x160/0x1b0 [ 631.166014][T15710] futex_wait+0xe8/0x380 [ 631.166036][T15710] ? __pfx_futex_wait+0x10/0x10 [ 631.166071][T15710] do_futex+0x229/0x350 [ 631.166090][T15710] ? __pfx_do_futex+0x10/0x10 [ 631.166109][T15710] ? do_fcntl+0x268/0x1660 [ 631.166129][T15710] __x64_sys_futex+0x1e0/0x4c0 [ 631.166151][T15710] ? __pfx___x64_sys_futex+0x10/0x10 [ 631.166170][T15710] ? tomoyo_file_fcntl+0x6c/0xc0 [ 631.166190][T15710] ? fput+0x70/0xf0 [ 631.166208][T15710] do_syscall_64+0xcd/0xf80 [ 631.166236][T15710] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 631.166253][T15710] RIP: 0033:0x7f605c78f7c9 [ 631.166268][T15710] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 631.166284][T15710] RSP: 002b:00007f605d5c00e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 631.166301][T15710] RAX: ffffffffffffffda RBX: 00007f605c9e5fa8 RCX: 00007f605c78f7c9 [ 631.166312][T15710] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f605c9e5fa8 [ 631.166321][T15710] RBP: 00007f605c9e5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 631.166331][T15710] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 631.166341][T15710] R13: 00007f605c9e6038 R14: 00007ffd5e4da9a0 R15: 00007ffd5e4daa88 [ 631.166362][T15710] [ 631.574662][T15673] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 631.593623][T15673] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 631.634159][T15673] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 631.652930][T15673] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 631.661408][T15673] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 631.710400][T15673] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 632.018366][T15673] hsr_slave_0: entered promiscuous mode [ 632.044435][T15673] hsr_slave_1: entered promiscuous mode [ 632.067877][T15673] debugfs: 'hsr0' already exists in 'hsr' [ 632.090258][T15673] Cannot create hsr debugfs directory [ 632.822990][T15673] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 632.866700][T15734] FAULT_INJECTION: forcing a failure. [ 632.866700][T15734] name failslab, interval 1, probability 0, space 0, times 0 [ 632.944827][T15734] CPU: 0 UID: 0 PID: 15734 Comm: syz.4.1799 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 632.944868][T15734] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 632.944877][T15734] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 632.944887][T15734] Call Trace: [ 632.944893][T15734] [ 632.944899][T15734] dump_stack_lvl+0x16c/0x1f0 [ 632.944931][T15734] should_fail_ex+0x512/0x640 [ 632.944956][T15734] ? fs_reclaim_acquire+0xae/0x150 [ 632.944985][T15734] should_failslab+0xc2/0x120 [ 632.945011][T15734] __kmalloc_noprof+0xeb/0x910 [ 632.945030][T15734] ? tomoyo_encode2+0x100/0x3e0 [ 632.945049][T15734] ? tomoyo_encode2+0x100/0x3e0 [ 632.945063][T15734] tomoyo_encode2+0x100/0x3e0 [ 632.945082][T15734] tomoyo_encode+0x29/0x50 [ 632.945096][T15734] tomoyo_realpath_from_path+0x18f/0x6e0 [ 632.945118][T15734] tomoyo_path_number_perm+0x245/0x580 [ 632.945142][T15734] ? tomoyo_path_number_perm+0x237/0x580 [ 632.945168][T15734] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 632.945194][T15734] ? find_held_lock+0x2b/0x80 [ 632.945236][T15734] ? find_held_lock+0x2b/0x80 [ 632.945257][T15734] ? hook_file_ioctl_common+0x144/0x410 [ 632.945287][T15734] ? __fget_files+0x20e/0x3c0 [ 632.945315][T15734] security_file_ioctl+0x9b/0x240 [ 632.945342][T15734] __x64_sys_ioctl+0xb7/0x210 [ 632.945364][T15734] do_syscall_64+0xcd/0xf80 [ 632.945393][T15734] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 632.945410][T15734] RIP: 0033:0x7f605c78f7c9 [ 632.945424][T15734] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 632.945442][T15734] RSP: 002b:00007f605d5c0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 632.945459][T15734] RAX: ffffffffffffffda RBX: 00007f605c9e5fa0 RCX: 00007f605c78f7c9 [ 632.945470][T15734] RDX: 00002000000001c0 RSI: ffbffffffffffd0e RDI: 0000000000000004 [ 632.945480][T15734] RBP: 