last executing test programs: 7m21.347866683s ago: executing program 3 (id=112): r0 = socket(0x29, 0x5, 0x0) sendmmsg$auto(r0, &(0x7f0000000180)={{0x0, 0x2, &(0x7f0000000100)={&(0x7f00000000c0), 0x34002}, 0x1, &(0x7f00000000c0), 0x3, 0xab}, 0x80670}, 0x3f800000, 0xd9) close_range$auto(0x2, 0x8, 0x0) socket(0x29, 0x5, 0x0) (async) sendmmsg$auto(r0, &(0x7f0000000180)={{0x0, 0x2, &(0x7f0000000100)={&(0x7f00000000c0), 0x34002}, 0x1, &(0x7f00000000c0), 0x3, 0xab}, 0x80670}, 0x3f800000, 0xd9) (async) close_range$auto(0x2, 0x8, 0x0) (async) 7m21.224312259s ago: executing program 3 (id=113): r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) write$auto(r0, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x5) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_smbd_genl(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$auto_KSMBD_EVENT_HEARTBEAT_REQUEST(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r2, 0x300, 0x70bd25, 0x25dfdbff, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x40000800}, 0x8000) r3 = openat$auto_nvram_misc_fops_nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x820181, 0x0) write$auto_nvram_misc_fops_nvram(r3, 0x0, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) madvise$auto(0x0, 0x2df57af6, 0x14) r4 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/adsp1\x00', 0x0, 0x0) ioctl$auto_SOUND_MIXER_WRITE_RECSRC2(r4, 0xc0044dff, &(0x7f0000000080)) 7m20.729064329s ago: executing program 3 (id=114): process_vm_readv$auto(0x0, 0x0, 0x1, &(0x7f0000000280)={&(0x7f0000000040)="11ce06d2b810367182e7d96d42f1e6d37be145265310615a0a", 0x40000100000001}, 0x6, 0x0) openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cec20\x00', 0x60840, 0x0) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_taskstats(&(0x7f0000000140), r0) sendmsg$auto_TASKSTATS_CMD_GET(r0, &(0x7f0000000200)={0x0, 0xf3e0fff77c47799f, &(0x7f00000001c0)={&(0x7f0000000040)={0x24, r1, 0xa01, 0x70bd25, 0x25dfdbfd, {}, [@TASKSTATS_CMD_ATTR_DEREGISTER_CPUMASK={0xe}]}, 0x24}, 0x1, 0x0, 0x0, 0x4001}, 0x20000000) sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x0, 0x20, 0x70bd27, 0x25dfdbff, {}, [@NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0x1d}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24008004}, 0x40) 7m20.481144504s ago: executing program 3 (id=115): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x0, 0x0) write$auto(0x3, 0x0, 0xfffffdef) ioctl$auto_TCSBRKP2(r0, 0x5425, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000001540)={'netdevsim0\x00'}) sendmsg$auto_NET_SHAPER_CMD_GROUP(0xffffffffffffffff, 0x0, 0x14) mmap$auto(0x0, 0xa00006, 0x400002, 0x40eb1, 0x602, 0x300000000800) r1 = socket(0x2, 0x1, 0x106) bind$auto(r1, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) openat$dir(0xffffffffffffff9c, 0x0, 0x40000, 0x0) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/tunl0/napi_defer_hard_irqs\x00', 0x28b42, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) r3 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000001a80)='/dev/bus/usb/001/001\x00', 0x29202, 0x0) mmap$auto(0xffff8000, 0x280009, 0xb, 0x8000000008011, r3, 0x0) mmap$auto(0x0, 0x2020009, 0x7, 0xeb1, 0xfffffffffffffffa, 0x8000) mremap$auto(0x1ff000, 0x8, 0x843, 0x3, 0xfffff000) mremap$auto(0xfffff000, 0x4, 0x4, 0x7, 0x1001ff000) capset$auto(0x0, 0x0) r4 = getpgid$auto(0x0) timer_create$auto(0xfffffffe, &(0x7f0000000000)={@sival_int=0x4, @raw=0x2, 0x4, @_tid=r4}, &(0x7f0000000040)=0x9) prctl$auto_PR_SET_MM_START_DATA(0x5, 0x3, r4, 0xfffffffffffff01a, 0xa4) sendfile$auto(r2, r2, 0x0, 0x1ff) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D2\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 7m19.917888149s ago: executing program 3 (id=118): r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) write$auto(r0, &(0x7f0000000040)='/dev/dsp\x00', 0x1) (async) write$auto(r0, &(0x7f0000000040)='/dev/dsp\x00', 0x1) mmap$auto(0x10000000001, 0x2020009, 0x3, 0x20000000000eb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x20004, 0x1ff, 0xeb1, 0x8000000000000024, 0x8000) (async) mmap$auto(0x0, 0x20004, 0x1ff, 0xeb1, 0x8000000000000024, 0x8000) r1 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x1000, 0x0) openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) r2 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$auto_VHOST_SET_OWNER(r2, 0xaf01, 0x5) (async) ioctl$auto_VHOST_SET_OWNER(r2, 0xaf01, 0x5) mknod$auto(&(0x7f0000000040)='\xfd\x90\x8f2\x14\x92\x00\xbf\xdf\xcf\x9a\xae}\xd9\xf95\xc5gV\x82\f\xe5h\xfe\x83\xe4\xbe\x8c\x1f\xa5\xf1_T\xde\xf7\xd4\x83D\x9eXS\xd6\x90T\xc1v\xad#\xc4q\x8b\xed2\xadW:0\xef\x9c.=\xba\x0fy\x8f\xcd\xd6\xde\xa9i\xec\xe8\xca\x9f\xf3\x82b\xa2y\xa87J\xfc \xc5\xd8\x80\xba\xaaV\x8f{\x1f\x1b\xb0\n\x97\\\xa7\xe3\xdf\xc29-*;#r\xc8\xd1\x14RcF\x87\xe4\x1c\x1fGL\xa5\x19\x90\xd6\x8d*\xe6\b(\x1a\xea\x95\xdc\xa6)5\xae&yAl\x1e\xe3j Lp\x91\r\xed%\xafZ\xf8w\xf2}\xcdGS\xce\xb9\xdck\x86\x00.6\xe6{\xc1\x00\x1bW5\x81\xda!\xcb.O\xa9\xf3\xa7\x88+\xb9\xf3\x9a7\xa4\xe6)<\xa79\xa4\x87\\\xb4\xbf\v\x03\x87\xac\x87r\x02\x05\xdb\xe4\xde,V\xb6G\xba.WR\xe2<~\xdd\xb2\xe53hj_;\xa5qm\x92\xc7P\xc9.\x82w8\x1f\xfcX\xe4\x14\xc72cC\xd3\x00'/263, 0x1, 0x4) lstat$auto(&(0x7f0000000500)='\xfd\x90\x8f2\x14\x92\x00\xbf\xdf\xcf\x9a\xae}\xd9\xf95\xc5gV\x82\f\xe5h\xfe\x83\xe4\xbe\x8c\x1f\xa5\xf1_T\xde\xf7\xd4\x83D\x9eXS\xd6\x90T\xc1v\xad#\xc4q\x8b\xed2\xadW:0\xef\x9c.=\xba\x0fy\x8f\xcd\xd6\xde\xa9i\xec\xe8\xca\x9f\xf3\x82b\xa2y\xa87J\xfc \xc5\xd8\x80\xba\xaaV\x8f{\x1f\x1b\xb0\n\x97\\\xa7\xe3\xdf\xc29-*;#r\xc8\xd1\x14RcF\x87\xe4\x1c\x1fGL\xa5\x19\x90\xd6\x8d*\xe6\b(\x1a\xea\x95\xdc\xa6)5\xae&yAl\x1e\xe3j Lp\x91\r\xed%\xafZ\xf8w\xf2}\xcdGS\xce\xb9\xdck\x86\x00.6\xe6{\xc1\x00\x1bW5\x81\xda!\xcb.O\xa9\xf3\xa7\x88+\xb9\xf3\x9a7\xa4\xe6)<\xa79\xa4\x87\\\xb4\xbf\v\x03\x87\xac\x87r\x02\x05\xdb\xe4\xde,V\xb6G\xba.WR\xe2<~\xdd\xb2\xe53hj_;\xa5qm\x92\xc7P\xc9.\x82w8\x1f\xfcX\xe4\x14\xc72cC\xd3\x00', 0x0) (async) lstat$auto(&(0x7f0000000500)='\xfd\x90\x8f2\x14\x92\x00\xbf\xdf\xcf\x9a\xae}\xd9\xf95\xc5gV\x82\f\xe5h\xfe\x83\xe4\xbe\x8c\x1f\xa5\xf1_T\xde\xf7\xd4\x83D\x9eXS\xd6\x90T\xc1v\xad#\xc4q\x8b\xed2\xadW:0\xef\x9c.=\xba\x0fy\x8f\xcd\xd6\xde\xa9i\xec\xe8\xca\x9f\xf3\x82b\xa2y\xa87J\xfc \xc5\xd8\x80\xba\xaaV\x8f{\x1f\x1b\xb0\n\x97\\\xa7\xe3\xdf\xc29-*;#r\xc8\xd1\x14RcF\x87\xe4\x1c\x1fGL\xa5\x19\x90\xd6\x8d*\xe6\b(\x1a\xea\x95\xdc\xa6)5\xae&yAl\x1e\xe3j Lp\x91\r\xed%\xafZ\xf8w\xf2}\xcdGS\xce\xb9\xdck\x86\x00.6\xe6{\xc1\x00\x1bW5\x81\xda!\xcb.O\xa9\xf3\xa7\x88+\xb9\xf3\x9a7\xa4\xe6)<\xa79\xa4\x87\\\xb4\xbf\v\x03\x87\xac\x87r\x02\x05\xdb\xe4\xde,V\xb6G\xba.WR\xe2<~\xdd\xb2\xe53hj_;\xa5qm\x92\xc7P\xc9.\x82w8\x1f\xfcX\xe4\x14\xc72cC\xd3\x00', 0x0) ioctl$auto(r2, 0x4008af22, r1) (async) ioctl$auto(r2, 0x4008af22, r1) r3 = openat$auto_proc_clear_refs_operations_internal(0xffffffffffffff9c, &(0x7f0000000600)='/proc/self/clear_refs\x00', 0x2, 0x0) r4 = socket(0x2, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0, 0xc}, 0x1, 0x0, 0x0, 0x4004800}, 0x0) settimeofday$auto(0x0, &(0x7f0000000300)={0x2, 0x4}) recvmmsg$auto(r4, &(0x7f0000000140)={{0x0, 0x3, &(0x7f00000001c0)={0x0, 0x400}, 0x2, 0x0, 0x6000000200002, 0x8a33}, 0x806}, 0x3, 0x8000010, 0x0) write$auto_proc_clear_refs_operations_internal(r3, 0x0, 0xffffff4b) (async) write$auto_proc_clear_refs_operations_internal(r3, 0x0, 0xffffff4b) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/fs/nfs/net/nfs_client/identifier\x00', 0x82942, 0x0) (async) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/fs/nfs/net/nfs_client/identifier\x00', 0x82942, 0x0) sendfile$auto(r5, r5, 0x0, 0x200) getpid() (async) r6 = getpid() syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_readv$auto(r6, &(0x7f0000000000)={0x0, 0xfff}, 0x40000000001, &(0x7f0000000180)={0x0, 0x40000000001243}, 0xa, 0x0) socket(0x2, 0x1, 0x106) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x7, 0x7) munmap$auto(0x4, 0x8000) bind$auto(0x3, 0x0, 0x68) madvise$auto(0x80000000, 0x2, 0x8) openat$auto_uinput_fops_uinput(0xffffffffffffff9c, 0x0, 0x80000, 0x0) 7m18.165337329s ago: executing program 3 (id=125): mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x44eb2, 0xd, 0x300000000000) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) openat$auto_ctl_device_fops_user(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/hugepages/hugepages-2048kB/nr_overcommit_hugepages\x00', 0x1c9282, 0x0) mmap$auto(0x7, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000000000000000) openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f00000001c0), 0x80100, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/module/zswap/parameters/enabled\x00', 0x62, 0x0) getsockopt$auto(0xffffffffffffffff, 0x114, 0x271f, 0xfffffffffffffffc, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80802, 0x0) sendmmsg$auto(0xffffffffffffffff, 0x0, 0x2, 0x2) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card1\x00', 0x129800, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) mmap$auto(0x0, 0xffffffff, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) ioctl$auto(0xffffffffffffffff, 0xc01070ce, 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0x4004810}, 0x4008815) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0xc0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x6) r0 = socket(0x2, 0x1, 0x0) bind$auto(r0, &(0x7f0000000040)=@in={0x2, 0x4e24, @remote}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x100012, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x1}, 0x5, 0x20000000) socketpair$auto(0x1e, 0x5, 0xdd2, 0x0) socketpair$auto(0xa2c, 0x12, 0xd3c7, 0x0) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c00, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x5}, 0x3, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x3}, 0x7}, 0x3, 0xcad7) mmap$auto(0x0, 0x3, 0x80000000000000de, 0x9b72, 0x2, 0x8000) 7m2.93128417s ago: executing program 32 (id=125): mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x44eb2, 0xd, 0x300000000000) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) openat$auto_ctl_device_fops_user(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/hugepages/hugepages-2048kB/nr_overcommit_hugepages\x00', 0x1c9282, 0x0) mmap$auto(0x7, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000000000000000) openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f00000001c0), 0x80100, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/module/zswap/parameters/enabled\x00', 0x62, 0x0) getsockopt$auto(0xffffffffffffffff, 0x114, 0x271f, 0xfffffffffffffffc, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80802, 0x0) sendmmsg$auto(0xffffffffffffffff, 0x0, 0x2, 0x2) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card1\x00', 0x129800, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) mmap$auto(0x0, 0xffffffff, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) ioctl$auto(0xffffffffffffffff, 0xc01070ce, 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0x4004810}, 0x4008815) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0xc0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x6) r0 = socket(0x2, 0x1, 0x0) bind$auto(r0, &(0x7f0000000040)=@in={0x2, 0x4e24, @remote}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x100012, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x1}, 0x5, 0x20000000) socketpair$auto(0x1e, 0x5, 0xdd2, 0x0) socketpair$auto(0xa2c, 0x12, 0xd3c7, 0x0) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c00, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x5}, 0x3, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x3}, 0x7}, 0x3, 0xcad7) mmap$auto(0x0, 0x3, 0x80000000000000de, 0x9b72, 0x2, 0x8000) 5m20.606419526s ago: executing program 0 (id=473): close$auto(0xffffffffffffffff) openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x501, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000100), 0xffffffffffffffff) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$auto_dma_heap_fops_dma_heap(r0, 0xffffffffffdffe00, &(0x7f0000000140)=';') socket(0xa, 0x1, 0x100) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$auto_rng_chrdev_ops_core(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) read$auto_rng_chrdev_ops_core(r1, &(0x7f0000000040)=""/4096, 0xfffffe82) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', 0x0, 0x1000005, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/net/rpc/auth.rpcsec.context/channel\x00', 0x101002, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x11a001, 0x0) openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, 0x0, 0x40000, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) ioprio_set$auto(0x3, 0x0, 0x4b34) madvise$auto(0x16, 0xffffffffffff0005, 0x19) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x68, 0x0, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@HSR_A_IF1_AGE={0x8, 0x3, 0x3}, @HSR_A_IF2_SEQ={0x6, 0x7, 0x8000}, @HSR_A_IFINDEX={0x8}, @HSR_A_NODE_ADDR_B={0xa}, @HSR_A_NODE_ADDR={0xa}, @HSR_A_NODE_ADDR={0xa, 0x1, @local}, @HSR_A_IF2_AGE={0x8, 0x4, 0x9}, @HSR_A_IFINDEX={0x8}, @HSR_A_IF1_AGE={0x8, 0x3, 0x1}]}, 0x68}, 0x1, 0x0, 0x0, 0x18a64d47ddeca1f0}, 0x40090) socket(0x2, 0x3, 0x100) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 5m18.501860238s ago: executing program 0 (id=481): r0 = openat$auto_ftrace_system_enable_fops_trace_events(0xffffffffffffff9c, &(0x7f00000054c0)='/sys/kernel/tracing/events/vmalloc/enable\x00', 0x20a01, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) write$auto(r0, &(0x7f0000000240)='/dev/vhost-net\x00', 0x4) r1 = open(&(0x7f0000000480)='./cgroup.cpu/cgroup.procs\x00', 0x42842, 0x95) sendmsg$auto_NL80211_CMD_PROBE_CLIENT(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x6}, 0x20000000) read$auto(r1, 0x0, 0x1) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/per_cpu/cpu1/trace_pipe_raw\x00', 0x1000, 0x0) socket(0x3, 0x6, 0x4) io_uring_setup$auto(0x2, 0x0) r2 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000340)='/dev/admmidi2\x00', 0x200802, 0x0) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x20881, 0x0) getsockopt$auto_SO_TXREHASH(r2, 0xffffff00, 0x4a, &(0x7f00000001c0)='\x00', &(0x7f0000000200)=0x4) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r3, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) setuid$auto(0x800000000008) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) semctl$auto(0x1ff, 0x2, 0x13, 0x4) clone3$auto(&(0x7f0000000000)={0x200, 0x5, 0x7, 0x2, 0x1, 0x87, 0x8, 0xb, 0x9, 0x2, 0xcb6}, 0xaa) select$auto(0x10, 0x0, 0x0, &(0x7f0000000140)={[0x1ff, 0x4, 0xd3e, 0x1, 0x948b, 0x3, 0x800295f4da0a, 0x2, 0x3, 0x5, 0x80000001, 0x40, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x4, 0xd, 0x1, 0x948f, 0x1005, 0x206, 0x1, 0x0, 0x7, 0x9, 0xfffffffffffffff4, 0x6, 0x100000000000000, 0xfff, 0xf]}, 0x0) pread64$auto(0xffffffffffffffff, 0x0, 0x100000001, 0x100) r4 = socket(0x2b, 0x1, 0x1) ioctl$auto(r4, 0x89a0, 0x4) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) 5m17.792581674s ago: executing program 0 (id=486): r0 = openat$auto_usbfs_devices_fops_usb(0xffffffffffffff9c, &(0x7f0000000180), 0x48402, 0x0) r1 = socket(0x2, 0x5, 0x0) getsockname$auto(r1, &(0x7f0000000000)=@ethernet={0x1, @broadcast}, &(0x7f00000000c0)=0x5) semtimedop$auto(0xfffffffa, &(0x7f0000001000)={0x8000, 0x2, 0x1}, 0x4, &(0x7f0000001080)={0xd, 0x6}) read$auto(r0, 0x0, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/bus/pci/drivers/pata_sch/new_id\x00', 0x10000, 0x0) r2 = socket(0x2, 0x80002, 0x73) io_uring_setup$auto(0x406, 0x0) mmap$auto(0x0, 0x9, 0xffb, 0x8000000008011, 0x3, 0x0) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_SET_WIPHY(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x404c081}, 0x80) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000001040), 0x80, 0x0) getrandom$auto(0x0, 0x6000000, 0x3) io_uring_enter$auto(0x3, 0xa84, 0x80000001, 0xa, 0x0, 0x46) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r3, &(0x7f0000000400)='\x00\x00\x00\x00', 0x100000a3d9) close_range$auto(0x2, 0x8, 0x0) memfd_create$auto(0x0, 0xe) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) r4 = socket(0x2b, 0x1, 0x1) getsockopt$auto(r4, 0x0, 0x80, 0x0, 0x0) setsockopt$auto(0x3, 0x6, 0xc, 0x0, 0xfb3) prctl$auto(0x5, 0x6, 0x0, 0xb117, 0x9) mmap$auto(0x200000000000, 0x810004, 0x40000000000ffb, 0x8000000008011, 0x3, 0x8000) r5 = openat$auto_state_fops_(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) getsockopt$auto_SO_REUSEPORT(r5, 0x2, 0xf, &(0x7f0000000100)='-%&\x8d\x00', &(0x7f0000000140)=0x35) 5m15.466467021s ago: executing program 0 (id=493): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) close_range$auto(0x2, 0x8, 0x0) memfd_create$auto(0x0, 0xe) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) write$auto(r1, &(0x7f0000000000)='//\xf2\x00', 0x80000000) setresuid$auto(0x0, 0x0, 0x0) msgctl$auto_MSG_INFO(0x200, 0xc, &(0x7f0000000200)={{0x9, 0x0, 0xffffffffffffffff, 0x0, 0x10, 0xad15}, &(0x7f0000000180)=0xf, &(0x7f00000001c0)=0x3, 0x3ff, 0x5, 0x200, 0x7, 0x65, 0x7, 0x1, 0x2, @raw=0x1ff, @inferred=0x0}) fstat$auto(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0xf05, 0xaf4, 0x9, 0x0, r2, 0x0, 0x0, 0x2, 0xffffffffffffffff, 0x2, 0x7, 0x40, 0x3, 0x1, 0xa841, 0x100000000000}) sendmsg$auto_NFC_CMD_DISABLE_SE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x50}, 0xc, &(0x7f0000000200)={&(0x7f0000000800)=ANY=[@ANYRES16=r2, @ANYRES16=0x0, @ANYBLOB="000428bd7000ffdbdf251200000005001000370000001f0313806b002d8008004700", @ANYRES32=r1, @ANYBLOB="08008f00", @ANYRES32, @ANYBLOB="04005b808efe3773b599e0724e01b62986124416db95c6676cae5ffcdfc3ca2da38ba7c96c248b0ac0160ec1a238e0ed10a2576089a9654975d9c869bb0945fca16c3d9f7ca4a1045fd7cf5a83049401fd800c004e0086d40000000000000c00580006000800000000005ed9cc1fa44c27d713c4e2261edfb3f4379f40df3ea41b2f5261881faf9a6b07dfd3495ff91ca0efd522829cc81fe2bcbcd9bcaa19a0ab0d863c15b75fdcdb1650097904fda1948560a022ede4245f46f4a719aa1bbf16513293f816add72920bf664a65987f4548b112ba22e47087a13669b7d8e390bb162eaf0bb469f7380863d2080800ddb20757f091bf6c7a1cfb4b1ec68676678c797ee9a3d78481061a702121c2aea6475d802f54984a51dbfcd899b7073fc1247e94925e539774d20fa72f757cc6866d02efb11c00090000000000000005000000000000", @ANYRES32=r3, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="953a9cb7913a4a1e824a7cf838cc51faee0cfb0b3b51598c8f7b1b3960f778a077c79ca2b9a3d4ceb55b5f294d1c18919b6aea96b2950306308db50fcdc1c03d9dc14a02948cfbd8ff5668d320ad9e7ec200f6a3446e769ec61a7dcf789116181aefd9621bfc1a479003376bf821a8c49d063d5942429e770c44477df3e2c3a2c72ae45f494034c6002981eb4076136b4e364add172867c88bb37187c7b30700050010000700000008000e000400000004000200"], 0x350}, 0x1, 0x0, 0x0, 0x20048000}, 0x4) mmap$auto(0x0, 0x4, 0xffb, 0x8000000008011, 0x3, 0x2) adjtimex$auto(&(0x7f00000004c0)={0xf332b6e, 0x0, 0xfffffffffffffffc, 0xfffffffffffffffd, 0xd4, 0x1, 0x6, 0x0, 0xffffffffffffff7f, 0x368e, 0x5, {0xffffffff, 0x20000000010000}, 0x40005, 0x6, 0xfffffffffffffffd, 0x7, 0x0, 0x9, 0x81, 0xffffffffffff628e, 0xa747, 0xdead, 0x804}) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x581402, 0x0) r4 = openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000000080), 0xc0402, 0x0) ioctl$auto_posix_clock_file_operations_posix_clock(r4, 0xc0403d11, 0x0) prctl$auto(0x3e, 0x1, 0xffffffffffffffff, 0x8, 0x2) waitid$auto_P_ALL(0x0, 0x3b000, 0x0, 0x3, &(0x7f0000000300)={{0xda0000000000000, 0x969d}, {0x2, 0x6}, 0x8000000000000000, 0xa, 0x8, 0x9, 0xb871, 0x6, 0x9ffd, 0x81, 0x0, 0x1000000000f8c5, 0x1000, 0x81, 0xc, 0xd}) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0x2003f2, 0x15) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) close_range$auto(0x0, 0xfffffffffffff001, 0x2) socket(0x11, 0x80003, 0x300) socket(0x29, 0x5, 0x0) open(&(0x7f0000000040)='./cgroup\x00', 0x80, 0xb5d1af1605322de0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda1\x00', 0x0, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) close_range$auto(0x2, 0x8, 0x0) 5m13.380563234s ago: executing program 0 (id=497): close$auto(0xffffffffffffffff) r0 = openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x501, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000100), 0xffffffffffffffff) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r1 = openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$auto_dma_heap_fops_dma_heap(r1, 0xffffffffffdffe00, &(0x7f0000000140)=';') socket(0xa, 0x1, 0x100) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat$auto_rng_chrdev_ops_core(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) read$auto_rng_chrdev_ops_core(r2, &(0x7f0000000040)=""/4096, 0xfffffe82) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', 0x0, 0x1000005, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/net/rpc/auth.rpcsec.context/channel\x00', 0x101002, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x11a001, 0x0) openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, 0x0, 0x40000, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) ioprio_set$auto(0x3, 0x0, 0x4b34) madvise$auto(0x16, 0xffffffffffff0005, 0x19) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x68, 0x0, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@HSR_A_IF1_AGE={0x8, 0x3, 0x3}, @HSR_A_IF2_SEQ={0x6, 0x7, 0x8000}, @HSR_A_IFINDEX={0x8}, @HSR_A_NODE_ADDR_B={0xa}, @HSR_A_NODE_ADDR={0xa}, @HSR_A_NODE_ADDR={0xa, 0x1, @local}, @HSR_A_IF2_AGE={0x8, 0x4, 0x9}, @HSR_A_IFINDEX={0x8}, @HSR_A_IF1_AGE={0x8, 0x3, 0x1}]}, 0x68}, 0x1, 0x0, 0x0, 0x18a64d47ddeca1f0}, 0x40090) socket(0x2, 0x3, 0x100) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004) epoll_ctl$auto_EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000001040)={0x2, 0x3cf}) 5m12.313321817s ago: executing program 0 (id=501): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x6, 0x8000) move_pages$auto(0x1, 0x20007, 0x0, 0x0, 0x0, 0x8000000000000000) socket(0x1d, 0x1, 0x7fff) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(0xffffffffffffffff, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/system/node/node1/compact\x00', 0xc2481, 0x0) writev$auto(r0, &(0x7f0000000080)={&(0x7f0000000040), 0x1000}, 0x3) r1 = socket(0x18, 0x5, 0x1) sendmsg$auto_KSMBD_EVENT_LOGIN_RESPONSE(r1, 0x0, 0x30004850) msync$auto(0x1ffff000, 0x1800000000000fe, 0x400000004) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) ioctl$auto(r2, 0x4b47, 0x1) mmap$auto(0x0, 0x5, 0x4000000000df, 0xeb1, 0x401, 0x8000) r3 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/bus/usb/037/001\x00', 0x40001, 0x0) mmap$auto(0x0, 0x404008, 0xdf, 0x9b72, 0x2, 0x8000) ioctl$auto_USBDEVFS_CONTROL(r3, 0xc0185500, &(0x7f0000000040)={0xa0, 0x6, 0x5, 0xd102, 0x5, 0x80000, 0x0}) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtdblock0\x00', 0x4c440, 0x0) r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/tty12\x00', 0x101840, 0x0) r5 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) ioctl$auto(r4, 0x541c, r5) ioctl$auto_USBDEVFS_CONTROL(r5, 0xc0185500, &(0x7f0000000280)={0x4, 0x9, 0x3, 0x200, 0x401, 0x1, &(0x7f0000000180)="236abf5755bbb5c1d76b0a2900b32fba88b548d6c27e82ae2643dd4799cc2c406b953bf2e28ac8bc80f71864b1e2cff18e99d7c6b8780f7549c8d77fc8c04539685eb469e3f88267c2d9b0e7bdea6b3a24322bb6273d3de30dbc509264fc52cd722c6b9824aef9e7f1d088b386aab0f6efe7905de27361577b41dcd9860aeada459e3e03cc015872137dd09cea19f0441ec11468af197197b26ba5e68d6695b8269c9f897243617c5333532dd88653dfe492b9b715e59c9094083dc06f"}) mmap$auto(0x0, 0x2e74d4db, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/pcmC1D1c\x00', 0x800, 0x0) mmap$auto(0x0, 0x20009, 0xe, 0xeb1, 0x403, 0x8000) migrate_pages$auto(0x0, 0x99, 0x0, 0x0) 4m57.127336064s ago: executing program 33 (id=501): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x6, 0x8000) move_pages$auto(0x1, 0x20007, 0x0, 0x0, 0x0, 0x8000000000000000) socket(0x1d, 0x1, 0x7fff) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(0xffffffffffffffff, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/system/node/node1/compact\x00', 0xc2481, 0x0) writev$auto(r0, &(0x7f0000000080)={&(0x7f0000000040), 0x1000}, 0x3) r1 = socket(0x18, 0x5, 0x1) sendmsg$auto_KSMBD_EVENT_LOGIN_RESPONSE(r1, 0x0, 0x30004850) msync$auto(0x1ffff000, 0x1800000000000fe, 0x400000004) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) ioctl$auto(r2, 0x4b47, 0x1) mmap$auto(0x0, 0x5, 0x4000000000df, 0xeb1, 0x401, 0x8000) r3 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/bus/usb/037/001\x00', 0x40001, 0x0) mmap$auto(0x0, 0x404008, 0xdf, 0x9b72, 0x2, 0x8000) ioctl$auto_USBDEVFS_CONTROL(r3, 0xc0185500, &(0x7f0000000040)={0xa0, 0x6, 0x5, 0xd102, 0x5, 0x80000, 0x0}) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtdblock0\x00', 0x4c440, 0x0) r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/tty12\x00', 0x101840, 0x0) r5 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) ioctl$auto(r4, 0x541c, r5) ioctl$auto_USBDEVFS_CONTROL(r5, 0xc0185500, &(0x7f0000000280)={0x4, 0x9, 0x3, 0x200, 0x401, 0x1, &(0x7f0000000180)="236abf5755bbb5c1d76b0a2900b32fba88b548d6c27e82ae2643dd4799cc2c406b953bf2e28ac8bc80f71864b1e2cff18e99d7c6b8780f7549c8d77fc8c04539685eb469e3f88267c2d9b0e7bdea6b3a24322bb6273d3de30dbc509264fc52cd722c6b9824aef9e7f1d088b386aab0f6efe7905de27361577b41dcd9860aeada459e3e03cc015872137dd09cea19f0441ec11468af197197b26ba5e68d6695b8269c9f897243617c5333532dd88653dfe492b9b715e59c9094083dc06f"}) mmap$auto(0x0, 0x2e74d4db, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/pcmC1D1c\x00', 0x800, 0x0) mmap$auto(0x0, 0x20009, 0xe, 0xeb1, 0x403, 0x8000) migrate_pages$auto(0x0, 0x99, 0x0, 0x0) 2m35.349605242s ago: executing program 4 (id=852): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = socket(0x2, 0x1, 0x106) connect$auto(r0, &(0x7f00000001c0)=@in={0x2, 0x3}, 0x55) r1 = syz_genetlink_get_family_id$auto_nfc(&(0x7f0000000100), r0) sendmsg$auto_NFC_CMD_DEP_LINK_UP(r0, &(0x7f0000000540)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000d80)={0x31c, r1, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@NFC_ATTR_LLC_SDP={0x2e2, 0x13, 0x0, 0x1, [@nested={0x1fc, 0xe5, 0x0, 0x1, [@nested={0x4, 0x6d}, @nested={0xb8, 0x10a, 0x0, 0x1, [@generic="b5f2108a959fb8813f2bc4d548e3b22728ea32998460b65f8c94027acc205be4eeca4d9aa19c2caafd20b9e40a25997214ed525a580eb2e92403f82853218fe65444572863b38ea435d7921a1698175c2ddeb55d3becb7d94d7f180be7f0ffffff78457a4f6e3133ff633d69ea7a64fa4a430ccb841b72519d3215bcc1e6df4ba24cf08af469b737461776ce804a100086380580a6540a8c55524d2aa507c7867b268a8611ca96ecbfefb8822fb027731699e4c6dfa15fed53f09690741da9aea5d43543a8900625b98cb192c9149b0dc03e6a7d5d2046e9a974f406cadaf7e7b69417d79cfc2ff2", @generic="92d2772934a9b970f185063b36cb0dd4e27222de1c00ad5256bf74e37d016561f8d80fd3ae896ec31310b871d6eab4c45bdf819be810"]}, @typed={0x14, 0xff, 0x0, 0x0, @ipv6=@remote}, @typed={0xffffffffffffffdc, 0xbe, 0x0, 0x0, @str='r\x00'}, @nested={0x4, 0xc9}, @generic="016295d88eef0a5683d71a40ca56ff5b8e95d87ed51b1b7fcb9e23c027ebe63968601b66c8946d67dac83665ce5c7111152d1e987178676f1cd3bdf937e75f9d4cb21057ef2e0c32cadd78f2f29db258f2f4c9b2a833ce1fcd19b3fa4f53a5dc0f05", @generic="08a71a954b795aaba85e2c93c0774d134a9c57a6df821ba4e8213442a26ef7a4fd48df56af7d0b26fd6ecb41ef425eaf3d617a4703bbd6077a4b2973f69755ce9402eb5190c171b591772685fac589482864fd9a25b4bd974452b95b538cfeaebd55308b1921068a08c519f88d923b8bb1dcf2a093c6550c2b1802eabac73cedbff6caa258d14ce7e2b0b10398749c2cd71ffbcce39c86e88905320163939b33742f5b84de0eae7dfbbc29f2a107443d92b30fe54952", @nested={0x4, 0x89}]}, @generic="9c95dbe9716d466deaed137c03356b6c3016e228432bf3e2a70b011b1b325f2c736f5b0e5b3d8745cb738a287387743c31e57b648123da84a70c677e4356f963bd3c7c3a47bffa5725f718c0a7b1a7639b67d9a61f64f01221506b5517a5b4510433d978aa95d288ef96add57a2458838b956ded43ba25a14143777d2dbacda252e0db34ca2ada354f0c04bd877cc0078cffd665cddbe28d855e3b2e6dcc6a5bc65f0dc1307e3c3d7b5d84632960256bad8c91efe0a4eff81b85b8a86e79f7eb35b14992d76c75eee363fd0eb4b2f92f4323111307b6277ab9566b7371e1005d94be"]}, @NFC_ATTR_RF_MODE={0x5, 0xb, 0x59}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, 0x8}, @NFC_ATTR_LLC_PARAM_MIUX={0x6, 0x11, 0x5}, @NFC_ATTR_SE_APDU={0xb, 0x19, "a7a670c8caf9d3"}]}, 0x31c}, 0x1, 0x0, 0x0, 0x20040000}, 0x40080c0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) write$auto(r2, &(0x7f0000000180)='7\x00\\\xa0\x04|4\x00\x00\x03\x00\x00\x00\x10\x01\x00\x00\x00\x00\x00\x00\x00\x00rRVr\xc4O\xdc1\x9b%\x10Z\'\xb9\'\xa3stC=\x85\xc6\xf6\x13 \xeb\xff%\x11\x82\x05\xdfV\x02\xca&\xd8$<\xab&\xc8B-\xcc\x15\x04&\x13;\xfe\xbdQ\xaa\x16o\x1f\xc7\x94\xa3\xc9\x9a\xe1d\xf5\n\xe2\x88\x84\vT?