last executing test programs: 9m20.504713678s ago: executing program 2 (id=58): openat$auto_nvram_misc_fops_nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/tty/ttyy7/power/runtime_suspended_time\x00', 0x0, 0x0) unshare$auto(0x40000080) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) clock_nanosleep$auto(0x9, 0x0, &(0x7f0000000000)={0xe, 0x802b95}, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @loopback}, 0x54) openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0, 0x40) unshare$auto(0x40000080) r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, 0x0) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) sysfs$auto(0x2, 0x3b, 0x0) 9m19.023497409s ago: executing program 2 (id=64): openat$auto_nvram_misc_fops_nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/tty/ttyy7/power/runtime_suspended_time\x00', 0x0, 0x0) unshare$auto(0x40000080) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) clock_nanosleep$auto(0x9, 0x0, &(0x7f0000000000)={0xe, 0x802b95}, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @loopback}, 0x54) openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0, 0x40) unshare$auto(0x40000080) r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, 0x0) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) sysfs$auto(0x2, 0x3b, 0x0) 9m17.072376578s ago: executing program 2 (id=67): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) (async) mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) (async) openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) getpgrp(0xffffffffffffffff) (async) r1 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$auto_THERMAL_GENL_CMD_TZ_GET_GOV(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x24, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@THERMAL_GENL_ATTR_CDEV_ID={0x8, 0xf, 0x62}, @THERMAL_GENL_ATTR_CPU_CAPABILITY_ID={0x8, 0x15, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) (async) r3 = prctl$auto(0x26, 0x1, 0x0, 0xffffffffffffffff, 0x0) (async) r4 = fsopen$auto(0x0, 0x1) fsconfig$auto(r4, 0x8, 0x0, 0x0, 0x0) r5 = waitid$auto(0x8, r4, &(0x7f0000000080)={@_si_pad}, 0xa, &(0x7f0000000100)={{0x9, 0x7}, {0x4, 0x9f5}, 0x3, 0x5, 0x0, 0x0, 0x7, 0x8001, 0x5, 0x4, 0x0, 0x1, 0xfff, 0xffffffffffff3dcb, 0x80000000}) sendmsg$auto_NL802154_CMD_SET_WPAN_PHY_NETNS(r4, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010027bd7000fcdbdf251400000008002a00090000000800210003000000080027000100008008001c00", @ANYRES32=r5, @ANYBLOB="050029003db1dc3302dddc96ea74be126be83983e656fe46ce00070000000009000700000006000d00", @ANYRES32=r3, @ANYBLOB="0500110005000000"], 0x5c}, 0x1, 0x0, 0x0, 0x8001}, 0x10) sendmsg$auto_THERMAL_GENL_CMD_CDEV_GET(r0, &(0x7f0000000640)={&(0x7f00000000c0), 0xc, &(0x7f0000000600)={&(0x7f0000000680)=ANY=[@ANYBLOB="0c010000", @ANYRES16=0x0, @ANYBLOB="010026bd7000ffdbdf250600000008000500000200001800018008008400", @ANYRES32=r5, @ANYBLOB="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"], 0x10c}, 0x1, 0x0, 0x0, 0x40000800}, 0x40000000) (async) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r2, &(0x7f0000004240)={0x0, 0x0, &(0x7f0000004200)={&(0x7f0000000140)={0x14, r1, 0x1, 0x70bd25, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40c8}, 0x4048000) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_genetlink_get_family_id$auto_ovs_ct_limit(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_OVS_CT_LIMIT_CMD_SET(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002180)=ANY=[@ANYBLOB="e0020000", @ANYRES16=r7, @ANYBLOB="01002ebd5100fbcbdf250100000004000180c802018004000680bd020480fc921cf096b39f43034e2db36a74c0ade1e6a4dafab35aa84881d05d1662bd8a8f48943ea4276b7e1465958d17dd9c9706336d0f4a94c7de9fa79cb659b67f43fa331b6f98fa8ad43a943eac1b528ba83992018ecb03ba5dba6660c32c87b1dc86b69a7f6e747504f11d7688a74c", @ANYRES32=r6, @ANYBLOB="08006e00ac1414aa2c02bc8028029880220242804b8ef4dea62052d4391e1b7fcd2429f7195770e4ca6f21844850ff750ce04caf301dc66838e61817fb1f807d53f524a2ac569f0f1c754ec84650d22b883479398e9d766ecc3fa8de0f83e8f703cb19a0826ec7c4949c87bab590c6305dc6f742accc66d7f2c47d87ec1d7fde707f710037006af15d7fa2ec9194354a1069b7c806492e043fa1fdad718d351a10ddade114048ff1302faa59a651c349c5ec3cede0e3949d48b97b2bd1d493852ed30d3a7c2cead7511ef0c8d71cb13b68fb7475ceac2b9816379110f6b4d10d69aea84f032ee4c179ba7929c5d06329cbdf05000000040034804d001f800400f18004006c800d7112532deb3ef76f18436c6041ed69a31df55778585e94b7244ba30fca32a34652fd3f440a97d881a3e6c962f72b82c506b0f9531ca4e8321faaa8982bbdfd85000000e5007d", @ANYRES32=0x0, @ANYBLOB="0400af80cee0bd49dab2a617b70e1a2e040e6ba448f301800a8999cec0bec67eb0617ad3f9a0977d09fa35f0e26b923a2713f1104ff7a5b18a2629bbee5de69b17f06e13870462f79e9deb527b97fd65fc8b156b0f525dfca9340f14dc75ef0881c14f5b87a6c615ee754d72289dcac3c322002b00", @ANYRES32=0x0, @ANYBLOB="6000f68004004880f6c5cccd25852c755b4331229a68ba8457bb2c5bc855fc277901cc018a78610faf86906cfd8f50da20a3cfe74a23710a32b0bd28cfddfe8fbcc03a4f9178ec9a0400de8004004380040078800c00a700feffffffffffffff0000"], 0x2e0}, 0x1, 0x0, 0x0, 0x40}, 0x4) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000480)={{&(0x7f00000001c0)="8d10a50b60e1380b545f89c54bab4fbfb3e0feda7edd7e46ae550aa997ff56be56fea27cb83751daf5f24ad06844d84862e0d8ddb179f76038831d67eaac8ab77003e5fc4eaf9d788521bd99b2729d94e367eabcdce535dd22dee07e455f0d28213b56b89d026239a1a68f51487800b3643829c256b36302e01c43618a797b05025b5feebfc59d59d2d916fd4248245863a0fd01593abab17301a9c36f0ec8bcbd4d8e6757f5b19d5092696e8e3e7ae1179791a4d12d4b6e213364b1f45cbae151889a10e446fe3ddc6e35545780a45518a4", 0x3, &(0x7f00000003c0)={&(0x7f00000002c0)="a05773e17fc3f097c1dda9674cdda8495227c3f6143b1c9dae28868eb2521113ee53fe55139a6cafe81097998f467936029d7cc2a59bd8df4aac7fbffdb54dfbc4dabe4693db529a457b072d24a74a8cc4064a179611df8dbc3eb7d0d68f653f5c970fe5e8039b309bf88b2d95319ac03fe3fed98f97feb30230ed7bc44c009694c3a27e9526df2fdf2b2d30adf6f4e00f90211708f37043fdc4153b871250e305e2c21184eaa67cb94b2d8e79f89ec13959f9918ffa08e8a519c2ad073327cf5ae99cbd9397b8187ea2e9c37e5535d88c6ce6ca1e247930b3585aa92c14", 0x100}, 0x1, &(0x7f0000000400)="2491e2f933b13df8b9767a34918374d206e5f3c766ee0baae721e41d7b28fc255fc9387e8c68e335e84ca7720ac49cdfdff203042b32ffe2ddf3fee62aa25966f135af5acda0f5ee35af2663f7f69d40ea81d8bce8fc80c0add9", 0x1, 0x1}, 0x401}, 0x5, 0x4) (async) r8 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000000)='/dev/binderfs/binder1\x00', 0x1, 0x0) ioctl$auto(r8, 0x4018620d, 0x9) (async) r9 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/graphics/fbcon/rotate\x00', 0x8a801, 0x0) (async) lsm_list_modules$auto(0x0, 0x0, 0x0) openat$auto_rfkill_fops_core(0xffffffffffffff9c, 0x0, 0x40, 0x0) (async) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/controlC2\x00', 0x80101, 0x0) (async) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, 0x0, 0xc0c02, 0x0) write$auto(r9, &(0x7f0000000200)='1\x00\\\xa0\x04\x06\x00\x00\x00*\x8d\x14\xfa 3\x00\xad1\xcc\xeb&{q\xe0$\xcd\x81Zm\xeb\xe39LC{\xf8\xa09\xe9\x05\xfc\xddUw4e\xc6\t}k\x14\xcah\xba\x16\xdc\x00\x88\x11\x008\xb3z\xe4\xb9\x97\x90z\xb41&YH\xd6\xaa\x06\xbc \b\xd7\xee\x8a:\xd9\x88\x8f\x06)l\xe4\x83\xbc\xd1wOa\xb6\x93\xe7\xb7\xbb\xdc\x98\xba\\\x15\xc2\xdc1D\x8b@\x9btfi\xaf\xdf\xee\v\x8e\xa2P\x93\x19\xea\x84T]<]+\x04N5=\xc0\x9d-\xaf\xfd\xc7\x87\x00\x00\x00\x00\xa4q\xec\x82\x95\x01\xfc7\x86\xd0\xd2\x93\xa7?\xc5\xf3\xaf\xe5\x17\x96\xc6\xbd=\x9a=\xe8\xf22\xab\x83\x9f\xc2\xc2\x8f\x1fQ|\x91&\x15\x0f\x18\xbc\xd3\xd6\xd7P\bTb\xfaY\xfcio\xa3\xe1d#-R\x91}\xe4\x88\xf6\xcc\xd5e\xb1Va\xa4Z\'w\xee\x94`>\x99\x00\xef\xe5\x9csXS<\x96\xafgM\xadY\xae\xf5\xe4\xb3\x9d\x18\x0f\xcc\xbb\tGb\xf5\x8c\xf4\xbc\xaf\x7f\x87\'\x9f\x8ff\x03m\xaf+D\xee\xcd\xd9\xfe\xe2)\x830}\xcc\xadC\xdd\xea\xb1\x8d\x06xj^U\xc0<\xfe\xc3U\xf8\x1ff\xe1\xd8\x14\t\xa8l]\xeb\xb6\xef\x04\x8f\xff\xfc\x97\x91\xdbN\x81\xfd\xf2\x9e\x18\x85G\xc7\xef\x86;\xd5\xd9\xd8\x18wq.%\xa9l\xc8\xdaC\x93\xc6\xc6\xd5p8\xa5\xb1\xd7:<\x8aCP\xd08\xcf', 0x4) (async) close_range$auto(0x2, 0x8, 0x0) 9m15.9801696s ago: executing program 2 (id=73): r0 = openat$auto_aoe_fops_aoechr(0xffffffffffffff9c, &(0x7f0000000000)='/dev/etherd/flush\x00', 0x12e00, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000240)='/dev/tty12\x00', 0x800, 0x0) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) clone3$auto(&(0x7f0000000000)={0x9, 0xd3d, 0xf, 0x10200000, 0x3, 0x200, 0x4000000050, 0x5, 0x3, 0xb, 0xd}, 0x5) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$auto_bm_entry_operations_binfmt_misc(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/fs/binfmt_misc/syz1\x00', 0x82000, 0x0) read$auto_bm_entry_operations_binfmt_misc(r3, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000640), r4) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x24, r5, 0x805, 0x70bd2d, 0x25dfdbfb, {}, [@NL80211_ATTR_4ADDR={0x5, 0x53, 0x10}, @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x200005}]}, 0x24}, 0x1, 0x0, 0x0, 0x4004044}, 0x8000) r6 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000140), r2) sendmsg$auto_NL80211_CMD_UNEXPECTED_FRAME(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r6, 0x100, 0x70bd26, 0x25dfdbfc, {}, [@NL80211_ATTR_PUNCT_BITMAP={0x8, 0x142, 0xb9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x881}, 0x4000040) ioctl$auto(0xffffffffffffffff, 0x64c6, 0x1e2) mount$auto(0x0, &(0x7f0000000040)='}[,&*}\x00\x0e\x15F\xf7\x1a\xd1K+\xedy\xc6\x9bb\x94\xb4^\xc2\x83%\xfbw}\xfb_P\"\x19\xdfi\xe9hA|Q\x8a_F\x04:Q\x90\'\x06', &(0x7f0000000140)='nfsd\x00', 0x10000, 0x0) pivot_root$auto(&(0x7f0000000040)='..\x00', 0x0) clone3$auto(&(0x7f0000000180)={0x9, 0x80, 0x8, 0x2, 0x7, 0x4, 0xffffffffffffffff, 0xfffffffffffffff7, 0x9, 0xf, 0x1}, 0xde) setresuid$auto(0x2, 0x7, 0x0) setresuid$auto(0x0, 0x0, 0x0) ioctl$auto(r1, 0x4b65, 0x9) set_mempolicy$auto(0x2005, &(0x7f0000000080)=0x87e, 0x4) r7 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000001200)='/proc/sys/vm/nr_hugepages_mempolicy\x00', 0x202, 0x0) sendfile$auto(r7, r7, 0x0, 0x1) openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/pcmC1D1p\x00', 0x82, 0x0) mmap$auto(0xfffffffffffffff7, 0x4000400008, 0x61, 0xb7, r0, 0x80000008000) close_range$auto(0x2, 0x8, 0x0) unshare$auto(0x40000080) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) 9m14.968100432s ago: executing program 2 (id=77): syz_genetlink_get_family_id$auto_smc_gen_netlink(&(0x7f0000000680), 0xffffffffffffffff) ioctl$auto_TIOCGDEV2(0xffffffffffffffff, 0x80045432, 0x0) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0xa, 0x3, 0x3b) (async) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) (async) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/vm/dirty_bytes\x00', 0x141241, 0x0) write$auto_proc_sys_file_operations_proc_sysctl(r0, 0x0, 0x0) (async) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) (async) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x8000000000000003, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) (async) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) (async) landlock_create_ruleset$auto(&(0x7f0000000000)={0xd1d, 0x3, 0x7}, 0x0, 0x10000) close_range$auto(0x2, 0x8, 0x0) (async) io_uring_setup$auto(0x6, 0x0) (async) io_uring_register$auto(0x2, 0x0, 0x0, 0x1000) (async) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x5) (async) sendmsg$auto_CTRL_CMD_GETPOLICY(r1, 0x0, 0x0) (async) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) (async) preadv2$auto(r2, &(0x7f0000000280)={0x0, 0x80000000}, 0x6, 0x3, 0x4, 0x2e) ioctl$auto_BLKFLSBUF(r2, 0x1261, 0x0) (async) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, 0x0, 0x42, 0x0) socket(0x15, 0x5, 0x0) r3 = gettid() syz_open_procfs$namespace(r3, &(0x7f0000000040)='ns/pid\x00') (async) prctl$auto(0x0, 0x2, r3, 0x4000000000005, 0x7) 9m13.204535392s ago: executing program 2 (id=83): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x80000000, 0x7, 0xdf, 0xeb1, 0x401, 0x8003) r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x20342, 0x0) ioctl$auto_SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, 0x0) ioctl$auto_SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000380)="7a47301037954c081c9a0bb84bb7b04ef84993eab91abe1686f43e43d786e964e8f04455bd620de9f3fb6d65e6c078c1a672c549dbc7876cb528ba081a81d884bfc00dd4eef57cedc0cc4156ff6a5b0aa8ba9511fe2b07c6e7f4732fe36ba218aa5b0ff402f2e6adb8ea60886c1e52c60d7d87e4c0551386501763ad098eb2b9602f83b2a643399f10dfdb0f4018b401be4db675d0acf8d348c26acf338cbe20fcb76439ca602a3c022f4463a8820f1c6f865d24e058af98f0c48bf552c3f6cc28c09d9054347db3c28701c67fa1e57d81b881638b518dd8e24969b7fd10406fcf6eb9bb66bf56ed7568510c72b380fa6efbca845bde90f7672708000000000000003513") mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x0, 0xffffffffffffffff, 0x2) socket(0xa, 0x80803, 0x8000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYRESHEX=r0, @ANYRES16=r2, @ANYBLOB="01002bbd7000f9dbdf250100000006000200010000000500070058000000080009000800000008000a00080000001400170000000000000000000000ffff0a010100"], 0x48}}, 0x0) lseek$auto(0x3, 0x7fffffffffffffff, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) socket(0x8, 0x2, 0x0) setsockopt$auto(0xffffffffffffffff, 0x6, 0xc, 0x0, 0x4) r3 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000140)='/dev/adsp1\x00', 0x163142, 0x0) write$auto(r3, &(0x7f0000000080)='/dev/audio\x00', 0x80000000) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x145) execve$auto(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) execve$auto(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) execve$auto(&(0x7f0000000040)='./file0\x00', &(0x7f00000004c0)=&(0x7f0000000340)='#\xdc\xfe\xd8E\xc8\x8bu4\xd9n\xcb\xca\xc7zw \x96\x9ejh\xad\x9eEc\xae\x1e\x89\x92\x9a\xbbP[B\xae\x9cf)\x15\xac\x90)l\x06\xf0\t\x12\x05zz\xa6\xb3\xce=\x00\x00\x00\x00\x00/\xc4T\x1f\xe5P\xff\xb4\xb7s0\x02\xc5\x81\x93\xc6\xc8\xb6Sp\x1a{8\xfc\xe0,X\xc7BU\xd0\x97\x7f1\x16\x99\x04\xabu/a(\x02\x7f\xbb\xbd\x906\xa8\xce\xee\xcd\xd7\t\x00\xfb\x83\xc8\x8aO\xe9\xbe=\xf7\xf4\x84,\x06\xd3j\x99b\xe6\xf6Y3A\xbb\xa4\xb2\f\x1b\xc3\x8a,g\xc6\xe8[\xdf\x88\x01\x9f7\xb5\x19m\xd8L\x84j\x8c\xec\xdf\x1a\xbd\xc5\x94\xb9\xb7\xd5\xa4\xc0\f-6\xfe\xa8\xed/u\x81_G\xfeR\xbb\x12\x16\xb8*\xa9\xc9\xe81\x9d\x06\xbbC\x17\xbb\xe6|\x97\xabB4J\xed+-\xf8u0/n\xcf\x8b\x95\x9d\xab\xa8\xc47\xa6\x0e\xdeOq\\\xc3\'{\b\xd3m\x94\xc2\xdd{\xeaO\x0e\xe4\xe0\xb9N:\xd60\x17,\x06\xc7B#Y0\x99\xeb\x874\xab?\xc8\x82\xe5\x8f\xb7\x91\xc2\xbe\xb2\x02\xfe\xd3k\xd5\xdcZ\xdcP\x8e+\xd8\xc7C\xcb\x15\x13c\xbf\xe8\xbd\"\x8f3\"\x14\xf8(\xda\x19\xcd\xec\x03.\xd9^\xc3A\xda\r[\x1a\xda\\#/\xd4\xaf\xd0\xe8\xa2\xdd\xc5{\xfa\xe0\x90\x8f\x99lQ\xec\x84h^\x11+\x93\b\xe0c\xe6\xd22\xf9\xa5', 0x0) ioctl$auto_SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) ioctl$auto_SNDCTL_DSP_GETODELAY(r3, 0x80045017, &(0x7f0000000180)) read$auto(0xffffffffffffffff, 0x0, 0x1f40) ioctl$auto(0xc8, 0x800454e1, 0x5c8d) sendmsg$auto_IPVS_CMD_GET_INFO(r1, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00012bbd7000fbdbdf250f00000008000500580000000c0002800800cd00", @ANYRES32=r3, @ANYBLOB="96c896e454ecb61dc4bdf445226ff11905c0d2811d16c5f18bcfe47366672a3c4fafc77a317b81c722413ef82b82e748665852b914e95032459c1d91c82b289119d03ae60024ee7db19fdc4a08d1ad19a96db8bd246df9"], 0x28}, 0x1, 0x0, 0x0, 0x4000001}, 0x40000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) read$auto(0x3, 0x0, 0x8080) 8m58.009171156s ago: executing program 32 (id=83): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x80000000, 0x7, 0xdf, 0xeb1, 0x401, 0x8003) r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x20342, 0x0) ioctl$auto_SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, 0x0) ioctl$auto_SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000380)="7a47301037954c081c9a0bb84bb7b04ef84993eab91abe1686f43e43d786e964e8f04455bd620de9f3fb6d65e6c078c1a672c549dbc7876cb528ba081a81d884bfc00dd4eef57cedc0cc4156ff6a5b0aa8ba9511fe2b07c6e7f4732fe36ba218aa5b0ff402f2e6adb8ea60886c1e52c60d7d87e4c0551386501763ad098eb2b9602f83b2a643399f10dfdb0f4018b401be4db675d0acf8d348c26acf338cbe20fcb76439ca602a3c022f4463a8820f1c6f865d24e058af98f0c48bf552c3f6cc28c09d9054347db3c28701c67fa1e57d81b881638b518dd8e24969b7fd10406fcf6eb9bb66bf56ed7568510c72b380fa6efbca845bde90f7672708000000000000003513") mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x0, 0xffffffffffffffff, 0x2) socket(0xa, 0x80803, 0x8000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYRESHEX=r0, @ANYRES16=r2, @ANYBLOB="01002bbd7000f9dbdf250100000006000200010000000500070058000000080009000800000008000a00080000001400170000000000000000000000ffff0a010100"], 0x48}}, 0x0) lseek$auto(0x3, 0x7fffffffffffffff, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) socket(0x8, 0x2, 0x0) setsockopt$auto(0xffffffffffffffff, 0x6, 0xc, 0x0, 0x4) r3 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000140)='/dev/adsp1\x00', 0x163142, 0x0) write$auto(r3, &(0x7f0000000080)='/dev/audio\x00', 0x80000000) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x145) execve$auto(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) execve$auto(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) execve$auto(&(0x7f0000000040)='./file0\x00', &(0x7f00000004c0)=&(0x7f0000000340)='#\xdc\xfe\xd8E\xc8\x8bu4\xd9n\xcb\xca\xc7zw \x96\x9ejh\xad\x9eEc\xae\x1e\x89\x92\x9a\xbbP[B\xae\x9cf)\x15\xac\x90)l\x06\xf0\t\x12\x05zz\xa6\xb3\xce=\x00\x00\x00\x00\x00/\xc4T\x1f\xe5P\xff\xb4\xb7s0\x02\xc5\x81\x93\xc6\xc8\xb6Sp\x1a{8\xfc\xe0,X\xc7BU\xd0\x97\x7f1\x16\x99\x04\xabu/a(\x02\x7f\xbb\xbd\x906\xa8\xce\xee\xcd\xd7\t\x00\xfb\x83\xc8\x8aO\xe9\xbe=\xf7\xf4\x84,\x06\xd3j\x99b\xe6\xf6Y3A\xbb\xa4\xb2\f\x1b\xc3\x8a,g\xc6\xe8[\xdf\x88\x01\x9f7\xb5\x19m\xd8L\x84j\x8c\xec\xdf\x1a\xbd\xc5\x94\xb9\xb7\xd5\xa4\xc0\f-6\xfe\xa8\xed/u\x81_G\xfeR\xbb\x12\x16\xb8*\xa9\xc9\xe81\x9d\x06\xbbC\x17\xbb\xe6|\x97\xabB4J\xed+-\xf8u0/n\xcf\x8b\x95\x9d\xab\xa8\xc47\xa6\x0e\xdeOq\\\xc3\'{\b\xd3m\x94\xc2\xdd{\xeaO\x0e\xe4\xe0\xb9N:\xd60\x17,\x06\xc7B#Y0\x99\xeb\x874\xab?\xc8\x82\xe5\x8f\xb7\x91\xc2\xbe\xb2\x02\xfe\xd3k\xd5\xdcZ\xdcP\x8e+\xd8\xc7C\xcb\x15\x13c\xbf\xe8\xbd\"\x8f3\"\x14\xf8(\xda\x19\xcd\xec\x03.\xd9^\xc3A\xda\r[\x1a\xda\\#/\xd4\xaf\xd0\xe8\xa2\xdd\xc5{\xfa\xe0\x90\x8f\x99lQ\xec\x84h^\x11+\x93\b\xe0c\xe6\xd22\xf9\xa5', 0x0) ioctl$auto_SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) ioctl$auto_SNDCTL_DSP_GETODELAY(r3, 0x80045017, &(0x7f0000000180)) read$auto(0xffffffffffffffff, 0x0, 0x1f40) ioctl$auto(0xc8, 0x800454e1, 0x5c8d) sendmsg$auto_IPVS_CMD_GET_INFO(r1, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00012bbd7000fbdbdf250f00000008000500580000000c0002800800cd00", @ANYRES32=r3, @ANYBLOB="96c896e454ecb61dc4bdf445226ff11905c0d2811d16c5f18bcfe47366672a3c4fafc77a317b81c722413ef82b82e748665852b914e95032459c1d91c82b289119d03ae60024ee7db19fdc4a08d1ad19a96db8bd246df9"], 0x28}, 0x1, 0x0, 0x0, 0x4000001}, 0x40000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) read$auto(0x3, 0x0, 0x8080) 5m50.999370176s ago: executing program 1 (id=670): getxattrat$auto(0xffffffffffffffff, 0x0, 0xfb, 0x0, 0x0, 0x0) 5m50.701319307s ago: executing program 1 (id=672): r0 = socketcall$auto_SYS_SOCKET(0x1, &(0x7f0000000080)=0x6) bpf$auto_BPF_OBJ_GET(0x7, &(0x7f00000000c0)=@bpf_attr_5={@target_fd=r0, 0xffffffffffffffff, 0x1, 0x8, 0xffffffffffffffff, @relative_fd, 0xffffffffffffffff}, 0x7) r3 = socket$nl_generic(0x10, 0x3, 0x10) openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mmap$auto(0x400, 0x2, 0xe3, 0x100000eb1, 0x40000000000a1, 0x8000) mmap$auto(0x0, 0xc, 0x4000000000df, 0xeb1, 0x401, 0x8000) r4 = io_uring_setup$auto(0x9, 0x0) close_range$auto(0x2, r4, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x181742, 0x0) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) r5 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000280)='/proc/thread-self/fail-nth\x00', 0x2, 0x0) write$auto(r5, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) write$auto(0x3, 0x0, 0xb6bd) syz_genetlink_get_family_id$auto_nbd(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$auto_NBD_CMD_CONNECT(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="6e778cbb", @ANYRES8=r2, @ANYRES64=r1, @ANYRES16, @ANYBLOB="0c00e22e05000000000000000c000200010000000000"], 0x6c}, 0x1, 0x0, 0x0, 0x40081}, 0x20040040) r6 = bpf$auto(0xffffffff, &(0x7f0000000000)=@iter_create={r2, 0x6}, 0x8) ioctl$auto_PPPIOCSPASS(r0, 0x40107447, &(0x7f00000001c0)={0x2, &(0x7f0000000180)={0xfffb, 0xd, 0x9, @inferred=r2}}) mmap$auto(0x0, 0x402000b, 0xdf, 0xeb1, 0x401, 0x8000) r7 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x8000, 0x0) read$auto(r7, 0x0, 0x7) r8 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/fs/jfs/loglevel\x00', 0x1a9701, 0x0) openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f0000000040)={0x209040, 0x78, 0x1}, 0x18) write$auto(r8, 0x0, 0x9) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x0, r6, 0x10002) openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000200)='/dev/mtd0ro\x00', 0x2142, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffff7, 0x8000) fanotify_init$auto(0x65, 0x2) socket(0x1d, 0x2, 0x2) socket(0x10, 0x3, 0x6) 5m49.295557045s ago: executing program 1 (id=677): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptyzb\x00', 0x800, 0x0) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$auto(0x3, 0x40076f3f, 0x38) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x5, 0x0) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r1) ioctl$auto_KVM_GET_MSRS(r0, 0x4008ae89, &(0x7f0000000040)={0x2, 0x0, [{0xc0000102, 0x1, 0x8003}]}) r2 = memfd_create$auto(&(0x7f0000000300)='/sys/kernel/debug/x86/boot_params/data\x00\"F\xb6\xcd\x06\xd6\x97\\L\xe1\xb2\xee\xb8\x8e\xd6O\xa1j\x90w\xc7\x94\xb7yi\x01&\x04b/\xaa\xfb#s\xc4\xa3\xa7\xacj\xc6\x8e\xf4L\x9a\xf8\xcc\xdcy\x9f\x93\xbc\xf6\xc8\xdb\x05w,|B\xfc\x04\x97\xd3\x0f\x8b\x81\xe8\xbc\x81\x0e\xd7o\xd2\xcd\x18z\xc2\xb7|\xe1\xa6\x9a~\x96\x10rnLnt\xdb\xdb-\x1b\x99\xd4\xed;\xf8\x13a\r\xf2\a\x85%\xef\xa7\x7f#\x96\xf2S\xb0\xf1Hq\x0f;\x83\xb7\x0fz\x9dN\xc9\x1e\x15r\x97|\xbfE\xce\"', 0x4) fallocate$auto(r2, 0x0, 0x9, 0x4cbd5d) syz_genetlink_get_family_id$auto_nl802154(0x0, 0xffffffffffffffff) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r3 = clone$auto(0x21, 0x80000007, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x6) wait4$auto(r3, 0x0, 0x80000000, &(0x7f0000000140)={{0x10000, 0x100080}, {0x1, 0x9}, 0x8000000000000000, 0x2, 0x9, 0x10, 0x2, 0x1, 0x5, 0x6, 0x3, 0x800000000000008, 0x4, 0x7, 0x6, 0xb4b9}) process_vm_readv$auto(r3, 0x0, 0xfffffffffffffffe, 0x0, 0x6, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) r4 = socket(0x11, 0x3, 0x9) r5 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cec4\x00', 0x10b703, 0x0) ioctl$auto_CEC_S_MODE(r5, 0x40046109, &(0x7f0000002c40)=0xd0) close_range$auto(0x2, 0x8, 0x0) sendmmsg$auto(r4, &(0x7f0000000180)={{&(0x7f00000001c0)="dd2fe40a09", 0x5ac, &(0x7f0000000100)={&(0x7f0000000340), 0x21}, 0x5, &(0x7f0000000180), 0x5, 0xe}, 0x5}, 0x2, 0x100) madvise$auto(0x0, 0x2003f2, 0x15) madvise$auto(0x0, 0x1010001, 0x100000003) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x0) 5m48.04544435s ago: executing program 1 (id=682): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f0000000040)=""/43, 0x2b) mmap$auto(0x0, 0x2000a, 0x10000000000df, 0xeb2, 0x401, 0x8000) io_uring_setup$auto(0x6, 0x0) r0 = openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000240), 0x2000, 0x0) ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, 0x0) openat$auto_sync_info_debugfs_fops_(0xffffffffffffff9c, &(0x7f0000000040), 0xc0042, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x3, 0x0, 0x9, 0x7352, 0x3d, 0x65f, 0x1ffde, 0x7, 0x3, 0x2, 0xb, 0x3, 0x5, 0x101, 0xb4, 0x9, 0x6, 0x7ff, 0x84, 0x4, 0x0, 0x10, 0x2000, 0x203, 0x0, 0xb4, 0x4, 0xfffffff8, 0x0, 0x0, 0xfffffff8, [0x7, 0x0, 0x68, 0x0, 0x100000000, 0x400000, 0x0, 0x0, 0x0, 0x3, 0x0, 0xfffffffffffffffd, 0x800, 0x0, 0x0, 0x0, 0x2000000000, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x1000000000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x3, 0x800000000000000, 0x5]}, 0x1fe, 0xf) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x24048890}, 0x40000) r1 = socket(0x10, 0x2, 0x0) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x24008004) mmap$auto(0x2, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) sendmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xdc5e}, 0x800}, 0x7, 0x4008) mknod$auto(&(0x7f00000012c0)=':,\x00', 0xca, 0x6) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x22a02, 0x0) io_uring_setup$auto(0x6, &(0x7f0000000080)={0xb, 0x40000d, 0x10400, 0x6, 0x4, 0x80006, 0xffffffffffffffff, [0x0, 0x0, 0x9], {0x7, 0x200004, 0x7, 0x2a3, 0x100, 0x3, 0x40100101, 0xa}, {0xf8, 0x4, 0x4, 0x1, 0x3, 0xa5d2, 0xcc, 0x8000008, 0x100000000}}) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x103e81, 0x0) ioctl$auto_TCSBRKP2(r2, 0x5425, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptyd3\x00', 0x103e81, 0x0) faccessat2$auto(0x1, &(0x7f00000000c0)='\x00', 0x2, 0x1000) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000001080)='/dev/dsp1\x00', 0x20342, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000540)='/dev/tty45\x00', 0x201, 0x0) r3 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/bus/usb/020/001\x00', 0xa901, 0x0) ioctl$auto_USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000000000)={0x2, 0x80, 0x10001, 0x5, &(0x7f0000000000), 0x9, 0x3, 0x2, @stream_id=0x2, 0x7, 0x476, 0x0}) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/system/cpu/cpu0/cache/index2/coherency_line_size\x00', 0x80880, 0x0) r4 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/fs/nr_open\x00', 0xa0202, 0x0) sendfile$auto(r4, r4, 0x0, 0x1) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 5m45.628773403s ago: executing program 1 (id=690): unshare$auto(0x40000080) socket(0x2, 0x801, 0x106) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0xffff, @remote}, 0x6d) listen$auto(0x3, 0x81) mmap$auto(0x0, 0x2020209, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000600), 0xffffffffffffffff) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/net/rpc/nfsd.fh/channel\x00', 0x88400, 0x0) read$auto_proc_reg_file_ops_compat_inode(r0, &(0x7f0000000240)=""/213, 0xd5) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) openat$auto_dvb_dvr_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000080), 0x1c3000, 0x0) r1 = socket(0x2, 0x2, 0x0) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) sendmsg$auto_NFSD_CMD_THREADS_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x1723844cb251ce1a}, 0x40010) r2 = epoll_create$auto(0x3e) epoll_ctl$auto(r2, 0x1, 0x8000000000000000, 0x0) r3 = openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, &(0x7f0000000000), 0x20100, 0x0) r4 = open(&(0x7f0000000000)='./file0\x00', 0x4242, 0xe1d2b27bdc14aabc) fallocate$auto(r4, 0x3, 0x4000000007, 0xa) ioctl$auto_I2C_SMBUS(r3, 0x720, &(0x7f0000000040)="73b5040bf50850aa67376793f74b25826d0c1bc04cfd9b7db90cf76fbd49f00abda2e969b6d3a6997a859eee993914eea0858d4740cf7eac1db3cfefdcb05a1e2ac2071fa0f47782ba4c30ac10c0088eb5fb6c91a776f53ebfdafd743bd2a64510") socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0x8, 0x8000) io_uring_setup$auto(0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/input/event1\x00', 0x34d802, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 5m43.180817388s ago: executing program 1 (id=698): syz_clone3(&(0x7f00000004c0)={0x2000000, 0x0, 0x0, 0x0, {0x3a}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x82001, 0x0) write$auto_seq_oss_f_ops_seq_oss(r0, &(0x7f0000000040)="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", 0x2f8) syz_genetlink_get_family_id$auto_smc_gen_netlink(0x0, 0xffffffffffffffff) unshare$auto(0x40000080) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty48\x00', 0x40000, 0x0) mknod$auto(&(0x7f0000000040)='./file0\x00', 0x1001, 0x4) open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x120) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) write$auto(0x3, 0x0, 0xfffffdef) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xfffffdef}, 0x1) ioctl$auto_TIOCSWINSZ2(r1, 0x560e, &(0x7f0000000080)="ec274874") unshare$auto(0x40000080) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) userfaultfd$auto(0x1) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xc0002, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_VPORT_CMD_DEL(r2, 0x0, 0x44000) io_uring_setup$auto(0x59, &(0x7f0000000340)={0x0, 0x21, 0x3800, 0x2, 0x7, 0x400a, 0xffffffffffffffff, [0x0, 0xfffffffd], {0x6, 0x7cb, 0x8c48, 0x6, 0x3, 0x7b, 0x0, 0x5, 0xfffffffffffffffd}, {0x100, 0x20081, 0x100052, 0x85, 0x2, 0x400, 0x2076c2, 0xc, 0x100000000}}) mmap$auto(0x0, 0x9, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) sysfs$auto(0x2, 0x5, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) timerfd_create$auto(0x9, 0x3) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) ioctl$auto(0x3, 0x40085400, 0x5) move_pages$auto(0x0, 0x1002, 0x0, 0x0, 0x0, 0x2) getsockopt$auto_SO_TIMESTAMP_OLD(r1, 0x7, 0x1d, &(0x7f00000003c0)='[\x00', &(0x7f0000000400)=0x101) socketpair$auto(0x1a, 0x5, 0x8000000000000000, 0x0) ioctl$auto_TIOCGDEV2(0xffffffffffffffff, 0x80045432, 0x0) 5m28.149499506s ago: executing program 33 (id=698): syz_clone3(&(0x7f00000004c0)={0x2000000, 0x0, 0x0, 0x0, {0x3a}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x82001, 0x0) write$auto_seq_oss_f_ops_seq_oss(r0, &(0x7f0000000040)="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", 0x2f8) syz_genetlink_get_family_id$auto_smc_gen_netlink(0x0, 0xffffffffffffffff) unshare$auto(0x40000080) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty48\x00', 0x40000, 0x0) mknod$auto(&(0x7f0000000040)='./file0\x00', 0x1001, 0x4) open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x120) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) write$auto(0x3, 0x0, 0xfffffdef) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xfffffdef}, 0x1) ioctl$auto_TIOCSWINSZ2(r1, 0x560e, &(0x7f0000000080)="ec274874") unshare$auto(0x40000080) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) userfaultfd$auto(0x1) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xc0002, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_VPORT_CMD_DEL(r2, 0x0, 0x44000) io_uring_setup$auto(0x59, &(0x7f0000000340)={0x0, 0x21, 0x3800, 0x2, 0x7, 0x400a, 0xffffffffffffffff, [0x0, 0xfffffffd], {0x6, 0x7cb, 0x8c48, 0x6, 0x3, 0x7b, 0x0, 0x5, 0xfffffffffffffffd}, {0x100, 0x20081, 0x100052, 0x85, 0x2, 0x400, 0x2076c2, 0xc, 0x100000000}}) mmap$auto(0x0, 0x9, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) sysfs$auto(0x2, 0x5, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) timerfd_create$auto(0x9, 0x3) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) ioctl$auto(0x3, 0x40085400, 0x5) move_pages$auto(0x0, 0x1002, 0x0, 0x0, 0x0, 0x2) getsockopt$auto_SO_TIMESTAMP_OLD(r1, 0x7, 0x1d, &(0x7f00000003c0)='[\x00', &(0x7f0000000400)=0x101) socketpair$auto(0x1a, 0x5, 0x8000000000000000, 0x0) ioctl$auto_TIOCGDEV2(0xffffffffffffffff, 0x80045432, 0x0) 2m45.089721117s ago: executing program 3 (id=1161): unshare$auto(0x40000080) unshare$auto(0x40000080) mmap$auto(0x0, 0x10000, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv6/conf/wlan1/forwarding\x00', 0x202, 0x0) sendfile$auto(r0, r0, 0x0, 0x7fffe000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) mbind$auto(0x8000, 0xfa9d, 0x2, &(0x7f0000000280)=0x20000000000000fb, 0x3, 0x1) set_mempolicy_home_node$auto(0x0, 0x2010001, 0x0, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) r1 = openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f0000000540)='/dev/snd/pcmC0D0c\x00', 0x20000, 0x0) ioctl$auto_SNDRV_PCM_IOCTL_STATUS_EXT642(r1, 0xc0984124, &(0x7f0000000580)={0x10003, "33626888", 0x3, 0x1, 0xa, 0x5, 0x3, 0x0, 0x5, 0x101, 0x3, 0x201, 0x0, 0x8, 0x1b, 0x14000000, 0x17795cb1, 0x1, 0x1, "2effd87679bd5e47a63acd6f535cd80f84710b55"}) r2 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ttype\x00', 0x10000, 0x0) ioctl$auto_TIOCGWINSZ(r2, 0x5413, &(0x7f00000001c0)="731fdadbb1c68d1dc61d5fb0f4e2b7ea557505ff797529467b8b1e21330ee4415c104bd806df056c9c963aee406c63906148ad51bad6963822bdbad3fce40d0d2b0606") madvise$auto(0x0, 0x5d6, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) r3 = userfaultfd$auto(0x1) close_range$auto(0xffffffffffffffff, 0x8, 0x3fd) msgctl$auto_MSG_INFO(0xc3, 0xc, 0x0) r4 = ioctl$auto_TUNGETVNETLE2(r3, 0x800454dd, &(0x7f0000000040)=0x4) ioctl$auto_SNDCTL_DSP_GETTRIGGER(r4, 0x80045010, &(0x7f0000000080)="61af1196866674823f52bab45f7a58d944f79c75e1e555cbe49341cdf32636dfd937f318a00629c6830e24b21fb6f7c3ad0dfd9e7d25fa5b8b6333aa2ddd2bc8579e678e604e36058bba012301f261a38f8f0924d87d6ea3884ac787d9e4a2409d7ec1526034646e2a135a9976adf52158b063fcab757b48400b8a69c9ee5b1928d1a0ae295e331db0b5890a604d2a5557c670f7f7059b8d50063bb29bdc196c7ec1cd24b6eead24f9311663356212b56bc91a4c128723ab2c03cf03453073a8cafcd1efc8") bind$auto(0x3, 0x0, 0x6a) mmap$auto(0xfffffffffffffffd, 0x9, 0xa2, 0x8000008b71, 0xffffffffffffffff, 0x8000) futex$auto(0x0, 0x0, 