00007f605d5c0090 R08: 0000000000000000 R09: 0000000000000000 [ 632.945490][T15734] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 632.945500][T15734] R13: 00007f605c9e6038 R14: 00007f605c9e5fa0 R15: 00007ffd5e4daa88 [ 632.945530][T15734] [ 632.945545][T15734] ERROR: Out of memory at tomoyo_realpath_from_path. [ 633.208333][ T8322] Bluetooth: hci11: command tx timeout [ 633.338377][T15673] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 633.427995][T15673] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 633.444388][T15734] device-mapper: ioctl: Invalid ioctl structure: uuid ýÿÿÿÿÿÿÿ, name , dev 700010007 [ 633.545900][T15673] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 633.904672][T15673] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 633.951835][T15673] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 633.990946][T15673] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 634.039736][T15673] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 634.205847][T15745] netlink: 'syz.4.1802': attribute type 5 has an invalid length. [ 634.238547][T15745] netlink: 4158 bytes leftover after parsing attributes in process `syz.4.1802'. [ 634.331520][T15673] 8021q: adding VLAN 0 to HW filter on device bond0 [ 634.391120][T15673] 8021q: adding VLAN 0 to HW filter on device team0 [ 634.445051][ T6965] bridge0: port 1(bridge_slave_0) entered blocking state [ 634.452306][ T6965] bridge0: port 1(bridge_slave_0) entered forwarding state [ 634.530196][ T6965] bridge0: port 2(bridge_slave_1) entered blocking state [ 634.537607][ T6965] bridge0: port 2(bridge_slave_1) entered forwarding state [ 635.084675][T15761] usb usb13: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 635.213351][ T8322] Bluetooth: hci11: command tx timeout [ 635.265106][T15673] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 635.430531][T15756] zswap: compressor û not available [ 635.481948][T15673] veth0_vlan: entered promiscuous mode [ 635.521727][T15673] veth1_vlan: entered promiscuous mode [ 635.614435][T15673] veth0_macvtap: entered promiscuous mode [ 635.643874][T15673] veth1_macvtap: entered promiscuous mode [ 635.711156][T15673] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 635.783828][T15673] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 635.828183][T15711] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 635.890711][T15711] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 635.924848][T15711] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 635.999086][T15711] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 636.134062][T15759] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 636.369962][ T8093] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 636.430109][ T8093] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 636.590316][ T8101] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 636.633370][ T8101] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 637.006324][T15781] unchecked MSR access error: WRMSR to 0x418 (tried to write 0x0000000000000322) at rIP: 0xffffffff8165a82a (__mcheck_cpu_init_prepare_banks+0x18a/0x380) [ 637.022111][T15781] Call Trace: [ 637.025395][T15781] [ 637.028331][T15781] ? __pfx___mcheck_cpu_init_prepare_banks+0x10/0x10 [ 637.035010][T15781] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 637.040827][T15781] ? debug_object_deactivate+0x1ec/0x3a0 [ 637.046559][T15781] mce_cpu_restart+0xd9/0x1f0 [ 637.051238][T15781] ? __pfx_mce_cpu_restart+0x10/0x10 [ 637.056523][T15781] smp_call_function_many_cond+0x1200/0x15e0 [ 637.062644][T15781] ? __pfx_mce_cpu_restart+0x10/0x10 [ 637.068104][T15781] ? mark_held_locks+0x49/0x80 [ 637.072863][T15781] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 637.078675][T15781] ? lockdep_hardirqs_on+0x7c/0x110 [ 637.083975][T15781] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 637.089985][T15781] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 