\x98\xa2\x00'/206, 0x5) socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) uname$auto(0x0) setsockopt$auto(0x3, 0x10000000084, 0x1f, 0x0, 0x3ff) shmctl$auto_IPC_INFO(0x7, 0x3, 0x0) r3 = syz_genetlink_get_family_id$auto_ila(&(0x7f00000005c0), r0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_net_shaper(&(0x7f0000000540), r4) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) sendmsg$auto_NET_SHAPER_CMD_DELETE(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)={0x28, r5, 0x9, 0x70bd27, 0x25dfdbfb, {}, [@NET_SHAPER_A_IFINDEX={0x8, 0x8, r7}, @NET_SHAPER_A_HANDLE={0xc, 0x1, 0x0, 0x1, [@NET_SHAPER_A_HANDLE_SCOPE={0x8, 0x1, 0x2}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x44000}, 0xc050) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = socket(0xa, 0x2, 0x88) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000280)={'team0\x00', 0x0}) bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_5={@target_ifindex=r11, r10, 0x4, 0x1, r9, @relative_id=0x13, 0xe600}, 0xf) sendmsg$auto_ILA_CMD_GET(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x48, r3, 0x2, 0x70bd25, 0x25dfdbfe, {}, [@ILA_ATTR_LOCATOR={0xc, 0x1, 0x100}, @ILA_ATTR_CSUM_MODE={0x5, 0x7, 0x40}, @ILA_ATTR_CSUM_MODE={0x5, 0x7, 0xfb}, @ILA_ATTR_IFINDEX={0x8, 0x4, r7}, @ILA_ATTR_IFINDEX={0x8, 0x4, r11}, @ILA_ATTR_IDENT_TYPE={0x5, 0x8, 0x6}]}, 0x48}, 0x1, 0x0, 0x0, 0x20048040}, 0x4001) setfsuid$auto(0xee00) setsockopt$auto(0x3, 0x1, 0x21, 0x0, 0x9) connect$auto(0x3, &(0x7f00000000c0)=@in={0x2, 0x3}, 0x55) 2m33.452744642s ago: executing program 4 (id=857): mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x3) (async) socket(0x2, 0x2, 0x0) (async) socket(0x23, 0xa, 0x0) (async) seccomp$auto(0x2, 0x10, 0x0) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) (async) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x50) fchmodat2$auto(0xffffffffffffffff, 0x0, 0x6, 0x8) (async) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) (async) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000200), 0xffffffffffffffff) r0 = socket(0x1, 0x3, 0xffffffff) sendto$auto(r0, 0x0, 0x0, 0x0, 0x0, 0x3) (async) mmap$auto(0x81, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8003) (async) mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) (async) prctl$auto(0x43, 0xe, 0x0, 0x0, 0x0) (async) prctl$auto(0x43, 0x0, 0x0, 0x0, 0x0) (async) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty1\x00', 0xa0000, 0x0) (async) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socketpair$auto(0x1, 0xf8d, 0xd, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x9, 0x2, 0x0, 0x3, 0x4, 0x15f4da0e, 0x6, 0x9, 0x100000000000000c, 0x8, 0x4, 0xfca, 0x9, 0x2, 0x4000000000000d]}, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7800000) get_mempolicy$auto(0x0, 0x0, 0x2, 0x86, 0x9) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dri/card2\x00', 0x688200, 0x0) (async) mmap$auto(0xd, 0x2000a, 0x5, 0xeb1, 0x401, 0x10000008000) socket(0xa, 0x801, 0x100) (async) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS1\x00', 0x20000, 0x0) (async) unshare$auto(0x40000080) (async) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/net/bond0/bonding/use_carrier\x00', 0x103b02, 0x0) sendfile$auto(r1, r1, 0x0, 0x8080000001) mmap$auto(0x4, 0x6, 0xdb, 0xebc, 0x40000000000a5, 0x8000) 2m32.829058075s ago: executing program 4 (id=858): r0 = socket(0x11, 0x2, 0x0) sendmmsg$auto(r0, &(0x7f00000001c0)={{&(0x7f0000000000), 0x5aa, &(0x7f0000000100)={&(0x7f0000000080), 0x49}, 0x5, &(0x7f00000003c0), 0x5, 0x1000}, 0x5}, 0x2, 0x100) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) getsockopt$auto_SO_NO_CHECK(0xffffffffffffffff, 0x7f, 0xb, &(0x7f0000001040)=']/,\x00\xf6\x15 \xe1i\xb50\xfc\v\t', &(0x7f0000001080)) r1 = socket(0xf, 0x1, 0x300) setsockopt$auto(r1, 0x107, 0x12, 0x0, 0x4) pwrite64$auto(0xc8, 0x0, 0xfdef, 0x2) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x2000009, 0x3, 0xeb1, r1, 0x8000) connect$auto(0x3, 0x0, 0x58) r3 = socket(0x10, 0x2, 0x0) ioctl$auto_FICLONE(r1, 0x40049409, r1) sendmsg$auto_NL80211_CMD_GET_REG(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001100)=ANY=[@ANYBLOB="240000008ab00e0a65d61080fd1c2e3a975e0664ffa3f30c0d6c79d2558b8081", @ANYBLOB='&\x00', @ANYRES16=r3], 0x1ac}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) read$auto(r3, &(0x7f0000000080)='MJC802154_HWSIM\x00\xcb\x0fX\xc7\xfdx!\xf7\xb5T\x04\xad\x96\xf4\xbc\xca\xa52UWT1\a\x00\x00\x00\x00\x00\x007\xc9\xa6\x8a', 0x1060) r4 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x101001, 0x0) ioctl$auto_UI_DEV_SETUP(r4, 0x405c5503, &(0x7f00000000c0)={{0x9, 0xf2cf, 0x8, 0x80}, "6a034a07c7b82d90b69a39e32576f893fba86c9dd051a0094a3836d61c9100fefbbabea6ef9368c7996e841f3f1561d4992f726b0a6c36b0b2fd1678e816201cf562367fe6596824588a2e3d84ba165f", 0xa}) ioctl$auto_UI_DEV_CREATE(r4, 0x5501, 0x0) writev$auto(r4, &(0x7f0000000340)={&(0x7f0000000200), 0x18}, 0x8) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x4000804) lstat$auto(0x0, &(0x7f0000000180)={0x10a, 0x2, 0xfffffffd, 0x2, 0x0, 0x0, 0x0, 0xfa97, 0x8, 0x7fffffffffffffff, 0x8000000004, 0x100000007fffffff, 0x3, 0x0, 0xfffffffffffff133, 0x4, 0x3}) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x89fc, &(0x7f0000000040)={'bridge0\x00'}) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) madvise$auto(0x100000000, 0x5, 0x5f65) read$auto_rng_chrdev_ops_core(0xffffffffffffffff, &(0x7f0000000040)=""/4096, 0xfffffe82) madvise$auto(0x0, 0x9, 0x15) mmap$auto(0x0, 0x810004, 0x18, 0x8000000008011, 0x3, 0x8000) mmap$auto(0x2000000000ff, 0x202000c, 0x3f15, 0xeb2, r2, 0x8000) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000001140)='/proc/thread-self/net/dev_snmp6/batadv_slave_0\x00', 0x30b840, 0x0) 2m30.005285233s ago: executing program 4 (id=863): r0 = socket(0x2, 0x5, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb2, 0x401, 0x8000) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f0000000080)={0x0, 0x1fff8}, 0x7, 0x0, 0x2, 0xb}, 0xfff}, 0x5, 0x311) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) lsm_list_modules$auto(0x0, 0x0, 0x0) r1 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x80000, 0x0) r2 = syz_genetlink_get_family_id$auto_ioam6(&(0x7f0000000180), r0) sendmsg$auto_IOAM6_CMD_DUMP_SCHEMAS(r0, &(0x7f0000000300)={&(0x7f0000000100), 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x14, r2, 0x800, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", ""]}, 0x14}}, 0x400c800) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, 0x0) socket(0x11, 0x2, 0x9) capset$auto(0x0, &(0x7f0000000000)={0x7, 0x10000006, 0x48}) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket(0x10, 0x2, 0x0) sendmsg$auto_TIPC_NL_BEARER_DISABLE(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000040)=ANY=[@ANYBLOB='J\x00\x00\x00', @ANYRES16, @ANYBLOB="010025bd7000fcdbdf250200"], 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x40044) sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='(\x00\x00', @ANYRES16=0x0, @ANYBLOB="000326"], 0x28}, 0x1, 0x0, 0x0, 0x4c894}, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB='\"'], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) prctl$auto(0x59616d61, 0xffffffffffffffff, 0x1, 0x1004, 0xfffffffffffffffb) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) syz_clone(0xac2e6400, 0x0, 0x0, 0x0, 0x0, 0x0) socket(0x23, 0x5, 0x0) connect$auto(0x3, &(0x7f0000000080)=@generic={0x23, "ea00080000000400"}, 0x57) madvise$auto(0x0, 0xffffffffffff0001, 0x15) adjtimex$auto(0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) close_range$auto(0x2, 0x8, 0x0) 2m27.902628833s ago: executing program 4 (id=867): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/pci0000:00/0000:00:01.3/msi_bus\x00', 0x800, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000100)=""/16, 0x10) mmap$auto(0x0, 0x5, 0xdf, 0x1b, r0, 0x18000000000) setrlimit$auto(0x7, 0x0) socket(0x27, 0x0, 0x3fad) 2m27.498363906s ago: executing program 4 (id=869): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002a40), r0) sendmsg$auto_NFSD_CMD_LISTENER_SET(r0, &(0x7f00000050c0)={0x0, 0x0, &(0x7f0000005080)={&(0x7f0000002a80)={0x14, r1, 0x1, 0x70bd25, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008050) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) (async) socket(0x11, 0x3, 0xfffff958) (async) open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x0) (async) fallocate$auto(0x8000000000000003, 0x0, 0x9, 0x4cbd5d) (async) r2 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x80040, 0x40, 0xe}, 0x18) fremovexattr$auto(r2, &(0x7f0000000000)='system.posix_acl_access\x00') (async) close_range$auto(0x2, 0x8, 0x0) pread64$auto(0xffffffffffffffff, 0x0, 0x594c, 0x9fffffffd) openat$auto_generic(0xffffffffffffff9c, &(0x7f0000000040)='/proc/kmsg\x00', 0x20d00, 0x0) lseek$auto(0x3, 0x8, 0x1) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x40000) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000400), r3) sendmsg$auto_NFSD_CMD_VERSION_SET(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)={0x18, r4, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@NFSD_A_SERVER_PROTO_VERSION={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x24000001}, 0x844) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0xa, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'veth0_to_bond\x00'}) 2m12.26540496s ago: executing program 34 (id=869): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002a40), r0) sendmsg$auto_NFSD_CMD_LISTENER_SET(r0, &(0x7f00000050c0)={0x0, 0x0, &(0x7f0000005080)={&(0x7f0000002a80)={0x14, r1, 0x1, 0x70bd25, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008050) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) (async) socket(0x11, 0x3, 0xfffff958) (async) open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x0) (async) fallocate$auto(0x8000000000000003, 0x0, 0x9, 0x4cbd5d) (async) r2 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x80040, 0x40, 0xe}, 0x18) fremovexattr$auto(r2, &(0x7f0000000000)='system.posix_acl_access\x00') (async) close_range$auto(0x2, 0x8, 0x0) pread64$auto(0xffffffffffffffff, 0x0, 0x594c, 0x9fffffffd) openat$auto_generic(0xffffffffffffff9c, &(0x7f0000000040)='/proc/kmsg\x00', 0x20d00, 0x0) lseek$auto(0x3, 0x8, 0x1) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x40000) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000400), r3) sendmsg$auto_NFSD_CMD_VERSION_SET(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)={0x18, r4, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@NFSD_A_SERVER_PROTO_VERSION={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x24000001}, 0x844) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0xa, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'veth0_to_bond\x00'}) 8.362313573s ago: executing program 2 (id=1268): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x40000008000) r0 = socket(0x2, 0x1, 0x0) setsockopt$auto(r0, 0x6, 0x6, 0x0, 0x4) mmap$auto(0x0, 0x7, 0xdd, 0xebdd, r0, 0x7fff) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x0, 0x5, 0x0) openat$auto_ep0_operations_inode(0xffffffffffffff9c, &(0x7f0000000000), 0x8a001, 0x0) epoll_create$auto(0x20003f) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000440)='/sys/devices/virtual/block/ram13/ro\x00', 0x80404, 0x0) read$auto(r2, &(0x7f0000000000)='/sys/devices/platform/vhci_hcd.8/usb26/descriptors\x00', 0x9) open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) fcntl$auto(r1, 0x410, 0x0) close_range$auto(0x2, 0x8, 0x0) mknod$auto(&(0x7f0000000040)='\xfd\x90\x8f2\x14\x92\x00\xbf\xdf\xcf\x9a\xae}\xd9\xf95\xc5gV\x82\f\xe5h\xfe\x83\xe4\xbe\x8c\x1f\xa5\xf1_T\xde\xf7\xd4\x83D\x9eXS\xd6\x90T\xc1v\xad#\xc4q\x8b\xed2\xadW:0\xef\x9c.=\xba\x0fy\x8f\xcd\xd6\xde\xa9i\xec\xe8\xca\x9f\xf3\x82b\xa2y\xa87J\xfc \xc5\xd8\x80\xba\xaaV\x8f{\x1f\x1b\xb0\n\x97\\\xa7\xe3\xdf\xc29-*;#r\xc8\xd1\x14RcF\x87\xe4\x1c\x1fGL\xa5\x19\x90\xd6\x8d*\xe6\b(\x1a\xea\x95\xdc\xa6)5\xae&yAl\x1e\xe3j Lp\x91\r\xed%\xafZ\xf8w\xf2}\xcdGS\xce\xb9\xdck\x86\x00.6\xe6{\xc1\x00\x1bW5\x81\xda!\xcb.O\xa9\xf3\xa7\x88+\xb9\xf3\x9a7\xa4\xe6)<\xa79\xa4\x87\\\xb4\xbf\v\x03\x87\xac\x87r\x02\x05\xdb\xe4\xde,V\xb6G\xba.WR\xe2<~\xdd\xb2\xe53hj_;\xa5qm\x92\xc7P\xc9.\x82w8\x1f\xfcX\xe4\x14\xc72cC\xd3\x00'/263, 0x1, 0x4) 7.904564734s ago: executing program 2 (id=1269): sendmsg$auto_HWSIM_CMD_NEW_RADIO(0xffffffffffffffff, &(0x7f0000002780)={0x0, 0x0, &(0x7f0000002740)={&(0x7f0000000380)=ANY=[@ANYRESOCT, @ANYRES8], 0x44}, 0x1, 0x0, 0x0, 0x80f0}, 0x4044084) sendmsg$auto_THERMAL_GENL_CMD_TZ_GET_ID(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYRES8=0x0, @ANYRES16=0x0, @ANYRES8=0x0], 0x14}}, 0x400d1) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x4000040) r0 = socket(0x10, 0x2, 0x4) write$auto(r0, &(0x7f0000000340)='\x00\x00', 0x2fb) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0xfffffffffffffffc, 0x128009, 0xdf, 0xeb1, 0x401, 0x20000008000) sysfs$auto(0x2, 0x3e, 0x0) r1 = fsopen$auto(0x0, 0x1) fsconfig$auto_SHMEM_HUGE_NEVER(r1, 0x3, &(0x7f0000001640)='+\x00', &(0x7f0000001680)="df", 0x0) syz_clone(0x821800, &(0x7f0000000440)="9ef017faf8409bbc4e5464dc2b077f450bc001d2eaf7816e5f18bff6887305000000b715dcc95c81f2a6c5c216892d69b6e6f90d3ebe1d7e4bcd751a2030309d7055a62c18a77dc4cf4c326076ae36a1c73b4d000000b47be115b35141d8c441f45a4223fb02d4963b96d0e8aa316f14808732bf5d", 0x75, 0x0, 0x0, 0x0) close_range$auto(0xffffffffffffffff, 0x8, 0x0) mmap$auto(0x0, 0x7, 0x4000000000df, 0xeb1, 0xffffffffffffffff, 0x8000) capset$auto(&(0x7f0000000180)={0x19980330}, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x8502, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/module/ip_gre/parameters/log_ecn_error\x00', 0xc2061, 0x0) write$auto(r2, 0x0, 0x80) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event0\x00', 0x3498c2, 0x0) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$auto(0x3, 0x1, r4) ioctl$auto_KVM_GET_MSRS(r3, 0x4008ae89, &(0x7f0000000080)={0x40, 0x0, [{0x12, 0xe3, 0xb8}]}) socket(0x5, 0x4, 0xfffffffe) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x24008895}, 0x20000800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB='l\x00\''], 0x1ac}, 0x1, 0x0, 0x0, 0x40814}, 0x2004c0c4) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x200, 0x9}, 0x7}, 0x3, 0x0) 7.111506191s ago: executing program 2 (id=1272): mmap$auto(0x0, 0x20007, 0x80000000000000df, 0x10004000eb1, 0x8, 0x8000) (async) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) (async, rerun: 32) fanotify_init$auto(0x400, 0x2000000000002) (rerun: 32) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/time\x00') (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) lsm_get_self_attr$auto(0x64, 0x0, &(0x7f0000002440)=0x2, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_mac80211_hwsim(0x0, 0xffffffffffffffff) (async, rerun: 32) sendmsg$auto_HWSIM_CMD_GET_RADIO(r1, 0x0, 0x0) (async, rerun: 32) sendmsg$auto_HWSIM_CMD_TX_INFO_FRAME(r0, 0x0, 0x11) socket$nl_generic(0x10, 0x3, 0x10) (async) sysfs$auto(0x2, 0xe, 0x0) (async) open(0x0, 0x1652c2, 0xe1d2b27bdc14aa98) (async) fanotify_mark$auto(0x0, 0x1, 0x9, 0x4, 0x0) close_range$auto(0x0, 0xffffffffffffffff, 0x2) socket(0xa, 0x2, 0x0) (async) r2 = openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000000240), 0x2000, 0x0) ioctl$auto_USB_RAW_IOCTL_EP_SET_HALT(r2, 0x4004550d, 0x0) setsockopt$auto(0x400000000000003, 0x29, 0x15, 0x0, 0x56b) 6.471879107s ago: executing program 5 (id=1274): stat$auto(0x0, &(0x7f0000000140)={0x2, 0x0, 0x80, 0x7, 0xffffffffffffffff, 0xee00, 0x0, 0xd3, 0x6, 0x7fffffff, 0x0, 0xa82, 0x0, 0x7, 0x6, 0x200, 0x7}) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4ea2, @remote}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0x101}, 0x8}, 0x7, 0x20020000) write$auto(0x3, 0x0, 0x1000) openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/config/target/core/alua/lu_gps/default_lu_gp/lu_gp_id\x00', 0x189002, 0x0) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000300)='/sys/firmware/memmap/5/start\x00', 0x22000, 0x0) read$auto(r1, 0x0, 0x20) write$auto(0x3, 0x0, 0xffd8) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x8140, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x11, 0x80003, 0x300) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) ioctl$auto(0x3, 0x800005411, 0x38) syz_genetlink_get_family_id$auto_vdpa(0x0, r0) sendmsg$auto_NL80211_CMD_PROBE_MESH_LINK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x24000000}, 0x400c080) write$auto(0x3, 0x0, 0xfffffdef) connect$auto(0x3, 0x0, 0x55) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x4040, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r2, 0x0, 0x0) mmap$auto(0x0, 0xf569, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) syz_genetlink_get_family_id$auto_nfc(0x0, 0xffffffffffffffff) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000001a80)='/sys/kernel/tracing/events/vmalloc/filter\x00', 0x2, 0x0) write$auto_ftrace_subsystem_filter_fops_trace_events(r3, &(0x7f0000000180), 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x9c, 0x40009, 0xdf, 0x9b72, 0x7, 0x5) 6.470467254s ago: executing program 1 (id=1275): mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) socketpair$auto(0xf03, 0x5, 0x2e, 0x0) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptyt2\x00', 0x101e81, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r1 = socket(0x10, 0x2, 0x0) sendmsg$auto_IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)={0x820, 0x0, 0x4, 0x4070bd26, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x809, 0x3, 0x0, 0x1, [@typed={0x14, 0x53, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}}, @generic="94aec91d7127b0187b358bf012ea3fa85e5dfb5696fa9a381344040d45085a8a69adc822fc599870c78bc48a261e88c2a8e4252f5b6377ca9894d967bd8b9851c65c955619334a13fa37f8c8f55e0adcef5041", @typed={0x8, 0xa9, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}, @generic="cae6daa2115d5475b94546c1a59eb39aa676883a2aa6b28fb3062af542826e47735db20ad80a46b2bedeb92ba49415782c2be5e23a00749d7d5984cb2ea98aec410d3937eff248eb127beba633e6ba620688ef86fbda6596882640df248bcfad5c84ade6a9c8107745e7f4916025aaaa278c6c4553ac98a49d6f97a073288f824e828ba570fd93804c341cab6751e8e9022b70b6cf6ee367a5d79157bed4df7f15d1b07c73864e8cc252d672e4a54f46aa28f0b2de5621025ed47436d20b3e393a1b6f2ff6168339708b", @nested={0x6ca, 0x49, 0x0, 0x1, [@nested={0x4, 0x23}, @generic="09332b5864f563debdd9ec3e3927d5e8d91039045e5904ad911cd6569dbedf0973f426f205e678b2800c8959dc1b6e242f4facf2daec164e30e70330305c99908102927fce620445810a427c94e13d55524000ed6ce06a303d7e57126b7cb6c76c65cfdaa9df9f36865fd1d1507dcfa61a700327e949f870087feabf6d0524d5dcdd9a5869ced6caca5123a235b45191ed75b7de3c95f4ca14506077320da9c615d645a91499a35d104cebb63bdae3fb13b58408f4af917d7effdd0ab4ebebfd6cad5fd32603ead2f7447d29e8cad454e2958fae56041e8380cc453540bb39454e3d", @nested={0x5e0, 0x36, 0x0, 0x1, [@nested={0x21, 0xb8, 0x0, 0x1, [@typed={0x14, 0xfd, 0x0, 0x0, @ipv6=@private1}, @nested={0x4, 0x6e}, @nested={0x4, 0x85}, @generic="86"]}, @nested={0x5b5, 0x29, 0x0, 0x1, [@typed={0x8, 0x143, 0x0, 0x0, @uid}, @typed={0x8, 0xc, 0x0, 0x0, @u32=0x53d}, @generic="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"]}]}]}]}]}, 0x820}, 0x1, 0x0, 0x0, 0x90}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB="5de1"], 0x1ac}}, 0x40000) recvmmsg$auto(r1, &(0x7f0000000140)={{0x0, 0x4, &(0x7f0000000080)={0x0, 0x803}, 0x5, 0x0, 0x2, 0x8}, 0x800}, 0x10a, 0x8, 0x0) ioctl$auto_TIOCSETD2(r0, 0x5423, 0x0) socketpair$auto(0x5b, 0x2, 0x420000, 0x0) ioctl$auto_TIOCSETD2(r0, 0x5423, 0x0) ioctl$auto_TIOCVHANGUP2(r0, 0x5437, 0x0) 6.469745012s ago: executing program 6 (id=1276): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0x6, 0x2, 0x40eb2, 0xffffffffffffffff, 0x308000000000) r0 = openat$auto_mISDN_fops_timerdev(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) ioctl$auto_IMDELTIMER(r0, 0x80044941, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x2, 0x1, 0x106) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) r3 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) sysfs$auto(0x2, 0x23, 0x0) r4 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/set_event\x00', 0x20201, 0x0) r5 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000000c0), r1) sendmsg$auto_NL80211_CMD_DEL_PMKSA(r3, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="44000080", @ANYRES16=r5, @ANYBLOB="08002bbd7000fcdbdf253500000008000900c2000000080009000900000014000400766972745f77696669300000000000000600f700e208000004001e01"], 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x40400, 0xd8) fchmod$auto(r3, 0x4) setreuid$auto(0x4, 0x8) mknod$auto(&(0x7f0000000040)='\xfd\x90\x8f2\x14\x92\x00\xbf\xdf\xcf\x9a\xae}\xd9\xf95\xc5gV\x82\f\xe5h\xfe\x83\xe4\xbe\x8c\x1f\xa5\xf1_T\xde\xf7\xd4\x83D\x9eXS\xd6\x90T\xc1v\xad#\xc4q\x8b\xed2\xadW:0\xef\x9c.=\xba\x0fy\x8f\xcd\xd6\xde\xa9i\xec\xe8\xca\x9f\xf3\x82b\xa2y\xa87J\xfc \xc5\xd8\x80\xba\xaaV\x8f{\x1f\x1b\xb0\n\x97\\\xa7\xe3\xdf\xc29-*;#r\xc8\xd1\x14RcF\x87\xe4\x1c\x1fGL\xa5\x19\x90\xd6\x8d*\xe6\b(\x1a\xea\x95\xdc\xa6)5\xae&yAl\x1e\xe3j Lp\x91\r\xed%\xafZ\xf8w\xf2}\xcdGS\xce\xb9\xdck\x86\x00.6\xe6{\xc1\x00\x1bW5\x81\xda!\xcb.O\xa9\xf3\xa7\x88+\xb9\xf3\x9a7\xa4\xe6)<\xa79\xa4\x87\\\xb4\xbf\v\x03\x87\xac\x87r\x02\x05\xdb\xe4\xde,V\xb6G\xba.WR\xe2<~\xdd\xb2\xe53hj_;\xa5qm\x92\xc7P\xc9.\x82w8\x1f\xfcX\xe4\x14\xc72cC\xd3\x00'/263, 0x1, 0x4) write$auto(r4, 0x0, 0x4) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) shutdown$auto(0x200000003, 0x2) 5.821674735s ago: executing program 2 (id=1277): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) madvise$auto(0x5, 0x4, 0xc) r0 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) unshare$auto(0x40000080) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) mmap$auto(0x1002, 0x9, 0x4, 0x200000eb0, 0x401, 0x701cf82a) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/mm/transparent_hugepage/hugepages-2048kB/enabled\x00', 0x22b42, 0x0) sendfile$auto(r1, r1, 0x0, 0x6) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0x1000000d, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0x7, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x2, 0x62, 0x80000000, 0x0, 0x6d3f, 0x8001, 0xa, 0xfffffffffffffffe]}, 0x0) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) getpid() mlockall$auto(0x5) rt_sigprocmask$auto(0x6, &(0x7f0000000080)={0x8001000}, 0xffffffffffffffff, 0x8) close_range$auto(0x2, 0x8, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r3, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f0000001e40)=ANY=[@ANYRES8=r0, @ANYRES16, @ANYBLOB="010027bd7000fbdbdf2504000000080017000800000004001e00"], 0x20}, 0x1, 0x0, 0x0, 0x20048001}, 0xc0) mmap$auto(0x0, 0x1, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) setpriority$auto(0x2, 0x0, 0x80000) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) sendmsg$auto_NETDEV_CMD_QUEUE_GET(0xffffffffffffffff, &(0x7f0000003040)={0x0, 0x0, &(0x7f0000003000)={&(0x7f0000000040)={0x24, 0x0, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@NETDEV_A_QUEUE_TYPE={0x8, 0x3, 0x1}, @NETDEV_A_QUEUE_ID={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x20008810) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x10, 0x2, 0x14) socket(0x11, 0x80003, 0x300) socket(0x1d, 0x2, 0x7) 5.810804568s ago: executing program 1 (id=1278): openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, &(0x7f0000008040), 0x2, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x0, 0x5, 0x0) openat$auto_ep0_operations_inode(0xffffffffffffff9c, &(0x7f0000000000), 0x8a001, 0x0) epoll_create$auto(0x20003f) mmap$auto(0x2, 0xfffffffffffffffe, 0xdf, 0x11, r0, 0x100) write$auto(0x1, 0x0, 0x80000000) r1 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x1, 0x0) write$auto_seq_oss_f_ops_seq_oss(r1, &(0x7f0000000c80)="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", 0x144) unshare$auto(0x40000080) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) mmap$auto(0x1002, 0x9, 0x4, 0x200000eb0, 0x401, 0x701cf82a) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/mm/transparent_hugepage/hugepages-2048kB/enabled\x00', 0x22b42, 0x0) r3 = eventfd$auto(0x34b) sendfile$auto(r2, r2, 0x0, 0x6) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x6, 0x0, 0x0, 0x10000, 0x0) select$auto(0x10000010, 0x0, 0x0, &(0x7f00000001c0)={[0x1ff, 0x0, 0x7, 0xfff, 0x948b, 0x9, 0x15f4da0a, 0x3, 0x400, 0x62, 0x80000000, 0x4, 0x6d41, 0x8001, 0xa, 0xfffffffffffffdf7]}, 0x0) syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000100), r3) sendmsg$auto_NETDEV_CMD_PAGE_POOL_GET(r3, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x2004000) write$auto(r4, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) setpriority$auto(0x2, 0x0, 0x80000) open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) fcntl$auto(r0, 0x410, 0x0) close_range$auto(0x2, 0x8, 0x0) 4.900610694s ago: executing program 6 (id=1279): keyctl$auto(0x17, 0x4, 0x7fffffffefff, 0x400, 0x0) (async) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) (async) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000001d40), 0x40a40, 0x0) (async) readv$auto(0x3, &(0x7f0000000280)={0x0, 0xf7}, 0x87) (async) bpf$auto_BPF_ITER_CREATE(0x21, &(0x7f0000000040)=@bpf_attr_5={@target_fd=0xffffffffffffffff, 0xffffffffffffffff, 0x5e, 0x0, 0xffffffffffffffff, @relative_id=0x7, 0x9}, 0x81) (async, rerun: 64) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/mm/transparent_hugepage/hugepages-2048kB/enabled\x00', 0x22b42, 0x0) (rerun: 64) sendfile$auto(r3, r3, 0x0, 0x6) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r6 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000007c0), 0xffffffffffffffff) (rerun: 64) sendmsg$auto_ETHTOOL_MSG_TUNNEL_INFO_GET(r5, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)={&(0x7f0000000200)={0x14, r6, 0x705, 0x70bd25, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x880) r7 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000640), r4) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r4, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000001300)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="05082dbd7000fbdbdf257e0000000800db00ab29dc931f0e02b7745be74fb8e8255f614f85f94bc5ef8facda4b1cb3e135ef23203752a9a06f5adc02fe10fd6059eb5ec860fbb39453d7ba92bd5a73e0e45ce2d585cccf203901d41ed36536bffcadc5fa27dbe72d209b4c922ee03aba35fb65731b21d405c9def0", @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4004044}, 0x8000) sendmsg$auto_NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f00000012c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001280)={&(0x7f0000000240)=ANY=[@ANYBLOB="08010000", @ANYRES16=r7, @ANYBLOB="080027bd7000fddbdf2569000000060065000900000006004f01090000001700130013c366f9244357d432f6e44cc4bf4e5878fe5d00080002002f247b0005006000080000000500a3000200000045001f00ff8ddbe0dca3a0c40b31575a0fc89a052ad1070f85525f215dde201061c7ecbce4e876ab8d9dd571ee3b51789e3654f47243f6e34471afffdadef51ab57ef583e90000005c007580ba6aeb15a3f761572ca4eb336e5dfaa39a4e112524144c26d5a6468d0f3a3919ee7a2bf863f683c121bc3b2170c49b100b274baaf7e35af6d0f2356f99129b14dfb3c040f557f81b08003800000400000800e600", @ANYRES32, @ANYBLOB="05008a00080042000500f600071a0000000bc38e66a8950ee3ab259a4dffde2016f61a9d1a71fdd267b60e8be22f016b650bbcaa453fb002bcf118f0e96d4b6248efe1352050bde81bcec7d7d37591a1304ff17feb"], 0x108}, 0x1, 0x0, 0x0, 0x91}, 0x10) (async) sendmsg$auto_NL80211_CMD_REGISTER_FRAME(r2, &(0x7f0000000c40)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000c00)={&(0x7f00000013c0)=ANY=[@ANYBLOB="b40a0000", @ANYRES16=r7, @ANYBLOB="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"], 0xab4}, 0x1, 0x0, 0x0, 0xc844}, 0x20000845) msgctl$auto_IPC_INFO(0x8, 0x3, &(0x7f00000003c0)={{0x1, 0x0, 0x0, 0xff, 0xec4e, 0x4, 0xc3}, &(0x7f0000000140)=0x81, &(0x7f00000001c0)=0x40, 0x8dd6, 0x4, 0xfffffffffffffffb, 0x3, 0x81, 0xc, 0x9, 0x6fb9, @raw=0x80000000, @raw=0xe}) shmctl$auto_SHM_INFO(0xfe1, 0xe, &(0x7f0000000480)={{0x1, r8, r9, 0x2, 0xfff, 0x2, 0x8000}, 0x0, 0x6, 0x80, 0x1, @inferred=0xffffffffffffffff, @inferred, 0x7, 