0x2948, 0x0, 0x0, 0x5) r5 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/admmidi2\x00', 0x109000, 0x0) ioctl$auto_SNDRV_RAWMIDI_IOCTL_DRAIN(r5, 0x40045731, &(0x7f0000000100)=0x219f) r6 = openat$auto_debug_help_fops_orangefs_debugfs(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) read$auto_debug_help_fops_orangefs_debugfs(r6, &(0x7f0000000340)=""/231, 0xe7) socket(0x2, 0x80802, 0x2) 2m44.603740546s ago: executing program 5 (id=1163): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) preadv2$auto(r0, 0x0, 0x6, 0x3, 0x4, 0x2a) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x14be02, 0x0) openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0x0) syz_genetlink_get_family_id$auto_nl802154(0x0, 0xffffffffffffffff) sendmsg$auto_NL802154_CMD_GET_WPAN_PHY(r1, 0x0, 0x40000) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) sendmsg$auto_CGROUPSTATS_CMD_GET(0xffffffffffffffff, 0x0, 0x4080) select$auto(0x5, 0x0, 0x0, 0x0, 0x0) getsockopt$auto(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) statmount$auto(&(0x7f0000000040)={0x1f, @raw, 0x80000002, 0xf5ff, 0x8}, 0x0, 0x7ffffffff000, 0x0) 2m42.842947033s ago: executing program 5 (id=1166): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = getpgid(r0) socket(0xa, 0x3, 0x5) prctl$auto_PR_SET_MM_START_DATA(0x40005, 0x3, r1, 0x8000a, 0xffffffffffffffff) syz_genetlink_get_family_id$auto_smc_pnetid(&(0x7f0000000300), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_gtp(0x0, 0xffffffffffffffff) close_range$auto(0x2, 0xa, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_SET_FILS_AAD(0xffffffffffffffff, 0x0, 0x800) setsockopt$auto(0x3, 0x10f, 0x82, 0x0, 0x14) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) socket(0x21, 0x6, 0x10003) recvmmsg$auto(0x3, 0x0, 0x10000, 0xfffffffc, 0x0) r2 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x1, 0x0) ioctl$auto_SNDCTL_DSP_SETTRIGGER(r2, 0x40045010, 0x0) read$auto(0xffffffffffffffff, 0x0, 0x10) mmap$auto(0x0, 0x3, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) unshare$auto(0x40000080) close_range$auto(0x0, 0x5, 0xfffffffc) socket(0x2, 0x3, 0xa) r3 = socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) r4 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000200)='/dev/sda\x00', 0x8001, 0x0) ioctl$auto(r4, 0x2284, r3) madvise$auto(0x0, 0xffffffffffff0005, 0x19) waitid$auto_P_PGID(0x2, r1, 0x0, 0x6, 0x0) 2m42.434365712s ago: executing program 3 (id=1168): close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtdblock0\x00', 0x0, 0x0) r1 = socket(0x2, 0x1, 0x106) setsockopt$auto_SO_BROADCAST(r0, 0x7fff, 0x6, &(0x7f0000000200)='\x00', 0x5) bind$auto(r1, &(0x7f0000000040)=@in={0x2, 0x3, @broadcast}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ram5\x00', 0x14fa02, 0x0) sendfile$auto(0x3, r2, 0x0, 0x400000000006) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) r3 = openat$auto_evm_key_ops_evm_secfs(0xffffffffffffff9c, &(0x7f00000001c0), 0x8342, 0x0) mmap$auto(0x0, 0x20006, 0x4000000000df, 0xeb1, 0xffffffffffffffff, 0x8000) r4 = socket(0xa, 0x3, 0x3a) getsockopt$auto(r4, 0x29, 0x35, 0x0, 0x0) writev$auto(r3, &(0x7f0000000100)={0x0, 0x7114}, 0x8) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) dup3$auto(r0, r3, 0x5) read$auto(0x3, 0x0, 0x80) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL802154_CMD_SET_BACKOFF_EXPONENT(r5, &(0x7f00000004c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000480)={0x0}, 0x1, 0x0, 0x0, 0x48009}, 0x0) ioctl$auto(0x3, 0x5411, 0x38) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)={0x28, 0x0, 0xd0d58b333228212f, 0x70bdac, 0x25dfdbfb, {}, [@NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0xffff0001}, @NL80211_ATTR_FILS_ERP_USERNAME={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x44191}, 0x801) 2m41.434491817s ago: executing program 3 (id=1170): r0 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/security/tomoyo/query\x00', 0x0, 0x0) read$auto(r0, 0x0, 0x100000001) r1 = openat$auto_force_wakeup_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/bluetooth/hci7/force_wakeup\x00', 0x721800, 0x0) copy_file_range$auto(r1, 0x0, 0xffffffffffffffff, 0x0, 0x1, 0xfffeffff) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x40009, 0x3, 0x9b72, 0x7, 0x28000) socket(0x27, 0x3, 0xc) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x55) r2 = socket(0x2, 0x3, 0xa) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x8) connect$auto(0x3, &(0x7f00000018c0)=@l2tp={0x2, 0x0, @multicast1}, 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0xe000) write$auto(0x3, 0x0, 0x800) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x0) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x27ff) msgget$auto(0xc, 0x77d9) msgsnd$auto(0x0, &(0x7f0000000000)={0x1, 0x5}, 0x8, 0x9) unshare$auto(0x40000080) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/pressure/io\x00', 0x20c002, 0x0) set_mempolicy_home_node$auto(0xc, 0xe873, 0x90, 0x6) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000040), r2) sendmsg$auto_NL802154_CMD_GET_WPAN_PHY(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000180)=ANY=[@ANYBLOB="280000008cee252c31ebe56427657397ee2e3ecf3add397b3e84d1d641b86184bc6ab635cbb3acbf72f27c739ea976e8964277ea2d5ce18494489486dd3760b8c8bfb28701d06bfda689245d67901f37073d68a9cc915d87251e5970fc1f7ce0141660b109b9df13f5ad1f17f0eb67ce4fcd851f", @ANYRES16=r4, @ANYBLOB="01002abd7000fedbdf25010000000c000600100000000000000008000100feffffff"], 0x28}, 0x1, 0x0, 0x0, 0x51}, 0x0) 2m40.291497521s ago: executing program 5 (id=1174): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) preadv2$auto(r0, 0x0, 0x6, 0x3, 0x4, 0x2a) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x14be02, 0x0) openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0x0) syz_genetlink_get_family_id$auto_nl802154(0x0, 0xffffffffffffffff) sendmsg$auto_NL802154_CMD_GET_WPAN_PHY(r1, 0x0, 0x40000) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) sendmsg$auto_CGROUPSTATS_CMD_GET(0xffffffffffffffff, 0x0, 0x4080) madvise$auto(0x0, 0xffffffffffff0001, 0x15) madvise$auto(0x0, 0xffffffffffff0005, 0x19) statmount$auto(&(0x7f0000000040)={0x1f, @raw, 0x80000002, 0xf5ff, 0x8}, 0x0, 0x7ffffffff000, 0x0) 2m39.932723235s ago: executing program 3 (id=1176): mmap$auto(0x0, 0x6, 0xe6, 0x17, 0xffffffffffffffff, 0xcdb3) (async) fanotify_init$auto(0x7e5, 0x105) (async) close_range$auto(0x2, 0x8, 0x0) (async) sendmsg$auto_ETHTOOL_MSG_PHY_GET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x1) (async) socket(0x10, 0x2, 0x0) (async) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000800}, 0x4) (async) sendmmsg$auto(0xffffffffffffffff, 0x0, 0x3, 0x20000000) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) write$auto(0xffffffffffffffff, 0x0, 0x100000a3d9) openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, 0x0, 0x20a00, 0x0) (async) mmap$auto(0x0, 0x1004020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) (async) r1 = openat$auto_ubi_ctrl_cdev_operations_ubi(0xffffffffffffff9c, &(0x7f0000000180), 0x40900, 0x0) ioctl$auto_UBI_IOCATT(r1, 0x40186f40, 0x0) (async) syz_genetlink_get_family_id$auto_nl802154(0x0, 0xffffffffffffffff) (async) statmount$auto(0x0, 0x0, 0x800, 0x0) ioctl$auto_UBI_IOCDET(r1, 0x40046f41, 0x0) syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000080), r0) (async) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) (async) clone$auto(0x100000001, 0xb, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x4000006) (async) clone$auto(0x1, 0x1, 0x0, 0x0, 0x80000000001) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0xffffffffffffffff, 0x8000) (async) r2 = socket(0x10, 0x2, 0x0) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0f0026bd7000fcdbdf9907"], 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x4) (async) close_range$auto(r2, r1, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) timerfd_create$auto(0x9, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) (async) close_range$auto(0x2, 0x8, 0x2) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000080), 0x80040, 0x0) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) 2m39.644821478s ago: executing program 3 (id=1178): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_OVS_DP_CMD_NEW(r0, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="190425bd7000f8dbdfa4d1da660008000200", @ANYRES32=0x4, @ANYBLOB="08000200", @ANYRES32=0x0, @ANYBLOB="080007000300000008000500fbffffff"], 0x34}, 0x1, 0x300, 0x0, 0x2004c011}, 0x0) fcntl$auto_F_GETFL(0xffffffffffffffff, 0x3, 0x100000000) r2 = open(&(0x7f0000000180)='./file0\x00', 0x10000, 0x5ec) mmap$auto(0x800000000000, 0x20009, 0x4000000000df, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/virtual/tty/ttyc0/power/runtime_status\x00', 0x40000, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f0000000080)=""/58, 0x3a) process_vm_readv$auto(0x0, &(0x7f0000000000)={0x0, 0xfff}, 0x40000000001, &(0x7f0000000180)={&(0x7f0000000040), 0x40000000001243}, 0x4, 0x0) ioctl$auto(0xffffffffffffffff, 0x400454ca, 0x38) mlockall$auto(0x1) mprotect$auto(0x1ffffffff000, 0x100004, 0x6) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/block/ram6/queue/max_hw_sectors_kb\x00', 0x80000, 0x0) read$auto(r4, 0x0, 0x20) r5 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) openat$auto_mISDN_fops_timerdev(0xffffffffffffff9c, &(0x7f0000000140), 0x76f0eebe21c13eca, 0x0) writev$auto(r5, &(0x7f0000000200)={0x0, 0x7}, 0x3) inotify_init1$auto(0x3000000000000) r6 = gettid() rt_sigqueueinfo$auto(r6, 0xb, &(0x7f00000001c0)={@siginfo_0_0={0x3, 0x401, 0xffffeffb, @_timer={r6, 0xd, @sival_ptr=0x0, 0x62}}}) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_usbfs_devices_fops_usb(0xffffffffffffff9c, 0x0, 0x28400, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000640), r7) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r8, 0x805, 0x70bd2d, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4004044}, 0x8000) fcntl$auto_F_ADD_SEALS(r2, 0x410, 0x0) capset$auto(&(0x7f0000000040)={0x7, 0x0}, &(0x7f00000000c0)={0x2, 0x3, 0x10}) fcntl$auto(0x3, 0x401, r9) 2m38.471656996s ago: executing program 3 (id=1179): r0 = socket$nl_generic(0x10, 0x3, 0x10) unshare$auto(0x40000080) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x14fe02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x20000004}, 0x4000884) lstat$auto(0x0, &(0x7f0000000180)={0xf, 0xfffffffffffffffe, 0x400000100000001, 0x1000, 0x0, 0x0, 0x0, 0x220fa98, 0xc, 0x6, 0x8000000008, 0x100000007fffffff, 0xffffffffffffffff, 0x0, 0x7, 0x4, 0xb}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x89fc, &(0x7f0000000040)={'bridge0\x00'}) r2 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff) unshare$auto(0x8100000) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_SET_FILS_AAD(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x14, 0x0, 0x4, 0x70bd27, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x44) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000880), r3) r4 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000001180), r3) sendmsg$auto_NL802154_CMD_NEW_SEC_KEY(r3, &(0x7f0000003640)={0x0, 0x0, &(0x7f0000003600)={&(0x7f0000001200)={0x1c, r4, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x2a, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20001000}, 0x24000800) sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000480)={0x0, 0x1b, &(0x7f0000000440)={&(0x7f0000000080)={0x1c, r2, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NFSD_A_SERVER_THREADS={0x8}]}, 0x1c}}, 0x4000) 2m37.643729208s ago: executing program 5 (id=1181): close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x9, 0xdd, 0x400eb1, 0x401, 0x8000) r0 = socket(0xa, 0x5, 0x0) r1 = socket(0x2, 0x3, 0x6) lsm_list_modules$auto(0x0, 0x0, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/platform/vhci_hcd.0/status.8\x00', 0x103000, 0x0) readv$auto(r2, &(0x7f0000006080)={&(0x7f0000000040), 0xba41}, 0xa) syz_clone3(&(0x7f0000000240)={0x8000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x22}, &(0x7f00000000c0)=""/7, 0x7, &(0x7f0000000100)=""/212, &(0x7f0000000200)=[0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0x4}, 0x58) close_range$auto(r0, 0xffffffffffffffff, 0xffffffff) open(0x0, 0x22240, 0x154) ioctl$sock_SIOCGIFINDEX(r1, 0x401c5820, 0x0) setresgid$auto(0xffffffffffffffff, 0x28000000000000, 0x7) fcntl$auto(0x3, 0x4, 0xa553) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x2, 0x0) socket(0x28, 0x1, 0x0) socket(0x2, 0x5, 0x0) sysfs$auto(0x2, 0x0, 0x0) epoll_create$auto(0x7) r3 = socket$nl_generic(0x10, 0x3, 0x10) epoll_ctl$auto(0x5, 0x1, r3, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) epoll_ctl$auto(0x5, 0x3, r3, 0x0) 2m37.183069322s ago: executing program 5 (id=1184): r0 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/security/tomoyo/query\x00', 0x0, 0x0) read$auto(r0, 0x0, 0x100000001) r1 = openat$auto_force_wakeup_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/bluetooth/hci7/force_wakeup\x00', 0x721800, 0x0) copy_file_range$auto(r1, 0x0, 0xffffffffffffffff, 0x0, 0x1, 0xfffeffff) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x40009, 0x3, 0x9b72, 0x7, 0x28000) socket(0x27, 0x3, 0xc) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x55) r2 = socket(0x2, 0x3, 0xa) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x8) connect$auto(0x3, &(0x7f00000018c0)=@l2tp={0x2, 0x0, @multicast1}, 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0xe000) write$auto(0x3, 0x0, 0x800) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x0) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x27ff) msgget$auto(0xc, 0x77d9) msgsnd$auto(0x0, &(0x7f0000000000)={0x1, 0x5}, 0x8, 0x9) unshare$auto(0x40000080) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/pressure/io\x00', 0x20c002, 0x0) set_mempolicy_home_node$auto(0xc, 0xe873, 0x90, 0x6) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000040), r2) sendmsg$auto_NL802154_CMD_GET_WPAN_PHY(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000180)=ANY=[@ANYBLOB="280000008cee252c31ebe56427657397ee2e3ecf3add397b3e84d1d641b86184bc6ab635cbb3acbf72f27c739ea976e8964277ea2d5ce18494489486dd3760b8c8bfb28701d06bfda689245d67901f37073d68a9cc915d87251e5970fc1f7ce0141660b109b9df13f5ad1f17f0eb67ce4fcd851f", @ANYRES16=r4, @ANYBLOB="01002abd7000fedbdf25010000000c000600100000000000000008000100feffffff"], 0x28}, 0x1, 0x0, 0x0, 0x51}, 0x0) 2m36.243253684s ago: executing program 5 (id=1189): mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) (async) close_range$auto(0x2, 0x8, 0x0) (async) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/snd/controlC2\x00', 0x101802, 0x0) (async) ioctl$auto(0x3, 0x80045530, 0xffffffffffffffff) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2, 0xe2, 0xeb1, 0x405, 0xfffffffffffffff9) (async) r1 = socket(0xa, 0x5, 0x0) setsockopt$auto(r1, 0x10000000084, 0x79, 0x0, 0xd) (async) r2 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002a40), r0) sendmsg$auto_NFSD_CMD_LISTENER_SET(r0, &(0x7f00000050c0)={0x0, 0x5c1e, &(0x7f0000005080)={&(0x7f0000002a80)=ANY=[@ANYBLOB="13000000", @ANYRES16=r2, @ANYBLOB="010025bd7000fbdbdf2506000000"], 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008050) (async) sendmsg$auto_NFSD_CMD_LISTENER_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x14, r2, 0x1, 0x70bd27, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0xeda47ee5ad433e65}, 0x20000000) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_hsr(&(0x7f0000000180), r3) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) (async) pread64$auto(0xffffffffffffffff, 0x0, 0x3ef, 0x9) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) mremap$auto(0x4000, 0x8000b8, 0x13fd4, 0x3, 0xfffff000) (async) sendmsg$auto_HSR_C_GET_NODE_LIST(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000059834b225e4ffbe79f9d8bee5f962f09f40c28b0c049273cbe0547f4e371333db0ee4afe986e2b9adc16c0c3448fb66ddf5883b13b7b53029beb2f5304f3bcd442b6a6d625228ff0c357ae767d9b6003f805a20ddaa66161626c86330e6b9b7c978bc076e45faee1886340281ab9a2275ca9e66f14da0743135301e6cafbb3f194b488a1bba644fa5df0e460cb95a813a25b75edd64534acf103fc693e6beeea60bd000de5b", @ANYRES16=r4, @ANYBLOB="0100a6bd7000fddbdf2505000000"], 0x14}, 0x1, 0x0, 0x0, 0x20000080}, 0x20000800) r5 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000200)='/proc/kcore\x00', 0x28000, 0x0) pread64$auto(r5, 0x0, 0x840003, 0x40000000002e72) (async) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000100), 0xffffffffffffffff) r8 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), r3) sendmsg$auto_NL80211_CMD_GET_MPP(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0xa8, r8, 0x0, 0x70bd2a, 0x25dfdbfc, {}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'ip_vti0\x00'}, @NL80211_ATTR_MPATH_NEXT_HOP={0x77, 0x1a, "1b5dc7d0255614d8b0663a08a68318e40f0a29beda7a665ba96e84635e94eb517e4dfb0ebeef3ac2f6708f525e90d19b786155d83c94b4a2c93adc04b91ba5eea8606255f87a4c89dbdeecc8fb374ece54a54da4274dc419fea7d3c60b720737c38904f607a1894a481b40adcc1b66981df517"}, @NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x3b}]}, 0xa8}, 0x1, 0x0, 0x0, 0x40800}, 0x20040040) (async) sendmsg$auto_OVS_FLOW_CMD_NEW(r6, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000140)={0x1c, r7, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@OVS_FLOW_ATTR_PROBE={0x4}, @OVS_FLOW_ATTR_PROBE={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x40) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) 2m23.356785751s ago: executing program 34 (id=1179): r0 = socket$nl_generic(0x10, 0x3, 0x10) unshare$auto(0x40000080) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x14fe02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x20000004}, 0x4000884) lstat$auto(0x0, &(0x7f0000000180)={0xf, 0xfffffffffffffffe, 0x400000100000001, 0x1000, 0x0, 0x0, 0x0, 0x220fa98, 0xc, 0x6, 0x8000000008, 0x100000007fffffff, 0xffffffffffffffff, 0x0, 0x7, 0x4, 0xb}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x89fc, &(0x7f0000000040)={'bridge0\x00'}) r2 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff) unshare$auto(0x8100000) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_SET_FILS_AAD(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x14, 0x0, 0x4, 0x70bd27, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x44) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000880), r3) r4 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000001180), r3) sendmsg$auto_NL802154_CMD_NEW_SEC_KEY(r3, &(0x7f0000003640)={0x0, 0x0, &(0x7f0000003600)={&(0x7f0000001200)={0x1c, r4, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x2a, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20001000}, 0x24000800) sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000480)={0x0, 0x1b, &(0x7f0000000440)={&(0x7f0000000080)={0x1c, r2, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NFSD_A_SERVER_THREADS={0x8}]}, 0x1c}}, 0x4000) 2m21.091305882s ago: executing program 35 (id=1189): mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) (async) close_range$auto(0x2, 0x8, 0x0) (async) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/snd/controlC2\x00', 0x101802, 0x0) (async) ioctl$auto(0x3, 0x80045530, 0xffffffffffffffff) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2, 0xe2, 0xeb1, 0x405, 0xfffffffffffffff9) (async) r1 = socket(0xa, 0x5, 0x0) setsockopt$auto(r1, 0x10000000084, 0x79, 0x0, 0xd) (async) r2 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002a40), r0) sendmsg$auto_NFSD_CMD_LISTENER_SET(r0, &(0x7f00000050c0)={0x0, 0x5c1e, &(0x7f0000005080)={&(0x7f0000002a80)=ANY=[@ANYBLOB="13000000", @ANYRES16=r2, @ANYBLOB="010025bd7000fbdbdf2506000000"], 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008050) (async) sendmsg$auto_NFSD_CMD_LISTENER_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x14, r2, 0x1, 0x70bd27, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0xeda47ee5ad433e65}, 0x20000000) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_hsr(&(0x7f0000000180), r3) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) (async) pread64$auto(0xffffffffffffffff, 0x0, 0x3ef, 0x9) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) mremap$auto(0x4000, 0x8000b8, 0x13fd4, 0x3, 0xfffff000) (async) sendmsg$auto_HSR_C_GET_NODE_LIST(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000059834b225e4ffbe79f9d8bee5f962f09f40c28b0c049273cbe0547f4e371333db0ee4afe986e2b9adc16c0c3448fb66ddf5883b13b7b53029beb2f5304f3bcd442b6a6d625228ff0c357ae767d9b6003f805a20ddaa66161626c86330e6b9b7c978bc076e45faee1886340281ab9a2275ca9e66f14da0743135301e6cafbb3f194b488a1bba644fa5df0e460cb95a813a25b75edd64534acf103fc693e6beeea60bd000de5b", @ANYRES16=r4, @ANYBLOB="0100a6bd7000fddbdf2505000000"], 0x14}, 0x1, 0x0, 0x0, 0x20000080}, 0x20000800) r5 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000200)='/proc/kcore\x00', 0x28000, 0x0) pread64$auto(r5, 0x0, 0x840003, 0x40000000002e72) (async) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000100), 0xffffffffffffffff) r8 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), r3) sendmsg$auto_NL80211_CMD_GET_MPP(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0xa8, r8, 0x0, 0x70bd2a, 0x25dfdbfc, {}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'ip_vti0\x00'}, @NL80211_ATTR_MPATH_NEXT_HOP={0x77, 0x1a, "1b5dc7d0255614d8b0663a08a68318e40f0a29beda7a665ba96e84635e94eb517e4dfb0ebeef3ac2f6708f525e90d19b786155d83c94b4a2c93adc04b91ba5eea8606255f87a4c89dbdeecc8fb374ece54a54da4274dc419fea7d3c60b720737c38904f607a1894a481b40adcc1b66981df517"}, @NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x3b}]}, 0xa8}, 0x1, 0x0, 0x0, 0x40800}, 0x20040040) (async) sendmsg$auto_OVS_FLOW_CMD_NEW(r6, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000140)={0x1c, r7, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@OVS_FLOW_ATTR_PROBE={0x4}, @OVS_FLOW_ATTR_PROBE={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x40) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) 59.39345177s ago: executing program 6 (id=1443): bind$auto(0xffffffffffffffff, 0x0, 0x6a) write$auto(0x3, 0x0, 0x1) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) r0 = socket(0x2, 0x1, 0x106) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000140), r1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="2f212cbd7010ca705d845526cc0008000380", @ANYRES32=r3], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x8810) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x8810) syz_genetlink_get_family_id$auto_wireguard(&(0x7f0000001140), 0xffffffffffffffff) bind$auto(r0, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x37, 0x1, 0xeb4, 0xfffffffffffffffa, 0x8000) close_range$auto(0xffffffffffffffff, 0x8, 0x0) r5 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/midiC2D0\x00', 0x723642, 0x0) openat$auto_nvram_misc_fops_nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$auto(r4, 0x0, 0x2100) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x53) write$auto(0x3, 0x0, 0xfffffdef) recvmmsg$auto(0x3, 0x0, 0x10000, 0x503, 0x0) madvise$auto_MADV_GUARD_INSTALL(0x0, 0x2021000, 0x66) mmap$auto(0x0, 0x4007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) syz_clone(0x20880400, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$auto_SO_RCVTIMEO_OLD(r5, 0xd9, 0x14, &(0x7f0000000180)='^\x00', 0x8001) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) socket(0xa, 0x3, 0x3a) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sg0\x00', 0x180483, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 58.957632208s ago: executing program 6 (id=1446): socket(0x2, 0x1, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/pci0000:00/pci_bus/0000:00/rescan\x00', 0xc2801, 0x0) mknod$auto(0x0, 0x1001, 0x208) bpf$auto(0x8000000, &(0x7f0000000780)=@bpf_attr_11={0x7, 0x2, 0x3, 0x6, 0x6, 0x25, 0x6}, 0x3) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20008, 0xdf, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4004810}, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x28, 0x2, 0x1) socket(0x10, 0x3, 0x6) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/afs/sysname\x00', 0xaa102, 0x0) read$auto(r1, &(0x7f0000000040)='\x14\xff\x13\xbd\xffX)\xca\x03', 0x1fe) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x40000) socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) io_uring_setup$auto(0x401, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x5) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) mbind$auto(0x2000, 0x2091d2, 0x4, 0x0, 0x6, 0x2) r2 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/smaps_rollup\x00', 0x40000, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) read$auto_proc_pid_maps_operations_internal(r2, &(0x7f00000020c0)=""/4093, 0xffd) write$auto(r0, &(0x7f0000000200)='7\x00\xe6\xeaA\r\nW\xa6&\xff\xff\f\x00\x00\x00\xff\x00\x00\x00\x00\x00\x1f\xde\x00\x00\x00\x00\x00\x00\x00', 0x9) connect$auto(0x3, &(0x7f00000000c0)=@ax25={0x3, @null, 0x4}, 0x80000001) 57.109622759s ago: executing program 6 (id=1451): openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x57ac00, 0x0) syz_open_procfs$namespace(0x0, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/power/resume\x00', 0x189002, 0x0) r0 = openat$auto_safesetid_gid_file_fops_securityfs(0xffffffffffffff9c, &(0x7f00000000c0), 0x141000, 0x0) mmap$auto(0x0, 0x1, 0x5, 0x9b72, 0x2, 0x8000) r1 = socketpair$auto(0x1, 0xffffffff, 0x9, 0x0) read$auto_sco_debugfs_fops_(r1, 0x0, 0x0) r2 = ioctl$auto_TUNDETACHFILTER(r1, 0x401054d6, &(0x7f0000000300)={0xb1, &(0x7f00000002c0)={0x219a, 0x2, 0x3, @inferred=r0}}) close_range$auto(0x2, 0x8, 0x0) r3 = socket(0x2a, 0x2, 0x1) connect$auto(r3, &(0x7f00000000c0)=@qipcrtr={0x2a, 0x3, 0xfffffffe}, 0x52) r4 = openat$auto_qrtr_tun_ops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0x10002}, 0x1) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/system/memory/memory12/power/control\x00', 0x100, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x8ea182, 0x0) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, r6, 0x80000001) r8 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000140), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r8) ioctl$auto_KVM_CREATE_VM(r7, 0x4040aea0, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x0, 0x0) read$auto_sc_seq_fops_netdebug(r2, &(0x7f0000000340)=""/158, 0x9e) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$auto(r4, 0x4048aec9, r5) 56.677973004s ago: executing program 6 (id=1452): openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189002, 0x0) (async, rerun: 32) mmap$auto(0x0, 0x101, 0x4000000000df, 0xeb1, 0x200000401, 0x12000000000c004) (async, rerun: 32) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sda\x00', 0x443001f86cb35905, 0x0) (async, rerun: 64) mmap$auto(0x0, 0x2020009, 0x3, 0xeb2, 0xfffffffffffffffb, 0x8000) (rerun: 64) set_mempolicy$auto(0x3, &(0x7f0000000000)=0x7, 0x9) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = io_uring_setup$auto(0x401, 0x0) (async, rerun: 32) bpf$auto_BPF_PROG_LOAD(0x5, &(0x7f0000000080)=@enable_stats={0x7}, 0x6) (rerun: 32) mprotect$auto(0x1ffffffff000, 0x100018, 0x4) get_mempolicy$auto(0x0, &(0x7f0000000bc0)=0x74ef, 0x54d7, 0x1, 0x4) mlockall$auto(0x7) (async) r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/vm/compact_memory\x00', 0x80801, 0x0) write$auto_proc_sys_file_operations_proc_sysctl(r1, 0x0, 0x0) (async) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000140), 0xe0180, 0x0) ioctl$auto_KVM_GET_DEVICE_ATTR(r2, 0x4018aee2, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_fragmentation_threshold_ops_(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/ieee80211/phy2/fragmentation_threshold\x00', 0x40100, 0x0) (async) sendmsg$auto_WG_CMD_SET_DEVICE(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x58, 0x0, 0x2, 0x70bd2b, 0x25dfdbfb, {}, [@WGDEVICE_A_PRIVATE_KEY={0x43, 0x3, "d6ebc62c18139197a59f6cbfc0341e35e8fb561f78807717592ee2411b22f74e6917800c22c61a062d61b045787a7524252b4b919e9d2b11510dfbfe750536"}]}, 0x58}, 0x1, 0x0, 0x0, 0x80}, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) close_range$auto(0x2, 0x8, 0x0) (async) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) (async) socket(0xa, 0x801, 0x84) (async, rerun: 32) socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty17\x00', 0x1, 0x0) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) openat$auto_usbfs_devices_fops_usb(0xffffffffffffff9c, &(0x7f0000000180), 0x400, 0x0) (async) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000280)='/proc/asound/modules\x00', 0x88400, 0x0) (async) io_uring_setup$auto(0xc, 0x0) (async, rerun: 32) pipe2$auto(0x0, 0x80) (rerun: 32) 55.384832248s ago: executing program 6 (id=1455): close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtdblock0\x00', 0x0, 0x0) r1 = socket(0x2, 0x1, 0x106) setsockopt$auto_SO_BROADCAST(r0, 0x7fff, 0x6, &(0x7f0000000200)='\x00', 0x5) bind$auto(r1, &(0x7f0000000040)=@in={0x2, 0x3, @broadcast}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ram5\x00', 0x14fa02, 0x0) sendfile$auto(0x3, r2, 0x0, 0x400000000006) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x20006, 0x4000000000df, 0xeb1, 0xffffffffffffffff, 0x8000) getsockopt$auto(0xffffffffffffffff, 0x29, 0x35, 0x0, 0x0) writev$auto(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x7114}, 0x8) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) dup3$auto(r0, 0xffffffffffffffff, 0x5) read$auto(0x3, 0x0, 0x80) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$auto(0x3, 0x5411, 0x38) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)={0x28, 0x0, 0xd0d58b333228212f, 0x70bdac, 0x25dfdbfb, {}, [@NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0xffff0001}, @NL80211_ATTR_FILS_ERP_USERNAME={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x44191}, 0x801) 54.244745842s ago: executing program 6 (id=1457): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000380)='/sys/devices/virtual/mtd/mtd0/corrected_bits\x00', 0x123100, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000000180)=""/253, 0xfd) r2 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0x24, r2, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@NFSD_A_SERVER_THREADS={0x8, 0x1, 0x7}, @NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0x85}]}, 0x24}, 0x1, 0x0, 0x0, 0x20008000}, 0xc840) 49.021237334s ago: executing program 7 (id=1472): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x8a001, 0x0) write$auto(r0, 0x0, 0x1) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mmap$auto(0x0, 0x20009, 0x2000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) fcntl$auto(r1, 0x7, 0x3) fcntl$auto(0x8000000000000001, 0x26, 0x8) close_range$auto(0x0, 0xfffffffffffff000, 0x0) madvise$auto(0x0, 0x2003f2, 0x15) madvise$auto(0x0, 0x200007, 0x19) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) shmget$auto(0xffffffffffffffff, 0xb0d, 0xa7db6ba) listmount$auto(&(0x7f0000000100)={0xa0000024, @inferred, 0x2, 0xfffffffffffffffb}, 0x0, 0x7, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000001cc0)='/dev/amidi2\x00', 0x2, 0x0) ioctl$auto_SNDRV_RAWMIDI_IOCTL_DROP(r2, 0x40045730, 0x0) 48.763309251s ago: executing program 7 (id=1473): close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtdblock0\x00', 0x0, 0x0) r1 = socket(0x2, 0x1, 0x106) setsockopt$auto_SO_BROADCAST(r0, 0x7fff, 0x6, &(0x7f0000000200)='\x00', 0x5) bind$auto(r1, &(0x7f0000000040)=@in={0x2, 0x3, @broadcast}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ram5\x00', 0x14fa02, 0x0) sendfile$auto(0x3, r2, 0x0, 0x400000000006) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) r3 = openat$auto_evm_key_ops_evm_secfs(0xffffffffffffff9c, &(0x7f00000001c0), 0x8342, 0x0) getsockopt$auto(0xffffffffffffffff, 0x29, 0x35, 0x0, 0x0) writev$auto(r3, &(0x7f0000000100)={0x0, 0x7114}, 0x8) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) dup3$auto(r0, r3, 0x5) read$auto(0x3, 0x0, 0x80) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$auto(0x3, 0x5411, 0x38) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)={0x28, 0x0, 0xd0d58b333228212f, 0x70bdac, 0x25dfdbfb, {}, [@NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0xffff0001}, @NL80211_ATTR_FILS_ERP_USERNAME={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x44191}, 0x801) 48.058802371s ago: executing program 7 (id=1474): r0 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000500)='/dev/ptyb6\x00', 0x800, 0x0) ioctl$auto_TIOCGSID(r0, 0x5429, 0x0) (async, rerun: 32) r1 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x14b402, 0x0) (rerun: 32) read$auto(r1, &(0x7f0000000240)='/proc/scsi/sg\x00\x00\x00\x00ices\x00\r\xe2\xc9\x04\x986\xbc\xb0FI\xb9-E\xe3\x87j\xdes1\xa7\xdf\xc4\b\xb3\xeelc\x7f\xfdg\x18*\a:_\xb0\x92\xacwH\x9c\x9dF\xb1\xc47\x85\xc7\x13\xe1\x19UR\x96\xd8\x86\xd3\xe4\xa9R\x1c\xeb\xc8\xe5X\xfcR\xc7\vdU\x8b\xaa^\xfd\x83#\xc1o\x04\xeca\xbf\x8bYz\xd9\r\xcbk\xfd\x9e\x97\xcbOf\x80', 0xffffffff) (async) r2 = socket(0x1a, 0x3, 0x6) r3 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000000), 