637.096369][T15781] ? __pfx___try_to_del_timer_sync+0x10/0x10 [ 637.102372][T15781] ? __pfx_mce_cpu_restart+0x10/0x10 [ 637.107661][T15781] on_each_cpu_cond_mask+0x40/0x90 [ 637.112879][T15781] set_bank+0x240/0x3a0 [ 637.117082][T15781] ? __pfx_set_bank+0x10/0x10 [ 637.121862][T15781] ? find_held_lock+0x2b/0x80 [ 637.126628][T15781] ? __pfx_set_bank+0x10/0x10 [ 637.131654][T15781] dev_attr_store+0x58/0x80 [ 637.136211][T15781] ? __pfx_dev_attr_store+0x10/0x10 [ 637.141574][T15781] sysfs_kf_write+0xf2/0x150 [ 637.146179][T15781] kernfs_fop_write_iter+0x3af/0x570 [ 637.151557][T15781] ? __pfx_sysfs_kf_write+0x10/0x10 [ 637.156841][T15781] vfs_write+0x7d3/0x11d0 [ 637.161284][T15781] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 637.167199][T15781] ? __pfx_vfs_write+0x10/0x10 [ 637.172089][T15781] ksys_write+0x12a/0x250 [ 637.176574][T15781] ? __pfx_ksys_write+0x10/0x10 [ 637.181675][T15781] do_syscall_64+0xcd/0xf80 [ 637.186216][T15781] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 637.192299][T15781] RIP: 0033:0x7f0ac878f7c9 [ 637.196912][T15781] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 637.216523][T15781] RSP: 002b:00007f0ac969c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 637.224940][T15781] RAX: ffffffffffffffda RBX: 00007f0ac89e5fa0 RCX: 00007f0ac878f7c9 [ 637.233085][T15781] RDX: 0000000000000003 RSI: 0000200000000240 RDI: 0000000000000006 [ 637.241142][T15781] RBP: 00007f0ac8813f91 R08: 0000000000000000 R09: 0000000000000000 [ 637.249202][T15781] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 637.257343][T15781] R13: 00007f0ac89e6038 R14: 00007f0ac89e5fa0 R15: 00007ffe16a59c68 [ 637.265845][T15781] [ 637.301092][ T8322] Bluetooth: hci11: command tx timeout [ 637.406746][T15786] FAULT_INJECTION: forcing a failure. [ 637.406746][T15786] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 637.471423][ T8322] Bluetooth: hci9: unexpected event 0x02 length: 726 > 260 [ 637.491789][T15786] CPU: 0 UID: 0 PID: 15786 Comm: syz.4.1808 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 637.491835][T15786] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 637.491845][T15786] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 637.491855][T15786] Call Trace: [ 637.491861][T15786] [ 637.491869][T15786] dump_stack_lvl+0x16c/0x1f0 [ 637.491900][T15786] should_fail_ex+0x512/0x640 [ 637.491928][T15786] _copy_from_user+0x2e/0xd0 [ 637.491952][T15786] ctl_ioctl+0xeb/0xd70 [ 637.491976][T15786] ? __pfx_ctl_ioctl+0x10/0x10 [ 637.492018][T15786] ? __fget_files+0x20e/0x3c0 [ 637.492046][T15786] dm_ctl_ioctl+0x22/0x30 [ 637.492065][T15786] ? __pfx_dm_ctl_ioctl+0x10/0x10 [ 637.492085][T15786] __x64_sys_ioctl+0x18e/0x210 [ 637.492108][T15786] do_syscall_64+0xcd/0xf80 [ 637.492136][T15786] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 637.492155][T15786] RIP: 0033:0x7f605c78f7c9 [ 637.492169][T15786] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 637.492186][T15786] RSP: 002b:00007f605d5c0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 637.492203][T15786] RAX: ffffffffffffffda RBX: 00007f605c9e5fa0 RCX: 00007f605c78f7c9 [ 637.492215][T15786] RDX: 00002000000001c0 RSI: ffbffffffffffd0e RDI: 0000000000000004 [ 637.492225][T15786] RBP: 00007f605d5c0090 R08: 0000000000000000 R09: 0000000000000000 [ 637.492235][T15786] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 637.492245][T15786] R13: 00007f605c9e6038 R14: 00007f605c9e5fa0 R15: 00007ffd5e4daa88 [ 637.492267][T15786] [ 639.993594][ T31] INFO: task syz-executor:5833 blocked for more than 143 seconds. [ 640.011735][ T31] Tainted: G U W L XTNJ syzkaller #0 [ 640.030875][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 640.055535][ T31] task:syz-executor state:D stack:23720 pid:5833 tgid:5833 ppid:1 task_flags:0x400140 flags:0x00080002 [ 640.095934][ T31] Call Trace: [ 640.116088][ T31] [ 640.136094][ T31] ? __schedule+0x10b9/0x6150 [ 640.160520][ T31] __schedule+0x1139/0x6150 [ 640.218049][ T31] ? __lock_acquire+0x436/0x2890 [ 