0x0, &(0x7f0000000440)="9f30cb5a4a4e2c1f89bcc6a9b3d325db7e1accfd8bf2975e3e26b1b605f1dadf4304182a76b5cc04deec8ab28c231af98b04f0b13c87ea39591a74d003", &(0x7f0000001ec0)="bbd679e31bce741fd8525a80de8d4f657783cfbdf948f6cc04a01b38c8484ef1da4c58339dc7001fd28d0e23ee8a819954eef2a6990a11f34109ef1e58ad58e1d7ffdac380a89e6ef84dfd6579273cbd29c8367e4da4b13ad7b8114d78230638f92b770392656a12694b194ee5c6a859fff0b958cbe581b4ae9b7db38ab69dfef1d827267507eafcfbe3fef8a51da628cafd447921c66e40ad436445f614b16b6bc26d72babdd4c93b98320512936e92ee9bfee91fbd8c27c68d472de689e0f535b7409d187663bbc384e85153f2f134bdc469cdf29517afe07c7711b8004cff341ad53ed902929eed2dc6b8882bfa44399ccb175a0cf784e23a9c4604696422978dc9b7645680edd550752861c683da14e9372b6f53c4dbf8f10f3a10db591b3080f1648f6ad267376c1677980acd2ac5b8e2ec02b383df3de64fb18b9c5a22fe628b304b05cc99999a003ca02ff178eb8902583ab11d65c42f713fe47436f99ec0f10d132fc09d6fe7f50d8df800a2c1f62de0fa18359c6c94de5b4503bf7592003cd4aa6b0674a9629b24a966bc8b2dec663151dfb6c3268f8ebb5e953525dfa6cbdf305560bf1b1abec680ccdc777dca4775d14b0b98b02da103cdd31fd8d2508f1d28028b4412349f48109340a41e6a29f569260688228798cacbe9c76e942791bdccf100bc588aed14ad3fd84ad22e120660889e089d8e5f21dabf4867bd07aaf9f68943dd9d44d7d6f4a680f64c585ed704c62c6471a0bd37f73f91c07944b59176bd7fe365b4b8b9ede40134994a4ceef0810230a55e1dcc7c89e5ac6ecad10d62b78087be2970023eaeb754ae03523d6dd2f005f3b30fd140646aad4f656c1d27afd1f6b81faf4fcd33d9ae7d6e7dea560afbc53d8a1fbe55dbeadaee1a29cba8fb37072a7ab7cce5c79d136485a6d5dfbc5e487e9981f3d10248948b08b0e6daf04daf1123f507e29a535eee15241983e19038782d6837ea8604d5a2f4cddada3c5e75e3ca7c86c9762c1ec98ba95b03a9b73ae08fe729feae91317d45919efc5323016b20803ee77112926cd9a0b3843a32ae00bdd0e4295fab430d40a0cdc43451daa0cf9471b548523702bbf1c9b682b0096ae472bd60d49bb5ad8df5774d6781f0e959f1112ae9734e85e312a8268d6c6060dcc670b93ae3354e6e8925f18220f05e6b16a5f876ce1e4839e12c195a3c63c25b70756ba2d14ee278bab794eec0c55568dc7098c33e7e978690db70eb8bc9e8c759c02b274f092e6ed20d55287133315402b7c82206b092d1062b7e2bda74ee7a2c436940ea9c76f0b6f1dbab56f7e27ed62123c37b341d8d60ea98f85512de8363d97c1994f21edf233848447eff1f6e3af52fea28c6cbcfd5c7f20fd8cb0ac125c28a88ecbf1e056054c70a1e619d7bb39090bb39bf1ee377e37db3174991f9dbded41d97f13837b9d009e4fa4ec8be8350b105d6280d55b57219cfcc020842d36244d421248792d919cc42c7c33d0a2d8350a079ba20d7835e9e53efa3778124bdfbf158087517a1df992749c5eb4df174af9185b5636175eaae908abd7fbd8df06541de8b26f332d7b55d37d9a89932641bec991ea6414fbe7dc152326613a0d4af2984b8c24c170799f0cff07ea08147a42c5be8547a5dc28e585917914e217f41adcf747a64de69e3ffb3989e5f7c6af12094999fc92e23c4cbb149abf15016868d70ca998aab879a69ee0e318ed3310d55c712609cca79434409bc893f2c8fd11ac517e0f59b7dc229170346c18e0b89289c5045c5db3f1125529cfa1e6f8493d84fc5c7ceca51d3cb62296d8701be79287c85075d503db2991d727c30f66ed7b5da781ddb2f90ae7845b0cc84c89cd971f3eab030eeddc3847ca75225342c31e2d1f6ffb2767fb1c1555bc3f8c00b2f0d83c4e216ca251accd54982bb321ad35ad592f5042e391eff6a2b8d142f4339b778e04718bde85a6666a2be1a579239b7a147ab9cb89d26feb13c8b5825cabe2378099cd5f43e9406512fcd44113a828762aa57dea04e45ae48b783a8f419f50fcc18ad5b90f8c31f6275f40ed4e80cc36e76115980c212859107b18862e8d9c50b07502a661b732633d6d58b4efe585d5ff58133a91fa1b5773a108cf7f4b2d7ca58e8e7201aa99d9e057d7205f74c74c41341fbb7b7eb671d351ad04093480e0d6d5228b9624a29dd40acd1617dd70e1a9b642a96988130983ce0b6262559007ca648f2a321a087434f71f2465325c53112f01085b5e7e1e5192305b6c4e76ba1f0da7796f433c90be7559fd69429c6ffbcfc9be6d40a141b9e08060be31faa83e3e8ab764709eb01726d607773175bdbff7221328a2a2129a4adeb9ea832b271c21e2efa57f116a229bdaf1520bc162bed213db58e65decb3c7dbeb9c0cc083dc60bcdc84edecf6bc8751199595ad39bf30cdf334555fbf90a0f2673efd4a6e115b86118fe8465b7f71b515c11125d7dce546831000c4316b27756d3f32bb345b470def63878fbcd0989310b38a2824b44bcc65003195c363c64fadcf617e10e63dc6f1f7b829db0c9276be6c620b8d8a7f7fdb054cc38370fce80026fd39f207b382ea3dadd8bed227c0c46f73f1e175c9be470654bb78a8911fffed07bc21676d7cc5096da397de037938a499d373069bfa4c869bf95f2786e565e50bca64b071a4dd9986d278797cefe75e399fa22a0be173b24bf4e9bcef636fd50e50b458c3060fef50fa7c97bcae117d08a04a8717495aeac19477265217dbb442e3fdb0d03ec63cf5b3a274ef7b0d98c1ba19b33ca3907e74d48fbf8dca454d210d3b4e30bc9c88dacbc9db72566b8aca776ed8db170ff3efd35a1424f401c1a358a6719a449a6c6065d73e4f68891557b8d5e9d93102c3be7c1b251b27d4b01476e9af9a04cbf14237bd12a4b39e2e9ba85581fbc5c32310013a562518953c08b2cc029d25e19247a000f0d9a1d7e5acc3394a1aee24e458f54c6fdae7301f9ce0976ff43bcfe1903e9bc08fc16f74a453fd558718e833cfdf86e98b07826d358aaa48391790612939cd59f49d0d3355ed641b031b0e65bc90664674ef524cee315a16b936239dbac029d0dc03d8a2216161d369cb515e6d6f4c0ec8180a5ff3c2cf483e80b89e176242fc705f812e50a2efcd8a9eac06de476d830540393f8369f8583df418010d24fba695954186c2decd227043d54f3afd5614ba3c30eea5f18380cbbacc8f1559f5e5ff26560d8316077895759d70ba4d29af1a3af495d5eb954696b5b5f0a0b538928624bd6a6d4e261a6d8d492140f1c85e050bf29b78f9b9b1081d55bb696b80bc0b4ae9b661e09fb1591045e266891b287646e10aa0e12e7057fa51bc6415d5e4f2fb9aba37b1a4e33c694c0187539252102d80d0e2b53a3b1c8900a05daaec19603973e468b31519c8042cdd34bcbaca41f4c3fa6d57e527aded58ac3e6b628e17495ec63edfa713d4f04c78492368cae0dbe0e05e52d8df502ed4cf01f54d4f87f0cc942376d95b427b1744877689c9d1d6348cf8b5635162582822e956b0ea72ec9e62cf35940449a1b66405f6e1eb19f56a5fe77737803870332639a78512b2cbb9499ee088aada16a59e138c7057fdcaea98f180d6e7b75ba283245cc2091a17c3c65fff9ec1ea37242ad53074c66cdb71ee77989c56c70a1613ed1add3ab47086cd02d7d284c80811458eb38fa5b01d1c9d0f085239f5e37ca6584db75a910f5c48b386daf7a16ace00288f3ae10cd7bbaf2111613ef7f86a9e3934763715ae5c2c7948373600efac20b197f11131f5757ca734c5a23fb9a6648d35bd846c29ea60bd96a20005c2d1b1a18acb4d754758ebb6d64fab5f94e1ecb6d4f3f88c404085345bb86ff84852a4ae98eec8570a6df22eddbf0272d2ec408e54d07e66df199a6a6cd0666c70cdd4c34fad35c9c5398c94295c5d3a6d3f61242fd7bdfee2a79bb1595aa15b99dea09585b64d3abd2bad0c5e38b72b82a4ccf05678e0a78ef94b4bd15e5186536280ca91efc749535747304857ccc60248315fd0d70a5bae6234cd34cb0caaac494101432f8766e55f2cbe96689e4f8497269f84a97edc061aafa31680e7af835426f371ecc18595a5322448cd61ad675b7ec56121c115ca4218fd573bcecc3129ab9ff1927b330839c51622f93f5356ab159c3243fc5c1babe76d36e61eb2759c0ced986e23cb5d348b51dc16f9fa677f45c7876fce490ff1809d6bc97c14aba66930493714161d21334a6e86d4e8f8e8b04f8aa24f01cafec6b533f787169fa0110d391f22732ad986e25f847e53c51cfc4025cdc47f189b785c4b4d215d86e588949cfab899dfc2f5ee9a28aac02058e0a5d2c53e4df7515f23d5a97b2242d72c338a205ac6ec0be1f0bf32b0b9be864be78b7c62b3e7b6268cd44c916e7c664e2841bbf10fc5fe49ac04c5038cedd282f88655e253103eee1d373132b4f522aab31fdc9749c6af1c207a0e484352168883b57b06e9495bf531b31ab7a8d19230af3a278e9c87b8b9b199be02d8d24516c67d2c46fbc9c54cace8b7c147649c39d91be8040978a8baefcf60dbf23f2bf44aa4f2ff332795e8023cd3c854c877a7c502687c95f4bf22a20e9ab1747f49df9db6804cc262399a8b71a487c49529aa5830abe4448747960b7ae62730cd043d56babd8b4c5d9b871d845f9a413576ce771b73430bd804524e9bf69cc63f639c5d98857708da64f751a6fa10f322c5077984ab2c48abf9702cd2e82c4e0e83558113f89739d086764ed115af217793498b94b14627ed645a4fd921870eaddd8a6e000faad3a751bf9306a6109d6b8e6808aed3809f7ecd3b4c55fe6cc559c213013c0084263301fafd8edb849ba5d2e12a638cc45a30909c4d897fe0b9e102f2018644833cfebc75fe7c9668af22235659e604933c4af673d30586f755de8b3bbe728ac41a24185bc170a7006f56561f6637768884d859ca30dfae813fb0373d08e6c37e36e81dbc89edcd66e29e2ad9c13031b344fc374fcd84a0f7de6faab5dcac3d07fff06ea4cce199a8acdcc9f1c5c4ee88d870d8fd63348e59f1c07b3e45d6d9bc430d68a1be18081b486c9893d584ac9b842a1dbf65d87be319dbe314922bd3bce73772aea4146a0ecbfe2f909e90366bc2035778c5c34f79644e73d36f5959306ec355b0a58d0a8f0de426721758b8998aa6ad4059cbb17640f64c244adddd1187e0cde110f5c110afac8605ad2196c760221502aa203f954321e1ca7c96c630ac10672d609a2aee5d102f3b33cd8744493b48687ac370135671a51becbfd857b36b3903bb14483bfc78794e4b8b19d48ab94048d5cfb8fa6275eee9d4e13e5fd1e0cd9b7d5b874752c1e0e67730756ff5ef91cf4647e0a64937b4e146fd872d8d0a48d4387545e85c7a9983d1b4a04670a8ab4e643dcd9bd7c8c114a6c8b411a07e68eb2a46fcd31269684040be537fb102201aa058c97c8a823c365a55c17f0dbdc4a9210a60307843763b453e0028343ecd7e298a4b9acbc02b864b5c1b72c95d9a750d155d90aedb1cfafee29c55186315a45cac29c0be7170841aacdfc173ffadfee753eca49915fdc5b8f5fa15cd7160eac3f9121f2f32f20719a5c8c0a7f69863d3cfcf611cd66b6d6f2decfe2e006aa7069211299c3aaa9d3b43685afbaafaeb6f10d41d7ed4e9adbac04067c680a67559a9711d95be9b8a7a4c0f30079cb43dc7a15454904567095d51a58890728d1b24fd3c412865c3f27ccbc3a26eb265904bdca09fc"}) (async) r10 = setfsuid$auto(r8) (async) io_cancel$auto(0x9, &(0x7f0000000c80)={0x2, 0x200, 0x2, 0xe, 0xfff9, r1, 0x0, 0x6, 0xff, 0x0, 0x6, 0xffffffffffffffff}, &(0x7f0000000cc0)={0x9, 0x7, 0x10001, 0x400}) sendmsg$auto_NL80211_CMD_DEL_MPATH(r11, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000005c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="2400000033b6a8253ca85f4f98972aefd6129525fc0f556c8e2562617ea357ba2e8305321b8953691de2887166fe8cd54e2945d904c5aa2e9e12ee699fb6022ef80900b30931ad9f4201f0c20fca0693292c8f9e763000456ee461397f79d9eb73ff38dfde2ce4e8a4620e9ac0df71457a2bf66d30723822dedf393bb6667b29a0938e3c534e76f6b871fd1d0bf6063bd551a5de3269b01a913d5a833d75", @ANYRES16=r7, @ANYBLOB="08002abd7000fcdbdf251800000005008a00030000000500ac0018000000"], 0x24}}, 0x40) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptyt9\x00', 0x41, 0x0) (async) fanotify_mark$auto(0xffffffffffffffff, 0x205, 0xa, 0x4, 0x0) (async) close_range$auto(0xffffffffffffffff, r3, 0x1) (async, rerun: 64) r12 = setfsuid$auto(0xee01) (rerun: 64) setresuid$auto(r10, r12, r10) (async) socket(0x23, 0x2, 0x0) (async) ioctl$auto_XFS_IOC_GOINGDOWN(r0, 0x8004587d, &(0x7f0000000500)=0x200) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) (async) getsockopt$auto(0x3, 0x200000000001, 0x1c, 0x0, 0x0) (async) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) 4.62506457s ago: executing program 5 (id=1280): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) io_uring_setup$auto(0x2, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x0, 0x5, 0x0) openat$auto_ep0_operations_inode(0xffffffffffffff9c, &(0x7f0000000000), 0x8a001, 0x0) epoll_create$auto(0x20003f) open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) fcntl$auto(r0, 0x410, 0x0) mknod$auto(&(0x7f0000000040)='\xfd\x90\x8f2\x14\x92\x00\xbf\xdf\xcf\x9a\xae}\xd9\xf95\xc5gV\x82\f\xe5h\xfe\x83\xe4\xbe\x8c\x1f\xa5\xf1_T\xde\xf7\xd4\x83D\x9eXS\xd6\x90T\xc1v\xad#\xc4q\x8b\xed2\xadW:0\xef\x9c.=\xba\x0fy\x8f\xcd\xd6\xde\xa9i\xec\xe8\xca\x9f\xf3\x82b\xa2y\xa87J\xfc \xc5\xd8\x80\xba\xaaV\x8f{\x1f\x1b\xb0\n\x97\\\xa7\xe3\xdf\xc29-*;#r\xc8\xd1\x14RcF\x87\xe4\x1c\x1fGL\xa5\x19\x90\xd6\x8d*\xe6\b(\x1a\xea\x95\xdc\xa6)5\xae&yAl\x1e\xe3j Lp\x91\r\xed%\xafZ\xf8w\xf2}\xcdGS\xce\xb9\xdck\x86\x00.6\xe6{\xc1\x00\x1bW5\x81\xda!\xcb.O\xa9\xf3\xa7\x88+\xb9\xf3\x9a7\xa4\xe6)<\xa79\xa4\x87\\\xb4\xbf\v\x03\x87\xac\x87r\x02\x05\xdb\xe4\xde,V\xb6G\xba.WR\xe2<~\xdd\xb2\xe53hj_;\xa5qm\x92\xc7P\xc9.\x82w8\x1f\xfcX\xe4\x14\xc72cC\xd3\x00'/263, 0x1, 0x4) 4.181564149s ago: executing program 5 (id=1281): close$auto(0xffffffffffffffff) r0 = openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x501, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000100), 0xffffffffffffffff) r1 = openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$auto_dma_heap_fops_dma_heap(r1, 0xffffffffffdffe00, &(0x7f0000000140)=';') socket(0xa, 0x1, 0x100) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat$auto_rng_chrdev_ops_core(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) read$auto_rng_chrdev_ops_core(r2, &(0x7f0000000040)=""/4096, 0xfffffe82) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', 0x0, 0x1000005, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/net/rpc/auth.rpcsec.context/channel\x00', 0x101002, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x11a001, 0x0) openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, 0x0, 0x40000, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) ioprio_set$auto(0x3, 0x0, 0x4b34) madvise$auto(0x16, 0xffffffffffff0005, 0x19) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x68, 0x0, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@HSR_A_IF1_AGE={0x8, 0x3, 0x3}, @HSR_A_IF2_SEQ={0x6, 0x7, 0x8000}, @HSR_A_IFINDEX={0x8}, @HSR_A_NODE_ADDR_B={0xa}, @HSR_A_NODE_ADDR={0xa}, @HSR_A_NODE_ADDR={0xa, 0x1, @local}, @HSR_A_IF2_AGE={0x8, 0x4, 0x9}, @HSR_A_IFINDEX={0x8}, @HSR_A_IF1_AGE={0x8, 0x3, 0x1}]}, 0x68}, 0x1, 0x0, 0x0, 0x18a64d47ddeca1f0}, 0x40090) socket(0x2, 0x3, 0x100) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) epoll_ctl$auto_EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000001040)={0x2, 0x3cf}) 3.56937141s ago: executing program 6 (id=1282): r0 = timerfd_create$auto_CLOCK_REALTIME(0x0, 0x1ff) r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000000), r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_smbd_genl(&(0x7f0000000080), r2) sendmsg$auto_KSMBD_EVENT_LOGIN_REQUEST_EXT(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r3, 0x2, 0x70bd2d, 0x25dfdbfb, {}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40800}, 0x2000001) r4 = syz_genetlink_get_family_id$auto_batadv(&(0x7f00000001c0), r0) sendmsg$auto_BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r4, 0x300, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_TT_FLAGS={0x8, 0x15, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) r5 = prctl$auto_PR_SCHED_CORE_SHARE_TO(0x800, 0x2, 0xffffffffffffffff, 0x5, 0x1ff) r6 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000300), r2) sendmsg$auto_NL80211_CMD_ADD_LINK(r5, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x48, r6, 0x10, 0x70bd26, 0x25dfdbfb, {}, [@NL80211_ATTR_P2P_OPPPS={0x5, 0xa3, 0xff}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x4e22}, @NL80211_ATTR_WIPHY_NAME={0x7, 0x2, '-,\x00'}, @NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5, 0x1d, 0x1d}, @NL80211_ATTR_WIPHY_TX_POWER_SETTING={0x8, 0x61, 0x9}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_WIPHY_RTS_THRESHOLD={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x811) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$auto_802_15_4_mac(&(0x7f0000000480), r5) sendmsg$auto_IEEE802154_SCAN_REQ(r7, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x44, r8, 0x700, 0x70bd26, 0x25dfdbfb, {}, [@IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x6}, @IEEE802154_ATTR_LLSEC_SECLEVEL={0x5, 0x2a, 0x9}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xb4}, @IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5, 0x37, 0x8}, @IEEE802154_ATTR_DURATION={0x5, 0x15, 0xa}, @IEEE802154_ATTR_SRC_SHORT_ADDR={0x6, 0xb, 0x7}]}, 0x44}, 0x1, 0x0, 0x0, 0x44004}, 0x4000) ioctl$auto_USB_RAW_IOCTL_VBUS_DRAW(r5, 0x4004550a, &(0x7f00000005c0)=0x3) sendmsg$auto_BATADV_CMD_GET_BLA_CLAIM(r5, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x64, r4, 0x2, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_TT_TTVN={0x5, 0x11, 0x26}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x4}, @BATADV_ATTR_MESH_ADDRESS={0xa}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0xe}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_DAT_CACHE_IP4ADDRESS={0x8, 0x23, @rand_addr=0x64010101}, @BATADV_ATTR_ROUTER={0xa, 0x1d, @broadcast}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xfffff7d3}]}, 0x64}, 0x1, 0x0, 0x0, 0x4094}, 0x0) r9 = syz_clone(0xc0000, &(0x7f0000000740)="cae0abad69b60e042cdba3023e9aa0a5fec24729590a8817539b95a3b3ccbbd381f34bde466298fce9f4fdbda3feb0d83df3f69531578e388bc34fc39fb5881d3f5c951d4a236e60e15423ba12193d20759b69440213334a2416c648c4f871d025e74546b92e465fc8e46337d53636e085e30f3094178903aecbd738914f86afd5ec0ce8254a433eb535a21e8893bfaf8a847ebc01b5c21ce76827c83cc80d378fffe6134edc6d597d400df3a1d0f5ef7549ea61", 0xb4, &(0x7f0000000800), &(0x7f0000000840), &(0x7f0000000880)="610e764c06bdaaff74db10b94590faa5b36a4c45f4921620638b73bb9fe3b8b134162ef51233f8891069770ee1f25d5249dec0a4aa7b154e15efc8821f404c9bbfd7b50be1a30d0ecb6a5b2794be3b4db4973ffdd6204d6bc309d30d0aad1fb0d23a57ee1b006117dc177609cd80ec1f36588a1e70eedfb2f5c874fbbe856e50d7631a8318763557abdba2ed04c41db42e9355c37c10de08476588e99610470b392e6b174f2109fa20134330c7b647b8985f1765b837f813e3fc706de4d5") sendmmsg$auto(r0, &(0x7f0000000c00)={{&(0x7f0000000940)="ed224345d48f5ca910c93834ab49c3cbbdc4b37f6c6f22322921abdb72afab3d687c9b6955ad190c8fb3e11bf014a628b04c78e99d5c2161385e0355819fbadf9417b8cd13ef70454053f667a0be3198ac1f5dc909eba9c67b16e2228e0dd8b73cf68faa10894a524d69571a5395d1ce810f44fe74accad58f7cceb9d8ac505078cfb65b621b8bf056851ac0e75b6717d9e32213b2f800493a0bdb79c3eafdeee089946099afb1ce2da96cd4f4c520ad5468d71cd48173644f3cf3", 0xff, &(0x7f0000000b00)={&(0x7f0000000a00)="7c220e50fbdb59710fa449e71393b2d808c14930dabeb4f4cf3ef79a3c22ae3b6d05b7f41fcb42496d4eb9de09e34e3b12e4208cb9ec5fc142d306e0bf12b8927cb8e531fbb561ce6b0d36f379e692087445e4c74f25ce52f56d312b9e19d7397e8960539fbc151f75c2de888d9261b21aa58bdcb49a2761aa42ed887830db2072925742be42128515b744e343e38f05a43ef6f5163f034fc60975d76155ffe7917f6976069b61de90c29bd3245eb6724d515789dd683e2da2723f27fe5052f1167dbfc405c5b91b2d9429843631c4d2af21489a56faf5d1a0a0f8127f978d5ff7ed935f5a6f66ed7e8ae0a791beaa8f", 0x8}, 0x3a, &(0x7f0000000b40)="b2b5dc792cef7a9d52e3f3a243902efdfdefacfb5ec51b5ec645b498a3628534c82bf2d6dee1969c9ec88702d9eb164b0f5c062a8805180cfbe3b8533acea6fe403bd85983d3003eaeb5d3bd015875319775d316952f1a89a69003bb70d253a8a779e7ccf155c2d0978b563b8b7d7936d8474250ceaa694dbfd0584f3c78264025f27917d2dc84f0979698cf8e180c434c099655cb5019adf67cc82cd0a5662688b81f624e4e", 0x6bb, 0x7}, 0x7}, 0x3, 0x8) landlock_add_rule$auto_LANDLOCK_RULE_PATH_BENEATH(r5, 0x1, &(0x7f0000000c40)="228ba0e8eeae1278b51ec75a4759d60d29413d0344b442f5629c90bd9ab303394c176f49a07809bd68aa427dfe74c536c6d6363bcf34d9e1104e1ed10e6b1dd127224fa52661a74ebc6b49572a9044f2bc60e458600a37ecb54b351eada11cb07d46a8487a24f22018ed711661b385f0b975abaca80cb7f8b6af84e0f0a8d9008f377d1a15bd4cbed310f46aced9239e63968c2888f2f524e52af6e218a0a70557e6e75b8082a916223081848b5a953226ba9ce513b54708c3ca3590093da6091b82098e61055e375f9671", 0x5) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000d80)={'virt_wifi0\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_MCAST_RATE(0xffffffffffffffff, &(0x7f0000000e80)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x40040}, 0xc, &(0x7f0000000e40)={&(0x7f0000000dc0)={0x4c, r6, 0x8, 0x3d, 0x25dfdbfe, {}, [@NL80211_ATTR_COLOR_CHANGE_COUNT={0x5, 0x12f, 0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_MBSSID_CONFIG={0x28, 0x132, 0x0, 0x1, [@NL80211_MBSSID_CONFIG_ATTR_INDEX={0x5, 0x3, 0x6}, @NL80211_MBSSID_CONFIG_ATTR_TX_IFINDEX={0x8, 0x4, r10}, @NL80211_MBSSID_CONFIG_ATTR_INDEX={0x5, 0x3, 0xf2}, @NL80211_MBSSID_CONFIG_ATTR_MAX_EMA_PROFILE_PERIODICITY={0x5, 0x2, 0x1f}, @NL80211_MBSSID_CONFIG_ATTR_EMA={0x4}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4840}, 0x4080) r11 = openat$auto_random_fops_random(0xffffffffffffff9c, &(0x7f0000000ec0), 0x0, 0x0) getsockopt$auto_SO_TIMESTAMP_NEW(r11, 0x9098, 0x3f, &(0x7f0000000f00)='\'+\x00', &(0x7f0000000f40)=0xfffffffc) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000f80)='/proc/thread-self/net/can/rcvlist_fil\x00', 0x24000, 0x0) sendmsg$auto_ETHTOOL_MSG_RINGS_SET(r7, &(0x7f0000001080)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001040)={&(0x7f0000001000)={0x1c, r1, 0x4, 0x70bd28, 0x25dfdbfd, {}, [@ETHTOOL_A_RINGS_RX={0x8, 0x6, 0x25}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24040885}, 0x0) kill$auto(r9, 0x7) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000010c0)={'virt_wifi0\x00'}) settimeofday$auto(&(0x7f0000001100)={0xbd, 0x5}, &(0x7f0000001140)={0x2, 0x1000}) ioctl$auto_SNDCTL_DSP_SETFRAGMENT(r5, 0xc004500a, &(0x7f0000001180)="e9503976663bd5e510aed27b00e7990e6150aab59485da1b785c4a654eafb4f7d65e6d058e1c17c8e0def3878e2c32467eaeb1307a30c2f15c4cc916043cce8603891519e0ebdd3e78c649c4760e5adb10939ddca6a782c88d67a263da14b2b9f4860b70060674629eddb361c15033d429383f777a791ed42f") sendmsg$auto_ETHTOOL_MSG_PLCA_SET_CFG(r5, &(0x7f0000001340)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001300)={&(0x7f0000001240)={0x90, r1, 0x2, 0x70bd29, 0x25dfdbfb, {}, [@ETHTOOL_A_PLCA_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x80000000}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_PLCA_NODE_CNT={0x8, 0x5, 0xc}, @ETHTOOL_A_PLCA_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_PHY_INDEX={0x8, 0x4, 0xffffff0f}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @ETHTOOL_A_PLCA_ENABLED={0x5, 0x3, 0x1}]}, 0x90}, 0x1, 0x0, 0x0, 0x20040045}, 0x4005040) sendmsg$auto_NFSD_CMD_POOL_MODE_SET(0xffffffffffffffff, &(0x7f0000001440)={&(0x7f0000001380)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001400)={&(0x7f00000013c0)={0x40, 0x0, 0x20, 0x70bd25, 0x25dfdbfd, {}, [@NFSD_A_POOL_MODE_MODE={0x7, 0x1, '\'+\x00'}, @NFSD_A_POOL_MODE_MODE={0x9, 0x1, '[!{}\x00'}, @NFSD_A_POOL_MODE_MODE={0xc, 0x1, 'ethtool\x00'}, @NFSD_A_POOL_MODE_MODE={0xc, 0x1, 'nl80211\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000001}, 0x200088c1) 3.285329278s ago: executing program 5 (id=1283): openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x745100, 0x0) openat$auto_proc_mem_operations_base(0xffffffffffffff9c, 0x0, 0x10000, 0x0) openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, 0x0, 0x42000, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/zswap/parameters/compressor\x00', 0x80002, 0x0) write$auto_ocfs2_control_fops_stack_user(r0, &(0x7f0000003900)='\t', 0x1) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/rcutree/parameters/rcu_resched_ns\x00', 0x20000, 0x0) read$auto(r1, 0x0, 0x20) (fail_nth: 3) 3.204617605s ago: executing program 1 (id=1284): openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000200)='/dev/snd/controlC0\x00', 0x222101, 0x0) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, r0, 0x0) socket(0x10, 0x2, 0x4) close_range$auto(0x2, 0x8, 0x0) socket(0x22, 0x2, 0xf43) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x7ffe) openat$nci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) io_uring_setup$auto(0x85, 0x0) openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/binderfs/binder0\x00', 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_sg_fops_sg(0xffffffffffffff9c, 0x0, 0x60042, 0x0) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x8000000000000000, 0x15) brk$auto(0x40008000) r1 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/net/rt_acct\x00', 0x28000, 0x0) socket(0xa, 0x2, 0x88) socket$nl_generic(0x10, 0x3, 0x10) getgroups$auto(0xe, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xe841, 0x0) pread64$auto(r1, 0x0, 0x800003, 0x270) openat$auto_proc_uid_map_operations_base(0xffffffffffffff9c, 0x0, 0x109800, 0x0) socket(0x2, 0x5, 0x0) openat$auto_bm_register_operations_binfmt_misc(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) openat$auto_vcs_fops_vc_screen(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x2a801, 0x0) socket(0x2, 0x3, 0xa) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000004000)='/dev/audio\x00', 0x102, 0x0) 2.906212446s ago: executing program 2 (id=1285): r0 = socket(0x2b, 0x1, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) poll$auto(&(0x7f0000000040)={0x3, 0x0, 0xa}, 0x5, 0x108) sendmsg$auto_NL80211_CMD_START_SCHED_SCAN(r0, 0x0, 0x20044025) connect$auto(0x3, 0x0, 0x55) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0xa, 0xd, 0x1, 0x948b, 0x4, 0x15f4da0a, 0x7fffffffffffffff, 0x3, 0x0, 0x1, 0x7, 0x6d39, 0x5, 0x2, 0x1]}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002780)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="1b0026bd7000fe0700000000000004000380040008000400028012000100898035000000000000000000000000000c000380050017801f000000"], 0x40}, 0x1, 0x0, 0x0, 0x4004040}, 0x4800) setresuid$auto(0x0, 0x0, 0xee00) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x0, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) clock_adjtime$auto(0x0, 0x0) r3 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video3\x00', 0x2aa01, 0x0) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) r4 = openat$auto_generic(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/ieee80211/phy4/netdev:wlan1/stations/08:02:11:00:00:00/rx_duplicates\x00', 0x311802, 0x0) read$auto_trace_options_fops_trace(r4, &(0x7f00000000c0)=""/150, 0x96) close_range$auto(0x2, 0x8, 0x0) socket(0x1e, 0x4, 0x0) socket(0x3, 0x3, 0x7) accept$auto(0x3, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xac}, 0x5, 0x0, 0x1, 0x697b}, 0xed7138c}, 0x2, 0x9) r5 = socket(0x18, 0x80000, 0x0) connect$auto(r5, &(0x7f0000000180)=@in={0x2, 0x0, @rand_addr=0x800}, 0x1e) pkey_free$auto(0x0) setsockopt$auto_SO_TIMESTAMPNS_OLD(r3, 0x100, 0x23, &(0x7f00000001c0)='\x00', 0xa9) 2.841550197s ago: executing program 5 (id=1286): openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/mtd0\x00', 0x101102, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r1) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)={0x1c, r2, 0x4, 0x70bd2c, 0x25dfdbfc, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x4000000) sendmsg$auto_NL80211_CMD_GET_REG(r1, 0x0, 0x1ea0e65cd64b4e7a) r3 = syz_genetlink_get_family_id$auto_taskstats(&(0x7f0000000080), r0) r4 = syz_clone(0x4001000, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = wait4$auto(r4, 0x0, 0x80000002, 0x0) r6 = getpid() process_vm_readv$auto(r5, &(0x7f00000000c0)={0x0, 0x6}, 0xcd1, &(0x7f0000000240)={&(0x7f0000000740)="46f4cbefb35f1fe5746024d227f74ff570700ecd4c7eff10da71b58731c5490b113cc490d8bcae86a3c1718737e8f07d4da97c07933b8e6aa9f45cf21bd42b9f0448acae6bee0638f1a8760cfaed6e1ccf5e70112ee77c4c2c9bf903ea46d1b56de67ba3f15b9c746526e62cb326b7530a2395f312f774bdbdce1d50fc297b7ed4b0340fb4373b4b6832fe00"/149, 0xffffffff}, 0x6, 0xa) open(&(0x7f0000000040)='./file0\x00', 0x104080, 0x0) write$auto_ftrace_enable_fops_trace_events(0xffffffffffffffff, &(0x7f0000000480)="a3a5ef09b5b35e13fae05cbc144f87d25db57560747a31736099f3281707ee3727cf3a430c340438cf2bfc7622074b9cbd47d33a8fcc675f800755e14e21f777602953a87d9d7c2e49c932f1c5241418c259f5e2a1b2506163116b184ac8d1b86457b107f50c1c04046b61946a73c534101cb745306fc6af1c74a0f948cb1d73e2ac13580c7e32d54d85beec07ff2eb69c8d41a15984f1972e642b9b23b6c352632fb7b4c1b5feef4cd41f6952484f2055b21b907aa67292afa156dbcc05f7e43ab888bb5aefab91adddec67f53b894be7cde4053ad343efdb327b2857bd7a81f8f6cee1360bcea5d4953e7b0bb9c8806ecef879dcc644e379fbc46c61b31442cc91b967248f93ff7d880fe329752c8bb0be92332475e4f68c16a6a16223ad74ddbcc179c23864bc078e5f6da6ab5069a129c08405ad1a796579347900000000000000002002f495a6824c9aeeae072347691188122d5bdd4b176aa40fe16f6f69f5dffbf63cee5af8facd6f083d35c609173ad85431a24a04d800275057a42ae08f9946f02cc0fcff16db4f719477937bcd107cc88d951326d537efad9840ab2898691d21d6f5ba539cebd073a20e7101b11866edc69c364300d1af3f366af7cbea46921c542e9fdcdbe614a8c5bc635b1b9fd0ea8019192416e2818de6b5c829fcb1551ef3c3916e45f32dca9915be6caef6da2dba8c099d2dbe6b8099afd4e5e1aa355a1a0be46fe5e9a26d9ed0667759cd68ba2a2fff7844016cdda98ad718ed1267d56bc79041edb3f9cf377f16cdd8d812399281f458f6612f66ea5fff4152a388998f91c8784d098277ac9770ffb1245e1e3b0df4d8718733b1aba36eec1fa1b52d01361090a92b65846b9d84bef1c73cb06b9c63d4296e2e08fc654dcdf74e61a88f74ae7f08", 0x28a) mount$auto(0x0, &(0x7f0000001500)='./file0\x00', &(0x7f0000001540)='cifs\x00', 0x8002, &(0x7f00000001c0)) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_readv$auto(r7, &(0x7f0000000000)={0x0, 0xfff}, 0x40000000001, &(0x7f0000000180)={0x0, 0x6}, 0xa, 0x0) r8 = gettid() sendmsg$auto_TASKSTATS_CMD_GET(r1, &(0x7f0000000180)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000140)={0x24, r3, 0x0, 0x70bd26, 0x25dfdbfb, {}, [@TASKSTATS_CMD_ATTR_TGID={0x8, 0x2, r8}, @TASKSTATS_CMD_ATTR_PID={0x8, 0x1, r6}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r9 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0xe5705f00791bbbdc, 0x0) mmap$auto_tracing_buffers_fops_trace(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x9, 0x110, r9, 0x6) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001080)='/sys/devices/LNXSYSTM:00/LNXPWRBN:00/input/input0/modalias\x00', 0x80500, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x2) mmap$auto(0x0, 0x6, 0x2, 0x40eb2, 0xffffffffffffffff, 0x308000000000) move_pages$auto(0x0, 0x1002, 0x0, 0x0, 0x0, 0x2) read$auto(0x3, 0x0, 0x7fffffff) openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, 0x0, 0x1a1000, 0x0) unshare$auto(0x40000080) prctl$auto(0x4000002a, 0x9, r4, 0x46, 0x0) 2.61721379s ago: executing program 6 (id=1287): close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = io_uring_setup$auto(0x3, 0x0) socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0x20004, 0x1ff, 0xeb1, 0x8000000000000024, 0x8000) ioctl$auto_PPPIOCDISCONN(r0, 0x7439, 0x0) r1 = open(&(0x7f0000000800)='./file0\x00', 0x62240, 0x154) prctl$auto(0x43, 0x2000017, 0x0, 0x0, 0x0) execveat$auto(r1, &(0x7f0000000040)='\x00', 0x0, 0x0, 0x11000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x1d, 0x2, 0x7) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) setsockopt$auto(0x3, 0x1, 0x1d, 0x0, 0x8) bind$auto(0x3, &(0x7f0000000040)=@can={0x1d, r3}, 0x6a) sendto$auto(r2, 0x0, 0x6f9, 0xfffffff8, &(0x7f0000000440)=@can={0x1d, r4}, 0x36) close_range$auto(0x0, 0x5, 0x0) openat$auto_ep0_operations_inode(0xffffffffffffff9c, &(0x7f0000000000), 0x8a001, 