0xffffffffffffffff) setitimer$auto(0x2, &(0x7f0000000040)={{0x0, 0x5}, {0x0, 0x8}}, 0x0) (async) setitimer$auto_ITIMER_PROF(0x2, 0x0, 0x0) (async) r4 = socket(0x2, 0x5, 0x0) (async, rerun: 32) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async, rerun: 32) connect$auto(0x3, &(0x7f0000000180)=@in={0x2, 0x0, @rand_addr=0x64010102}, 0x54) connect$auto(0x3, &(0x7f00000000c0)=@in={0x2, 0x4e20, @rand_addr=0x64010102}, 0x55) (async) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x67e) (async) sendmmsg$auto(r4, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x1fff8}, 0x7, 0x0, 0x2, 0xb}, 0xfff}, 0x5, 0x311) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/net/ifb0/carrier_changes\x00', 0x129000, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r5, &(0x7f0000000140)=""/213, 0xd5) (async) mmap$auto(0x1, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) mmap$auto(0x4000000000000000, 0x400008, 0x6947, 0x9b72, 0x2, 0x8000) r6 = socket(0x15, 0x5, 0x0) getsockopt$auto(r6, 0x114, 0x271d, 0xfffffffffffffffc, 0x0) ioctl$auto_USBDEVFS_FORBID_SUSPEND(0xffffffffffffffff, 0x5521, 0x0) socket(0xa, 0x801, 0x84) (async) writev$auto(0xffffffffffffffff, 0x0, 0x61b3) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) (async) futex_waitv$auto(&(0x7f0000000300)={0x0, 0x4, 0x2}, 0x1, 0x0, &(0x7f0000000340)={0x225c17d03, 0x800006}, 0x0) (async) syz_genetlink_get_family_id$auto_macsec(0x0, 0xffffffffffffffff) (async) prctl$auto(0x59616d61, 0xdaffffffffffffff, 0x1, 0x4, 0xfffffffffffffffb) (async, rerun: 64) ptrace$auto(0x4206, 0x1, 0x0, 0x200005) (async, rerun: 64) sendmsg$auto_NETDEV_CMD_PAGE_POOL_GET(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB='w/%'], 0x14}, 0x1, 0x0, 0x0, 0x4048000}, 0x80) 47.03208967s ago: executing program 7 (id=1478): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0x15, 0x5, 0x0) socket(0x10, 0x2, 0x0) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) socketpair$auto(0x8, 0x8, 0x7, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) ioctl$auto_TCFLSH2(r0, 0x400455c8, 0x0) socketcall$auto_SYS_SOCKET(0x1, &(0x7f00000000c0)=0x53) socket(0x10, 0x1, 0x10002) mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = openat$auto_proc_mem_operations_base(0xffffffffffffff9c, &(0x7f0000001640)='/proc/self/mem\x00', 0x401, 0x0) mmap$auto(0xb, 0x2, 0x4000000000de, 0x40eb1, 0x401, 0x300000000000) pwritev$auto(r1, &(0x7f0000000140)={0x0, 0x400000000001}, 0x5, 0x7e, 0xd3b8) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x80000, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptyu8\x00', 0x8401, 0x0) r3 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000a40)='/proc/sys/kernel/usermodehelper/bset\x00', 0x8a802, 0x0) sendfile$auto(r3, r3, 0x0, 0x400000000006) ioctl$auto_TIOCSETD2(0xffffffffffffffff, 0x5423, 0x0) read$auto(r2, 0x0, 0x20) ioctl$auto_SIOCGIFHWADDR2(0xffffffffffffffff, 0x8927, &(0x7f0000000380)="c6311ea32ffbb512aa46d3e2a5835332dd304957d2ef83a32bdf8f305eff91261e69008bbd788886cb88b0107cb7ecf64fe1451ba4fa52d0be7e95b49045c5c486410176abbedd122508b214d8e32efda2e1f36d7924b03e7018bb6a6f2446f273d42f84e04a16284c03ed054cf3bd0e3fd55847c00e3cbaf209561328225161fda772d165a2c1ff0bedc0721c5a3feb7a4b1e62cd8a1316d079d8c925cf93538fb925162f52e3c6d0ecaaaf45f5808399eaa3968e93c557ee32af430db94206a53aeb90b7a2e8970713b3faa2f2980948ecc4f3b91d1225efa58e2fae6b5b2b5afedcc248c401a56ebb60cdcb21f62ef67a1bdd2e5572e54eb82bdf2641ec806b121bbe453d652089d5be30b0d0e8049d2841a51f8b26bde35c176143a12324186ddefc4295918e0917bb05baab429e747b27b88893c3492ea332540f8d1cb2fd9c2ef9102ede34373b0c6de555d0853ba9dca4d131d6869c0ed27a7e931620c4767f44236e7d1714d5fb61b25ddf59fd6567164126943397fae1db4b319cd180f7bd34f41f07b9d56f4f78e109468e631e8d2cc232f0d20673098a86dc774b5c42ebb7b33535491d360ba01670568553d2a9f8ab3131fa099562a68c663643abc6ff417d11675da7f9fdcad19b1693af4f4ea2d3bc26fcf4b619e5ff249d54f65c5c9aae9131e6c0ff6a3922edaa044a5da8dc44f224dc8df1c164196bec7a3e1f64a54fcbda309da05fcef864eba398783961178411e8da5ec119c724feb214bfae87d0be744a8c7d28343ce0af4b8e97a703106b4b40cfca3b262dfbb106edca4cc9019560ab1b4c8525bbc5c7d3cc02a6afdcafd43b6c03afee36606997b65a4d0ca0864380cd70f077fdd2c6f4510dcd5134a712a9f7a3055a604384fec3fdf1248fc9ac5fbc480a5d923828ebb2c612622e46efc6386b23e0bea7cecccf649438ea9f4515dab987e26db5da192d50b065db6473a661d9a17ac45c62ca5a82568943c1597dfef69bae994a757618040dc04fbacb5a67fd0c26ec23fc133a2220b44495bc32eab52935403f10179f14bf2a25c1a8026099c98f08b6403abe7074d82e28b8f4c838a107599aee8664e2b6f3391522c8624de46d883b6b90de8408f003ff1b18fc8e58630b5f2e479ed8b368a5e2e363ef1aacd7a0980b0a496a59efc71210b9fb309807472429a88108a87b1e747aaf64472bab66a84632e5e8c1eced42d05d102b345fbe1f6407c0f7006c98c64427dde5d2341921f6df622f0910e6c5351bc0b3a9bf06a3e2f879eab679b75212da02ee9d19ebafea2588e1c023910d7a260144d809358e2d0a76ac096569c026e123ad33067584d59e8fac94d4d4587c887b5d3a53d8a3b65f30c19898b0d7f4f177dfd1e7df351bf66dd63801df5774a1c9b676ee3033b15f32c74ee2e73468c2a5f33fb012b78b6d5a8bcc735f5a0bc5386b39df005f3b930c67681f096023c28a2ade2e6d90dd9a4c64233304a073cac26018b5089fce1bdf2c26dcad29fc10cf15745887a8b324a4fa7261fad6c9a4635a54cec44a9d5567f2479ee1ecee9eabbd94b272349e68c7e6aef846f9a4184fc3162410514bdeab1f49d870ff2baabbd245fb84bdd178c66f7fd02a0c11d0a405190e14c86c84760932197b310505e6fcd9d6bbb7aacfc2c5b4b70e18fd2e27881458dfb382b7282f919dd26549e72ab0330f699f26e365c3b9a9ecad41f352142430d83b7827ab5dfec87be602732b81b89b965ca2795c21e627615c36b039813d64200821cebc80396747cf1dac0cec963496ff0080c4c6ff39822c4a427b2dd6ad65edd1b8bd0af0a7d7d3006d9fd9e6fd3c622a961563f1abe063dd21b926d97778e206f69e592473eed0fadac7cf8705d804b2083e00e16a71695ce6c6f84bb49798c0533963259722a2d8293e2dea5d8504855bc5dbca75c69ae1b6d64cc4ee4c61ba034a7ddae70d69c2076634309e5f7ce22962b40f4dd88b1727381335505bb205705079d724b30e7001eb51ddb9a71fd3b6efcff8fa2b8ceb01357f0321fbe4602cd86b41d32c89c7617553337a0025e668a0e91b7fdfa2c25a135f10f22fcda6e6db652f517030d41ed824493d52ce1adb56b56ee58eb002c327d541be3f79541b64129b9d797437399fd69b28130b2daaaf7ca4ca75c2f51ff1e5f6ccc3c309762dcd2b69faa80e6ef0ae334b313b8b606451dfc400545b7bcad92dbea1f3c15a58aefca183d55455008a0eb8ad93d974cdd75a03cb6272c3903ebdb7388a63e4d08de3c89fd92b01da06a85e6c22051bde05d784f12d681195770ceabcc09891c22efad4d5ea5c6ce1b47a317e29fb06676eb1de87803384687ee9383d2d98c1568990bc77d59ce63dac6cbdf90fd6a96bc3dad1fa7db2d35b3f1fa20444753aa8366ddae71a2a96beca3175559a4d2712866387ccd0a117258c7744cc4c049187e9c28b7e0b4d7d2c585a94af01466d555a365a5d81017824f2325d06be5391e488cfe91693b6e8bf00acfc76e94817e119caa9b677a25ec2b32e7adc96c255d9411a7730bea920d024f55f6ce9a66e3ae67718163b9b608314df0c87aa6237be621a5aaa02c787fd8375c41a436c1e7c3ed65efeba858ed73def2ec1cf6195f5063ea2d2e90f7eb0277354b6380b28abd0c665f5ea1ca72fb1b30e4b3ddbc226cfacaf57f29a07eb7b75494ce657ae") madvise$auto(0x77120745, 0x8, 0x17) prctl$auto(0xbb, 0x1, 0x0, 0x5, 0x7) madvise$auto(0xfe7, 0x9, 0x3) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r4 = open(0x0, 0x595002, 0x408) write$auto(r4, 0x0, 0xfffffdf1) 45.696184394s ago: executing program 7 (id=1480): mmap$auto(0x0, 0x4, 0xc00000072, 0x8b72, 0x1000000002, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0x13, 0x0) chdir$auto(&(0x7f0000000000)='}[,&*}\x00') open(&(0x7f0000000100)='.\x00', 0x0, 0x0) mremap$auto(0x0, 0xffffffffffffffff, 0x3fda, 0x3, 0x7fffffffb000) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x10, 0x2, 0x0) statmount$auto(0x0, &(0x7f0000000380)={0x8, 0x0, 0x1ff, 0x7, 0x3f, 0x1000004909b6f8, 0x1ffe0, 0x7, 0x3, 0x2, 0xd, 0x3, 0x6, 0x4, 0x8b4, 0x9, 0x6, 0x10003, 0x7, 0x4, 0x0, 0x7, 0x2000, 0x200, 0x0, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd]}, 0x8, 0xd) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000226bd7000fedbdf25030000000800030004020000060007000080000008000200", @ANYRES32=0x0, @ANYBLOB="0a00050000000000000000000a00010000000000000000000a0001000000000000000000060007000100000008000200", @ANYRES32=0x0, @ANYBLOB="0c001a"], 0x68}, 0x1, 0x0, 0x0, 0x4044080}, 0x40090) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) write$auto(r0, &(0x7f0000001380)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xfc\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\r&\xec\xb8\xb1Z\\\xc9L\xb2\t\xddbH|\xffGP\x97)\xb9:nqn\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc$\xa0\xa5\xce\xca\xe1P\xf7\xe5_\xca\xd5\xd8\xa4g_\xb1\x88\x8cAJS\x11\x8b\xd1%a\xe5DPk\x8c\xf9\xfb\xe0+\xdb\x12\x10.F\x00\xc37\xc7\xbf\x80\xbeu\xe1V\xb2\xc5\xc9\x1a\xc7\xdc}!\x10\xb1\",1%\x0e\xeb\x15\x15me\xe1a\x03\x18{\xb03+\x93*vB\xc6\xf1\xc6\xff\xbbt\x04!\xb6\v\xde2\xc9\x89#\xbaR\xee\x13jF%\xf2\x15\x9a\x82&\x89o\xa9\xd9\xbfFY\x90\x8c\xa0\xe4\x9d\xa2\xcd\x9a\xb5TC\xc4\x9d\x9ePb]\xaa\xc7f\x06N\xc5\xfa{\x02Y\xae\xf4(\xaa\x06);{?\x1e\fu\x19b\xdf$,\x01\"\x94\x00\x00\x00\x00\x003\xcfZ\xaf~<\xba\xb7\xa03\x8c\n*krS\x19Q#\x8f\xfbW\xad\xe0\xb3o\xcb\xf7\xda\x87C\x99\x1a\xa8\xc1\xe3\xc6%\xac\x01@*\xa0\xc4\xedn-lT\xe6*?\'\x9dW=\xa7\x03\x06\x83 IT\xa3\x7ff\xb6\x95\xe5\xd2\n\xaf\x87`\xce%\xf6 &\xa7M5I\x9c\x17h\x8c\xa4\x98\x16\xe0\xd9?Y\x7f\xf6\x85_{\xfd9p$B9_\xd8\xf4\x0e\xd0\xfa\xe7\xb0\xb8\xa0\xd7\a\xff.\"\x81\b\xb0\xb4\x84\xac\xad\x1b\x93~_\xea\xfe7\x03\"\xd9\x1d.\xe5{bHX\x14\xa1\bO\x03[^\x85jP\x89\t\x06GI\xb7\x99\xb2zZf\xc8\xd4\x8d\x1c\x1e\x03\xb9\xa7Nt\xae\xfff\xf9\tx\xae\xa8\x05\xb14\xc6\x9b\x1f\xd3\x01#\xc6\nb\xd4\xb4\xc8?\xa7\xe2R\xc1\xcf\xd2\xbc\xae\xd1\xc2\x88\"\xf3\xf0\xc0uQy\xec\xfab\xd6\xcd\x16)\x19*E\vm\x8d\x1bG:\x80\'pJ', 0x4100000a3d7) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/card1/pcm0p/sub7/info\x00', 0x8040, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x2003f2, 0x15) madvise$auto(0x0, 0x200007, 0x19) pread64$auto(r0, 0x0, 0x300000002, 0x100000001) mmap$auto(0x0, 0x202000a, 0x5, 0xeb1, 0xfffffffffffffffa, 0x8000) io_setup$auto(0x1, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) preadv2$auto(r1, &(0x7f0000000280)={0x0, 0x80000000}, 0x6, 0x3, 0x4, 0x2e) socket$nl_generic(0x10, 0x3, 0x10) 44.159660395s ago: executing program 7 (id=1485): r0 = openat$auto_random_fops_random(0xffffffffffffff9c, &(0x7f0000000000), 0x880, 0x0) read$auto_random_fops_random(r0, &(0x7f0000000040)=""/127, 0x7f) sendfile$auto(r0, r0, &(0x7f00000000c0)=0x6, 0x8c5b) getrandom$auto(&(0x7f0000000100)='/dev/random\x00', 0x3, 0x0) msync$auto(0x8000, 0x8, 0x5) r1 = openat2$auto(r0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x5, 0xff, 0x5}, 0x3) ioctl$auto_FITHAW(r1, 0xc0045878, 0x1a) writev$auto(0xffffffffffffffff, &(0x7f00000011c0)={&(0x7f00000001c0)="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"}, 0x2) r2 = prctl$auto_PR_SET_SECCOMP(0x16, 0x7fffffffffffffff, 0x8, 0x4, 0x4) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001200)='/sys/devices/virtual/net/ip6gre0/phys_port_id\x00', 0x80000, 0x0) write$auto(r3, &(0x7f0000001240)='^-\xdf\x00', 0x2) r4 = getpgrp(0xffffffffffffffff) r5 = openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000001280), 0x0, 0x0) dup3$auto(r5, r3, 0xc) ioctl$auto_VHOST_SET_VRING_CALL(0xffffffffffffffff, 0x4008af21, &(0x7f00000012c0)={0xfffffffd, r0}) r7 = memfd_create$auto(&(0x7f0000001300)='%\x00', 0x5) ioctl$auto_TUNSETVNETLE(r2, 0x400454dc, &(0x7f0000001340)=0x3) process_madvise$auto_MADV_PAGEOUT(r6, &(0x7f0000002380)={&(0x7f0000001380)="fdb69ac35db95993613c7375f536a15bc22d23892af7e055b9f8b785112d3bfbdb531a4b2c7062a08bd849e1dbec3089245d854c6395e49a7ccb113f7f96c3cd2624ff81dad1d6544ca9043730ee3ffef4212fe2eb90cf0883cccd6260467ca051be79692b64fed39a20dfc903abc0b23e03567e83a702ca76165e6d67a2fe42bc3fcf45c1666f0e0500f556d474e0f928d178c019cb1b1803a1c78c2e5769708ef0598749f801063d77ef4315b8f8fe3adb69fb7fca1837b8f869116002c9e5bc7108146e826b23a814401b90616d3697661e37c82b35abb48b481e2e0c0ddff3df88a61f0e49c808efbaf74617f1249fdf74589e199507610b56905b50128893b58e3f407f46bedf7e9035c4486933991e9e1b475fbbcdf2238e2a02d7560497aed730cd65cf4037b768008a01bd3f54a0addc505703cb0ed890af75050fdffa20a1f52a9c6bd3936fc2f6a739ae8b85b4d703ff7c7fd566233185e67471d3222a85a0a8a7a7dda83996ff02eebae60955ad12256e630e2f73dff598d97c6cbc3aaf5584034b2581b6ec5bbcbcce12828f3f946329726a5f96e9f1ceac06b182f4af2a2236391e2cfed5eed4b74a3d10a682b9e2710521ae5b51cff637c0f3219afa423e13fa95ef201e886048d3c09176f1e18008904a2b6976d3f52ae1b5475ec565ea90dd99c1d4d374b75884cdd03aca0a810f1ff55c4ced2a8267f659cfa912095ced8f603d92b347b6057374bb9337f8ad918b0eaa9719afe2e48394a19ba8be8b8b7af1ad35ed26cf4b1e4904bb2ebb381b3faa1a89ee44a834e0f4478998b7f959b8c3b017d12108e7459720d948672d6f35f6aea565ca5c2284ac41207834bc590fe011da9926bc88cf340045b3af9888fd61d65fbfa72d3de9953a24a0d983880fefe77954bbe2c963a1c9418612ea699ec7f093f66bf28089f43781111a663a7ebe1364cd19df0daafad3b2d79abaf13ebdebf960353451589bfb8a10ad1ee144a0418d25547ab7eafef778187ee941dd70ac4d8d852a5f8a90ff60bbb347f016964a21c04a47d5230a86bf1fde3006a8e03b896002cb20c913bd29c1130382155c6d4c9003e27b66313539a491d375254858a7a4134a80eb30e6c4a8a57a18b43422ebb2a910501a1bfabfd370eac0372e7df5541c33dc2a12288d624ec981e3479ad581355c9a5880d4bbe236d18e6119cf07a82c721b6fd84cae1889e7732d14743fdb2913c5561ecbdf3cbf9477260204a0049bfe128d66e3d876811467c934183e5f4aa9ea7c3e36e700f13187531dc87729cac1f1a85dc16a37b1af563c3137b2899da4a00b0fa90e841196e50fe4e144e9b38d51e1cc2558537f4262cfe6f781f96223ee3761f1a99c351b82f074142183be2ef723a639a6cd9d8135665f2798a84a42f9710c203ff41fdcba5b752c33138ef64d87a6fe36ea41156a25d5de107735b9165dd9b940e2a48409a3c4b8be1b873aa36f88cb2f7be3a5cd0a1468772f055c1e407ca6d7a529ad0b63e09e99bea8d3f2056179c025be01c75af80251690b74b8aafa4df398e35de87740948700039d52f42829e6c53f2461ee9eac824e5f32e6902b6c83a7c61a7382d8ab8deebd0d9759f7b9749ec74a0e69d337f2c7d3e71d5c91221293ae9c5412e3be0783087e89dfc4c7ce9ff94ae94b0435999932b10688c9370ad26421e44cebd79c7de6c0294d4d302143416aa5c620be7b6ba53b5c86e112d907eb083fc3a546b62927a00d847186928220bd2a71d8ee69dc65879199ede7c0b9b7061ffd56f21d049acbcbeea98d32595b595a786ed9f94cf39ca1485a58d5d1a433532711cf3e45ac8612b25963c9ed0086c9aae552dd13963f25a16600e4ad6525823eb661f6fd5a64e6ae40dd628aed19c3a1ad025ee3067ef7fc8b21989e56c5aaa796826353342b3dcb68230f069c667344e58c258be37f03842961ce7899b449a94745509699e01d1676ef142921dfcfa7a4c45e37ff0d28b254b68de48888813ce6c98c0efab01130841e85605c2f809bacb93f3cdfa3d70ab380aa057088ab021a0bddc60c4d21ded4785094bad84ff8c02ab2c690ac1647182c6de0d7b991a7cbc0c2166ab8c8c369b9885a1c52d174dce4a601d2111d4bba598683b3a811483a5017339d5630ef5b581f72680d435134097cbaa93bd7db97b81243f040683f5ab3c2acd9457d6d6db2ab541307023a1e92c9a1699bbe73a40200fe0882773dbe06d59b428e63cbdb0dcd822f9b8be2654f0a413f53d6f2cf80d28167a77438cde015edda54059dfac20bdab3c0eb8085a6fa990d4b891784a806b48ba60a38fda3a8acc686ee8b5058ddb21d66bf5e11be7556f2b7219abc4d953dd62c42b0453e83060af112892b14db4be64fe37a3f37329783b25a0c7d77b669be44a7c13034b943da329700349945e929d17749ae9c5a3cf8f2de4d4b581f17af2d5a27a44e1970d427060d018ccb342be52365dfbd8796fd881459e67b4c36f77064b532e368af805cf0e11388f880ce9cf3167dd3e949e5a3defa27652b84934d5a2f29d186627ad288240cb8fb54ad960788fdd51f68e836cb5f8047ba965d52cba881d5bcf041761f30fa368421bc33f44f2b27e23a23d32750b39bc784884f98e2d48253a50c0b41808001da2ddbc220e312c72c09897b9d5ff5d093b00d07e8fc50c4eca6201ffde27b4e95063a5450ef8adab73feceb28558c350642d7a0a576bf08bccfbad86661771fd882579aceefb2a421898401ee9eaac4b3311191f779fca28b67c3c07ec2308d7e53cf32898c4e55bf9dc2ddb7c0610312de9e727bbe8fff33f41c1608543d5f8141f67ed5ffeb0385187efcd95bc48e7153bdad220a2e6ccb82460fb899786bdca966780c116e722048525767a462bd8d6908799f0d225a9af5970782b37377fae55ce2461b5adb97170f9019a0517999d30e3e3ed249c0eb8a20b0fa341909a2d6e92ec6a78d27d68e025ec2d98a80ba38c9ce7b2f9f435b809054c382a9d20e3092cca1cdeb513dfce1e3e6d9389344ca6e43017a97d574064e07e90a12a125a6b71042068f19655642de93a2e47c4d9e89b2920ff65f76f9cd4fb6036259b736de63820ac5ca49fb2391cb35e149a03f2accd39cd0c891fbde8a9fe961b69e66f2fc117c20f73c99b24dd8026a36410af9da6a8730f6028523b06908193eb62f455dd08d7d055525ab3db0c5a2d29d576e392f1b3d6e09900a9186056fa0da57a3a028614260044e34a01c35112fd59aee0d393c4528b5fa7be9589b3ea7a7b63b80c34eaa7c9792e87554cd0b928ea913b70aea69734c6c3f169e1a2d1caec5b931a41d90d156e912350ae1b0663f99474ee3f98bf6d656ebf340d662820188d5bce4f802898c40246f4feae8d556a17decfbca9e72b4b7ce6908f39234e7f26075ccff4fb73d5c3d1a676952cc3882f882b9c3dc4b0aa7cd610f8dd8699d09d17e01be36d99a9acdf5a0699f2ade40857645578c186f550765114c37bb777c014ab0e563fdd11b767be994b9f466ac6edaf861410c9d5cb8b02f5350ff3d7c5e49caf461e736ee704b05f53d20818dd0ead3909539d510fe119f28e47b55f5f13c29e1bf5ff88e92f82f31ca22d2ebe89a1a2504cdc8c70fb2634cc38f82a5cc789a879204c578d833aaba9f50864529b63f534ddd70b4a9f0ca912d8cd48528e8b7f6edef8cca68197162a99e6f6b72db3bd2895c539df9cace834d8c0fa512535f526bab3e29ae5297a294efec0a0274ca06539c7f2447a622c262e3bab383c30855a6358ac348e80a596c2b08f6319e4816bf3b415e0c384f8072f4a322b0bf2946ebb3d90c068f3b990e93a167d84dada00191592aee9178493bad5a710c264431a8c9145039ee3e49df7c86e5bf03c548bad80420235f86fb36de9a1dbcb0e1877ba763df3b4c5214d09e9ec72ef158c054d8e1033e264f684ff45660f152f4995adf35f8a1c947817285bb80c1c4d9f9a9515ad61831e291e76889c4e8fa163a1c40667b14e8b5cd8304997c7f37ffca7e958ae929423bc3f95580cca2fa44bc58a3031cf259b66d63cae442be5704f565f77f965bee1fe00283f6130c9a3d7d338eab883d1500dfb22227feb34b90a47a21a6ba1206eed54a3ba6278ac6c27483ea2f679a9c732e54f08cce6b8dae71c9f2a1cad9e60237761af0c127d5bcd9e7162553931719ffe7b28dea7094b8b53dc109c50046669d1c0f1b7723bd46b02a8ed27d9a3d7c601e924ed85e08f1e2a45c81e3ba41e1d07ec76ee65b8c0215fff834413b8ac9d8c86f6193a07573bdd3864e30414ad92b7d6da76f4530b08f99ee72aef9de90ee932d34dbd737aa81b1ca343c5eb3167e3de901bdca72aa3df67b6dd15102c69b854d14f89ee05c5847b99d1f2c443c06cdc181f8c54a2b60b2b484fb352f3778e37ae350b7768bd9f62eb3012d91829be8b9c0d67fe739c4555d86128f8b1fe903d46fdfad26bf414bfb55ba3ba162c36f35c7f3764dd323a940997fedbcc08d25d180d0dec91a1051f49ed857642da1ba2975b5b723839c6155bc0ae34b48acd6e686639d63a846353bb31f1e629a668bf758a03dcfe623617bebb81897e9fa8d081a1eebedc4994da9b31a24bdffde43d946d29c665d97182f20c9cbc59b4dfc86bda084a4a2c150415641798a0b3ccc6b911153cabc5e70ad9355c07ce4e8be1fd480bdf3d1b121f31960407128cc9cee9e41021b69534bc61b6e2a9dfdf5fac3cec1c090ba6415fb9c9031d7fefd7a206bd1a88068d7ffaa99d86b7f580ca46b88afea1e0a803993b8c2228498876c3adbd4a3ac0fe5b92c2755cb7413f420a339829b58e1e315b0349e43711c07518d9857d9c360db82b2776aa3f16fe6c808b1472b751751b8342ac3c12880bae2a59d23cb228672b3541190320ed1916c9f6b340dbb19e893e0eb17f9022b4a2fccf992fedae1dbd4e0c3f1351e414d88b2f50bebce7461450736fdbf066c33353330a5e4ae6247837c104db698eb54cfd0a7b2604bd82689baf9faafcefc1167ed47e575417d8ad77695ea589389f2ee5a5502a60b7ff9207a72939b261a00f8da96f83d03a3fb40f370b39ebcd2465eeac6fd49f3fd0eafccaad5af0b6e7bbd69aa294ec2a5ba5c493cd71afbb0c66cdbb30c461c3d3c5d4edbdb2345aad6794cdbcee09aada46eab42b1a0b2722bb4a116b20c4d2dc1b0ee698508e1f350dd226004f44595d85e828186a0090da15466853738351ca8951fd1a3afdff73da74901779156d6c9063c2f5ff2f9a06434c6f6549956fc7da167563e22b4a9ba4a2c75ea1c467f6e4619f27aa219ec2f1e9faca6b9bd1c2cd72a9bff9297e1b08250a66b59bff11ea2de8623ba80949105b6040e6efebeb33c225568b1e439a67d45865ed5e4e7397b46c4dd45f87ad3f7ee51e5481d87b3c58b95b34cf3f915e946fa93d28c2fe0750c328a2a8421a70912f882e6019cf0a4f30e94709e9a1520a5bd6363a78b153dd096759a4a596a027a092ecef084f5fcb38bb66126377c32feed07d6037baee9f1a39c58072e69f54ecd98c1b14ccf97880c8222c87e0e1953e218cd75a07988cb5c942205d6ed14abe42194afa9abd3fb13b35e9f0688c1c0372eb7a10d1b522ff83d2307eb9ca82ff9eb959cd70f5dbefe51e38b800d9e109a9901a93cb5aac8bd21b335a8ca5d84ae1043fe2a941e7ab836ecbe203ebcb7f6856a1a999fde4f953ef0017ea9b93497d2e17111a952cca2484c3a3a7737", 0x1}, 0xfff, 0x15, 0x4) landlock_add_rule$auto(r5, 0x3, &(0x7f00000023c0)="93897ccad18e4081c8df52e66147ee74e8ab09f29196b856db39b7dd304849206db440c42c5cf26ae6c8571daf3bce14cf37ca4644975cc15849607e6f4b7a5c6c919de349ea1825d68701941256fc9c295b843ec3720726438c47", 0x7ff) r8 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000002480), r6) msgctl$auto(0x3, 0x40, &(0x7f0000002540)={{0xd, 0x0, 0xee00, 0x7, 0x9, 0x9, 0x400}, &(0x7f00000024c0)=0x6, &(0x7f0000002500), 0x5, 0xba9, 0x7fff, 0x3, 0x1, 0x3, 0xffff, 0x8b, @raw=0xffffffff, @inferred=r4}) sendmsg$auto_NL80211_CMD_START_NAN(r1, &(0x7f0000002780)={&(0x7f0000002440), 0xc, &(0x7f0000002740)={&(0x7f00000025c0)={0x158, r8, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [@NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5, 0xe4, 0x9}, @NL80211_ATTR_DISABLE_EHT={0x4}, @NL80211_ATTR_FILS_NONCES={0xb8, 0xf3, "c2a6e72e6beca3134ec602a78685ecbe88a255d9d68917a001593ff96075a442ee2ebb86c22fbfb0f2441de83e25f3baab2928b73b17e6822b9541ec9e6f3d2ef773252d7313d95e8cd53c1f3dc0d1bad396da995d13950ce200d7cca061494c973a0ddc56d1852e880e62b33fc3d26f4aaba5536590536fcfc3722628bd0cdf4826dceefc8543c21cf2a8660270af6c272c0296744a5a94140f3ebe6b54afa92fa89cf7fe40e70144ead74300026cd11bd32042"}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x7fffffff}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0x59, 0xe8, "5080d19dad48d90a2f82b744b4d397e1c120dca83c56f9fc830e5feda323683066b980c73454e68a9871517ca381c6a3c65c0cca6322b137d3b3b61dbf8ad112d8cec72192678265d08891cd8f1c88a8f4b8ffa771"}, @NL80211_ATTR_HW_TIMESTAMP_ENABLED={0x4}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xff}, @NL80211_ATTR_STA_FLAGS={0xc, 0x11, 0x0, 0x1, [@typed={0x8, 0x121, 0x0, 0x0, @uid=r9}]}]}, 0x158}, 0x1, 0x0, 0x0, 0x20004000}, 0x4801) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000027c0)={'wg2\x00', 0x0}) bpf$auto_BPF_PROG_QUERY(0x10, &(0x7f0000002800)=@bpf_attr_3={0x4, 0x9, 0x2, 0x1ae, 0x1, 0xb7e, 0xffffffff, 0xc4f9, 0x7, "23365ed5e10a716087775f5fb1d9bed9", r10, 0x80000000, r7, 0x5, 0x2, 0xfffffffa, 0x7f, 0x6, 0x9, 0xff80, @attach_prog_fd=r6, 0x8, 0x0, 0xfc, 0xffff, 0x5, r0, r5}, 0x7ff) madvise$auto(0x0, 0x6, 0x400) process_madvise$auto_MADV_RANDOM(r2, &(0x7f0000002980)={&(0x7f00000028c0)="57dc6a05cb2a67d8c151732dcab8da97372c6a5dcf809f0a8fec75c09f6d3a47d49316f62d71db9b8422b33f300bacf25e1f06d78a64ec07450cfa61ab3f076afefc187b55edddad9d3c423b541f6f78323a4606d131f00b28088e0f71ef3b10b76e28cdf17987dea77eb7ba3992a7e116f58d92713c60f9cbcf966241fed07b4b48aa262d8722bff9828cade9f7f62b3815a6dc823e7390170ecdf5221afe212389124ffc97df144959d8eb5acca77f3abe", 0x5}, 0x3, 0x1, 0xbf4b) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000002a00)={'veth0_to_bridge\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r11, &(0x7f0000002b00)={&(0x7f00000029c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000002ac0)={&(0x7f0000002a40)={0x54, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x20004014}, 0x24000000) listmount$auto(&(0x7f0000002b40)={0x3, @raw=0x9, 0x5, 0x100}, &(0x7f0000002b80)=0xd3, 0x0, 0x3) 39.244681923s ago: executing program 36 (id=1457): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000380)='/sys/devices/virtual/mtd/mtd0/corrected_bits\x00', 0x123100, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000000180)=""/253, 0xfd) r2 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0x24, r2, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@NFSD_A_SERVER_THREADS={0x8, 0x1, 0x7}, @NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0x85}]}, 0x24}, 0x1, 0x0, 0x0, 0x20008000}, 0xc840) 28.811001868s ago: executing program 37 (id=1485): r0 = openat$auto_random_fops_random(0xffffffffffffff9c, &(0x7f0000000000), 0x880, 0x0) read$auto_random_fops_random(r0, &(0x7f0000000040)=""/127, 0x7f) sendfile$auto(r0, r0, &(0x7f00000000c0)=0x6, 0x8c5b) getrandom$auto(&(0x7f0000000100)='/dev/random\x00', 0x3, 0x0) msync$auto(0x8000, 0x8, 0x5) r1 = openat2$auto(r0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x5, 0xff, 0x5}, 0x3) ioctl$auto_FITHAW(r1, 0xc0045878, 0x1a) writev$auto(0xffffffffffffffff, &(0x7f00000011c0)={&(0x7f00000001c0)="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"}, 0x2) r2 = prctl$auto_PR_SET_SECCOMP(0x16, 0x7fffffffffffffff, 0x8, 0x4, 0x4) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001200)='/sys/devices/virtual/net/ip6gre0/phys_port_id\x00', 0x80000, 0x0) write$auto(r3, &(0x7f0000001240)='^-\xdf\x00', 0x2) r4 = getpgrp(0xffffffffffffffff) r5 = openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000001280), 0x0, 0x0) dup3$auto(r5, r3, 0xc) ioctl$auto_VHOST_SET_VRING_CALL(0xffffffffffffffff, 0x4008af21, &(0x7f00000012c0)={0xfffffffd, r0}) r7 = memfd_create$auto(&(0x7f0000001300)='%\x00', 0x5) ioctl$auto_TUNSETVNETLE(r2, 0x400454dc, &(0x7f0000001340)=0x3) process_madvise$auto_MADV_PAGEOUT(r6, &(0x7f0000002380)={&(0x7f0000001380)="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", 0x1}, 0xfff, 0x15, 0x4) landlock_add_rule$auto(r5, 0x3, &(0x7f00000023c0)="93897ccad18e4081c8df52e66147ee74e8ab09f29196b856db39b7dd304849206db440c42c5cf26ae6c8571daf3bce14cf37ca4644975cc15849607e6f4b7a5c6c919de349ea1825d68701941256fc9c295b843ec3720726438c47", 0x7ff) r8 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000002480), r6) msgctl$auto(0x3, 0x40, &(0x7f0000002540)={{0xd, 0x0, 0xee00, 0x7, 0x9, 0x9, 0x400}, &(0x7f00000024c0)=0x6, &(0x7f0000002500), 0x5, 0xba9, 0x7fff, 0x3, 0x1, 0x3, 0xffff, 0x8b, @raw=0xffffffff, @inferred=r4}) sendmsg$auto_NL80211_CMD_START_NAN(r1, &(0x7f0000002780)={&(0x7f0000002440), 0xc, &(0x7f0000002740)={&(0x7f00000025c0)={0x158, r8, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [@NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5, 0xe4, 0x9}, @NL80211_ATTR_DISABLE_EHT={0x4}, @NL80211_ATTR_FILS_NONCES={0xb8, 0xf3, "c2a6e72e6beca3134ec602a78685ecbe88a255d9d68917a001593ff96075a442ee2ebb86c22fbfb0f2441de83e25f3baab2928b73b17e6822b9541ec9e6f3d2ef773252d7313d95e8cd53c1f3dc0d1bad396da995d13950ce200d7cca061494c973a0ddc56d1852e880e62b33fc3d26f4aaba5536590536fcfc3722628bd0cdf4826dceefc8543c21cf2a8660270af6c272c0296744a5a94140f3ebe6b54afa92fa89cf7fe40e70144ead74300026cd11bd32042"}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x7fffffff}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0x59, 0xe8, "5080d19dad48d90a2f82b744b4d397e1c120dca83c56f9fc830e5feda323683066b980c73454e68a9871517ca381c6a3c65c0cca6322b137d3b3b61dbf8ad112d8cec72192678265d08891cd8f1c88a8f4b8ffa771"}, @NL80211_ATTR_HW_TIMESTAMP_ENABLED={0x4}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xff}, @NL80211_ATTR_STA_FLAGS={0xc, 0x11, 0x0, 0x1, [@typed={0x8, 0x121, 0x0, 0x0, @uid=r9}]}]}, 0x158}, 0x1, 0x0, 0x0, 0x20004000}, 0x4801) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000027c0)={'wg2\x00', 0x0}) bpf$auto_BPF_PROG_QUERY(0x10, &(0x7f0000002800)=@bpf_attr_3={0x4, 0x9, 0x2, 0x1ae, 0x1, 0xb7e, 0xffffffff, 0xc4f9, 0x7, "23365ed5e10a716087775f5fb1d9bed9", r10, 0x80000000, r7, 0x5, 0x2, 0xfffffffa, 0x7f, 0x6, 0x9, 0xff80, @attach_prog_fd=r6, 0x8, 0x0, 0xfc, 0xffff, 0x5, r0, r5}, 0x7ff) madvise$auto(0x0, 0x6, 0x400) process_madvise$auto_MADV_RANDOM(r2, &(0x7f0000002980)={&(0x7f00000028c0)="57dc6a05cb2a67d8c151732dcab8da97372c6a5dcf809f0a8fec75c09f6d3a47d49316f62d71db9b8422b33f300bacf25e1f06d78a64ec07450cfa61ab3f076afefc187b55edddad9d3c423b541f6f78323a4606d131f00b28088e0f71ef3b10b76e28cdf17987dea77eb7ba3992a7e116f58d92713c60f9cbcf966241fed07b4b48aa262d8722bff9828cade9f7f62b3815a6dc823e7390170ecdf5221afe212389124ffc97df144959d8eb5acca77f3abe", 0x5}, 0x3, 0x1, 0xbf4b) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000002a00)={'veth0_to_bridge\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r11, &(0x7f0000002b00)={&(0x7f00000029c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000002ac0)={&(0x7f0000002a40)={0x54, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x20004014}, 0x24000000) listmount$auto(&(0x7f0000002b40)={0x3, @raw=0x9, 0x5, 0x100}, &(0x7f0000002b80)=0xd3, 0x0, 0x3) 12.097520338s ago: executing program 9 (id=1516): openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) getpgid(r0) mknod$auto(&(0x7f0000000b00)='X))\x00', 0x83c1, 0x4400) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x20000000}, 0x890) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x20000820}, 0x40000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) close_range$auto(0x0, 0xffffeffe, 0x2) fanotify_init$auto(0x602, 0x1) pipe$auto(0x0) unshare$auto(0x40000080) setsockopt$auto(0x3, 0x10000000084, 0x7b, 0x0, 0xd) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x4, &(0x7f00000002c0)={0x0, 0xffeb}, 0x1, 0x0, 0x5, 0x7}, 0x8}, 0xffffffff, 0xb00) syz_genetlink_get_family_id$auto_net_shaper(0x0, 0xffffffffffffffff) close_range$auto(0x2, 0xffffffffffffffff, 0x0) creat$auto(&(0x7f0000000040)='X))\x00', 0x5) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) futex$auto(0x0, 0xa, 0x1, 0x0, 0x0, 0xfffffffa) mremap$auto(0x1ff000, 0x8, 0x843, 0x3, 0xfffff000) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) mmap$auto(0xffffffffffff87b7, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) 10.421027882s ago: executing program 9 (id=1560): r0 = openat$auto_event_inject_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/events/vmalloc/alloc_vmap_area/inject\x00', 0x1a000, 0x0) close_range$auto(r0, 0xffffffffffffffff, 0xfffffffd) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r1 = io_uring_setup$auto(0x59, 0x0) r2 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/snd/controlC2\x00', 0x8100, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r2, 0xc0045516, 0x0) r3 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC2\x00', 0x480, 0x0) mkdir$auto(&(0x7f00000000c0)='}[,&*}\x00', 0x2) mount$auto(0x0, &(0x7f0000000540)='}[,&*}\x00', &(0x7f0000000040)='nfsd\x00', 0x3, 0x0) mount$auto(0x0, &(0x7f0000000140)='}[,&*}\x00', 0x0, 0x1fe, 0x0) mmap$auto(0x7, 0x2, 0xa, 0x80000010, r3, 0x101) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r3, 0xc1105517, &(0x7f0000000580)={{@raw=0x7fffffff, 0xf0ee, 0x20009, 0x3, "790eaa00ffff8eac2cdafc1f64010043eeb0b053030001ffff000e000000000100", @raw=0x3}, 0x4, 0x966, 0x3, @raw=0x404, @integer={0xab1a, 0xffff, 0x3}, "6cc1294d63a4f1b4285854c5368de438f8cc142ef6df12bf3373a1183bedbd31b642b4051b078fa1c1c61c329794e5311121c760cb9611c78e6947a99807bcc1"}) r4 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/controlC2\x00', 0x480, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_TLV_WRITE(r4, 0xc008551b, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) unshare$auto(0x40000080) close_range$auto(0x2, 0x8, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket(0x18, 0x3, 0x2) r8 = accept$auto(r7, 0x0, 0x0) r9 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000640), r8) sendmsg$auto_NL802154_CMD_SET_PAN_ID(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x1058}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r10 = ioctl$NS_GET_PARENT(r1, 0xb702, 0x0) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r6, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="05082dbd7000fbdbdf257e0000000800", @ANYRES32=r10, @ANYBLOB="0c002e010800000000000000"], 0x28}, 0x1, 0x0, 0x0, 0x4004044}, 0x8000) sendmsg$auto_NL80211_CMD_GET_WIPHY(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000140)=ANY=[@ANYBLOB="18000000", @ANYRES16=r9, @ANYBLOB="810b25bd7080fbdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0xc004) sendmsg$auto_NL80211_CMD_EXTERNAL_AUTH(r5, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r9, @ANYBLOB="00f225bd7000fddbdf257f0000000400500105003e00f70000009367e6c1f587486ba95a498ac8ffffff7f0000000018870f7eac8ec581096c26951308b246362967638d528622e6a64ab4d0c95d173aa13dc8a665fa36"], 0x20}, 0x1, 0x0, 0x0, 0x24008015}, 0x4) socket(0x10, 0x2, 0xc) socket(0x2b, 0x5, 0x3a) 9.032773694s ago: executing program 9 (id=1563): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) close_range$auto(0x2, 0x8, 0x0) syz_genetlink_get_family_id$auto_nl802154(0x0, 0xffffffffffffffff) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) select$auto(0x5, 0x0, 0x0, 0x0, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) ioctl$auto_XFS_IOC_EXCHANGE_RANGE(0xffffffffffffffff, 0x40285881, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x5, 0x7f, 0x2, 0xfffffffffffffffe}) ioctl$auto_FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f00000000c0)="db1d957b75a16ca235b16bca3b55e655cea5973f24163389f929ac11e1915bd1ef055eafc98a404246cbd76405e6ec5eeb07721a83f085fe9d1ce9bc25a44df4b458f6b6684e014393a47de7e158f5142a034d77f9ab380062bdc2fd97f274e9afccdec727cc96e2de45e5728509fe83e3db7e356ee1255c93f0332bff2b75174f11622b63c5b3aabb4d64c4568d982a8445bb8656178e03715e135d3e4c1eb665db9441ff7e7b695c36c05e1110cd93719d67849528889606") madvise$auto(0x0, 0xffffffffffff0005, 0x19) statmount$auto(&(0x7f0000000040)={0x1f, @raw, 0x80000002, 0x3, 0x8}, 0x0, 0x7ffffffff000, 0x0) 7.03912137s ago: executing program 8 (id=1569): r0 = openat$auto_nvram_misc_fops_nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) openat$auto_rfcomm_sock_debugfs_fops_(0xffffffffffffff9c, &(0x7f0000000000), 0x40040, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/tty/ttyy7/power/runtime_suspended_time\x00', 0x0, 0x0) unshare$auto(0x40000080) close_range$auto(0x2, 0x8, 0x0) r1 = socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) clock_nanosleep$auto(0x9, 0x0, &(0x7f0000000000)={0xe, 0x802b95}, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x4e21, @rand_addr=0x64010102}, 0x8000054) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ram13\x00', 0x1e3a02, 0x0) getsockopt$auto_SO_INCOMING_NAPI_ID(r1, 0x401, 0x38, &(0x7f00000001c0)='-)\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0, 0x40) unshare$auto(0x40000080) r2 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r2, 0xc0045516, 0x0) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) sysfs$auto(0x8, 0x7263, 0x4000003) fsopen$auto(0x0, 0x1) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC2\x00', 0x50080, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0) select$auto(0x9, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0x0, 0x1, 0x9488, 0x9, 0x15f4da07, 0x6, 0x10, 0x64, 0x80000020, 0x1000, 0xb, 0x9, 0x2, 0xd8]}, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x8000000000001fd, 0x20080000004, 0x80000001, 0x1000000000000bc3, 0x800, 0x4, 0xfc, 0x10001, 0x400000000003, 0x1ae9, 0xfffffffffffffffc, 0xfffffffffffffffa, 0x80000000, 0x1, 0xffffdfffffffff81, 0x2]}, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) signalfd4$auto(r0, 0x0, 0x8, 0xfffffffc) socket(0x2, 0x800, 0x40) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x24044854}, 0x800) socket(0xa, 0x80002, 0x73) setresuid$auto(0x0, 0xffffffffffffffff, 0xee00) 6.752963844s ago: executing program 0 (id=1570): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_nvram_misc_fops_nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x101140, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000005c0)='/sys/devices/virtual/mac80211_hwsim/hwsim1/ieee80211/phy1/rfkill3/state\x00', 0x102, 0x0) write$auto(r0, &(0x7f0000000000)='0\x00\\9(\xba\xea\x99\xfc|U\x1c\xc7k', 0x181) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), 0xffffffffffffffff) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) io_uring_setup$auto(0x2, 0x0) socket(0x2, 0x1, 0x0) sysfs$auto(0x2, 0x0, 0x0) r1 = epoll_create$auto(0x7) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_clone(0x5000400, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x20000, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid$auto(r3, r3) epoll_ctl$auto(0x5, 0x1, r2, 0x0) epoll_wait$auto(r1, 0x0, 0x0, 0x6) fchdir$auto(0xffffffffffffffff) mount$auto(0x0, &(0x7f00000000c0)='.