640.223227][ T31] ? __pfx___schedule+0x10/0x10 [ 640.289352][ T31] ? find_held_lock+0x2b/0x80 [ 640.339243][ T31] ? schedule+0x2d7/0x3a0 [ 640.343711][ T31] schedule+0xe7/0x3a0 [ 640.386934][ T31] schedule_preempt_disabled+0x13/0x30 [ 640.392450][ T31] __mutex_lock+0xc69/0x1ca0 [ 640.427838][ T31] ? nfsd_shutdown_threads+0x5b/0xf0 [ 640.445683][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 640.453823][ T31] ? net_generic+0xea/0x2a0 [ 640.474920][ T31] ? nfsd_shutdown_threads+0x5b/0xf0 [ 640.480966][ T31] nfsd_shutdown_threads+0x5b/0xf0 [ 640.486378][ T31] nfsd_umount+0x3b/0x60 [ 640.490637][ T31] deactivate_locked_super+0xc1/0x1a0 [ 640.496487][ T31] deactivate_super+0xde/0x100 [ 640.501269][ T31] cleanup_mnt+0x225/0x450 [ 640.506047][ T31] task_work_run+0x150/0x240 [ 640.510756][ T31] ? __pfx_task_work_run+0x10/0x10 [ 640.516400][ T31] exit_to_user_mode_loop+0xfb/0x540 [ 640.521726][ T31] do_syscall_64+0x4ee/0xf80 [ 640.526760][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 640.532684][ T31] RIP: 0033:0x7f2481590af7 [ 640.542483][ T31] RSP: 002b:00007ffefb174748 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 640.556936][ T31] RAX: 0000000000000000 RBX: 00007f2481613d7d RCX: 00007f2481590af7 [ 640.567801][ T31] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffefb174800 [ 640.578950][ T31] RBP: 00007ffefb174800 R08: 0000000000000000 R09: 0000000000000000 [ 640.587328][ T31] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffefb175890 [ 640.595691][ T31] R13: 00007f2481613d7d R14: 0000000000078e8f R15: 00007ffefb1758d0 [ 640.603902][ T31] [ 640.615871][ T31] [ 640.615871][ T31] Showing all locks held in the system: [ 640.623606][ T31] 1 lock held by khungtaskd/31: [ 640.704774][ T31] #0: ffffffff8e3c9860 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0 [ 640.724197][ T31] 2 locks held by syz-executor/5833: [ 640.729649][ T31] #0: ffff888027c700e0 (&type->s_umount_key#51){+.+.}-{4:4}, at: deactivate_super+0xd6/0x100 [ 640.775788][ T31] #1: ffffffff8e8009c8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 640.805538][ T31] 2 locks held by kworker/u10:14/6998: [ 640.811121][ T31] #0: ffff888144ecc148 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_one_work+0x128d/0x1b20 [ 640.833851][ T31] #1: ffffc90003b3fc90 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_one_work+0x914/0x1b20 [ 640.866437][ T31] 2 locks held by kworker/u10:20/8090: [ 640.871934][ T31] #0: ffff888144ecc148 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_one_work+0x128d/0x1b20 [ 640.903270][ T31] #1: ffffc9000c1f7c90 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_one_work+0x914/0x1b20 [ 640.933820][ T31] 3 locks held by kworker/0:9/9326: [ 640.939132][ T31] #0: ffff88813ff55948 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x128d/0x1b20 [ 640.963154][ T31] #1: ffffc9000482fc90 (free_ipc_work){+.+.}-{0:0}, at: process_one_work+0x914/0x1b20 [ 640.973517][ T31] #2: ffffffff8e3d4fb8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x284/0x3c0 [ 640.984126][ T31] 2 locks held by syz.4.1062/11422: [ 640.989447][ T31] #0: ffffffff901dd0d0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 640.998206][ T31] #1: ffffffff8e8009c8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x687/0xbc0 [ 641.014028][ T31] 2 locks held by syz-executor/11661: [ 641.019416][ T31] #0: ffff88802a6320e0 (&type->s_umount_key#51){+.+.}-{4:4}, at: deactivate_super+0xd6/0x100 [ 641.038184][ T31] #1: ffffffff8e8009c8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 641.052496][ T31] 2 locks held by getty/13153: [ 641.057457][ T31] #0: ffff88814d73d0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 641.071027][ T31] #1: ffffc9000bb7b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x14f0 [ 641.082048][ T31] 3 locks held by kworker/0:13/13950: [ 641.087749][ T31] #0: ffff88813ff55948 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x128d/0x1b20 [ 641.098559][ T31] #1: ffffc900042efc90 ((fqdir_free_work).work){+.