0x0) epoll_create$auto(0x20003f) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0xffffffffffffffff, 0x2) socket(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x801, 0x84) socket(0x18, 0x5, 0x1) getsockopt$auto(0x3, 0x200000000001, 0x1c, 0x0, 0x0) open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) 2.031277347s ago: executing program 6 (id=1288): openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/tty7\x00', 0x101e81, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/nbd12\x00', 0x6600, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram2\x00', 0xe883, 0x0) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop10\x00', 0x103082, 0x0) ioctl$auto_SG_GET_RESERVED_SIZE(r0, 0x4c00, 0x0) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0x802, 0x0) openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000000)='/dev/binderfs/binder0\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nfsd(0x0, 0xffffffffffffffff) r1 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000180)='/dev/bus/usb/036/001\x00', 0xa901, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0xa, 0x1, 0x44f, 0x7, 0x5, 0x7181, 0x1ffdf, 0x7, 0x3, 0x8, 0x9, 0x80003, 0x4, 0x200000000001, 0x1, 0x9, 0x8, 0x10006, 0x400007f, 0xffffffffffffffff, 0x0, 0xe, 0x22000, 0x200, 0x0, 0x84, 0x0, 0x0, 0x0, 0x4, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000, 0x1]}, 0x1fa, 0xd) sendmsg$auto_NL802154_CMD_NEW_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYRES16, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="000000050011000600000005002900010000001800"], 0x1d0}, 0x1, 0x0, 0x0, 0xc880}, 0x0) r2 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000000180), 0x1541, 0x0) ioctl$auto__ctl_fops_dm_ioctl(r2, 0xfffffff7effffd05, &(0x7f00000001c0)) ioctl$auto_USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000100)={0x2, 0x0, 0x4, 0x81, &(0x7f00000001c0), 0x9, 0xeb8e, 0x0, @number_of_packets=0xfffffff7, 0x7, 0x800476, 0x0}) r3 = socket(0x2b, 0x1, 0x0) listen$auto(r3, 0x1) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) socket(0x2, 0x2, 0x1) mkdir$auto(&(0x7f00000000c0)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f0000000040)='}[,&*}\x00', &(0x7f0000000080)='nfsd\x00', 0x7, 0x0) chdir$auto(&(0x7f0000000000)='}[,&*}\x00') madvise$auto(0x0, 0x7fffffffffffffff, 0xa) r4 = pidfd_open$auto(0x1, 0x0) setns(r4, 0x60020000) syz_clone3(&(0x7f0000000440)={0x1341a4480, 0x0, 0x0, 0x0, {0x29}, 0x0, 0x0, 0x0, 0x0}, 0x58) fanotify_init$auto(0x5, 0x0) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) 1.277624547s ago: executing program 1 (id=1289): r0 = socket(0x10, 0x2, 0x0) (async) io_uring_setup$auto(0x80000001, &(0x7f0000000080)={0x7fffffff, 0xd, 0x1020, 0x206, 0x10007, 0x8, 0xffffffffffffffff, [], {0x27, 0x8, 0x21bb9432, 0x4, 0xffffffff, 0x7f, 0x40101, 0x6, 0x2}, {0x100, 0x7, 0x7, 0x1, 0x1, 0x3f, 0x76c4, 0x80008, 0x2}}) r1 = openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000040), 0x880, 0x0) (async) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card1/pcm0c/sub6/hw_params\x00', 0x62842, 0x0) write$auto(r2, 0x0, 0xffff) (async) epoll_pwait$auto(r1, 0xffffffffffffffff, 0x3, 0x2, 0x0, 0x8) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000", @ANYBLOB="130027"], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40000) (async) sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x8) 1.074719998s ago: executing program 6 (id=1290): openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000200)='/proc/modules\x00', 0x88880, 0x0) (async) r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) r1 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/snd/controlC2\x00', 0x8100, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f0000000040)=0x5) r2 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC2\x00', 0x80, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r2, 0xc1105517, &(0x7f0000000580)={{@raw=0x7fffffff, 0xf0ee, 0x20009, 0x3, "790eaa00ffff8eac2cdafc1f64010043eeb0b053030001ffff000e00", @raw=0x1}, 0x8, 0x966, 0x3, @raw=0x404, @integer={0x800000000000400e, 0x2000000b752, 0x1}, "6cc1294d63a4f1b4285854c5368de438f8cc142ef6df12bf3373a1183bedbd31b642b4051b078fa1c1c61c329794e5311121c760cb9611c78e6947a99807bcc1"}) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_LIST(r1, 0xc0505510, &(0x7f00000001c0)={0x0, 0x8, 0x5, @inferred=0xffffffffffffffff, 0x0, "5059d005d689f01a18c00f29b5fa49429146f0fced3c14fab52cc63a1547e39e1154bf627c7fd574bccc61a93bf6de84233c"}) (async) write$auto(0x3, 0x0, 0x5c8) (async) mmap$auto(0x0, 0x5810, 0xffb, 0x8000000008011, 0x3, 0x0) (async) getsockopt$auto_SO_PEERNAME(0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='}..\x00', &(0x7f0000000040)=0x1d3e) (async) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x3fd, 0x8000) (async) arch_prctl$auto(0x1004, 0xe735) (async) select$auto(0x8, 0x0, 0x0, &(0x7f0000000240)={[0xe, 0x91e3, 0xb, 0xc, 0x0, 0xf58, 0x3, 0x104412d, 0x8, 0x0, 0x4, 0xd, 0x8000000000000, 0x84c, 0x3, 0x7]}, 0x0) pipe$auto(&(0x7f0000000080)) (async, rerun: 32) ioctl$auto_SNDCTL_DSP_SPEED(r0, 0xc0045002, 0x0) (rerun: 32) 825.533047ms ago: executing program 1 (id=1291): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_LISTENER_SET(r1, &(0x7f0000005380)={0x0, 0x0, &(0x7f0000005340)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="2101be81d86d9cf5dd0000000000ba07355785cec70c3fc6afc4dfa2cd02cac2f53789bb815899ff9e0bfffd9cb56bbd28866a805d29e72d8ea2c564bbe4f191cbc9ab4083892980"], 0x14}, 0x1, 0x0, 0x0, 0xc000}, 0x40051) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_TSINFO_GET(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200f7e3538cb6f5e706ab713b7f4d4e3ea0000cf", @ANYRES16=r4, @ANYBLOB="000225bd7000fcdbdd25190000000c0001800800030007000000"], 0x20}, 0x1, 0x0, 0x0, 0x4010}, 0x4048800) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000540), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) mmap$auto(0x0, 0x5, 0x4, 0xeb1, r0, 0x4) r8 = openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/ieee80211/phy7/statistics/dot11FCSErrorCount\x00', 0xc1, 0x0) write$auto_debugfs_full_proxy_file_operations_internal(r8, 0x0, 0x20) sendmsg$auto_ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB='\x00'], 0x14}, 0x1, 0x0, 0x0, 0x40001}, 0x800) r9 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f00000003c0), r5) sendmsg$auto_NFSD_CMD_POOL_MODE_SET(r5, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)={0x44, r9, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@NFSD_A_POOL_MODE_MODE={0x7, 0x1, '-/\x00'}, @NFSD_A_POOL_MODE_MODE={0xf, 0x1, 'net\v\x00\x00\x00im0\x00'}, @NFSD_A_POOL_MODE_MODE={0x6, 0x1, ':\x00'}, @NFSD_A_POOL_MODE_MODE={0xf, 0x1, '^\t\x00\b\x00\x00\x00\x00\x00\x00\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$auto_ETHTOOL_MSG_RSS_GET(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="847a34b471853eaa904b147b820d8900", @ANYRES16=r4, @ANYBLOB="000227bd7000fcdbdf2526000000080002000700000008000700060000000400018008000200090000002000018008000100", @ANYRES32=r7, @ANYBLOB="140002006261746164765f736c6176655f31000014000180080003000900000008000100", @ANYRES32=r7, @ANYBLOB="0800070002000000080007000004000008000200836500000800070009000000"], 0x84}, 0x1, 0x0, 0x0, 0x8000}, 0x20048000) sendmsg$auto_NFSD_CMD_LISTENER_SET(r0, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB='\x00'/14], 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x200048d0) r10 = syz_genetlink_get_family_id$auto_ncsi(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_NCSI_CMD_PKG_INFO(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f0000000d00)=ANY=[@ANYBLOB="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", @ANYRES16=r10, @ANYBLOB="020025bd7000fbdbdf2501000000080003000500000008000100", @ANYRES32=0x0, @ANYRESOCT=r6, @ANYRES64=r5, @ANYBLOB="3e0dc10c1c7d3e66ccd1a0f0ba5a9f4489e3179a912713d6b2614eafeffbc4a991"], 0x24}}, 0x408c0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) close_range$auto(0x0, 0xffffffffffffffff, 0x4000000000002) eventfd$auto(0x1) openat$auto_mISDN_fops_timerdev(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r11 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) r12 = ioctl$auto_KVM_CREATE_VM(r11, 0xae01, 0x0) ioctl$auto(0x3, 0xae60, 0xffffffffffffffff) r13 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$auto(r12, 0x4020ae76, r13) close_range$auto(0x2, 0x8, 0x0) 358.595334ms ago: executing program 1 (id=1292): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) r0 = openat$auto_loop_ctl_fops_loop(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) ioctl$auto_LOOP_CTL_ADD(r0, 0x4c80, 0xfffffffffffffffd) (async) statmount$auto(0x0, &(0x7f0000000180)={0xa, 0x1, 0xb267, 0x759, 0x5, 0x81, 0x1ffde, 0x7, 0xfffffffffffffffd, 0x8, 0x9, 0x80003, 0x4, 0x200000000005, 0x384, 0x9, 0xb14, 0x10006, 0x400007f, 0x7, 0x0, 0xe, 0x21ff9, 0x200, 0x0, 0x84, 0x0, 0x0, 0x3, 0x0, 0xac79, [0x0, 0x7, 0x0, 0x25c3, 0x0, 0x0, 0x2000000000, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x80000000, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x40000000000004ac, 0x100000, 0x0, 0x0, 0x0, 0x5, 0x0, 0x196fc46e, 0x2, 0xffffffffffffffff, 0x0, 0x4, 0x0, 0x40000000000, 0x4, 0x0, 0x101, 0x0, 0x0, 0xffffffffffdffffd]}, 0x1fa, 0x11) (async) r1 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000000000), 0x28002, 0x0) r2 = openat$auto_ftrace_event_format_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000640)='/sys/kernel/tracing/events/vmalloc/alloc_vmap_area/format\x00', 0x40, 0x0) pread64$auto(r2, &(0x7f0000000300)='/sys/kernel/tracing/events/vmalloc/allop_area/format\x00\x00\x00\x00\x00\x00\x0f:\xe23j\xb2\x93\x99\r\x02\xd0f\x87Wz\x1b\xc7\x9f\x0f7\xe8\x94\xac(,\x03\x03\xff\xc4*o\xcbf\xe4\x8a\x10\xf3\x7fA\x02:Y\xcf\x1b\x8e\x91%\x00\xf9\xff6\xa6\\\x80\x0f\xfa\xd4\xec\xa6\x0e\x1c,\'\\Aq\xae\x8e\x9c_ \x0f\v\xd3\xcb\xe4\"\xf2\x95\x8e\xc0q\x03;\x16\x84apq\xb4\x88o\xe2\x8c\xb2\xbf\x18z\xee\x8f\x05\x84\xdb\xcbP\xfa\xcec\xa4\xec\xd3\xa9[\x91xV\xd5g\xdf)\xfbJ\xaeNI\x13o\xb8\x98\xc9\x06yP>N\xe7\xf4e\xc2\x97\x02_\xeaV\xc9Vk\xaff\v\xc7\x7f\xdc\xd4\xca\xcf\x94\xb6\x1dK\xc0\xdd\x83w\xe0\x8dx\f\x17>\xa1\riQ\xb7\x03=1\xb7\xed\x1e&t\xffHx>\xc9\xac\x17/\x16\x92y\x87\xc6\x90\x8c\xcb\x86H5\n\xa2\xe8\x03\x92\xc3\xa9\xfb\x9eh\xec\xa9\x8d\xb80\x86\xa6\xa5\xd4I\xfe\xc6]F\xbe\xa0\xda\xa2\x13\xc6\xfb\xe6\xee\xf4Z,\x10\x10C0\x8b\xfd\xfb\xee\x93\x125\xfe\xc4z\"\xc6=Z\xacM\x14\x8f?w\x88S;eNL\xcd.(\xccT\xfaI\a\x1c\xb5\x8d\xf8\xccd\x1f\x1b\xb48\xb1\xbc\xfb\x13f\xa5\xd2\xfb\x17\xff\xe8\xd9\b3\x95\xa7\x85\xb1\x98\xd0\xcf\xbf=\xf7\xd0q1\b\xd2|\xc1B\xcc#5', 0x100000001, 0x7) (async) ioctl$auto__ctl_fops_dm_ioctl(r1, 0xfffffff7effffd05, &(0x7f00000001c0)) (async) r3 = epoll_create$auto(0x4e) capset$auto(0x0, 0x0) (async) epoll_ctl$auto(r3, 0x1, 0x8000000000000000, 0x0) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wakeup_count\x00', 0xc0082, 0x0) read$auto(r4, 0x0, 0x8) close_range$auto(0x2, 0x8, 0x0) 127.918441ms ago: executing program 2 (id=1293): mmap$auto(0x0, 0x2020009, 0x7, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) mmap$auto(0x0, 0x40008, 0xdf, 0x9b72, 0x7, 0x28000) (async) r0 = open(&(0x7f0000000100)='.\x00', 0x595002, 0x408) write$auto(r0, 0x0, 0xfffffdf1) (async, rerun: 64) r1 = syz_clone(0x200100, &(0x7f0000000140)="1a17de7ed7fd4a4b1602c0c2bb5c13aa3afce5968d", 0x15, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200)="be2cd89685734108b1ecaa834e2e371854b65f9035078cf481daa64aab77d14bce17bf8b76536ddd3773e8026773d0c00d8ebcfc251066258357effb69c98a2f1107bf9f6d53aa37127b112a43adfff88e69259f2bf1e1c1a2609ac6b49644cde188154495b9254190bccde8d9c1e8edd8478c00f96d0c4dad62ba70b9c69a368582c73296c59b10f29b54731c0e78d6fa748ce064d7875c863a300ab8c1d2c2e1d11e0246e86121fc") (async, rerun: 64) syz_clone3(&(0x7f0000000480)={0x4a00200, &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)=0x0, {0x2}, &(0x7f0000000380)=""/105, 0x69, &(0x7f0000000400)=""/44, &(0x7f0000000440)=[0xffffffffffffffff], 0x1, {r0}}, 0x58) (async) r3 = ioctl$auto_userfaultfd_dev_fops_userfaultfd(r0, 0x3, &(0x7f0000000500)="894af595d51ca87c8dec496a1b7f015c0a5f7e1100cb2e3056873dc4c3017e2d4384c363d4bc828b5ea30a5bdb654cf2f85dd565719b3da71b7d0669d32f3355828eb0649c0018f61be191bd57020ec8291187b0b0901329d0fc5c44b7f9339e3f8935c6db8380a3193abd847be3cb72360b8e85ab2b74baf7419fede086844229cb4de672bf45c2d99483783fe8818dd5b0f85a224f8df5768c4b6276de14668069") kcmp$auto_KCMP_FILE(r1, r2, 0x0, r3, r0) (async, rerun: 32) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) (async, rerun: 32) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) (async) chdir$auto(&(0x7f0000000000)='}[,&*}\x00') getcwd$auto(0x0, 0xffffffffffffffff) (async) prctl$auto_PR_SET_VMA(0x53564d41, 0x0, 0x0, 0x8002, 0x2) (async, rerun: 64) linkat$auto(r0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080)='&&\x00', 0x1000) (rerun: 64) mknod$auto(&(0x7f0000000040)=':,\x00', 0xcb, 0x4) (async) utimes$auto(&(0x7f00000000c0)=':,\x00', 0x0) (async, rerun: 32) mprotect$auto(0x0, 0x8000000000000001, 0x8) (rerun: 32) 0s ago: executing program 5 (id=1294): openat$auto_xfs_dir_file_operations_xfs_file(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/bluetooth/hci4/power\x00', 0x180, 0x0) r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) clone$auto(0x1, 0x40000000003e, 0x0, 0x0, 0x40000009) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x2) getdents64$auto(r1, &(0x7f0000000f40)={0x309, 0x7, 0xffff, 0x7}, 0x200c8) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/net/netfilter/nf_conntrack_buckets\x00', 0x101400, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/blkio.bfq.sectors\x00', 0x182, 0x0) write$auto(r2, &(0x7f00000000c0)='\x00', 0x7) socket(0x2, 0x80002, 0x73) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio1\x00', 0x26d1c3, 0x0) socket(0x80000000000000a, 0x2, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) syslog$auto(0x3, &(0x7f0000000080)='..\x00k\xac\x8c\x1d\x0e\x98\x80\xd2\xaf\xa1\xf2\x1e\xe1R1\xa2\x8e\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\xa6\xf4#+\xfa\xd7\x01\xb9j<\v\xf47\n\xa7\xd2\x8b\x11e1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\x84q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa24X@\xadD\xf8\x9d\xf3 \xd2]\xc4\x13G\x1d\x04!\xc1\xeb.e$\xfb\xa3KU\xcf\xc1\x7fFD\x99\xf5v\v\x9dS\xc11P\xa3\xe9\xb0SqL\x85\xea\xb2\x9cY\x83.I\xca\x92\x1c\xc4\x13CV=\x92\x17c\x87iOt\x14On\x15=\v\xf0 \xc5\x8b~\xd6\xd4\xc7\xa3a\x1c\x06\x17\xb3\x88\x8c\xf1L\xba\x89a\xfd\xa5\xc6\x7fU\x00\xe5\x9b', 0x5) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)) mmap$auto(0x2, 0x3, 0x2, 0x11, r0, 0x6) mkdir$auto(&(0x7f0000000000)='./cgroup.cpu/cpuset.cpus\x00', 0x8cd) rmdir$auto(&(0x7f0000000040)='./cgroup.cpu/cpuset.cpus\x00') fchdir$auto(r3) mount$auto(0x0, &(0x7f00000000c0)='.\x00', 0x0, 0xdef, 0x0) openat$auto_xfs_dir_file_operations_xfs_file(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/bluetooth/hci4/power\x00', 0x180, 0x0) (async) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) clone$auto(0x1, 0x40000000003e, 0x0, 0x0, 0x40000009) (async) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x2) (async) getdents64$auto(r1, &(0x7f0000000f40)={0x309, 0x7, 0xffff, 0x7}, 0x200c8) (async) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/net/netfilter/nf_conntrack_buckets\x00', 0x101400, 0x0) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/blkio.bfq.sectors\x00', 0x182, 0x0) (async) write$auto(r2, &(0x7f00000000c0)='\x00', 0x7) (async) socket(0x2, 0x80002, 0x73) (async) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio1\x00', 0x26d1c3, 0x0) (async) socket(0x80000000000000a, 0x2, 0x0) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) (async) syslog$auto(0x3, &(0x7f0000000080)='..\x00k\xac\x8c\x1d\x0e\x98\x80\xd2\xaf\xa1\xf2\x1e\xe1R1\xa2\x8e\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\xa6\xf4#+\xfa\xd7\x01\xb9j<\v\xf47\n\xa7\xd2\x8b\x11e1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\x84q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa24X@\xadD\xf8\x9d\xf3 \xd2]\xc4\x13G\x1d\x04!\xc1\xeb.e$\xfb\xa3KU\xcf\xc1\x7fFD\x99\xf5v\v\x9dS\xc11P\xa3\xe9\xb0SqL\x85\xea\xb2\x9cY\x83.I\xca\x92\x1c\xc4\x13CV=\x92\x17c\x87iOt\x14On\x15=\v\xf0 \xc5\x8b~\xd6\xd4\xc7\xa3a\x1c\x06\x17\xb3\x88\x8c\xf1L\xba\x89a\xfd\xa5\xc6\x7fU\x00\xe5\x9b', 0x5) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000080)) (async) mmap$auto(0x2, 0x3, 0x2, 0x11, r0, 0x6) (async) mkdir$auto(&(0x7f0000000000)='./cgroup.cpu/cpuset.cpus\x00', 0x8cd) (async) rmdir$auto(&(0x7f0000000040)='./cgroup.cpu/cpuset.cpus\x00') (async) fchdir$auto(r3) (async) mount$auto(0x0, &(0x7f00000000c0)='.\x00', 0x0, 0xdef, 0x0) (async) kernel console output (not intermixed with test programs): x34/0x50 [ 225.258692][ T7963] loopback_net_init+0x7a/0x170 [ 225.258728][ T7963] ? __pfx_loopback_net_init+0x10/0x10 [ 225.258762][ T7963] ops_init+0x1e2/0x5f0 [ 225.258812][ T7963] setup_net+0x118/0x3a0 [ 225.258859][ T7963] ? __pfx_setup_net+0x10/0x10 [ 225.258903][ T7963] ? lockdep_init_map_type+0x5c/0x250 [ 225.258946][ T7963] ? mutex_init_lockep+0x110/0x150 [ 225.258998][ T7963] copy_net_ns+0x46f/0x7c0 [ 225.259059][ T7963] create_new_namespaces+0x3ea/0xac0 [ 225.259129][ T7963] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 225.259168][ T7963] ksys_unshare+0x455/0xab0 [ 225.259213][ T7963] ? __pfx_ksys_unshare+0x10/0x10 [ 225.259271][ T7963] __x64_sys_unshare+0x31/0x40 [ 225.259314][ T7963] do_syscall_64+0x106/0xf80 [ 225.259358][ T7963] ? clear_bhb_loop+0x40/0x90 [ 225.259400][ T7963] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 225.259435][ T7963] RIP: 0033:0x7fce7759bf79 [ 225.259464][ T7963] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 225.259496][ T7963] RSP: 002b:00007fce784b1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 225.259527][ T7963] RAX: ffffffffffffffda RBX: 00007fce77815fa0 RCX: 00007fce7759bf79 [ 225.259549][ T7963] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 225.259570][ T7963] RBP: 00007fce776327e0 R08: 0000000000000000 R09: 0000000000000000 [ 225.259591][ T7963] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 225.259611][ T7963] R13: 00007fce77816038 R14: 00007fce77815fa0 R15: 00007fff2e04e0f8 [ 225.259657][ T7963] [ 234.216069][ T8150] wlan1: mtu less than device minimum [ 236.329618][ T8179] netlink: 322 bytes leftover after parsing attributes in process `syz.0.471'. [ 236.666049][ T8181] netlink: 330 bytes leftover after parsing attributes in process `syz.2.472'. [ 237.958738][ T8202] netlink: 330 bytes leftover after parsing attributes in process `syz.0.473'. [ 238.562107][ T8215] vhci_hcd vhci_hcd.2: invalid port number 16 [ 238.597194][ T8215] vhci_hcd vhci_hcd.2: invalid port number 16 [ 239.956835][ T8238] netlink: 330 bytes leftover after parsing attributes in process `syz.1.483'. [ 239.966484][ T8238] : renamed from ip6tnl0 (while UP) [ 240.344036][ T8252] netlink: 8 bytes leftover after parsing attributes in process `syz.2.487'. [ 240.543430][ T8254] wlan1: mtu less than device minimum [ 242.201970][ T8282] FAULT_INJECTION: forcing a failure. [ 242.201970][ T8282] name failslab, interval 1, probability 0, space 0, times 0 [ 242.226989][ T8282] CPU: 0 UID: 0 PID: 8282 Comm: syz.4.495 Tainted: G L syzkaller #0 PREEMPT(full) [ 242.227045][ T8282] Tainted: [L]=SOFTLOCKUP [ 242.227057][ T8282] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 242.227089][ T8282] Call Trace: [ 242.227101][ T8282] [ 242.227118][ T8282] dump_stack_lvl+0x100/0x190 [ 242.227177][ T8282] should_fail_ex.cold+0x5/0xa [ 242.227217][ T8282] should_failslab+0xc2/0x120 [ 242.227272][ T8282] __kmalloc_cache_noprof+0x7a/0x6f0 [ 242.227311][ T8282] ? tty_open+0x139/0xfa0 [ 242.227371][ T8282] ? __pfx_tty_open+0x10/0x10 [ 242.227426][ T8282] tty_open+0x139/0xfa0 [ 242.227489][ T8282] ? __pfx_tty_open+0x10/0x10 [ 242.227542][ T8282] ? chrdev_open+0x589/0x6a0 [ 242.227593][ T8282] ? chrdev_open+0x589/0x6a0 [ 242.227650][ T8282] ? __pfx_tty_open+0x10/0x10 [ 242.227705][ T8282] chrdev_open+0x234/0x6a0 [ 242.227759][ T8282] ? __pfx_chrdev_open+0x10/0x10 [ 242.227823][ T8282] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 242.227887][ T8282] do_dentry_open+0x6d8/0x1660 [ 242.227938][ T8282] ? __pfx_chrdev_open+0x10/0x10 [ 242.228000][ T8282] vfs_open+0x82/0x3f0 [ 242.228040][ T8282] path_openat+0x208c/0x31a0 [ 242.228106][ T8282] ? __pfx_path_openat+0x10/0x10 [ 242.228174][ T8282] do_file_open+0x20e/0x430 [ 242.228229][ T8282] ? __pfx_do_file_open+0x10/0x10 [ 242.228311][ T8282] ? alloc_fd+0x476/0x790 [ 242.228366][ T8282] ? do_getname+0x191/0x390 [ 242.228405][ T8282] do_sys_openat2+0x10d/0x1e0 [ 242.228465][ T8282] ? __pfx_do_sys_openat2+0x10/0x10 [ 242.228506][ T8282] ? blkcg_maybe_throttle_current+0x5df/0xeb0 [ 242.228571][ T8282] __x64_sys_openat+0x12d/0x210 [ 242.228611][ T8282] ? __pfx___x64_sys_openat+0x10/0x10 [ 242.228666][ T8282] do_syscall_64+0x106/0xf80 [ 242.228712][ T8282] ? clear_bhb_loop+0x40/0x90 [ 242.228754][ T8282] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 242.228798][ T8282] RIP: 0033:0x7fce7759bf79 [ 242.228827][ T8282] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 242.228861][ T8282] RSP: 002b:00007fce784b1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 242.228893][ T8282] RAX: ffffffffffffffda RBX: 00007fce77815fa0 RCX: 00007fce7759bf79 [ 242.228916][ T8282] RDX: 0000000000000080 RSI: 0000200000000100 RDI: ffffffffffffff9c [ 242.228936][ T8282] RBP: 00007fce776327e0 R08: 0000000000000000 R09: 0000000000000000 [ 242.228956][ T8282] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 242.228975][ T8282] R13: 00007fce77816038 R14: 00007fce77815fa0 R15: 00007fff2e04e0f8 [ 242.229018][ T8282] [ 243.383363][ T8280] random: crng reseeded on system resumption [ 243.630933][ T29] audit: type=1800 audit(4294967357.180:9): pid=8289 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.495" name="dbroot" dev="configfs" ino=20480 res=0 errno=0 [ 244.272442][ T6385] Bluetooth: hci2: unexpected event 0x3e length: 726 > 260 [ 244.272485][ T6385] Bluetooth: hci2: unexpected subevent 0x0d length: 725 > 260 [ 244.287839][ T6385] Bluetooth: hci2: Unknown advertising packet type: 0x7f [ 244.287888][ T6385] Bluetooth: hci2: adv larger than maximum supported [ 244.294998][ T6385] Bluetooth: hci2: Malformed LE Event: 0x0d [ 245.758636][ T8354] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 247.667827][ T8365] netlink: 330 bytes leftover after parsing attributes in process `syz.4.504'. [ 248.017177][ T8382] random: crng reseeded on system resumption [ 249.663773][ T8398] random: crng reseeded on system resumption [ 251.141629][ T8437] syz.1.512 uses obsolete (PF_INET,SOCK_PACKET) [ 252.422195][ T8469] program syz.4.515 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 254.710082][ T8501] page: refcount:8 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x78000 [ 254.836129][ T8501] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 254.989493][ T8501] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 255.033752][ T8501] raw: 00fff00000000040 0000000000000000 dead000000000122 0000000000000000 [ 255.119468][ T8501] raw: 0000000000000000 0000000000000000 00000008ffffffff 0000000000000000 [ 255.228321][ T8501] head: 00fff00000000040 0000000000000000 dead000000000122 0000000000000000 [ 255.431870][ T8501] head: 0000000000000000 0000000000000000 00000008ffffffff 0000000000000000 [ 255.487087][ T8501] head: 00fff00000000003 ffffea0001e00001 00000000ffffffff 00000000ffffffff [ 255.495866][ T8501] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 255.649291][ T8501] page dumped because: unmovable page [ 255.654770][ T8501] page_owner tracks the page as allocated [ 255.747057][ T8501] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 5671, tgid 5671 (sshd-session), ts 74318861290, free_ts 73331831177 [ 255.895200][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.903838][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.118546][ T8501] post_alloc_hook+0x153/0x170 [ 256.123526][ T8501] get_page_from_freelist+0x111d/0x3140 [ 256.197047][ T8501] __alloc_frozen_pages_noprof+0x27c/0x2ba0 [ 256.266970][ T8501] alloc_pages_mpol+0x1fb/0x550 [ 256.297014][ T8501] alloc_pages_noprof+0x131/0x390 [ 256.302191][ T8501] skb_page_frag_refill+0x365/0x5b0 [ 256.470522][ T8501] try_fill_recv+0x7f1/0x2950 [ 256.475330][ T8501] virtnet_poll+0x1502/0x3a70 [ 256.617067][ T8501] __napi_poll.constprop.0+0xaf/0x450 [ 256.622558][ T8501] net_rx_action+0xa40/0xf20 [ 256.780164][ T8501] handle_softirqs+0x1eb/0x9e0 [ 256.806576][ T8488] netlink: 330 bytes leftover after parsing attributes in process `syz.4.519'. [ 256.841631][ T8502] syz.1.520 (8502): attempted to duplicate a private mapping with mremap. This is not supported. [ 256.929747][ T8501] __irq_exit_rcu+0xef/0x150 [ 257.060357][ T8501] irq_exit_rcu+0x9/0x30 [ 257.064677][ T8501] common_interrupt+0x65/0xe0 [ 257.157239][ T8501] asm_common_interrupt+0x26/0x40 [ 257.194238][ T8501] page last free pid 0 tgid 0 stack trace: [ 257.210495][ T8501] __free_frozen_pages+0x7ca/0x10a0 [ 257.215845][ T8501] __folio_put+0x3b4/0x540 [ 257.277211][ T8501] skb_release_data+0x667/0x9d0 [ 257.282180][ T8501] napi_consume_skb+0x1f6/0x320 [ 257.375933][ T8501] skb_defer_free_flush+0x1f1/0x290 [ 257.416734][ T8501] net_rx_action+0x3ca/0xf20 [ 257.476342][ T8501] handle_softirqs+0x1eb/0x9e0 [ 257.585202][ T8501] __irq_exit_rcu+0xef/0x150 [ 257.647121][ T8501] irq_exit_rcu+0x9/0x30 [ 257.687054][ T8501] common_interrupt+0xbe/0xe0 [ 257.722798][ T8501] asm_common_interrupt+0x26/0x40 [ 258.047127][ T6382] Bluetooth: hci4: command 0x0406 tx timeout [ 260.409137][ T8563] EXT4-fs error (device sda1): ext4_validate_inode_bitmap:104: comm syz-executor: Corrupt inode bitmap - block_group = 0, inode_bitmap = 137 [ 260.461034][ T8563] EXT4-fs error (device sda1): ext4_validate_inode_bitmap:104: comm syz-executor: Corrupt inode bitmap - block_group = 1, inode_bitmap = 138 [ 260.531970][ T8566] futex_wake_op: syz.4.527 tries to shift op by -2048; fix this program [ 260.553064][ T8566] 0x9500000000000000-0x9600000000000001 : "" [ 260.587024][ T8563] EXT4-fs error (device sda1): ext4_validate_block_bitmap:423: comm syz-executor: bg 0: bad block bitmap checksum [ 260.609814][ T8566] mtd: partition "" is out of reach -- disabled [ 260.649731][ T8566] ftl_cs: FTL header not found. [ 261.468081][ T6382] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 261.480518][ T6382] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 261.495292][ T6382] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 261.506196][ T6382] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 261.528872][ T6382] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 262.578006][ T8602] FAULT_INJECTION: forcing a failure. [ 262.578006][ T8602] name failslab, interval 1, probability 0, space 0, times 0 [ 262.668280][ T8602] CPU: 0 UID: 0 PID: 8602 Comm: syz.2.540 Tainted: G L syzkaller #0 PREEMPT(full) [ 262.668334][ T8602] Tainted: [L]=SOFTLOCKUP [ 262.668345][ T8602] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 262.668365][ T8602] Call Trace: [ 262.668375][ T8602] [ 262.668387][ T8602] dump_stack_lvl+0x100/0x190 [ 262.668443][ T8602] should_fail_ex.cold+0x5/0xa [ 262.668483][ T8602] should_failslab+0xc2/0x120 [ 262.668535][ T8602] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 262.668588][ T8602] ? __d_alloc+0x34/0xa80 [ 262.668648][ T8602] __d_alloc+0x34/0xa80 [ 262.668706][ T8602] d_alloc_pseudo+0x1c/0xc0 [ 262.668746][ T8602] alloc_file_pseudo+0xcf/0x230 [ 262.668784][ T8602] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 262.668831][ T8602] __shmem_file_setup+0x1a3/0x330 [ 262.668875][ T8602] shmem_zero_setup+0x93/0x1b0 [ 262.668927][ T8602] __mmap_region+0x20b5/0x2760 [ 262.668979][ T8602] ? __lock_acquire+0x4a5/0x2630 [ 262.669022][ T8602] ? __pfx___mmap_region+0x10/0x10 [ 262.669095][ T8602] ? finish_task_switch.isra.0+0x200/0xb80 [ 262.669129][ T8602] ? finish_task_switch.isra.0+0x200/0xb80 [ 262.669165][ T8602] ? rcu_is_watching+0x12/0xc0 [ 262.669229][ T8602] ? __schedule+0x1000/0x60e0 [ 262.669322][ T8602] ? rcu_is_watching+0x12/0xc0 [ 262.669373][ T8602] ? cap_capable+0x107/0x460 [ 262.669434][ T8602] mmap_region+0x180/0x3e0 [ 262.669487][ T8602] do_mmap+0xc63/0x12f0 [ 262.669550][ T8602] ? __pfx_do_mmap+0x10/0x10 [ 262.669603][ T8602] ? __pfx_down_write_killable+0x10/0x10 [ 262.669662][ T8602] vm_mmap_pgoff+0x29e/0x470 [ 262.669724][ T8602] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 