last executing test programs: 2m34.23668785s ago: executing program 0 (id=1003): mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0) chdir$auto(&(0x7f0000000000)='}[,&*}\x00') open(&(0x7f0000000100)='.\x00', 0x0, 0x0) mremap$auto(0x0, 0x3, 0x3fda, 0x6, 0x7fffffffb000) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f0000001380)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xfc\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\r&\xec\xb8\xb1Z\\\xc9L\xb2\t\xddbH|\xffGP\x97)\xb9:nqn\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc$\xa0\xa5\xce\xca\xe1P\xf7\xe5_\xca\xd5\xd8\xa4g_\xb1\x88\x8cAJS\x11\x8b\xd1%a\xe5DPk\x8c\xf9\xfb\xe0+\xdb\x12\x10.F\x00\xc37\xc7\xbf\x80\xbeu\xe1V\xb2\xc5\xc9\x1a\xc7\xdc}!\x10\xb1\",1%\x0e\xeb\x15\x15me\xe1a\x03\x18{\xb03+\x93*vB\xc6\xf1\xc6\xff\xbbt\x04!\xb6\v\xde2\xc9\x89#\xbaR\xee\x13jF%\xf2\x15\x9a\x82&\x89o\xa9\xd9\xbfFY\x90\x8c\xa0\xe4\x9d\xa2\xcd\x9a\xb5TC\xc4\x9d\x9ePb]\xaa\xc7f\x06N\xc5\xfa{\x02Y\xae\xf4(\xaa\x06);{?\x1e\fu\x19b\xdf$,\x01\"\x94\x00\x00\x00\x00\x003\xcfZ\xaf~<\xba\xb7\xa03\x8c\n*krS\x19Q#\x8f\xfbW\xad\xe0\xb3o\xcb\xf7\xda\x87C\x99\x1a\xa8\xc1\xe3\xc6%\xac\x01@*\xa0\xc4\xedn-lT\xe6*?\'\x9dW=\xa7\x03\x06\x83 IT\xa3\x7ff\xb6\x95\xe5\xd2\n\xaf\x87`\xce%\xf6 &\xa7M5I\x9c\x17h\x8c\xa4\x98\x16\xe0\xd9?Y\x7f\xf6\x85_{\xfd9p$B9_\xd8\xf4\x0e\xd0\xfa\xe7\xb0\xb8\xa0\xd7\a\xff.\"\x81\b\xb0\xb4\x84\xac\xad\x1b\x93~_\xea\xfe7\x03\"\xd9\x1d.\xe5{bHX\x14\xa1\bO\x03[^\x85jP\x89\t\x06GI\xb7\x99\xb2zZf\xc8\xd4\x8d\x1c\x1e\x03\xb9\xa7Nt\xae\xfff\xf9\tx\xae\xa8\x05\xb14\xc6\x9b\x1f\xd3\x01#\xc6\nb\xd4\xb4\xc8?\xa7\xe2R\xc1\xcf\xd2\xbc\xae\xd1\xc2\x88\"\xf3\xf0\xc0uQy\xec\xfab\xd6\xcd\x16)\x19*E\vm\x8d\x1bG:\x80\'pJ', 0x4100000a3d7) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/card1/pcm0p/sub7/info\x00', 0x8040, 0x0) read$auto_proc_reg_file_ops_compat_inode(r1, &(0x7f0000000100)=""/184, 0xb8) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x2003f2, 0x14) madvise$auto(0x0, 0x200007, 0x19) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x5d, 0x0) socket(0xa, 0x1, 0x84) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0x1, 0xb9, 0x12, 0x7, 0x400004, 0xffffffffffffffff, 0xe7b, "00000000000000e3ffffffffffffff00", 0x0, 0xffffffffffffffff, 0x5, 0x7, 0xe5}, 0x10) bpf$auto(0x1a, &(0x7f0000000380)=@link_create={@map_fd, @target_ifindex=r2, 0x3, 0x81, @uprobe_multi={0x81, 0x1ff, 0x3d7e, 0x0, 0x80000001, 0x5}}, 0x92) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x66) listen$auto(0x3, 0x83) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r3 = socket(0xb, 0x80000, 0x84) setsockopt$auto(r3, 0x0, 0x60, 0x0, 0x6f7250c4) close_range$auto(0x2, 0x8, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000002c80)='/proc/thread-self/net/rpc/nfsd.fh/channel\x00', 0x80, 0x0) exit$auto(0x5eb) 2m32.737329516s ago: executing program 0 (id=1006): ioctl$auto_USB_RAW_IOCTL_INIT(0xffffffffffffffff, 0x41015500, &(0x7f0000000000)={"c7349edf67acfc8dbd4dc991bd4be60e01d9ba068ea4e2a8d597a9abd2947e64d00ea008df1ab15257bd3edadf387902cc762b9cfb6d199541cbfade40b64b2d9c2f1f144a33b77c4d7ee00258a14b23e148b393aca89f83e44032786537ee7fdef07d85211b83a9e2c2c4f900049c471921b0ecd270e20737d8366a3f766676", "47a831066ead6ecadc25792c3972c82f874336697184ea327d6cbb4c95626cb1ecf721222225baeb3128b1cdb46623d16b56cea78598b7629b7eced9d5d0e1098d7d01e4946e28c06105722fa91d17dfce8ad0ca759f21732e78f4e0b233a392b50cfa78c9e27d444322e512ce88f690ec81dc46a1dda34e031ce1e5a8a43aae", 0xd}) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/bus/i2c/drivers/tuner/bind\x00', 0x400102, 0x0) r1 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000180), 0x40100, 0x0) ioctl$auto_VHOST_SET_OWNER(r1, 0xaf01, 0x0) fsconfig$auto_EROFS_MOUNT_DAX_NEVER(r1, 0x3701, &(0x7f00000001c0)='/sys/bus/i2c/drivers/tuner/bind\x00', &(0x7f0000000200)="5720cd3275188aa461a3633f5f2da28e4052b53eeee52065adb792dbd356d5611045f5c49ad9acd474cab3b820f08f726255ffca1bea4d5133cf3ebfbb7499e845262807dabdaa007649eb40d27deaff63414b48aa35556f22acc88d3af556f271306da733a5bcd718db94961bd25eb8dd090050d3d80deaeb571d4dc9b4662d8e9396e4665de027aebbd3986d6cb87653b0dc49ff", 0x80) keyctl$auto_KEYCTL_SEARCH(0xa, 0x0, 0xd, 0x7, 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nfc(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$auto_NFC_CMD_FW_DOWNLOAD(r2, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r3, 0x122, 0x70bd27, 0x25dfdbff, {}, [@NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0xfffffff8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x0) io_uring_register$auto_IORING_REGISTER_PROBE(r0, 0x8, &(0x7f0000000400)="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", 0x4) r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000540), r2) sendmsg$auto_NL80211_CMD_NOTIFY_RADAR(r2, &(0x7f0000000f00)={&(0x7f0000000500), 0xc, &(0x7f0000000ec0)={&(0x7f0000000580)={0x91c, r4, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@NL80211_ATTR_BEACON_TAIL={0x80a, 0xf, "1c42e552740a5a27c0ea4842f65e6410fded5ccaec63e7e55c61ed04562169877d4d4f7be373e6d7eb5ab903363373a56d25313ec9406e4707cfa121ab162e2ecb1b3d4367de36969fac607d2e04b7f9f7e4f809448b180c1c45e7764cea21fbcae7e6479e2f0e15944901bdb38de60bd2447e7c8ee4b432b75c2175d40b16124f857606835579ba09c49286a47037bad9cc47386d5dd20ef7c9fef8ad213a4bc7318093b11ae49cbe5d032b52e40d2af716a80120ddcf6f91c2c80b93ad6744014d349659248970773846f21d84b9dd9c407f69b0a490d2c2b06be32ae455455fe270da5257d3c09c92f337e2072734f5b74e82ab79ae09cefc3ee8b1cfd083406853281ad837803618a2d9c9aaa4d6a155fcdeca343898de1a260d8ad185c6516b965b7cb80f1acf53cbf07e41f69a17e4ec395350e3572d6ba21835532472d5e866a1efe6b416d432e2a8d96e9e19f3505cd18504fabf3b7e635fb49c7365020b926d0c0982cc428ec03589fe065f054f05bf54c947f403e4c61440c987a9e71043a301889a4f049a487c2f69eeec2869e6797f6ff3afd19bb2c4c0b368b87197c8281b250af549a687ae2552f9af00a2297cfd0ad715c3e67a7540fffe749e7354b9dd45aa4039e9490a6d40ce5f2771ec23b33306a0472b4449bd1fe73273f865dc874ecabf9abbf3276fef58d300f2ad5379fa6a800e00ce204b4a6ff8ed3ed4849a3ce513424598317ce4ccd497626d2e521539e292370995fc1a773dfad1fbe967965fabba6328b3fcf36b2824588b79a4621fded4d3809eeb8ca39dadf9c9dcff68eb658993b8fcda345f08c719a9bdd1ad1ef7a8705463ef3a8bbb5bd8a3d0dce02bbbaa84c05abe18ac70525fd57fd0f4efdf2e2f921657f38583ac55cbe8323aa1334fbce8fd47b36ef4ce194f0ce46fd0a21fa5bcf4935e97ba0765ac4e57b606925c3119e0c977ac5f9c6aa10db43432263b301dd498474dc396e6eac8ac0b1f6b5ec4a42e02260ad1b81df0e29e9177629c5b5e1d1583521de59d7770782cee0f64d9b1e8b9f4dac1ffba31d339595dc18899b4a148a93a200580865f6d5d9728dd122c21055974660f9640f46269ab76d60b502cdee428ce21cbf8c753dc85b01bd82a2619b5f7137e793aab8ef868225b254652975238cb0a9433ded17822bc71c80b63a612c19954fc7c7556ae72b962c87b6accaab8a0711b41c496082d540f4a4a1d0d94112c1058b76e05147809d5d0914b2b44dffedce9ba5237e00fbe32f91f10584d8e9c68988e1e381592ce9ef1d51d506b2644dd35ba3ff29886a4d4014e956231778a0a6337325252764111c091ce7c3cdcaf6b2fd7ad17370174b4fb66a6d29fa653139ca63e92f300234f25d9e4f78ad0f1e2fbc0f16a39e17bfde5d88e86046f7a87cb17f7df6cdcc0ab169e729b22ac4c58c8e34cf8444fa6681048d9f342593bc32ffd836945735a0f58876c2004cd13da64501d390ca9e55f1f15bd6cad434f3f0eeeabfb597cccdc5f22e74601e86a0ce355c1f958b703dd4f4db641f02638beb8e7add93bf830bd3fe956ad150bafd8298116b13bc2b5fefbf9f84e987e4f02df4a94dacfebc08c18df463785d20bfd0b411f0465c0336dfd848e3e976c035767625fb457bfe391b3980a9dfcea3c9632758e87237b1b6157eeaf52b074ee5e87f38cec108f2e1528653ed0edecd363ae3413127d0d20c6d21a50e628ad2f0e40aea8a206162fa44712bd9a572253a8de84d87933264fe037222198667f9f0a3108a5603adb0021b9d96bec1dbe76e034196eade6fe39f2c5f767ea488149b6fad597812a6a8ad785e4e1214105f022adf7a98f89b0d11fb3868a932bd68530ca46eeaeb16f4640be3c2b40bfcb28edb77e67d8ea69e1a68d47dcdb21c2e8253db68f1b5719409d91f096607c102bb84517550b7064d543e961eeaf227c1b45181de37f5db299c04e27d8dc7667a01bfaa69d715f800699b63ef9fc2e99508438b6cf176d871c59b44f1be1766276988b4633d7d71430ab9c173f1d5f953f3812a7cb3cfadddde3ddc1ba5a0a50e60aa04b89951a659e785f4672d2e219fd2b1a1c39288a87e2f0571d4594c6278918c993e589b1c44829c3586b0b28f48aeb37fdbded0b02c540b555738cbeab5cd5c570fa3de6dfb002704f3b9d63a8c9da17666cc123280ff9849373a4c6f7ed788ea7edce829e1f863e2bb680c795198cc8ec8a9c8fad00f7f8987e14641cb881f1bbb128902d6c2b184cc32fb03952f404ae5ed3b5aa15f84500e3fe886d1bb0088aaed36bfd8150e56be4d8b9b8d35bb5c8819a7ecb742eca5682f37c35567f953557f0294212b8d60c948620c6a6ae0aa6a2f7ee2c5c66bb9d85fbe599a534dafab027ce70656ba66a910c07ae212f80381f6fcf08d17094f3c454290e6d69ba295907ffafdbd8ddd50f52d95a52c55435255980daf1b758a67ef8a5ed17086c39219ee8bef4e074e65bdd00ca7ef17b29483d489556fcc2cef667f6658abc60c584e16827641d2e65a72301ad0ae3c8525c0bcd14f4d967ae1f298a370b770f2a78eace44eee213d47a9c51f6062e26364af4e5b1426799fbc60ea21a3ef711a065bec3de8e38191a30e5930327e989961cec04904e26058438e0ee2719870e735c44d2ee9cdaefadea2c80d1241586a00bd93ef6d50635c78c26dea9db81535f580b4b50eb27b554eaadca026620c584e4085f6f83d0f5014d535249b35e2d717e8c60cfd3eaae9779a6becebfe3ea691507410f0ef75c3cca0e1d33676646d54490d3a54bbbd183a3e7d0445385879da8b6b9986f2a00b6b286ba79754c6cf2a785d98773a7f552a3ad91f6724fbe3c508e260417a83090c8d24077620937af001f51"}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x7}, @NL80211_ATTR_PUNCT_BITMAP={0x8, 0x142, 0x80000001}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x10}, @NL80211_ATTR_PUNCT_BITMAP={0x8, 0x142, 0x7fff}, @NL80211_ATTR_BSS_CTS_PROT={0x5}, @NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x7}, @NL80211_ATTR_MLD_ADDR={0xc5, 0x13a, "0cc0fbb82eda06c00407ef022d0675f5ce8e70c0891f448e8da6ee90f0d8ed5a83d402cbb592be7541219c88b70130ed7a34806ce1e7206d6251b1236d4ab3bd736f8d785e7c1332eb4754bbf736a36dddfbe7b84c47e4c034694ec9828358db77ad7436cc9b9b1cb931fd8da53db80c8b45333675c719ea91950114d97ec76e993d8005c35ff463411484c7f18e1d2fc770c25b48d416125377201d26c3e9bbde8ed1f9cb504637943cd24c602880f30ee995b236ed2e457b4d8946372a4d496f"}, @NL80211_ATTR_TDLS_EXTERNAL_SETUP={0x4}]}, 0x91c}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) sched_get_priority_max$auto_SCHED_RR(0x2) sysfs$auto(0x6a2c, 0x648c, 0x8) r5 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, 0x0, 0x218202, 0x0) read$auto_mon_fops_binary_mon_bin(r5, &(0x7f0000000f80)=""/247, 0xf7) sendmsg$auto_NL80211_CMD_CONTROL_PORT_FRAME(r2, &(0x7f0000001200)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000011c0)={&(0x7f00000010c0)={0xf4, r4, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@NL80211_ATTR_S1G_CAPABILITY_MASK={0x58, 0x129, "3fbbc5160ff9faea6ffaef4744d29bbfc6468561fef019fd51f16c0ceef764b10484f3a01f559a1f24a72c4b2b69d01722d24fb6c6d4bd15d338ef046879727b76daca95bbf067f32da272e27c87d2bc13467089"}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x87, 0xcd, "47896d9fe7ee417c9c464784e88e1c00bf55f2719a496486209cc6bf210b57061b14b75f76a62e0d84ccfaddd0ba04e8c7edb986e7f27673dfba598abf265ab7f025f56f75ec999dc51e9fc974f512821319fe87db84efc40a19389e4b641c62aa4e0baf440e3fd90fc13af52c77e26d4b043afa299b81d1033d9dc20b6833f2294e92"}]}, 0xf4}, 0x1, 0x0, 0x0, 0x4}, 0x48091) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000001240)='/proc/sys/net/ipv6/conf/syz_tun/ra_honor_pio_life\x00', 0x1, 0x0) getsockopt$auto_SO_SNDTIMEO_OLD(r2, 0x0, 0x15, &(0x7f0000001280)='/dev/vhost-net\x00', &(0x7f00000012c0)=0x1) acct$auto(&(0x7f0000001300)='/dev/usbmon31\x00') r6 = eventfd$auto(0x1) shutdown$auto(r6, 0xca) keyctl$auto_KEYCTL_SEARCH(0xa, 0x0, 0x0, 0x494b, 0x101) socket$nl_generic(0x10, 0x3, 0x10) sysfs$auto(0x3, 0xff57e00000000000, 0x4) semctl$auto_GETALL(0x0, 0xe9b, 0xd, 0x9) socket$auto(0x9, 0x4, 0x4) keyctl$auto_KEYCTL_SEARCH(0xa, 0xfffffffffffff001, 0xb2de, 0x0, 0xffffffffffffffff) keyctl$auto_KEYCTL_SEARCH(0xa, 0x7fff, 0x0, 0x7, 0x5) 2m32.204243715s ago: executing program 0 (id=1008): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/irq/2/hwirq\x00', 0x181840, 0x0) r1 = ioctl$auto_TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f00000001c0)={0x8, &(0x7f0000000180)={0xe3b4, 0x9, 0xca, @raw}}) read$auto_seq_oss_f_ops_seq_oss(r1, &(0x7f00000002c0)=""/17, 0x11) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000000)=""/46, 0x2e) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(0x0, r2) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/devices/virtual/net/lowpan0/mtu\x00', 0x183841, 0x0) r4 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000040), 0x400, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) shutdown$auto(0x200000003, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_GPARAMS(r4, 0x40485404, 0x0) write$auto(r3, &(0x7f0000000300)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94&\x81\xe2\x13\x8f\xea#\xf8F\xbbOO]e[\xabxo\xd9\x90\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\b\xc1\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xcbA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xa5\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x85R\x96\xe4\x86\\\x13\xa9\x1a&\x19\x8a9\x82\xf0\x83\f\xf7\xeb', 0x4) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) syslog$auto(0x3, &(0x7f0000000080)='..