+.}-{0:0}, at: process_one_work+0x914/0x1b20 [ 641.117252][ T31] #2: ffffffff8e3d4e80 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x48/0x6e0 [ 641.129302][ T31] 2 locks held by syz.7.1525/13998: [ 641.136232][ T31] #0: ffff888051af20e0 (&type->s_umount_key#51){+.+.}-{4:4}, at: deactivate_super+0xd6/0x100 [ 641.150743][ T31] #1: ffffffff8e8009c8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 641.163642][ T31] 2 locks held by syz.6.1576/14261: [ 641.168855][ T31] #0: ffffffff901dd0d0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 641.177428][ T31] #1: ffffffff8e8009c8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x687/0xbc0 [ 641.188367][ T31] 2 locks held by syz-executor/14536: [ 641.194000][ T31] #0: ffff88804a2360e0 (&type->s_umount_key#51){+.+.}-{4:4}, at: deactivate_super+0xd6/0x100 [ 641.204570][ T31] #1: ffffffff8e8009c8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 641.214470][ T31] 2 locks held by syz.8.1705/15050: [ 641.219933][ T31] #0: ffffffff901dd0d0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 641.234271][ T31] #1: ffffffff8e8009c8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_version_set_doit+0xc4/0x7a0 [ 641.245199][ T31] 2 locks held by kworker/u10:34/15060: [ 641.255048][ T31] #0: ffff888144ecc148 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_one_work+0x128d/0x1b20 [ 641.276996][ T31] #1: ffffc9000c167c90 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_one_work+0x914/0x1b20 [ 641.288832][ T31] 2 locks held by syz.9.1756/15337: [ 641.294316][ T31] #0: ffffffff901dd0d0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 641.302832][ T31] #1: ffffffff8e8009c8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x687/0xbc0 [ 641.313676][ T31] 2 locks held by syz.2.1778/15608: [ 641.319141][ T31] #0: ffffffff901dd0d0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 641.327843][ T31] #1: ffffffff8e8009c8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x687/0xbc0 [ 641.340518][ T31] 2 locks held by syz.3.1785/15783: [ 641.353627][ T31] #0: ffffffff901dd0d0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 641.363292][ T31] #1: ffffffff8e8009c8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_version_get_doit+0x18a/0x800 [ 641.376705][ T31] 2 locks held by syz.3.1785/15790: [ 641.382322][ T31] #0: ffffffff901dd0d0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 641.391165][ T31] #1: ffffffff8e8009c8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_version_get_doit+0x18a/0x800 [ 641.401625][ T31] 1 lock held by syz.4.1817/15819: [ 641.406776][ T31] #0: ffffffff8e3d4fb8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x1a3/0x3c0 [ 641.417468][ T31] 4 locks held by syz.0.1818/15824: [ 641.423194][ T31] #0: ffff888064e94ec0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_dev_do_close+0x26/0x90 [ 641.433317][ T31] #1: ffff888064e940c0 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x3ae/0x11d0 [ 641.447260][ T31] #2: ffffffff903b3a48 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xbb/0x260 [ 641.463882][ T31] #3: ffff88807dd9eb38 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x80/0x730 [ 641.519176][ T31] [ 641.530776][ T31] ============================================= [ 641.530776][ T31] [ 641.539218][ T31] NMI backtrace for cpu 0 [ 641.539237][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 641.539272][ T31] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 641.539281][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 641.539291][ T31] Call Trace: [ 641.539298][ T31] [ 641.539305][ T31] dump_stack_lvl+0x116/0x1f0 [ 641.539338][ T31] nmi_cpu_backtrace+0x27b/0x390 [ 641.539360][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 641.539378][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 641.539401][ T31] watchdog+0xf14/0x1140 [ 641.539431][ T31] ? rcu_is_watching+0x12/0xc0 [ 641.539463][ T31] ? __pfx_watchdog+0x10/0x10 [ 