262.669788][ T8602] ? __x64_sys_futex+0x34f/0x4d0 [ 262.669821][ T8602] ? __x64_sys_futex+0x358/0x4d0 [ 262.669892][ T8602] ksys_mmap_pgoff+0x7d/0x5b0 [ 262.669958][ T8602] __x64_sys_mmap+0x125/0x190 [ 262.670014][ T8602] do_syscall_64+0x106/0xf80 [ 262.670056][ T8602] ? clear_bhb_loop+0x40/0x90 [ 262.670097][ T8602] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 262.670131][ T8602] RIP: 0033:0x7f277339bf79 [ 262.670160][ T8602] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 262.670194][ T8602] RSP: 002b:00007f277420b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 262.670225][ T8602] RAX: ffffffffffffffda RBX: 00007f2773615fa0 RCX: 00007f277339bf79 [ 262.670247][ T8602] RDX: 0000000000000006 RSI: 0000000004020009 RDI: 0000000000000000 [ 262.670267][ T8602] RBP: 00007f27734327e0 R08: 0000000000000401 R09: 0000000000008000 [ 262.670288][ T8602] R10: 0000000000000eb1 R11: 0000000000000246 R12: 0000000000000000 [ 262.670308][ T8602] R13: 00007f2773616038 R14: 00007f2773615fa0 R15: 00007fffb3689538 [ 262.670351][ T8602] [ 263.647537][ T6382] Bluetooth: hci1: command tx timeout [ 263.917685][ T8616] random: crng reseeded on system resumption [ 264.285022][ T8581] chnl_net:caif_netlink_parms(): no params data found [ 264.535773][ T8598] netlink: 330 bytes leftover after parsing attributes in process `syz.1.529'. [ 264.997786][ T8581] bridge0: port 1(bridge_slave_0) entered blocking state [ 265.067086][ T8581] bridge0: port 1(bridge_slave_0) entered disabled state [ 265.079558][ T8581] bridge_slave_0: entered allmulticast mode [ 265.107268][ T8581] bridge_slave_0: entered promiscuous mode [ 265.189423][ T8581] bridge0: port 2(bridge_slave_1) entered blocking state [ 265.196675][ T8581] bridge0: port 2(bridge_slave_1) entered disabled state [ 265.237688][ T8581] bridge_slave_1: entered allmulticast mode [ 265.268847][ T8581] bridge_slave_1: entered promiscuous mode [ 265.371710][ T8630] vivid-007: ================= START STATUS ================= [ 265.406741][ T8630] vivid-007: Generate PTS: true [ 265.414054][ T8630] vivid-007: Generate SCR: true [ 265.508259][ T8630] tpg source WxH: 320x240 (Y'CbCr) [ 265.572082][ T8630] tpg field: 1 [ 265.575573][ T8630] tpg crop: (0,0)/320x240 [ 265.650987][ T8630] tpg compose: (0,0)/320x240 [ 265.660337][ T8581] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 265.697063][ T8630] tpg colorspace: 8 [ 265.701041][ T8630] tpg transfer function: 0/0 [ 265.705688][ T8630] tpg Y'CbCr encoding: 0/0 [ 265.731396][ T6382] Bluetooth: hci1: command tx timeout [ 265.743265][ T8581] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 265.906225][ T8630] tpg quantization: 0/0 [ 266.023665][ T8630] tpg RGB range: 0/2 [ 266.082790][ T8630] vivid-007: ================== END STATUS ================== [ 266.563108][ T1156] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.333652][ T1156] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.425619][ T8581] team0: Port device team_slave_0 added [ 267.438733][ T8581] team0: Port device team_slave_1 added [ 267.789504][ T1156] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.807023][ T6382] Bluetooth: hci1: command tx timeout [ 267.903370][ T8581] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 267.922507][ T8581] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 268.001064][ T8581] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 268.026937][ T29] audit: type=1804 audit(4294967381.570:10): pid=8644 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.539" name="/newroot/sys/kernel/tracing/trace_marker_raw" dev="tracefs" ino=3781 res=1 errno=0 [ 268.054376][ T8581] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 268.071708][ T8581] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 268.146956][ T8581] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 268.390581][ T8581] hsr_slave_0: entered promiscuous mode [ 268.435314][ T8581] hsr_slave_1: entered promiscuous mode [ 269.043620][ T1156] bridge_slave_0: left allmulticast mode [ 269.054806][ T1156] bridge_slave_0: left promiscuous mode [ 269.092553][ T1156] bridge0: port 1(bridge_slave_0) entered disabled state [ 269.887068][ T6382] Bluetooth: hci1: command tx timeout [ 270.088930][ T1156] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 270.201973][ T1156] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 270.311649][ T1156] bond0 (unregistering): Released all slaves [ 270.607303][ T8660] FAULT_INJECTION: forcing a failure. [ 270.607303][ T8660] name failslab, interval 1, probability 0, space 0, times 0 [ 270.727740][ T8660] CPU: 1 UID: 0 PID: 8660 Comm: syz.1.543 Tainted: G L syzkaller #0 PREEMPT(full) [ 270.727794][ T8660] Tainted: [L]=SOFTLOCKUP [ 270.727806][ T8660] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 270.727826][ T8660] Call Trace: [ 270.727837][ T8660] [ 270.727850][ T8660] dump_stack_lvl+0x100/0x190 [ 270.727909][ T8660] should_fail_ex.cold+0x5/0xa [ 270.727959][ T8660] ? __register_sysctl_table+0xac/0x1650 [ 270.728003][ T8660] should_failslab+0xc2/0x120 [ 270.728055][ T8660] __kmalloc_noprof+0xe0/0x850 [ 270.728109][ T8660] __register_sysctl_table+0xac/0x1650 [ 270.728152][ T8660] ? is_module_address+0x5f/0xf0 [ 270.728201][ T8660] ? __pfx___register_sysctl_table+0x10/0x10 [ 270.728243][ T8660] ? is_module_address+0x69/0xf0 [ 270.728291][ T8660] ? register_net_sysctl_sz+0x222/0x430 [ 270.728348][ T8660] ? __asan_memcpy+0x3c/0x60 [ 270.728395][ T8660] sctp_sysctl_net_register+0x15e/0x200 [ 270.728447][ T8660] ? __pfx_sctp_defaults_init+0x10/0x10 [ 270.728496][ T8660] sctp_defaults_init+0x6d2/0xd90 [ 270.728550][ T8660] ? __pfx_sctp_defaults_init+0x10/0x10 [ 270.728598][ T8660] ops_init+0x1e2/0x5f0 [ 270.728650][ T8660] setup_net+0x118/0x3a0 [ 270.728721][ T8660] ? __pfx_setup_net+0x10/0x10 [ 270.728765][ T8660] ? lockdep_init_map_type+0x5c/0x250 [ 270.728810][ T8660] ? mutex_init_lockep+0x110/0x150 [ 270.728860][ T8660] copy_net_ns+0x46f/0x7c0 [ 270.728916][ T8660] create_new_namespaces+0x3ea/0xac0 [ 270.728996][ T8660] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 270.729036][ T8660] ksys_unshare+0x455/0xab0 [ 270.729082][ T8660] ? __pfx_ksys_unshare+0x10/0x10 [ 270.729140][ T8660] __x64_sys_unshare+0x31/0x40 [ 270.729179][ T8660] do_syscall_64+0x106/0xf80 [ 270.729220][ T8660] ? clear_bhb_loop+0x40/0x90 [ 270.729260][ T8660] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 270.729292][ T8660] RIP: 0033:0x7f3f4059bf79 [ 270.729320][ T8660] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 270.729352][ T8660] RSP: 002b:00007f3f4152d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 270.729383][ T8660] RAX: ffffffffffffffda RBX: 00007f3f40815fa0 RCX: 00007f3f4059bf79 [ 270.729404][ T8660] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 270.729424][ T8660] RBP: 00007f3f406327e0 R08: 0000000000000000 R09: 0000000000000000 [ 270.729445][ T8660] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 270.729463][ T8660] R13: 00007f3f40816038 R14: 00007f3f40815fa0 R15: 00007ffead2f2e88 [ 270.729508][ T8660] [ 272.194247][ T8690] netlink: 28 bytes leftover after parsing attributes in process `syz.2.547'. [ 272.251734][ T8581] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 272.398282][ T8690] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 272.427021][ T8690] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 272.455961][ T8690] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 272.466939][ T8690] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 272.749176][ T8581] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 272.818241][ T8581] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 272.977531][ T8581] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 273.800310][ T8581] 8021q: adding VLAN 0 to HW filter on device bond0 [ 273.826305][ T8581] 8021q: adding VLAN 0 to HW filter on device team0 [ 273.851886][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 273.859115][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 273.903711][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 273.911181][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 274.470590][ T1156] veth1_macvtap: left promiscuous mode [ 274.498326][ T1156] veth0_macvtap: left promiscuous mode [ 274.503982][ T1156] veth1_vlan: left promiscuous mode [ 274.572197][ T1156] veth0_vlan: left promiscuous mode [ 275.328372][ T8724] netlink: 338 bytes leftover after parsing attributes in process `syz.2.550'. [ 275.615666][ T8742] ubi0: detaching mtd0 [ 275.770945][ T8742] ubi0: mtd0 is detached [ 276.202517][ T1156] team0 (unregistering): Port device team_slave_1 removed [ 276.295157][ T1156] team0 (unregistering): Port device team_slave_0 removed [ 277.764812][ T8581] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 279.520967][ T8581] veth0_vlan: entered promiscuous mode [ 279.667987][ T8581] veth1_vlan: entered promiscuous mode [ 279.860626][ T8581] veth0_macvtap: entered promiscuous mode [ 279.882057][ T8581] veth1_macvtap: entered promiscuous mode [ 280.029078][ T8581] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 280.098329][ T8581] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 280.156907][ T7744] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.204193][ T7744] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.242839][ T7744] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.269308][ T7744] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.287113][ T29] audit: type=1800 audit(4294967393.830:11): pid=8783 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.555" name="dbroot" dev="configfs" ino=33281 res=0 errno=0 [ 280.607816][ T8784] nfs: Unknown parameter 'nl802154' [ 280.616314][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 280.661872][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 280.811944][ T1156] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 280.852175][ T1156] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 281.411063][ T8797] FAULT_INJECTION: forcing a failure. [ 281.411063][ T8797] name failslab, interval 1, probability 0, space 0, times 0 [ 281.496140][ T8797] CPU: 1 UID: 0 PID: 8797 Comm: syz.5.528 Tainted: G L syzkaller #0 PREEMPT(full) [ 281.496179][ T8797] Tainted: [L]=SOFTLOCKUP [ 281.496188][ T8797] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 281.496202][ T8797] Call Trace: [ 281.496210][ T8797] [ 281.496219][ T8797] dump_stack_lvl+0x100/0x190 [ 281.496265][ T8797] should_fail_ex.cold+0x5/0xa [ 281.496293][ T8797] should_failslab+0xc2/0x120 [ 281.496332][ T8797] __kmalloc_cache_noprof+0x7a/0x6f0 [ 281.496359][ T8797] ? tty_open+0x139/0xfa0 [ 281.496402][ T8797] ? __pfx_tty_open+0x10/0x10 [ 281.496441][ T8797] tty_open+0x139/0xfa0 [ 281.496485][ T8797] ? __pfx_tty_open+0x10/0x10 [ 281.496523][ T8797] ? chrdev_open+0x10b/0x6a0 [ 281.496559][ T8797] ? chrdev_open+0x10b/0x6a0 [ 281.496599][ T8797] ? __pfx_tty_open+0x10/0x10 [ 281.496638][ T8797] chrdev_open+0x234/0x6a0 [ 281.496674][ T8797] ? __pfx_apparmor_file_open+0x10/0x10 [ 281.496699][ T8797] ? __pfx_chrdev_open+0x10/0x10 [ 281.496738][ T8797] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 281.496782][ T8797] do_dentry_open+0x6d8/0x1660 [ 281.496818][ T8797] ? __pfx_chrdev_open+0x10/0x10 [ 281.496918][ T8797] vfs_open+0x82/0x3f0 [ 281.496957][ T8797] path_openat+0x208c/0x31a0 [ 281.497006][ T8797] ? __pfx_path_openat+0x10/0x10 [ 281.497054][ T8797] do_file_open+0x20e/0x430 [ 281.497093][ T8797] ? __pfx_do_file_open+0x10/0x10 [ 281.497151][ T8797] ? alloc_fd+0x476/0x790 [ 281.497189][ T8797] ? do_getname+0x191/0x390 [ 281.497216][ T8797] do_sys_openat2+0x10d/0x1e0 [ 281.497249][ T8797] ? __pfx_do_sys_openat2+0x10/0x10 [ 281.497277][ T8797] ? blkcg_maybe_throttle_current+0x5df/0xeb0 [ 281.497323][ T8797] __x64_sys_openat+0x12d/0x210 [ 281.497351][ T8797] ? __pfx___x64_sys_openat+0x10/0x10 [ 281.497390][ T8797] do_syscall_64+0x106/0xf80 [ 281.497422][ T8797] ? clear_bhb_loop+0x40/0x90 [ 281.497452][ T8797] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 281.497478][ T8797] RIP: 0033:0x7f227bf9bf79 [ 281.497499][ T8797] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 281.497522][ T8797] RSP: 002b:00007f227ce38028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 281.497545][ T8797] RAX: ffffffffffffffda RBX: 00007f227c215fa0 RCX: 00007f227bf9bf79 [ 281.497561][ T8797] RDX: 0000000000000080 RSI: 0000200000000100 RDI: ffffffffffffff9c [ 281.497577][ T8797] RBP: 00007f227c0327e0 R08: 0000000000000000 R09: 0000000000000000 [ 281.497592][ T8797] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 281.497607][ T8797] R13: 00007f227c216038 R14: 00007f227c215fa0 R15: 00007fffa9b9bc98 [ 281.497638][ T8797] [ 282.967491][ T29] audit: type=1800 audit(4294967396.510:12): pid=8807 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.528" name="dbroot" dev="configfs" ino=36053 res=0 errno=0 [ 283.415251][ T8828] FAULT_INJECTION: forcing a failure. [ 283.415251][ T8828] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 283.505272][ T8828] CPU: 0 UID: 0 PID: 8828 Comm: syz.2.560 Tainted: G L syzkaller #0 PREEMPT(full) [ 283.505327][ T8828] Tainted: [L]=SOFTLOCKUP [ 283.505339][ T8828] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 283.505359][ T8828] Call Trace: [ 283.505370][ T8828] [ 283.505383][ T8828] dump_stack_lvl+0x100/0x190 [ 283.505440][ T8828] should_fail_ex.cold+0x5/0xa [ 283.505473][ T8828] ? prepare_alloc_pages+0x16d/0x5f0 [ 283.505533][ T8828] should_fail_alloc_page+0xeb/0x140 [ 283.505587][ T8828] prepare_alloc_pages+0x1f0/0x5f0 [ 283.505650][ T8828] __alloc_frozen_pages_noprof+0x19a/0x2ba0 [ 283.505699][ T8828] ? __pfx_stack_trace_save+0x10/0x10 [ 283.505755][ T8828] ? stack_depot_save_flags+0x27/0x9d0 [ 283.505799][ T8828] ? kasan_save_stack+0x3f/0x50 [ 283.505854][ T8828] ? kasan_save_stack+0x30/0x50 [ 283.505897][ T8828] ? kasan_save_track+0x14/0x30 [ 283.505941][ T8828] ? __kasan_slab_alloc+0x89/0x90 [ 283.505996][ T8828] ? kasan_save_stack+0x3f/0x50 [ 283.506047][ T8828] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 283.506098][ T8828] ? register_lock_class+0x40/0x560 [ 283.506138][ T8828] ? __lock_acquire+0x4a5/0x2630 [ 283.506175][ T8828] ? look_up_lock_class+0x55/0x120 [ 283.506230][ T8828] ? lock_acquire+0x1cf/0x380 [ 283.506272][ T8828] ? find_held_lock+0x2b/0x80 [ 283.506325][ T8828] ? page_table_check_set+0x49a/0xa10 [ 283.506374][ T8828] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 283.506430][ T8828] ? policy_nodemask+0xed/0x4f0 [ 283.506486][ T8828] alloc_pages_mpol+0x1fb/0x550 [ 283.506542][ T8828] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 283.506608][ T8828] folio_alloc_mpol_noprof+0x36/0x340 [ 283.506645][ T8828] vma_alloc_folio_noprof+0xed/0x1d0 [ 283.506679][ T8828] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 283.506728][ T8828] do_anonymous_page+0xb3a/0x1fb0 [ 283.506782][ T8828] __handle_mm_fault+0x1d42/0x2b60 [ 283.506841][ T8828] ? __pfx___handle_mm_fault+0x10/0x10 [ 283.506883][ T8828] ? pte_offset_map_lock+0x174/0x320 [ 283.506937][ T8828] ? find_held_lock+0x2b/0x80 [ 283.507000][ T8828] ? follow_page_pte+0x5b3/0x1400 [ 283.507062][ T8828] handle_mm_fault+0x36d/0xa20 [ 283.507109][ T8828] __get_user_pages+0xf9c/0x34d0 [ 283.507182][ T8828] ? __pfx___get_user_pages+0x10/0x10 [ 283.507251][ T8828] populate_vma_page_range+0x267/0x3f0 [ 283.507289][ T8828] ? __pfx_populate_vma_page_range+0x10/0x10 [ 283.507323][ T8828] ? __pfx_find_vma_intersection+0x10/0x10 [ 283.507379][ T8828] ? do_mmap+0x93f/0x12f0 [ 283.507435][ T8828] __mm_populate+0x107/0x3a0 [ 283.507470][ T8828] ? __pfx___mm_populate+0x10/0x10 [ 283.507506][ T8828] ? up_write+0x290/0x4f0 [ 283.507556][ T8828] vm_mmap_pgoff+0x37f/0x470 [ 283.507615][ T8828] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 283.507671][ T8828] ? blkcg_maybe_throttle_current+0x5df/0xeb0 [ 283.507729][ T8828] ? __x64_sys_futex+0x34f/0x4d0 [ 283.507768][ T8828] ? __x64_sys_futex+0x358/0x4d0 [ 283.507812][ T8828] ksys_mmap_pgoff+0x7d/0x5b0 [ 283.507881][ T8828] __x64_sys_mmap+0x125/0x190 [ 283.507932][ T8828] do_syscall_64+0x106/0xf80 [ 283.507979][ T8828] ? clear_bhb_loop+0x40/0x90 [ 283.508023][ T8828] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 283.508060][ T8828] RIP: 0033:0x7f277339bf79 [ 283.508091][ T8828] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 283.508124][ T8828] RSP: 002b:00007f27741c9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 283.508157][ T8828] RAX: ffffffffffffffda RBX: 00007f2773616180 RCX: 00007f277339bf79 [ 283.508180][ T8828] RDX: 00000000000000df RSI: 0000000000400008 RDI: 0000000000000000 [ 283.508200][ T8828] RBP: 00007f27734327e0 R08: 0000000000000002 R09: 0000000000008000 [ 283.508221][ T8828] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 283.508240][ T8828] R13: 00007f2773616218 R14: 00007f2773616180 R15: 00007fffb3689538 [ 283.508285][ T8828] [ 285.173415][ T8840] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 286.922587][ T8870] ecryptfs_parse_packet_length: Error parsing packet length [ 286.938063][ T8870] ecryptfs_miscdev_write: Error parsing packet length; rc = [-22] [ 287.098850][ T8874] FAULT_INJECTION: forcing a failure. [ 287.098850][ T8874] name fail_futex, interval 1, probability 0, space 0, times 0 [ 287.248143][ T8874] CPU: 1 UID: 0 PID: 8874 Comm: syz.2.568 Tainted: G L syzkaller #0 PREEMPT(full) [ 287.248206][ T8874] Tainted: [L]=SOFTLOCKUP [ 287.248219][ T8874] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 287.248243][ T8874] Call Trace: [ 287.248254][ T8874] [ 287.248266][ T8874] dump_stack_lvl+0x100/0x190 [ 287.248323][ T8874] should_fail_ex.cold+0x5/0xa [ 287.248363][ T8874] get_futex_key+0x1d2/0x1620 [ 287.248407][ T8874] ? __pfx_get_futex_key+0x10/0x10 [ 287.248447][ T8874] ? update_se+0x94/0x760 [ 287.248493][ T8874] futex_wait_setup+0x81/0x500 [ 287.248561][ T8874] __futex_wait+0x19f/0x300 [ 287.248615][ T8874] ? __pfx___futex_wait+0x10/0x10 [ 287.248661][ T8874] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 287.248703][ T8874] ? lockdep_hardirqs_on+0x78/0x100 [ 287.248753][ T8874] ? __pfx_futex_wake_mark+0x10/0x10 [ 287.248809][ T8874] ? find_held_lock+0x2b/0x80 [ 287.248862][ T8874] ? futex_wake+0x456/0x530 [ 287.248918][ T8874] futex_wait+0xed/0x380 [ 287.248967][ T8874] ? __pfx_futex_wait+0x10/0x10 [ 287.249027][ T8874] ? __asan_memset+0x23/0x50 [ 287.249075][ T8874] do_futex+0x1ef/0x350 [ 287.249116][ T8874] ? __pfx_do_futex+0x10/0x10 [ 287.249173][ T8874] __x64_sys_futex+0x34f/0x4d0 [ 287.249220][ T8874] ? __pfx___x64_sys_futex+0x10/0x10 [ 287.249279][ T8874] do_syscall_64+0x106/0xf80 [ 287.249320][ T8874] ? clear_bhb_loop+0x40/0x90 [ 287.249359][ T8874] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 287.249393][ T8874] RIP: 0033:0x7f277339bf79 [ 287.249420][ T8874] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 287.249451][ T8874] RSP: 002b:00007f27741ea0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 287.249482][ T8874] RAX: ffffffffffffffda RBX: 00007f2773616098 RCX: 00007f277339bf79 [ 287.249512][ T8874] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f2773616098 [ 287.249531][ T8874] RBP: 00007f2773616090 R08: 0000000000000000 R09: 0000000000000000 [ 287.249552][ T8874] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 287.249572][ T8874] R13: 00007f2773616128 R14: 00007fffb3689450 R15: 00007fffb3689538 [ 287.249613][ T8874] [ 287.627738][ T8878] usb usb15: usbfs: process 8878 (syz.5.569) did not claim interface 0 before use [ 288.684974][ T8878] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 288.818060][ T8878] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 289.081488][ T8878] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 289.136289][ T8878] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 289.298454][ T8878] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 289.304457][ T8878] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 289.316628][ T8894] netlink: 28 bytes leftover after parsing attributes in process `syz.4.571'. [ 289.388624][ T8878] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 289.394791][ T8878] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 289.533758][ T8878] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 289.727201][ T8894] hsr_slave_0: left promiscuous mode [ 289.830009][ T8894] hsr_slave_1: left promiscuous mode [ 290.432228][ T8906] FAULT_INJECTION: forcing a failure. [ 290.432228][ T8906] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 290.491575][ T8906] CPU: 1 UID: 0 PID: 8906 Comm: syz.5.572 Tainted: G L syzkaller #0 PREEMPT(full) [ 290.491628][ T8906] Tainted: [L]=SOFTLOCKUP [ 290.491640][ T8906] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 290.491659][ T8906] Call Trace: [ 290.491669][ T8906] [ 290.491681][ T8906] dump_stack_lvl+0x100/0x190 [ 290.491737][ T8906] should_fail_ex.cold+0x5/0xa [ 290.491771][ T8906] ? prepare_alloc_pages+0x16d/0x5f0 [ 290.491830][ T8906] should_fail_alloc_page+0xeb/0x140 [ 290.491885][ T8906] prepare_alloc_pages+0x1f0/0x5f0 [ 290.491949][ T8906] __alloc_frozen_pages_noprof+0x19a/0x2ba0 [ 290.491999][ T8906] ? __pfx_stack_trace_save+0x10/0x10 [ 290.492057][ T8906] ? stack_depot_save_flags+0x27/0x9d0 [ 290.492101][ T8906] ? kasan_save_stack+0x3f/0x50 [ 290.492146][ T8906] ? kasan_save_stack+0x30/0x50 [ 290.492189][ T8906] ? kasan_save_track+0x14/0x30 [ 290.492247][ T8906] ? __kasan_slab_alloc+0x89/0x90 [ 290.492300][ T8906] ? kasan_save_stack+0x3f/0x50 [ 290.492349][ T8906] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 290.492402][ T8906] ? __lock_acquire+0x4a5/0x2630 [ 290.492440][ T8906] ? look_up_lock_class+0x55/0x120 [ 290.492499][ T8906] ? lock_acquire+0x1cf/0x380 [ 290.492552][ T8906] ? find_held_lock+0x2b/0x80 [ 290.492603][ T8906] ? page_table_check_set+0x49a/0xa10 [ 290.492652][ T8906] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 290.492707][ T8906] ? policy_nodemask+0xed/0x4f0 [ 290.492763][ T8906] alloc_pages_mpol+0x1fb/0x550 [ 290.492818][ T8906] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 290.492883][ T8906] folio_alloc_mpol_noprof+0x36/0x340 [ 290.492921][ T8906] vma_alloc_folio_noprof+0xed/0x1d0 [ 290.492956][ T8906] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 290.493004][ T8906] do_anonymous_page+0xb3a/0x1fb0 [ 290.493057][ T8906] __handle_mm_fault+0x1d42/0x2b60 [ 290.493108][ T8906] ? __pfx___handle_mm_fault+0x10/0x10 [ 290.493148][ T8906] ? pte_offset_map_lock+0x174/0x320 [ 290.493200][ T8906] ? find_held_lock+0x2b/0x80 [ 290.493276][ T8906] ? follow_page_pte+0x5b3/0x1400 [ 290.493340][ T8906] handle_mm_fault+0x36d/0xa20 [ 290.493388][ T8906] __get_user_pages+0xf9c/0x34d0 [ 290.493460][ T8906] ? __pfx___get_user_pages+0x10/0x10 [ 290.493530][ T8906] populate_vma_page_range+0x267/0x3f0 [ 290.493567][ T8906] ? __pfx_populate_vma_page_range+0x10/0x10 [ 290.493602][ T8906] ? __pfx_find_vma_intersection+0x10/0x10 [ 290.493659][ T8906] ? do_mmap+0x93f/0x12f0 [ 290.493724][ T8906] __mm_populate+0x107/0x3a0 [ 290.493759][ T8906] ? __pfx___mm_populate+0x10/0x10 [ 290.493794][ T8906] ? up_write+0x290/0x4f0 [ 290.493846][ T8906] vm_mmap_pgoff+0x37f/0x470 [ 290.493904][ T8906] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 290.493959][ T8906] ? blkcg_maybe_throttle_current+0x5df/0xeb0 [ 290.494017][ T8906] ? __x64_sys_futex+0x34f/0x4d0 [ 290.494056][ T8906] ? __x64_sys_futex+0x358/0x4d0 [ 290.494103][ T8906] ksys_mmap_pgoff+0x7d/0x5b0 [ 290.494163][ T8906] __x64_sys_mmap+0x125/0x190 [ 290.494229][ T8906] do_syscall_64+0x106/0xf80 [ 290.494275][ T8906] ? clear_bhb_loop+0x40/0x90 [ 290.494319][ T8906] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 290.494354][ T8906] RIP: 0033:0x7f227bf9bf79 [ 290.494383][ T8906] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 290.494416][ T8906] RSP: 002b:00007f227cdd5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 290.494449][ T8906] RAX: ffffffffffffffda RBX: 00007f227c216270 RCX: 00007f227bf9bf79 [ 290.494473][ T8906] RDX: 00000000000000df RSI: 0000000000400008 RDI: 0000000000000000 [ 290.494494][ T8906] RBP: 00007f227c0327e0 R08: 0000000000000002 R09: 0000000000008000 [ 290.494515][ T8906] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 290.494535][ T8906] R13: 00007f227c216308 R14: 00007f227c216270 R15: 00007fffa9b9bc98 [ 290.494579][ T8906] [ 290.988344][ T6382] Bluetooth: hci2: command 0x0406 tx timeout [ 291.136958][ T6382] Bluetooth: hci3: command 0x0406 tx timeout [ 291.331377][ T6382] Bluetooth: hci4: command 0x0406 tx timeout [ 291.408000][ T6382] Bluetooth: hci1: command 0x0c1a tx timeout [ 293.017446][ T6382] Bluetooth: hci2: command 0x0406 tx timeout [ 293.166960][ T6382] Bluetooth: hci3: command 0x0406 tx timeout [ 293.407360][ T6382] Bluetooth: hci4: command 0x0406 tx timeout [ 293.485954][ T8933] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 293.495819][ T6382] Bluetooth: hci1: command 0x0c1a tx timeout [ 294.667740][ T8948] FAULT_INJECTION: forcing a failure. [ 294.667740][ T8948] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 294.816626][ T8948] CPU: 1 UID: 0 PID: 8948 Comm: syz.2.578 Tainted: G L syzkaller #0 PREEMPT(full) [ 294.816679][ T8948] Tainted: [L]=SOFTLOCKUP [ 294.816691][ T8948] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 294.816710][ T8948] Call Trace: [ 294.816721][ T8948] [ 294.816734][ T8948] dump_stack_lvl+0x100/0x190 [ 294.816802][ T8948] should_fail_ex.cold+0x5/0xa [ 294.816852][ T8948] _copy_to_iter+0x1f3/0x1720 [ 294.816896][ T8948] ? rcu_is_watching+0x12/0xc0 [ 294.816948][ T8948] ? __pfx__copy_to_iter+0x10/0x10 [ 294.816985][ T8948] ? rcu_is_watching+0x12/0xc0 [ 294.817034][ T8948] ? trace_kmalloc+0x101/0x130 [ 294.817084][ T8948] ? __kmalloc_large_node_noprof+0x5d/0x70 [ 294.817144][ T8948] ? __asan_memcpy+0x3c/0x60 [ 294.817186][ T8948] ? append_kcore_note+0x17c/0x220 [ 294.817244][ T8948] read_kcore_iter+0x57d/0x18e0 [ 294.817291][ T8948] ? trace_sched_exit_tp+0x13a/0x180 [ 294.817341][ T8948] ? __pfx_read_kcore_iter+0x10/0x10 [ 294.817427][ T8948] ? aa_file_perm+0x277/0x1530 [ 294.817508][ T8948] ? common_file_perm+0x1ab/0x4f0 [ 294.817552][ T8948] ? proc_reg_read_iter+0x11b/0x310 [ 294.817581][ T8948] proc_reg_read_iter+0x11b/0x310 [ 294.817611][ T8948] ? __pfx_proc_reg_read_iter+0x10/0x10 [ 294.817643][ T8948] vfs_read+0x825/0xb30 [ 294.817686][ T8948] ? __pfx_vfs_read+0x10/0x10 [ 294.817722][ T8948] ? find_held_lock+0x2b/0x80 [ 294.817798][ T8948] __x64_sys_pread64+0x1eb/0x250 [ 294.817843][ T8948] ? __pfx___x64_sys_pread64+0x10/0x10 [ 294.817895][ T8948] do_syscall_64+0x106/0xf80 [ 294.817934][ T8948] ? clear_bhb_loop+0x40/0x90 [ 294.817969][ T8948] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 294.817998][ T8948] RIP: 0033:0x7f277339bf79 [ 294.818023][ T8948] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 294.818050][ T8948] RSP: 002b:00007f27741ea028 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 294.818076][ T8948] RAX: ffffffffffffffda RBX: 00007f2773616090 RCX: 00007f277339bf79 [ 294.818095][ T8948] RDX: 0000000000800003 RSI: 0000000000000000 RDI: 0000000000000009 [ 294.818111][ T8948] RBP: 00007f27734327e0 R08: 0000000000000000 R09: 0000000000000000 [ 294.818128][ T8948] R10: 0000000000000270 R11: 0000000000000246 R12: 0000000000000000 [ 294.818145][ T8948] R13: 00007f2773616128 R14: 00007f2773616090 R15: 00007fffb3689538 [ 294.818181][ T8948] [ 295.691411][ T6382] Bluetooth: hci1: command 0x0c1a tx timeout [ 299.481016][ T9030] FAULT_INJECTION: forcing a failure. [ 299.481016][ T9030] name failslab, interval 1, probability 0, space 0, times 0 [ 299.542445][ T9030] CPU: 0 UID: 0 PID: 9030 Comm: syz.5.592 Tainted: G L syzkaller #0 PREEMPT(full) [ 299.542497][ T9030] Tainted: [L]=SOFTLOCKUP [ 299.542504][ T9030] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 299.542518][ T9030] Call Trace: [ 299.542525][ T9030] [ 299.542534][ T9030] dump_stack_lvl+0x100/0x190 [ 299.542576][ T9030] should_fail_ex.cold+0x5/0xa [ 299.542603][ T9030] should_failslab+0xc2/0x120 [ 299.542640][ T9030] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 299.542676][ T9030] ? alloc_inode+0x183/0x250 [ 299.542703][ T9030] ? stashed_dentry_get+0x10a/0x2c0 [ 299.542738][ T9030] ? stashed_dentry_get+0x10a/0x2c0 [ 299.542778][ T9030] alloc_inode+0x183/0x250 [ 299.542804][ T9030] path_from_stashed+0x25b/0x750 [ 299.542847][ T9030] pidfs_alloc_file+0xf8/0x290 [ 299.542879][ T9030] ? __pfx_pidfs_alloc_file+0x10/0x10 [ 299.542919][ T9030] pidfd_prepare+0x129/0x200 [ 299.542947][ T9030] __x64_sys_pidfd_open+0x105/0x1a0 [ 299.542979][ T9030] ? __pfx___x64_sys_pidfd_open+0x10/0x10 [ 299.543018][ T9030] do_syscall_64+0x106/0xf80 [ 299.543048][ T9030] ? clear_bhb_loop+0x40/0x90 [ 299.543076][ T9030] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 299.543101][ T9030] RIP: 0033:0x7f227bf9bf79 [ 299.543120][ T9030] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 299.543142][ T9030] RSP: 002b:00007f227ce38028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b2 [ 299.543163][ T9030] RAX: ffffffffffffffda RBX: 00007f227c215fa0 RCX: 00007f227bf9bf79 [ 299.543178][ T9030] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 299.543191][ T9030] RBP: 00007f227c0327e0 R08: 0000000000000000 R09: 0000000000000000 [ 299.543204][ T9030] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 299.543217][ T9030] R13: 00007f227c216038 R14: 00007f227c215fa0 R15: 00007fffa9b9bc98 [ 299.543247][ T9030] [ 300.638876][ T9035] Console: switching to colour VGA+ 80x25 [ 300.986664][ T9037] kexec: Could not allocate control_code_buffer [ 301.188249][ T9045] Invalid ELF header magic: != ELF [ 301.451810][ T9050] bridge0: port 3(batadv0) entered blocking state [ 301.491487][ T9050] bridge0: port 3(batadv0) entered disabled state [ 301.523455][ T9050] batadv0: entered allmulticast mode [ 301.618665][ T9050] batadv0: entered promiscuous mode [ 301.679833][ T9050] bridge0: port 3(batadv0) entered blocking state [ 301.686626][ T9050] bridge0: port 3(batadv0) entered forwarding state [ 302.071717][ T58] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 302.081303][ T58] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 302.818136][ T9063] smpboot: CPU 1 is now offline [ 305.651989][ T9089] scsi_dev_info_list_add_str: bad dev info string ')zD 5fk+*X#R84*VsndvqQW}~YrȀ-8VGDƘLB%v†v}Ypq|?O[,! 