\x00', &(0x7f00000001c0)='nfsd\x00\xee\x1a\x8f\xa2~?\xe2\x82fg\xb3G\xbe\xc8\x12\xae\xc3\xc0@[\x99\xec\xbf(\xec\xc3\xb2\xf2\x15Zi\xc4S6\'\x14\x05\t\x8c\xd5?\xa0\x00\xd8\xe4\xafW\xcc\xa3\xce\tI\x95\xe12\xaclJ\xba\xeb\xe4\x83Z\xaev\xd7\xd9\xdd_\x14O\x84\xaa\x13W\xb7\x06\'fvQ\x95\xc5\xd1\x98\xe3T\xcdfk\xc7\xe9\x96\r\x91\xb0\xc46\xf2\xfc\xef\xfe\xa0\xc9d\xb3h$\xeb\xad\xa4P\x8f\xc3bM{4RQ\x00\x9d)_\xd81(\x03\xfd\rw\xca1\x88|\xe5\x1e\x10\x89X\x01\xe9\xf6g\x95xx\xaf\xa9~m\x05\xe1\xa8\xda\x80\xc5\x8f\xb41\x81\xf0\xa3\xa2\xe4\x81\xb9\x92\xda\x13\xfe5\xfb\xc6\xd8>\x01\xd4\x14', 0x5, 0x0) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/pagemap\x00', 0x600, 0x0) mmap$auto(0x0, 0x400008, 0xdd, 0x9b72, r2, 0x20000000007ffe) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) unshare$auto(0x40000080) mmap$auto(0x0, 0x2020006, 0x3, 0x11, 0xfffffffffffffffa, 0x8000) unshare$auto(0x20000) syslog$auto(0x3f983271, &(0x7f0000000080)='..\x00k\xac\x8c\x1d\x0e\x98\x80\xd2\xaf\xa1\xf2\x1e\xe1R1\xa2\x8e\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\xa6\xf4#+\xfa\xd7\x01\xb9j<\v\xf47\n\xa7\xd2\x8b\x11e1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\x84q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa24X@\xadD\xf8\x9d\xf3 \xd2]\xc4\x13G\x1d\x04!\xc1\xeb.e$\xfb\xa3KU\xcf\xc1\x7fFD\x99\xf5v\v\x9dS\xc11P\xa3\xe9\xb0SqL\x85\xea\xb2\x9cY\x83.I\xca\x92\x1c\xc4\x13CV=\x92\x17c\x87iOt\x14On\x15=\v\xf0 \xc5\x8b~\xd6\xd4\xc7\xa3a\x1c\x06\x17\xb3\x88\x8c\xf1L\xba\x89a\xfd\xa5\xc6\x7fU\x00\xe5\x9b', 0x5) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/asound/card1/timer_source\x00', 0x20080, 0x0) unshare$auto(0x10) socket(0x2000000000000021, 0x2, 0x10000000000002) 6.44476833s ago: executing program 4 (id=1571): preadv$auto(0xffffffffffffffff, 0x0, 0x7, 0x7, 0x402) read$auto_ptdump_fops_(0xffffffffffffffff, 0x0, 0x0) unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$auto_TUNSETGROUP(r1, 0x400454ce, &(0x7f00000000c0)=0x200) write$auto(r0, &(0x7f0000000500)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x95\x82 )\xca\x99h\xcf\xfdK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) pread64$auto(0xffffffffffffffff, 0x0, 0x8100000041, 0x413e) mremap$auto(0xfffff000, 0x4, 0x4, 0x7, 0x1001ff000) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000140)='/dev/bus/usb/028/001\x00', 0x400, 0x0) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$auto_ovs_vport(0xfffffffffffffffe, 0xffffffffffffffff) socket(0x2c, 0x80003, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'ip6gre0\x00'}) mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = openat$auto_proc_mem_operations_base(0xffffffffffffff9c, &(0x7f0000001640)='/proc/self/mem\x00', 0x401, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) inotify_init1$auto(0xed8) pwritev$auto(r3, &(0x7f0000000140)={0x0, 0x400000000001}, 0x5, 0x5, 0xd3b8) 5.366531731s ago: executing program 8 (id=1572): syz_genetlink_get_family_id$auto_smc_gen_netlink(&(0x7f0000000680), 0xffffffffffffffff) ioctl$auto_TIOCGDEV2(0xffffffffffffffff, 0x80045432, 0x0) (async) socket(0xa, 0x3, 0x3b) (async) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) (async) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) (async) mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0xffffffffffffffff, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) sysfs$auto(0x2, 0x2, 0x0) (async, rerun: 64) r0 = fsopen$auto(0x0, 0x1) fsconfig$auto(r0, 0x8, 0x0, 0x0, 0x0) (async, rerun: 64) fsmount$auto(0x4, 0x0, 0x200003) (rerun: 64) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) mmap$auto(0x0, 0x2020009, 0x8000000000000003, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) (rerun: 32) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) (async, rerun: 32) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) (async, rerun: 32) landlock_create_ruleset$auto(&(0x7f0000000000)={0xd1d, 0x3, 0x7}, 0x0, 0x10000) close_range$auto(0x2, 0x8, 0x0) (async) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x5) (async) sendmsg$auto_CTRL_CMD_GETPOLICY(r1, 0x0, 0x0) (async, rerun: 64) sendmsg$auto_SMC_NETLINK_REMOVE_UEID(0xffffffffffffffff, 0x0, 0x4040) (rerun: 64) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0x4ffb, 0x8000000008010, 0x3, 0x8000) (async) preadv2$auto(r2, &(0x7f0000000280)={0x0, 0x80000000}, 0x6, 0x3, 0x4, 0x2e) ioctl$auto_BLKFLSBUF(r2, 0x1261, 0x0) (async) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, 0x0, 0x42, 0x0) mmap$auto(0x4, 0xa00006, 0x2, 0x100000000040eb1, 0x602, 0x300000000000) 4.313578599s ago: executing program 4 (id=1573): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_smc_gen_netlink(&(0x7f0000000000), r0) sendmsg$auto_SMC_NETLINK_ADD_UEID(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd7000fce30c9aee08000000250a00000005000100960000004696796498df8413a78f9bb5a234849a8a58c9988cfd475f24203c4104098f0f2a0305d7ca286bc8af551673768226ced9cc5cee802f8be6e37a5c0177ba4feb64793bce6ca2ac242c1d88620848ca49d49dbe92dfe035d6ac749f0a"], 0x1c}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) read$auto(r1, 0x0, 0x8) 4.025390311s ago: executing program 8 (id=1574): r0 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/security/tomoyo/query\x00', 0x0, 0x0) read$auto(r0, 0x0, 0x100000001) r1 = openat$auto_force_wakeup_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/bluetooth/hci7/force_wakeup\x00', 0x721800, 0x0) copy_file_range$auto(r1, 0x0, 0xffffffffffffffff, 0x0, 0x1, 0xfffeffff) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x800000000000, 0x40009, 0x9c, 0x9b72, 0x7, 0x28000) socket(0x27, 0x3, 0xc) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x55) r2 = socket(0x2, 0x3, 0xa) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x8) connect$auto(0x3, &(0x7f00000018c0)=@l2tp={0x2, 0x0, @multicast1}, 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0xe000) write$auto(0x3, 0x0, 0x800) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x0) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x27ff) msgget$auto(0xc, 0x77d9) msgsnd$auto(0x0, &(0x7f0000000000)={0x1, 0x5}, 0x8, 0x9) unshare$auto(0x40000080) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/pressure/io\x00', 0x20c002, 0x0) set_mempolicy_home_node$auto(0xc, 0xe873, 0x90, 0x6) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000040), r2) sendmsg$auto_NL802154_CMD_GET_WPAN_PHY(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000180)=ANY=[@ANYBLOB="280000008cee252c31ebe56427657397ee2e3ecf3add397b3e84d1d641b86184bc6ab635cbb3acbf72f27c739ea976e8964277ea2d5ce18494489486dd3760b8c8bfb28701d06bfda689245d67901f37073d68a9cc915d87251e5970fc1f7ce0141660b109b9df13f5ad1f17f0eb67ce4fcd851fafcc793d23d187626758379a6afdd8051f907d738be1913f0377b3f74bf12c3a55a23df7a73b7d3309c14eaf21c2742c9a680cc6bab9c840094c7e0b0179c42fb0ed8647f50c136260567d9bb48f58fc5eb60e383fbfa3c300f7b3eb950fa7a5841a6f9be731338ce7b21f4ab3cbeda86f1d7b", @ANYRES16=r4, @ANYBLOB="01002abd7000fedbdf25010000000c000600100000000000000008000100feffffff"], 0x28}, 0x1, 0x0, 0x0, 0x51}, 0x0) 3.728151498s ago: executing program 0 (id=1575): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$auto_VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, &(0x7f0000000040)={0x1cd6, 0xffffffffffffffff}) ioctl$auto_SG_GET_PACK_ID(r0, 0x227c, &(0x7f00000000c0)="6197603be8f632") socket(0x2, 0x3, 0xa) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x14be02, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/kernel/mm/swap/vma_ra_enabled\x00', 0xb02, 0x0) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mremap$auto(0x0, 0xffffffffffffffff, 0x3fd6, 0x3, 0x7fffffffb000) r1 = socket(0x23, 0x80805, 0x0) write$auto(r1, 0x0, 0x8) ioctl$auto(0x3, 0x89ed, 0xfffffffffffff4e0) r2 = prctl$auto(0x23, 0x20000000000000b, 0x7fffffffefff, 0x0, 0x0) clock_nanosleep$auto(0x9, 0x0, &(0x7f0000000000)={0x0, 0x200}, 0x0) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000140), 0xe0180, 0x0) r4 = ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) close_range$auto(0x2, 0x8, 0x0) write$auto(0xffffffffffffffff, &(0x7f0000000180)='e\x82C/\x0e\x88\xbc\x8f\x86\xa1\xf7OV\xe8G\x05\x8eDf8\x0e\x13\x97\xd8=\xf3\xa4\xd6\xb6\xd3\xe1\xce2|\xf9\xf3\x0f\x90:ht\x0e\x99\x813\x1e\xe9\x9c\n\xf7\xb5N\xd5\xe2A \xa4\xf0\x1e{e \xaa\r\xbe\xba\xe9D\xf3\x9f\x9b{<\x05\xea\xfe\xb5\xe2\xa3V<\xe6?\x83+\xf0\xd0\x83\xd3\xce\x8d\xae\x17\x85DV&\nY}\xe4\xa5\xa2\x17\x15\xcb\xf8I\xbb\xcd\xab\xb43}\x00\xec\x8bk\x11\x19\x00\xf1\xad\xf2\x7f\xfb\x16\x16\xaf\x8c\xb61\x1d%\x8e\xe3\'tv\xc3 \xb0\xd9\xce\xaf\xf9\b\'\xccW\xbc\xf3\x9b\xeb\xd8\xa9\xd6\xffh\xcd\xef\xc1\xb0~\x14U\x93\x8f\x84\x8cTX s@\xb4\x89*\xaeuG\x94\x8f\x00\x00\x00\x00\x00\x00', 0x7f) mprotect$auto(0x110c230000, 0xa588, 0x6) mremap$auto(0x110c231000, 0x0, 0x101, 0x3, 0x0) r5 = syz_open_procfs$namespace(0x0, 0x0) getdents$auto(r5, 0x0, 0x401) mmap$auto_sg_fops_sg(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x30, r2, 0xfffffffffffffffc) r6 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0xfffffffffffffffc) bpf$auto(0x0, &(0x7f0000000180)=@link_create={@prog_fd=r6, @target_ifindex, 0xd, 0x3420, @perf_event={0x1}}, 0x6f4) sendmsg$auto_ETHTOOL_MSG_LINKMODES_SET(r4, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x38, 0x0, 0x4, 0xfffffffc, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xf}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x400000}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x8824}, 0x20044000) 3.365002283s ago: executing program 0 (id=1576): mremap$auto(0x0, 0xbfffffffffffffff, 0x7ffffffffffffffd, 0x0, 0x7fffffffb000) socket(0x10, 0x2, 0x0) sendmsg$auto_NETDEV_CMD_QUEUE_GET(0xffffffffffffffff, &(0x7f0000003040)={0x0, 0x0, &(0x7f0000003000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="010600bd7000fbdbdf250a0000000800", @ANYRES32], 0x1c}, 0x1, 0x0, 0x0, 0x20040004}, 0x20008810) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="18"], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 3.274368142s ago: executing program 4 (id=1577): r0 = openat$auto_ftrace_enable_fops_trace_events(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/tracing/events/vmalloc/purge_vmap_area_lazy/enable\x00', 0x2, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) add_key$auto_KEY_SPEC_SESSION_KEYRING(&(0x7f0000000440)='keyring\x00', 0x0, &(0x7f00000004c0), 0x6, 0xfffffffffffffffd) r1 = prctl$auto_PR_SYS_DISPATCH_ON(0x1000, 0x1, 0xffffffffffffffff, 0x4, 0x7) mmap$auto(0x0, 0x400008, 0x3, 0x17, r1, 0x8000) (async) mmap$auto(0x0, 0x400008, 0x3, 0x17, r1, 0x8000) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @remote}, 0x6a) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0xa6, 0x7e, 0x0, 0x1, 0x29) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) set_mempolicy$auto(0x2, &(0x7f0000000080)=0x7f, 0x400) mmap$auto(0x0, 0xd561, 0x10000000000df, 0xeb2, 0xffffffffffffffff, 0x8000) timer_create$auto(0x2, 0x0, 0x0) timer_settime$auto(0x0, 0x3, &(0x7f00000000c0)={{0x26b, 0x4}, {0x0, 0x83}}, 0x0) (async) timer_settime$auto(0x0, 0x3, &(0x7f00000000c0)={{0x26b, 0x4}, {0x0, 0x83}}, 0x0) close_range$auto(0x2, 0x8, 0x0) memfd_create$auto(0x0, 0xe) (async) memfd_create$auto(0x0, 0xe) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nbd14\x00', 0x60f42, 0x0) (async) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nbd14\x00', 0x60f42, 0x0) write$auto(r3, &(0x7f0000000000)='//\xf2\x00', 0x80000000) (async) write$auto(r3, &(0x7f0000000000)='//\xf2\x00', 0x80000000) mmap$auto(0x0, 0x810006, 0xffb, 0x8000000008011, 0x3, 0x0) (async) mmap$auto(0x0, 0x810006, 0xffb, 0x8000000008011, 0x3, 0x0) kexec_load$auto(0x200000000007, 0x1, &(0x7f0000000040)={@kbuf=0x0, 0x2aaa, 0x6c0000c000, 0xc000}, 0x4) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000000)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xfffffffd}, 0x10001}, 0x5, 0x20000000) setsockopt$auto(r0, 0x6, 0x22, 0x0, 0x6) (async) setsockopt$auto(r0, 0x6, 0x22, 0x0, 0x6) r4 = openat$auto_proc_pid_set_comm_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/comm\x00', 0x303400, 0x0) sendfile$auto(r1, r4, &(0x7f0000000080)=0x8, 0xd) (async) sendfile$auto(r1, r4, &(0x7f0000000080)=0x8, 0xd) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/irq/10/node\x00', 0x20800, 0x0) (async) r5 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/irq/10/node\x00', 0x20800, 0x0) read$auto(r5, &(0x7f0000000140)='\x06\\!\x1a\x1e\xd2l\x0e\t\xf9\xcd\x1e\x81_', 0x8000) (async) read$auto(r5, &(0x7f0000000140)='\x06\\!\x1a\x1e\xd2l\x0e\t\xf9\xcd\x1e\x81_', 0x8000) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/midiC2D3\x00', 0x111000, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x17) sendmsg$auto_SMC_NETLINK_GET_DEV_SMCR(0xffffffffffffffff, 0x0, 0x40) 3.105311843s ago: executing program 0 (id=1578): r0 = openat$auto_stats_seq_fops_netdebug(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) r1 = openat$auto_dynamic_events_ops_trace_dynevent(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/tracing/dynamic_events\x00', 0x40001, 0x0) write$auto_dynamic_events_ops_trace_dynevent(r1, &(0x7f0000000300), 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/platform/vhci_hcd.8/usb25/ltm_capable\x00', 0x0, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) mmap$auto(0x0, 0x400008, 0x5f, 0x9b72, r0, 0x8000) close_range$auto(0x2, 0x8, 0x0) unshare$auto(0x40000080) acct$auto(&(0x7f0000000040)='/dev/dri/card1\x00') madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x8, 0x15) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) madvise$auto(0x100200006, 0xc, 0x3) unshare$auto(0x40000080) unshare$auto(0x93a3) socket(0x2c, 0x1, 0x0) mmap$auto(0xffffffffffffffff, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000140), 0x8f00, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) sendmsg$auto_NL80211_CMD_SET_COALESCE(0xffffffffffffffff, 0x0, 0x80) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x182b02, 0x0) sendfile$auto(r3, r3, 0x0, 0x3) close_range$auto(0x2, 0x8, 0x57) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x3602, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) eventfd$auto(0x8c) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/system/memory/memory12/power/control\x00', 0x100, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtdblock0\x00', 0x14f602, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ram5\x00', 0x14fa02, 0x0) sendfile$auto(0x3, 0xffffffffffffffff, 0x0, 0x440000100006) 2.836636012s ago: executing program 8 (id=1579): ioctl$auto(0xc8, 0x401054d5, 0xffffffffffffffff) io_uring_setup$auto(0x5b, &(0x7f0000000080)={0x7fffffff, 0xd, 0x10003, 0x7, 0x3, 0x7ffffffd, 0xffffffffffffffff, [], {0x6, 0x1ff, 0x8c48, 0x2a2, 0x100, 0x7ffffffb, 0x101, 0x6, 0x3}, {0x100, 0x1, 0x0, 0x5, 0x3, 0x40, 0x76c5, 0x8, 0x100000000}}) mmap$auto(0x0, 0x9, 0x3, 0x8012, 0x3, 0x8300f000) r0 = bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x19, 0x4, 0x4, 0x880b, 0x8, 0x40d, 0xffffffffffffffff, 0x2b, 0x7ff}, 0x6f4) fcntl$auto_F_SETOWN(0xffffffffffffffff, 0x8, 0x0) unshare$auto(0x40000080) openat$auto_event_inject_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/events/vmalloc/alloc_vmap_area/inject\x00', 0x1a000, 0x0) close_range$auto(r0, r1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r2 = io_uring_setup$auto(0x59, 0x0) r3 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/snd/controlC2\x00', 0x8100, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r3, 0xc0045516, 0x0) r4 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC2\x00', 0x0, 0x0) mount$auto(0x0, &(0x7f0000000540)='}[,&*}\x00', &(0x7f0000000040)='nfsd\x00', 0x3, 0x0) mmap$auto(0x7, 0x2, 0xa, 0x80000010, r4, 0x101) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, &(0x7f0000000580)={{@raw=0x7fffffff, 0xf0ee, 0x20009, 0x3, "790eaa00ffff8eac2cdafc1f64010043eeb0b053030001ffff000e000000000100", @raw=0x3}, 0x4, 0x966, 0x3, @raw=0x404, @enumerated={0x9, 0x80000000, "033beddd1805dc0a0f9236c0095295603854aabf973f037f0896b19cbe04c0aa95c57dc0788556977828784abe1a8f695f19b28fd798a2fb818b216638fd3266", 0x48, 0x3}, "6cc1294d63a4f1b4285854c5368de438f8cc142ef6df12bf3373a1183bedbd31b642b4051b078fa1c1c61c329794e5311121c760cb9611c78e6947a99807bcc1"}) r5 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/controlC2\x00', 0x480, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_TLV_WRITE(r5, 0xc008551b, 0x0) unshare$auto(0x2) close_range$auto(0x2, 0x8, 0x0) open_by_handle_at$auto(0xffffffffffffffff, 0x0, 0x80000001) ioctl$NS_GET_PARENT(r2, 0xb702, 0x0) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0) chdir$auto(&(0x7f0000000000)='}[,&*}\x00') open(&(0x7f0000000100)='.\x00', 0x0, 0x0) mremap$auto(0xfffffffffffffffc, 0x3, 0x8, 0x6, 0xa) r6 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r6, &(0x7f0000001380)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xfc\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\r&\xec\xb8\xb1Z\\\xc9L\xb2\t\xddbH|\xffGP\x97)\xb9:nqn\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc$\xa0\xa5\xce\xca\xe1P\xf7\xe5_\xca\xd5\xd8\xa4g_\xb1\x88\x8cAJS\x11\x8b\xd1%a\xe5DPk\x8c\xf9\xfb\xe0+\xdb\x12\x10.F\x00\xc37\xc7\xbf\x80\xbeu\xe1V\xb2\xc5\xc9\x1a\xc7\xdc}!\x10\xb1\",1%\x0e\xeb\x15\x15me\xe1a\x03\x18{\xb03+\x93*vB\xc6\xf1\xc6\xff\xbbt\x04!\xb6\v\xde2\xc9\x89#\xbaR\xee\x13jF%\xf2\x15\x9a\x82&\x89o\xa9\xd9\xbfFY\x90\x8c\xa0\xe4\x9d\xa2\xcd\x9a\xb5TC\xc4\x9d\x9ePb]\xaa\xc7f\x06N\xc5\xfa{\x02Y\xae\xf4(\xaa\x06);{?\x1e\fu\x19b\xdf$,\x01\"\x94\x00\x00\x00\x00\x003\xcfZ\xaf~<\xba\xb7\xa03\x8c\n*krS\x19Q#\x8f\xfbW\xad\xe0\xb3o\xcb\xf7\xda\x87C\x99\x1a\xa8\xc1\xe3\xc6%\xac\x01@*\xa0\xc4\xedn-lT\xe6*?\'\x9dW=\xa7\x03\x06\x83 IT\xa3\x7ff\xb6\x95\xe5\xd2\n\xaf\x87`\xce%\xf6 &\xa7M5I\x9c\x17h\x8c\xa4\x98\x16\xe0\xd9?Y\x7f\xf6\x85_{\xfd9p$B9_\xd8\xf4\x0e\xd0\xfa\xe7\xb0\xb8\xa0\xd7\a\xff.\"\x81\b\xb0\xb4\x84\xac\xad\x1b\x93~_\xea\xfe7\x03\"\xd9\x1d.\xe5{bHX\x14\xa1\bO\x03[^\x85jP\x89\t\x06GI\xb7\x99\xb2zZf\xc8\xd4\x8d\x1c\x1e\x03\xb9\xa7Nt\xae\xfff\xf9\tx\xae\xa8\x05\xb14\xc6\x9b\x1f\xd3\x01#\xc6\nb\xd4\xb4\xc8?\xa7\xe2R\xc1\xcf\xd2\xbc\xae\xd1\xc2\x88\"\xf3\xf0\xc0uQy\xec\xfab\xd6\xcd\x16)\x19*E\vm\x8d\x1bG:\x80\'pJ', 0x4100000a3d7) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/card1/pcm0p/sub7/info\x00', 0x8040, 0x0) 2.035652663s ago: executing program 4 (id=1580): mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) getsockopt$auto(0x3, 0x200000000001, 0x11, 0x0, 0x0) unshare$auto(0x40000080) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/mtdblock0\x00', 0x14fe02, 0x0) getsockopt$auto_SO_BSDCOMPAT(r0, 0x3, 0xe, &(0x7f00000000c0)='*\\\x00', &(0x7f0000000180)=0x40) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) preadv2$auto(r0, &(0x7f0000000080)={0x0, 0x80000003}, 0x7, 0xffffffffffffffff, 0x8000000000000, 0x2f) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) bind$auto(0x3, &(0x7f0000000040)=@tipc=@name={0x1e, 0x2, 0x3, {{0x41, 0x3}, 0x4}}, 0x6a) r1 = getpid() process_vm_readv$auto(r1, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000040), 0xffffffff}, 0x6, 0x0) socket(0x15, 0x4, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) listen$auto(r0, 0x0) dup$auto(r0) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/ipv6_route\x00', 0x80000, 0x0) pread64$auto(r2, 0x0, 0x6000000000, 0x100000004) mmap$auto(0x0, 0x6, 0x3, 0xeb1, 0x7, 0x8000) futex$auto(0x0, 0x85, 0x38, 0x0, 0x0, 0x80800005) r3 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000400)='/dev/mtd0\x00', 0x68082, 0x0) ioctl$auto_BLKPG2(r3, 0x1269, 0x0) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0) chdir$auto(&(0x7f0000000000)='}[,&*}\x00') open(&(0x7f0000000100)='.\x00', 0x0, 0x0) mremap$auto(0x0, 0x3, 0x3fda, 0x6, 0x7fffffffb000) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) 1.308203994s ago: executing program 8 (id=1581): socket(0xa, 0x2, 0x3a) r0 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) socket(0x18, 0xa, 0x1) socket(0xa, 0x2, 0x0) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa}, 0x55) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ip_vti0\x00', 0x0}) r2 = open_tree$auto(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x2) bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_5={@target_ifindex=r1, r0, 0x8000, 0x2, 0xffffffffffffffff, @relative_fd=r2, 0x6}, 0xf) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x4000, 0x0) write$auto(r3, 0x0, 0x9) sendmsg$auto_GTP_CMD_ECHOREQ(r2, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, 0x0, 0x10e2f257c8b6bc6b, 0x70bd2a, 0x25dfdbff, {}, [@GTPA_I_TEI={0x8, 0x8, 0x10001}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000010}, 0x4) r4 = openat$auto_dynamic_events_ops_trace_dynevent(0xffffffffffffff9c, &(0x7f0000000340)='/sys/kernel/debug/tracing/dynamic_events\x00', 0x40, 0x0) preadv$auto(r4, &(0x7f0000000400)={&(0x7f0000000380)="6497c0689fba3b53535f022df22a2434a4854187bb5e833744b0a0800b7196574d0bca27a77d9b7e38ed4962ac08782bf3e3ea0c4b11e7dc9e83560780ada751afcd5d0a4583993f962f88f32018b90daadd4af15b2b795620ecb5a2afcac2c3953abf1695a7710f27acc7", 0x8}, 0x2, 0x7, 0x100000000) r5 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda\x00', 0x14f602, 0x0) mmap$auto(0x0, 0x810004, 0xffa, 0x8000000008011, r5, 0x8000) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) close_range$auto(0x2, 0x8, 0x0) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) sendto$auto(0x3, 0x0, 0xfdef, 0xfffffff8, &(0x7f0000000440)=@tipc=@nameseq={0x1e, 0x1, 0x1, {0x1, 0x1, 0x3}}, 0x22) openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, 0x0, 0x189002, 0x0) r6 = socket(0xa, 0x1, 0x84) connect$auto(0x3, &(0x7f0000000000)=@in={0x2, 0x4e20, @rand_addr=0xfffffffe}, 0x55) listen$auto(0x3, 0x83) accept$auto(r6, &(0x7f0000000040)=@can, &(0x7f0000000080)=0x80) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000003180), 0xffffffffffffffff) r7 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB="5de1"], 0x1ac}}, 0x40000) recvmmsg$auto(r7, 0x0, 0xfffffff9, 0x10, 0x0) 1.251233529s ago: executing program 0 (id=1582): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xa0001, 0x0) mmap$auto(0x0, 0x202000b, 0xfffffffffffffffa, 0xeb1, 0xffffffffffffffff, 0x8000) r0 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189002, 0x0) ioctl$auto_PPPIOCSMRU(r0, 0xc004743e, 0x0) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x1000, 0x0) userfaultfd$auto(0x1) epoll_create$auto(0x4) close_range$auto(0x0, 0xffffffffffffffff, 0x2) statmount$auto(0x0, &(0x7f0000000180)={0x770, 0x37b, 0x8, 0x4, 0x4003, 0x0, 0x5, 0x400, 0x3, 0x9, 0x6, 0x6, 0x4, 0x11ffffffffffb, 0xb2, 0x2, 0x6, 0x10, 0x80, 0x7ff, 0x8000, 0x1, 0x1, 0x202, 0xd, 0xbca7, 0xfffffffffffffff6, 0x81, 0x0, 0x0, 0x0, [0x2, 0x4, 0x0, 0x5, 0x9, 0x0, 0x20000000000, 0x0, 0x4, 0x100, 0x3169b201, 0x0, 0x3, 0xfffffffffffffc01, 0x5, 0xfffffbfffffffffb, 0x0, 0x9, 0x2000000, 0xfffffffffffffffe, 0x0, 0x8, 0x0, 0x200000000000000, 0x0, 0x8000000000000000, 0x0, 0x0, 0x0, 0x3, 0x101, 0x0, 0x20000000000000, 0x40000000000000, 0x1000000000000200, 0x0, 0x400, 0x96, 0x5, 0x4, 0xe17, 0x4, 0x6]}, 0x1fe, 0x1) r1 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000000180), 0x1541, 0x0) ioctl$auto__ctl_fops_dm_ioctl(r1, 0xfffffffffffffd03, &(0x7f00000001c0)) socket$nl_generic(0x10, 0x3, 0x10) setfsuid$auto(0x0) ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000040)=0x5) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) io_uring_setup$auto(0x1, 0x0) mremap$auto(0x0, 0x4, 0x4, 0x7, 0x100000000) r2 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC1\x00', 0x12f5c1, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r2, 0xc1105517, &(0x7f00000009c0)={{@raw=0x7000, 0xd252, 0x9, 0x2, "790eaa00ffff8eac2cdafc1f64010043eeb0b053030001ffff000e00"}, 0x4, 0x2000963, 0x2, @raw=0x404, @reserved="b20200a3077300f2c167afeb0a9902da3d58908ea1a8475fbd3a75d4690e48fc922df5fdffffffffffffffdbb68aec3f51e29bc18b59d74badbdcc1ba97a2004117190c9a050186fa73f5a197762a94460d134b357b8b4d0caaf1ca142917779cef3673ee57f2f5fde573fa4d4328a8ea0be7eccec0adb4f64290e53d4faa89d", "6cc1294d63a4f1b4285854c5368de438f8cc142ef6df12bf3373a1cb04b435b3fcd0c7c61c329794e5311121c760cb9611c78e6947a99806bcc100"}) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sda\x00', 0x8001, 0x0) ioctl$auto_IOC_PR_PREEMPT_ABORT(r3, 0x401870cc, 0x0) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) lsm_list_modules$auto(0x0, 0x0, 0x0) socket(0xa, 0x5, 0x0) mmap$auto(0x0, 0x400408, 0xdf, 0x9b72, 0x2, 0x8000) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000340)={{0x0, 0x10, &(0x7f00000000c0)={0x0, 0x1fff7}, 0x4, 0x0, 0xa, 0xb}, 0xfff}, 0x5, 0x311) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) socket(0xa, 0x2, 0x0) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x6db, 0x0, 0x3ff, 0x0, 0x3, 0x697b}, 0xed7138c}, 0x9a6, 0xc01) 1.148317728s ago: executing program 4 (id=1583): mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0) (async) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0) r0 = socket(0x1d, 0x2, 0x6) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) (async) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) futex$auto(0x0, 0x86, 0x8, 0x0, 0x0, 0x7) (async) futex$auto(0x0, 0x86, 0x8, 0x0, 0x0, 0x7) getsockopt$auto(r0, 0x6a, 0x2, 0x0, 0x0) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x2a742, 0x0) mmap$auto(0x0, 0x10000, 0xde, 0x11, r1, 0x28000) chdir$auto(&(0x7f0000000000)='}[,&*}\x00') open(&(0x7f0000000100)='.\x00', 0x0, 0x0) mremap$auto(0x0, 0x3, 0x3fda, 0x6, 0x7fffffffb000) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f0000001380)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xfc\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\r&\xec\xb8\xb1Z\\\xc9L\xb2\t\xddbH|\xffGP\x97)\xb9:nqn\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc$\xa0\xa5\xce\xca\xe1P\xf7\xe5_\xca\xd5\xd8\xa4g_\xb1\x88\x8cAJS\x11\x8b\xd1%a\xe5DPk\x8c\xf9\xfb\xe0+\xdb\x12\x10.F\x00\xc37\xc7\xbf\x80\xbeu\xe1V\xb2\xc5\xc9\x1a\xc7\xdc}!\x10\xb1\",1%\x0e\xeb\x15\x15me\xe1a\x03\x18{\xb03+\x93*vB\xc6\xf1\xc6\xff\xbbt\x04!\xb6\v\xde2\xc9\x89#\xbaR\xee\x13jF%\xf2\x15\x9a\x82&\x89o\xa9\xd9\xbfFY\x90\x8c\xa0\xe4\x9d\xa2\xcd\x9a\xb5TC\xc4\x9d\x9ePb]\xaa\xc7f\x06N\xc5\xfa{\x02Y\xae\xf4(\xaa\x06);{?\x1e\fu\x19b\xdf$,\x01\"\x94\x00\x00\x00\x00\x003\xcfZ\xaf~<\xba\xb7\xa03\x8c\n*krS\x19Q#\x8f\xfbW\xad\xe0\xb3o\xcb\xf7\xda\x87C\x99\x1a\xa8\xc1\xe3\xc6%\xac\x01@*\xa0\xc4\xedn-lT\xe6*?\'\x9dW=\xa7\x03\x06\x83 IT\xa3\x7ff\xb6\x95\xe5\xd2\n\xaf\x87`\xce%\xf6 &\xa7M5I\x9c\x17h\x8c\xa4\x98\x16\xe0\xd9?Y\x7f\xf6\x85_{\xfd9p$B9_\xd8\xf4\x0e\xd0\xfa\xe7\xb0\xb8\xa0\xd7\a\xff.\"\x81\b\xb0\xb4\x84\xac\xad\x1b\x93~_\xea\xfe7\x03\"\xd9\x1d.\xe5{bHX\x14\xa1\bO\x03[^\x85jP\x89\t\x06GI\xb7\x99\xb2zZf\xc8\xd4\x8d\x1c\x1e\x03\xb9\xa7Nt\xae\xfff\xf9\tx\xae\xa8\x05\xb14\xc6\x9b\x1f\xd3\x01#\xc6\nb\xd4\xb4\xc8?