\x00k\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\x00\x80\x00\x00\x00\x00\x00\x00j<\v\xf47\n\xa7\xd2\x8b\x11e1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\xa1q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa2', 0x5) mmap$auto(0x0, 0x2020009, 0x3, 0xeb2, 0xfffffffffffffffb, 0x8000) io_uring_setup$auto(0xa9, 0x0) r6 = socket(0x2a, 0x2, 0x1) r7 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/module/workqueue/parameters/default_affinity_scope\x00', 0x3e9240, 0x0) sendfile$auto(r6, r7, 0x0, 0x5) timer_create$auto(0x2, 0x0, 0x0) r8 = openat$auto_rfkill_fops_core(0xffffffffffffff9c, &(0x7f00000002c0), 0x20001, 0x0) writev$auto(r8, &(0x7f0000001c80)={0x0, 0x101}, 0x6) getdents$auto(0xffffffffffffffff, 0x0, 0xa2b0) r9 = openat$auto_ucma_fops_ucma(0xffffffffffffff9c, &(0x7f0000000140), 0x8202, 0x0) syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000000400), r5) write$auto(r9, 0x0, 0xc3) sendmsg$auto_ETHTOOL_MSG_LINKINFO_SET(r2, 0x0, 0x2000c840) 2m31.690374442s ago: executing program 0 (id=1009): mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0) chdir$auto(&(0x7f0000000000)='}[,&*}\x00') open(&(0x7f0000000100)='.\x00', 0x0, 0x0) mremap$auto(0x0, 0x3, 0x3fda, 0x6, 0x7fffffffb000) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f0000001380)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xfc\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\r&\xec\xb8\xb1Z\\\xc9L\xb2\t\xddbH|\xffGP\x97)\xb9:nqn\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc$\xa0\xa5\xce\xca\xe1P\xf7\xe5_\xca\xd5\xd8\xa4g_\xb1\x88\x8cAJS\x11\x8b\xd1%a\xe5DPk\x8c\xf9\xfb\xe0+\xdb\x12\x10.F\x00\xc37\xc7\xbf\x80\xbeu\xe1V\xb2\xc5\xc9\x1a\xc7\xdc}!\x10\xb1\",1%\x0e\xeb\x15\x15me\xe1a\x03\x18{\xb03+\x93*vB\xc6\xf1\xc6\xff\xbbt\x04!\xb6\v\xde2\xc9\x89#\xbaR\xee\x13jF%\xf2\x15\x9a\x82&\x89o\xa9\xd9\xbfFY\x90\x8c\xa0\xe4\x9d\xa2\xcd\x9a\xb5TC\xc4\x9d\x9ePb]\xaa\xc7f\x06N\xc5\xfa{\x02Y\xae\xf4(\xaa\x06);{?\x1e\fu\x19b\xdf$,\x01\"\x94\x00\x00\x00\x00\x003\xcfZ\xaf~<\xba\xb7\xa03\x8c\n*krS\x19Q#\x8f\xfbW\xad\xe0\xb3o\xcb\xf7\xda\x87C\x99\x1a\xa8\xc1\xe3\xc6%\xac\x01@*\xa0\xc4\xedn-lT\xe6*?\'\x9dW=\xa7\x03\x06\x83 IT\xa3\x7ff\xb6\x95\xe5\xd2\n\xaf\x87`\xce%\xf6 &\xa7M5I\x9c\x17h\x8c\xa4\x98\x16\xe0\xd9?Y\x7f\xf6\x85_{\xfd9p$B9_\xd8\xf4\x0e\xd0\xfa\xe7\xb0\xb8\xa0\xd7\a\xff.\"\x81\b\xb0\xb4\x84\xac\xad\x1b\x93~_\xea\xfe7\x03\"\xd9\x1d.\xe5{bHX\x14\xa1\bO\x03[^\x85jP\x89\t\x06GI\xb7\x99\xb2zZf\xc8\xd4\x8d\x1c\x1e\x03\xb9\xa7Nt\xae\xfff\xf9\tx\xae\xa8\x05\xb14\xc6\x9b\x1f\xd3\x01#\xc6\nb\xd4\xb4\xc8?\xa7\xe2R\xc1\xcf\xd2\xbc\xae\xd1\xc2\x88\"\xf3\xf0\xc0uQy\xec\xfab\xd6\xcd\x16)\x19*E\vm\x8d\x1bG:\x80\'pJ', 0x4100000a3d7) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/card1/pcm0p/sub7/info\x00', 0x8040, 0x0) read$auto_proc_reg_file_ops_compat_inode(r1, &(0x7f0000000100)=""/184, 0xb8) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x2003f2, 0x14) madvise$auto(0x0, 0x200007, 0x19) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x5d, 0x0) socket(0xa, 0x1, 0x84) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0x1, 0xb9, 0x12, 0x7, 0x400004, 0xffffffffffffffff, 0xe7b, "00000000000000e3ffffffffffffff00", 0x0, 0xffffffffffffffff, 0x5, 0x7, 0xe5}, 0x10) bpf$auto(0x1a, &(0x7f0000000380)=@link_create={@map_fd, @target_ifindex=r2, 0x3, 0x81, @uprobe_multi={0x81, 0x1ff, 0x3d7e, 0x0, 0x80000001, 0x5}}, 0x92) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x66) listen$auto(0x3, 0x83) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r3 = socket(0xb, 0x80000, 0x84) setsockopt$auto(r3, 0x0, 0x60, 0x0, 0x6f7250c4) close_range$auto(0x2, 0x8, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000002c80)='/proc/thread-self/net/rpc/nfsd.fh/channel\x00', 0x80, 0x0) exit$auto(0x5eb) 2m30.669049407s ago: executing program 0 (id=1011): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/irq/2/hwirq\x00', 0x181840, 0x0) r1 = ioctl$auto_TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f00000001c0)={0x8, &(0x7f0000000180)={0xe3b4, 0x9, 0xca, @raw}}) read$auto_seq_oss_f_ops_seq_oss(r1, &(0x7f00000002c0)=""/17, 0x11) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000000)=""/46, 0x2e) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(0x0, r2) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/devices/virtual/net/lowpan0/mtu\x00', 0x183841, 0x0) r4 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000040), 0x400, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) shutdown$auto(0x200000003, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_GPARAMS(r4, 0x40485404, 0x0) write$auto(r3, &(0x7f0000000300)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94&\x81\xe2\x13\x8f\xea#\xf8F\xbbOO]e[\xabxo\xd9\x90\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\b\xc1\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xcbA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xa5\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x85R\x96\xe4\x86\\\x13\xa9\x1a&\x19\x8a9\x82\xf0\x83\f\xf7\xeb', 0x4) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) syslog$auto(0x3, &(0x7f0000000080)='..\x00k\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\x00\x80\x00\x00\x00\x00\x00\x00j<\v\xf47\n\xa7\xd2\x8b\x11e1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\xa1q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa2', 0x5) mmap$auto(0x0, 0x2020009, 0x3, 0xeb2, 0xfffffffffffffffb, 0x8000) io_uring_setup$auto(0xa9, 0x0) r6 = socket(0x2a, 0x2, 0x1) r7 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/module/workqueue/parameters/default_affinity_scope\x00', 0x3e9240, 0x0) sendfile$auto(r6, r7, 0x0, 0x5) timer_create$auto(0x2, 0x0, 0x0) r8 = openat$auto_rfkill_fops_core(0xffffffffffffff9c, &(0x7f00000002c0), 0x20001, 0x0) writev$auto(r8, &(0x7f0000001c80)={0x0, 0x101}, 0x6) getdents$auto(0xffffffffffffffff, 0x0, 0xa2b0) r9 = openat$auto_ucma_fops_ucma(0xffffffffffffff9c, &(0x7f0000000140), 0x8202, 0x0) syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000000400), r5) write$auto(r9, 0x0, 0xc3) sendmsg$auto_ETHTOOL_MSG_LINKINFO_SET(r2, 0x0, 0x2000c840) 2m29.962844272s ago: executing program 0 (id=1014): madvise$auto(0x0, 0x7fffffffffffffff, 0xa) r0 = openat$auto_tracing_pipe_fops_trace(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/debug/tracing/trace_pipe\x00', 0x400, 0x0) mmap$auto(0x3, 0xfbffffffffffffff, 0xdf, 0xeb1, r0, 0x8000) mmap$auto(0x0, 0xa, 0xdf, 0xeb1, 0x401, 0x8000) r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x20342, 0x0) ioctl$auto_SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, 0x0) ioctl$auto_SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000ac0)="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") mmap$auto(0xfffffffffffffffe, 0xb, 0xdf, 0x9b7f, 0x2, 0x1) r2 = openat$auto_kmsg_fops_printk(0xffffffffffffff9c, &(0x7f0000000180), 0x66c001, 0x0) lseek$auto(0x3, 0x7fffffffffffffff, 0x0) openat$auto_proc_mounts_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/mounts\x00', 0x6046c1, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) setsockopt$auto(0xffffffffffffffff, 0x6, 0xc, 0x0, 0x4) r3 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x123002, 0x0) r4 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000240)='/dev/bus/usb/024/001\x00', 0x8600, 0x0) ioctl$auto_USBDEVFS_CONTROL(r4, 0xc0185500, &(0x7f0000001040)={0x80, 0x6, 0x2fd, 0x21, 0x9, 0xfffffffd, &(0x7f0000000100)}) execve$auto(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram5\x00', 0x14be02, 0x0) ioctl$auto_SNDCTL_DSP_SYNC(r3, 0x5001, 0x0) ioctl$auto_SNDCTL_DSP_GETODELAY(r3, 0x80045017, &(0x7f0000000180)) ioctl$auto(0xc8, 0x800454de, 0x5c8d) read$auto(r2, 0x0, 0x2) syz_clone(0x8000000, &(0x7f0000000780)="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", 0x25, &(0x7f0000000400), &(0x7f0000000200), &(0x7f0000000480)="0a08e2bafaa0dbec04d3858ac4b1c31555a61bb36bee2289f3da61c9de10eb4cf963a453c4511a9fb307b2ec026784077c8665e9aed313fdffffffffffffff31444b14a5813b4b213eddefed0fe3bf1460a3c9cc712f036f82492dc0fcec87df247be6b5369154fa0e4da6a8c1901c295736a46be2f77d4829318aa11eebd6d3700c2c0744750634df07a2942a18e71ead3acecf1b99b2e5ef0df22d87ccd13951b18027ccfef785c28c7c91aaed3c8d5934d9adea3479c82a8c852d29409e90c65b") sendmsg$auto_SMC_NETLINK_DUMP_UEID(0xffffffffffffffff, 0x0, 0x4008004) write$auto_fops_u8_(0xffffffffffffffff, &(0x7f0000000680)="b0ddb52641e211c13804004b3fdc570483b34acaacd90f35c9ec62ee8d8e39b1f20fd7f4a3172fa001ad5970f811ad7bf38afc369a12efc12db31ca64d1a49085fed84ef192c4a8846ac0e5c2bc8c88a6d77ae4b631e7b279dccae978de7f51abafe301bf17c203a996239b18e45bd37263fd821c0d725b13c26564ce76663c325f0556060f25c369c5be7b08c1b45bdf71ce852940775be2784cba54c913d4c120580db75a003b3bf6ac861be35753408db0f76ed0858fb52c7d6934e233378000346dc2852255915e0f569b8dadaf723fa97d903c9f4c53f157e33f867081b", 0xe0) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000040), 0x301183, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x81) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x800000000007111}, 0x8) syz_clone3(&(0x7f0000000280)={0xe4194880, 0x0, 0x0, 0x0, {0x18}, 0x0, 0xfffffffffffffed9, 0x0, 0x0}, 0x58) 2m14.846488688s ago: executing program 32 (id=1014): madvise$auto(0x0, 0x7fffffffffffffff, 0xa) r0 = openat$auto_tracing_pipe_fops_trace(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/debug/tracing/trace_pipe\x00', 0x400, 0x0) mmap$auto(0x3, 0xfbffffffffffffff, 0xdf, 0xeb1, r0, 0x8000) mmap$auto(0x0, 0xa, 0xdf, 0xeb1, 0x401, 0x8000) r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x20342, 0x0) ioctl$auto_SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, 0x0) ioctl$auto_SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000ac0)="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") mmap$auto(0xfffffffffffffffe, 0xb, 0xdf, 0x9b7f, 0x2, 0x1) r2 = openat$auto_kmsg_fops_printk(0xffffffffffffff9c, &(0x7f0000000180), 0x66c001, 0x0) lseek$auto(0x3, 0x7fffffffffffffff, 0x0) openat$auto_proc_mounts_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/mounts\x00', 0x6046c1, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) setsockopt$auto(0xffffffffffffffff, 0x6, 0xc, 0x0, 0x4) r3 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x123002, 0x0) r4 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000240)='/dev/bus/usb/024/001\x00', 0x8600, 0x0) ioctl$auto_USBDEVFS_CONTROL(r4, 0xc0185500, &(0x7f0000001040)={0x80, 0x6, 0x2fd, 0x21, 0x9, 0xfffffffd, &(0x7f0000000100)}) execve$auto(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram5\x00', 0x14be02, 0x0) ioctl$auto_SNDCTL_DSP_SYNC(r3, 0x5001, 0x0) ioctl$auto_SNDCTL_DSP_GETODELAY(r3, 0x80045017, &(0x7f0000000180)) ioctl$auto(0xc8, 0x800454de, 0x5c8d) read$auto(r2, 0x0, 0x2) syz_clone(0x8000000, &(0x7f0000000780)="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", 0x25, &(0x7f0000000400), &(0x7f0000000200), &(0x7f0000000480)="0a08e2bafaa0dbec04d3858ac4b1c31555a61bb36bee2289f3da61c9de10eb4cf963a453c4511a9fb307b2ec026784077c8665e9aed313fdffffffffffffff31444b14a5813b4b213eddefed0fe3bf1460a3c9cc712f036f82492dc0fcec87df247be6b5369154fa0e4da6a8c1901c295736a46be2f77d4829318aa11eebd6d3700c2c0744750634df07a2942a18e71ead3acecf1b99b2e5ef0df22d87ccd13951b18027ccfef785c28c7c91aaed3c8d5934d9adea3479c82a8c852d29409e90c65b") sendmsg$auto_SMC_NETLINK_DUMP_UEID(0xffffffffffffffff, 0x0, 