7xWDr%[}E$3?G9Ff=lrGH;2L<=|8 -c Fո"[v9q4Mmvqk[(iNDСMX PSqqX4X`V!;r֍)y]WzfIH0,v{q8שUܹ䑉m؛HTwCz-nR%2]x05oՕ|3>lS*L/Cdgӑ[C=Cwem)l#' ''S.sHgi-TY%ܹF*8nFTH?i{' '' [ 308.241996][ T9129] netlink: 4 bytes leftover after parsing attributes in process `syz.1.606'. [ 314.692192][ T9213] netlink: 342 bytes leftover after parsing attributes in process `syz.5.617'. [ 317.239546][ T9163] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 317.357086][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.363905][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.469633][ T9260] netlink: 8 bytes leftover after parsing attributes in process `syz.4.626'. [ 318.627135][ T9242] zswap: compressor not available [ 318.835170][ T9275] netlink: 8 bytes leftover after parsing attributes in process `syz.2.627'. [ 318.944592][ T9276] netlink: 980 bytes leftover after parsing attributes in process `syz.2.627'. [ 320.050227][ T9325] netlink: 28 bytes leftover after parsing attributes in process `syz.4.632'. [ 320.109847][ T9325] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 320.177301][ T9325] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 320.357710][ T9325] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 320.396360][ T9325] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 320.619594][ T9333] netlink: 36 bytes leftover after parsing attributes in process `syz.5.634'. [ 321.733217][ T29] audit: type=1800 audit(4294967435.280:13): pid=9346 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.640" name="lu_gp_id" dev="configfs" ino=53715 res=0 errno=0 [ 322.117139][ T9350] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input7 [ 322.415747][ T9342] random: crng reseeded on system resumption [ 324.598350][ T9388] FAULT_INJECTION: forcing a failure. [ 324.598350][ T9388] name failslab, interval 1, probability 0, space 0, times 0 [ 324.794332][ T9388] CPU: 0 UID: 0 PID: 9388 Comm: syz.1.645 Tainted: G L syzkaller #0 PREEMPT(full) [ 324.794371][ T9388] Tainted: [L]=SOFTLOCKUP [ 324.794380][ T9388] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 324.794398][ T9388] Call Trace: [ 324.794405][ T9388] [ 324.794415][ T9388] dump_stack_lvl+0x100/0x190 [ 324.794456][ T9388] should_fail_ex.cold+0x5/0xa [ 324.794484][ T9388] should_failslab+0xc2/0x120 [ 324.794522][ T9388] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 324.794555][ T9388] ? __d_alloc+0x34/0xa80 [ 324.794600][ T9388] __d_alloc+0x34/0xa80 [ 324.794642][ T9388] d_alloc_parallel+0x111/0x14e0 [ 324.794673][ T9388] ? stack_trace_save+0x8e/0xc0 [ 324.794716][ T9388] ? __lock_acquire+0x4a5/0x2630 [ 324.794749][ T9388] ? __pfx_d_alloc_parallel+0x10/0x10 [ 324.794783][ T9388] ? lockdep_init_map_type+0x5c/0x250 [ 324.794815][ T9388] ? lockdep_init_map_type+0x5c/0x250 [ 324.794851][ T9388] __lookup_slow+0x193/0x460 [ 324.794878][ T9388] ? __pfx___lookup_slow+0x10/0x10 [ 324.794920][ T9388] ? __d_lookup+0x266/0x4a0 [ 324.794955][ T9388] lookup_slow+0x50/0x70 [ 324.794981][ T9388] link_path_walk+0x1377/0x1cc0 [ 324.795024][ T9388] path_openat+0x1be/0x31a0 [ 324.795059][ T9388] ? kasan_save_stack+0x3f/0x50 [ 324.795090][ T9388] ? kasan_save_stack+0x30/0x50 [ 324.795122][ T9388] ? kasan_save_track+0x14/0x30 [ 324.795160][ T9388] ? kmem_cache_alloc_noprof+0x241/0x6e0 [ 324.795201][ T9388] ? __pfx_path_openat+0x10/0x10 [ 324.795249][ T9388] do_file_open+0x20e/0x430 [ 324.795288][ T9388] ? __pfx_do_file_open+0x10/0x10 [ 324.795350][ T9388] ? alloc_fd+0x476/0x790 [ 324.795388][ T9388] ? do_getname+0x191/0x390 [ 324.795415][ T9388] do_sys_openat2+0x10d/0x1e0 [ 324.795443][ T9388] ? __pfx_do_sys_openat2+0x10/0x10 [ 324.795480][ T9388] __x64_sys_openat+0x12d/0x210 [ 324.795508][ T9388] ? __pfx___x64_sys_openat+0x10/0x10 [ 324.795547][ T9388] do_syscall_64+0x106/0xf80 [ 324.795579][ T9388] ? clear_bhb_loop+0x40/0x90 [ 324.795609][ T9388] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 324.795635][ T9388] RIP: 0033:0x7f3f4059bf79 [ 324.795655][ T9388] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 324.795678][ T9388] RSP: 002b:00007f3f4152d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 324.795706][ T9388] RAX: ffffffffffffffda RBX: 00007f3f40815fa0 RCX: 00007f3f4059bf79 [ 324.795723][ T9388] RDX: 0000000000143402 RSI: 00002000000001c0 RDI: ffffffffffffff9c [ 324.795738][ T9388] RBP: 00007f3f406327e0 R08: 0000000000000000 R09: 0000000000000000 [ 324.795753][ T9388] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 324.795767][ T9388] R13: 00007f3f40816038 R14: 00007f3f40815fa0 R15: 00007ffead2f2e88 [ 324.795798][ T9388] [ 329.793307][ T9461] netlink: 12 bytes leftover after parsing attributes in process `syz.5.656'. [ 330.315303][ T9470] openvswitch: netlink: IP tunnel TTL not specified. [ 330.717534][ T9474] netlink: 'syz.4.660': attribute type 4 has an invalid length. [ 331.020736][ T9480] random: crng reseeded on system resumption [ 331.547193][ T9478] zswap: compressor not available [ 331.692437][ T9480] NFSD: Failed to start, no listeners configured. [ 337.728718][ T9570] netlink: 2468 bytes leftover after parsing attributes in process `syz.4.678'. [ 337.935731][ T9555] warning: `syz.2.675' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 342.841453][ T9622] FAULT_INJECTION: forcing a failure. [ 342.841453][ T9622] name failslab, interval 1, probability 0, space 0, times 0 [ 343.098410][ T9622] CPU: 0 UID: 0 PID: 9622 Comm: syz.4.688 Tainted: G L syzkaller #0 PREEMPT(full) [ 343.098458][ T9622] Tainted: [L]=SOFTLOCKUP [ 343.098466][ T9622] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 343.098481][ T9622] Call Trace: [ 343.098489][ T9622] [ 343.098498][ T9622] dump_stack_lvl+0x100/0x190 [ 343.098540][ T9622] should_fail_ex.cold+0x5/0xa [ 343.098568][ T9622] ? __netlink_kernel_create+0x181/0x750 [ 343.098603][ T9622] should_failslab+0xc2/0x120 [ 343.098641][ T9622] __kmalloc_noprof+0xe0/0x850 [ 343.098680][ T9622] __netlink_kernel_create+0x181/0x750 [ 343.098716][ T9622] ? __pfx___netlink_kernel_create+0x10/0x10 [ 343.098761][ T9622] fib_net_init+0x26d/0x3f0 [ 343.098795][ T9622] ? is_module_address+0x69/0xf0 [ 343.098825][ T9622] ? __pfx_fib_net_init+0x10/0x10 [ 343.098860][ T9622] ? timer_init_key+0x150/0x340 [ 343.098884][ T9622] ? __pfx_nl_fib_input+0x10/0x10 [ 343.098922][ T9622] ? devinet_init_net+0x56c/0x8d0 [ 343.098963][ T9622] ? __pfx_fib_net_init+0x10/0x10 [ 343.098996][ T9622] ops_init+0x1e2/0x5f0 [ 343.099032][ T9622] setup_net+0x118/0x3a0 [ 343.099066][ T9622] ? __pfx_setup_net+0x10/0x10 [ 343.099098][ T9622] ? lockdep_init_map_type+0x5c/0x250 [ 343.099130][ T9622] ? mutex_init_lockep+0x110/0x150 [ 343.099172][ T9622] copy_net_ns+0x46f/0x7c0 [ 343.099212][ T9622] create_new_namespaces+0x3ea/0xac0 [ 343.099261][ T9622] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 343.099288][ T9622] ksys_unshare+0x455/0xab0 [ 343.099320][ T9622] ? __pfx_ksys_unshare+0x10/0x10 [ 343.099361][ T9622] __x64_sys_unshare+0x31/0x40 [ 343.099391][ T9622] do_syscall_64+0x106/0xf80 [ 343.099423][ T9622] ? clear_bhb_loop+0x40/0x90 [ 343.099488][ T9622] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 343.099514][ T9622] RIP: 0033:0x7fce7759bf79 [ 343.099534][ T9622] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 343.099558][ T9622] RSP: 002b:00007fce784b1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 343.099581][ T9622] RAX: ffffffffffffffda RBX: 00007fce77815fa0 RCX: 00007fce7759bf79 [ 343.099597][ T9622] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 343.099611][ T9622] RBP: 00007fce776327e0 R08: 0000000000000000 R09: 0000000000000000 [ 343.099626][ T9622] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 343.099640][ T9622] R13: 00007fce77816038 R14: 00007fce77815fa0 R15: 00007fff2e04e0f8 [ 343.099672][ T9622] [ 348.205084][ T9691] netlink: 342 bytes leftover after parsing attributes in process `syz.2.702'. [ 349.432056][ T9697] could not allocate digest TFM handle [ 351.936726][ T9740] blktrace: Concurrent blktraces are not allowed on loop2 [ 352.397134][ T9750] snd_virmidi snd_virmidi.0: control 1:-5:4194312:1Յ:0 is already present [ 352.602133][ T9747] HSR: entered promiscuous mode [ 353.039200][ T9762] block nbd8: shutting down sockets [ 354.998715][ T9796] Invalid ELF header magic: != ELF [ 357.136730][ T9829] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 359.510951][ T9871] Setting dangerous option i915.mitigations - tainting kernel [ 359.569974][ T9857] netlink: 330 bytes leftover after parsing attributes in process `syz.5.735'. [ 359.649559][ T9869] netlink: 12 bytes leftover after parsing attributes in process `syz.2.738'. [ 359.659572][ T9857] : renamed from ip6tnl0 (while UP) [ 359.759484][ T9869] i: entered promiscuous mode [ 359.847382][ T9871] HfR: entered promiscuous mode [ 360.348042][ T9879] FAULT_INJECTION: forcing a failure. [ 360.348042][ T9879] name failslab, interval 1, probability 0, space 0, times 0 [ 360.415405][ T9879] CPU: 0 UID: 0 PID: 9879 Comm: syz.5.740 Tainted: G U L syzkaller #0 PREEMPT(full) [ 360.415447][ T9879] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 360.415457][ T9879] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 360.415472][ T9879] Call Trace: [ 360.415480][ T9879] [ 360.415489][ T9879] dump_stack_lvl+0x100/0x190 [ 360.415531][ T9879] should_fail_ex.cold+0x5/0xa [ 360.415560][ T9879] should_failslab+0xc2/0x120 [ 360.415599][ T9879] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 360.415631][ T9879] ? __kernfs_new_node+0xd2/0x960 [ 360.415662][ T9879] __kernfs_new_node+0xd2/0x960 [ 360.415688][ T9879] ? kernfs_add_one+0x583/0x850 [ 360.415719][ T9879] ? __pfx___kernfs_new_node+0x10/0x10 [ 360.415751][ T9879] ? find_held_lock+0x2b/0x80 [ 360.415790][ T9879] ? kernfs_root+0xee/0x2a0 [ 360.415813][ T9879] ? kernfs_root+0xee/0x2a0 [ 360.415844][ T9879] kernfs_new_node+0x11b/0x1a0 [ 360.415878][ T9879] __kernfs_create_file+0x53/0x350 [ 360.415918][ T9879] sysfs_add_file_mode_ns+0x207/0x3c0 [ 360.415966][ T9879] sysfs_create_file_ns+0x145/0x1e0 [ 360.416017][ T9879] ? __pfx_sysfs_create_file_ns+0x10/0x10 [ 360.416060][ T9879] ? __pfx___up_read+0x10/0x10 [ 360.416094][ T9879] ? acpi_device_notify+0x464/0x500 [ 360.416121][ T9879] ? kobject_put+0xb9/0x640 [ 360.416161][ T9879] device_create_file+0xf2/0x1d0 [ 360.416199][ T9879] device_add+0x2cb/0x1950 [ 360.416228][ T9879] ? alloc_workqueue_noprof+0x192/0x200 [ 360.416256][ T9879] ? alloc_workqueue_noprof+0x198/0x200 [ 360.416284][ T9879] ? __pfx_device_add+0x10/0x10 [ 360.416324][ T9879] nfc_register_device+0x41/0x3e0 [ 360.416360][ T9879] nci_register_device+0x7f1/0xb80 [ 360.416386][ T9879] ? __pfx_nci_register_device+0x10/0x10 [ 360.416416][ T9879] ? lockdep_init_map_type+0x5c/0x250 [ 360.416455][ T9879] virtual_ncidev_open+0x141/0x220 [ 360.416491][ T9879] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 360.416525][ T9879] misc_open+0x26d/0x450 [ 360.416554][ T9879] ? __pfx_misc_open+0x10/0x10 [ 360.416583][ T9879] chrdev_open+0x234/0x6a0 [ 360.416620][ T9879] ? __pfx_apparmor_file_open+0x10/0x10 [ 360.416645][ T9879] ? __pfx_chrdev_open+0x10/0x10 [ 360.416685][ T9879] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 360.416729][ T9879] do_dentry_open+0x6d8/0x1660 [ 360.416765][ T9879] ? __pfx_chrdev_open+0x10/0x10 [ 360.416810][ T9879] vfs_open+0x82/0x3f0 [ 360.416839][ T9879] path_openat+0x208c/0x31a0 [ 360.416886][ T9879] ? __pfx_path_openat+0x10/0x10 [ 360.416934][ T9879] do_file_open+0x20e/0x430 [ 360.416983][ T9879] ? __pfx_do_file_open+0x10/0x10 [ 360.417050][ T9879] ? alloc_fd+0x476/0x790 [ 360.417088][ T9879] ? do_getname+0x191/0x390 [ 360.417116][ T9879] do_sys_openat2+0x10d/0x1e0 [ 360.417144][ T9879] ? __pfx_do_sys_openat2+0x10/0x10 [ 360.417183][ T9879] __x64_sys_openat+0x12d/0x210 [ 360.417212][ T9879] ? __pfx___x64_sys_openat+0x10/0x10 [ 360.417251][ T9879] do_syscall_64+0x106/0xf80 [ 360.417283][ T9879] ? clear_bhb_loop+0x40/0x90 [ 360.417314][ T9879] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 360.417340][ T9879] RIP: 0033:0x7f227bf9bf79 [ 360.417362][ T9879] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 360.417386][ T9879] RSP: 002b:00007f227ce38028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 360.417410][ T9879] RAX: ffffffffffffffda RBX: 00007f227c215fa0 RCX: 00007f227bf9bf79 [ 360.417427][ T9879] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 360.417443][ T9879] RBP: 00007f227c0327e0 R08: 0000000000000000 R09: 0000000000000000 [ 360.417458][ T9879] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 360.417474][ T9879] R13: 00007f227c216038 R14: 00007f227c215fa0 R15: 00007fffa9b9bc98 [ 360.417506][ T9879] [ 362.904022][ T9918] vhci_hcd vhci_hcd.2: USB_PORT_FEAT_BH_PORT_RESET req not supported for USB 2.0 roothub [ 364.672375][ T9925] netlink: 330 bytes leftover after parsing attributes in process `syz.2.749'. [ 365.590603][ T9947] block nbd8: shutting down sockets [ 368.411665][ T9990] FAULT_INJECTION: forcing a failure. [ 368.411665][ T9990] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 368.517933][ T9990] CPU: 0 UID: 0 PID: 9990 Comm: syz.1.764 Tainted: G U L syzkaller #0 PREEMPT(full) [ 368.517976][ T9990] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 368.517986][ T9990] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 368.518000][ T9990] Call Trace: [ 368.518009][ T9990] [ 368.518019][ T9990] dump_stack_lvl+0x100/0x190 [ 368.518060][ T9990] should_fail_ex.cold+0x5/0xa [ 368.518089][ T9990] _copy_to_user+0x32/0xd0 [ 368.518122][ T9990] put_timespec64+0xb5/0x130 [ 368.518148][ T9990] ? __pfx_put_timespec64+0x10/0x10 [ 368.518171][ T9990] ? lockdep_hardirqs_on+0x78/0x100 [ 368.518205][ T9990] ? read_tsc+0x9/0x20 [ 368.518230][ T9990] ? ktime_get_ts64+0x256/0x3f0 [ 368.518255][ T9990] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 368.518303][ T9990] poll_select_finish+0x54b/0x670 [ 368.518339][ T9990] ? __pfx_poll_select_finish+0x10/0x10 [ 368.518372][ T9990] ? timespec64_add_safe+0x192/0x220 [ 368.518398][ T9990] ? __pfx_timespec64_add_safe+0x10/0x10 [ 368.518425][ T9990] ? set_user_sigmask+0x1e1/0x270 [ 368.518464][ T9990] ? __pfx_set_user_sigmask+0x10/0x10 [ 368.518503][ T9990] ? read_tsc+0x9/0x20 [ 368.518528][ T9990] ? ktime_get_ts64+0x256/0x3f0 [ 368.518556][ T9990] __x64_sys_ppoll+0x2c7/0x350 [ 368.518595][ T9990] ? __pfx___x64_sys_ppoll+0x10/0x10 [ 368.518642][ T9990] do_syscall_64+0x106/0xf80 [ 368.518674][ T9990] ? clear_bhb_loop+0x40/0x90 [ 368.518718][ T9990] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 368.518744][ T9990] RIP: 0033:0x7f3f4059bf79 [ 368.518765][ T9990] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 368.518789][ T9990] RSP: 002b:00007f3f4152d028 EFLAGS: 00000246 ORIG_RAX: 000000000000010f [ 368.518813][ T9990] RAX: ffffffffffffffda RBX: 00007f3f40815fa0 RCX: 00007f3f4059bf79 [ 368.518829][ T9990] RDX: 0000200000003640 RSI: 00000000000000d6 RDI: 0000200000003600 [ 368.518845][ T9990] RBP: 00007f3f406327e0 R08: 0000000000000008 R09: 0000000000000000 [ 368.518860][ T9990] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 368.518875][ T9990] R13: 00007f3f40816038 R14: 00007f3f40815fa0 R15: 00007ffead2f2e88 [ 368.518907][ T9990] [ 369.341589][ T9988] netlink: 330 bytes leftover after parsing attributes in process `syz.4.762'. [ 370.538606][ T9989] mmap: syz.1.764 (9989): VmData 37724160 exceed data ulimit 1025. Update limits or use boot option ignore_rlimit_data. [ 370.789273][T10010] netlink: 'syz.4.769': attribute type 21 has an invalid length. [ 370.850507][T10010] netlink: 326 bytes leftover after parsing attributes in process `syz.4.769'. [ 370.920679][T10010] IPv6: NLM_F_CREATE should be specified when creating new route [ 371.048219][T10003] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 371.092676][T10003] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 371.163004][T10003] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 371.213584][T10003] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 372.607073][ T6382] Bluetooth: hci2: command 0x0406 tx timeout [ 373.166956][ T6382] Bluetooth: hci3: command 0x0406 tx timeout [ 373.247995][ T6385] Bluetooth: hci4: command 0x0406 tx timeout [ 373.254091][ T6382] Bluetooth: hci1: command 0x0c1a tx timeout [ 374.031595][T10044] netlink: 330 bytes leftover after parsing attributes in process `syz.2.775'. [ 374.832402][T10069] random: crng reseeded on system resumption [ 374.847345][T10063] netlink: 36 bytes leftover after parsing attributes in process `syz.5.778'. [ 375.425797][T10070] hub 1-0:1.0: USB hub found [ 375.583523][T10070] hub 1-0:1.0: 1 port detected [ 375.754645][ T6382] Bluetooth: hci4: unexpected event 0x20 length: 123 > 7 [ 377.629603][T10121] netlink: 4 bytes leftover after parsing attributes in process `syz.4.787'. [ 377.799029][T10110] zswap: compressor not available [ 378.783532][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.807521][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.281327][T10136] FAULT_INJECTION: forcing a failure. [ 379.281327][T10136] name fail_futex, interval 1, probability 0, space 0, times 0 [ 379.370493][T10136] CPU: 0 UID: 0 PID: 10136 Comm: syz.1.790 Tainted: G U L syzkaller #0 PREEMPT(full) [ 379.370543][T10136] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 379.370552][T10136] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 379.370568][T10136] Call Trace: [ 379.370576][T10136] [ 379.370585][T10136] dump_stack_lvl+0x100/0x190 [ 379.370628][T10136] should_fail_ex.cold+0x5/0xa [ 379.370657][T10136] get_futex_key+0x1d2/0x1620 [ 379.370688][T10136] ? __pfx_get_futex_key+0x10/0x10 [ 379.370727][T10136] ? __fput+0x68a/0xb40 [ 379.370754][T10136] futex_wait_setup+0x81/0x500 [ 379.370797][T10136] __futex_wait+0x19f/0x300 [ 379.370835][T10136] ? __pfx___futex_wait+0x10/0x10 [ 379.370874][T10136] ? __pfx_futex_wake_mark+0x10/0x10 [ 379.370913][T10136] ? futex_hash+0x2c5/0x380 [ 379.370948][T10136] futex_wait+0xed/0x380 [ 379.370983][T10136] ? __pfx_futex_wait+0x10/0x10 [ 379.371039][T10136] do_futex+0x1ef/0x350 [ 379.371068][T10136] ? __pfx_do_futex+0x10/0x10 [ 379.371097][T10136] ? __pfx___might_resched+0x10/0x10 [ 379.371130][T10136] ? blkcg_maybe_throttle_current+0x5df/0xeb0 [ 379.371173][T10136] __x64_sys_futex+0x34f/0x4d0 [ 379.371209][T10136] ? __pfx_task_work_run+0x10/0x10 [ 379.371243][T10136] ? __pfx___x64_sys_futex+0x10/0x10 [ 379.371281][T10136] ? exit_to_user_mode_loop+0xdd/0x4a0 [ 379.371324][T10136] do_syscall_64+0x106/0xf80 [ 379.371356][T10136] ? clear_bhb_loop+0x40/0x90 [ 379.371387][T10136] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 379.371413][T10136] RIP: 0033:0x7f3f4059bf79 [ 379.371432][T10136] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 379.371456][T10136] RSP: 002b:00007f3f4152d0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 379.371480][T10136] RAX: ffffffffffffffda RBX: 00007f3f40815fa8 RCX: 00007f3f4059bf79 [ 379.371496][T10136] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f3f40815fa8 [ 379.371511][T10136] RBP: 00007f3f40815fa0 R08: 0000000000000000 R09: 0000000000000000 [ 379.371528][T10136] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 379.371543][T10136] R13: 00007f3f40816038 R14: 00007ffead2f2da0 R15: 00007ffead2f2e88 [ 379.371574][T10136] [ 380.245045][T10145] netlink: 342 bytes leftover after parsing attributes in process `syz.4.792'. [ 383.645768][ T29] audit: type=1804 audit(4294967497.190:14): pid=10177 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.800" name="/newroot/237/file0" dev="tmpfs" ino=1255 res=1 errno=0 [ 383.844252][ T29] audit: type=1804 audit(4294967497.260:15): pid=10180 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.800" name="/newroot/237/file0" dev="tmpfs" ino=1255 res=1 errno=0 [ 383.924870][T10193] netlink: 326 bytes leftover after parsing attributes in process `syz.4.802'. [ 384.152996][T10200] netlink: 334 bytes leftover after parsing attributes in process `syz.5.801'. [ 386.781535][T10226] FAULT_INJECTION: forcing a failure. [ 386.781535][T10226] name failslab, interval 1, probability 0, space 0, times 0 [ 386.925192][T10226] CPU: 0 UID: 0 PID: 10226 Comm: syz.1.810 Tainted: G U L syzkaller #0 PREEMPT(full) [ 386.925234][T10226] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 386.925244][T10226] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 386.925258][T10226] Call Trace: [ 386.925266][T10226] [ 386.925276][T10226] dump_stack_lvl+0x100/0x190 [ 386.925317][T10226] should_fail_ex.cold+0x5/0xa [ 386.925346][T10226] should_failslab+0xc2/0x120 [ 386.925384][T10226] __kmalloc_cache_noprof+0x7a/0x6f0 [ 386.925412][T10226] ? __do_sys_fanotify_init+0x5cf/0xe50 [ 386.925443][T10226] ? get_mem_cgroup_from_mm+0x88/0x600 [ 386.925473][T10226] ? get_mem_cgroup_from_mm+0x132/0x600 [ 386.925509][T10226] __do_sys_fanotify_init+0x5cf/0xe50 [ 386.925546][T10226] do_syscall_64+0x106/0xf80 [ 386.925578][T10226] ? clear_bhb_loop+0x40/0x90 [ 386.925609][T10226] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 386.925642][T10226] RIP: 0033:0x7f3f4059bf79 [ 386.925661][T10226] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 386.925686][T10226] RSP: 002b:00007f3f4152d028 EFLAGS: 00000246 ORIG_RAX: 000000000000012c [ 386.925710][T10226] RAX: ffffffffffffffda RBX: 00007f3f40815fa0 RCX: 00007f3f4059bf79 [ 386.925727][T10226] RDX: 0000000000000000 RSI: 0002000000000002 RDI: 0000000000000005 [ 386.925742][T10226] RBP: 00007f3f406327e0 R08: 0000000000000000 R09: 0000000000000000 [ 386.925757][T10226] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 386.925772][T10226] R13: 00007f3f40816038 R14: 00007f3f40815fa0 R15: 00007ffead2f2e88 [ 386.925803][T10226] [ 387.567540][T10224] perf: Dynamic interrupt throttling disabled, can hang your system! [ 387.972560][T10235] zswap: compressor not available [ 388.466909][ T29] audit: type=1800 audit(4294967502.010:16): pid=10252 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.814" name="SYSV00000008" dev="hugetlbfs" ino=0 res=0 errno=0 [ 389.208387][T10256] [U] 0="/ [ 389.212062][T10256] [U] [ 389.311574][T10256] [U] EeQ@ [ 389.393466][T10259] netlink: 330 bytes leftover after parsing attributes in process `syz.1.816'. [ 389.412188][T10255] [U]  [ 391.089429][T10278] netlink: 202 bytes leftover after parsing attributes in process `syz.4.818'. [ 394.257581][T10311] netlink: 330 bytes leftover after parsing attributes in process `syz.4.828'. [ 398.528097][T10360] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 398.536949][T10360] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 398.600339][T10360] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 398.657155][T10360] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 399.112697][T10372] FAULT_INJECTION: forcing a failure. [ 399.112697][T10372] name failslab, interval 1, probability 0, space 0, times 0 [ 399.210860][T10372] CPU: 0 UID: 0 PID: 10372 Comm: syz.2.844 Tainted: G U L syzkaller #0 PREEMPT(full) [ 399.210904][T10372] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 399.210914][T10372] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 399.210929][T10372] Call Trace: [ 399.210937][T10372] [ 399.210946][T10372] dump_stack_lvl+0x100/0x190 [ 399.210988][T10372] should_fail_ex.cold+0x5/0xa [ 399.211017][T10372] should_failslab+0xc2/0x120 [ 399.211055][T10372] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 399.211088][T10372] ? __mt_dup+0x5a8/0xc20 [ 399.211127][T10372] __mt_dup+0x5a8/0xc20 [ 399.211163][T10372] ? __lock_acquire+0x4a5/0x2630 [ 399.211194][T10372] ? __pfx___mt_dup+0x10/0x10 [ 399.211256][T10372] dup_mmap+0x3a3/0x1db0 [ 399.211290][T10372] ? __pfx_dup_mmap+0x10/0x10 [ 399.211313][T10372] ? rcu_is_watching+0x12/0xc0 [ 399.211369][T10372] copy_process+0x73d1/0x7a10 [ 399.211412][T10372] ? __pfx_copy_process+0x10/0x10 [ 399.211454][T10372] kernel_clone+0xfc/0x9a0 [ 399.211480][T10372] ? __pfx_futex_wait+0x10/0x10 [ 399.211514][T10372] ? madvise_unlock+0x172/0x220 [ 399.211554][T10372] ? __pfx_kernel_clone+0x10/0x10 [ 399.211598][T10372] __do_sys_clone+0xd9/0x120 [ 399.211627][T10372] ? __pfx___do_sys_clone+0x10/0x10 [ 399.211655][T10372] ? find_held_lock+0x2b/0x80 [ 399.211725][T10372] do_syscall_64+0x106/0xf80 [ 399.211757][T10372] ? clear_bhb_loop+0x40/0x90 [ 399.211789][T10372] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 399.211814][T10372] RIP: 0033:0x7f277339bf79 [ 399.211834][T10372] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 399.211859][T10372] RSP: 002b:00007f277420afd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 399.211883][T10372] RAX: ffffffffffffffda RBX: 00007f2773615fa0 RCX: 00007f277339bf79 [ 399.211899][T10372] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000004001000 [ 399.211914][T10372] RBP: 00007f27734327e0 R08: 0000000000000000 R09: 0000000000000000 [ 399.211930][T10372] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 399.211944][T10372] R13: 00007f2773616038 R14: 00007f2773615fa0 R15: 00007fffb3689538 [ 399.211976][T10372] [ 399.968160][ T6382] Bluetooth: hci2: command 0x0406 tx timeout [ 400.606929][ T6382] Bluetooth: hci3: command 0x0406 tx timeout [ 400.697178][ T6382] Bluetooth: hci1: command 0x0c1a tx timeout [ 400.703239][ T6382] Bluetooth: hci4: command 0x0406 tx timeout [ 402.624178][T10422] FAULT_INJECTION: forcing a failure. [ 402.624178][T10422] name failslab, interval 1, probability 0, space 0, times 0 [ 403.023050][T10422] CPU: 0 UID: 0 PID: 10422 Comm: syz.4.852 Tainted: G U L syzkaller #0 PREEMPT(full) [ 403.023093][T10422] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 403.023107][T10422] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 403.023121][T10422] Call Trace: [ 403.023129][T10422] [ 403.023138][T10422] dump_stack_lvl+0x100/0x190 [ 403.023186][T10422] should_fail_ex.cold+0x5/0xa [ 403.023215][T10422] should_failslab+0xc2/0x120 [ 403.023254][T10422] __kmalloc_cache_noprof+0x7a/0x6f0 [ 403.023281][T10422] ? sctp_auth_shkey_create+0x9e/0x210 [ 403.023323][T10422] sctp_auth_shkey_create+0x9e/0x210 [ 403.023367][T10422] sctp_endpoint_new+0x589/0xb20 [ 403.023406][T10422] ? __pfx_sctp_endpoint_new+0x10/0x10 [ 403.023445][T10422] ? lockdep_init_map_type+0x5c/0x250 [ 403.023477][T10422] ? lockdep_init_map_type+0x5c/0x250 [ 403.023512][T10422] sctp_init_sock+0xe2b/0x1300 [ 403.023545][T10422] ? __pfx_sctp_v6_init_sock+0x10/0x10 [ 403.023580][T10422] sctp_v6_init_sock+0x16/0x70 [ 403.023612][T10422] ? __pfx_sctp_v6_init_sock+0x10/0x10 [ 403.023646][T10422] inet6_create+0xb21/0x12b0 [ 403.023682][T10422] ? inet6_create+0x7f/0x12b0 [ 