\xa7\xe2R\xc1\xcf\xd2\xbc\xae\xd1\xc2\x88\"\xf3\xf0\xc0uQy\xec\xfab\xd6\xcd\x16)\x19*E\vm\x8d\x1bG:\x80\'pJ', 0x4100000a3d7) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/card1/pcm0p/sub7/info\x00', 0x8040, 0x0) read$auto_proc_reg_file_ops_compat_inode(r3, &(0x7f0000000100)=""/184, 0xb8) (async) read$auto_proc_reg_file_ops_compat_inode(r3, &(0x7f0000000100)=""/184, 0xb8) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x2003f2, 0x14) (async) madvise$auto(0x0, 0x2003f2, 0x14) madvise$auto(0x0, 0x200007, 0x19) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x1, 0x84) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) (async) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0x1, 0xb9, 0xf, 0x7, 0x400004, 0xffffffffffffffff, 0xe7b, "00000000000000e3ffffffffffffff00", 0x0, 0xffffffffffffffff, 0x5, 0x7, 0xe5, 0x3}, 0x10) bpf$auto(0x1a, &(0x7f0000000380)=@link_create={@prog_fd=r3, @target_fd=r4, 0x80003, 0x81, @uprobe_multi={0x81, 0x1ff, 0x3d82, 0x10000, 0x1, 0x4}}, 0x92) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x66) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) listen$auto(0x3, 0x83) (async) listen$auto(0x3, 0x83) close_range$auto(0x2, 0x8, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) socket(0xf, 0x3, 0x2) 232.389242ms ago: executing program 8 (id=1584): r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x4809c2, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) (async) mount$auto(0x0, &(0x7f0000001500)='./file0\x00', 0x0, 0x8000, 0x0) (async) openat$auto_generic(0xffffffffffffff9c, 0x0, 0x80900, 0x0) (async, rerun: 64) unshare$auto(0x40000080) (async, rerun: 64) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/mtdblock0\x00', 0x14fe02, 0x0) getsockopt$auto_SO_BSDCOMPAT(r1, 0x3, 0xe, &(0x7f00000000c0)='*\\\x00', &(0x7f0000000180)=0x40) (async) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) (async) preadv2$auto(r1, &(0x7f0000000080)={0x0, 0x80000003}, 0x7, 0xffffffffffffffff, 0x8000000000000, 0x2f) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) bind$auto(0x3, &(0x7f0000000040)=@tipc=@name={0x1e, 0x2, 0x3, {{0x41, 0x3}, 0x4}}, 0x6a) (async) r2 = getpid() process_vm_readv$auto(r2, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000040), 0xffffffff}, 0x6, 0x0) (async) socket(0x1e, 0x4, 0x0) (async) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async, rerun: 32) listen$auto(r1, 0x0) (rerun: 32) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttynull\x00', 0x0, 0x0) (async, rerun: 64) dup$auto(r1) (async, rerun: 64) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/ipv6_route\x00', 0x80000, 0x0) pread64$auto(r3, 0x0, 0x6000000000, 0x100000004) (async, rerun: 32) mmap$auto(0x0, 0x1a10, 0x3, 0x800000000eb1, r1, 0x8000) (async, rerun: 32) futex$auto(0x0, 0x85, 0x38, 0x0, 0x0, 0x80800005) (async) r4 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000400)='/dev/mtd0\x00', 0x68082, 0x0) ioctl$auto_BLKPG2(r4, 0x1269, 0x0) (async) ioctl$auto_MEMGETINFO(r4, 0x80204d01, 0x0) mmap$auto(0x0, 0x20004, 0x1ff, 0xeb1, 0x8000000000000024, 0x8000) r5 = pidfd_open$auto(0x1, 0x0) process_madvise$auto(r5, 0x0, 0x3, 0x0, 0x8000000000000000) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, r4, 0x8002) (async) openat$auto_tracing_fops_trace(0xffffffffffffff9c, 0x0, 0x40200, 0x0) 135.056768ms ago: executing program 0 (id=1585): unshare$auto(0x40000080) unshare$auto(0x40000080) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000100)='/dev/bus/usb/008/001\x00', 0x402, 0x0) mmap$auto(0x4, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) read$auto(0x3, 0x0, 0x8080) unshare$auto(0x40000080) mmap$auto(0x1, 0x0, 0x4000000000df, 0xeb1, 0x404, 0x8000) r0 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) r1 = getpid() process_vm_readv$auto(r1, &(0x7f0000000000)={0x0, 0xfff}, 0x40000000001, &(0x7f0000000180)={&(0x7f0000000040)="8c9700089d1b208365d5b5d112dbab029ed13881d2f2c7ba2eb01c3db79f77fdc2bb50c64a925009dff4cd1aca925c57100112d88f73348a54396800ed598a0e5500d7c0cbb6b1e91d", 0x40000000001243}, 0x4, 0x0) ioctl$auto(r0, 0x400454ca, 0x38) ioctl$auto_TUNSETTXFILTER(r0, 0x400454d1, 0x0) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f0000000000)=""/112, 0x70) mmap$auto(0x0, 0x2020006, 0xa, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0xc0000, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)={0x408000, 0x110, 0x8}, 0x18) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x3, 0x1ff, 0x1001, 0x1, 0x717e, 0x0, 0x7, 0xf6b, 0xd, 0x2, 0x4080001, 0x4, 0x1ffffffffffd, 0x224a, 0xfffffffffffffffe, 0x7, 0x6, 0x7f, 0x3ff, 0x1, 0xa, 0x4, 0x200, 0x6, 0x84, 0x3, 0x0, 0x0, 0x0, 0xfffffffc, [0x56, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0xffffffff80000000, 0x0, 0x42, 0xfffffffffffffffe, 0x4, 0x0, 0x0, 0x8, 0x4, 0x400, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5, 0x14, 0x0, 0x1000000, 0x0, 0x0, 0xfffffffffffffffc, 0x83, 0x1, 0x6, 0x0, 0x0, 0x7, 0x6, 0xffffffffffffffff, 0x3]}, 0x1fe, 0xd) r2 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f00000003c0), 0x1541, 0x0) ioctl$auto__ctl_fops_dm_ioctl(r2, 0xfffffffffffffd03, &(0x7f00000001c0)) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) mremap$auto(0x0, 0x4, 0x4, 0x7, 0x100000000) madvise$auto(0x0, 0x200007, 0x19) io_uring_setup$auto(0x2, &(0x7f0000000080)={0x80000003, 0x9, 0x4002, 0x6, 0x4, 0x8, 0xffffffffffffffff, [], {0x9, 0x6, 0x7, 0x29f, 0x100, 0x2, 0x101, 0x4000006, 0x2000}, {0x100, 0x1, 0x52, 0x5, 0x1, 0xc189, 0x108, 0x8, 0x100000000}}) mprotect$auto(0x0, 0x806121, 0x8) syz_clone3(&(0x7f0000000200)={0x186800080, 0x0, 0x0, 0x0, {0x1a}, 0x0, 0x0, 0x0, 0x0}, 0x58) epoll_create$auto(0x1) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x103e81, 0x0) ioctl$auto_TCSBRKP2(r3, 0x5425, 0x0) recvfrom$auto(r3, 0x0, 0x4, 0x10001, 0x0, 0x0) 0s ago: executing program 4 (id=1586): r0 = socket(0x11, 0x3, 0x6) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000280), r1) sendmsg$auto_HWSIM_CMD_REGISTER(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000002c0)={0x14, r2, 0x1, 0x70bd28, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) capset$auto(0x0, &(0x7f0000000000)={0x1, 0x47, 0x4a}) mmap$auto(0x0, 0x20009, 0x5, 0xeb8, 0x8, 0x2) r3 = socket(0x10, 0x2, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/pid_for_children\x00') sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a00"], 0x1ac}}, 0x40000) write$auto_console_fops_tty_io(0xffffffffffffffff, &(0x7f0000000000)="c80d1b5d399b71", 0x7) sendmmsg$auto(0x3, 0x0, 0x3, 0x0) recvmmsg$auto(r3, &(0x7f0000000100)={{0x0, 0x4, &(0x7f0000000080)={&(0x7f0000000040), 0x1}, 0x3, 0x0, 0x80000000, 0x6}, 0x9}, 0x7, 0x6, 0x0) copy_file_range$auto(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000080)=0xeb2f, 0xfffffffffffffffe, 0x0) r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002dbd7000fddbdf250800030008000300", @ANYRES32=r6], 0x24}, 0x1, 0x0, 0x0, 0x5c5fd097d751f33e}, 0x80) syz_genetlink_get_family_id$auto_tipcv2(0x0, r3) sendmmsg$auto(r0, &(0x7f00000001c0)={{0x0, 0x5aa, &(0x7f0000000100)={&(0x7f00000003c0)='\a', 0x5ea}, 0x5, 0x0, 0x0, 0x1001}, 0x5}, 0x2, 0x100) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/platform/vivid.0/video4linux/radio27/dev_debug\x00', 0xb02, 0x0) r7 = timerfd_create$auto_CLOCK_BOOTTIME(0x7, 0x8000) mount_setattr$auto(r7, 0xfffffffffffffffe, 0xfe, 0x0, 0x6) socket$nl_generic(0x10, 0x3, 0x10) r8 = socket(0xa, 0x1, 0x8000) ioctl$auto_BLKROGET(r5, 0x125e, 0x0) syz_genetlink_get_family_id$auto_nfc(&(0x7f00000001c0), r8) kernel console output (not intermixed with test programs): 167][ T9651] ? lockdep_hardirqs_on+0x78/0x100 [ 321.097193][ T9651] do_syscall_64+0x115/0x840 [ 321.097220][ T9651] ? clear_bhb_loop+0x40/0x90 [ 321.097242][ T9651] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 321.097262][ T9651] RIP: 0033:0x7fcc15d9de59 [ 321.097278][ T9651] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 321.097296][ T9651] RSP: 002b:00007fcc16d25028 EFLAGS: 00000246 ORIG_RAX: 0000000000000017 [ 321.097314][ T9651] RAX: ffffffffffffffda RBX: 00007fcc16025fa0 RCX: 00007fcc15d9de59 [ 321.097326][ T9651] RDX: 00002000000000c0 RSI: 0000200000000400 RDI: 0000000000000001 [ 321.097337][ T9651] RBP: 00007fcc15e33e6f R08: 00002000000001c0 R09: 0000000000000000 [ 321.097347][ T9651] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 321.097357][ T9651] R13: 00007fcc16026038 R14: 00007fcc16025fa0 R15: 00007ffc1145e5b8 [ 321.097379][ T9651] [ 322.237653][ T9654] FAULT_INJECTION: forcing a failure. [ 322.237653][ T9654] name failslab, interval 1, probability 0, space 0, times 0 [ 322.353330][ T9654] CPU: 0 UID: 0 PID: 9654 Comm: syz.3.647 Tainted: G L syzkaller #0 PREEMPT(full) [ 322.353363][ T9654] Tainted: [L]=SOFTLOCKUP [ 322.353369][ T9654] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 322.353379][ T9654] Call Trace: [ 322.353386][ T9654] [ 322.353393][ T9654] dump_stack_lvl+0x100/0x190 [ 322.353417][ T9654] should_fail_ex.cold+0x5/0xa [ 322.353437][ T9654] should_failslab+0xc2/0x120 [ 322.353460][ T9654] __kmalloc_node_track_caller_noprof+0xf9/0x830 [ 322.353483][ T9654] ? __kasan_kmalloc+0xaa/0xb0 [ 322.353504][ T9654] ? __request_module+0x2d5/0x6a0 [ 322.353525][ T9654] kstrdup+0x51/0xe0 [ 322.353544][ T9654] __request_module+0x2d5/0x6a0 [ 322.353562][ T9654] ? __pfx___request_module+0x10/0x10 [ 322.353586][ T9654] ? find_held_lock+0x2b/0x80 [ 322.353606][ T9654] ? __get_fs_type+0xd9/0x200 [ 322.353624][ T9654] ? __get_fs_type+0xd9/0x200 [ 322.353641][ T9654] ? find_filesystem+0xf7/0x130 [ 322.353662][ T9654] get_fs_type+0xd7/0x190 [ 322.353681][ T9654] __x64_sys_fsopen+0xca/0x220 [ 322.353704][ T9654] do_syscall_64+0x115/0x840 [ 322.353731][ T9654] ? clear_bhb_loop+0x40/0x90 [ 322.353752][ T9654] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 322.353770][ T9654] RIP: 0033:0x7fcc15d9de59 [ 322.353786][ T9654] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 322.353802][ T9654] RSP: 002b:00007fcc16d04028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 322.353819][ T9654] RAX: ffffffffffffffda RBX: 00007fcc16026090 RCX: 00007fcc15d9de59 [ 322.353839][ T9654] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 322.353849][ T9654] RBP: 00007fcc15e33e6f R08: 0000000000000000 R09: 0000000000000000 [ 322.353859][ T9654] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 322.353869][ T9654] R13: 00007fcc16026128 R14: 00007fcc16026090 R15: 00007ffc1145e5b8 [ 322.353890][ T9654] [ 324.074861][ T9717] netlink: 4 bytes leftover after parsing attributes in process `syz.0.655'. [ 325.267509][ T9739] netlink: 12 bytes leftover after parsing attributes in process `syz.0.658'. [ 326.519235][ T9776] netlink: 28 bytes leftover after parsing attributes in process `syz.0.664'. [ 326.714849][ T9779] usb usb20: check_ctrlrecip: process 9779 (syz.0.664) requesting ep 01 but needs 81 [ 326.784316][ T9779] usb usb20: usbfs: process 9779 (syz.0.664) did not claim interface 0 before use [ 326.832973][ T9768] nbd: nbd4129 already in use [ 328.217145][ T9812] hub 1-0:1.0: USB hub found [ 328.290484][ T9812] hub 1-0:1.0: 1 port detected [ 328.992140][ T9845] FAULT_INJECTION: forcing a failure. [ 328.992140][ T9845] name fail_futex, interval 1, probability 0, space 0, times 0 [ 329.094192][ T9845] CPU: 0 UID: 0 PID: 9845 Comm: syz.1.672 Tainted: G L syzkaller #0 PREEMPT(full) [ 329.094224][ T9845] Tainted: [L]=SOFTLOCKUP [ 329.094231][ T9845] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 329.094241][ T9845] Call Trace: [ 329.094247][ T9845] [ 329.094255][ T9845] dump_stack_lvl+0x100/0x190 [ 329.094280][ T9845] should_fail_ex.cold+0x5/0xa [ 329.094300][ T9845] get_futex_key+0x1d2/0x14f0 [ 329.094331][ T9845] ? __pfx_get_futex_key+0x10/0x10 [ 329.094361][ T9845] ? kasan_quarantine_put+0x104/0x240 [ 329.094380][ T9845] ? lockdep_hardirqs_on+0x78/0x100 [ 329.094411][ T9845] futex_wait_setup+0x91/0x540 [ 329.094439][ T9845] __futex_wait+0x19f/0x300 [ 329.094462][ T9845] ? __pfx___futex_wait+0x10/0x10 [ 329.094487][ T9845] ? futex_hash+0x311/0x400 [ 329.094525][ T9845] ? __pfx_futex_wake_mark+0x10/0x10 [ 329.094550][ T9845] ? __pfx_futex_hash+0x10/0x10 [ 329.094575][ T9845] ? rcu_is_watching+0x12/0xc0 [ 329.094595][ T9845] ? sock_write_iter+0x31d/0x5b0 [ 329.094620][ T9845] ? __pfx_netlink_sendmsg+0x10/0x10 [ 329.094651][ T9845] futex_wait+0xe6/0x370 [ 329.094673][ T9845] ? __pfx_futex_wait+0x10/0x10 [ 329.094700][ T9845] ? vfs_write+0x15d/0x1050 [ 329.094730][ T9845] do_futex+0x265/0x440 [ 329.094748][ T9845] ? __pfx_do_futex+0x10/0x10 [ 329.094772][ T9845] __x64_sys_futex+0x34f/0x4d0 [ 329.094792][ T9845] ? fput+0x79/0x100 [ 329.094810][ T9845] ? __pfx___x64_sys_futex+0x10/0x10 [ 329.094826][ T9845] ? ksys_write+0x1ac/0x250 [ 329.094851][ T9845] ? __pfx_ksys_write+0x10/0x10 [ 329.094884][ T9845] do_syscall_64+0x115/0x840 [ 329.094911][ T9845] ? clear_bhb_loop+0x40/0x90 [ 329.094932][ T9845] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 329.094951][ T9845] RIP: 0033:0x7fd5b219de59 [ 329.094967][ T9845] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 329.094984][ T9845] RSP: 002b:00007fd5b30d10e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 329.095002][ T9845] RAX: ffffffffffffffda RBX: 00007fd5b2426098 RCX: 00007fd5b219de59 [ 329.095013][ T9845] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fd5b2426098 [ 329.095024][ T9845] RBP: 00007fd5b2426090 R08: 0000000000000000 R09: 0000000000000000 [ 329.095034][ T9845] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 329.095044][ T9845] R13: 00007fd5b2426128 R14: 00007ffeceafbba0 R15: 00007ffeceafbc88 [ 329.095066][ T9845] [ 329.366649][ T9847] vivid-007: ================= START STATUS ================= [ 329.377411][ T9847] vivid-007: Generate PTS: true [ 329.383493][ T9847] vivid-007: Generate SCR: true [ 329.389124][ T9847] tpg source WxH: 320x240 (Y'CbCr) [ 329.394826][ T9847] tpg field: 1 [ 329.398267][ T9847] tpg crop: (0,0)/320x240 [ 329.402710][ T9847] tpg compose: (0,0)/320x240 [ 329.407383][ T9847] tpg colorspace: 8 [ 329.411216][ T9847] tpg transfer function: 0/0 [ 329.416125][ T9847] tpg Y'CbCr encoding: 0/0 [ 329.420923][ T9847] tpg quantization: 0/0 [ 329.425176][ T9847] tpg RGB range: 0/2 [ 329.429305][ T9847] vivid-007: ================== END STATUS ================== [ 329.957172][ T9860] netlink: 'syz.0.675': attribute type 2 has an invalid length. [ 331.717475][ T9894] hub 1-0:1.0: USB hub found [ 331.789424][ T9894] hub 1-0:1.0: 1 port detected [ 331.805161][ T9905] netlink: 28 bytes leftover after parsing attributes in process `syz.1.682'. [ 331.969704][ T9910] netlink: 28 bytes leftover after parsing attributes in process `syz.3.683'. [ 332.147559][ T9916] usb usb20: check_ctrlrecip: process 9916 (syz.3.683) requesting ep 01 but needs 81 [ 332.215968][ T9916] usb usb20: usbfs: process 9916 (syz.3.683) did not claim interface 0 before use [ 332.806519][ T9925] ubi0: attaching mtd0 [ 332.945629][ T9925] ubi0 error: ubi_add_to_av: two LEBs with same sequence number 1 [ 333.052182][ T9925] eraseblock attaching information dump: [ 333.061384][ T9890] Process accounting paused [ 333.170370][ T9925] ec 1 [ 333.214412][ T9925] pnum 0 [ 333.256103][ T9925] lnum 0 [ 333.301939][ T9925] scrub 0 [ 333.347477][ T9925] sqnum 1 [ 333.418758][ T9925] Volume identifier header dump: [ 333.541142][ T9925] magic 55424921 [ 333.661683][ T9925] version 1 [ 333.740190][ T9925] vol_type 1 [ 333.863846][ T9925] copy_flag 0 [ 333.869737][ T9946] [U] 0 [ 333.897938][ T9946] [U] QUI [ 333.971947][ T9925] compat 5 [ 334.057485][ T9925] vol_id 2147479551 [ 334.172516][ T9925] lnum 0 [ 334.267412][ T9925] data_size 0 [ 334.373347][ T9925] used_ebs 0 [ 334.380324][ T9961] FAULT_INJECTION: forcing a failure. [ 334.380324][ T9961] name failslab, interval 1, probability 0, space 0, times 0 [ 334.453719][ T9925] data_pad 0 [ 334.457306][ T9961] CPU: 0 UID: 0 PID: 9961 Comm: syz.4.692 Tainted: G L syzkaller #0 PREEMPT(full) [ 334.457334][ T9961] Tainted: [L]=SOFTLOCKUP [ 334.457340][ T9961] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 334.457350][ T9961] Call Trace: [ 334.457356][ T9961] [ 334.457363][ T9961] dump_stack_lvl+0x100/0x190 [ 334.457387][ T9961] should_fail_ex.cold+0x5/0xa [ 334.457407][ T9961] should_failslab+0xc2/0x120 [ 334.457431][ T9961] __kmalloc_noprof+0xfc/0x820 [ 334.457450][ T9961] ? tomoyo_encode2+0xfb/0x3c0 [ 334.457476][ T9961] tomoyo_encode2+0xfb/0x3c0 [ 334.457502][ T9961] tomoyo_encode+0x29/0x50 [ 334.457523][ T9961] tomoyo_realpath_from_path+0x18c/0x690 [ 334.457552][ T9961] tomoyo_path_number_perm+0x23c/0x580 [ 334.457571][ T9961] ? tomoyo_path_number_perm+0x22e/0x580 [ 334.457591][ T9961] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 334.457632][ T9961] ? find_held_lock+0x2b/0x80 [ 334.457651][ T9961] ? __fget_files+0x215/0x3d0 [ 334.457675][ T9961] ? hook_file_ioctl_common+0x140/0x440 [ 334.457694][ T9961] ? __fget_files+0x215/0x3d0 [ 334.457729][ T9961] ? __fget_files+0x21f/0x3d0 [ 334.457758][ T9961] security_file_ioctl+0xd3/0x230 [ 334.457778][ T9961] __x64_sys_ioctl+0xb7/0x210 [ 334.457802][ T9961] do_syscall_64+0x115/0x840 [ 334.457828][ T9961] ? clear_bhb_loop+0x40/0x90 [ 334.457853][ T9961] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 334.457871][ T9961] RIP: 0033:0x7f125cf9de59 [ 334.457886][ T9961] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 334.457903][ T9961] RSP: 002b:00007f125de4c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 334.457919][ T9961] RAX: ffffffffffffffda RBX: 00007f125d225fa0 RCX: 00007f125cf9de59 [ 334.457930][ T9961] RDX: 0000200000000000 RSI: 00000000c0386105 RDI: 0000000000000003 [ 334.457941][ T9961] RBP: 00007f125de4c090 R08: 0000000000000000 R09: 0000000000000000 [ 334.457951][ T9961] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 334.457960][ T9961] R13: 00007f125d226038 R14: 00007f125d225fa0 R15: 00007fff75734258 [ 334.457982][ T9961] [ 334.458028][ T9961] ERROR: Out of memory at tomoyo_realpath_from_path. [ 334.726920][ T9925] sqnum 1 [ 334.784228][ T9925] hdr_crc 65b3bd2d [ 334.839631][ T9925] Volume identifier header hexdump: [ 335.429418][ T4946] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 335.459824][ T9925] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 335.936186][ T9983] netlink: 28 bytes leftover after parsing attributes in process `syz.4.695'. [ 336.446589][ T9985] zswap: compressor not available [ 337.476529][ T4946] Bluetooth: hci3: command 0x0c1a tx timeout [ 338.503762][ T9996] input: f as /devices/virtual/input/input7 [ 339.547421][ T5647] Bluetooth: hci3: command 0x0c1a tx timeout getty: ttyS0: read error: Resource temporarily unavailable [ 340.562255][T10036] FAULT_INJECTION: forcing a failure. [ 340.562255][T10036] name failslab, interval 1, probability 0, space 0, times 0 [ 340.654134][T10036] CPU: 0 UID: 0 PID: 10036 Comm: syz.4.701 Tainted: G L syzkaller #0 PREEMPT(full) [ 340.654165][T10036] Tainted: [L]=SOFTLOCKUP [ 340.654172][T10036] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 340.654186][T10036] Call Trace: [ 340.654192][T10036] [ 340.654199][T10036] dump_stack_lvl+0x100/0x190 [ 340.654224][T10036] should_fail_ex.cold+0x5/0xa [ 340.654245][T10036] should_failslab+0xc2/0x120 [ 340.654268][T10036] __kmalloc_cache_noprof+0x91/0x6c0 [ 340.654297][T10036] ? lockdep_init_map_type+0x5c/0x250 [ 340.654326][T10036] ? snd_seq_prioq_new+0x3f/0x110 [ 340.654349][T10036] snd_seq_prioq_new+0x3f/0x110 [ 340.654367][T10036] snd_seq_queue_alloc+0x153/0x540 [ 340.654398][T10036] snd_seq_ioctl_create_queue+0xa9/0x370 [ 340.654422][T10036] call_seq_client_ctl+0xa3/0x130 [ 340.654447][T10036] snd_seq_kernel_client_ctl+0x77/0xd0 [ 340.654471][T10036] alloc_seq_queue+0xdb/0x180 [ 340.654495][T10036] ? __pfx_alloc_seq_queue+0x10/0x10 [ 340.654528][T10036] ? find_held_lock+0x2b/0x80 [ 340.654551][T10036] ? mark_held_locks+0x40/0x70 [ 340.654583][T10036] snd_seq_oss_open+0x2b2/0xa10 [ 340.654614][T10036] odev_open+0x6f/0x90 [ 340.654634][T10036] ? __pfx_odev_open+0x10/0x10 [ 340.654654][T10036] soundcore_open+0x2e3/0x5a0 [ 340.654682][T10036] ? __pfx_soundcore_open+0x10/0x10 [ 340.654708][T10036] chrdev_open+0x234/0x6a0 [ 340.654735][T10036] ? __pfx_apparmor_file_open+0x10/0x10 [ 340.654764][T10036] ? __pfx_chrdev_open+0x10/0x10 [ 340.654793][T10036] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 340.654816][T10036] do_dentry_open+0x6ab/0x14d0 [ 340.654842][T10036] ? __pfx_chrdev_open+0x10/0x10 [ 340.654874][T10036] vfs_open+0x82/0x3f0 [ 340.654904][T10036] path_openat+0x2873/0x4280 [ 340.654942][T10036] ? __pfx_path_openat+0x10/0x10 [ 340.654976][T10036] do_file_open+0x20e/0x430 [ 340.655006][T10036] ? __pfx_do_file_open+0x10/0x10 [ 340.655051][T10036] ? alloc_fd+0x471/0x7a0 [ 340.655080][T10036] ? do_getname+0x191/0x390 [ 340.655102][T10036] do_sys_openat2+0x10f/0x1e0 [ 340.655124][T10036] ? __pfx_do_sys_openat2+0x10/0x10 [ 340.655155][T10036] __x64_sys_openat+0x12d/0x210 [ 340.655179][T10036] ? __pfx___x64_sys_openat+0x10/0x10 [ 340.655210][T10036] do_syscall_64+0x115/0x840 [ 340.655236][T10036] ? clear_bhb_loop+0x40/0x90 [ 340.655258][T10036] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 340.655277][T10036] RIP: 0033:0x7f125cf9de59 [ 340.655293][T10036] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 340.655310][T10036] RSP: 002b:00007f125de2b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 340.655329][T10036] RAX: ffffffffffffffda RBX: 00007f125d226090 RCX: 00007f125cf9de59 [ 340.655341][T10036] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 340.655352][T10036] RBP: 00007f125d033e6f R08: 0000000000000000 R09: 0000000000000000 [ 340.655362][T10036] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 340.655372][T10036] R13: 00007f125d226128 R14: 00007f125d226090 R15: 00007fff75734258 [ 340.655395][T10036] syzkaller syzkaller login: [ 343.051862][T10074] netlink: 28 bytes leftover after parsing attributes in process `syz.4.708'. [ 343.194039][T10076] usb usb20: check_ctrlrecip: process 10076 (syz.4.708) requesting ep 01 but needs 81 [ 343.239906][T10076] usb usb20: usbfs: process 10076 (syz.4.708) did not claim interface 0 before use [ 343.929912][T10083] hub 1-0:1.0: USB hub found [ 343.965018][T10083] hub 1-0:1.0: 1 port detected [ 346.002593][T10108] usb usb39: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 346.209369][ T30] audit: type=1800 audit(1783460422.934:9): pid=10110 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.718" name="trace_pipe" dev="tracefs" ino=2825 res=0 errno=0 [ 346.543311][T10115] netlink: 8 bytes leftover after parsing attributes in process `syz.4.720'. [ 347.927602][T10119] Process accounting paused [ 350.472775][T10168] netlink: 28 bytes leftover after parsing attributes in process `syz.4.729'. [ 350.675445][T10168] usb usb20: check_ctrlrecip: process 10168 (syz.4.729) requesting ep 01 but needs 81 [ 350.718482][T10168] usb usb20: usbfs: process 10168 (syz.4.729) did not claim interface 0 before use [ 351.461212][T10177] EXT4-fs error (device sda1): ext4_validate_inode_bitmap:106: comm syz-executor: Corrupt inode bitmap - block_group = 0, inode_bitmap = 137 [ 351.550955][T10177] EXT4-fs error (device sda1): ext4_validate_inode_bitmap:106: comm syz-executor: Corrupt inode bitmap - block_group = 1, inode_bitmap = 138 [ 351.649898][T10177] EXT4-fs error (device sda1): ext4_validate_block_bitmap:423: comm syz-executor: bg 0: bad block bitmap checksum [ 351.815052][T10185] FAULT_INJECTION: forcing a failure. [ 351.815052][T10185] name failslab, interval 1, probability 0, space 0, times 0 [ 351.898622][T10185] CPU: 0 UID: 0 PID: 10185 Comm: syz.0.734 Tainted: G L syzkaller #0 PREEMPT(full) [ 351.898654][T10185] Tainted: [L]=SOFTLOCKUP [ 351.898661][T10185] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 351.898671][T10185] Call Trace: [ 351.898677][T10185] [ 351.898692][T10185] dump_stack_lvl+0x100/0x190 [ 351.898721][T10185] should_fail_ex.cold+0x5/0xa [ 351.898743][T10185] should_failslab+0xc2/0x120 [ 351.898766][T10185] __kmalloc_noprof+0xfc/0x820 [ 351.898788][T10185] ? __register_sysctl_table+0xac/0x1650 [ 351.898821][T10185] __register_sysctl_table+0xac/0x1650 [ 351.898848][T10185] ? is_module_address+0x5f/0xf0 [ 351.898880][T10185] ? __pfx___register_sysctl_table+0x10/0x10 [ 351.898907][T10185] ? is_module_address+0x69/0xf0 [ 351.898933][T10185] ? register_net_sysctl_sz+0x222/0x430 [ 351.898958][T10185] brnf_init_net+0x289/0x450 [ 351.898982][T10185] ? __pfx_brnf_init_net+0x10/0x10 [ 351.899003][T10185] ops_init+0x1e2/0x5f0 [ 351.899026][T10185] setup_net+0x118/0x3a0 [ 351.899047][T10185] ? __pfx_setup_net+0x10/0x10 [ 351.899069][T10185] ? mutex_init_lockdep+0xf1/0x120 [ 351.899100][T10185] copy_net_ns+0x46f/0x7c0 [ 351.899124][T10185] create_new_namespaces+0x3ea/0xac0 [ 351.899158][T10185] unshare_nsproxy_namespaces+0xf2/0x220 [ 351.899189][T10185] ksys_unshare+0x438/0xab0 [ 351.899211][T10185] ? __pfx_ksys_unshare+0x10/0x10 [ 351.899240][T10185] __x64_sys_unshare+0x31/0x40 [ 351.899261][T10185] do_syscall_64+0x115/0x840 [ 351.899287][T10185] ? clear_bhb_loop+0x40/0x90 [ 351.899309][T10185] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 351.899327][T10185] RIP: 0033:0x7f047f79de59 [ 351.899344][T10185] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 351.899360][T10185] RSP: 002b:00007f047d9f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 351.899378][T10185] RAX: ffffffffffffffda RBX: 00007f047fa25fa0 RCX: 00007f047f79de59 [ 351.899390][T10185] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 351.899400][T10185] RBP: 00007f047f833e6f R08: 0000000000000000 R09: 0000000000000000 [ 351.899410][T10185] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 351.899420][T10185] R13: 00007f047fa26038 R14: 00007f047fa25fa0 R15: 00007ffef8c966e8 [ 351.899443][T10185] [ 352.789775][ T5647] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 352.811290][ T5647] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 352.901573][ T5652] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 352.963252][T10193] ima: policy update failed [ 352.983919][ T30] audit: type=1802 audit(1783460429.729:10): pid=10193 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.0.735" res=0 errno=0 [ 353.035846][ T5652] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 353.109396][ T5652] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 354.626129][T10171] futex_wake_op: syz.3.730 tries to shift op by -2048; fix this program [ 354.672384][T10171] futex_wake_op: syz.3.730 tries to shift op by -2048; fix this program [ 354.729450][T10171] 0x000000000001-0x000000020000 : "" [ 354.903105][T10171] ftl_cs: FTL header corrupt! [ 355.223447][ T5647] Bluetooth: hci0: command tx timeout [ 356.864374][T10195] zswap: compressor not available [ 357.292810][ T5647] Bluetooth: hci0: command tx timeout [ 357.469043][T10237] cifs: Unknown parameter 'no+ 1`rsFn)aHāh`9kA}1\D@.ZCg^' [ 357.650653][T10239] futex_wake_op: syz.4.740 tries to shift op by -2048; fix this program [ 357.650725][T10239] futex_wake_op: syz.4.740 tries to shift op by -2048; fix this program [ 357.658647][T10239] 0x000000000001-0x000000020000 : "" [ 357.678593][T10239] ftl_cs: FTL header corrupt! [ 358.064110][ T5647] Bluetooth: hci3: Unexpected cc 0x7c89 with no status [ 358.131781][T10243] ubi0: attaching mtd0 [ 358.191332][T10243] ubi0 error: ubi_add_to_av: two LEBs with same sequence number 2 [ 358.312257][T10243] eraseblock attaching information dump: [ 358.348512][T10243] ec 1 [ 358.369113][T10243] pnum 1 [ 358.413071][T10243] lnum 1 [ 358.445029][T10243] scrub 0 [ 358.472587][T10243] sqnum 2 [ 358.501898][T10243] Volume identifier header dump: [ 358.552500][T10243] magic 55424921 [ 358.584885][T10243] version 1 [ 358.588576][T10188] bridge0: port 1(bridge_slave_0) entered blocking state [ 358.605487][T10243] vol_type 1 [ 358.636842][T10243] copy_flag 0 [ 358.640425][T10188] bridge0: port 1(bridge_slave_0) entered disabled state [ 358.653150][T10243] compat 5 [ 358.660386][T10243] vol_id 2147479551 [ 358.664777][T10188] bridge_slave_0: entered allmulticast mode [ 358.682166][T10243] lnum 1 [ 358.692290][T10188] bridge_slave_0: entered promiscuous mode [ 358.699568][T10243] data_size 0 [ 358.713464][T10243] used_ebs 0 [ 358.736280][T10243] data_pad 0 [ 358.771523][T10243] sqnum 2 [ 358.792617][T10243] hdr_crc 7beff9af [ 358.822854][T10243] Volume identifier header hexdump: [ 358.852158][T10188] bridge0: port 2(bridge_slave_1) entered blocking state [ 358.875205][T10188] bridge0: port 2(bridge_slave_1) entered disabled state [ 358.890207][T10188] bridge_slave_1: entered allmulticast mode [ 358.908992][T10188] bridge_slave_1: entered promiscuous mode [ 359.026332][T10243] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 359.077865][T10188] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 359.253914][T10188] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 359.268115][T10259] netlink: 28 bytes leftover after parsing attributes in process `syz.4.745'. [ 359.362518][ T5647] Bluetooth: hci0: command tx timeout [ 359.566025][T10188] team0: Port device team_slave_0 added [ 359.729970][T10188] team0: Port device team_slave_1 added [ 360.320455][T10276] futex_wake_op: syz.4.749 tries to shift op by -2048; fix this program [ 360.365141][T10188] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 360.415670][T10188] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 360.531733][T10188] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 360.630892][T10188] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 360.672739][T10188] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 360.785120][T10188] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 361.242046][T10188] hsr_slave_0: entered promiscuous mode [ 361.284870][T10188] hsr_slave_1: entered promiscuous mode [ 361.325194][T10188] debugfs: 'hsr0' already exists in 'hsr' [ 361.369631][T10188] Cannot create hsr debugfs directory [ 361.432397][ T5647] Bluetooth: hci0: command tx timeout [ 361.438924][T10291] netlink: 28 bytes leftover after parsing attributes in process `syz.3.751'. [ 361.643984][T10292] usb usb20: check_ctrlrecip: process 10292 (syz.3.751) requesting ep 01 but needs 81 [ 361.718788][T10292] usb usb20: usbfs: process 10292 (syz.3.751) did not claim interface 0 before use [ 363.118442][T10188] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 363.197827][T10188] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 363.236494][T10188] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 363.298509][T10188] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 363.337546][T10188] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 363.391190][T10188] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 363.433404][T10188] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 363.478088][T10188] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 363.793931][T10317] netlink: 28 bytes leftover after parsing attributes in process `syz.3.755'. [ 363.930822][T10188] 8021q: adding VLAN 0 to HW filter on device bond0 [ 363.942845][T10319] usb usb20: check_ctrlrecip: process 10319 (syz.3.755) requesting ep 01 but needs 81 [ 363.992727][T10319] usb usb20: usbfs: process 10319 (syz.3.755) did not claim interface 0 before use [ 364.038262][T10188] 8021q: adding VLAN 0 to HW filter on device team0 [ 364.093382][ T14] bridge0: port 1(bridge_slave_0) entered blocking state [ 364.100653][ T14] bridge0: port 1(bridge_slave_0) entered forwarding state [ 364.215906][ T14] bridge0: port 2(bridge_slave_1) entered blocking state [ 364.223179][ T14] bridge0: port 2(bridge_slave_1) entered forwarding state [ 364.482208][T10294] Process accounting resumed [ 365.482412][T10333] FAULT_INJECTION: forcing a failure. [ 365.482412][T10333] name failslab, interval 1, probability 0, space 0, times 0 [ 365.564918][T10333] CPU: 0 UID: 0 PID: 10333 Comm: syz.3.758 Tainted: G L syzkaller #0 PREEMPT(full) [ 365.564951][T10333] Tainted: [L]=SOFTLOCKUP [ 365.564958][T10333] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 365.564969][T10333] Call Trace: [ 365.564975][T10333] [ 365.564982][T10333] dump_stack_lvl+0x100/0x190 [ 365.565006][T10333] should_fail_ex.cold+0x5/0xa [ 365.565028][T10333] should_failslab+0xc2/0x120 [ 365.565055][T10333] __kmalloc_cache_noprof+0x91/0x6c0 [ 365.565082][T10333] ? __pfx_snd_pcm_hw_rule_add+0x10/0x10 [ 365.565106][T10333] ? __pfx_snd_pcm_hw_rule_add+0x10/0x10 [ 365.565129][T10333] ? loopback_open+0x145/0x1370 [ 365.565153][T10333] loopback_open+0x145/0x1370 [ 365.565177][T10333] snd_pcm_open_substream+0xa76/0x1850 [ 365.565197][T10333] ? __pfx_snd_pcm_open_substream+0x10/0x10 [ 365.565217][T10333] ? rcu_is_watching+0x12/0xc0 [ 365.565241][T10333] snd_pcm_open+0x2a3/0x710 [ 365.565261][T10333] ? __pfx_snd_pcm_open+0x10/0x10 [ 365.565282][T10333] ? __pfx_default_wake_function+0x10/0x10 [ 365.565307][T10333] ? __pfx_snd_pcm_playback_open+0x10/0x10 [ 365.565326][T10333] snd_pcm_playback_open+0x86/0xe0 [ 365.565344][T10333] snd_open+0x201/0x450 [ 365.565368][T10333] ? __pfx_snd_open+0x10/0x10 [ 365.565391][T10333] chrdev_open+0x234/0x6a0 [ 365.565419][T10333] ? __pfx_apparmor_file_open+0x10/0x10 [ 365.565448][T10333] ? __pfx_chrdev_open+0x10/0x10 [ 365.565477][T10333] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 365.565501][T10333] do_dentry_open+0x6ab/0x14d0 [ 365.565527][T10333] ? __pfx_chrdev_open+0x10/0x10 [ 365.565559][T10333] vfs_open+0x82/0x3f0 [ 365.565582][T10333] path_openat+0x2873/0x4280 [ 365.565628][T10333] ? __pfx_path_openat+0x10/0x10 [ 365.565663][T10333] do_file_open+0x20e/0x430 [ 365.565693][T10333] ? __pfx_do_file_open+0x10/0x10 [ 365.565738][T10333] ? alloc_fd+0x471/0x7a0 [ 365.565766][T10333] ? do_getname+0x191/0x390 [ 365.565788][T10333] do_sys_openat2+0x10f/0x1e0 [ 365.565810][T10333] ? __pfx_do_sys_openat2+0x10/0x10 [ 365.565840][T10333] __x64_sys_openat+0x12d/0x210 [ 365.565863][T10333] ? __pfx___x64_sys_openat+0x10/0x10 [ 365.565886][T10333] ? arch_syscall_is_vdso_sigreturn+0xb6/0x200 [ 365.565915][T10333] ? syscall_user_dispatch+0x76/0x130 [ 365.565948][T10333] do_syscall_64+0x115/0x840 [ 365.565974][T10333] ? clear_bhb_loop+0x40/0x90 [ 365.565997][T10333] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 365.566015][T10333] RIP: 0033:0x7fcc15d9de59 [ 365.566031][T10333] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 365.566048][T10333] RSP: 002b:00007fcc16d25028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 365.566066][T10333] RAX: ffffffffffffffda RBX: 00007fcc16025fa0 RCX: 00007fcc15d9de59 [ 365.566077][T10333] RDX: 0000000000040000 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 365.566088][T10333] RBP: 00007fcc15e33e6f R08: 0000000000000000 R09: 0000000000000000 [ 365.566099][T10333] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 365.566110][T10333] R13: 00007fcc16026038 R14: 00007fcc16025fa0 R15: 00007ffc1145e5b8 [ 365.566133][T10333] [ 368.727978][T10188] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 369.342885][T10371] FAULT_INJECTION: forcing a failure. [ 369.342885][T10371] name failslab, interval 1, probability 0, space 0, times 0 [ 369.399228][T10371] CPU: 0 UID: 0 PID: 10371 Comm: syz.0.765 Tainted: G L syzkaller #0 PREEMPT(full) [ 369.399258][T10371] Tainted: [L]=SOFTLOCKUP [ 369.399264][T10371] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 369.399274][T10371] Call Trace: [ 369.399280][T10371] [ 369.399287][T10371] dump_stack_lvl+0x100/0x190 [ 369.399311][T10371] should_fail_ex.cold+0x5/0xa [ 369.399331][T10371] should_failslab+0xc2/0x120 [ 369.399353][T10371] __kmalloc_noprof+0xfc/0x820 [ 369.399372][T10371] ? rcu_is_watching+0x12/0xc0 [ 369.399392][T10371] ? tomoyo_realpath_from_path+0xb6/0x690 [ 369.399421][T10371] tomoyo_realpath_from_path+0xb6/0x690 [ 369.399450][T10371] tomoyo_path_number_perm+0x23c/0x580 [ 369.399469][T10371] ? tomoyo_path_number_perm+0x22e/0x580 [ 369.399490][T10371] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 369.399535][T10371] ? find_held_lock+0x2b/0x80 [ 369.399554][T10371] ? __fget_files+0x215/0x3d0 [ 369.399579][T10371] ? hook_file_ioctl_common+0x140/0x440 [ 369.399598][T10371] ? __fget_files+0x215/0x3d0 [ 369.399628][T10371] ? __fget_files+0x21f/0x3d0 [ 369.399664][T10371] security_file_ioctl+0xd3/0x230 [ 369.399685][T10371] __x64_sys_ioctl+0xb7/0x210 [ 369.399709][T10371] do_syscall_64+0x115/0x840 [ 369.399736][T10371] ? clear_bhb_loop+0x40/0x90 [ 369.399758][T10371] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 369.399776][T10371] RIP: 0033:0x7f047f79de59 [ 369.399792][T10371] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 369.399810][T10371] RSP: 002b:00007f047d9f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 