0x4008004) write$auto_fops_u8_(0xffffffffffffffff, &(0x7f0000000680)="b0ddb52641e211c13804004b3fdc570483b34acaacd90f35c9ec62ee8d8e39b1f20fd7f4a3172fa001ad5970f811ad7bf38afc369a12efc12db31ca64d1a49085fed84ef192c4a8846ac0e5c2bc8c88a6d77ae4b631e7b279dccae978de7f51abafe301bf17c203a996239b18e45bd37263fd821c0d725b13c26564ce76663c325f0556060f25c369c5be7b08c1b45bdf71ce852940775be2784cba54c913d4c120580db75a003b3bf6ac861be35753408db0f76ed0858fb52c7d6934e233378000346dc2852255915e0f569b8dadaf723fa97d903c9f4c53f157e33f867081b", 0xe0) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000040), 0x301183, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x81) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x800000000007111}, 0x8) syz_clone3(&(0x7f0000000280)={0xe4194880, 0x0, 0x0, 0x0, {0x18}, 0x0, 0xfffffffffffffed9, 0x0, 0x0}, 0x58) 10.957336379s ago: executing program 1 (id=1265): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) preadv2$auto(r0, &(0x7f0000000280)={0x0, 0x80000000}, 0x6, 0x3, 0x4, 0x2a) ioctl$auto_BLKFLSBUF(r0, 0x1261, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb4, r0, 0x7) setrlimit$auto(0x8, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_WG_CMD_SET_DEVICE(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000240)={0x0}}, 0x4040850) r2 = syz_genetlink_get_family_id$auto_ovs_meter(&(0x7f0000002340), 0xffffffffffffffff) sendmsg$auto_OVS_METER_CMD_SET(r1, &(0x7f0000002480)={0x0, 0x0, &(0x7f0000002440)={&(0x7f0000000100)={0x2c, r2, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@OVS_METER_ATTR_KBPS={0x4}, @OVS_METER_ATTR_BANDS={0xc, 0x4, 0x0, 0x1, [@nested={0x4, 0x45}, @generic="141fc94a"]}, @OVS_METER_ATTR_ID={0x8, 0x1, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48000}, 0x0) capset$auto(&(0x7f0000000100)={0x20080522}, 0x0) mmap$auto(0x7fffffffe000, 0x61, 0x100001000000004, 0xfa31, 0x403, 0x8000) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x14be02, 0x0) mprotect$auto(0x1000, 0x401000, 0x4) close_range$auto(0x2, 0x8, 0x0) r4 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f00000000c0), 0x8001, 0x0) ioctl$auto_VHOST_SET_MEM_TABLE(r4, 0x4001af84, 0x0) msgget$auto(0xc, 0x77d9) msgrcv$auto(0x0, 0x0, 0xff9, 0x1, 0x3) r5 = open(0x0, 0x224782, 0x77) fallocate$auto(r5, 0x0, 0x7, 0x4cbd5d) ioctl$auto_UDMABUF_CREATE_LIST(r5, 0x40087543, &(0x7f0000000300)={0x800, 0x100, [{r3, 0x0, 0xe000000000, 0x4}, {r0, 0x0, 0x3, 0x7fff}, {r4, 0x0, 0x7, 0x3}]}) msgsnd$auto(0x3c, &(0x7f0000000000)={0x1000, 0x5}, 0x8, 0x8) syz_genetlink_get_family_id$auto_net_dm(&(0x7f0000000080), 0xffffffffffffffff) ioctl$auto_VHOST_SET_OWNER(r4, 0xaf01, 0x0) close_range$auto(0x2, 0x8, 0x0) read$auto(r0, &(0x7f0000000140)=':&}\\\x00(\x17\xf1\x1d\x0e\xa9\n\xeb\x1aU\xed\x9f-\xd6\xa1vQW\x9d\xdf\xc9\xfc\x0f#\xc9\x963\x9b\x02\x02Qk\b\xdcr\x9d*\xc6\xc1\f\xc6\xa0\xec\xfd\b{\xe8sN\xe6\b\x176rZ\xd7\xa7 v\xe8\x1d\x98I\xd7\x8d;\xb3]\x01\x1a7\xc8m\x1d\xe9:e\xf1\x1a\x04j\xccU\x01\'\x0f[1\xa5\x1f\x89K3\x13\xf3\xd8y\xa3;\xb4\\\xc9\x02\x8f\xfa\xc1\x9e*\xd8\xccp', 0x40) 10.715610651s ago: executing program 4 (id=1269): close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @loopback}, 0x54) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x3, 0xf, 0x940, 0x1ffe0, 0x3, 0x6, 0x2, 0x9, 0x5, 0x2, 0x8, 0xb0, 0x6, 0x5, 0x3, 0x5, 0x7, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x553, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc]}, 0x1fe, 0x81) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="10002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r0 = openat$auto_dynamic_events_ops_trace_dynevent(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/dynamic_events\x00', 0x542, 0x0) openat$auto_dvb_dvr_fops_dmxdev(0xffffffffffffff9c, 0x0, 0x20500, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) listen$auto(0x3, 0x81) statx$auto(0xffffffffffffffff, 0x0, 0x6d7, 0x80000008, 0x0) madvise$auto(0x0, 0xffffffffffef0005, 0x1a) sigaltstack$auto(0x0, 0x0) setresgid$auto(0x81, 0x800000a0, 0x8) setfsgid$auto(0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x2002, 0x0) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x8282, 0x0) chroot$auto(0xfffffffffffffffd) write$auto(r1, &(0x7f0000000380)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z\xa6!\xe8 \xf6$7\xa0\xdcF\xb95`\xa4m\xffb\x17\xbb\x7f\xea4.\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xd4\a\x18n\x8d\xf0\xfe\xceL\xbe8\xdc\xb9\xb6\'\xc4~\x18\xc4\x9e\x05=4\xdc\x96\x0e\xb1\x9bL\x918\x8f\x1by\x94C\x933`\x1a\x17\xe9\x12\xb5\xb8\xf7\xd8;', 0x4) openat$auto_nvram_misc_fops_nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x2001, 0x0) r2 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) write$auto_console_fops_tty_io(r2, &(0x7f0000000000)="c80d1b5d399b50", 0xfdef) write$auto_dynamic_events_ops_trace_dynevent(r0, &(0x7f0000000440), 0x0) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, 0x0, 0x801) landlock_create_ruleset$auto(0x0, 0xffffffffffffff1f, 0xf) 9.690999971s ago: executing program 3 (id=1270): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/mm/ksm/run\x00', 0x88b02, 0x3f) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0xffffeffe, 0x2) socket(0xa, 0x3, 0xff) pipe$auto(0x0) r0 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/platform/dummy_hcd.3/usb4/avoid_reset_quirk\x00', 0x129302, 0x0) write$auto(r1, &(0x7f0000000000)='\x00\x00', 0x2) close_range$auto(0x0, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0xe3, 0x100000eb1, 0x40000000000a1, 0x8000) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0) mmap$auto(0x4, 0x2000d, 0x4000000200df, 0xeb1, 0x404, 0x8000) timer_create$auto(0x9, 0x0, 0x0) timer_settime$auto(0x0, 0x9, &(0x7f00000000c0)={{0x0, 0x10007}, {0x2000c}}, 0x0) timer_gettime$auto(0x0, 0x0) close_range$auto(0x2, 0xa, 0x0) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x101c82, 0x0) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/mtrr\x00', 0xc0000, 0x0) getrlimit$auto(0x3, 0x0) ioctl$auto(0x3, 0x400c4d06, r2) socket(0x2b, 0x1, 0x1) setsockopt$auto(r0, 0x29, 0x20, 0x0, 0x4000002) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) 9.252937458s ago: executing program 3 (id=1272): mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0) chdir$auto(&(0x7f0000000000)='}[,&*}\x00') open(&(0x7f0000000100)='.\x00', 0x0, 0x0) mremap$auto(0x0, 0x3, 0x3fda, 0x6, 0x7fffffffb000) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f0000001380)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xfc\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\r&\xec\xb8\xb1Z\\\xc9L\xb2\t\xddbH|\xffGP\x97)\xb9:nqn\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc$\xa0\xa5\xce\xca\xe1P\xf7\xe5_\xca\xd5\xd8\xa4g_\xb1\x88\x8cAJS\x11\x8b\xd1%a\xe5DPk\x8c\xf9\xfb\xe0+\xdb\x12\x10.F\x00\xc37\xc7\xbf\x80\xbeu\xe1V\xb2\xc5\xc9\x1a\xc7\xdc}!\x10\xb1\",1%\x0e\xeb\x15\x15me\xe1a\x03\x18{\xb03+\x93*vB\xc6\xf1\xc6\xff\xbbt\x04!\xb6\v\xde2\xc9\x89#\xbaR\xee\x13jF%\xf2\x15\x9a\x82&\x89o\xa9\xd9\xbfFY\x90\x8c\xa0\xe4\x9d\xa2\xcd\x9a\xb5TC\xc4\x9d\x9ePb]\xaa\xc7f\x06N\xc5\xfa{\x02Y\xae\xf4(\xaa\x06);{?\x1e\fu\x19b\xdf$,\x01\"\x94\x00\x00\x00\x00\x003\xcfZ\xaf~<\xba\xb7\xa03\x8c\n*krS\x19Q#\x8f\xfbW\xad\xe0\xb3o\xcb\xf7\xda\x87C\x99\x1a\xa8\xc1\xe3\xc6%\xac\x01@*\xa0\xc4\xedn-lT\xe6*?\'\x9dW=\xa7\x03\x06\x83 IT\xa3\x7ff\xb6\x95\xe5\xd2\n\xaf\x87`\xce%\xf6 &\xa7M5I\x9c\x17h\x8c\xa4\x98\x16\xe0\xd9?Y\x7f\xf6\x85_{\xfd9p$B9_\xd8\xf4\x0e\xd0\xfa\xe7\xb0\xb8\xa0\xd7\a\xff.\"\x81\b\xb0\xb4\x84\xac\xad\x1b\x93~_\xea\xfe7\x03\"\xd9\x1d.\xe5{bHX\x14\xa1\bO\x03[^\x85jP\x89\t\x06GI\xb7\x99\xb2zZf\xc8\xd4\x8d\x1c\x1e\x03\xb9\xa7Nt\xae\xfff\xf9\tx\xae\xa8\x05\xb14\xc6\x9b\x1f\xd3\x01#\xc6\nb\xd4\xb4\xc8?\xa7\xe2R\xc1\xcf\xd2\xbc\xae\xd1\xc2\x88\"\xf3\xf0\xc0uQy\xec\xfab\xd6\xcd\x16)\x19*E\vm\x8d\x1bG:\x80\'pJ', 0x4100000a3d7) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/card1/pcm0p/sub7/info\x00', 0x8040, 0x0) read$auto_proc_reg_file_ops_compat_inode(r1, &(0x7f0000000100)=""/184, 0xb8) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x200007, 0x19) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x5d, 0x0) socket(0xa, 0x1, 0x84) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0x1, 0xb9, 0x12, 0x7, 0x400004, 0xffffffffffffffff, 0xe7b, "00000000000000e3ffffffffffffff00", 0x0, 0xffffffffffffffff, 0x5, 0x7, 0xe5}, 0x10) bpf$auto(0x1a, &(0x7f0000000380)=@link_create={@map_fd, @target_ifindex=r2, 0x3, 0x81, @uprobe_multi={0x81, 0x1ff, 0x3d7e, 0x0, 0x80000001, 0x5}}, 0x92) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x66) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) listen$auto(0x3, 0x83) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r3 = socket(0xb, 0x80000, 0x84) setsockopt$auto(r3, 0x0, 0x60, 0x0, 0x6f7250c4) close_range$auto(0x2, 0x8, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000002c80)='/proc/thread-self/net/rpc/nfsd.fh/channel\x00', 0x80, 0x0) exit$auto(0x5eb) 8.814224373s ago: executing program 1 (id=1273): r0 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000100)='/dev/bus/usb/008/001\x00', 0xe06, 0x0) setresuid$auto(0x0, 0x8, 0x8000) r1 = setfsuid$auto(0xee00) setresuid$auto(r1, 0x0, r1) ioprio_set$auto(0x3, r1, 0x4b34) socket(0x2, 0x2, 0x0) mmap$auto(0x0, 0x6, 0x3, 0xeb1, 0x7, 0x8000) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp1\x00', 0x20342, 0x0) open_tree$auto(0xffffffffffffff9c, &(0x7f0000001100)='./cgroup\x00', 0x2) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x6, 0x0) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f00000000c0)=@in={0x2, 0x3, @loopback}, 0x54) read$auto(0x3, 0x0, 0x8080) write$auto(0x3, 0x0, 0xffd8) pwrite64$auto(0xffffffffffffffff, &(0x7f0000000040)='+\x00', 0xfdef, 0x1ff) mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_uprobe_profile_ops_trace_uprobe(0xffffffffffffff9c, 0x0, 0x80000, 0x0) prctl$auto(0x41, 0x1, 0x0, 0x0, 0x0) prctl$auto(0x41, 0x1, 0x0, 0x0, 0x0) capget$auto(0x0, 0xfffffffffffffffe) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/route\x00', 0x8a200, 0x0) pread64$auto(r2, &(0x7f0000000540)='veth1\x00\xe0,\x17\xa0\xf7\x89Pl\x84K?\x01\x84\xa1i\xe00\x81p\xa0U \f\xdbP`:\xe2\'\xa7\xbf\xbd\x04\x18\xad\x90I^\x99M\xe0W\x14\x11\xf4\xeb\x90:\v\xc5\x13*\xfe\x90\xb1\xa9O\xa5\x05\xaa\x8fTi\xd6\x88Q\xda\xca', 0x200000000003, 0x8) connect$auto(0x3, 0x0, 0x50) setsockopt$auto(0x3, 0x1, 0x2a, 0x0, 0x9) recvmmsg$auto(0x3, 0x0, 0x10000, 0x6, 0x0) ioctl$auto_USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f00000000c0)=0xfff) 8.760501262s ago: executing program 4 (id=1274): close_range$auto(0x0, 0xfffffffffffff000, 0x2) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) r0 = prctl$auto(0x3a, 0x1, 0x0, 0x10, 0x4) shutdown$auto(r0, 0xda6) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) ioctl$auto_BLKRRPART(0xffffffffffffffff, 0x125f, 0x700000000000000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0x15, 0x5, 0x0) mmap$auto(0x20000000000101, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x3, 0x13, 0x9, 0x1ffe0, 0xfffff75b, 0x6, 0x2, 0x9, 0x5, 0x2, 0x7, 0xb0, 0x9, 0x5, 0x3, 0x5, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x8, 0xfffffffffffffffc]}, 0x1fe, 0x81) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="10002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000c40)='/proc/self/syscall\x00', 0x40002, 0x0) r1 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x4008) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop6\x00', 0x169780, 0x0) close_range$auto(r2, 0xfffffffffffff000, 0xac) socket(0x2, 0x2, 0x0) mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb2, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0x848000000015, 0x805, 0x0) bind$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @loopback}, 0x6b) sendto$auto(r3, 0x0, 0x402, 0x0, &(0x7f0000000000)=@in={0x2, 0x4e24, @rand_addr=0x64010100}, 0x1c) r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/asound/card0/pcm0c/xrun_debug\x00', 0x8f3b7a51b8160521, 0x0) write$auto_proc_reg_file_ops_compat_inode(r4, &(0x7f00000001c0)="5ced72ac", 0x4) r5 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)) getdents64$auto(r5, &(0x7f0000000000)={0x309, 0x81, 0xffff, 0x7}, 0xef) 7.314632825s ago: executing program 3 (id=1275): mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0) chdir$auto(&(0x7f0000000000)='}[,&*}\x00') open(&(0x7f0000000100)='.