403.023717][T10422] __sock_create+0x339/0x860 [ 403.023764][T10422] __sys_socket+0x14d/0x260 [ 403.023788][T10422] ? __pfx___sys_socket+0x10/0x10 [ 403.023821][T10422] __x64_sys_socket+0x72/0xb0 [ 403.023844][T10422] ? lockdep_hardirqs_on+0x78/0x100 [ 403.023877][T10422] do_syscall_64+0x106/0xf80 [ 403.023908][T10422] ? clear_bhb_loop+0x40/0x90 [ 403.023938][T10422] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 403.023964][T10422] RIP: 0033:0x7fce7759bf79 [ 403.023985][T10422] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 403.024009][T10422] RSP: 002b:00007fce7846f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 403.024033][T10422] RAX: ffffffffffffffda RBX: 00007fce77816180 RCX: 00007fce7759bf79 [ 403.024050][T10422] RDX: 0000000000000084 RSI: 0000000000000001 RDI: 000000000000000a [ 403.024065][T10422] RBP: 00007fce776327e0 R08: 0000000000000000 R09: 0000000000000000 [ 403.024080][T10422] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 403.024094][T10422] R13: 00007fce77816218 R14: 00007fce77816180 R15: 00007fff2e04e0f8 [ 403.024126][T10422] [ 405.035945][T10443] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input10 [ 406.158290][ T29] audit: type=1800 audit(4294967301.980:17): pid=10453 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.860" name="dbroot" dev="configfs" ino=94487 res=0 errno=0 [ 407.916935][T10471] FAULT_INJECTION: forcing a failure. [ 407.916935][T10471] name failslab, interval 1, probability 0, space 0, times 0 [ 408.226056][T10471] CPU: 0 UID: 0 PID: 10471 Comm: syz.5.861 Tainted: G U L syzkaller #0 PREEMPT(full) [ 408.226099][T10471] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 408.226109][T10471] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 408.226124][T10471] Call Trace: [ 408.226132][T10471] [ 408.226141][T10471] dump_stack_lvl+0x100/0x190 [ 408.226183][T10471] should_fail_ex.cold+0x5/0xa [ 408.226212][T10471] should_failslab+0xc2/0x120 [ 408.226251][T10471] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 408.226285][T10471] ? __d_alloc+0x34/0xa80 [ 408.226324][T10471] ? lockdep_init_map_type+0x5c/0x250 [ 408.226361][T10471] __d_alloc+0x34/0xa80 [ 408.226403][T10471] d_alloc_pseudo+0x1c/0xc0 [ 408.226433][T10471] alloc_file_pseudo+0xcf/0x230 [ 408.226461][T10471] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 408.226487][T10471] ? alloc_fd+0x476/0x790 [ 408.226527][T10471] sock_alloc_file+0x50/0x210 [ 408.226564][T10471] __sys_socket+0x1c0/0x260 [ 408.226588][T10471] ? __pfx___sys_socket+0x10/0x10 [ 408.226633][T10471] __x64_sys_socket+0x72/0xb0 [ 408.226656][T10471] ? lockdep_hardirqs_on+0x78/0x100 [ 408.226697][T10471] do_syscall_64+0x106/0xf80 [ 408.226729][T10471] ? clear_bhb_loop+0x40/0x90 [ 408.226761][T10471] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 408.226791][T10471] RIP: 0033:0x7f227bf9bf79 [ 408.226813][T10471] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 408.226838][T10471] RSP: 002b:00007f227cd93028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 408.226862][T10471] RAX: ffffffffffffffda RBX: 00007f227c216450 RCX: 00007f227bf9bf79 [ 408.226882][T10471] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 408.226900][T10471] RBP: 00007f227c0327e0 R08: 0000000000000000 R09: 0000000000000000 [ 408.226915][T10471] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 408.226931][T10471] R13: 00007f227c2164e8 R14: 00007f227c216450 R15: 00007fffa9b9bc98 [ 408.226962][T10471] [ 410.293754][ C0] sd 0:0:1:0: [sda] tag#9815 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 410.304303][ C0] sd 0:0:1:0: [sda] tag#9815 CDB: Read(6) 08 00 00 00 10 00 00 00 00 00 00 00 [ 418.264130][T10576] zram: Added device: zram2 [ 420.168307][T10595] random: crng reseeded on system resumption [ 423.818188][T10621] mkiss: ax0: crc mode is auto. [ 423.912945][T10624] netlink: 'syz.5.892': attribute type 27 has an invalid length. [ 423.986947][T10624] netlink: 334 bytes leftover after parsing attributes in process `syz.5.892'. [ 425.856571][ T6385] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 425.872428][ T6385] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 425.880896][ T6385] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 425.890326][ T6385] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 425.922862][ T6385] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 426.138023][T10635] zero sized request [ 427.375216][T10636] chnl_net:caif_netlink_parms(): no params data found [ 427.623515][T10662] Invalid ELF header magic: != ELF [ 427.967800][ T6385] Bluetooth: hci0: command tx timeout [ 428.087984][T10636] bridge0: port 1(bridge_slave_0) entered blocking state [ 428.123240][T10636] bridge0: port 1(bridge_slave_0) entered disabled state [ 428.183210][T10636] bridge_slave_0: entered allmulticast mode [ 428.237812][T10636] bridge_slave_0: entered promiscuous mode [ 428.296401][T10636] bridge0: port 2(bridge_slave_1) entered blocking state [ 428.377675][T10636] bridge0: port 2(bridge_slave_1) entered disabled state [ 428.384943][T10636] bridge_slave_1: entered allmulticast mode [ 428.468914][T10636] bridge_slave_1: entered promiscuous mode [ 428.791150][T10636] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 428.919466][T10636] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 429.142698][T10636] team0: Port device team_slave_0 added [ 429.191499][T10636] team0: Port device team_slave_1 added [ 429.739577][T10636] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 429.776929][T10636] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 429.967949][T10636] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 430.047810][ T6385] Bluetooth: hci0: command tx timeout [ 430.194909][T10636] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 430.258442][T10636] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 430.438855][T10636] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 430.798429][T10636] hsr_slave_0: entered promiscuous mode [ 430.853473][T10636] hsr_slave_1: entered promiscuous mode [ 430.892918][T10636] debugfs: 'hsr0' already exists in 'hsr' [ 430.947772][T10636] Cannot create hsr debugfs directory [ 431.969473][T10693] netlink: 330 bytes leftover after parsing attributes in process `syz.5.908'. [ 432.129852][ T6385] Bluetooth: hci0: command tx timeout [ 432.159911][T10636] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 432.273162][T10636] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 432.329047][T10636] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 432.370492][T10636] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 432.866902][T10636] 8021q: adding VLAN 0 to HW filter on device bond0 [ 432.994869][T10636] 8021q: adding VLAN 0 to HW filter on device team0 [ 433.142110][ T9284] bridge0: port 1(bridge_slave_0) entered blocking state [ 433.149348][ T9284] bridge0: port 1(bridge_slave_0) entered forwarding state [ 433.284204][ T9284] bridge0: port 2(bridge_slave_1) entered blocking state [ 433.291440][ T9284] bridge0: port 2(bridge_slave_1) entered forwarding state [ 434.207252][ T6385] Bluetooth: hci0: command tx timeout [ 434.822383][T10636] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 435.792072][T10758] random: crng reseeded on system resumption [ 435.941548][T10740] netlink: 330 bytes leftover after parsing attributes in process `syz.2.918'. [ 436.439665][T10636] veth0_vlan: entered promiscuous mode [ 436.543739][T10636] veth1_vlan: entered promiscuous mode [ 436.665502][T10772] FAULT_INJECTION: forcing a failure. [ 436.665502][T10772] name failslab, interval 1, probability 0, space 0, times 0 [ 436.756990][T10772] CPU: 0 UID: 0 PID: 10772 Comm: syz.2.922 Tainted: G U L syzkaller #0 PREEMPT(full) [ 436.757034][T10772] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 436.757049][T10772] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 436.757064][T10772] Call Trace: [ 436.757071][T10772] [ 436.757080][T10772] dump_stack_lvl+0x100/0x190 [ 436.757129][T10772] should_fail_ex.cold+0x5/0xa [ 436.757157][T10772] ? tomoyo_encode2+0xfb/0x3c0 [ 436.757190][T10772] should_failslab+0xc2/0x120 [ 436.757228][T10772] __kmalloc_noprof+0xe0/0x850 [ 436.757260][T10772] ? d_absolute_path+0x136/0x1b0 [ 436.757293][T10772] tomoyo_encode2+0xfb/0x3c0 [ 436.757332][T10772] tomoyo_encode+0x29/0x50 [ 436.757364][T10772] tomoyo_realpath_from_path+0x18c/0x690 [ 436.757406][T10772] tomoyo_mount_acl+0x1b6/0x8b0 [ 436.757437][T10772] ? is_bpf_text_address+0x8a/0x1a0 [ 436.757473][T10772] ? bpf_ksym_find+0x124/0x1c0 [ 436.757500][T10772] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 436.757544][T10772] ? __pfx_tomoyo_mount_acl+0x10/0x10 [ 436.757574][T10772] ? kernel_text_address+0x8d/0x100 [ 436.757611][T10772] ? unwind_get_return_address+0x59/0xa0 [ 436.757664][T10772] ? tomoyo_domain+0xb2/0x150 [ 436.757701][T10772] ? tomoyo_profile+0x47/0x60 [ 436.757742][T10772] tomoyo_mount_permission+0x214/0x460 [ 436.757773][T10772] ? tomoyo_mount_permission+0x1f6/0x460 [ 436.757808][T10772] ? __pfx_tomoyo_mount_permission+0x10/0x10 [ 436.757857][T10772] security_sb_mount+0xdd/0x270 [ 436.757885][T10772] path_mount+0x158/0x23d0 [ 436.757913][T10772] ? __pfx_path_mount+0x10/0x10 [ 436.757934][T10772] ? lockdep_hardirqs_on+0x78/0x100 [ 436.757971][T10772] ? putname+0xb1/0x110 [ 436.758007][T10772] ? kmem_cache_free+0x124/0x6a0 [ 436.758045][T10772] ? __x64_sys_mount+0x293/0x310 [ 436.758067][T10772] __x64_sys_mount+0x293/0x310 [ 436.758096][T10772] ? __pfx___x64_sys_mount+0x10/0x10 [ 436.758129][T10772] do_syscall_64+0x106/0xf80 [ 436.758160][T10772] ? clear_bhb_loop+0x40/0x90 [ 436.758192][T10772] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 436.758217][T10772] RIP: 0033:0x7f277339bf79 [ 436.758238][T10772] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 436.758263][T10772] RSP: 002b:00007f277420b028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 436.758287][T10772] RAX: ffffffffffffffda RBX: 00007f2773615fa0 RCX: 00007f277339bf79 [ 436.758303][T10772] RDX: 0000200000000000 RSI: 0000200000000040 RDI: 0000000000000000 [ 436.758319][T10772] RBP: 00007f27734327e0 R08: 0000200000001580 R09: 0000000000000000 [ 436.758335][T10772] R10: 0000000000008000 R11: 0000000000000246 R12: 0000000000000000 [ 436.758350][T10772] R13: 00007f2773616038 R14: 00007f2773615fa0 R15: 00007fffb3689538 [ 436.758382][T10772] [ 436.758415][T10772] ERROR: Out of memory at tomoyo_realpath_from_path. [ 437.431585][T10636] veth0_macvtap: entered promiscuous mode [ 437.628906][T10636] veth1_macvtap: entered promiscuous mode [ 437.906618][T10636] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 438.065665][T10636] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 438.088773][T10782] futex_wake_op: syz.1.925 tries to shift op by -1; fix this program [ 438.172175][ T9300] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 438.221957][ T9300] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 438.307569][ T9300] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 438.377496][ T9300] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 438.715331][ T9300] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 438.782353][ T9300] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 438.937872][ T9300] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 438.991438][ T9300] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 439.961877][T10795] netlink: 330 bytes leftover after parsing attributes in process `syz.1.929'. [ 440.097251][T10798] kexec: Could not allocate control_code_buffer [ 440.220479][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.230839][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.529565][T10817] mmap: syz.2.933 (10817) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 444.241465][T10847] netlink: Unknown NAT attribute (type=262, max=9) [ 444.857983][T10869] process 'syz.6.940' launched '/dev/fd/5' with NULL argv: empty string added [ 445.498094][T10882] netlink: 342 bytes leftover after parsing attributes in process `syz.5.946'. [ 445.585889][T10886] vivid-007: ================= START STATUS ================= [ 445.599182][T10885] netlink: 342 bytes leftover after parsing attributes in process `syz.5.946'. [ 445.675494][T10886] vivid-007: Generate PTS: true [ 445.746055][T10886] vivid-007: Generate SCR: true [ 445.799591][T10886] tpg source WxH: 320x240 (Y'CbCr) [ 445.997743][T10886] tpg field: 1 [ 446.001177][T10886] tpg crop: (0,0)/320x240 [ 446.005562][T10886] tpg compose: (0,0)/320x240 [ 446.341084][T10886] tpg colorspace: 8 [ 446.344950][T10886] tpg transfer function: 0/0 [ 446.469585][T10886] tpg Y'CbCr encoding: 0/0 [ 446.474137][T10886] tpg quantization: 0/0 [ 446.683341][T10886] tpg RGB range: 0/2 [ 446.723450][T10886] vivid-007: ================== END STATUS ================== [ 446.773221][T10905] Zero length message leads to an empty skb [ 447.138970][T10908] Invalid ELF header magic: != ELF [ 448.876367][T10945] netlink: 16 bytes leftover after parsing attributes in process `syz.2.958'. [ 449.717835][T10952] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 449.922066][T10958] netlink: 4 bytes leftover after parsing attributes in process `syz.1.962'. [ 450.977130][T10976] netlink: 326 bytes leftover after parsing attributes in process `syz.6.966'. [ 452.941598][T11012] netlink: 142 bytes leftover after parsing attributes in process `syz.2.974'. [ 453.243586][T11010] Invalid ELF header magic: != ELF [ 453.401306][T11022] netlink: 36 bytes leftover after parsing attributes in process `syz.1.976'. [ 453.727543][T11025] FAULT_INJECTION: forcing a failure. [ 453.727543][T11025] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 453.823788][T11025] CPU: 0 UID: 0 PID: 11025 Comm: syz.2.977 Tainted: G U L syzkaller #0 PREEMPT(full) [ 453.823831][T11025] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 453.823840][T11025] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 453.823855][T11025] Call Trace: [ 453.823863][T11025] [ 453.823880][T11025] dump_stack_lvl+0x100/0x190 [ 453.823922][T11025] should_fail_ex.cold+0x5/0xa [ 453.823951][T11025] _copy_from_user+0x2e/0xd0 [ 453.823983][T11025] do_handle_open+0x60e/0xce0 [ 453.824022][T11025] ? __pfx_do_handle_open+0x10/0x10 [ 453.824057][T11025] ? __x64_sys_futex+0x34f/0x4d0 [ 453.824091][T11025] ? xfd_validate_state+0x129/0x190 [ 453.824136][T11025] ? do_syscall_64+0x106/0xf80 [ 453.824168][T11025] do_syscall_64+0x106/0xf80 [ 453.824199][T11025] ? clear_bhb_loop+0x40/0x90 [ 453.824229][T11025] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 453.824255][T11025] RIP: 0033:0x7f277339bf79 [ 453.824274][T11025] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 453.824299][T11025] RSP: 002b:00007f277420b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000130 [ 453.824322][T11025] RAX: ffffffffffffffda RBX: 00007f2773615fa0 RCX: 00007f277339bf79 [ 453.824339][T11025] RDX: 0000000000000002 RSI: 0000200000000040 RDI: 0000000000000005 [ 453.824355][T11025] RBP: 00007f27734327e0 R08: 0000000000000000 R09: 0000000000000000 [ 453.824369][T11025] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 453.824384][T11025] R13: 00007f2773616038 R14: 00007f2773615fa0 R15: 00007fffb3689538 [ 453.824415][T11025] [ 458.174650][T11084] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 459.915300][T11116] ACPI: Enabling force_remove is not supported anymore. Please report to linux-acpi@vger.kernel.org if you depend on this functionality [ 461.026845][T11123] netlink: 16 bytes leftover after parsing attributes in process `syz.1.999'. [ 461.125762][T11123] bond0: entered promiscuous mode [ 461.183306][T11123] bond_slave_0: entered promiscuous mode [ 461.223523][T11123] bond_slave_1: entered promiscuous mode [ 461.307000][T11123] bond0: entered allmulticast mode [ 461.341863][T11123] bond_slave_0: entered allmulticast mode [ 461.389230][T11123] bond_slave_1: entered allmulticast mode [ 461.420467][T11130] netlink: 330 bytes leftover after parsing attributes in process `syz.5.1000'. [ 464.827398][T11177] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 464.995521][T11184] netlink: zone id is out of range [ 468.517925][T11218] netlink: 330 bytes leftover after parsing attributes in process `syz.2.1025'. [ 468.779622][T11238] ecryptfs_miscdev_write: Error while inspecting packet size [ 469.037429][T11244] netlink: 330 bytes leftover after parsing attributes in process `syz.6.1024'. [ 469.180208][T11244] : renamed from ip6tnl0 (while UP) [ 469.906421][T11261] netlink: 330 bytes leftover after parsing attributes in process `syz.5.1034'. [ 470.467082][T11271] netlink: 194 bytes leftover after parsing attributes in process `syz.5.1036'. [ 470.894394][T11276] Invalid ELF header magic: != ELF [ 472.937092][T11307] bond0: option all_slaves_active: invalid value () [ 473.808251][T11312] netlink: 330 bytes leftover after parsing attributes in process `syz.6.1045'. [ 474.894787][T11320] bond0: option packets_per_slave: invalid value ( Xnp) [ 474.978890][T11320] bond0: option packets_per_slave: allowed values 0 - 65535 [ 475.402018][ T29] audit: type=1804 audit(4294967371.220:18): pid=11324 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1047" name="/newroot/sys/kernel/tracing/set_event" dev="tracefs" ino=1064 res=1 errno=0 [ 476.565918][T11338] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1050'. [ 476.824315][T11353] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1055'. [ 476.925815][T11338] bridge0: port 2(bridge_slave_1) entered disabled state [ 477.064769][T11338] bridge_slave_1 (unregistering): left allmulticast mode [ 477.146981][T11338] bridge_slave_1 (unregistering): left promiscuous mode [ 477.154163][T11338] bridge0: port 2(bridge_slave_1) entered disabled state [ 477.310378][T11351] netlink: 330 bytes leftover after parsing attributes in process `syz.5.1054'. [ 479.358251][T11398] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1065'. [ 480.933274][T11416] netlink: 330 bytes leftover after parsing attributes in process `syz.1.1068'. [ 481.750262][T11420] netlink: 330 bytes leftover after parsing attributes in process `syz.5.1071'. [ 482.129565][T11429] FAULT_INJECTION: forcing a failure. [ 482.129565][T11429] name failslab, interval 1, probability 0, space 0, times 0 [ 482.237342][T11429] CPU: 0 UID: 0 PID: 11429 Comm: syz.1.1074 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 482.237394][T11429] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 482.237407][T11429] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 482.237421][T11429] Call Trace: [ 482.237429][T11429] [ 482.237439][T11429] dump_stack_lvl+0x100/0x190 [ 482.237478][T11429] should_fail_ex.cold+0x5/0xa [ 482.237505][T11429] ? tomoyo_realpath_from_path+0xb6/0x690 [ 482.237538][T11429] should_failslab+0xc2/0x120 [ 482.237575][T11429] __kmalloc_noprof+0xe0/0x850 [ 482.237612][T11429] tomoyo_realpath_from_path+0xb6/0x690 [ 482.237653][T11429] tomoyo_path_number_perm+0x23c/0x580 [ 482.237679][T11429] ? tomoyo_path_number_perm+0x22e/0x580 [ 482.237708][T11429] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 482.237765][T11429] ? find_held_lock+0x2b/0x80 [ 482.237801][T11429] ? __fget_files+0x215/0x3d0 [ 482.237833][T11429] ? hook_file_ioctl_common+0x146/0x410 [ 482.237867][T11429] ? __fget_files+0x21f/0x3d0 [ 482.237904][T11429] security_file_ioctl+0xd3/0x230 [ 482.237934][T11429] __x64_sys_ioctl+0xb7/0x210 [ 482.237965][T11429] do_syscall_64+0x106/0xf80 [ 482.237996][T11429] ? clear_bhb_loop+0x40/0x90 [ 482.238031][T11429] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 482.238055][T11429] RIP: 0033:0x7f3f4059bf79 [ 482.238074][T11429] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 482.238104][T11429] RSP: 002b:00007f3f4152d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 482.238126][T11429] RAX: ffffffffffffffda RBX: 00007f3f40815fa0 RCX: 00007f3f4059bf79 [ 482.238141][T11429] RDX: 0000000000000003 RSI: 00000000c0905664 RDI: 0000000000000003 [ 482.238155][T11429] RBP: 00007f3f4152d090 R08: 0000000000000000 R09: 0000000000000000 [ 482.238169][T11429] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 482.238183][T11429] R13: 00007f3f40816038 R14: 00007f3f40815fa0 R15: 00007ffead2f2e88 [ 482.238213][T11429] [ 482.238247][T11429] ERROR: Out of memory at tomoyo_realpath_from_path. [ 483.237628][T11438] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1076'. [ 486.747322][T11473] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1085'. [ 487.718773][T11486] netlink: 'syz.5.1089': attribute type 16 has an invalid length. [ 487.726655][T11486] netlink: 226 bytes leftover after parsing attributes in process `syz.5.1089'. [ 487.899625][T11486] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1089'. [ 490.170439][T11524] usb usb13: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 497.998492][T11621] FAULT_INJECTION: forcing a failure. [ 497.998492][T11621] name failslab, interval 1, probability 0, space 0, times 0 [ 498.065027][T11621] CPU: 0 UID: 0 PID: 11621 Comm: syz.6.1121 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 498.065084][T11621] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 498.065098][T11621] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 498.065114][T11621] Call Trace: [ 498.065122][T11621] [ 498.065132][T11621] dump_stack_lvl+0x100/0x190 [ 498.065173][T11621] should_fail_ex.cold+0x5/0xa [ 498.065202][T11621] should_failslab+0xc2/0x120 [ 498.065241][T11621] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 498.065273][T11621] ? security_inode_alloc+0x3b/0x2c0 [ 498.065300][T11621] ? lockdep_init_map_type+0x5c/0x250 [ 498.065337][T11621] security_inode_alloc+0x3b/0x2c0 [ 498.065364][T11621] inode_init_always_gfp+0xced/0x1040 [ 498.065405][T11621] alloc_inode+0x8e/0x250 [ 498.065433][T11621] new_inode+0x22/0x1c0 [ 498.065462][T11621] proc_pid_make_inode+0x22/0x160 [ 498.065489][T11621] proc_pident_instantiate+0x85/0x310 [ 498.065519][T11621] proc_pident_lookup+0x1e3/0x270 [ 498.065551][T11621] lookup_open.isra.0+0x631/0x11b0 [ 498.065589][T11621] ? __pfx_lookup_open.isra.0+0x10/0x10 [ 498.065659][T11621] ? mnt_get_write_access+0x1e9/0x2f0 [ 498.065692][T11621] path_openat+0xa98/0x31a0 [ 498.065739][T11621] ? __pfx_path_openat+0x10/0x10 [ 498.065788][T11621] do_file_open+0x20e/0x430 [ 498.065829][T11621] ? __pfx_do_file_open+0x10/0x10 [ 498.065876][T11621] ? __pfx_kfree_link+0x10/0x10 [ 498.065915][T11621] ? alloc_fd+0x476/0x790 [ 498.065960][T11621] ? do_getname+0x191/0x390 [ 498.065990][T11621] do_sys_openat2+0x10d/0x1e0 [ 498.066018][T11621] ? __pfx_do_sys_openat2+0x10/0x10 [ 498.066049][T11621] ? __fget_files+0x21f/0x3d0 [ 498.066090][T11621] __x64_sys_openat+0x12d/0x210 [ 498.066118][T11621] ? __pfx___x64_sys_openat+0x10/0x10 [ 498.066158][T11621] do_syscall_64+0x106/0xf80 [ 498.066190][T11621] ? clear_bhb_loop+0x40/0x90 [ 498.066221][T11621] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 498.066247][T11621] RIP: 0033:0x7ffbead9bf79 [ 498.066267][T11621] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 498.066292][T11621] RSP: 002b:00007ffbebb76028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 498.066316][T11621] RAX: ffffffffffffffda RBX: 00007ffbeb015fa0 RCX: 00007ffbead9bf79 [ 498.066333][T11621] RDX: 0000000000040302 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 498.066348][T11621] RBP: 00007ffbeae327e0 R08: 0000000000000000 R09: 0000000000000000 [ 498.066363][T11621] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 498.066378][T11621] R13: 00007ffbeb016038 R14: 00007ffbeb015fa0 R15: 00007fff0a1533f8 [ 498.066410][T11621] [ 498.972816][T11644] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1125'. [ 498.998985][T11641] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1125'. [ 499.211295][T11640] zswap: compressor not available [ 499.580178][T11656] FAULT_INJECTION: forcing a failure. [ 499.580178][T11656] name failslab, interval 1, probability 0, space 0, times 0 [ 499.684128][T11656] CPU: 0 UID: 0 PID: 11656 Comm: syz.2.1128 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 499.684180][T11656] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 499.684193][T11656] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 499.684207][T11656] Call Trace: [ 499.684214][T11656] [ 499.684223][T11656] dump_stack_lvl+0x100/0x190 [ 499.684263][T11656] should_fail_ex.cold+0x5/0xa [ 499.684289][T11656] ? tomoyo_realpath_from_path+0xb6/0x690 [ 499.684323][T11656] should_failslab+0xc2/0x120 [ 499.684360][T11656] __kmalloc_noprof+0xe0/0x850 [ 499.684396][T11656] tomoyo_realpath_from_path+0xb6/0x690 [ 499.684437][T11656] tomoyo_path_number_perm+0x23c/0x580 [ 499.684463][T11656] ? tomoyo_path_number_perm+0x22e/0x580 [ 499.684492][T11656] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 499.684583][T11656] ? find_held_lock+0x2b/0x80 [ 499.684619][T11656] ? __fget_files+0x215/0x3d0 [ 499.684650][T11656] ? hook_file_ioctl_common+0x146/0x410 [ 499.684684][T11656] ? __fget_files+0x21f/0x3d0 [ 499.684726][T11656] security_file_ioctl+0xd3/0x230 [ 499.684755][T11656] __x64_sys_ioctl+0xb7/0x210 [ 499.684792][T11656] do_syscall_64+0x106/0xf80 [ 499.684821][T11656] ? clear_bhb_loop+0x40/0x90 [ 499.684856][T11656] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 499.684880][T11656] RIP: 0033:0x7f277339bf79 [ 499.684900][T11656] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 499.684922][T11656] RSP: 002b:00007f277420b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 499.684945][T11656] RAX: ffffffffffffffda RBX: 00007f2773615fa0 RCX: 00007f277339bf79 [ 499.684960][T11656] RDX: 0000000000000000 RSI: 0000000000005437 RDI: 0000000000000002 [ 499.684974][T11656] RBP: 00007f277420b090 R08: 0000000000000000 R09: 0000000000000000 [ 499.684988][T11656] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 499.685002][T11656] R13: 00007f2773616038 R14: 00007f2773615fa0 R15: 00007fffb3689538 [ 499.685032][T11656] [ 499.898131][T11656] ERROR: Out of memory at tomoyo_realpath_from_path. [ 500.953720][T11681] netlink: 342 bytes leftover after parsing attributes in process `syz.2.1132'. [ 501.653771][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.661209][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.494015][T11700] FAULT_INJECTION: forcing a failure. [ 502.494015][T11700] name failslab, interval 1, probability 0, space 0, times 0 [ 502.623909][T11700] CPU: 0 UID: 0 PID: 11700 Comm: syz.6.1138 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 502.623961][T11700] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 502.623974][T11700] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 502.623987][T11700] Call Trace: [ 502.623995][T11700] [ 502.624004][T11700] dump_stack_lvl+0x100/0x190 [ 502.624043][T11700] should_fail_ex.cold+0x5/0xa [ 502.624069][T11700] ? tomoyo_encode2+0xfb/0x3c0 [ 502.624101][T11700] should_failslab+0xc2/0x120 [ 502.624137][T11700] __kmalloc_noprof+0xe0/0x850 [ 502.624167][T11700] ? d_absolute_path+0x136/0x1b0 [ 502.624199][T11700] tomoyo_encode2+0xfb/0x3c0 [ 502.624235][T11700] tomoyo_encode+0x29/0x50 [ 502.624270][T11700] tomoyo_realpath_from_path+0x18c/0x690 [ 502.624309][T11700] tomoyo_path_number_perm+0x23c/0x580 [ 502.624336][T11700] ? tomoyo_path_number_perm+0x22e/0x580 [ 502.624365][T11700] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 502.624421][T11700] ? find_held_lock+0x2b/0x80 [ 502.624458][T11700] ? __fget_files+0x215/0x3d0 [ 502.624490][T11700] ? hook_file_ioctl_common+0x146/0x410 [ 502.624530][T11700] ? __fget_files+0x21f/0x3d0 [ 502.624568][T11700] security_file_ioctl+0xd3/0x230 [ 502.624597][T11700] __x64_sys_ioctl+0xb7/0x210 [ 502.624628][T11700] do_syscall_64+0x106/0xf80 [ 502.624658][T11700] ? clear_bhb_loop+0x40/0x90 [ 502.624687][T11700] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 502.624711][T11700] RIP: 0033:0x7ffbead9bf79 [ 502.624731][T11700] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 502.624754][T11700] RSP: 002b:00007ffbebb76028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 502.624776][T11700] RAX: ffffffffffffffda RBX: 00007ffbeb015fa0 RCX: 00007ffbead9bf79 [ 502.624791][T11700] RDX: 0000000000000000 RSI: 0000000000005437 RDI: 0000000000000002 [ 502.624805][T11700] RBP: 00007ffbebb76090 R08: 0000000000000000 R09: 0000000000000000 [ 502.624819][T11700] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 502.624833][T11700] R13: 00007ffbeb016038 R14: 00007ffbeb015fa0 R15: 00007fff0a1533f8 [ 502.624863][T11700] [ 502.941935][T11700] ERROR: Out of memory at tomoyo_realpath_from_path. [ 506.068540][T11753] [U] [ 506.071396][T11753] [U] [ 506.074112][T11753] [U] [ 506.076824][T11753] [U] [ 506.192844][T11753] [U] [ 506.195606][T11753] [U] cBAV _ĩcs l_0[2PUWߢ\rШ46ܚ8xv<>GȁǒMęDՏRd%h)2߲Ƙ|H#o\#с:]%5MwFM9nQ~ {;wpS%~ӊLސN5=͔!