369.399827][T10371] RAX: ffffffffffffffda RBX: 00007f047fa25fa0 RCX: 00007f047f79de59 [ 369.399839][T10371] RDX: 0000200000000000 RSI: 00000000c0386105 RDI: 0000000000000003 [ 369.399849][T10371] RBP: 00007f047d9f6090 R08: 0000000000000000 R09: 0000000000000000 [ 369.399859][T10371] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 369.399869][T10371] R13: 00007f047fa26038 R14: 00007f047fa25fa0 R15: 00007ffef8c966e8 [ 369.399891][T10371] [ 369.612628][T10371] ERROR: Out of memory at tomoyo_realpath_from_path. [ 370.187525][T10382] hub 1-0:1.0: USB hub found [ 370.219311][T10382] hub 1-0:1.0: 1 port detected [ 370.298131][T10385] hub 1-0:1.0: USB hub found [ 370.325417][T10385] hub 1-0:1.0: 1 port detected [ 370.558395][T10188] veth0_vlan: entered promiscuous mode [ 370.853143][T10188] veth1_vlan: entered promiscuous mode [ 371.223794][T10188] veth0_macvtap: entered promiscuous mode [ 371.296609][T10188] veth1_macvtap: entered promiscuous mode [ 371.646037][T10188] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 371.881820][T10188] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 372.055147][ T8924] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 372.149890][ T8924] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 372.242712][ T8924] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 372.372963][ T8924] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 372.478338][T10411] usb usb20: check_ctrlrecip: process 10411 (syz.4.775) requesting ep 01 but needs 81 [ 372.598613][T10411] usb usb20: usbfs: process 10411 (syz.4.775) did not claim interface 0 before use [ 372.805119][ T14] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 372.877946][ T14] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 373.181201][ T8929] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 373.235043][ T8929] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 374.697182][T10456] netlink: 'syz.0.783': attribute type 15 has an invalid length. [ 374.815594][T10456] netlink: 'syz.0.783': attribute type 16 has an invalid length. [ 374.968273][T10456] netlink: 194 bytes leftover after parsing attributes in process `syz.0.783'. [ 377.017375][ T5647] Bluetooth: hci3: unexpected event 0x30 length: 10 > 3 [ 377.784852][T10511] qrtr: Invalid version 13 [ 377.929188][T10511] Process accounting resumed [ 378.075980][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.090278][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.381287][T10516] hub 1-0:1.0: USB hub found [ 378.429196][T10516] hub 1-0:1.0: 1 port detected [ 378.448343][T10519] netlink: 28 bytes leftover after parsing attributes in process `syz.4.792'. [ 378.702639][T10522] usb usb20: check_ctrlrecip: process 10522 (syz.4.792) requesting ep 01 but needs 81 [ 378.823879][T10522] usb usb20: usbfs: process 10522 (syz.4.792) did not claim interface 0 before use [ 378.957539][T10529] netlink: 4 bytes leftover after parsing attributes in process `syz.3.793'. [ 379.033006][T10533] netlink: 17 bytes leftover after parsing attributes in process `syz.3.793'. [ 380.127671][T10552] hub 1-0:1.0: USB hub found [ 380.164233][T10552] hub 1-0:1.0: 1 port detected [ 381.869720][T10578] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 383.519482][T10598] vhci_hcd vhci_hcd.3: USB_PORT_FEAT_BH_PORT_RESET req not supported for USB 2.0 roothub [ 386.682169][T10641] usb usb20: check_ctrlrecip: process 10641 (syz.5.814) requesting ep 01 but needs 81 [ 386.767398][T10641] usb usb20: usbfs: process 10641 (syz.5.814) did not claim interface 0 before use [ 387.161898][ T8923] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 387.751276][T10652] futex_wake_op: syz.0.817 tries to shift op by -2048; fix this program [ 387.795203][T10652] futex_wake_op: syz.0.817 tries to shift op by -2048; fix this program [ 387.816389][ T8923] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 387.851453][T10652] 0x000000000001-0x000000020000 : "" [ 387.901531][T10652] ftl_cs: FTL header corrupt! [ 388.562630][ T8923] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 388.684685][T10672] MTRR 1 not used [ 388.948184][ T8923] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 389.154716][T10674] vivid-007: ================= START STATUS ================= [ 389.206811][T10674] vivid-007: Generate PTS: true [ 389.285962][T10674] vivid-007: Generate SCR: true [ 389.368528][T10674] tpg source WxH: 320x240 (Y'CbCr) [ 389.438565][T10674] tpg field: 1 [ 389.466886][T10674] tpg crop: (0,0)/320x240 [ 389.525017][T10674] tpg compose: (0,0)/320x240 [ 389.575089][T10674] tpg colorspace: 8 [ 389.665837][T10674] tpg transfer function: 0/0 [ 389.720791][T10674] tpg Y'CbCr encoding: 0/0 [ 389.771463][T10674] tpg quantization: 0/0 [ 389.808958][T10674] tpg RGB range: 0/2 [ 389.857199][T10674] vivid-007: ================== END STATUS ================== [ 390.590900][ T8923] bridge_slave_1: left allmulticast mode [ 390.618674][ T8923] bridge_slave_1: left promiscuous mode [ 390.654569][ T8923] bridge0: port 2(bridge_slave_1) entered disabled state [ 390.730546][ T8923] bridge_slave_0: left allmulticast mode [ 390.766496][ T8923] bridge_slave_0: left promiscuous mode [ 390.798905][ T8923] bridge0: port 1(bridge_slave_0) entered disabled state [ 391.862086][ T8923] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 391.992220][ T8923] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 392.057484][ T8923] bond0 (unregistering): Released all slaves [ 392.210455][T10695] netlink: 346 bytes leftover after parsing attributes in process `syz.4.825'. [ 392.268627][ T5292] 8021q: adding VLAN 0 to HW filter on device eth1 [ 393.517893][T10724] netlink: 330 bytes leftover after parsing attributes in process `syz.5.827'. [ 393.626310][ T8923] hsr_slave_0: left promiscuous mode [ 393.653266][ T8923] hsr_slave_1: left promiscuous mode [ 393.671206][ T8923] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 393.696370][ T8923] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 393.725154][ T8923] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 393.751067][ T8923] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 393.803808][ T8923] veth1_vlan: left promiscuous mode [ 393.823222][ T8923] veth0_vlan: left promiscuous mode [ 394.589303][ T5292] 8021q: adding VLAN 0 to HW filter on device eth2 [ 395.047873][T10745] netlink: 338 bytes leftover after parsing attributes in process `syz.5.829'. [ 395.333933][T10699] Process accounting paused [ 395.348965][T10755] ptrace attach of "ci-qemu-gce-upstream-auto/syz-executor exec"[10188] was attempted by ""[10755] [ 395.713507][T10767] random: crng reseeded on system resumption [ 395.890902][T10777] Unrecognized hibernate image header format! [ 395.942180][T10777] PM: hibernation: Image mismatch: architecture specific data [ 395.995193][T10767] hub 1-0:1.0: USB hub found [ 396.032668][T10767] hub 1-0:1.0: 1 port detected [ 396.175672][T10770] hub 1-0:1.0: USB hub found [ 396.208493][T10770] hub 1-0:1.0: 1 port detected [ 396.605972][T10790] usb usb20: check_ctrlrecip: process 10790 (syz.4.833) requesting ep 01 but needs 81 [ 396.671816][T10790] usb usb20: usbfs: process 10790 (syz.4.833) did not claim interface 0 before use [ 397.006495][ T5292] 8021q: adding VLAN 0 to HW filter on device eth3 [ 397.233541][ T30] audit: type=1800 audit(1783460474.224:11): pid=10802 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.837" name="version" dev="configfs" ino=38158 res=0 errno=0 [ 397.608649][T10791] Process accounting resumed [ 399.210603][ T5292] 8021q: adding VLAN 0 to HW filter on device eth4 [ 400.676741][ T30] audit: type=1800 audit(1783460477.682:12): pid=10862 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.844" name="lu_gp_id" dev="configfs" ino=38479 res=0 errno=0 [ 402.579425][T10889] syz.4.848: vmalloc error: size 107752139522048, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 402.667611][T10889] CPU: 0 UID: 0 PID: 10889 Comm: syz.4.848 Tainted: G L syzkaller #0 PREEMPT(full) [ 402.667642][T10889] Tainted: [L]=SOFTLOCKUP [ 402.667649][T10889] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 402.667659][T10889] Call Trace: [ 402.667666][T10889] [ 402.667673][T10889] dump_stack_lvl+0x100/0x190 [ 402.667699][T10889] warn_alloc.cold+0x94/0xa8 [ 402.667719][T10889] ? __pfx_warn_alloc+0x10/0x10 [ 402.667739][T10889] ? __bfs+0x150/0x2a0 [ 402.667772][T10889] ? check_noncircular+0x97/0x160 [ 402.667803][T10889] __vmalloc_node_range_noprof+0x136c/0x1630 [ 402.667829][T10889] ? check_prev_add+0xfe/0xe60 [ 402.667852][T10889] ? check_prev_add+0xfe/0xe60 [ 402.667880][T10889] ? __lock_acquire+0xd5b/0x1a40 [ 402.667906][T10889] ? disksize_store+0x11a/0x4d0 [ 402.667932][T10889] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 402.667959][T10889] ? __pfx___might_resched+0x10/0x10 [ 402.667985][T10889] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 402.668014][T10889] ? disksize_store+0x11a/0x4d0 [ 402.668031][T10889] __vmalloc_node_noprof+0xad/0xf0 [ 402.668056][T10889] ? disksize_store+0x11a/0x4d0 [ 402.668076][T10889] disksize_store+0x11a/0x4d0 [ 402.668094][T10889] ? sysfs_file_kobj+0xe4/0x290 [ 402.668117][T10889] ? __pfx_disksize_store+0x10/0x10 [ 402.668134][T10889] dev_attr_store+0x58/0x80 [ 402.668158][T10889] ? __pfx_dev_attr_store+0x10/0x10 [ 402.668185][T10889] sysfs_kf_write+0xf2/0x150 [ 402.668215][T10889] kernfs_fop_write_iter+0x3e0/0x5f0 [ 402.668232][T10889] ? __pfx_sysfs_kf_write+0x10/0x10 [ 402.668256][T10889] vfs_write+0x6ac/0x1050 [ 402.668283][T10889] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 402.668305][T10889] ? __pfx_vfs_write+0x10/0x10 [ 402.668346][T10889] ksys_write+0x12a/0x250 [ 402.668373][T10889] ? __pfx_ksys_write+0x10/0x10 [ 402.668399][T10889] ? arch_syscall_is_vdso_sigreturn+0xb6/0x200 [ 402.668428][T10889] ? syscall_user_dispatch+0x76/0x130 [ 402.668461][T10889] do_syscall_64+0x115/0x840 [ 402.668488][T10889] ? clear_bhb_loop+0x40/0x90 [ 402.668510][T10889] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 402.668528][T10889] RIP: 0033:0x7f125cf9de59 [ 402.668545][T10889] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 402.668562][T10889] RSP: 002b:00007f125de4c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 402.668581][T10889] RAX: ffffffffffffffda RBX: 00007f125d225fa0 RCX: 00007f125cf9de59 [ 402.668593][T10889] RDX: 0000000000003dec RSI: 00002000000001c0 RDI: 0000000000000005 [ 402.668604][T10889] RBP: 00007f125d033e6f R08: 0000000000000000 R09: 0000000000000000 [ 402.668614][T10889] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 402.668624][T10889] R13: 00007f125d226038 R14: 00007f125d225fa0 R15: 00007fff75734258 [ 402.668648][T10889] [ 402.670360][T10889] Mem-Info: [ 404.178029][T10889] active_anon:17211 inactive_anon:7 isolated_anon:0 [ 404.178029][T10889] active_file:1758 inactive_file:56954 isolated_file:0 [ 404.178029][T10889] unevictable:768 dirty:885 writeback:0 [ 404.178029][T10889] slab_reclaimable:11565 slab_unreclaimable:94329 [ 404.178029][T10889] mapped:26364 shmem:8667 pagetables:1192 [ 404.178029][T10889] sec_pagetables:0 bounce:0 [ 404.178029][T10889] kernel_misc_reclaimable:0 [ 404.178029][T10889] free:1306988 free_pcp:9413 free_cma:0 [ 404.473677][T10889] Node 0 active_anon:50168kB inactive_anon:0kB active_file:7032kB inactive_file:227460kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:105392kB dirty:3548kB writeback:0kB shmem:14472kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:4096kB kernel_stack:11904kB pagetables:4620kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 404.685909][T10889] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:356kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:16kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:140kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 404.828245][T10889] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 405.083222][T10889] lowmem_reserve[]: 0 2473 2473 2473 2473 [ 405.117664][T10889] Node 0 DMA32 free:1292936kB boost:0kB min:34012kB low:42512kB high:51012kB reserved_highatomic:0KB free_highatomic:0KB active_anon:49908kB inactive_anon:0kB active_file:7032kB inactive_file:227460kB unevictable:1536kB writepending:3652kB zspages:0kB present:3129332kB managed:2532616kB mlocked:0kB bounce:0kB free_pcp:42520kB local_pcp:42520kB free_cma:0kB [ 405.344159][T10889] lowmem_reserve[]: 0 0 0 0 0 [ 405.374009][T10889] Node 0 Normal free:0kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:396kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 405.462226][ T5742] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 405.570133][T10889] lowmem_reserve[]: 0 0 0 0 0 [ 405.617877][T10889] Node 1 Normal free:3932308kB boost:0kB min:55880kB low:69848kB high:83816kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:356kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 405.856818][T10889] lowmem_reserve[]: 0 0 0 0 0 [ 405.893074][T10889] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 405.956482][T10889] Node 0 DMA32: 1636*4kB (UM) 687*8kB (UM) 1949*16kB (UME) 1682*32kB (UME) 593*64kB (UME) 224*128kB (UME) 51*256kB (UME) 4*512kB (UM) 26*1024kB (UM) 3*2048kB (ME) 264*4096kB (UM) = 1292888kB [ 406.062968][T10889] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 406.123251][T10889] Node 1 Normal: 11*4kB (UM) 7*8kB (UM) 13*16kB (U) 15*32kB (U) 8*64kB (U) 11*128kB (U) 4*256kB (UM) 3*512kB (UM) 1*1024kB (M) 3*2048kB (U) 957*4096kB (UM) = 3932308kB [ 406.198918][T10889] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 406.248014][T10889] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 406.308572][T10889] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 406.367220][T10889] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 406.436178][T10889] 63687 total pagecache pages [ 406.457116][T10889] 41 pages in swap cache [ 406.483093][T10889] Free swap = 124820kB [ 406.504916][T10889] Total swap = 124996kB [ 406.536266][T10889] 2097051 pages RAM [ 406.563596][T10889] 0 pages HighMem/MovableOnly [ 406.582981][T10889] 432183 pages reserved [ 406.603800][T10889] 0 pages cma reserved [ 406.793727][T10889] Process accounting resumed [ 408.421319][T10933] Process accounting paused [ 409.261603][T10979] netlink: 338 bytes leftover after parsing attributes in process `syz.5.861'. [ 409.931393][T10983] netlink: 8 bytes leftover after parsing attributes in process `syz.5.862'. [ 410.013711][T10984] netlink: 8 bytes leftover after parsing attributes in process `syz.5.862'. [ 410.300930][T10992] sctp: [Deprecated]: syz.3.863 (pid 10992) Use of struct sctp_assoc_value in delayed_ack socket option. [ 410.300930][T10992] Use struct sctp_sack_info instead [ 410.968755][T11008] ubi0: attaching mtd0 [ 411.017996][T11008] ubi0 error: ubi_add_to_av: two LEBs with same sequence number 2 [ 411.061439][T11008] eraseblock attaching information dump: [ 411.130540][T11008] ec 1 [ 411.166920][T11008] pnum 1 [ 411.235588][T11008] lnum 1 [ 411.308640][T11008] scrub 0 [ 411.348758][T11008] sqnum 2 [ 411.388095][T11008] Volume identifier header dump: [ 411.449142][T11008] magic 55424921 [ 411.535197][T11008] version 1 [ 411.601893][T11008] vol_type 1 [ 411.650307][T11008] copy_flag 0 [ 411.694749][T11008] compat 5 [ 411.759078][T11008] vol_id 2147479551 [ 411.828575][T11008] lnum 1 [ 411.889013][T11008] data_size 0 [ 411.942241][T11008] used_ebs 0 [ 412.002512][T11008] data_pad 0 [ 412.049636][T11008] sqnum 2 [ 412.106494][T11008] hdr_crc 7beff9af [ 412.154691][T11008] Volume identifier header hexdump: [ 412.544557][T11008] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 413.817567][T11072] nvme_fcloop: unknown parameter or missing value '' [ 415.063905][T11094] random: crng reseeded on system resumption [ 415.151816][T11094] Restarting kernel threads ... [ 415.216633][T11094] Done restarting kernel threads. [ 416.302200][T11118] netlink: 93 bytes leftover after parsing attributes in process `syz.0.882'. [ 416.365389][T11121] nbd: nbd4129 already in use [ 417.714481][T11142] hub 1-0:1.0: USB hub found [ 417.768580][T11142] hub 1-0:1.0: 1 port detected [ 425.671998][T11251] hub 1-0:1.0: USB hub found [ 425.707996][T11251] hub 1-0:1.0: 1 port detected [ 426.400664][T11247] sd 0:0:1:0: PR command failed: 1026 [ 426.427690][T11247] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 426.464124][T11247] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 426.902793][ T30] audit: type=1800 audit(1783460514.036:13): pid=11271 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.910" name="features" dev="configfs" ino=41039 res=0 errno=0 [ 426.974847][T11268] can0: slcan on ttyS2. [ 427.307444][T11266] can0 (unregistered): slcan off ttyS2. [ 427.689259][T11285] HfR: entered promiscuous mode [ 427.697477][T11283] Process accounting paused [ 428.438207][T11295] hub 1-0:1.0: USB hub found [ 428.488843][T11295] hub 1-0:1.0: 1 port detected [ 429.891183][T11319] FAULT_INJECTION: forcing a failure. [ 429.891183][T11319] name fail_futex, interval 1, probability 0, space 0, times 0 [ 430.011394][T11319] CPU: 0 UID: 0 PID: 11319 Comm: syz.0.921 Tainted: G L syzkaller #0 PREEMPT(full) [ 430.011426][T11319] Tainted: [L]=SOFTLOCKUP [ 430.011432][T11319] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 430.011443][T11319] Call Trace: [ 430.011453][T11319] [ 430.011460][T11319] dump_stack_lvl+0x100/0x190 [ 430.011486][T11319] should_fail_ex.cold+0x5/0xa [ 430.011507][T11319] get_futex_key+0x1d2/0x14f0 [ 430.011539][T11319] ? __pfx_get_futex_key+0x10/0x10 [ 430.011568][T11319] ? _raw_write_unlock+0x28/0x50 [ 430.011595][T11319] ? keyring_instantiate+0x101/0x300 [ 430.011622][T11319] futex_wake+0xf4/0x5e0 [ 430.011643][T11319] ? __pfx___key_instantiate_and_link+0x10/0x10 [ 430.011666][T11319] ? __pfx_futex_wake+0x10/0x10 [ 430.011685][T11319] ? key_alloc+0xb8b/0x1310 [ 430.011708][T11319] ? keyring_free_preparse+0x9/0x10 [ 430.011729][T11319] ? key_instantiate_and_link+0x39d/0x4b0 [ 430.011751][T11319] ? key_alloc+0xbb4/0x1310 [ 430.011782][T11319] do_futex+0x2b2/0x440 [ 430.011800][T11319] ? __pfx_do_futex+0x10/0x10 [ 430.011819][T11319] ? lsm_blob_alloc+0x68/0x90 [ 430.011847][T11319] __x64_sys_futex+0x34f/0x4d0 [ 430.011868][T11319] ? __pfx___x64_sys_futex+0x10/0x10 [ 430.011894][T11319] do_syscall_64+0x115/0x840 [ 430.011921][T11319] ? clear_bhb_loop+0x40/0x90 [ 430.011943][T11319] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 430.011962][T11319] RIP: 0033:0x7f047f79de59 [ 430.011979][T11319] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 430.011997][T11319] RSP: 002b:00007f047d9d50e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 430.012015][T11319] RAX: ffffffffffffffda RBX: 00007f047fa26098 RCX: 00007f047f79de59 [ 430.012027][T11319] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f047fa2609c [ 430.012037][T11319] RBP: 00007f047fa26090 R08: 0000000000000001 R09: 0000000000000000 [ 430.012048][T11319] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 430.012058][T11319] R13: 00007f047fa26128 R14: 00007ffef8c96600 R15: 00007ffef8c966e8 [ 430.012080][T11319] [ 431.388066][ T30] audit: type=1804 audit(1783460518.539:14): pid=11339 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.925" name="/newroot/39/file0" dev="tmpfs" ino=220 res=1 errno=0 [ 432.750723][T11351] netlink: 338 bytes leftover after parsing attributes in process `syz.3.928'. [ 433.066109][T11359] hub 1-0:1.0: USB hub found [ 433.100725][T11359] hub 1-0:1.0: 1 port detected [ 433.410581][T11371] hub 1-0:1.0: USB hub found [ 433.446770][T11371] hub 1-0:1.0: 1 port detected [ 434.884942][T11392] vivid-007: ================= START STATUS ================= [ 434.933827][T11392] vivid-007: Enable Output Cropping: true [ 434.990634][T11392] vivid-007: Enable Output Composing: true [ 435.087824][T11392] vivid-007: Enable Output Scaler: true [ 435.178767][T11392] vivid-007: Tx RGB Quantization Range: Automatic [ 435.258502][T11392] vivid-007: Transmit Mode: HDMI [ 435.301526][T11392] vivid-007: Hotplug Present: 0x00000000 [ 435.359465][T11392] vivid-007: RxSense Present: 0x00000000 [ 435.445684][T11392] vivid-007: EDID Present: 0x00000000 [ 435.525708][T11392] vivid-007: ================== END STATUS ================== [ 435.878413][T11394] syz.3.936(11394): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 437.731155][T11416] zswap: compressor 000 not available [ 438.268421][T11413] Process accounting paused [ 439.098785][T11415] Process accounting resumed [ 439.200310][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.210045][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 439.249336][T11439] pim6reg: entered allmulticast mode [ 443.290020][T11507] netlink: 342 bytes leftover after parsing attributes in process `syz.3.956'. [ 445.682743][T11556] hub 1-0:1.0: USB hub found [ 445.712069][T11556] hub 1-0:1.0: 1 port detected [ 446.505372][T11570] FAULT_INJECTION: forcing a failure. [ 446.505372][T11570] name failslab, interval 1, probability 0, space 0, times 0 [ 446.587256][T11570] CPU: 0 UID: 0 PID: 11570 Comm: syz.3.966 Tainted: G L syzkaller #0 PREEMPT(full) [ 446.587288][T11570] Tainted: [L]=SOFTLOCKUP [ 446.587294][T11570] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 446.587305][T11570] Call Trace: [ 446.587311][T11570] [ 446.587319][T11570] dump_stack_lvl+0x100/0x190 [ 446.587343][T11570] should_fail_ex.cold+0x5/0xa [ 446.587365][T11570] should_failslab+0xc2/0x120 [ 446.587390][T11570] kmem_cache_alloc_noprof+0x91/0x6a0 [ 446.587411][T11570] ? __pfx_map_id_range_down+0x10/0x10 [ 446.587435][T11570] ? security_inode_alloc+0x3b/0x2c0 [ 446.587466][T11570] security_inode_alloc+0x3b/0x2c0 [ 446.587485][T11570] inode_init_always_gfp+0xc77/0xfb0 [ 446.587517][T11570] alloc_inode+0x8e/0x250 [ 446.587538][T11570] path_from_stashed+0x25b/0x750 [ 446.587556][T11570] ? do_raw_spin_unlock+0x145/0x1e0 [ 446.587579][T11570] ns_get_path+0x60/0x80 [ 446.587596][T11570] proc_ns_get_link+0x25b/0x2e0 [ 446.587621][T11570] ? __pfx_proc_ns_get_link+0x10/0x10 [ 446.587649][T11570] ? atime_needs_update+0x8b/0x6b0 [ 446.587673][T11570] pick_link+0xd17/0x13c0 [ 446.587697][T11570] ? __pfx_proc_ns_get_link+0x10/0x10 [ 446.587724][T11570] step_into_slowpath+0x9ba/0xf90 [ 446.587752][T11570] ? rcu_is_watching+0x12/0xc0 [ 446.587771][T11570] ? __pfx_step_into_slowpath+0x10/0x10 [ 446.587800][T11570] ? find_held_lock+0x2b/0x80 [ 446.587828][T11570] path_openat+0x13b5/0x4280 [ 446.587866][T11570] ? __pfx_path_openat+0x10/0x10 [ 446.587900][T11570] do_file_open+0x20e/0x430 [ 446.587930][T11570] ? __pfx_do_file_open+0x10/0x10 [ 446.587974][T11570] ? alloc_fd+0x471/0x7a0 [ 446.588003][T11570] ? do_getname+0x191/0x390 [ 446.588025][T11570] do_sys_openat2+0x10f/0x1e0 [ 446.588047][T11570] ? __pfx_do_sys_openat2+0x10/0x10 [ 446.588077][T11570] __x64_sys_openat+0x12d/0x210 [ 446.588099][T11570] ? __pfx___x64_sys_openat+0x10/0x10 [ 446.588123][T11570] ? do_raw_spin_unlock+0x145/0x1e0 [ 446.588146][T11570] do_syscall_64+0x115/0x840 [ 446.588174][T11570] ? clear_bhb_loop+0x40/0x90 [ 446.588196][T11570] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 446.588214][T11570] RIP: 0033:0x7fcc15d5e68e [ 446.588230][T11570] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 446.588248][T11570] RSP: 002b:00007fcc16d24ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 446.588267][T11570] RAX: ffffffffffffffda RBX: 00007fcc16d256c0 RCX: 00007fcc15d5e68e [ 446.588279][T11570] RDX: 0000000000000002 RSI: 00007fcc16d24f90 RDI: ffffffffffffff9c [ 446.588290][T11570] RBP: 00007fcc15e33e6f R08: 0000000000000000 R09: 0000000000000000 [ 446.588302][T11570] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 446.588312][T11570] R13: 00007fcc16026038 R14: 00007fcc16025fa0 R15: 00007ffc1145e5b8 [ 446.588335][T11570] [ 448.564040][T11587] hub 1-0:1.0: USB hub found [ 448.645112][T11587] hub 1-0:1.0: 1 port detected [ 449.274579][T11606] FAULT_INJECTION: forcing a failure. [ 449.274579][T11606] name (null), interval 1, probability 0, space 0, times 1 [ 449.398070][T11606] CPU: 0 UID: 0 PID: 11606 Comm: syz.0.972 Tainted: G L syzkaller #0 PREEMPT(full) [ 449.398103][T11606] Tainted: [L]=SOFTLOCKUP [ 449.398109][T11606] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 449.398119][T11606] Call Trace: [ 449.398126][T11606] [ 449.398134][T11606] dump_stack_lvl+0x100/0x190 [ 449.398159][T11606] should_fail_ex.cold+0x5/0xa [ 449.398179][T11606] null_queue_rq+0x24d/0xfb0 [ 449.398208][T11606] null_queue_rqs+0xe9/0x2f0 [ 449.398231][T11606] ? __pfx_null_queue_rqs+0x10/0x10 [ 449.398260][T11606] __blk_mq_flush_list+0x9a/0xc0 [ 449.398282][T11606] blk_mq_dispatch_queue_requests+0x184/0x7c0 [ 449.398314][T11606] blk_mq_flush_plug_list+0x1f2/0x600 [ 449.398342][T11606] ? lru_add+0x7/0x1430 [ 449.398372][T11606] ? __pfx_blk_mq_flush_plug_list+0x10/0x10 [ 449.398406][T11606] __blk_flush_plug+0x2c4/0x4b0 [ 449.398446][T11606] ? __pfx___blk_flush_plug+0x10/0x10 [ 449.398470][T11606] ? __pfx_blkdev_get_block+0x10/0x10 [ 449.398502][T11606] blk_finish_plug+0x5c/0xa0 [ 449.398528][T11606] read_pages+0x5f7/0xdf0 [ 449.398559][T11606] ? __pfx_read_pages+0x10/0x10 [ 449.398595][T11606] page_cache_ra_order+0x75e/0xed0 [ 449.398629][T11606] page_cache_async_ra+0x7bb/0xd30 [ 449.398660][T11606] filemap_fault+0xfc8/0x3130 [ 449.398694][T11606] ? __pfx_filemap_fault+0x10/0x10 [ 449.398726][T11606] ? blk_cgroup_congested+0x136/0x270 [ 449.398752][T11606] ? blk_cgroup_congested+0x136/0x270 [ 449.398783][T11606] ? __pfx_filemap_map_pages+0x10/0x10 [ 449.398808][T11606] __do_fault+0x10b/0x440 [ 449.398830][T11606] do_fault+0xeb2/0x1750 [ 449.398865][T11606] __handle_mm_fault+0x187d/0x2a00 [ 449.398895][T11606] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 449.398916][T11606] ? __pfx___handle_mm_fault+0x10/0x10 [ 449.398946][T11606] ? pte_offset_map_lock+0x174/0x320 [ 449.398968][T11606] ? find_held_lock+0x2b/0x80 [ 449.398995][T11606] ? follow_page_pte+0x4d0/0x13f0 [ 449.399023][T11606] handle_mm_fault+0x37b/0xa30 [ 449.399056][T11606] __get_user_pages+0x1178/0x32a0 [ 449.399088][T11606] ? __pfx___get_user_pages+0x10/0x10 [ 449.399118][T11606] populate_vma_page_range+0x267/0x3f0 [ 449.399147][T11606] ? __pfx_populate_vma_page_range+0x10/0x10 [ 449.399171][T11606] ? __pfx_find_vma_intersection+0x10/0x10 [ 449.399194][T11606] ? do_mmap+0x93f/0x12f0 [ 449.399219][T11606] __mm_populate+0x107/0x3a0 [ 449.399245][T11606] ? __pfx___mm_populate+0x10/0x10 [ 449.399270][T11606] ? up_write+0x2e5/0x5c0 [ 449.399289][T11606] vm_mmap_pgoff+0x37f/0x470 [ 449.399314][T11606] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 449.399335][T11606] ? __fget_files+0x215/0x3d0 [ 449.399364][T11606] ? __fget_files+0x21f/0x3d0 [ 449.399394][T11606] ksys_mmap_pgoff+0x3cb/0x610 [ 449.399423][T11606] ? __x64_sys_futex+0x358/0x4d0 [ 449.399443][T11606] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 449.399465][T11606] ? xfd_validate_state+0x129/0x190 [ 449.399489][T11606] __x64_sys_mmap+0x125/0x190 [ 449.399512][T11606] do_syscall_64+0x115/0x840 [ 449.399541][T11606] ? clear_bhb_loop+0x40/0x90 [ 449.399563][T11606] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 449.399582][T11606] RIP: 0033:0x7f047f79de59 [ 449.399598][T11606] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 449.399616][T11606] RSP: 002b:00007f047d9b4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 449.399634][T11606] RAX: ffffffffffffffda RBX: 00007f047fa26180 RCX: 00007f047f79de59 [ 449.399646][T11606] RDX: 0000000000000ffb RSI: 0000000000810004 RDI: 0000000000000000 [ 449.399657][T11606] RBP: 00007f047f833e6f R08: 0000000000000005 R09: 0000000000008000 [ 449.399668][T11606] R10: 0008000000008012 R11: 0000000000000246 R12: 0000000000000000 [ 449.399678][T11606] R13: 00007f047fa26218 R14: 00007f047fa26180 R15: 00007ffef8c966e8 [ 449.399702][T11606] [ 455.252305][T11680] netlink: 4 bytes leftover after parsing attributes in process `syz.0.986'. [ 455.758477][ T8707] null_blk: rq ffff888026578300 timed out [ 455.764727][ T8707] timeout error, dev nullb0, sector 256 op 0x0:(READ) flags 0x84700 phys_seg 8 prio class 2 [ 456.354629][T11694] hub 1-0:1.0: USB hub found [ 456.396539][T11694] hub 1-0:1.0: 1 port detected [ 456.601247][T11698] hub 1-0:1.0: USB hub found [ 456.646521][T11698] hub 1-0:1.0: 1 port detected [ 456.905671][T11702] netlink: 'syz.4.993': attribute type 1 has an invalid length. [ 456.983064][T11704] hub 1-0:1.0: USB hub found [ 457.012669][T11704] hub 1-0:1.0: 1 port detected [ 457.210206][T11707] hub 1-0:1.0: USB hub found [ 457.264730][T11707] hub 1-0:1.0: 1 port detected [ 459.079796][T11736] Process accounting resumed [ 460.422814][T11761] openvswitch: HfR: Dropping previously announced user features [ 460.861919][T11758] hub 1-0:1.0: USB hub found [ 460.901981][T11758] hub 1-0:1.0: 1 port detected [ 462.832122][T11803] FAULT_INJECTION: forcing a failure. [ 462.832122][T11803] name fail_futex, interval 1, probability 0, space 0, times 0 [ 462.908938][T11803] CPU: 0 UID: 0 PID: 11803 Comm: syz.0.1013 Tainted: G L syzkaller #0 PREEMPT(full) [ 462.908970][T11803] Tainted: [L]=SOFTLOCKUP [ 462.908977][T11803] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 462.908988][T11803] Call Trace: [ 462.908994][T11803] [ 462.909001][T11803] dump_stack_lvl+0x100/0x190 [ 462.909026][T11803] should_fail_ex.cold+0x5/0xa [ 462.909047][T11803] get_futex_key+0x1d2/0x14f0 [ 462.909078][T11803] ? __pfx_get_futex_key+0x10/0x10 [ 462.909107][T11803] ? do_anonymous_page+0x9b1/0x2080 [ 462.909139][T11803] futex_wake+0xf4/0x5e0 [ 462.909163][T11803] ? __pfx_futex_wake+0x10/0x10 [ 462.909187][T11803] ? __pfx___handle_mm_fault+0x10/0x10 [ 462.909214][T11803] ? __pfx___css_rstat_updated+0x10/0x10 [ 462.909245][T11803] do_futex+0x2b2/0x440 [ 462.909263][T11803] ? __pfx_do_futex+0x10/0x10 [ 462.909279][T11803] ? find_held_lock+0x2b/0x80 [ 462.909298][T11803] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 462.909319][T11803] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 462.909345][T11803] __x64_sys_futex+0x34f/0x4d0 [ 462.909372][T11803] ? exc_page_fault+0x6f/0xd0 [ 462.909399][T11803] ? __pfx___x64_sys_futex+0x10/0x10 [ 462.909425][T11803] do_syscall_64+0x115/0x840 [ 462.909452][T11803] ? clear_bhb_loop+0x40/0x90 [ 462.909474][T11803] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 462.909493][T11803] RIP: 0033:0x7f047f79de59 [ 462.909510][T11803] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 462.909531][T11803] RSP: 002b:00007f047d9f60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 462.909551][T11803] RAX: ffffffffffffffda RBX: 00007f047fa25fa8 RCX: 00007f047f79de59 [ 462.909563][T11803] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f047fa25fac [ 462.909574][T11803] RBP: 00007f047fa25fa0 R08: 0000000000000001 R09: 0000000000000000 [ 462.909585][T11803] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 462.909596][T11803] R13: 00007f047fa26038 R14: 00007ffef8c96600 R15: 00007ffef8c966e8 [ 462.909619][T11803] [ 463.229469][ T30] audit: type=1800 audit(1783461573.544:15): pid=11800 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1012" name="dbroot" dev="configfs" ino=43994 res=0 errno=0 [ 463.619027][T11811] FAULT_INJECTION: forcing a failure. [ 463.619027][T11811] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 463.663046][T11811] CPU: 0 UID: 0 PID: 11811 Comm: syz.3.1016 Tainted: G L syzkaller #0 PREEMPT(full) [ 463.663076][T11811] Tainted: [L]=SOFTLOCKUP [ 463.663083][T11811] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 463.663093][T11811] Call Trace: [ 463.663099][T11811] [ 463.663106][T11811] dump_stack_lvl+0x100/0x190 [ 463.663131][T11811] should_fail_ex.cold+0x5/0xa [ 463.663152][T11811] _copy_to_user+0x32/0xd0 [ 463.663177][T11811] simple_read_from_buffer+0xcb/0x170 [ 463.663206][T11811] proc_fail_nth_read+0x1af/0x230 [ 463.663228][T11811] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 463.663252][T11811] ? rw_verify_area+0xce/0x6d0 [ 463.663274][T11811] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 463.663296][T11811] vfs_read+0x1e4/0xb40 [ 463.663331][T11811] ? __pfx_vfs_read+0x10/0x10 [ 463.663356][T11811] ? __fget_files+0x215/0x3d0 [ 463.663386][T11811] ? __fget_files+0x21f/0x3d0 [ 463.663417][T11811] ksys_read+0x12a/0x250 [ 463.663442][T11811] ? __pfx_ksys_read+0x10/0x10 [ 463.663477][T11811] do_syscall_64+0x115/0x840 [ 463.663503][T11811] ? clear_bhb_loop+0x40/0x90 [ 463.663524][T11811] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 463.663542][T11811] RIP: 0033:0x7fcc15d5e68e [ 463.663558][T11811] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 463.663575][T11811] RSP: 002b:00007fcc16d24fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 463.663593][T11811] RAX: ffffffffffffffda RBX: 00007fcc16d256c0 RCX: 00007fcc15d5e68e [ 463.663604][T11811] RDX: 000000000000000f