\x00', 0x0, 0x0) mremap$auto(0x0, 0x3, 0x3fda, 0x6, 0x7fffffffb000) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f0000001380)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xfc\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\r&\xec\xb8\xb1Z\\\xc9L\xb2\t\xddbH|\xffGP\x97)\xb9:nqn\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc$\xa0\xa5\xce\xca\xe1P\xf7\xe5_\xca\xd5\xd8\xa4g_\xb1\x88\x8cAJS\x11\x8b\xd1%a\xe5DPk\x8c\xf9\xfb\xe0+\xdb\x12\x10.F\x00\xc37\xc7\xbf\x80\xbeu\xe1V\xb2\xc5\xc9\x1a\xc7\xdc}!\x10\xb1\",1%\x0e\xeb\x15\x15me\xe1a\x03\x18{\xb03+\x93*vB\xc6\xf1\xc6\xff\xbbt\x04!\xb6\v\xde2\xc9\x89#\xbaR\xee\x13jF%\xf2\x15\x9a\x82&\x89o\xa9\xd9\xbfFY\x90\x8c\xa0\xe4\x9d\xa2\xcd\x9a\xb5TC\xc4\x9d\x9ePb]\xaa\xc7f\x06N\xc5\xfa{\x02Y\xae\xf4(\xaa\x06);{?\x1e\fu\x19b\xdf$,\x01\"\x94\x00\x00\x00\x00\x003\xcfZ\xaf~<\xba\xb7\xa03\x8c\n*krS\x19Q#\x8f\xfbW\xad\xe0\xb3o\xcb\xf7\xda\x87C\x99\x1a\xa8\xc1\xe3\xc6%\xac\x01@*\xa0\xc4\xedn-lT\xe6*?\'\x9dW=\xa7\x03\x06\x83 IT\xa3\x7ff\xb6\x95\xe5\xd2\n\xaf\x87`\xce%\xf6 &\xa7M5I\x9c\x17h\x8c\xa4\x98\x16\xe0\xd9?Y\x7f\xf6\x85_{\xfd9p$B9_\xd8\xf4\x0e\xd0\xfa\xe7\xb0\xb8\xa0\xd7\a\xff.\"\x81\b\xb0\xb4\x84\xac\xad\x1b\x93~_\xea\xfe7\x03\"\xd9\x1d.\xe5{bHX\x14\xa1\bO\x03[^\x85jP\x89\t\x06GI\xb7\x99\xb2zZf\xc8\xd4\x8d\x1c\x1e\x03\xb9\xa7Nt\xae\xfff\xf9\tx\xae\xa8\x05\xb14\xc6\x9b\x1f\xd3\x01#\xc6\nb\xd4\xb4\xc8?\xa7\xe2R\xc1\xcf\xd2\xbc\xae\xd1\xc2\x88\"\xf3\xf0\xc0uQy\xec\xfab\xd6\xcd\x16)\x19*E\vm\x8d\x1bG:\x80\'pJ', 0x4100000a3d7) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/card1/pcm0p/sub7/info\x00', 0x8040, 0x0) read$auto_proc_reg_file_ops_compat_inode(r1, &(0x7f0000000100)=""/184, 0xb8) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x200007, 0x19) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x5d, 0x0) socket(0xa, 0x1, 0x84) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0x1, 0xb9, 0x12, 0x7, 0x400004, 0xffffffffffffffff, 0xe7b, "00000000000000e3ffffffffffffff00", 0x0, 0xffffffffffffffff, 0x5, 0x7, 0xe5}, 0x10) bpf$auto(0x1a, &(0x7f0000000380)=@link_create={@map_fd, @target_ifindex=r2, 0x3, 0x81, @uprobe_multi={0x81, 0x1ff, 0x3d7e, 0x0, 0x80000001, 0x5}}, 0x92) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x66) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) listen$auto(0x3, 0x83) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r3 = socket(0xb, 0x80000, 0x84) setsockopt$auto(r3, 0x0, 0x60, 0x0, 0x6f7250c4) close_range$auto(0x2, 0x8, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000002c80)='/proc/thread-self/net/rpc/nfsd.fh/channel\x00', 0x80, 0x0) exit$auto(0x5eb) 7.28111031s ago: executing program 4 (id=1276): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) preadv2$auto(r0, &(0x7f0000000280)={0x0, 0x80000000}, 0x6, 0x3, 0x4, 0x2a) ioctl$auto_BLKFLSBUF(r0, 0x1261, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb4, r0, 0x7) setrlimit$auto(0x8, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_WG_CMD_SET_DEVICE(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000240)={0x0}}, 0x4040850) r2 = syz_genetlink_get_family_id$auto_ovs_meter(&(0x7f0000002340), 0xffffffffffffffff) sendmsg$auto_OVS_METER_CMD_SET(r1, &(0x7f0000002480)={0x0, 0x0, &(0x7f0000002440)={&(0x7f0000000100)={0x2c, r2, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@OVS_METER_ATTR_KBPS={0x4}, @OVS_METER_ATTR_BANDS={0xc, 0x4, 0x0, 0x1, [@nested={0x4, 0x45}, @generic="141fc94a"]}, @OVS_METER_ATTR_ID={0x8, 0x1, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48000}, 0x0) capset$auto(&(0x7f0000000100)={0x20080522}, 0x0) mmap$auto(0x7fffffffe000, 0x61, 0x100001000000004, 0xfa31, 0x403, 0x8000) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x14be02, 0x0) mprotect$auto(0x1000, 0x401000, 0x4) close_range$auto(0x2, 0x8, 0x0) r4 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, 0x0, 0x8001, 0x0) ioctl$auto_VHOST_SET_MEM_TABLE(r4, 0x4001af84, 0x0) msgget$auto(0xc, 0x77d9) msgrcv$auto(0x0, 0x0, 0xff9, 0x1, 0x3) r5 = open(&(0x7f0000000040)='./file0\x00', 0x224782, 0x77) fallocate$auto(r5, 0x0, 0x7, 0x4cbd5d) ioctl$auto_UDMABUF_CREATE_LIST(r5, 0x40087543, &(0x7f0000000300)={0x800, 0x100, [{r3, 0x0, 0xe000000000, 0x4}, {r0, 0x0, 0x3, 0x7fff}, {r4, 0x0, 0x7, 0x3}]}) msgsnd$auto(0x3c, &(0x7f0000000000)={0x1000, 0x5}, 0x8, 0x8) syz_genetlink_get_family_id$auto_net_dm(&(0x7f0000000080), 0xffffffffffffffff) ioctl$auto_VHOST_SET_OWNER(r4, 0xaf01, 0x0) close_range$auto(0x2, 0x8, 0x0) read$auto(r0, &(0x7f0000000140)=':&}\\\x00(\x17\xf1\x1d\x0e\xa9\n\xeb\x1aU\xed\x9f-\xd6\xa1vQW\x9d\xdf\xc9\xfc\x0f#\xc9\x963\x9b\x02\x02Qk\b\xdcr\x9d*\xc6\xc1\f\xc6\xa0\xec\xfd\b{\xe8sN\xe6\b\x176rZ\xd7\xa7 v\xe8\x1d\x98I\xd7\x8d;\xb3]\x01\x1a7\xc8m\x1d\xe9:e\xf1\x1a\x04j\xccU\x01\'\x0f[1\xa5\x1f\x89K3\x13\xf3\xd8y\xa3;\xb4\\\xc9\x02\x8f\xfa\xc1\x9e*\xd8\xccp', 0x40) 7.271773327s ago: executing program 2 (id=1277): mmap$auto(0x0, 0x9, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x4020009, 0x2d2b, 0xeb1, 0x401, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) r0 = openat$auto_proc_clear_refs_operations_internal(0xffffffffffffff9c, &(0x7f0000000600)='/proc/thread-self/clear_refs\x00', 0x2, 0x0) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'virt_wifi0\x00'}) sendmsg$auto_NL80211_CMD_SET_WIPHY(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={0x1c, r1, 0x13, 0x70bd2c, 0x25dfdbdd, {}, [@NL80211_ATTR_WIPHY_TX_POWER_SETTING={0x8, 0x61, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24004080}, 0x20040894) r3 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000400), r2) sendmsg$auto_ETHTOOL_MSG_MM_SET(r2, &(0x7f0000000580)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={&(0x7f0000000640)=ANY=[@ANYRES16=r1, @ANYRES16=r3, @ANYBLOB], 0x14}, 0x1, 0x0, 0x0, 0x2004005f}, 0x200440c0) sendmsg$auto_NL80211_CMD_SET_KEY(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="07000000a51bd29de4703523e888c83357416c8068691044999dbe4b04ed5061e2b57ab3e96efebf04222b9cfcbae6ae8eb032ea5c68c627233b088c7dde22addbbdb22fd9b751fc137a503b78e09b446eb42da0c739e910c9248b6fecba07d15a6e29a86b22f4a8a76eb494a1758114e3c715efab0187", @ANYBLOB="010026bd7000fcdbdf250a0000000500d200f40000000400dd0008009e000a0000000500590003000000"], 0x30}, 0x1, 0x0, 0x0, 0x640c5}, 0x20040000) socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000002740), 0xffffffffffffffff) sendmsg$auto_NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="00012cbd700000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x804) process_vm_readv$auto(0x0, 0x0, 0x1, 0x0, 0x6, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) write$auto_proc_clear_refs_operations_internal(0xffffffffffffffff, &(0x7f0000000280)="20056e823adee8a5e350c13bf4491ef375b91e644326f5ffc7cc83860dad119d80f3347b454248bf7f89a33ca4", 0x2d) madvise$auto(0x0, 0x2003f2, 0x15) ioctl$auto_BLKALIGNOFF(0xffffffffffffffff, 0x127a, 0x0) madvise$auto(0x0, 0x1010001, 0x100000003) madvise$auto(0x1000, 0x400050, 0x9) munmap$auto(0x8000, 0xffffffff) write$auto(r0, &(0x7f0000000340)='3\x00', 0x6) socket(0xa, 0x5, 0x0) socket(0x2, 0x3, 0x6) open_by_handle_at$auto(0xffffffffffffffff, &(0x7f0000000040)={0x3a, 0x7fff, "a35003c71218b971a7ecac8c6375308e82367f5a50ea2ea9f3208ba9e73c74452b54f579b3c06a5f30f418a64cdd85886a50828c09af38e22878"}, 0xffffffff) 6.117532292s ago: executing program 2 (id=1278): mmap$auto(0x0, 0x9, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x4020009, 0x2d2b, 0xeb1, 0x401, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) r0 = openat$auto_proc_clear_refs_operations_internal(0xffffffffffffff9c, &(0x7f0000000600)='/proc/thread-self/clear_refs\x00', 0x2, 0x0) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'virt_wifi0\x00'}) sendmsg$auto_NL80211_CMD_SET_WIPHY(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={0x1c, r1, 0x13, 0x70bd2c, 0x25dfdbdd, {}, [@NL80211_ATTR_WIPHY_TX_POWER_SETTING={0x8, 0x61, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24004080}, 0x20040894) r3 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000400), r2) sendmsg$auto_ETHTOOL_MSG_MM_SET(r2, &(0x7f0000000580)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={&(0x7f0000000640)=ANY=[@ANYRES16=r1, @ANYRES16=r3, @ANYBLOB], 0x14}, 0x1, 0x0, 0x0, 0x2004005f}, 0x200440c0) sendmsg$auto_NL80211_CMD_SET_KEY(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYRES16=r1, @ANYBLOB="010026bd7000fcdbdf250a0000000500d200f40000000400dd0008009e000a0000000500590003000000"], 0x30}, 0x1, 0x0, 0x0, 0x640c5}, 0x20040000) socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000002740), 0xffffffffffffffff) sendmsg$auto_NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="00012cbd700000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x804) process_vm_readv$auto(0x0, 0x0, 0x1, 0x0, 0x6, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) write$auto_proc_clear_refs_operations_internal(0xffffffffffffffff, &(0x7f0000000280)="20056e823adee8a5e350c13bf4491ef375b91e644326f5ffc7cc83860dad119d80f3347b454248bf7f89a33ca4", 0x2d) madvise$auto(0x0, 0x2003f2, 0x15) ioctl$auto_BLKALIGNOFF(0xffffffffffffffff, 0x127a, 0x0) madvise$auto(0x0, 0x1010001, 0x100000003) madvise$auto(0x1000, 0x400050, 0x9) munmap$auto(0x8000, 0xffffffff) write$auto(r0, &(0x7f0000000340)='3\x00', 0x6) socket(0xa, 0x5, 0x0) socket(0x2, 0x3, 0x6) open_by_handle_at$auto(0xffffffffffffffff, &(0x7f0000000040)={0x3a, 0x7fff, "a35003c71218b971a7ecac8c6375308e82367f5a50ea2ea9f3208ba9e73c74452b54f579b3c06a5f30f418a64cdd85886a50828c09af38e22878"}, 0xffffffff) 5.159822371s ago: executing program 3 (id=1279): mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0) chdir$auto(&(0x7f0000000000)='}[,&*}\x00') open(&(0x7f0000000100)='.\x00', 0x0, 0x0) mremap$auto(0x0, 0x3, 0x3fda, 0x6, 0x7fffffffb000) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f0000001380)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xfc\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\r&\xec\xb8\xb1Z\\\xc9L\xb2\t\xddbH|\xffGP\x97)\xb9:nqn\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc$\xa0\xa5\xce\xca\xe1P\xf7\xe5_\xca\xd5\xd8\xa4g_\xb1\x88\x8cAJS\x11\x8b\xd1%a\xe5DPk\x8c\xf9\xfb\xe0+\xdb\x12\x10.F\x00\xc37\xc7\xbf\x80\xbeu\xe1V\xb2\xc5\xc9\x1a\xc7\xdc}!\x10\xb1\",1%\x0e\xeb\x15\x15me\xe1a\x03\x18{\xb03+\x93*vB\xc6\xf1\xc6\xff\xbbt\x04!\xb6\v\xde2\xc9\x89#\xbaR\xee\x13jF%\xf2\x15\x9a\x82&\x89o\xa9\xd9\xbfFY\x90\x8c\xa0\xe4\x9d\xa2\xcd\x9a\xb5TC\xc4\x9d\x9ePb]\xaa\xc7f\x06N\xc5\xfa{\x02Y\xae\xf4(\xaa\x06);{?\x1e\fu\x19b\xdf$,\x01\"\x94\x00\x00\x00\x00\x003\xcfZ\xaf~<\xba\xb7\xa03\x8c\n*krS\x19Q#\x8f\xfbW\xad\xe0\xb3o\xcb\xf7\xda\x87C\x99\x1a\xa8\xc1\xe3\xc6%\xac\x01@*\xa0\xc4\xedn-lT\xe6*?\'\x9dW=\xa7\x03\x06\x83 IT\xa3\x7ff\xb6\x95\xe5\xd2\n\xaf\x87`\xce%\xf6 &\xa7M5I\x9c\x17h\x8c\xa4\x98\x16\xe0\xd9?Y\x7f\xf6\x85_{\xfd9p$B9_\xd8\xf4\x0e\xd0\xfa\xe7\xb0\xb8\xa0\xd7\a\xff.\"\x81\b\xb0\xb4\x84\xac\xad\x1b\x93~_\xea\xfe7\x03\"\xd9\x1d.\xe5{bHX\x14\xa1\bO\x03[^\x85jP\x89\t\x06GI\xb7\x99\xb2zZf\xc8\xd4\x8d\x1c\x1e\x03\xb9\xa7Nt\xae\xfff\xf9\tx\xae\xa8\x05\xb14\xc6\x9b\x1f\xd3\x01#\xc6\nb\xd4\xb4\xc8?