Ϝ~JJ >K)Yk/ C[ k,XtF%t/qrZKQ)~)<7=kG!CDDq(~L:0{Ąqj9g>/x/x%5!P_w,J2LJɚ z!\tZ(PE@1UW]*φ1ѓn]nl3)yxo^Hs{6PϪגz [ 506.239922][T11753] [U] br: 2Pw|NS:҄QINtHj:*펭)zAC1*k [ 506.249611][T11753] [U] X_+WU 3h6؀P׃O8.)L߈Bۢr]-زDbb{:؟VRRgsc޻ܖ붭P:ڒЁ+ [ 506.263363][T11753] [U] 0H}{W\ VdV'iftF얌Œ04QxۃW p>pjx0Tp]^1τ4S^ (F*n.Q8֏cjшn/YdfP ;(zP`B}Lœ㿐PI$ -} [ 506.282093][T11753] [U] 86*wQz1ќ"nz\BzRnVԧe+qK#DmXۯ2 y -ݯ,@8{IWM_bPޘ5YGgHRxÞQmA%&77/o?ʣR:W!cڞWsHܣS`.W`XbmBMnG2aW-貚%'\6 [ 506.306226][T11753] [U] ] eSiE7ڒb+1 ~% |FÅ}zgxgRw\ɯezV_.jGJ{qثGYYŋ4L蜭wkHNSj{lj@xAJIoCX9uV{(.%,Ecѳ#hi;L7$[qn(oO~2yG:ez&CCqe'8Mq$)_T.X8(|@*iRQ͑L7篣' P"VI\UԤ&@7@nmT>=a [ 506.336344][T11753] [U] a [ 507.808876][T11753] [U] ԫ v/_ jjA2/*]\.ŋ)|7B b**Vzۏ [ 507.819182][T11753] [U] u`Sd)x7!J [ 507.823270][T11753] [U] +7,m2yܙi'@#Uq%&" [ 507.828928][T11753] [U] ~GӇT'kUyHC櫰)EOX&}X+ SWÒ[KL^wtb˟ftq-eT媗e'ra<2.FV~/b]GjGJ08tJyrBG@݇ [ 507.857129][T11753] [U] Lle1czS 4:VډzBKUZ:_9\{kSPViF裖-8B [ 507.866253][T11753] [U] _K#^I?VVbS ; +_뺈5 m[7J4V@4P;.L#I0F%VBEKʳf*o [ 507.877292][T11753] [U] {88󈘈>hIT{yf-{Y 4 [ 507.883195][T11753] [U] , yzn H|9&9E .\9 -"gfI[f6f [ 507.892227][T11753] [U] 8i@ [ܙ [ 507.896483][T11753] [U] V̆'9E,i!Ԙ们;)E b|?aSӦ3!%gЭy;.VQQOu27`as"Ve;iu%bӂzO߱_]6?hIDL+?&,^WF̈́OsJ=oR =dz B'm& ZuNmUfali{ݫKR Y [ 507.918369][T11753] [U] ,ylO?zy [ 507.923670][T11753] [U] Y.mW]WЄ*74/]ֻ7rLhC9#sxL:壐Le~іtFڑ92 C3'jE^>gၘp>B@|Mzx %n5Ϩ0$>F|=AX\N ڙ0N>LuqPq[o"AВY;KCRG܎( [ 507.959976][T11753] [U] *qhHԍY?d1YEҎL[ [ 507.965723][T11753] [U] O'M"ap?Lr4hoR [ 507.971635][T11753] [U] )f@H6?H [ 507.976063][T11753] [U] {y|M ]pR vb [ 507.980398][T11753] [U] pǜ<A\ [ 507.984902][T11753] [U] ոfCאWymr&ou"Aʎ [ 508.885293][T11778] nfs: Unknown parameter 'nl802154' [ 509.181368][T11753] [U] KS [ 509.850118][T11795] netlink: 330 bytes leftover after parsing attributes in process `syz.6.1159'. [ 510.255274][T11795] mac80211_hwsim hwsim24 : renamed from wlan0 (while UP) [ 511.921302][T11822] ima: policy update failed [ 511.990213][ T29] audit: type=1802 audit(4294967407.790:19): pid=11822 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.1164" res=0 errno=0 [ 515.018904][T11853] netlink: 330 bytes leftover after parsing attributes in process `syz.5.1171'. [ 521.034542][T11918] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1183'. [ 521.237654][T11907] FAULT_INJECTION: forcing a failure. [ 521.237654][T11907] name failslab, interval 1, probability 0, space 0, times 0 [ 521.317017][T11907] CPU: 0 UID: 0 PID: 11907 Comm: syz.6.1183 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 521.317075][T11907] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 521.317090][T11907] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 521.317105][T11907] Call Trace: [ 521.317113][T11907] [ 521.317122][T11907] dump_stack_lvl+0x100/0x190 [ 521.317164][T11907] should_fail_ex.cold+0x5/0xa [ 521.317191][T11907] ? tomoyo_supervisor+0x65d/0x1340 [ 521.317230][T11907] should_failslab+0xc2/0x120 [ 521.317268][T11907] __kmalloc_noprof+0xe0/0x850 [ 521.317307][T11907] tomoyo_supervisor+0x65d/0x1340 [ 521.317352][T11907] ? __pfx_tomoyo_supervisor+0x10/0x10 [ 521.317410][T11907] ? tomoyo_check_path_acl+0x141/0x210 [ 521.317440][T11907] ? tomoyo_check_acl+0x1f7/0x410 [ 521.317469][T11907] tomoyo_path_permission+0x270/0x3b0 [ 521.317500][T11907] tomoyo_check_open_permission+0x37f/0x3c0 [ 521.317532][T11907] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 521.317599][T11907] ? do_raw_spin_lock+0x128/0x260 [ 521.317637][T11907] ? path_get+0x61/0x80 [ 521.317679][T11907] tomoyo_file_open+0x6b/0x90 [ 521.317722][T11907] security_file_open+0xb5/0x1e0 [ 521.317757][T11907] do_dentry_open+0x5aa/0x1660 [ 521.317796][T11907] ? security_inode_permission+0xbf/0x250 [ 521.317830][T11907] vfs_open+0x82/0x3f0 [ 521.317859][T11907] path_openat+0x208c/0x31a0 [ 521.317906][T11907] ? __pfx_path_openat+0x10/0x10 [ 521.317954][T11907] do_file_open+0x20e/0x430 [ 521.317993][T11907] ? __pfx_do_file_open+0x10/0x10 [ 521.318052][T11907] ? alloc_fd+0x476/0x790 [ 521.318090][T11907] ? do_getname+0x191/0x390 [ 521.318118][T11907] do_sys_openat2+0x10d/0x1e0 [ 521.318145][T11907] ? __pfx_do_sys_openat2+0x10/0x10 [ 521.318183][T11907] __x64_sys_openat+0x12d/0x210 [ 521.318211][T11907] ? __pfx___x64_sys_openat+0x10/0x10 [ 521.318250][T11907] do_syscall_64+0x106/0xf80 [ 521.318285][T11907] ? clear_bhb_loop+0x40/0x90 [ 521.318317][T11907] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 521.318343][T11907] RIP: 0033:0x7ffbead9bf79 [ 521.318365][T11907] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 521.318389][T11907] RSP: 002b:00007ffbebb76028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 521.318413][T11907] RAX: ffffffffffffffda RBX: 00007ffbeb015fa0 RCX: 00007ffbead9bf79 [ 521.318430][T11907] RDX: 00000000001e3800 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 521.318448][T11907] RBP: 00007ffbeae327e0 R08: 0000000000000000 R09: 0000000000000000 [ 521.318465][T11907] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 521.318480][T11907] R13: 00007ffbeb016038 R14: 00007ffbeb015fa0 R15: 00007fff0a1533f8 [ 521.318511][T11907] [ 522.331877][T11927] openvswitch: netlink: IP tunnel dst address not specified [ 522.707024][ T6385] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18 [ 531.508784][T12038] __vm_enough_memory: pid: 12038, comm: syz.6.1213, bytes: 8589938688 not enough memory for the allocation [ 532.817603][T12070] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1230'. [ 533.022163][T12063] netlink: 330 bytes leftover after parsing attributes in process `syz.2.1220'. [ 533.124399][T12067] FAULT_INJECTION: forcing a failure. [ 533.124399][T12067] name failslab, interval 1, probability 0, space 0, times 0 [ 533.206901][T12067] CPU: 0 UID: 0 PID: 12067 Comm: syz.1.1230 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 533.206957][T12067] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 533.206971][T12067] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 533.206986][T12067] Call Trace: [ 533.206995][T12067] [ 533.207005][T12067] dump_stack_lvl+0x100/0x190 [ 533.207047][T12067] should_fail_ex.cold+0x5/0xa [ 533.207075][T12067] ? tomoyo_supervisor+0x65d/0x1340 [ 533.207113][T12067] should_failslab+0xc2/0x120 [ 533.207152][T12067] __kmalloc_noprof+0xe0/0x850 [ 533.207191][T12067] tomoyo_supervisor+0x65d/0x1340 [ 533.207236][T12067] ? __pfx_tomoyo_supervisor+0x10/0x10 [ 533.207295][T12067] ? tomoyo_check_path_acl+0x141/0x210 [ 533.207324][T12067] ? tomoyo_check_acl+0x1f7/0x410 [ 533.207353][T12067] tomoyo_path_permission+0x270/0x3b0 [ 533.207384][T12067] tomoyo_check_open_permission+0x37f/0x3c0 [ 533.207416][T12067] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 533.207475][T12067] ? do_raw_spin_lock+0x128/0x260 [ 533.207514][T12067] ? path_get+0x61/0x80 [ 533.207556][T12067] tomoyo_file_open+0x6b/0x90 [ 533.207596][T12067] security_file_open+0xb5/0x1e0 [ 533.207637][T12067] do_dentry_open+0x5aa/0x1660 [ 533.207676][T12067] ? security_inode_permission+0xbf/0x250 [ 533.207711][T12067] vfs_open+0x82/0x3f0 [ 533.207740][T12067] path_openat+0x208c/0x31a0 [ 533.207794][T12067] ? __pfx_path_openat+0x10/0x10 [ 533.207843][T12067] do_file_open+0x20e/0x430 [ 533.207883][T12067] ? __pfx_do_file_open+0x10/0x10 [ 533.207942][T12067] ? alloc_fd+0x476/0x790 [ 533.207982][T12067] ? do_getname+0x191/0x390 [ 533.208010][T12067] do_sys_openat2+0x10d/0x1e0 [ 533.208037][T12067] ? __pfx_do_sys_openat2+0x10/0x10 [ 533.208076][T12067] __x64_sys_openat+0x12d/0x210 [ 533.208104][T12067] ? __pfx___x64_sys_openat+0x10/0x10 [ 533.208143][T12067] do_syscall_64+0x106/0xf80 [ 533.208176][T12067] ? clear_bhb_loop+0x40/0x90 [ 533.208207][T12067] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 533.208233][T12067] RIP: 0033:0x7f3f4059bf79 [ 533.208254][T12067] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 533.208279][T12067] RSP: 002b:00007f3f4152d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 533.208303][T12067] RAX: ffffffffffffffda RBX: 00007f3f40815fa0 RCX: 00007f3f4059bf79 [ 533.208320][T12067] RDX: 00000000001e3800 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 533.208336][T12067] RBP: 00007f3f406327e0 R08: 0000000000000000 R09: 0000000000000000 [ 533.208352][T12067] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 533.208367][T12067] R13: 00007f3f40816038 R14: 00007f3f40815fa0 R15: 00007ffead2f2e88 [ 533.208398][T12067] [ 534.888453][T12095] random: crng reseeded on system resumption [ 535.804207][T12079] kexec: Could not allocate control_code_buffer [ 535.968068][T12103] FAULT_INJECTION: forcing a failure. [ 535.968068][T12103] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 536.109179][T12103] CPU: 0 UID: 0 PID: 12103 Comm: syz.1.1229 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 536.109234][T12103] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 536.109257][T12103] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 536.109272][T12103] Call Trace: [ 536.109280][T12103] [ 536.109290][T12103] dump_stack_lvl+0x100/0x190 [ 536.109332][T12103] should_fail_ex.cold+0x5/0xa [ 536.109356][T12103] ? prepare_alloc_pages+0x16d/0x5f0 [ 536.109400][T12103] should_fail_alloc_page+0xeb/0x140 [ 536.109440][T12103] prepare_alloc_pages+0x1f0/0x5f0 [ 536.109481][T12103] ? arch_stack_walk+0xa6/0xf0 [ 536.109507][T12103] __alloc_frozen_pages_noprof+0x19a/0x2ba0 [ 536.109547][T12103] ? stack_trace_save+0x8e/0xc0 [ 536.109588][T12103] ? __pfx_stack_trace_save+0x10/0x10 [ 536.109629][T12103] ? stack_depot_save_flags+0x27/0x9d0 [ 536.109666][T12103] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 536.109700][T12103] ? kasan_save_stack+0x3f/0x50 [ 536.109732][T12103] ? kasan_save_stack+0x30/0x50 [ 536.109764][T12103] ? __kasan_slab_alloc+0x89/0x90 [ 536.109799][T12103] ? __pmd_alloc+0xbf/0x9c0 [ 536.109821][T12103] ? move_page_tables+0x3224/0x4500 [ 536.109850][T12103] ? copy_vma_and_data+0x25c/0x7c0 [ 536.109879][T12103] ? move_vma+0x51b/0x1890 [ 536.109907][T12103] ? mremap_to+0x1b7/0x450 [ 536.109935][T12103] ? do_mremap+0xb76/0x2130 [ 536.109963][T12103] ? __do_sys_mremap+0x126/0x170 [ 536.109992][T12103] ? do_syscall_64+0x106/0xf80 [ 536.110023][T12103] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 536.110061][T12103] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 536.110101][T12103] ? policy_nodemask+0xed/0x4f0 [ 536.110143][T12103] alloc_pages_mpol+0x1fb/0x550 [ 536.110183][T12103] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 536.110229][T12103] alloc_pages_noprof+0x131/0x390 [ 536.110276][T12103] pte_alloc_one+0x1e/0x3e0 [ 536.110303][T12103] __pte_alloc+0x6d/0x3f0 [ 536.110341][T12103] ? __pfx___pte_alloc+0x10/0x10 [ 536.110379][T12103] ? _raw_spin_unlock+0x28/0x50 [ 536.110406][T12103] ? __pmd_alloc+0x6aa/0x9c0 [ 536.110432][T12103] move_page_tables+0x257e/0x4500 [ 536.110465][T12103] ? __pfx_copy_vma+0x10/0x10 [ 536.110507][T12103] ? __pfx_move_page_tables+0x10/0x10 [ 536.110555][T12103] ? finish_task_switch.isra.0+0x200/0xb80 [ 536.110584][T12103] copy_vma_and_data+0x25c/0x7c0 [ 536.110619][T12103] ? __pfx_copy_vma_and_data+0x10/0x10 [ 536.110663][T12103] ? __vma_start_write+0x17f/0x280 [ 536.110690][T12103] ? __pfx___vma_start_write+0x10/0x10 [ 536.110726][T12103] move_vma+0x51b/0x1890 [ 536.110762][T12103] ? __pfx_move_vma+0x10/0x10 [ 536.110795][T12103] ? mm_get_unmapped_area_vmflags+0xd7/0x130 [ 536.110837][T12103] ? cap_mmap_addr+0x4b/0x120 [ 536.110859][T12103] ? bpf_lsm_mmap_addr+0x9/0x30 [ 536.110894][T12103] ? security_mmap_addr+0x71/0x1e0 [ 536.110926][T12103] ? __get_unmapped_area+0x255/0x3e0 [ 536.110969][T12103] ? vrm_set_new_addr+0x204/0x290 [ 536.111002][T12103] mremap_to+0x1b7/0x450 [ 536.111035][T12103] do_mremap+0xb76/0x2130 [ 536.111078][T12103] ? __pfx_do_mremap+0x10/0x10 [ 536.111116][T12103] ? ksys_write+0x190/0x250 [ 536.111158][T12103] __do_sys_mremap+0x126/0x170 [ 536.111190][T12103] ? __pfx___do_sys_mremap+0x10/0x10 [ 536.111230][T12103] ? __x64_sys_futex+0x34f/0x4d0 [ 536.111284][T12103] do_syscall_64+0x106/0xf80 [ 536.111316][T12103] ? clear_bhb_loop+0x40/0x90 [ 536.111347][T12103] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 536.111373][T12103] RIP: 0033:0x7f3f4059bf79 [ 536.111394][T12103] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 536.111419][T12103] RSP: 002b:00007f3f4152d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 536.111443][T12103] RAX: ffffffffffffffda RBX: 00007f3f40815fa0 RCX: 00007f3f4059bf79 [ 536.111460][T12103] RDX: 0000000000000004 RSI: 0000000000000004 RDI: 0000200000000000 [ 536.111475][T12103] RBP: 00007f3f406327e0 R08: 0000000100000000 R09: 0000000000000000 [ 536.111491][T12103] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 536.111506][T12103] R13: 00007f3f40816038 R14: 00007f3f40815fa0 R15: 00007ffead2f2e88 [ 536.111538][T12103] [ 537.083031][T12107] netlink: 330 bytes leftover after parsing attributes in process `syz.6.1232'. [ 537.305628][T12103] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 537.425705][T12121] capability: warning: `syz.5.1233' uses 32-bit capabilities (legacy support in use) [ 537.601552][T12126] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1235'. [ 541.358635][T12163] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 541.397163][T12163] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 541.500142][T12163] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 541.532048][T12163] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 541.587087][T12163] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 541.635884][T12163] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 541.665994][T12163] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 541.876679][T12163] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 543.099536][T11939] Bluetooth: hci2: command 0x0406 tx timeout [ 543.569362][T11939] Bluetooth: hci4: command 0x0406 tx timeout [ 543.575441][ T6385] Bluetooth: hci3: command 0x0406 tx timeout [ 543.646910][T11939] Bluetooth: hci0: command 0x0c1a tx timeout [ 543.652997][T11939] Bluetooth: hci1: command 0x0c1a tx timeout [ 545.168890][T11939] Bluetooth: hci2: command 0x0406 tx timeout [ 545.371062][T12239] FAULT_INJECTION: forcing a failure. [ 545.371062][T12239] name failslab, interval 1, probability 0, space 0, times 0 [ 545.467784][T12239] CPU: 0 UID: 0 PID: 12239 Comm: syz.1.1258 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 545.467836][T12239] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 545.467849][T12239] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 545.467863][T12239] Call Trace: [ 545.467871][T12239] [ 545.467880][T12239] dump_stack_lvl+0x100/0x190 [ 545.467920][T12239] should_fail_ex.cold+0x5/0xa [ 545.467947][T12239] should_failslab+0xc2/0x120 [ 545.467983][T12239] __kvmalloc_node_noprof+0xfa/0xa00 [ 545.468015][T12239] ? seq_read_iter+0x819/0x1270 [ 545.468054][T12239] seq_read_iter+0x819/0x1270 [ 545.468096][T12239] kernfs_fop_read_iter+0x46c/0x610 [ 545.468131][T12239] ? rw_verify_area+0xce/0x6d0 [ 545.468159][T12239] ? __pfx_kernfs_fop_read_iter+0x10/0x10 [ 545.468195][T12239] vfs_read+0x825/0xb30 [ 545.468231][T12239] ? __pfx_vfs_read+0x10/0x10 [ 545.468291][T12239] ksys_read+0x12a/0x250 [ 545.468322][T12239] ? __pfx_ksys_read+0x10/0x10 [ 545.468363][T12239] do_syscall_64+0x106/0xf80 [ 545.468393][T12239] ? clear_bhb_loop+0x40/0x90 [ 545.468430][T12239] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 545.468459][T12239] RIP: 0033:0x7f3f4059bf79 [ 545.468477][T12239] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 545.468500][T12239] RSP: 002b:00007f3f4150c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 545.468522][T12239] RAX: ffffffffffffffda RBX: 00007f3f40816090 RCX: 00007f3f4059bf79 [ 545.468537][T12239] RDX: 0000000000000020 RSI: 0000000000000000 RDI: 0000000000000004 [ 545.468551][T12239] RBP: 00007f3f4150c090 R08: 0000000000000000 R09: 0000000000000000 [ 545.468565][T12239] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 545.468579][T12239] R13: 00007f3f40816128 R14: 00007f3f40816090 R15: 00007ffead2f2e88 [ 545.468609][T12239] [ 546.109109][T12236] zswap: compressor not available [ 546.209054][T11939] Bluetooth: hci0: command 0x0c1a tx timeout [ 546.824042][T12252] zswap: compressor not available [ 547.071213][T12243] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 547.305049][T12243] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 547.452514][T12243] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 548.297581][T11939] Bluetooth: hci0: command 0x0c1a tx timeout [ 548.922054][T12278] netlink: 330 bytes leftover after parsing attributes in process `syz.5.1266'. [ 550.251186][T12297] zswap: compressor not available [ 550.317236][T12302] FAULT_INJECTION: forcing a failure. [ 550.317236][T12302] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 550.443666][T12302] CPU: 0 UID: 0 PID: 12302 Comm: syz.1.1270 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 550.443718][T12302] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 550.443731][T12302] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 550.443744][T12302] Call Trace: [ 550.443752][T12302] [ 550.443760][T12302] dump_stack_lvl+0x100/0x190 [ 550.443799][T12302] should_fail_ex.cold+0x5/0xa [ 550.443831][T12302] _copy_to_iter+0x1f3/0x1720 [ 550.443865][T12302] ? __pfx__copy_to_iter+0x10/0x10 [ 550.443892][T12302] ? kernfs_seq_stop+0xcd/0x120 [ 550.443936][T12302] ? kernfs_put_active+0x93/0xe0 [ 550.443967][T12302] seq_read_iter+0xdab/0x1270 [ 550.444011][T12302] kernfs_fop_read_iter+0x46c/0x610 [ 550.444045][T12302] ? rw_verify_area+0xce/0x6d0 [ 550.444074][T12302] ? __pfx_kernfs_fop_read_iter+0x10/0x10 [ 550.444110][T12302] vfs_read+0x825/0xb30 [ 550.444146][T12302] ? __pfx_vfs_read+0x10/0x10 [ 550.444196][T12302] ksys_read+0x12a/0x250 [ 550.444228][T12302] ? __pfx_ksys_read+0x10/0x10 [ 550.444268][T12302] do_syscall_64+0x106/0xf80 [ 550.444298][T12302] ? clear_bhb_loop+0x40/0x90 [ 550.444327][T12302] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 550.444351][T12302] RIP: 0033:0x7f3f4059bf79 [ 550.444369][T12302] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 550.444392][T12302] RSP: 002b:00007f3f4150c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 550.444415][T12302] RAX: ffffffffffffffda RBX: 00007f3f40816090 RCX: 00007f3f4059bf79 [ 550.444430][T12302] RDX: 0000000000000020 RSI: 0000000000000000 RDI: 0000000000000004 [ 550.444444][T12302] RBP: 00007f3f4150c090 R08: 0000000000000000 R09: 0000000000000000 [ 550.444458][T12302] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 550.444472][T12302] R13: 00007f3f40816128 R14: 00007f3f40816090 R15: 00007ffead2f2e88 [ 550.444502][T12302] [ 550.818406][T12301] zswap: compressor not available [ 553.582819][T12363] netlink: 330 bytes leftover after parsing attributes in process `syz.5.1281'. [ 555.475805][T12399] loop10: detected capacity change from 0 to 8192 [ 555.639266][T12400] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 555.727383][T12400] usb usb36: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 555.734929][T12400] vhci_hcd vhci_hcd.1: invalid port number 50 [ 555.938146][T12400] vhci_hcd vhci_hcd.1: default hub control req: 0400 v0000 i0032 l0 [ 557.227147][T12416] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 557.327554][ T30] INFO: task syz.4.869:10503 blocked for more than 143 seconds. [ 557.335263][ T30] Tainted: G U W L XTNJ syzkaller #0 [ 557.370221][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 557.445318][ T30] task:syz.4.869 state:D stack:27464 pid:10503 tgid:10501 ppid:6621 task_flags:0x400140 flags:0x00080002 [ 557.521453][ T30] Call Trace: [ 557.552452][ T30] [ 557.570335][ T30] __schedule+0xfee/0x60e0 [ 557.598796][ T30] ? __lock_acquire+0x4a5/0x2630 [ 557.623229][ T30] ? __pfx___schedule+0x10/0x10 [ 557.662634][ T30] ? find_held_lock+0x2b/0x80 [ 557.681678][ T30] ? schedule+0x2bf/0x390 [ 557.704383][ T30] schedule+0xdd/0x390 [ 557.723488][T12426] ======================================================= [ 557.723488][T12426] WARNING: The mand mount option has been deprecated and [ 557.723488][T12426] and is ignored by this kernel. Remove the mand [ 557.723488][T12426] option from the mount to silence this warning. [ 557.723488][T12426] ======================================================= [ 557.773325][ T30] schedule_preempt_disabled+0x13/0x30 [ 557.797051][ T30] __mutex_lock+0xc9a/0x1b90 [ 557.817027][ T30] ? nfsd_nl_version_set_doit+0xc4/0x7a0 [ 557.847015][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 557.857399][ T30] ? __pfx___nla_validate_parse+0x10/0x10 [ 557.888417][ T30] ? nfsd_nl_version_set_doit+0xc4/0x7a0 [ 557.916876][ T30] nfsd_nl_version_set_doit+0xc4/0x7a0 [ 557.943603][ T30] ? __pfx_nfsd_nl_version_set_doit+0x10/0x10 [ 557.989040][ T30] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1aa/0x290 [ 558.031845][ T30] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1b4/0x290 [ 558.061507][ T30] genl_family_rcv_msg_doit+0x214/0x300 [ 558.096835][ T30] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 558.125692][ T30] ? genl_get_cmd+0x3ef/0x720 [ 558.154531][ T30] ? bpf_lsm_capable+0x9/0x10 [ 558.182475][ T30] ? security_capable+0x80/0x260 [ 558.210558][ T30] genl_rcv_msg+0x560/0x800 [ 558.242352][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 558.270380][ T30] ? __pfx_nfsd_nl_version_set_doit+0x10/0x10 [ 558.317159][ T30] netlink_rcv_skb+0x159/0x420 [ 558.334464][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 558.364683][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 558.392954][ T30] ? netlink_deliver_tap+0x1ae/0xcc0 [ 558.430242][ T30] genl_rcv+0x28/0x40 [ 558.450876][ T30] netlink_unicast+0x5aa/0x870 [ 558.481873][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 558.513278][ T30] ? __pfx___might_resched+0x10/0x10 [ 558.541626][ T30] ? __lock_acquire+0x4a5/0x2630 [ 558.570799][ T30] netlink_sendmsg+0x8b0/0xda0 [ 558.598517][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 558.626802][ T30] ? __import_iovec+0x1d2/0x640 [ 558.657556][ T30] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 558.696814][ T30] ____sys_sendmsg+0xa54/0xc30 [ 558.724886][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 558.760455][ T30] ? __pfx_futex_wake_mark+0x10/0x10 [ 558.790580][ T30] ___sys_sendmsg+0x190/0x1e0 [ 558.826650][ T30] ? __pfx____sys_sendmsg+0x10/0x10 [ 558.865380][ T30] __sys_sendmsg+0x170/0x220 [ 558.893718][ T30] ? __pfx___sys_sendmsg+0x10/0x10 [ 558.924897][ T30] ? __x64_sys_futex+0x34f/0x4d0 [ 558.954082][ T30] do_syscall_64+0x106/0xf80 [ 558.984930][ T30] ? clear_bhb_loop+0x40/0x90 [ 559.022874][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 559.054420][ T30] RIP: 0033:0x7fce7759bf79 [ 559.097314][ T30] RSP: 002b:00007fce78490028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 559.138259][ T30] RAX: ffffffffffffffda RBX: 00007fce77816090 RCX: 00007fce7759bf79 [ 559.183984][ T30] RDX: 0000000000000844 RSI: 00002000000004c0 RDI: 0000000000000003 [ 559.224055][ T30] RBP: 00007fce776327e0 R08: 0000000000000000 R09: 0000000000000000 [ 559.265666][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 559.317042][ T30] R13: 00007fce77816128 R14: 00007fce77816090 R15: 00007fff2e04e0f8 [ 559.365567][ T30] [ 559.384043][ T30] [ 559.384043][ T30] Showing all locks held in the system: [ 559.434386][ T30] 1 lock held by khungtaskd/30: [ 559.566750][ T30] #0: ffffffff8e7e92e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 559.621843][ T30] 2 locks held by syz.4.869/10502: [ 559.650047][ T30] #0: ffffffff906bb430 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 559.710757][ T30] #1: ffffffff8ec55d88 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0xd5/0x1b20 [ 559.804324][ T30] 2 locks held by syz.4.869/10503: [ 559.834298][ T30] #0: ffffffff906bb430 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 559.917312][ T30] #1: ffffffff8ec55d88 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_version_set_doit+0xc4/0x7a0 [ 559.982244][ T30] 2 locks held by syz-executor/10636: [ 560.004923][ T30] #0: ffff88803976a0e0 (&type->s_umount_key#52){++++}-{4:4}, at: deactivate_super+0xdf/0x110 [ 560.062496][ T30] #1: ffffffff8ec55d88 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 560.119052][ T30] 7 locks held by kworker/u8:41/11376: [ 560.160473][ T30] #0: ffff8880b843b2e0 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2c/0x140 [ 560.218483][ T30] #1: ffff8880b8424648 (psi_seq){-.-.}-{0:0}, at: __schedule+0x2c11/0x60e0 [ 560.266503][ T30] #2: ffff888036df4a68 (&rtn->rds_tcp_accept_lock){+.+.}-{4:4}, at: rds_tcp_accept_one+0xb1/0xd90 [ 560.328570][ T30] #3: ffffffff8e7e92e0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0xbd/0x1ea0 [ 560.378852][ T30] #4: ffffffff8f3721f8 (pool_lock#2){-.-.}-{2:2}, at: pcpu_alloc+0x1c4/0x350 [ 560.425237][ T30] #5: ffffffff9b3b9678 (&obj_hash[i].lock){-.-.}-{2:2}, at: debug_object_activate+0x144/0x490 [ 560.483994][ T30] #6: ffffffff8e7e92e0 (rcu_read_lock){....}-{1:3}, at: ip_finish_output2+0x356/0x24d0 [ 560.535447][ T30] 1 lock held by syz.2.1293/12425: [ 560.565686][ T30] 3 locks held by syz.5.1294/12427: [ 560.596590][ T30] 3 locks held by syz.2.1293/12428: [ 560.627359][ T30] 2 locks held by syz.2.1293/12443: [ 560.667574][ T30] 2 locks held by syz.5.1294/12444: [ 560.693266][ T30] [ 560.708084][ T30] ============================================= [ 560.708084][ T30] [ 560.774027][ T30] NMI backtrace for cpu 0 [ 560.774052][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 560.774104][ T30] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 560.774117][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 560.774131][ T30] Call Trace: [ 560.774138][ T30] [ 560.774148][ T30] dump_stack_lvl+0x100/0x190 [ 560.774187][ T30] nmi_cpu_backtrace.cold+0x12d/0x151 [ 560.774225][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 560.774261][ T30] nmi_trigger_cpumask_backtrace+0x1d7/0x230 [ 560.774305][ T30] sys_info+0x141/0x190 [ 560.774339][ T30] watchdog+0xd25/0x1050 [ 560.774383][ T30] ? __pfx_watchdog+0x10/0x10 [ 560.774420][ T30] ? __kthread_parkme+0x18c/0x230 [ 560.774447][ T30] ? kthread+0x13a/0x450 [ 560.774474][ T30] ? __pfx_watchdog+0x10/0x10 [ 560.774508][ T30] kthread+0x370/0x450 [ 560.774535][ T30] ? __pfx_kthread+0x10/0x10 [ 560.774566][ T30] ret_from_fork+0x754/0xd80 [ 560.774601][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 560.774638][ T30] ? __switch_to+0x7b4/0x1120 [ 560.774663][ T30] ? __pfx_kthread+0x10/0x10 [ 560.774693][ T30] ret_from_fork_asm+0x1a/0x30 [ 560.774731][ T30] [ 561.528258][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 561.535170][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 561.545880][ T30] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 561.555952][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 561.566110][ T30] Call Trace: [ 561.569415][ T30] [ 561.572361][ T30] dump_stack_lvl+0x100/0x190 [ 561.577082][ T30] vpanic+0x552/0x970 [ 561.581092][ T30] ? __pfx_vpanic+0x10/0x10 [ 561.585621][ T30] ? nmi_trigger_cpumask_backtrace+0x182/0x230 [ 561.591820][ T30] panic+0xd1/0xe0 [ 561.595559][ T30] ? __pfx_panic+0x10/0x10 [ 561.600039][ T30] ? nmi_trigger_cpumask_backtrace+0x1b5/0x230 [ 561.606247][ T30] ? nmi_trigger_cpumask_backtrace+0x1f6/0x230 [ 561.612631][ T30] ? nmi_trigger_cpumask_backtrace+0x200/0x230 [ 561.618827][ T30] ? watchdog.cold+0x198/0x1ca [ 561.623628][ T30] ? watchdog+0xd35/0x1050 [ 561.628075][ T30] watchdog.cold+0x1a9/0x1ca [ 561.632708][ T30] ? __pfx_watchdog+0x10/0x10 [ 561.637427][ T30] ? __kthread_parkme+0x18c/0x230 [ 561.642485][ T30] ? kthread+0x13a/0x450 [ 561.646773][ T30] ? __pfx_watchdog+0x10/0x10 [ 561.651480][ T30] kthread+0x370/0x450 [ 561.655571][ T30] ? __pfx_kthread+0x10/0x10 [ 561.660181][ T30] ret_from_fork+0x754/0xd80 [ 561.664802][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 561.669941][ T30] ? __switch_to+0x7b4/0x1120 [ 561.674637][ T30] ? __pfx_kthread+0x10/0x10 [ 561.679247][ T30] ret_from_fork_asm+0x1a/0x30 [ 561.684086][ T30] [ 561.687367][ T30] Kernel Offset: disabled [ 561.691795][ T30] Rebooting in 86400 seconds..