RSI: 00007fcc16d250a0 RDI: 0000000000000004 [ 463.663614][T11811] RBP: 00007fcc16d25090 R08: 0000000000000000 R09: 0000000000000000 [ 463.663625][T11811] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 463.663634][T11811] R13: 00007fcc16026038 R14: 00007fcc16025fa0 R15: 00007ffc1145e5b8 [ 463.663657][T11811] [ 468.758293][T11893] Process accounting resumed [ 469.293552][ T30] audit: type=1804 audit(1783461579.642:16): pid=11908 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.1037" name="/newroot/227/file0" dev="tmpfs" ino=1215 res=1 errno=0 [ 471.220924][T11943] netlink: 342 bytes leftover after parsing attributes in process `syz.4.1044'. [ 471.255325][T11943] IPv6: NLM_F_CREATE should be specified when creating new route [ 471.283560][T11943] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 471.292307][T11943] IPv6: NLM_F_CREATE should be set when creating new route [ 471.299569][T11943] IPv6: NLM_F_CREATE should be set when creating new route [ 476.704769][T12053] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1064'. [ 476.942570][ T5647] Bluetooth: hci0: command 0x0406 tx timeout [ 477.545488][ T30] audit: type=1800 audit(1783461587.930:17): pid=12069 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1068" name="version" dev="configfs" ino=45775 res=0 errno=0 [ 483.051886][T12137] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x78000 [ 483.090400][T12137] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 483.130278][T12137] memcg:ffff88803356a4c1 [ 483.151254][T12137] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 483.185264][T12137] page_type: f5(slab) [ 483.205270][T12137] raw: 00fff00000000040 ffff88813fe3a500 dead000000000100 dead000000000122 [ 483.247839][T12137] raw: 0000000000000000 0000000800040004 00000000f5000000 ffff88803356a4c1 [ 483.285038][T12137] head: 00fff00000000040 ffff88813fe3a500 dead000000000100 dead000000000122 [ 483.324877][T12137] head: 0000000000000000 0000000800040004 00000000f5000000 ffff88803356a4c1 [ 483.373250][T12137] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 483.412539][T12137] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 483.481911][T12137] page dumped because: unmovable page [ 483.545786][T12137] page_owner tracks the page as allocated [ 483.581499][T12137] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5636, tgid 5636 (syz-executor), ts 95390736423, free_ts 72745187255 [ 483.697637][T12137] post_alloc_hook+0xfd/0x120 [ 483.718895][T12137] get_page_from_freelist+0xf48/0x3530 [ 483.743560][T12137] __alloc_frozen_pages_noprof+0x299/0x2dc0 [ 483.770698][T12137] new_slab+0xa2/0x650 [ 483.792651][T12137] refill_objects+0xe3/0x410 [ 483.819236][T12137] __pcs_replace_empty_main+0x376/0x680 [ 483.841636][T12137] __kmalloc_noprof+0x66d/0x820 [ 483.866871][T12137] __register_sysctl_table+0xac/0x1650 [ 483.893568][T12137] __addrconf_sysctl_register+0x1a2/0x360 [ 483.921344][T12137] addrconf_sysctl_register+0x163/0x200 [ 483.952614][T12137] ipv6_add_dev+0xaf2/0x1520 [ 483.976587][T12137] addrconf_notify+0x5db/0x1ba0 [ 483.990080][T12137] notifier_call_chain+0x99/0x3f0 [ 484.004279][T12137] call_netdevice_notifiers_info+0xbe/0x110 [ 484.023434][T12137] register_netdevice+0x1998/0x25a0 [ 484.038900][T12137] macvlan_common_newlink+0xf70/0x18b0 [ 484.052560][T12137] page last free pid 5514 tgid 5514 stack trace: [ 484.069324][T12137] __free_frozen_pages+0x79f/0x1090 [ 484.078010][T12137] qlist_free_all+0x47/0xf0 [ 484.099120][T12137] kasan_quarantine_reduce+0x1a0/0x1f0 [ 484.118328][T12137] __kasan_slab_alloc+0x69/0x90 [ 484.140190][T12137] kmem_cache_alloc_noprof+0x26b/0x6a0 [ 484.159480][T12137] do_getname+0x35/0x390 [ 484.172925][T12150] kvm: kvm [12148]: vcpu2, guest rIP: 0xfff0 Unhandled WRMSR(0x187) = 0x8001 [ 484.186834][T12137] __x64_sys_chdir+0xaa/0x280 [ 484.201713][T12137] do_syscall_64+0x115/0x840 [ 484.210052][T12137] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 488.439817][T12220] random: crng reseeded on system resumption [ 490.364581][T12203] Process accounting paused [ 490.717558][T12264] vivid-007: ================= START STATUS ================= [ 490.795727][T12264] vivid-007: Generate PTS: true [ 490.865181][T12264] vivid-007: Generate SCR: true [ 490.897539][T12264] tpg source WxH: 320x240 (Y'CbCr) [ 490.920298][T12264] tpg field: 1 [ 490.937458][T12264] tpg crop: (0,0)/320x240 [ 490.965345][T12264] tpg compose: (0,0)/320x240 [ 490.984117][T12264] tpg colorspace: 8 [ 491.002373][T12264] tpg transfer function: 0/0 [ 491.027001][T12264] tpg Y'CbCr encoding: 0/0 [ 491.047449][T12264] tpg quantization: 0/0 [ 491.067321][T12264] tpg RGB range: 0/2 [ 491.087363][T12264] vivid-007: ================== END STATUS ================== [ 492.650890][T12289] ubi0: attaching mtd0 [ 492.692268][T12289] ubi0 error: ubi_add_to_av: two LEBs with same sequence number 2 [ 492.756124][T12289] eraseblock attaching information dump: [ 492.822039][T12289] ec 1 [ 492.890919][T12289] pnum 1 [ 492.918431][T12289] lnum 1 [ 492.977434][T12289] scrub 0 [ 493.025717][T12289] sqnum 2 [ 493.099086][T12289] Volume identifier header dump: [ 493.171989][T12289] magic 55424921 [ 493.211459][T12289] version 1 [ 493.267577][T12289] vol_type 1 [ 493.344984][T12289] copy_flag 0 [ 493.396718][T12289] compat 5 [ 493.442659][T12289] vol_id 2147479551 [ 493.488663][T12289] lnum 1 [ 493.517150][T12289] data_size 0 [ 493.546115][T12289] used_ebs 0 [ 493.567162][T12289] data_pad 0 [ 493.591146][T12289] sqnum 2 [ 493.613612][T12289] hdr_crc 7beff9af [ 493.645121][T12289] Volume identifier header hexdump: [ 493.866695][T12289] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 495.256085][T12326] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 495.682696][T12321] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 495.700154][T12321] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 495.712686][T12321] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 495.726822][T12321] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 496.096912][T12331] vivid-007: ================= START STATUS ================= [ 496.239440][T12331] vivid-007: Generate PTS: true [ 496.336781][T12331] vivid-007: Generate SCR: true [ 496.436721][T12331] tpg source WxH: 320x240 (Y'CbCr) [ 496.494841][T12331] tpg field: 1 [ 496.523465][T12331] tpg crop: (0,0)/320x240 [ 496.547729][T12331] tpg compose: (0,0)/320x240 [ 496.575285][T12331] tpg colorspace: 8 [ 496.598789][T12331] tpg transfer function: 0/0 [ 496.627592][T12331] tpg Y'CbCr encoding: 0/0 [ 496.654924][T12331] tpg quantization: 0/0 [ 496.679683][T12331] tpg RGB range: 0/2 [ 496.707528][T12331] vivid-007: ================== END STATUS ================== [ 496.923738][ T4946] Bluetooth: hci2: command 0x0c1a tx timeout [ 497.581194][T12364] netlink: 206 bytes leftover after parsing attributes in process `syz.4.1118'. [ 497.719846][ T4946] Bluetooth: hci0: command 0x0406 tx timeout [ 497.726215][ T5647] Bluetooth: hci3: command 0x0c1a tx timeout [ 499.160796][T12389] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1124'. [ 499.790053][ T4946] Bluetooth: hci0: command 0x0406 tx timeout [ 500.350794][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 500.362246][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.902570][ C0] vcan0: j1939_tp_rxtimer: 0xffff888032725000: rx timeout, send abort [ 501.913678][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888032725000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 504.618907][T12439] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1132'. [ 507.550177][T12368] Process accounting paused [ 507.759787][T12478] random: crng reseeded on system resumption [ 508.310069][T12502] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 508.756225][T12508] Ignoring unsupported numa_zonelist_order value: [ 508.814117][T12510] random: crng reseeded on system resumption [ 509.002627][T12512] sg_write: data in/out 262108/21 bytes for SCSI command 0x61-- guessing data in; [ 509.002627][T12512] program syz.0.1144 not setting count and/or reply_len properly [ 511.354580][T12546] netlink: zone id is out of range [ 511.405807][T12546] netlink: zone id is out of range [ 511.453681][T12546] netlink: zone id is out of range [ 511.506368][T12546] netlink: zone id is out of range [ 511.566884][T12546] netlink: zone id is out of range [ 511.621793][T12546] netlink: zone id is out of range [ 511.643910][T12546] netlink: zone id is out of range [ 511.670721][T12546] netlink: zone id is out of range [ 511.698929][T12546] netlink: zone id is out of range [ 511.724366][T12546] netlink: zone id is out of range [ 512.130136][T12560] netlink: 'syz.4.1153': attribute type 2 has an invalid length. [ 512.206073][T12560] netlink: 5 bytes leftover after parsing attributes in process `syz.4.1153'. [ 512.238545][T12555] vhci_hcd: not connected 4 [ 512.726595][T12572] futex_wake_op: syz.4.1156 tries to shift op by -2048; fix this program [ 512.799155][T12572] futex_wake_op: syz.4.1156 tries to shift op by -2048; fix this program [ 512.855642][T12572] 0x000000000001-0x000000020000 : "" [ 512.898118][T12572] ftl_cs: FTL header corrupt! [ 514.576484][T12600] random: crng reseeded on system resumption [ 515.469258][T12618] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1164'. [ 515.716195][T12618] bridge0: port 2(bridge_slave_1) entered disabled state [ 515.767998][T12618] bridge0: entered promiscuous mode [ 518.742106][T12668] syz.4.1171 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 518.837697][T12668] [U]  [ 518.840532][T12668] [U] [ 518.843506][T12668] [U] [ 518.846225][T12668] [U] [ 518.980873][T12668] [U] [ 518.983608][T12668] [U] [ 518.986322][T12668] [U] [ 518.989015][T12668] [U] [ 519.077303][T12668] [U] [ 519.080078][T12668] [U] [ 519.082783][T12668] [U] [ 519.085477][T12668] [U] [ 519.101898][T12672] hub 1-0:1.0: USB hub found [ 519.156358][T12668] [U] [ 519.159108][T12668] [U] [ 519.161814][T12668] [U] [ 519.164505][T12668] [U] [ 519.171234][T12672] hub 1-0:1.0: 1 port detected [ 519.229343][T12668] [U] [ 519.232103][T12668] [U] [ 519.234795][T12668] [U] [ 519.237497][T12668] [U] [ 519.306562][T12668] [U] [ 519.309302][T12668] [U] [ 519.312002][T12668] [U] [ 519.314701][T12668] [U] [ 519.386418][T12668] [U] [ 519.389156][T12668] [U] [ 519.391850][T12668] [U] [ 519.394538][T12668] [U] [ 519.507453][T12668] [U] [ 519.628126][T12681] bond0: invalid ARP target specified [ 520.136412][T12695] FAULT_INJECTION: forcing a failure. [ 520.136412][T12695] name failslab, interval 1, probability 0, space 0, times 0 [ 520.251786][T12695] CPU: 0 UID: 0 PID: 12695 Comm: syz.3.1178 Tainted: G L syzkaller #0 PREEMPT(full) [ 520.251818][T12695] Tainted: [L]=SOFTLOCKUP [ 520.251824][T12695] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 520.251835][T12695] Call Trace: [ 520.251841][T12695] [ 520.251848][T12695] dump_stack_lvl+0x100/0x190 [ 520.251910][T12695] should_fail_ex.cold+0x5/0xa [ 520.251940][T12695] should_failslab+0xc2/0x120 [ 520.251966][T12695] __kmalloc_noprof+0xfc/0x820 [ 520.251991][T12695] ? asymmetric_key_generate_id+0x7e/0x180 [ 520.252091][T12695] asymmetric_key_generate_id+0x7e/0x180 [ 520.252115][T12695] x509_cert_parse+0x5c1/0x910 [ 520.252138][T12695] ? ___sys_sendmsg+0x190/0x1e0 [ 520.252230][T12695] ? __sys_sendmsg+0x160/0x210 [ 520.252248][T12695] ? do_syscall_64+0x115/0x840 [ 520.252278][T12695] pkcs7_extract_cert+0xa4/0x380 [ 520.252308][T12695] asn1_ber_decoder+0x12b3/0x2170 [ 520.252372][T12695] ? __pfx_asn1_ber_decoder+0x10/0x10 [ 520.252403][T12695] ? kasan_save_track+0x14/0x30 [ 520.252423][T12695] ? __kasan_kmalloc+0xaa/0xb0 [ 520.252452][T12695] ? __kmalloc_cache_noprof+0x2e5/0x6c0 [ 520.252481][T12695] ? pkcs7_parse_message+0x15f/0x870 [ 520.252511][T12695] pkcs7_parse_message+0x289/0x870 [ 520.252542][T12695] verify_pkcs7_signature+0x30/0xa0 [ 520.252584][T12695] valid_regdb+0x211/0x590 [ 520.252646][T12695] ? __pfx_valid_regdb+0x10/0x10 [ 520.252665][T12695] ? __kasan_kmalloc+0xaa/0xb0 [ 520.252690][T12695] reg_reload_regdb+0x11a/0x460 [ 520.252729][T12695] ? __pfx_reg_reload_regdb+0x10/0x10 [ 520.252755][T12695] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 520.252809][T12695] ? nl80211_pre_doit+0x19a/0xae0 [ 520.252840][T12695] genl_family_rcv_msg_doit+0x214/0x300 [ 520.252902][T12695] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 520.252932][T12695] ? genl_get_cmd+0x3e7/0x760 [ 520.252970][T12695] ? bpf_lsm_capable+0x9/0x10 [ 520.252993][T12695] ? security_capable+0x80/0x260 [ 520.253072][T12695] genl_rcv_msg+0x560/0x800 [ 520.253106][T12695] ? __pfx_genl_rcv_msg+0x10/0x10 [ 520.253125][T12695] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 520.253152][T12695] ? __pfx_nl80211_reload_regdb+0x10/0x10 [ 520.253174][T12695] ? __pfx_nl80211_post_doit+0x10/0x10 [ 520.253200][T12695] netlink_rcv_skb+0x159/0x420 [ 520.253234][T12695] ? __pfx_genl_rcv_msg+0x10/0x10 [ 520.253254][T12695] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 520.253290][T12695] ? netlink_deliver_tap+0x1ae/0xcc0 [ 520.253319][T12695] genl_rcv+0x28/0x40 [ 520.253345][T12695] netlink_unicast+0x585/0x850 [ 520.253376][T12695] ? __pfx_netlink_unicast+0x10/0x10 [ 520.253408][T12695] netlink_sendmsg+0x8b0/0xda0 [ 520.253439][T12695] ? __pfx_netlink_sendmsg+0x10/0x10 [ 520.253475][T12695] ? apparmor_socket_sendmsg+0x15b/0x270 [ 520.253529][T12695] ____sys_sendmsg+0xa4d/0xbe0 [ 520.253553][T12695] ? __pfx_netlink_sendmsg+0x10/0x10 [ 520.253581][T12695] ? __pfx_____sys_sendmsg+0x10/0x10 [ 520.253612][T12695] ? plist_check_list+0x1b8/0x280 [ 520.253666][T12695] ? plist_del+0x308/0x510 [ 520.253690][T12695] ___sys_sendmsg+0x190/0x1e0 [ 520.253718][T12695] ? __pfx____sys_sendmsg+0x10/0x10 [ 520.253742][T12695] ? __lock_acquire+0x49f/0x1a40 [ 520.253778][T12695] ? futex_wake+0x220/0x5e0 [ 520.253839][T12695] __sys_sendmsg+0x160/0x210 [ 520.253859][T12695] ? __pfx___sys_sendmsg+0x10/0x10 [ 520.253892][T12695] do_syscall_64+0x115/0x840 [ 520.253918][T12695] ? clear_bhb_loop+0x40/0x90 [ 520.253940][T12695] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 520.253962][T12695] RIP: 0033:0x7fcc15d9de59 [ 520.253980][T12695] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 520.253998][T12695] RSP: 002b:00007fcc16d04028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 520.254016][T12695] RAX: ffffffffffffffda RBX: 00007fcc16026090 RCX: 00007fcc15d9de59 [ 520.254029][T12695] RDX: 0000000000008000 RSI: 0000200000000200 RDI: 0000000000000009 [ 520.254040][T12695] RBP: 00007fcc15e33e6f R08: 0000000000000000 R09: 0000000000000000 [ 520.254051][T12695] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 520.254061][T12695] R13: 00007fcc16026128 R14: 00007fcc16026090 R15: 00007ffc1145e5b8 [ 520.254088][T12695] [ 520.830778][T12695] Process accounting resumed [ 522.701843][T12729] Format for adding new device is "id port_count num_queues" (uint uint uint). [ 522.905209][T12729] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1186'. [ 524.406766][T12768] [U] ^R [ 525.028772][T12776] bond0: no command found in slaves file - use +ifname or -ifname [ 525.818866][T12787] TCP: TCP_TX_DELAY enabled [ 527.121651][T12806] ubi0: attaching mtd0 [ 527.127477][T12806] ubi0 error: ubi_add_to_av: two LEBs with same sequence number 2 [ 527.145639][T12806] eraseblock attaching information dump: [ 527.161452][T12806] ec 1 [ 527.167182][T12806] pnum 1 [ 527.174187][T12806] lnum 1 [ 527.183115][T12806] scrub 0 [ 527.190767][T12806] sqnum 2 [ 527.200866][T12806] Volume identifier header dump: [ 527.210921][T12806] magic 55424921 [ 527.220976][T12806] version 1 [ 527.229588][T12806] vol_type 1 [ 527.238763][T12806] copy_flag 0 [ 527.246568][T12806] compat 5 [ 527.253298][T12806] vol_id 2147479551 [ 527.263074][T12806] lnum 1 [ 527.273043][T12806] data_size 0 [ 527.281543][T12806] used_ebs 0 [ 527.294107][T12806] data_pad 0 [ 527.310859][T12806] sqnum 2 [ 527.329013][T12806] hdr_crc 7beff9af [ 527.347011][T12806] Volume identifier header hexdump: [ 527.531897][T12806] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 528.983906][T12808] kexec: Could not allocate control_code_buffer [ 530.613951][T12865] nvme_fabrics: missing parameter 'transport=%s' [ 530.683445][T12865] nvme_fabrics: missing parameter 'nqn=%s' [ 536.572262][T12956] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1230'. [ 536.617871][T12956] netlink: 'syz.4.1230': attribute type 1 has an invalid length. [ 536.656627][T12956] netlink: 342 bytes leftover after parsing attributes in process `syz.4.1230'. [ 536.688779][ T5647] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 536.705116][ T5647] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 536.717539][ T5647] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 536.727699][ T5647] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 536.742345][ T5647] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 537.940050][T12965] Process accounting resumed [ 538.179785][T12957] bridge0: port 1(bridge_slave_0) entered blocking state [ 538.207192][T12957] bridge0: port 1(bridge_slave_0) entered disabled state [ 538.224271][T12957] bridge_slave_0: entered allmulticast mode [ 538.247534][T12957] bridge_slave_0: entered promiscuous mode [ 538.257495][T12995] hub 1-0:1.0: USB hub found [ 538.265596][T12995] hub 1-0:1.0: 1 port detected [ 538.274130][T12957] bridge0: port 2(bridge_slave_1) entered blocking state [ 538.291054][T12957] bridge0: port 2(bridge_slave_1) entered disabled state [ 538.309431][T12957] bridge_slave_1: entered allmulticast mode [ 538.325526][T12957] bridge_slave_1: entered promiscuous mode [ 538.503611][T12957] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 538.565632][T12957] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 538.668436][T12957] team0: Port device team_slave_0 added [ 538.693559][T12957] team0: Port device team_slave_1 added [ 538.760796][ T4946] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 538.780750][ T4946] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 538.792995][ T4946] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 538.807763][ T4946] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 538.817599][ T4946] Bluetooth: hci1: command tx timeout [ 538.830260][ T4946] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 538.930478][T12957] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 538.954171][T12957] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 539.034321][T12957] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 539.077333][T12957] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 539.098589][T12957] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 539.146334][T12957] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 539.316216][T12957] hsr_slave_0: entered promiscuous mode [ 539.339470][T12957] hsr_slave_1: entered promiscuous mode [ 539.358048][T12957] debugfs: 'hsr0' already exists in 'hsr' [ 539.375062][T12957] Cannot create hsr debugfs directory [ 540.409044][T12957] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 540.442300][T12957] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 540.480222][T12957] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 540.498643][T12957] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 540.517912][T12957] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 540.538729][T12957] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 540.561583][T12957] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 540.578548][T12957] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 540.897535][ T4946] Bluetooth: hci5: command tx timeout [ 540.905117][ T5647] Bluetooth: hci1: command tx timeout [ 541.255414][T13005] bridge0: port 1(bridge_slave_0) entered blocking state [ 541.272770][T13005] bridge0: port 1(bridge_slave_0) entered disabled state [ 541.288724][T13005] bridge_slave_0: entered allmulticast mode [ 541.305991][T13005] bridge_slave_0: entered promiscuous mode [ 541.331542][T13005] bridge0: port 2(bridge_slave_1) entered blocking state [ 541.346448][T13005] bridge0: port 2(bridge_slave_1) entered disabled state [ 541.370182][T13005] bridge_slave_1: entered allmulticast mode [ 541.387796][T13005] bridge_slave_1: entered promiscuous mode [ 541.702715][T13005] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 541.831523][T13005] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 542.128040][T13005] team0: Port device team_slave_0 added [ 542.157975][T13005] team0: Port device team_slave_1 added [ 542.281148][T13005] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 542.307633][T13005] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 542.393017][T13005] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 542.541831][T13005] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 542.577434][T13005] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 542.694064][T13005] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 542.980700][ T5647] Bluetooth: hci1: command tx timeout [ 542.987458][ T4946] Bluetooth: hci5: command tx timeout [ 543.019508][T12957] 8021q: adding VLAN 0 to HW filter on device bond0 [ 543.095757][T13005] hsr_slave_0: entered promiscuous mode [ 543.109984][T13005] hsr_slave_1: entered promiscuous mode [ 543.128627][T13005] debugfs: 'hsr0' already exists in 'hsr' [ 543.148978][T13005] Cannot create hsr debugfs directory [ 543.357626][T12957] 8021q: adding VLAN 0 to HW filter on device team0 [ 543.422930][ T8923] bridge0: port 1(bridge_slave_0) entered blocking state [ 543.430174][ T8923] bridge0: port 1(bridge_slave_0) entered forwarding state [ 543.457844][ T8923] bridge0: port 2(bridge_slave_1) entered blocking state [ 543.465339][ T8923] bridge0: port 2(bridge_slave_1) entered forwarding state [ 544.464819][T13005] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 544.529688][T13005] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 544.562228][T13005] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 544.602028][T13005] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 544.637261][T13005] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 544.667701][T13005] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 544.708336][T13005] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 544.748294][T13005] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 545.063913][ T4946] Bluetooth: hci5: command tx timeout [ 545.069546][ T5647] Bluetooth: hci1: command tx timeout [ 545.191225][T13005] 8021q: adding VLAN 0 to HW filter on device bond0 [ 545.279627][T13005] 8021q: adding VLAN 0 to HW filter on device team0 [ 545.339964][ T145] bridge0: port 1(bridge_slave_0) entered blocking state [ 545.347178][ T145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 545.437330][ T145] bridge0: port 2(bridge_slave_1) entered blocking state [ 545.444592][ T145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 545.706848][T12957] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 546.550471][T12957] veth0_vlan: entered promiscuous mode [ 546.602080][T12957] veth1_vlan: entered promiscuous mode [ 546.728632][T12957] veth0_macvtap: entered promiscuous mode [ 546.888635][T12957] veth1_macvtap: entered promiscuous mode [ 546.942623][T13134] hub 1-0:1.0: USB hub found [ 546.962477][T13134] hub 1-0:1.0: 1 port detected [ 546.974217][T13005] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 547.146402][ T4946] Bluetooth: hci5: command tx timeout [ 547.199426][T12957] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 547.353160][T12957] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 547.437972][ T1154] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 547.483610][ T1154] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 547.548473][ T1154] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 547.577361][ T1154] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 547.981051][ T8925] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 548.022335][ T8925] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 548.172260][ T3354] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 548.213448][ T3354] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 548.360113][T13005] veth0_vlan: entered promiscuous mode [ 548.809412][T13005] veth1_vlan: entered promiscuous mode [ 548.874973][ T30] audit: type=1800 audit(1783461659.435:18): pid=13168 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1254" name="lu_gp_id" dev="configfs" ino=53657 res=0 errno=0 [ 549.236347][T13005] veth0_macvtap: entered promiscuous mode [ 549.506025][T13176] hub 1-0:1.0: USB hub found [ 549.515392][T13005] veth1_macvtap: entered promiscuous mode [ 549.557153][T13176] hub 1-0:1.0: 1 port detected [ 549.825815][T13183] hub 1-0:1.0: USB hub found [ 549.848303][T13183] hub 1-0:1.0: 1 port detected [ 549.912538][T13005] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 550.492104][T13005] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 550.752103][T11015] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 550.885164][T11015] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 551.063049][T11015] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 551.124418][T11015] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 551.525660][ T8925] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 551.582382][ T8925] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 551.783101][ T3354] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 551.855551][ T3354] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 552.729036][T13206] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 552.774935][T13206] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 552.823695][T13206] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 552.855637][T13206] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 552.884070][T13206] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 552.914679][T13206] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 552.955052][T13206] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 552.973962][T13206] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 553.013849][T13206] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 553.420782][T13225] netlink: 146 bytes leftover after parsing attributes in process `syz.6.1265'. [ 554.034273][ T4946] Bluetooth: hci2: command 0x0c1a tx timeout [ 554.515834][T13241] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1268'. [ 554.832566][ T5647] Bluetooth: hci3: command 0x0c1a tx timeout [ 554.838796][ T4946] Bluetooth: hci0: command 0x0406 tx timeout [ 554.912612][ T4946] Bluetooth: hci1: command 0x0c1a tx timeout [ 554.992809][ T4946] Bluetooth: hci5: command 0x0c1a tx timeout [ 555.241029][T13257] netlink: 342 bytes leftover after parsing attributes in process `syz.0.1272'. [ 556.008372][T13221] Process accounting resumed [ 556.993980][ T4946] Bluetooth: hci1: command 0x0c1a tx timeout [ 557.073278][ T4946] Bluetooth: hci5: command 0x0c1a tx timeout [ 558.135544][T13291] random: crng reseeded on system resumption [ 558.573024][ T5721] hid-generic 0000:0000:46B12C19.0001: unknown main item tag 0x0 [ 558.630222][ T5721] hid-generic 0000:0000:46B12C19.0001: unknown main item tag 0x0 [ 558.700533][ T5721] hid-generic 0000:0000:46B12C19.0001: unknown main item tag 0x0 [ 558.779333][ T5721] hid-generic 0000:0000:46B12C19.0001: unknown main item tag 0x0 [ 558.831932][ T5721] hid-generic 0000:0000:46B12C19.0001: unknown main item tag 0x0 [ 558.902525][ T5721] hid-generic 0000:0000:46B12C19.0001: unknown main item tag 0x0 [ 558.976351][ T5721] hid-generic 0000:0000:46B12C19.0001: unknown main item tag 0x0 [ 559.028827][ T5721] hid-generic 0000:0000:46B12C19.0001: unknown main item tag 0x0 [ 559.069798][ T5721] hid-generic 0000:0000:46B12C19.0001: unknown main item tag 0x0 [ 559.077882][ T4946] Bluetooth: hci1: command 0x0c1a tx timeout [ 559.116586][ T5721] hid-generic 0000:0000:46B12C19.0001: unknown main item tag 0x0 [ 559.151455][ T5721] hid-generic 0000:0000:46B12C19.0001: reserved main item tag 0xe [ 559.163137][ T4946] Bluetooth: hci5: command 0x0c1a tx timeout [ 559.206541][ T5721] hid-generic 0000:0000:46B12C19.0001: item fetching failed at offset 24/25 [ 559.257066][ T5721] hid-generic 0000:0000:46B12C19.0001: probe with driver hid-generic failed with error -22 [ 560.070012][T13310] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1281'. [ 561.717359][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 561.730913][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.559036][T13375] net_ratelimit: 313 callbacks suppressed [ 563.559054][T13375] openvswitch: netlink: IP tunnel dst address not specified [ 563.869199][T13382] EXT4-fs error (device sda1): ext4_validate_block_bitmap:423: comm syz.6.1293: bg 2: bad block bitmap checksum [ 564.008974][T13382] EXT4-fs (sda1): Delayed block allocation failed for inode 2035 at logical offset 1321 with max blocks 5 with error 74 [ 564.127158][T13382] EXT4-fs (sda1): This should not happen!! Data will be lost [ 564.127158][T13382] [ 564.475080][ T30] audit: type=1804 audit(1783461675.029:19): pid=13396 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.7.1296" name="/newroot/9/file0" dev="tmpfs" ino=63 res=1 errno=0 [ 564.596775][ T30] audit: type=1804 audit(1783461675.079:20): pid=13389 uid=2 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.7.1296" name="/newroot/9/file0" dev="tmpfs" ino=63 res=1 errno=0 [ 567.200994][T13428] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1303'. [ 567.608218][T13434] hub 1-0:1.0: USB hub found [ 567.652293][T13434] hub 1-0:1.0: 1 port detected [ 568.769351][T13445] vivid-007: ================= START STATUS ================= [ 568.815576][T13445] vivid-007: Generate PTS: true [ 568.844845][T13445] vivid-007: Generate SCR: true [ 568.884106][T13445] tpg source WxH: 320x240 (Y'CbCr) [ 568.919100][T13445] tpg field: 1 [ 568.938820][T13445] tpg crop: (0,0)/320x240 [ 568.965594][T13445] tpg compose: (0,0)/320x240 [ 568.999508][T13445] tpg colorspace: 8 [ 569.013217][T13445] tpg transfer function: 0/0 [ 569.033124][T13445] tpg Y'CbCr encoding: 0/0 [ 569.055049][T13445] tpg quantization: 0/0 [ 569.075574][T13445] tpg RGB range: 0/2 [ 569.092127][T13445] vivid-007: ================== END STATUS ================== [ 569.560689][T13462] smc: net device dummy0 applied user defined pnetid DUMMY0 [ 570.080011][T13448] FAULT_INJECTION: forcing a failure. [ 570.080011][T13448] name failslab, interval 1, probability 0, space 0, times 0 [ 570.312484][T13448] CPU: 0 UID: 0 PID: 13448 Comm: syz.0.1306 Tainted: G L syzkaller #0 PREEMPT(full) [ 570.312516][T13448] Tainted: [L]=SOFTLOCKUP [ 570.312523][T13448] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 570.312533][T13448] Call Trace: [ 570.312540][T13448] [ 570.312547][T13448] dump_stack_lvl+0x100/0x190 [ 570.312572][T13448] should_fail_ex.cold+0x5/0xa [ 570.312593][T13448] should_failslab+0xc2/0x120 [ 570.312617][T13448] kmem_cache_alloc_lru_noprof+0x8d/0x6a0 [ 570.312640][T13448] ? __d_alloc+0x35/0xa50 [ 570.312661][T13448] __d_alloc+0x35/0xa50 [ 570.312685][T13448] d_alloc+0x4a/0x1e0 [ 570.312711][T13448] lookup_one_qstr_excl+0x171/0x250 [ 570.312744][T13448] start_dirop+0x59/0xb0 [ 570.312777][T13448] simple_start_creating+0xf9/0x110 [ 570.312842][T13448] ? __pfx_simple_start_creating+0x10/0x10 [ 570.312870][T13448] ? mntput+0x70/0xa0 [ 570.312899][T13448] ? simple_pin_fs+0xa3/0x190 [ 570.312925][T13448] debugfs_start_creating.part.0+0x82/0x170 [ 570.313008][T13448] __debugfs_create_file+0xb3/0x4f0 [ 570.313043][T13448] debugfs_create_file_full+0x41/0x60 [ 570.313092][T13448] ref_tracker_dir_debugfs+0x19e/0x2e0 [ 570.313130][T13448] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 570.313169][T13448] ? ida_alloc_range+0x70d/0x830 [ 570.313219][T13448] ? kasan_save_track+0x14/0x30 [ 570.313239][T13448] ? __kasan_kmalloc+0xaa/0xb0 [ 570.313261][T13448] ? lockdep_init_map_type+0x5c/0x250 [ 570.313293][T13448] preinit_net.part.0+0x252/0x920 [ 570.313343][T13448] copy_net_ns+0x339/0x7c0 [ 570.313370][T13448] create_new_namespaces+0x3ea/0xac0 [ 570.313405][T13448] unshare_nsproxy_namespaces+0xf2/0x220 [ 570.313436][T13448] ksys_unshare+0x438/0xab0 [ 570.313469][T13448] ? __pfx_ksys_unshare+0x10/0x10 [ 570.313498][T13448] __x64_sys_unshare+0x31/0x40 [ 570.313518][T13448] do_syscall_64+0x115/0x840 [ 570.313545][T13448] ? clear_bhb_loop+0x40/0x90 [ 570.313568][T13448] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 570.313586][T13448] RIP: 0033:0x7f047f79de59 [ 570.313602][T13448] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 570.313621][T13448] RSP: 002b:00007f047d9d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 570.313639][T13448] RAX: ffffffffffffffda RBX: 00007f047fa26090 RCX: 00007f047f79de59 [ 570.313650][T13448] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 