\xa7\xe2R\xc1\xcf\xd2\xbc\xae\xd1\xc2\x88\"\xf3\xf0\xc0uQy\xec\xfab\xd6\xcd\x16)\x19*E\vm\x8d\x1bG:\x80\'pJ', 0x4100000a3d7) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/card1/pcm0p/sub7/info\x00', 0x8040, 0x0) read$auto_proc_reg_file_ops_compat_inode(r1, &(0x7f0000000100)=""/184, 0xb8) madvise$auto(0x0, 0x2003f2, 0x14) madvise$auto(0x0, 0x200007, 0x19) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x5d, 0x0) socket(0xa, 0x1, 0x84) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0x1, 0xb9, 0x12, 0x7, 0x400004, 0xffffffffffffffff, 0xe7b, "00000000000000e3ffffffffffffff00", 0x0, 0xffffffffffffffff, 0x5, 0x7, 0xe5}, 0x10) bpf$auto(0x1a, &(0x7f0000000380)=@link_create={@map_fd, @target_ifindex=r2, 0x3, 0x81, @uprobe_multi={0x81, 0x1ff, 0x3d7e, 0x0, 0x80000001, 0x5}}, 0x92) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x66) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) listen$auto(0x3, 0x83) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r3 = socket(0xb, 0x80000, 0x84) setsockopt$auto(r3, 0x0, 0x60, 0x0, 0x6f7250c4) close_range$auto(0x2, 0x8, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000002c80)='/proc/thread-self/net/rpc/nfsd.fh/channel\x00', 0x80, 0x0) exit$auto(0x5eb) 5.0928902s ago: executing program 2 (id=1280): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4ea2, @remote}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0x101}, 0x8}, 0x7, 0x20020000) sendmsg$auto_ETHTOOL_MSG_PSE_GET(r0, 0x0, 0x8014) sendmmsg$auto(r0, &(0x7f0000000480)={{&(0x7f00000000c0), 0x2, &(0x7f00000003c0)={0x0, 0xb9d}, 0x3, 0x0, 0x3, 0x5}, 0xfff}, 0x101, 0xc3a4) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) write$auto(0x3, 0x0, 0x7fffffff) read$auto(0x3, 0x0, 0x80) sendmsg$auto_NLBL_CALIPSO_C_LISTALL(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000004c0)={0x2c, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x6}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x99d}, @NLBL_CALIPSO_A_MTYPE={0x8, 0x2, 0x401}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20044001}, 0x80) write$auto(0x3, 0x0, 0x100000000) openat$auto_o2hb_debug_fops_heartbeat(0xffffffffffffff9c, 0x0, 0xa040, 0x0) sendmsg$auto_OVS_VPORT_CMD_DEL(r0, 0x0, 0x4000000) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffff7, 0x8000) close_range$auto(0x2, 0x8, 0x0) fanotify_init$auto(0x65, 0x2) r1 = socket(0x1d, 0x2, 0x2) connect$auto(0x3, 0x0, 0x55) socket(0x10, 0x3, 0x6) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) recvfrom$auto(r1, 0x0, 0xe230, 0x5, 0x0, 0x0) write$auto(0x3, 0x0, 0x5c8) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) write$auto(0x3, 0x0, 0x5c8) ioctl$auto(0x3, 0x8906, 0xd) r2 = io_uring_setup$auto(0xc, 0x0) mmap$auto(0x0, 0x400408, 0x10001, 0x411, r2, 0x8000) ioctl$auto_SG_GET_REQUEST_TABLE(r2, 0x2286, 0x0) 4.785843322s ago: executing program 1 (id=1281): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000002ec0), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_FEC_GET(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x44000}, 0x800) mmap$auto(0x0, 0x40006, 0xdf, 0x200009b72, 0x7, 0x28000) r1 = io_uring_setup$auto(0x6, 0x0) ustat$auto(0x801, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x155) socket(0x2, 0x2, 0x0) r2 = socket(0x2, 0x1, 0x0) close_range$auto(0x2, 0x8, 0x0) r3 = open(0x0, 0x26241, 0x20) r4 = socket(0x2, 0x1, 0x106) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0xffff, @remote}, 0x6a) socket(0x2, 0x1, 0x106) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000001d00), 0xffffffffffffffff) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) unshare$auto(0x20000080) syz_clone(0x2000300, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x5004000, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$auto_TIOCSTI2(r1, 0x5412, &(0x7f0000000000)="b68161a86e8da4110338a92ca863a91beaa8558206154cc5fbaf") listen$auto(0x3, 0x81) sendmmsg$auto(r2, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) accept$auto(0x3, 0xffffffffffffffff, 0xfffffffffffffffd) mmap$auto(0x0, 0x1, 0xdf, 0x20000000000e31, 0x40000000000a5, 0x8000) close_range$auto(r4, r3, 0x0) r5 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sysvipc/msg\x00', 0x8a880, 0x0) pread64$auto(r5, 0x0, 0x7fff, 0x3) 4.564017033s ago: executing program 4 (id=1282): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) preadv2$auto(r0, &(0x7f0000000280)={0x0, 0x80000000}, 0x6, 0x3, 0x4, 0x2a) ioctl$auto_BLKFLSBUF(r0, 0x1261, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb4, r0, 0x7) setrlimit$auto(0x8, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_WG_CMD_SET_DEVICE(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000240)={0x0}}, 0x4040850) r2 = syz_genetlink_get_family_id$auto_ovs_meter(&(0x7f0000002340), 0xffffffffffffffff) sendmsg$auto_OVS_METER_CMD_SET(r1, &(0x7f0000002480)={0x0, 0x0, &(0x7f0000002440)={&(0x7f0000000100)={0x2c, r2, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@OVS_METER_ATTR_KBPS={0x4}, @OVS_METER_ATTR_BANDS={0xc, 0x4, 0x0, 0x1, [@nested={0x4, 0x45}, @generic="141fc94a"]}, @OVS_METER_ATTR_ID={0x8, 0x1, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48000}, 0x0) capset$auto(&(0x7f0000000100)={0x20080522}, 0x0) mmap$auto(0x7fffffffe000, 0x61, 0x100001000000004, 0xfa31, 0x403, 0x8000) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x14be02, 0x0) mprotect$auto(0x1000, 0x401000, 0x4) close_range$auto(0x2, 0x8, 0x0) r4 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f00000000c0), 0x8001, 0x0) ioctl$auto_VHOST_SET_MEM_TABLE(r4, 0x4001af84, 0x0) msgget$auto(0xc, 0x77d9) msgrcv$auto(0x0, 0x0, 0xff9, 0x1, 0x3) r5 = open(0x0, 0x224782, 0x77) fallocate$auto(r5, 0x0, 0x7, 0x4cbd5d) ioctl$auto_UDMABUF_CREATE_LIST(r5, 0x40087543, &(0x7f0000000300)={0x800, 0x100, [{r3, 0x0, 0xe000000000, 0x4}, {r0, 0x0, 0x3, 0x7fff}, {r4, 0x0, 0x7, 0x3}]}) msgsnd$auto(0x3c, &(0x7f0000000000)={0x1000, 0x5}, 0x8, 0x8) syz_genetlink_get_family_id$auto_net_dm(&(0x7f0000000080), 0xffffffffffffffff) ioctl$auto_VHOST_SET_OWNER(r4, 0xaf01, 0x0) close_range$auto(0x2, 0x8, 0x0) read$auto(r0, &(0x7f0000000140)=':&}\\\x00(\x17\xf1\x1d\x0e\xa9\n\xeb\x1aU\xed\x9f-\xd6\xa1vQW\x9d\xdf\xc9\xfc\x0f#\xc9\x963\x9b\x02\x02Qk\b\xdcr\x9d*\xc6\xc1\f\xc6\xa0\xec\xfd\b{\xe8sN\xe6\b\x176rZ\xd7\xa7 v\xe8\x1d\x98I\xd7\x8d;\xb3]\x01\x1a7\xc8m\x1d\xe9:e\xf1\x1a\x04j\xccU\x01\'\x0f[1\xa5\x1f\x89K3\x13\xf3\xd8y\xa3;\xb4\\\xc9\x02\x8f\xfa\xc1\x9e*\xd8\xccp', 0x40) 4.19897987s ago: executing program 1 (id=1283): mmap$auto(0x0, 0x9, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x4020009, 0x2d2b, 0xeb1, 0x401, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) r0 = openat$auto_proc_clear_refs_operations_internal(0xffffffffffffff9c, &(0x7f0000000600)='/proc/thread-self/clear_refs\x00', 0x2, 0x0) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'virt_wifi0\x00'}) sendmsg$auto_NL80211_CMD_SET_WIPHY(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={0x1c, r1, 0x13, 0x70bd2c, 0x25dfdbdd, {}, [@NL80211_ATTR_WIPHY_TX_POWER_SETTING={0x8, 0x61, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24004080}, 0x20040894) r3 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000400), r2) sendmsg$auto_ETHTOOL_MSG_MM_SET(r2, &(0x7f0000000580)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={&(0x7f0000000640)=ANY=[@ANYRES16=r1, @ANYRES16=r3, @ANYBLOB], 0x14}, 0x1, 0x0, 0x0, 0x2004005f}, 0x200440c0) sendmsg$auto_NL80211_CMD_SET_KEY(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="010026bd7000fcdbdf250a0000000500d200f40000000400dd0008009e000a0000000500590003000000"], 0x30}, 0x1, 0x0, 0x0, 0x640c5}, 0x20040000) socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000002740), 0xffffffffffffffff) sendmsg$auto_NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="00012cbd700000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x804) process_vm_readv$auto(0x0, 0x0, 0x1, 0x0, 0x6, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) write$auto_proc_clear_refs_operations_internal(0xffffffffffffffff, &(0x7f0000000280)="20056e823adee8a5e350c13bf4491ef375b91e644326f5ffc7cc83860dad119d80f3347b454248bf7f89a33ca4", 0x2d) madvise$auto(0x0, 0x2003f2, 0x15) ioctl$auto_BLKALIGNOFF(0xffffffffffffffff, 0x127a, 0x0) madvise$auto(0x0, 0x1010001, 0x100000003) madvise$auto(0x1000, 0x400050, 0x9) munmap$auto(0x8000, 0xffffffff) write$auto(r0, &(0x7f0000000340)='3\x00', 0x6) socket(0xa, 0x5, 0x0) socket(0x2, 0x3, 0x6) open_by_handle_at$auto(0xffffffffffffffff, &(0x7f0000000040)={0x3a, 0x7fff, "a35003c71218b971a7ecac8c6375308e82367f5a50ea2ea9f3208ba9e73c74452b54f579b3c06a5f30f418a64cdd85886a50828c09af38e22878"}, 0xffffffff) 4.014937839s ago: executing program 3 (id=1284): mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0) chdir$auto(&(0x7f0000000000)='}[,&*}\x00') open(&(0x7f0000000100)='.\x00', 0x0, 0x0) mremap$auto(0x0, 0x3, 0x3fda, 0x6, 0x7fffffffb000) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f0000001380)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xfc\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\r&\xec\xb8\xb1Z\\\xc9L\xb2\t\xddbH|\xffGP\x97)\xb9:nqn\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc$\xa0\xa5\xce\xca\xe1P\xf7\xe5_\xca\xd5\xd8\xa4g_\xb1\x88\x8cAJS\x11\x8b\xd1%a\xe5DPk\x8c\xf9\xfb\xe0+\xdb\x12\x10.F\x00\xc37\xc7\xbf\x80\xbeu\xe1V\xb2\xc5\xc9\x1a\xc7\xdc}!\x10\xb1\",1%\x0e\xeb\x15\x15me\xe1a\x03\x18{\xb03+\x93*vB\xc6\xf1\xc6\xff\xbbt\x04!\xb6\v\xde2\xc9\x89#\xbaR\xee\x13jF%\xf2\x15\x9a\x82&\x89o\xa9\xd9\xbfFY\x90\x8c\xa0\xe4\x9d\xa2\xcd\x9a\xb5TC\xc4\x9d\x9ePb]\xaa\xc7f\x06N\xc5\xfa{\x02Y\xae\xf4(\xaa\x06);{?\x1e\fu\x19b\xdf$,\x01\"\x94\x00\x00\x00\x00\x003\xcfZ\xaf~<\xba\xb7\xa03\x8c\n*krS\x19Q#\x8f\xfbW\xad\xe0\xb3o\xcb\xf7\xda\x87C\x99\x1a\xa8\xc1\xe3\xc6%\xac\x01@*\xa0\xc4\xedn-lT\xe6*?\'\x9dW=\xa7\x03\x06\x83 IT\xa3\x7ff\xb6\x95\xe5\xd2\n\xaf\x87`\xce%\xf6 &\xa7M5I\x9c\x17h\x8c\xa4\x98\x16\xe0\xd9?Y\x7f\xf6\x85_{\xfd9p$B9_\xd8\xf4\x0e\xd0\xfa\xe7\xb0\xb8\xa0\xd7\a\xff.\"\x81\b\xb0\xb4\x84\xac\xad\x1b\x93~_\xea\xfe7\x03\"\xd9\x1d.\xe5{bHX\x14\xa1\bO\x03[^\x85jP\x89\t\x06GI\xb7\x99\xb2zZf\xc8\xd4\x8d\x1c\x1e\x03\xb9\xa7Nt\xae\xfff\xf9\tx\xae\xa8\x05\xb14\xc6\x9b\x1f\xd3\x01#\xc6\nb\xd4\xb4\xc8?\xa7\xe2R\xc1\xcf\xd2\xbc\xae\xd1\xc2\x88\"\xf3\xf0\xc0uQy\xec\xfab\xd6\xcd\x16)\x19*E\vm\x8d\x1bG:\x80\'pJ', 0x4100000a3d7) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/card1/pcm0p/sub7/info\x00', 0x8040, 0x0) read$auto_proc_reg_file_ops_compat_inode(r1, &(0x7f0000000100)=""/184, 0xb8) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x200007, 0x19) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x5d, 0x0) socket(0xa, 0x1, 0x84) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0x1, 0xb9, 0x12, 0x7, 0x400004, 0xffffffffffffffff, 0xe7b, "00000000000000e3ffffffffffffff00", 0x0, 0xffffffffffffffff, 0x5, 0x7, 0xe5}, 0x10) bpf$auto(0x1a, &(0x7f0000000380)=@link_create={@map_fd, @target_ifindex=r2, 0x3, 0x81, @uprobe_multi={0x81, 0x1ff, 0x3d7e, 0x0, 0x80000001, 0x5}}, 0x92) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x66) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) listen$auto(0x3, 0x83) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r3 = socket(0xb, 0x80000, 0x84) setsockopt$auto(r3, 0x0, 0x60, 0x0, 0x6f7250c4) close_range$auto(0x2, 0x8, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000002c80)='/proc/thread-self/net/rpc/nfsd.fh/channel\x00', 0x80, 0x0) exit$auto(0x5eb) 3.698919852s ago: executing program 2 (id=1285): statmount$auto(0x0, &(0x7f0000000380)={0x3, 0x1, 0x9, 0x7352, 0x10000, 0x65f, 0x4, 0x7, 0xf0, 0x1, 0xb, 0x3, 0x5, 0x101, 0xb4, 0x9, 0x6, 0x3, 0x84, 0x4, 0x0, 0x7, 0x22000, 0x203, 0x0, 0xf, 0x4, 0x0, 0x1, 0x0, 0xfffffff9, [0x7, 0x0, 0x4, 0x0, 0x0, 0x7, 0x0, 0x1c00000000, 0xfffffffffffffffe, 0x4, 0x0, 0x8000000000000, 0x800, 0x100000000000, 0x0, 0x0, 0x2000000000, 0x0, 0x0, 0x0, 0x7, 0x920, 0xfffffffffffffffe, 0x108001, 0x0, 0x0, 0x0, 0x200000000, 0x1000000000000, 0x0, 0xfffffffffffffffc, 0x0, 0x1, 0x0, 0x1, 0x3, 0x0, 0xfffffffffffffffc, 0x0, 0xffffffffffffffff, 0x3, 0x800000000000000, 0x7e30e0be]}, 0x1fe, 0xf) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid$auto_P_ALL(0x0, 0xffffffffffffffff, &(0x7f0000000080)={@siginfo_0_0={0x4, 0x2, 0x9, @_kill={r0}}}, 0x5, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x20342, 0x0) ioctl$auto_SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, 0x0) ioctl$auto_SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000500)="7a47301037954c081c9a0bb84bb7b04ef84993eab91abe1686f43e43d786e964e8f04455bd620de9f3fb6d65e6c078c1a63c8fa7f7d5152d4831f60eade8e3d8a508f6178de4e7e975de72c549dbc7876cb528ba0841788237bfc00dd4eef5") lseek$auto(0x3, 0x7fffffffffffffff, 0x0) readv$auto(0x3, 0x0, 0x1) write$auto(0xffffffffffffffff, &(0x7f0000000080)='/dev/audio\x00', 0x80000000) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ttyS1\x00', 0x500, 0x0) ioctl$auto_TIOCMGET2(r2, 0x5415, &(0x7f0000002d00)) ioctl$auto_SNDCTL_DSP_SYNC(0xffffffffffffffff, 0x5001, 0x0) getsockopt$auto_SO_TXREHASH(r1, 0x5, 0x4a, 0x0, &(0x7f0000000040)=0x3) ioctl$auto_EXT4_IOC_SETVERSION_OLD(0xffffffffffffffff, 0x40087602, &(0x7f0000000100)="f9c6db73364934578d51601d132b20dd82ae0781f6cb18c55fb7ed811a498af961a2ba35abcb2a9e90cb1318a4e844fa36d450dd94feeb082f1df20f92ccf13a81a57128c3747e32049e83c577e1acbc77ae0592cdbc051382debcaa0dc8ed6a464e67d65d0fe51909b6301747549e056844706522e452069bc58cceba3c6f41643ea20806562e91ca8a2cc01217c98f9dbad36dd49ba0ac6b5eac96f27ca3511f2ead40050e4c") openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/kernel/kexec_load_limit_panic\x00', 0x101202, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x800) r3 = socket(0x2, 0x3, 0x100) syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000040), r3) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000280)={'veth0_to_bond\x00'}) sendmsg$auto_BATADV_CMD_TP_METER(r3, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x8040}, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/module/rcutree/parameters/rcu_resched_ns\x00', 0x1a1302, 0x0) unshare$auto(0x40000080) acct$auto(&(0x7f00000003c0)='/dev/sequencer2\x00\xe5F\xff\xb95E(7GhId\xa3\xa8\xe9\x9f\x95\xd3\x88\xd2\xbc<1\x14\xa5^\xd2\x9dv\x10\x83]\x9c(\x98\xce\x9aOor_\x9c\xa7\x9e\x93\xe7\b\x82\xefO\x88\xba\x99k\x06\x9c;\a\tF\x1e\xa4T\xef&\x8c\xab\xdf\xb5]\x81\xfdx09m\xb6\xb7\x92g\xbc\xd6\xd3\xbc\xce\x15\xb4\xdb\xf2\xe8\b\"\t\xe9\xe2\x0f\xfd\x1dd\x86\x05\xb49\xf7\x92\xc1iVR\xef\xdb\xf0h\v\xa3\'\xc1\xd5P\x1c?