641.539487][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 641.539516][ T31] ? __kthread_parkme+0x19e/0x250 [ 641.539544][ T31] ? __pfx_watchdog+0x10/0x10 [ 641.539569][ T31] kthread+0x3c5/0x780 [ 641.539587][ T31] ? __pfx_kthread+0x10/0x10 [ 641.539605][ T31] ? rcu_is_watching+0x12/0xc0 [ 641.539629][ T31] ? __pfx_kthread+0x10/0x10 [ 641.539647][ T31] ret_from_fork+0x983/0xb10 [ 641.539665][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 641.539685][ T31] ? __switch_to+0x7af/0x10d0 [ 641.539708][ T31] ? __pfx_kthread+0x10/0x10 [ 641.539725][ T31] ret_from_fork_asm+0x1a/0x30 [ 641.539761][ T31] [ 641.941130][ T6803] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 642.012291][ T6803] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 642.091591][ T6803] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 642.174771][ T6803] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 642.380004][ T6803] bridge_slave_1: left allmulticast mode [ 642.396148][ T6803] bridge_slave_1: left promiscuous mode [ 642.403963][ T6803] bridge0: port 2(bridge_slave_1) entered disabled state [ 642.438239][ T6803] bridge_slave_0: left allmulticast mode [ 642.443974][ T6803] bridge_slave_0: left promiscuous mode [ 642.467410][ T6803] bridge0: port 1(bridge_slave_0) entered disabled state [ 643.064947][ T6803] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 643.100625][ T6803] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 643.136935][ T6803] bond0 (unregistering): Released all slaves [ 643.448813][ T6803] hsr_slave_0: left promiscuous mode [ 643.462540][ T6803] hsr_slave_1: left promiscuous mode [ 643.477122][ T6803] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 643.500100][ T6803] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 643.520944][ T6803] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 643.528441][ T6803] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 643.595931][ T6803] veth1_macvtap: left promiscuous mode [ 643.619282][ T6803] veth0_macvtap: left promiscuous mode [ 643.624922][ T6803] veth1_vlan: left promiscuous mode [ 643.651773][ T6803] veth0_vlan: left promiscuous mode [ 644.479750][ T6803] team0 (unregistering): Port device team_slave_1 removed [ 644.537395][ T6803] team0 (unregistering): Port device team_slave_0 removed [ 645.493479][ T6803] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 645.664504][ T6803] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 645.814146][ T6803] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 645.919208][ T6803] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 646.129561][ T6803] bridge_slave_1: left allmulticast mode [ 646.135238][ T6803] bridge_slave_1: left promiscuous mode [ 646.144711][ T6803] bridge0: port 2(bridge_slave_1) entered disabled state [ 646.158662][ T6803] bridge_slave_0: left allmulticast mode [ 646.164423][ T6803] bridge_slave_0: left promiscuous mode [ 646.170610][ T6803] bridge0: port 1(bridge_slave_0) entered disabled state [ 646.482278][ T6803] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 646.493142][ T6803] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 646.505079][ T6803] bond0 (unregistering): Released all slaves [ 646.793274][ T6803] hsr_slave_0: left promiscuous mode [ 646.808105][ T6803] hsr_slave_1: left promiscuous mode [ 646.823325][ T6803] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 646.830734][ T6803] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 646.863749][ T6803] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 646.886352][ T6803] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 646.929524][ T6803] veth1_macvtap: left promiscuous mode [ 646.943335][ T6803] veth0_macvtap: left promiscuous mode [ 646.949363][ T6803] veth1_vlan: left promiscuous mode [ 646.983126][ T6803] veth0_vlan: left promiscuous mode [ 647.759664][ T6803] team0 (unregistering): Port device team_slave_1 removed [ 647.813833][ T6803] team0 (unregistering): Port device team_slave_0 removed