570.313660][T13448] RBP: 00007f047f833e6f R08: 0000000000000000 R09: 0000000000000000 [ 570.313671][T13448] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 570.313685][T13448] R13: 00007f047fa26128 R14: 00007f047fa26090 R15: 00007ffef8c966e8 [ 570.313708][T13448] [ 570.942004][T13461] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 570.961981][T13461] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 570.983510][T13461] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 571.017845][T13461] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 571.046228][T13461] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 571.717402][ T4946] Bluetooth: hci2: command 0x0c1a tx timeout [ 573.061553][T13495] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 573.072022][ T4946] Bluetooth: hci5: command 0x0c1a tx timeout [ 573.078251][ T5647] Bluetooth: hci1: command 0x0c1a tx timeout [ 573.085486][T13008] Bluetooth: hci0: command 0x0406 tx timeout [ 573.092610][ T5647] Bluetooth: hci3: command 0x0c1a tx timeout [ 577.693319][T13555] HfR: entered promiscuous mode [ 578.292119][T13575] vivid-007: ================= START STATUS ================= [ 578.463721][T13575] vivid-007: Generate PTS: true [ 578.543753][T13575] vivid-007: Generate SCR: true [ 578.641115][T13575] tpg source WxH: 320x240 (Y'CbCr) [ 578.721716][T13575] tpg field: 1 [ 578.750488][T13575] tpg crop: (0,0)/320x240 [ 578.789147][T13575] tpg compose: (0,0)/320x240 [ 578.857584][T13575] tpg colorspace: 8 [ 578.899842][T13575] tpg transfer function: 0/0 [ 578.945823][T13575] tpg Y'CbCr encoding: 0/0 [ 578.991236][T13575] tpg quantization: 0/0 [ 579.044553][T13575] tpg RGB range: 0/2 [ 579.087674][T13575] vivid-007: ================== END STATUS ================== [ 581.409855][T13612] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1334'. [ 583.129720][T13637] binder: BINDER_SET_CONTEXT_MGR already set [ 583.190592][T13637] binder: 13632:13637 ioctl 40046207 0 returned -16 [ 586.605484][T13682] Process accounting paused [ 587.604299][T13716] hub 1-0:1.0: USB hub found [ 587.709097][T13716] hub 1-0:1.0: 1 port detected [ 590.205154][T13734] netlink: 504 bytes leftover after parsing attributes in process `syz.0.1359'. [ 590.314406][T13736] netlink: 350 bytes leftover after parsing attributes in process `syz.0.1359'. [ 591.278092][T13784] hub 1-0:1.0: USB hub found [ 591.380167][T13784] hub 1-0:1.0: 1 port detected [ 591.694630][ T30] audit: type=1800 audit(1783461702.277:21): pid=13790 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1369" name="trace_marker" dev="tracefs" ino=2875 res=0 errno=0 [ 591.951232][T13795] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1370'. [ 592.123668][T13795] No such timeout policy "" [ 592.289128][T13795] netlink: Failed to associated timeout policy '' [ 592.510244][T13790] netlink: 330 bytes leftover after parsing attributes in process `syz.4.1369'. [ 593.291328][T13841] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1374'. [ 593.344634][T13832] hub 1-0:1.0: USB hub found [ 593.411118][T13832] hub 1-0:1.0: 1 port detected [ 593.535406][T13819] zswap: compressor not available [ 594.854338][T13863] [U]  [ 594.857390][T13863] [U] [ 594.860170][T13863] [U] [ 594.862861][T13863] [U] [ 594.921394][T13863] [U] [ 594.924159][T13863] [U] [ 594.926865][T13863] [U] [ 594.929590][T13863] [U] [ 595.010552][T13863] [U] [ 595.013390][T13863] [U] [ 595.016105][T13863] [U] [ 595.018835][T13863] [U] [ 595.079409][T13863] [U] [ 595.082182][T13863] [U] [ 595.084988][T13863] [U] [ 595.087676][T13863] [U] [ 595.140226][T13863] [U] [ 595.142975][T13863] [U] [ 595.145693][T13863] [U] [ 595.148388][T13863] [U] [ 595.224604][T13863] [U] [ 595.227378][T13863] [U] [ 595.230083][T13863] [U] [ 595.232804][T13863] [U] [ 595.303864][T13863] [U] [ 595.306603][T13863] [U] [ 595.309296][T13863] [U] [ 595.311997][T13863] [U] [ 595.380222][T13863] [U] [ 596.676320][T13900] RDS: rds_bind could not find a transport for 7bc:c94c:4e37:70c4:988d:a8ef:b61c:7dcb, load rds_tcp or rds_rdma? [ 601.463821][T13971] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 602.095426][T13982] hub 1-0:1.0: USB hub found [ 602.135378][T13982] hub 1-0:1.0: 1 port detected [ 604.884257][T14029] random: crng reseeded on system resumption [ 604.972642][T14029] hub 1-0:1.0: USB hub found [ 605.027618][T14029] hub 1-0:1.0: 1 port detected [ 608.341678][T14079] netdevsim netdevsim7 netdevsim1: entered allmulticast mode [ 608.409009][T14081] hub 1-0:1.0: USB hub found [ 608.467545][T14081] hub 1-0:1.0: 1 port detected [ 608.688960][T14082] hub 1-0:1.0: USB hub found [ 608.775179][T14082] hub 1-0:1.0: 1 port detected [ 613.187139][ T30] audit: type=1800 audit(1783461723.823:22): pid=14136 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1429" name="dbroot" dev="configfs" ino=59478 res=0 errno=0 [ 616.620574][T14172] FAULT_INJECTION: forcing a failure. [ 616.620574][T14172] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 616.737591][T14172] CPU: 0 UID: 0 PID: 14172 Comm: syz.7.1434 Tainted: G L syzkaller #0 PREEMPT(full) [ 616.737620][T14172] Tainted: [L]=SOFTLOCKUP [ 616.737629][T14172] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 616.737641][T14172] Call Trace: [ 616.737647][T14172] [ 616.737654][T14172] dump_stack_lvl+0x100/0x190 [ 616.737683][T14172] should_fail_ex.cold+0x5/0xa [ 616.737704][T14172] _copy_from_user+0x2e/0xd0 [ 616.737809][T14172] snd_rawmidi_kernel_write1+0x390/0x7c0 [ 616.737879][T14172] snd_rawmidi_write+0x2dc/0xc60 [ 616.737912][T14172] ? __pfx_snd_rawmidi_write+0x10/0x10 [ 616.737940][T14172] ? __pfx_default_wake_function+0x10/0x10 [ 616.737962][T14172] ? bpf_lsm_file_permission+0x9/0x10 [ 616.737989][T14172] ? security_file_permission+0x76/0x210 [ 616.738014][T14172] ? rw_verify_area+0xce/0x6d0 [ 616.738043][T14172] vfs_write+0x2aa/0x1050 [ 616.738070][T14172] ? __pfx_snd_rawmidi_write+0x10/0x10 [ 616.738100][T14172] ? __pfx_vfs_write+0x10/0x10 [ 616.738123][T14172] ? find_held_lock+0x2b/0x80 [ 616.738142][T14172] ? __fget_files+0x215/0x3d0 [ 616.738167][T14172] ? __fget_files+0x215/0x3d0 [ 616.738196][T14172] ? __fget_files+0x21f/0x3d0 [ 616.738227][T14172] ksys_write+0x1f8/0x250 [ 616.738260][T14172] ? __pfx_ksys_write+0x10/0x10 [ 616.738292][T14172] do_syscall_64+0x115/0x840 [ 616.738321][T14172] ? clear_bhb_loop+0x40/0x90 [ 616.738344][T14172] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 616.738362][T14172] RIP: 0033:0x7fbd5a59de59 [ 616.738379][T14172] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 616.738396][T14172] RSP: 002b:00007fbd5b517028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 616.738413][T14172] RAX: ffffffffffffffda RBX: 00007fbd5a825fa0 RCX: 00007fbd5a59de59 [ 616.738425][T14172] RDX: 000000100000a3d9 RSI: 0000200000000400 RDI: 0000000000000005 [ 616.738435][T14172] RBP: 00007fbd5a633e6f R08: 0000000000000000 R09: 0000000000000000 [ 616.738445][T14172] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 616.738455][T14172] R13: 00007fbd5a826038 R14: 00007fbd5a825fa0 R15: 00007ffe46b122d8 [ 616.738477][T14172] [ 618.228785][T14154] Process accounting resumed [ 620.467596][T14224] __vm_enough_memory: pid: 14224, comm: syz.7.1444, bytes: 4398046457856 not enough memory for the allocation [ 622.322837][T14254] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1449'. [ 623.056649][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 623.073437][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.417848][T14286] can: request_module (can-proto-0) failed. [ 624.473169][T14282] futex_wake_op: syz.7.1454 tries to shift op by -2048; fix this program [ 624.522087][T14282] futex_wake_op: syz.7.1454 tries to shift op by -2048; fix this program [ 627.057832][T13626] syz.0.1334 (13626) used greatest stack depth: 19456 bytes left [ 631.629925][T14390] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1475'. [ 631.833904][T14373] kexec: Could not allocate control_code_buffer [ 631.979482][T14395] ptrace attach of "ci-qemu-gce-upstream-auto/syz-executor exec"[13005] was attempted by "ci-qemu-gce-upstream-auto/syz-executor exec"[14395] [ 632.097388][T14395] ptrace attach of "ci-qemu-gce-upstream-auto/syz-executor exec"[13005] was attempted by "ci-qemu-gce-upstream-auto/syz-executor exec"[14395] [ 632.282600][T14395] ptrace attach of "ci-qemu-gce-upstream-auto/syz-executor exec"[13005] was attempted by "ci-qemu-gce-upstream-auto/syz-executor exec"[14395] [ 637.044654][T14495] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input10 [ 640.676639][ T5652] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 640.691626][ T5652] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 640.699941][ T5652] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 640.709922][ T5652] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 640.723635][ T5652] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 642.749012][ T5652] Bluetooth: hci6: command tx timeout [ 642.871030][T14540] bridge0: port 1(bridge_slave_0) entered blocking state [ 642.897229][T14540] bridge0: port 1(bridge_slave_0) entered disabled state [ 642.925072][T14540] bridge_slave_0: entered allmulticast mode [ 642.954188][T14540] bridge_slave_0: entered promiscuous mode [ 642.995726][T14540] bridge0: port 2(bridge_slave_1) entered blocking state [ 643.019510][T14540] bridge0: port 2(bridge_slave_1) entered disabled state [ 643.045635][T14540] bridge_slave_1: entered allmulticast mode [ 643.070962][T14540] bridge_slave_1: entered promiscuous mode [ 643.225310][T14540] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 643.272973][T14540] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 643.471346][T14540] team0: Port device team_slave_0 added [ 643.488332][T14540] team0: Port device team_slave_1 added [ 643.621057][T14540] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 643.641488][T14540] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 643.700856][T14540] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 643.742545][T14540] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 643.771063][T14540] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 643.833634][T14540] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 644.001546][T14540] hsr_slave_0: entered promiscuous mode [ 644.037821][T14540] hsr_slave_1: entered promiscuous mode [ 644.059950][T14540] debugfs: 'hsr0' already exists in 'hsr' [ 644.087311][T14540] Cannot create hsr debugfs directory [ 644.820805][ T5652] Bluetooth: hci6: command tx timeout [ 644.830222][T14597] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1505'. [ 644.976224][T14597] ip6gre0: entered promiscuous mode [ 645.278338][T14540] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 645.315925][T14540] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 645.355447][T14540] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 645.375817][T14540] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 645.426330][T14540] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 645.460120][T14540] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 645.488049][T14540] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 645.548274][T14540] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 646.362554][T14613] usb usb20: check_ctrlrecip: process 14613 (syz.4.1507) requesting ep 01 but needs 81 [ 646.378860][T14540] 8021q: adding VLAN 0 to HW filter on device bond0 [ 646.465891][T14613] usb usb20: usbfs: process 14613 (syz.4.1507) did not claim interface 0 before use [ 646.567220][T14540] 8021q: adding VLAN 0 to HW filter on device team0 [ 646.611125][T14277] bridge0: port 1(bridge_slave_0) entered blocking state [ 646.618344][T14277] bridge0: port 1(bridge_slave_0) entered forwarding state [ 646.713313][T14277] bridge0: port 2(bridge_slave_1) entered blocking state [ 646.720678][T14277] bridge0: port 2(bridge_slave_1) entered forwarding state [ 646.892802][ T5652] Bluetooth: hci6: command tx timeout [ 648.189630][T14540] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 648.893257][T14540] veth0_vlan: entered promiscuous mode [ 648.939452][T14540] veth1_vlan: entered promiscuous mode [ 648.950908][T14651] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1512'. [ 648.964452][ T5652] Bluetooth: hci6: command tx timeout [ 649.058122][T14540] veth0_macvtap: entered promiscuous mode [ 649.157972][T14540] veth1_macvtap: entered promiscuous mode [ 649.308966][T14620] Process accounting paused [ 649.471372][T14659] vivid-007: ================= START STATUS ================= [ 649.511204][T14659] vivid-007: Generate PTS: true [ 649.541264][T14659] vivid-007: Generate SCR: true [ 649.550932][T14661] FAULT_INJECTION: forcing a failure. [ 649.550932][T14661] name fail_futex, interval 1, probability 0, space 0, times 0 [ 649.577392][T14540] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 649.599447][T14659] tpg source WxH: 320x240 (Y'CbCr) [ 649.615142][T14659] tpg field: 1 [ 649.632850][T14661] CPU: 0 UID: 0 PID: 14661 Comm: syz.0.1514 Tainted: G L syzkaller #0 PREEMPT(full) [ 649.632882][T14661] Tainted: [L]=SOFTLOCKUP [ 649.632889][T14661] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 649.632899][T14661] Call Trace: [ 649.632905][T14661] [ 649.632912][T14661] dump_stack_lvl+0x100/0x190 [ 649.632937][T14661] should_fail_ex.cold+0x5/0xa [ 649.632958][T14661] get_futex_key+0x1d2/0x14f0 [ 649.632990][T14661] ? __pfx_get_futex_key+0x10/0x10 [ 649.633020][T14661] ? blk_finish_plug+0x83/0xa0 [ 649.633113][T14661] futex_wake+0xf4/0x5e0 [ 649.633133][T14661] ? __up_read+0x333/0x980 [ 649.633151][T14661] ? __pfx___up_read+0x10/0x10 [ 649.633168][T14661] ? __pfx_futex_wake+0x10/0x10 [ 649.633193][T14661] ? madvise_unlock+0xa9/0x220 [ 649.633221][T14661] do_futex+0x2b2/0x440 [ 649.633239][T14661] ? __pfx_do_futex+0x10/0x10 [ 649.633258][T14661] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 649.633321][T14661] __x64_sys_futex+0x34f/0x4d0 [ 649.633342][T14661] ? __pfx___x64_sys_futex+0x10/0x10 [ 649.633368][T14661] do_syscall_64+0x115/0x840 [ 649.633394][T14661] ? clear_bhb_loop+0x40/0x90 [ 649.633416][T14661] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 649.633434][T14661] RIP: 0033:0x7f047f79de59 [ 649.633451][T14661] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 649.633469][T14661] RSP: 002b:00007f047d9f60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 649.633488][T14661] RAX: ffffffffffffffda RBX: 00007f047fa25fa8 RCX: 00007f047f79de59 [ 649.633500][T14661] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f047fa25fac [ 649.633510][T14661] RBP: 00007f047fa25fa0 R08: 0000000000000001 R09: 0000000000000000 [ 649.633521][T14661] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 649.633531][T14661] R13: 00007f047fa26038 R14: 00007ffef8c96600 R15: 00007ffef8c966e8 [ 649.633553][T14661] [ 649.636998][T14659] tpg crop: (0,0)/320x240 [ 649.888316][T14540] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 649.943277][ T8929] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 649.978951][ T8929] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 650.047397][ T8929] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 650.067813][ T8929] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 650.262499][T14283] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 650.274672][T14659] tpg compose: (0,0)/320x240 [ 650.297374][T14283] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 650.320520][T14659] tpg colorspace: 8 [ 650.358519][T14659] tpg transfer function: 0/0 [ 650.371763][T14659] tpg Y'CbCr encoding: 0/0 [ 650.385943][T14659] tpg quantization: 0/0 [ 650.397959][T14659] tpg RGB range: 0/2 [ 650.406203][T14283] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 650.428496][T14659] vivid-007: ================== END STATUS ================== [ 650.437998][T14283] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 651.179055][T13496] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 651.205128][T13496] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 651.214532][T13496] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 651.223164][T13496] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 651.236899][T13496] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 653.015137][T14734] ima: policy update failed [ 653.078973][ T30] audit: type=1802 audit(1783461763.844:23): pid=14734 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.4.1523" res=0 errno=0 [ 653.158412][T14736] netlink: 354 bytes leftover after parsing attributes in process `syz.4.1523'. [ 653.347127][T13496] Bluetooth: hci7: command tx timeout [ 654.521028][T14694] bridge0: port 1(bridge_slave_0) entered blocking state [ 654.557023][T14694] bridge0: port 1(bridge_slave_0) entered disabled state [ 654.587015][T14694] bridge_slave_0: entered allmulticast mode [ 654.628131][T14694] bridge_slave_0: entered promiscuous mode [ 654.785269][T14694] bridge0: port 2(bridge_slave_1) entered blocking state [ 654.806832][T14694] bridge0: port 2(bridge_slave_1) entered disabled state [ 654.824427][T14694] bridge_slave_1: entered allmulticast mode [ 654.840795][T14694] bridge_slave_1: entered promiscuous mode [ 655.090706][T14694] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 655.174633][T14694] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 655.363139][T14694] team0: Port device team_slave_0 added [ 655.419381][T13496] Bluetooth: hci7: command tx timeout [ 655.494527][T14694] team0: Port device team_slave_1 added [ 655.767475][T14694] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 655.789598][T14694] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 655.889951][T14694] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 655.945081][T14694] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 655.971159][T14694] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 656.069936][T14694] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 656.552778][T14694] hsr_slave_0: entered promiscuous mode [ 656.592240][T14694] hsr_slave_1: entered promiscuous mode [ 656.626105][T14694] debugfs: 'hsr0' already exists in 'hsr' [ 656.642484][T14694] Cannot create hsr debugfs directory [ 657.490348][T13496] Bluetooth: hci7: command tx timeout [ 657.966516][T14694] netdevsim netdevsim9 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 659.555302][T14694] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 659.563854][T13496] Bluetooth: hci7: command tx timeout [ 659.644251][T14694] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 659.705064][T14694] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 659.756966][T14694] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 659.821253][T14694] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 659.951542][T14694] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 660.157365][T14694] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 660.226987][T14694] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 661.767840][T14694] 8021q: adding VLAN 0 to HW filter on device bond0 [ 662.026446][T14694] 8021q: adding VLAN 0 to HW filter on device team0 [ 662.090306][ T8929] bridge0: port 1(bridge_slave_0) entered blocking state [ 662.097611][ T8929] bridge0: port 1(bridge_slave_0) entered forwarding state [ 662.194244][ T8929] bridge0: port 2(bridge_slave_1) entered blocking state [ 662.201464][ T8929] bridge0: port 2(bridge_slave_1) entered forwarding state [ 663.927150][T14870] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 663.996005][T14870] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 664.041363][T14870] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 664.078365][T14870] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 664.120440][T14870] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 664.139804][T14870] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 664.165161][T14870] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 664.238765][T14870] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 664.287012][T14870] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 664.296729][T14694] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 664.309847][T14870] Bluetooth: hci7: Opcode 0x0406 failed: -4 [ 664.391258][T14870] Bluetooth: hci7: Opcode 0x0406 failed: -4 [ 664.445531][T14873] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 665.298128][T13496] Bluetooth: hci2: command 0x0c1a tx timeout [ 665.476525][T14694] veth0_vlan: entered promiscuous mode [ 665.543536][T14694] veth1_vlan: entered promiscuous mode [ 665.695304][T14694] veth0_macvtap: entered promiscuous mode [ 665.742393][T14694] veth1_macvtap: entered promiscuous mode [ 665.836970][T14694] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 665.894544][T14694] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 665.960313][ T3354] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 666.002497][ T3354] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 666.017127][T13496] Bluetooth: hci3: command 0x0c1a tx timeout [ 666.062572][ T3354] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 666.094341][T13496] Bluetooth: hci1: command 0x0c1a tx timeout [ 666.100407][ T5652] Bluetooth: hci0: command 0x0406 tx timeout [ 666.129080][ T3354] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 666.174458][T13496] Bluetooth: hci6: command 0x0c1a tx timeout [ 666.181994][ T5652] Bluetooth: hci5: command 0x0c1a tx timeout [ 666.333641][T13496] Bluetooth: hci7: command 0x0c1a tx timeout [ 666.822292][ T3354] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 666.874512][ T3354] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 666.981822][T14277] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 667.025302][T14277] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 668.251946][T13496] Bluetooth: hci6: command 0x0c1a tx timeout [ 668.405714][T13496] Bluetooth: hci7: command 0x0c1a tx timeout [ 669.169032][T14971] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 669.833238][T14973] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1560'. [ 669.856262][T14983] random: crng reseeded on system resumption [ 670.316304][T13496] Bluetooth: hci6: command 0x0c1a tx timeout [ 670.476003][T13496] Bluetooth: hci7: command 0x0c1a tx timeout [ 676.272996][T15086] netlink: 342 bytes leftover after parsing attributes in process `syz.0.1576'. [ 676.913408][T15097] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 677.612387][T15109] futex_wake_op: syz.4.1580 tries to shift op by -2048; fix this program [ 677.668178][T15109] futex_wake_op: syz.4.1580 tries to shift op by -2048; fix this program [ 677.692650][T15110] 0x000000000001-0x000000020000 : "" [ 677.731560][T15110] ftl_cs: FTL header corrupt! [ 678.725118][T15116] sd 0:0:1:0: PR command failed: 1026 [ 678.738097][T15116] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 678.754405][T15116] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 679.400208][T15121] Process accounting resumed [ 679.681006][T15139] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1586'. [ 679.799607][ T31] INFO: task syz.5.1189:12743 blocked for more than 143 seconds. [ 679.826694][ T31] Tainted: G L syzkaller #0 [ 679.862532][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 679.911160][ T31] task:syz.5.1189 state:D stack:27608 pid:12743 tgid:12742 ppid:10188 task_flags:0x400140 flags:0x00080002 [ 679.929937][ T31] Call Trace: [ 679.933486][ T31] [ 679.938386][ T31] __schedule+0x125c/0x6730 [ 679.943125][ T31] ? preempt_schedule_notrace_thunk+0x16/0x30 [ 679.950145][ T31] ? __pfx___schedule+0x10/0x10 [ 679.956142][ T31] ? find_held_lock+0x2b/0x80 [ 679.961108][ T31] ? schedule+0x225/0x2c0 [ 679.968003][ T31] schedule+0xdd/0x2c0 [ 679.972334][ T31] schedule_preempt_disabled+0x13/0x30 [ 679.989328][ T31] __mutex_lock+0xccc/0x1bd0 [ 679.999584][ T31] ? nfsd_nl_listener_set_doit+0xd5/0x1a80 [ 680.014239][ T31] ? __sys_sendmsg+0x160/0x210 [ 680.024790][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 680.043182][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 680.056181][ T31] ? __asan_memset+0x23/0x50 [ 680.066576][ T31] ? __nla_validate_parse+0x1e7/0x28b0 [ 680.080661][ T31] ? nfsd_nl_listener_set_doit+0xd5/0x1a80 [ 680.097975][ T31] nfsd_nl_listener_set_doit+0xd5/0x1a80 [ 680.110890][ T31] ? rcu_is_watching+0x12/0xc0 [ 680.124031][ T31] ? trace_kmalloc+0xeb/0x110 [ 680.134468][ T31] ? __kasan_kmalloc+0xaa/0xb0 [ 680.147129][ T31] ? __pfx_nfsd_nl_listener_set_doit+0x10/0x10 [ 680.162907][ T31] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1e5/0x2f0 [ 680.177988][ T31] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1ef/0x2f0 [ 680.199851][ T31] genl_family_rcv_msg_doit+0x214/0x300 [ 680.212462][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 680.227479][ T31] ? genl_get_cmd+0x3e7/0x760 [ 680.238413][ T31] ? bpf_lsm_capable+0x9/0x10 [ 680.248939][ T31] ? security_capable+0x80/0x260 [ 680.261423][ T31] genl_rcv_msg+0x560/0x800 [ 680.272094][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 680.284511][ T31] ? __pfx_nfsd_nl_listener_set_doit+0x10/0x10 [ 680.302005][ T31] netlink_rcv_skb+0x159/0x420 [ 680.314124][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 680.325199][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 680.335082][ T31] ? netlink_deliver_tap+0x1ae/0xcc0 [ 680.340570][ T31] genl_rcv+0x28/0x40 [ 680.345135][ T31] netlink_unicast+0x585/0x850 [ 680.357259][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 680.370406][ T31] netlink_sendmsg+0x8b0/0xda0 [ 680.376580][T15134] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 680.397450][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 680.410651][ T31] ? apparmor_socket_sendmsg+0x15b/0x270 [ 680.419235][ T31] ____sys_sendmsg+0xa4d/0xbe0 [ 680.425623][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 680.431117][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 680.439166][ T31] ___sys_sendmsg+0x190/0x1e0 [ 680.445760][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 680.451109][ T31] ? __lock_acquire+0x49f/0x1a40 [ 680.456667][ T31] __sys_sendmsg+0x160/0x210 [ 680.461419][ T31] ? __pfx___sys_sendmsg+0x10/0x10 [ 680.467350][ T31] do_syscall_64+0x115/0x840 [ 680.472123][ T31] ? clear_bhb_loop+0x40/0x90 [ 680.479190][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 680.490078][ T31] RIP: 0033:0x7f6597b9de59 [ 680.504485][ T31] RSP: 002b:00007f6598a09028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 680.529041][ T31] RAX: ffffffffffffffda RBX: 00007f6597e25fa0 RCX: 00007f6597b9de59 [ 680.547112][ T31] RDX: 0000000020000000 RSI: 0000200000000140 RDI: 0000000000000003 [ 680.566103][ T31] RBP: 00007f6597c33e6f R08: 0000000000000000 R09: 0000000000000000 [ 680.584219][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 680.606772][ T31] R13: 00007f6597e26038 R14: 00007f6597e25fa0 R15: 00007ffc32219738 [ 680.624984][ T31] [ 680.656692][ T31] [ 680.656692][ T31] Showing all locks held in the system: [ 680.682531][ T31] 1 lock held by khungtaskd/31: [ 680.703886][ T31] #0: ffffffff8ebe5f00 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 680.740446][ T31] 2 locks held by getty/10047: [ 680.759002][ T31] #0: ffff8880329800a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 680.780375][ T31] #1: ffffc9000343b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x14e0 [ 680.791543][ T31] 2 locks held by syz.3.1179/12700: [ 680.800230][ T31] #0: ffffffff90b4c928 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 680.810276][ T31] #1: ffffffff8f06f260 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x8c8/0x1100 [ 680.823037][ T31] 2 locks held by syz.5.1189/12743: [ 680.828345][ T31] #0: ffffffff90b4c928 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 680.838061][ T31] #1: ffffffff8f06f260 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0xd5/0x1a80 [ 680.850384][ T31] 2 locks held by syz-executor/13005: [ 680.856209][ T31] #0: ffff888078bb80d8 (&type->s_umount_key#53){+.+.}-{4:4}, at: deactivate_super+0xdf/0x110 [ 680.868275][ T31] #1: ffffffff8f06f260 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 680.878419][ T31] 2 locks held by syz.6.1457/14294: [ 680.885434][ T31] #0: ffffffff90b4c928 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 680.894142][ T31] #1: ffffffff8f06f260 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x8c8/0x1100 [ 680.908339][ T31] 2 locks held by syz-executor/14694: [ 680.916272][ T31] #0: ffff88802cdbe0d8 (&type->s_umount_key#53){+.+.}-{4:4}, at: deactivate_super+0xdf/0x110 [ 680.927689][ T31] #1: ffffffff8f06f260 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 680.938906][ T31] 3 locks held by syz.8.1584/15128: [ 680.944960][ T31] #0: ffffffff90a85268 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x451/0x7c0 [ 680.955877][ T31] #1: ffffffff90a9de80 (rtnl_mutex){+.+.}-{4:4}, at: default_device_exit_batch+0x90/0xc10 [ 680.966593][ T31] #2: ffffffff8ebf19a8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x27f/0x3c0 [ 680.977802][ T31] 2 locks held by syz.0.1585/15132: [ 680.983653][ T31] #0: ffffffff90a85268 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x451/0x7c0 [ 680.996101][ T31] #1: ffffffff8ebf19a8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x19e/0x3c0 [ 681.010448][ T31] 2 locks held by syz.0.1585/15133: [ 681.015804][ T31] #0: ffffffff90a85268 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x451/0x7c0 [ 681.026860][ T31] #1: ffffffff90a9de80 (rtnl_mutex){+.+.}-{4:4}, at: ip_tunnel_init_net+0x21e/0x780 [ 681.037405][ T31] 2 locks held by syz.0.1585/15136: [ 681.044091][ T31] #0: ffffffff90a85268 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x451/0x7c0 [ 681.054367][ T31] #1: ffffffff90a9de80 (rtnl_mutex){+.+.}-{4:4}, at: ip_tunnel_init_net+0x21e/0x780 [ 681.079388][ T31] [ 681.088262][ T31] ============================================= [ 681.088262][ T31] [ 681.113698][ T31] NMI backtrace for cpu 0 [ 681.113716][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 681.113740][ T31] Tainted: [L]=SOFTLOCKUP [ 681.113746][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 681.113757][ T31] Call Trace: [ 681.113763][ T31] [ 681.113770][ T31] dump_stack_lvl+0x100/0x190 [ 681.113794][ T31] nmi_cpu_backtrace.cold+0x12d/0x151 [ 681.113816][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 681.113867][ T31] nmi_trigger_cpumask_backtrace+0x21c/0x2a0 [ 681.113894][ T31] sys_info+0x141/0x190 [ 681.113913][ T31] watchdog+0xcb1/0x1030 [ 681.113952][ T31] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 681.114011][ T31] ? __pfx_watchdog+0x10/0x10 [ 681.114035][ T31] ? __kthread_parkme+0x18c/0x230 [ 681.114056][ T31] ? kthread+0x13a/0x450 [ 681.114076][ T31] ? __pfx_watchdog+0x10/0x10 [ 681.114097][ T31] kthread+0x370/0x450 [ 681.114117][ T31] ? __pfx_kthread+0x10/0x10 [ 681.114140][ T31] ret_from_fork+0x72b/0xd50 [ 681.114159][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 681.114180][ T31] ? __switch_to+0x800/0x10f0 [ 681.114231][ T31] ? __switch_to_asm+0x39/0x70 [ 681.114254][ T31] ? __pfx_kthread+0x10/0x10 [ 681.114276][ T31] ret_from_fork_asm+0x1a/0x30 [ 681.114308][ T31] [ 681.415048][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 681.421949][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 681.432641][ T31] Tainted: [L]=SOFTLOCKUP [ 681.436974][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 681.447025][ T31] Call Trace: [ 681.450301][ T31] [ 681.453241][ T31] dump_stack_lvl+0x100/0x190 [ 681.457947][ T31] vpanic+0x552/0x970 [ 681.461927][ T31] ? __pfx_vpanic+0x10/0x10 [ 681.466425][ T31] ? nmi_trigger_cpumask_backtrace+0x1c7/0x2a0 [ 681.472584][ T31] panic+0xd1/0xe0 [ 681.476301][ T31] ? __pfx_panic+0x10/0x10 [ 681.480732][ T31] ? nmi_trigger_cpumask_backtrace+0x1fa/0x2a0 [ 681.486888][ T31] ? nmi_trigger_cpumask_backtrace+0x260/0x2a0 [ 681.493042][ T31] ? nmi_trigger_cpumask_backtrace+0x26a/0x2a0 [ 681.499198][ T31] ? watchdog.cold+0x1ec/0x234 [ 681.503963][ T31] ? watchdog+0xcc1/0x1030 [ 681.508385][ T31] watchdog.cold+0x1fd/0x234 [ 681.512988][ T31] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 681.518814][ T31] ? __pfx_watchdog+0x10/0x10 [ 681.523509][ T31] ? __kthread_parkme+0x18c/0x230 [ 681.528545][ T31] ? kthread+0x13a/0x450 [ 681.532790][ T31] ? __pfx_watchdog+0x10/0x10 [ 681.537468][ T31] kthread+0x370/0x450 [ 681.541537][ T31] ? __pfx_kthread+0x10/0x10 [ 681.546140][ T31] ret_from_fork+0x72b/0xd50 [ 681.550754][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 681.555866][ T31] ? __switch_to+0x800/0x10f0 [ 681.560549][ T31] ? __switch_to_asm+0x39/0x70 [ 681.565418][ T31] ? __pfx_kthread+0x10/0x10 [ 681.570105][ T31] ret_from_fork_asm+0x1a/0x30 [ 681.574882][ T31] [ 681.577979][ T31] Kernel Offset: disabled [ 681.582302][ T31] Rebooting in 86400 seconds..