\x92\t\xb4\xc9|\x93M\x92\xae{\x8d\x98\fK\x8e\xfd\fv\xd7+\xf8\x8aU\x92q\xeb\t\xcc\x1d') shmget$auto(0x0, 0x7b, 0xfd) 3.090145843s ago: executing program 1 (id=1286): r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x20342, 0x0) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(0xffffffffffffffff, 0x0, 0x800) timer_create$auto(0x9, 0x0, 0x0) shmctl$auto_SHM_STAT_ANY(0xfffffffd, 0xf, &(0x7f0000000440)={{0xade, 0xee01, 0xee01, 0x7, 0x8, 0x0, 0x1601}, 0x8, 0x6000000000, 0x4, 0x4, @raw=0x3, @raw=0x7, 0x1, 0x0, &(0x7f0000000100)="0977b20d5258eca826a4544a5db3bfa5deebdf9b9919b9debef90d4b64633f0eb8162aa93f55d0d56687a5be1110194fbd", &(0x7f0000000340)="5f9fe49db3b478eb5aa112d00517c1aa957d9e0f2852dad7f5c236bf8371d3b0f6d518edeaa6493a608fb25d5e4ef247c283343a661cf945418dfa1d90930d85eb4cde61cfe640e7f1d181f7939b2f542198986127b4853ed7e3309866acb8cd226f097b6b0469e947ae99d1fe614f2f7d0972073a12204d10f259ae7c3e05bc290d17e2460cdc91ea9f95b5a74077d7861c8b9c4b44d916a186054543c18576525484367482cb2e8aa1c6b42c5d1d2699904715cfce7fea171e426b886b482af2d6098cf74c3c4e"}) fsconfig$auto(r0, 0x8, &(0x7f0000000080)='[\x00', &(0x7f00000000c0)="7cc7218f60cf6b6c6ecd41b9ff6d831ea118f07fb6024b67301d9be695", r1) read$auto(0x3, 0x0, 0x8080) socket(0xa, 0x1, 0x100) write$auto(0x3, 0x0, 0xffd8) unshare$auto(0x40000080) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS1\x00', 0x20000, 0x0) ioctl$auto_TIOCGDEV2(r2, 0x5429, 0x0) process_mrelease$auto(0xffffffffffffffff, 0xa) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r4 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mount$auto(0x0, 0xfffffffffffffffe, 0x0, 0x80, 0xfffffffffffffffe) write$auto(r3, &(0x7f0000000180)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8\xa6\xb6\xaa\x96/OX\xba\x02\xc5\xc6B\x1d}Y\xbc@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf\xd6f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8', 0x100000a3d6) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/037/001\x00', 0x802, 0x0) mmap$auto(0x1000000000, 0x100000400008, 0x1000000000000df, 0x4000009b73, r4, 0x8000) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/admmidi2\x00', 0x40080, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x10000000000001ff, 0x7, 0xd3e, 0x20, 0x9687, 0x100000000000003, 0x3c2a19d5, 0x6, 0x3, 0x62, 0x8, 0x7, 0x6d3f, 0x6, 0xa, 0xfffffffffffffffe]}, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xfffffffffffffffb, 0x1, 0x4, 0x3, 0x3, 0x3, 0xffffffffffffffff, 0x3, 0x8000000000400000, 0x3, 0x6d3c, 0x3, 0x2, 0x8000000000000006]}, 0x0) close_range$auto(0x2, 0x8, 0x0) readv$auto(0xffffffffffffffff, &(0x7f0000001780)={0x0, 0x400}, 0x7f) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vcan0\x00'}) r5 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/fb0\x00', 0x8000, 0x0) ioctl$auto_TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000080)=0x68) ioctl$auto_FBIOPUT_VSCREENINFO(r5, 0x4601, &(0x7f0000000080)) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) 2.962443084s ago: executing program 4 (id=1287): mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0) chdir$auto(&(0x7f0000000000)='}[,&*}\x00') open(&(0x7f0000000100)='.\x00', 0x0, 0x0) mremap$auto(0x0, 0x3, 0x3fda, 0x6, 0x7fffffffb000) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f0000001380)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xfc\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\r&\xec\xb8\xb1Z\\\xc9L\xb2\t\xddbH|\xffGP\x97)\xb9:nqn\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc$\xa0\xa5\xce\xca\xe1P\xf7\xe5_\xca\xd5\xd8\xa4g_\xb1\x88\x8cAJS\x11\x8b\xd1%a\xe5DPk\x8c\xf9\xfb\xe0+\xdb\x12\x10.F\x00\xc37\xc7\xbf\x80\xbeu\xe1V\xb2\xc5\xc9\x1a\xc7\xdc}!\x10\xb1\",1%\x0e\xeb\x15\x15me\xe1a\x03\x18{\xb03+\x93*vB\xc6\xf1\xc6\xff\xbbt\x04!\xb6\v\xde2\xc9\x89#\xbaR\xee\x13jF%\xf2\x15\x9a\x82&\x89o\xa9\xd9\xbfFY\x90\x8c\xa0\xe4\x9d\xa2\xcd\x9a\xb5TC\xc4\x9d\x9ePb]\xaa\xc7f\x06N\xc5\xfa{\x02Y\xae\xf4(\xaa\x06);{?\x1e\fu\x19b\xdf$,\x01\"\x94\x00\x00\x00\x00\x003\xcfZ\xaf~<\xba\xb7\xa03\x8c\n*krS\x19Q#\x8f\xfbW\xad\xe0\xb3o\xcb\xf7\xda\x87C\x99\x1a\xa8\xc1\xe3\xc6%\xac\x01@*\xa0\xc4\xedn-lT\xe6*?\'\x9dW=\xa7\x03\x06\x83 IT\xa3\x7ff\xb6\x95\xe5\xd2\n\xaf\x87`\xce%\xf6 &\xa7M5I\x9c\x17h\x8c\xa4\x98\x16\xe0\xd9?Y\x7f\xf6\x85_{\xfd9p$B9_\xd8\xf4\x0e\xd0\xfa\xe7\xb0\xb8\xa0\xd7\a\xff.\"\x81\b\xb0\xb4\x84\xac\xad\x1b\x93~_\xea\xfe7\x03\"\xd9\x1d.\xe5{bHX\x14\xa1\bO\x03[^\x85jP\x89\t\x06GI\xb7\x99\xb2zZf\xc8\xd4\x8d\x1c\x1e\x03\xb9\xa7Nt\xae\xfff\xf9\tx\xae\xa8\x05\xb14\xc6\x9b\x1f\xd3\x01#\xc6\nb\xd4\xb4\xc8?\xa7\xe2R\xc1\xcf\xd2\xbc\xae\xd1\xc2\x88\"\xf3\xf0\xc0uQy\xec\xfab\xd6\xcd\x16)\x19*E\vm\x8d\x1bG:\x80\'pJ', 0x4100000a3d7) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/card1/pcm0p/sub7/info\x00', 0x8040, 0x0) read$auto_proc_reg_file_ops_compat_inode(r1, &(0x7f0000000100)=""/184, 0xb8) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x200007, 0x19) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x5d, 0x0) socket(0xa, 0x1, 0x84) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0x1, 0xb9, 0x12, 0x7, 0x400004, 0xffffffffffffffff, 0xe7b, "00000000000000e3ffffffffffffff00", 0x0, 0xffffffffffffffff, 0x5, 0x7, 0xe5}, 0x10) bpf$auto(0x1a, &(0x7f0000000380)=@link_create={@map_fd, @target_ifindex=r2, 0x3, 0x81, @uprobe_multi={0x81, 0x1ff, 0x3d7e, 0x0, 0x80000001, 0x5}}, 0x92) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x66) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) listen$auto(0x3, 0x83) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r3 = socket(0xb, 0x80000, 0x84) setsockopt$auto(r3, 0x0, 0x60, 0x0, 0x6f7250c4) close_range$auto(0x2, 0x8, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000002c80)='/proc/thread-self/net/rpc/nfsd.fh/channel\x00', 0x80, 0x0) exit$auto(0x5eb) 1.77933945s ago: executing program 3 (id=1288): mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0) chdir$auto(&(0x7f0000000000)='}[,&*}\x00') open(&(0x7f0000000100)='.\x00', 0x0, 0x0) mremap$auto(0x0, 0x3, 0x3fda, 0x6, 0x7fffffffb000) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f0000001380)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xfc\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\r&\xec\xb8\xb1Z\\\xc9L\xb2\t\xddbH|\xffGP\x97)\xb9:nqn\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc$\xa0\xa5\xce\xca\xe1P\xf7\xe5_\xca\xd5\xd8\xa4g_\xb1\x88\x8cAJS\x11\x8b\xd1%a\xe5DPk\x8c\xf9\xfb\xe0+\xdb\x12\x10.F\x00\xc37\xc7\xbf\x80\xbeu\xe1V\xb2\xc5\xc9\x1a\xc7\xdc}!\x10\xb1\",1%\x0e\xeb\x15\x15me\xe1a\x03\x18{\xb03+\x93*vB\xc6\xf1\xc6\xff\xbbt\x04!\xb6\v\xde2\xc9\x89#\xbaR\xee\x13jF%\xf2\x15\x9a\x82&\x89o\xa9\xd9\xbfFY\x90\x8c\xa0\xe4\x9d\xa2\xcd\x9a\xb5TC\xc4\x9d\x9ePb]\xaa\xc7f\x06N\xc5\xfa{\x02Y\xae\xf4(\xaa\x06);{?\x1e\fu\x19b\xdf$,\x01\"\x94\x00\x00\x00\x00\x003\xcfZ\xaf~<\xba\xb7\xa03\x8c\n*krS\x19Q#\x8f\xfbW\xad\xe0\xb3o\xcb\xf7\xda\x87C\x99\x1a\xa8\xc1\xe3\xc6%\xac\x01@*\xa0\xc4\xedn-lT\xe6*?\'\x9dW=\xa7\x03\x06\x83 IT\xa3\x7ff\xb6\x95\xe5\xd2\n\xaf\x87`\xce%\xf6 &\xa7M5I\x9c\x17h\x8c\xa4\x98\x16\xe0\xd9?Y\x7f\xf6\x85_{\xfd9p$B9_\xd8\xf4\x0e\xd0\xfa\xe7\xb0\xb8\xa0\xd7\a\xff.\"\x81\b\xb0\xb4\x84\xac\xad\x1b\x93~_\xea\xfe7\x03\"\xd9\x1d.\xe5{bHX\x14\xa1\bO\x03[^\x85jP\x89\t\x06GI\xb7\x99\xb2zZf\xc8\xd4\x8d\x1c\x1e\x03\xb9\xa7Nt\xae\xfff\xf9\tx\xae\xa8\x05\xb14\xc6\x9b\x1f\xd3\x01#\xc6\nb\xd4\xb4\xc8?\xa7\xe2R\xc1\xcf\xd2\xbc\xae\xd1\xc2\x88\"\xf3\xf0\xc0uQy\xec\xfab\xd6\xcd\x16)\x19*E\vm\x8d\x1bG:\x80\'pJ', 0x4100000a3d7) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/card1/pcm0p/sub7/info\x00', 0x8040, 0x0) read$auto_proc_reg_file_ops_compat_inode(r1, &(0x7f0000000100)=""/184, 0xb8) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x200007, 0x19) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x5d, 0x0) socket(0xa, 0x1, 0x84) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0x1, 0xb9, 0x12, 0x7, 0x400004, 0xffffffffffffffff, 0xe7b, "00000000000000e3ffffffffffffff00", 0x0, 0xffffffffffffffff, 0x5, 0x7, 0xe5}, 0x10) bpf$auto(0x1a, &(0x7f0000000380)=@link_create={@map_fd, @target_ifindex=r2, 0x3, 0x81, @uprobe_multi={0x81, 0x1ff, 0x3d7e, 0x0, 0x80000001, 0x5}}, 0x92) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x66) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) listen$auto(0x3, 0x83) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r3 = socket(0xb, 0x80000, 0x84) setsockopt$auto(r3, 0x0, 0x60, 0x0, 0x6f7250c4) close_range$auto(0x2, 0x8, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000002c80)='/proc/thread-self/net/rpc/nfsd.fh/channel\x00', 0x80, 0x0) exit$auto(0x5eb) 749.459185ms ago: executing program 4 (id=1289): mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0) chdir$auto(&(0x7f0000000000)='}[,&*}\x00') open(&(0x7f0000000100)='.\x00', 0x0, 0x0) mremap$auto(0x0, 0x3, 0x3fda, 0x6, 0x7fffffffb000) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f0000001380)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xfc\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\r&\xec\xb8\xb1Z\\\xc9L\xb2\t\xddbH|\xffGP\x97)\xb9:nqn\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc$\xa0\xa5\xce\xca\xe1P\xf7\xe5_\xca\xd5\xd8\xa4g_\xb1\x88\x8cAJS\x11\x8b\xd1%a\xe5DPk\x8c\xf9\xfb\xe0+\xdb\x12\x10.F\x00\xc37\xc7\xbf\x80\xbeu\xe1V\xb2\xc5\xc9\x1a\xc7\xdc}!\x10\xb1\",1%\x0e\xeb\x15\x15me\xe1a\x03\x18{\xb03+\x93*vB\xc6\xf1\xc6\xff\xbbt\x04!\xb6\v\xde2\xc9\x89#\xbaR\xee\x13jF%\xf2\x15\x9a\x82&\x89o\xa9\xd9\xbfFY\x90\x8c\xa0\xe4\x9d\xa2\xcd\x9a\xb5TC\xc4\x9d\x9ePb]\xaa\xc7f\x06N\xc5\xfa{\x02Y\xae\xf4(\xaa\x06);{?\x1e\fu\x19b\xdf$,\x01\"\x94\x00\x00\x00\x00\x003\xcfZ\xaf~<\xba\xb7\xa03\x8c\n*krS\x19Q#\x8f\xfbW\xad\xe0\xb3o\xcb\xf7\xda\x87C\x99\x1a\xa8\xc1\xe3\xc6%\xac\x01@*\xa0\xc4\xedn-lT\xe6*?\'\x9dW=\xa7\x03\x06\x83 IT\xa3\x7ff\xb6\x95\xe5\xd2\n\xaf\x87`\xce%\xf6 &\xa7M5I\x9c\x17h\x8c\xa4\x98\x16\xe0\xd9?Y\x7f\xf6\x85_{\xfd9p$B9_\xd8\xf4\x0e\xd0\xfa\xe7\xb0\xb8\xa0\xd7\a\xff.\"\x81\b\xb0\xb4\x84\xac\xad\x1b\x93~_\xea\xfe7\x03\"\xd9\x1d.\xe5{bHX\x14\xa1\bO\x03[^\x85jP\x89\t\x06GI\xb7\x99\xb2zZf\xc8\xd4\x8d\x1c\x1e\x03\xb9\xa7Nt\xae\xfff\xf9\tx\xae\xa8\x05\xb14\xc6\x9b\x1f\xd3\x01#\xc6\nb\xd4\xb4\xc8?\xa7\xe2R\xc1\xcf\xd2\xbc\xae\xd1\xc2\x88\"\xf3\xf0\xc0uQy\xec\xfab\xd6\xcd\x16)\x19*E\vm\x8d\x1bG:\x80\'pJ', 0x4100000a3d7) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/card1/pcm0p/sub7/info\x00', 0x8040, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x2003f2, 0x14) madvise$auto(0x0, 0x200007, 0x19) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x5d, 0x0) socket(0xa, 0x1, 0x84) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0x1, 0xb9, 0x12, 0x7, 0x400004, 0xffffffffffffffff, 0xe7b, "00000000000000e3ffffffffffffff00", 0x0, 0xffffffffffffffff, 0x5, 0x7, 0xe5}, 0x10) bpf$auto(0x1a, &(0x7f0000000380)=@link_create={@map_fd, @target_ifindex=r1, 0x3, 0x81, @uprobe_multi={0x81, 0x1ff, 0x3d7e, 0x0, 0x80000001, 0x5}}, 0x92) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x66) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) listen$auto(0x3, 0x83) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = socket(0xb, 0x80000, 0x84) setsockopt$auto(r2, 0x0, 0x60, 0x0, 0x6f7250c4) close_range$auto(0x2, 0x8, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000002c80)='/proc/thread-self/net/rpc/nfsd.fh/channel\x00', 0x80, 0x0) exit$auto(0x5eb) 658.301114ms ago: executing program 2 (id=1290): r0 = openat$auto_media_devnode_fops_mc_devnode(0xffffffffffffff9c, &(0x7f0000000040)='/dev/media5\x00', 0x400280, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) mprotect$auto(0x1, 0x8, 0x3) mmap$auto(0x0, 0x6, 0x200000000003, 0xfffffffffffffffd, 0xfffffffffffffffa, 0x2) socket(0x15, 0x5, 0x0) mmap$auto(0xffffffffffffff88, 0x4020009, 0xdf, 0xeb1, 0x401, 0x7ffd) close_range$auto(0x0, 0x5, 0x0) openat$auto_media_devnode_fops_mc_devnode(0xffffffffffffff9c, &(0x7f0000000180)='/dev/media1\x00', 0x440000, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/block/nbd4/queue/max_segment_size\x00', 0x0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000003f40)=""/156, 0x9c) sysfs$auto(0x9, 0x49, 0x0) fsopen$auto(0x0, 0x6) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/sit0/statistics/tx_compressed\x00', 0x80000, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/devices/virtual/fcloop/ctl/del_remote_port\x00', 0xa001, 0x0) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x0, 0x0) ioctl$auto_TCFLSH2(r3, 0x5453, 0x0) ioctl$auto(0x3, 0x5415, r2) mmap$auto(0x0, 0x5, 0x2, 0x40eb2, r0, 0x300000000000) r4 = socket(0xa, 0x3, 0x3b) mkdir$auto(&(0x7f0000000200)='./file0/file0\x00', 0x2) mkdir$auto(&(0x7f00000000c0)='./file1\x00', 0x9) rename$auto(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)='./file0/file0\x00') setsockopt$auto(0xffffffffffffffff, 0x29, 0x10, 0x0, 0x56b) openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x40, 0x100) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x8000, 0x70) renameat2$auto(r5, &(0x7f00000000c0)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x2) r6 = getsockopt$auto(r4, 0x29, 0x17, 0x0, 0x0) getsockopt$auto_SO_KEEPALIVE(r6, 0x7, 0x9, &(0x7f0000000080)='/sys/devices/virtual/net/sit0/statistics/tx_compressed\x00', &(0x7f0000000100)=0x7fff) 116.982294ms ago: executing program 2 (id=1291): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000040), 0xffffffffffffffff) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) close_range$auto(r0, 0x8, 0x1000000) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x1, 0x106) r2 = openat$auto_drm_crtc_crc_data_fops_drm_debugfs_crc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$auto_drm_crtc_crc_data_fops_drm_debugfs_crc(r2, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r3 = io_uring_setup$auto(0x6, 0x0) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r5 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r4, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) socket(0x28, 0x5, 0x0) r6 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video3\x00', 0x2aa01, 0x0) r7 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sda1\x00', 0x24040, 0x0) ioctl$auto_BLKTRACESETUP(r7, 0xc0481273, &(0x7f0000000240)={"ef65ce6c00000000000000000000000000000000000000000000000000cadb00", 0x3ff, 0x408, 0xf, 0x400001, 0x200000000040000d}) r8 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000540)='/dev/tty45\x00', 0x201, 0x0) write$auto_tty_fops_tty_io(r8, &(0x7f00000009c0)="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", 0xe68) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$auto_gtp(&(0x7f0000000b00), r9) ioctl$auto_BLKSSZGET(r7, 0x1268, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r5, &(0x7f0000000700)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000740)=ANY=[@ANYRES8=r3, @ANYRES16=0x0, @ANYBLOB="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", @ANYRES32=r5, @ANYBLOB], 0x110}, 0x1, 0x0, 0x0, 0x4}, 0x8d3) sendmsg$auto_GTP_CMD_ECHOREQ(r9, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000040)={0x24, r10, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @loopback}, @GTPA_LINK={0x8, 0x1, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x4091}, 0x80) socket$nl_generic(0x10, 0x3, 0x10) select$auto(0xd, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0x7, 0x1, 0x9488, 0x9, 0x15f4da07, 0xa, 0x6, 0x64, 0x80000020, 0xffffffffffffff84, 0xb, 0x9, 0x2, 0x2400000000]}, 0x0) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000000), r1) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) close_range$auto(r8, r6, 0x1000) 0s ago: executing program 1 (id=1292): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) preadv2$auto(r0, &(0x7f0000000280)={0x0, 0x80000000}, 0x6, 0x3, 0x4, 0x2a) ioctl$auto_BLKFLSBUF(r0, 0x1261, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb4, r0, 0x7) setrlimit$auto(0x8, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_WG_CMD_SET_DEVICE(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000240)={0x0}}, 0x4040850) r2 = syz_genetlink_get_family_id$auto_ovs_meter(&(0x7f0000002340), 0xffffffffffffffff) sendmsg$auto_OVS_METER_CMD_SET(r1, &(0x7f0000002480)={0x0, 0x0, &(0x7f0000002440)={&(0x7f0000000100)={0x2c, r2, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@OVS_METER_ATTR_KBPS={0x4}, @OVS_METER_ATTR_BANDS={0xc, 0x4, 0x0, 0x1, [@nested={0x4, 0x45}, @generic="141fc94a"]}, @OVS_METER_ATTR_ID={0x8, 0x1, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48000}, 0x0) capset$auto(&(0x7f0000000100)={0x20080522}, 0x0) mmap$auto(0x7fffffffe000, 0x61, 0x100001000000004, 0xfa31, 0x403, 0x8000) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x14be02, 0x0) mprotect$auto(0x1000, 0x401000, 0x4) close_range$auto(0x2, 0x8, 0x0) r4 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f00000000c0), 0x8001, 0x0) ioctl$auto_VHOST_SET_MEM_TABLE(r4, 0x4001af84, 0x0) msgget$auto(0xc, 0x77d9) msgrcv$auto(0x0, 0x0, 0xff9, 0x1, 0x3) r5 = open(0x0, 0x224782, 0x77) fallocate$auto(r5, 0x0, 0x7, 0x4cbd5d) ioctl$auto_UDMABUF_CREATE_LIST(r5, 0x40087543, &(0x7f0000000300)={0x800, 0x100, [{r3, 0x0, 0xe000000000, 0x4}, {r0, 0x0, 0x3, 0x7fff}, {r4, 0x0, 0x7, 0x3}]}) msgsnd$auto(0x3c, &(0x7f0000000000)={0x1000, 0x5}, 0x8, 0x8) syz_genetlink_get_family_id$auto_net_dm(&(0x7f0000000080), 0xffffffffffffffff) ioctl$auto_VHOST_SET_OWNER(r4, 0xaf01, 0x0) close_range$auto(0x2, 0x8, 0x0) read$auto(r0, &(0x7f0000000140)=':&}\\\x00(\x17\xf1\x1d\x0e\xa9\n\xeb\x1aU\xed\x9f-\xd6\xa1vQW\x9d\xdf\xc9\xfc\x0f#\xc9\x963\x9b\x02\x02Qk\b\xdcr\x9d*\xc6\xc1\f\xc6\xa0\xec\xfd\b{\xe8sN\xe6\b\x176rZ\xd7\xa7 v\xe8\x1d\x98I\xd7\x8d;\xb3]\x01\x1a7\xc8m\x1d\xe9:e\xf1\x1a\x04j\xccU\x01\'\x0f[1\xa5\x1f\x89K3\x13\xf3\xd8y\xa3;\xb4\\\xc9\x02\x8f\xfa\xc1\x9e*\xd8\xccp', 0x40) kernel console output (not intermixed with test programs): 13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.198553][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.243925][ T36] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.266076][ T36] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.323443][ T36] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.339493][ T36] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.370152][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.382585][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.425105][ T5641] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 107.507699][ T5641] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 107.651576][ T250] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.734110][ T250] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.779711][ T5632] Bluetooth: hci0: command tx timeout [ 107.838789][ T250] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.855949][ T250] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.881380][ T5780] sg_write: process 3 (syz.1.2) changed security contexts after opening file descriptor, this is not allowed. [ 107.938062][ T5632] Bluetooth: hci2: command tx timeout [ 107.938084][ T50] Bluetooth: hci1: command tx timeout [ 107.955367][ T5780] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 108.017465][ T5632] Bluetooth: hci3: command tx timeout [ 108.044701][ T5781] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2'. [ 108.435175][ T5781] Zero length message leads to an empty skb [ 108.482328][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.506580][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.579396][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.613365][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.682715][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.711224][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.768933][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.790515][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.239199][ T5789] random: crng reseeded on system resumption [ 109.537497][ T5788] netlink: 'syz.2.3': attribute type 11 has an invalid length. [ 109.570032][ T5788] netlink: 'syz.2.3': attribute type 1 has an invalid length. [ 109.593198][ T5788] netlink: 9 bytes leftover after parsing attributes in process `syz.2.3'. [ 113.983669][ T5829] netlink: 326 bytes leftover after parsing attributes in process `syz.1.10'. [ 114.039806][ T5829] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.049212][ T5829] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.516258][ T5834] FAULT_INJECTION: forcing a failure. [ 114.516258][ T5834] name fail_futex, interval 1, probability 0, space 0, times 1 [ 114.582980][ T5834] CPU: 1 UID: 0 PID: 5834 Comm: syz.2.11 Not tainted syzkaller #0 PREEMPT(full) [ 114.583014][ T5834] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 114.583035][ T5834] Call Trace: [ 114.583044][ T5834] [ 114.583053][ T5834] dump_stack_lvl+0x100/0x190 [ 114.583096][ T5834] should_fail_ex.cold+0x5/0xa [ 114.583123][ T5834] get_futex_key+0x1d2/0x14f0 [ 114.583166][ T5834] ? __pfx_get_futex_key+0x10/0x10 [ 114.583205][ T5834] ? __destroy_inode+0x2cd/0x710 [ 114.583231][ T5834] ? __pfx_sock_free_inode+0x10/0x10 [ 114.583266][ T5834] ? destroy_inode+0x139/0x1c0 [ 114.583296][ T5834] futex_wake+0xf4/0x5e0 [ 114.583329][ T5834] ? __pfx_futex_wake+0x10/0x10 [ 114.583366][ T5834] ? iput.part.0+0x981/0x1050 [ 114.583403][ T5834] do_futex+0x2b2/0x440 [ 114.583428][ T5834] ? __pfx_do_futex+0x10/0x10 [ 114.583450][ T5834] ? iput+0x3a/0x40 [ 114.583474][ T5834] ? __sock_release+0x184/0x260 [ 114.583508][ T5834] __x64_sys_futex+0x34f/0x4d0 [ 114.583534][ T5834] ? __sys_socket+0xac/0x260 [ 114.583572][ T5834] ? __pfx___x64_sys_futex+0x10/0x10 [ 114.583607][ T5834] do_syscall_64+0x115/0x840 [ 114.583646][ T5834] ? clear_bhb_loop+0x40/0x90 [ 114.583675][ T5834] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.583701][ T5834] RIP: 0033:0x7f58f0b9de59 [ 114.583731][ T5834] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 114.583755][ T5834] RSP: 002b:00007f58eedf60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 114.583781][ T5834] RAX: ffffffffffffffda RBX: 00007f58f0e26098 RCX: 00007f58f0b9de59 [ 114.583797][ T5834] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f58f0e2609c [ 114.583812][ T5834] RBP: 00007f58f0e26090 R08: 0000000000000001 R09: 0000000000000000 [ 114.583827][ T5834] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 114.583842][ T5834] R13: 00007f58f0e26128 R14: 00007ffc3359c610 R15: 00007ffc3359c6f8 [ 114.583875][ T5834] [ 116.298732][ T5849] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 116.627310][ T5852] netlink: 146 bytes leftover after parsing attributes in process `syz.1.15'. [ 117.066112][ T5849] FAULT_INJECTION: forcing a failure. [ 117.066112][ T5849] name failslab, interval 1, probability 0, space 0, times 1 [ 117.093189][ T5862] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 117.156891][ T5849] CPU: 0 UID: 0 PID: 5849 Comm: syz.3.14 Not tainted syzkaller #0 PREEMPT(full) [ 117.156934][ T5849] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 117.156954][ T5849] Call Trace: [ 117.156966][ T5849] [ 117.156979][ T5849] dump_stack_lvl+0x100/0x190 [ 117.157016][ T5849] should_fail_ex.cold+0x5/0xa [ 117.157049][ T5849] should_failslab+0xc2/0x120 [ 117.157097][ T5849] kmem_cache_alloc_noprof+0x91/0x6a0 [ 117.157135][ T5849] ? ext4_alloc_io_end_vec+0x2b/0x1c0 [ 117.157174][ T5849] ext4_alloc_io_end_vec+0x2b/0x1c0 [ 117.157211][ T5849] ext4_do_writepages+0x171c/0x3ed0 [ 117.157254][ T5849] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 117.157309][ T5849] ? trace_hrtimer_start+0x77/0x220 [ 117.157362][ T5849] ? __pfx_ext4_do_writepages+0x10/0x10 [ 117.157427][ T5849] ? ext4_writepages+0x347/0x750 [ 117.157471][ T5849] ext4_writepages+0x347/0x750 [ 117.157520][ T5849] ? __pfx_ext4_writepages+0x10/0x10 [ 117.157579][ T5849] ? do_writepages+0x4b5/0x600 [ 117.157614][ T5849] ? do_writepages+0x4b5/0x600 [ 117.157654][ T5849] ? __pfx_ext4_writepages+0x10/0x10 [ 117.157703][ T5849] do_writepages+0x278/0x600 [ 117.157742][ T5849] ? __pfx_do_writepages+0x10/0x10 [ 117.157777][ T5849] ? do_raw_spin_unlock+0x145/0x1e0 [ 117.157812][ T5849] ? _raw_spin_unlock+0x28/0x50 [ 117.157858][ T5849] filemap_writeback+0x22d/0x2e0 [ 117.157902][ T5849] ? __pfx_filemap_writeback+0x10/0x10 [ 117.157989][ T5849] ? mt_find+0x45e/0x8e0 [ 117.158025][ T5849] ? __pfx_mt_find+0x10/0x10 [ 117.158062][ T5849] file_write_and_wait_range+0xcd/0x140 [ 117.158123][ T5849] ext4_sync_file+0x358/0xb60 [ 117.158191][ T5849] ? __pfx_ext4_sync_file+0x10/0x10 [ 117.158232][ T5849] ? __up_read+0x280/0x980 [ 117.158265][ T5849] ? __pfx___up_read+0x10/0x10 [ 117.158291][ T5849] ? __do_sys_msync+0x39b/0x590 [ 117.158325][ T5849] ? __pfx_ext4_sync_file+0x10/0x10 [ 117.158362][ T5849] vfs_fsync_range+0x9b/0x190 [ 117.158400][ T5849] __do_sys_msync+0x3ca/0x590 [ 117.158443][ T5849] do_syscall_64+0x115/0x840 [ 117.158492][ T5849] ? clear_bhb_loop+0x40/0x90 [ 117.158530][ T5849] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.158559][ T5849] RIP: 0033:0x7fa4c219de59 [ 117.158585][ T5849] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 117.158617][ T5849] RSP: 002b:00007fa4c2fb1028 EFLAGS: 00000246 ORIG_RAX: 000000000000001a [ 117.158647][ T5849] RAX: ffffffffffffffda RBX: 00007fa4c2425fa0 RCX: 00007fa4c219de59 [ 117.158669][ T5849] RDX: 0000000400000004 RSI: 01800000000000fe RDI: 000000001ffff000 [ 117.158691][ T5849] RBP: 00007fa4c2233e6f R08: 0000000000000000 R09: 0000000000000000 [ 117.158711][ T5849] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 117.158729][ T5849] R13: 00007fa4c2426038 R14: 00007fa4c2425fa0 R15: 00007ffd57772278 [ 117.158769][ T5849] [ 117.213477][ T5856] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 117.579882][ T5858] hub 1-0:1.0: USB hub found [ 117.584671][ T5858] hub 1-0:1.0: 1 port detected [ 117.593459][ T5862] syz.2.17 (5862) used greatest stack depth: 18216 bytes left [ 120.397112][ T5892] netlink: 8 bytes leftover after parsing attributes in process `syz.0.24'. [ 121.319963][ T5898] FAULT_INJECTION: forcing a failure. [ 121.319963][ T5898] name failslab, interval 1, probability 0, space 0, times 0 [ 121.358426][ T5898] CPU: 1 UID: 0 PID: 5898 Comm: syz.1.25 Not tainted syzkaller #0 PREEMPT(full) [ 121.358473][ T5898] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 121.358494][ T5898] Call Trace: [ 121.358504][ T5898] [ 121.358517][ T5898] dump_stack_lvl+0x100/0x190 [ 121.358559][ T5898] should_fail_ex.cold+0x5/0xa [ 121.358598][ T5898] should_failslab+0xc2/0x120 [ 121.358638][ T5898] __kmalloc_noprof+0xfc/0x820 [ 121.358693][ T5898] ? ops_init+0x77/0x5f0 [ 121.358739][ T5898] ops_init+0x77/0x5f0 [ 121.358783][ T5898] setup_net+0x118/0x3a0 [ 121.358831][ T5898] ? __pfx_setup_net+0x10/0x10 [ 121.358872][ T5898] ? mutex_init_lockdep+0xf1/0x120 [ 121.358935][ T5898] copy_net_ns+0x46f/0x7c0 [ 121.358985][ T5898] create_new_namespaces+0x3ea/0xac0 [ 121.359051][ T5898] unshare_nsproxy_namespaces+0xf2/0x220 [ 121.359106][ T5898] ksys_unshare+0x438/0xab0 [ 121.359146][ T5898] ? __pfx_ksys_unshare+0x10/0x10 [ 121.359202][ T5898] __x64_sys_unshare+0x31/0x40 [ 121.359242][ T5898] do_syscall_64+0x115/0x840 [ 121.359295][ T5898] ? clear_bhb_loop+0x40/0x90 [ 121.359338][ T5898] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.359372][ T5898] RIP: 0033:0x7fe7a959de59 [ 121.359401][ T5898] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 121.359433][ T5898] RSP: 002b:00007fe7a77f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 121.359466][ T5898] RAX: ffffffffffffffda RBX: 00007fe7a9826090 RCX: 00007fe7a959de59 [ 121.359488][ T5898] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 121.359507][ T5898] RBP: 00007fe7a9633e6f R08: 0000000000000000 R09: 0000000000000000 [ 121.359527][ T5898] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 121.359545][ T5898] R13: 00007fe7a9826128 R14: 00007fe7a9826090 R15: 00007ffed21ced18 [ 121.359589][ T5898] [ 122.477901][ T5907] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 123.339717][ T5917] vivid-007: ================= START STATUS ================= [ 123.369202][ T5917] vivid-007: Generate PTS: true [ 123.408304][ T5917] vivid-007: Generate SCR: true [ 123.453702][ T5917] tpg source WxH: 320x240 (Y'CbCr) [ 123.485763][ T5917] tpg field: 1 [ 123.501103][ T5917] tpg crop: (0,0)/320x240 [ 123.527220][ T5917] tpg compose: (0,0)/320x240 [ 123.586029][ T5917] tpg colorspace: 8 [ 123.623092][ T5917] tpg transfer function: 0/0 [ 123.634715][ T5922] process 'syz.1.28' launched ':,' with NULL argv: empty string added [ 123.662965][ T5917] tpg Y'CbCr encoding: 0/0 [ 123.695216][ T5917] tpg quantization: 0/0 [ 123.719409][ T5917] tpg RGB range: 0/2 [ 123.733103][ T5917] vivid-007: ================== END STATUS ================== [ 126.176795][ T3351] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.102772][ T5962] vhci_hcd: not connected 4 [ 127.393568][ T5946] bond0: option slaves: interface -Âô]àæ©=,Dço does not exist! [ 127.895393][ T5982] vivid-008: ================= START STATUS ================= [ 127.895471][ T5982] vivid-008: ================== END STATUS ================== [ 130.311792][ T6021] netlink: 330 bytes leftover after parsing attributes in process `syz.3.42'. [ 130.372139][ T6021] mac80211_hwsim hwsim6 ›: renamed from wlan0 (while UP) [ 130.664310][ T6023] FAULT_INJECTION: forcing a failure. [ 130.664310][ T6023] name failslab, interval 1, probability 0, space 0, times 0 [ 130.705563][ T6023] CPU: 1 UID: 0 PID: 6023 Comm: syz.0.41 Not tainted syzkaller #0 PREEMPT(full) [ 130.705607][ T6023] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 130.705626][ T6023] Call Trace: [ 130.705637][ T6023] [ 130.705650][ T6023] dump_stack_lvl+0x100/0x190 [ 130.705710][ T6023] should_fail_ex.cold+0x5/0xa [ 130.705752][ T6023] should_failslab+0xc2/0x120 [ 130.705798][ T6023] __kmalloc_cache_noprof+0x91/0x6c0 [ 130.705855][ T6023] ? __pfx___xa_alloc+0x10/0x10 [ 130.705893][ T6023] ? __devlink_region_snapshot_create+0x1ec/0x620 [ 130.705952][ T6023] __devlink_region_snapshot_create+0x1ec/0x620 [ 130.706013][ T6023] devlink_region_snapshot_create+0x34/0x50 [ 130.706065][ T6023] nsim_dev_take_snapshot_write+0x11d/0x1b0 [ 130.706105][ T6023] ? __debugfs_file_get+0x1fc/0x860 [ 130.706163][ T6023] ? __pfx_nsim_dev_take_snapshot_write+0x10/0x10 [ 130.706217][ T6023] full_proxy_write+0x135/0x1a0 [ 130.706276][ T6023] vfs_write+0x2aa/0x1050 [ 130.706325][ T6023] ? __pfx_full_proxy_write+0x10/0x10 [ 130.706383][ T6023] ? __pfx_vfs_write+0x10/0x10 [ 130.706432][ T6023] ? __fget_files+0x215/0x3d0 [ 130.706494][ T6023] ? __fget_files+0x21f/0x3d0 [ 130.706555][ T6023] ksys_write+0x12a/0x250 [ 130.706616][ T6023] ? __pfx_ksys_write+0x10/0x10 [ 130.706688][ T6023] do_syscall_64+0x115/0x840 [ 130.706741][ T6023] ? clear_bhb_loop+0x40/0x90 [ 130.706784][ T6023] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.706821][ T6023] RIP: 0033:0x7f0741f9de59 [ 130.706850][ T6023] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 130.706884][ T6023] RSP: 002b:00007f0742e73028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 130.706917][ T6023] RAX: ffffffffffffffda RBX: 00007f0742226180 RCX: 00007f0741f9de59 [ 130.706940][ T6023] RDX: 00000000fffffdef RSI: 0000000000000000 RDI: 0000000000000003 [ 130.706961][ T6023] RBP: 00007f0742033e6f R08: 0000000000000000 R09: 0000000000000000 [ 130.706982][ T6023] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 130.707003][ T6023] R13: 00007f0742226218 R14: 00007f0742226180 R15: 00007ffcbe9d8c08 [ 130.707047][ T6023] [ 130.967315][ T6023] Failed to create region snapshot [ 132.067160][ T6041] zram0: detected capacity change from 0 to 16 [ 132.336573][ T6046] netlink: 342 bytes leftover after parsing attributes in process `syz.2.46'. [ 132.936637][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.951922][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.896380][ T6078] FAULT_INJECTION: forcing a failure. [ 134.896380][ T6078] name failslab, interval 1, probability 0, space 0, times 0 [ 134.927532][ T6078] CPU: 1 UID: 0 PID: 6078 Comm: syz.0.48 Not tainted syzkaller #0 PREEMPT(full) [ 134.927576][ T6078] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 134.927595][ T6078] Call Trace: [ 134.927606][ T6078] [ 134.927619][ T6078] dump_stack_lvl+0x100/0x190 [ 134.927666][ T6078] should_fail_ex.cold+0x5/0xa [ 134.927712][ T6078] should_failslab+0xc2/0x120 [ 134.927771][ T6078] __kmalloc_cache_noprof+0x91/0x6c0 [ 134.927824][ T6078] ? rcu_is_watching+0x12/0xc0 [ 134.927863][ T6078] ? can_pernet_init+0xb7/0x370 [ 134.927921][ T6078] ? __pfx_can_pernet_init+0x10/0x10 [ 134.927977][ T6078] can_pernet_init+0xb7/0x370 [ 134.928032][ T6078] ? __pfx_can_pernet_init+0x10/0x10 [ 134.928084][ T6078] ops_init+0x1e2/0x5f0 [ 134.928130][ T6078] setup_net+0x118/0x3a0 [ 134.928172][ T6078] ? __pfx_setup_net+0x10/0x10 [ 134.928213][ T6078] ? mutex_init_lockdep+0xf1/0x120 [ 134.928275][ T6078] copy_net_ns+0x46f/0x7c0 [ 134.928324][ T6078] create_new_namespaces+0x3ea/0xac0 [ 134.928391][ T6078] unshare_nsproxy_namespaces+0xf2/0x220 [ 134.928452][ T6078] ksys_unshare+0x438/0xab0 [ 134.928495][ T6078] ? __pfx_ksys_unshare+0x10/0x10 [ 134.928552][ T6078] __x64_sys_unshare+0x31/0x40 [ 134.928597][ T6078] do_syscall_64+0x115/0x840 [ 134.928649][ T6078] ? clear_bhb_loop+0x40/0x90 [ 134.928692][ T6078] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.928728][ T6078] RIP: 0033:0x7f0741f9de59 [ 134.928765][ T6078] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 134.928799][ T6078] RSP: 002b:00007f0742eb5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 134.928831][ T6078] RAX: ffffffffffffffda RBX: 00007f0742225fa0 RCX: 00007f0741f9de59 [ 134.928854][ T6078] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 134.928874][ T6078] RBP: 00007f0742033e6f R08: 0000000000000000 R09: 0000000000000000 [ 134.928895][ T6078] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 134.928915][ T6078] R13: 00007f0742226038 R14: 00007f0742225fa0 R15: 00007ffcbe9d8c08 [ 134.928956][ T6078] [ 135.431800][ T6094] mmap: syz.3.51 (6094) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 136.161274][ T6121] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 136.244180][ T6121] ======================================================= [ 136.244180][ T6121] WARNING: The mand mount option has been deprecated and [ 136.244180][ T6121] and is ignored by this kernel. Remove the mand [ 136.244180][ T6121] option from the mount to silence this warning. [ 136.244180][ T6121] ======================================================= [ 137.423910][ T6150] FAULT_INJECTION: forcing a failure. [ 137.423910][ T6150] name failslab, interval 1, probability 0, space 0, times 0 [ 137.449707][ T6150] CPU: 0 UID: 0 PID: 6150 Comm: syz.2.57 Not tainted syzkaller #0 PREEMPT(full) [ 137.449754][ T6150] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 137.449776][ T6150] Call Trace: [ 137.449788][ T6150] [ 137.449806][ T6150] dump_stack_lvl+0x100/0x190 [ 137.449861][ T6150] should_fail_ex.cold+0x5/0xa [ 137.449901][ T6150] should_failslab+0xc2/0x120 [ 137.449954][ T6150] __kmalloc_cache_noprof+0x91/0x6c0 [ 137.450031][ T6150] ? vhost_vsock_dev_open+0x79/0x670 [ 137.450071][ T6150] ? __pfx_vhost_vsock_dev_open+0x10/0x10 [ 137.450116][ T6150] vhost_vsock_dev_open+0x79/0x670 [ 137.450157][ T6150] ? __pfx_vhost_vsock_dev_open+0x10/0x10 [ 137.450202][ T6150] misc_open+0x26d/0x450 [ 137.450264][ T6150] ? __pfx_misc_open+0x10/0x10 [ 137.450319][ T6150] chrdev_open+0x234/0x6a0 [ 137.450382][ T6150] ? __pfx_chrdev_open+0x10/0x10 [ 137.450440][ T6150] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 137.450490][ T6150] do_dentry_open+0x6ab/0x14d0 [ 137.450550][ T6150] ? __pfx_chrdev_open+0x10/0x10 [ 137.450615][ T6150] vfs_open+0x82/0x3f0 [ 137.450660][ T6150] path_openat+0x2873/0x4280 [ 137.450734][ T6150] ? __pfx_path_openat+0x10/0x10 [ 137.450803][ T6150] do_file_open+0x20e/0x430 [ 137.450861][ T6150] ? __pfx_do_file_open+0x10/0x10 [ 137.450952][ T6150] ? alloc_fd+0x471/0x7a0 [ 137.451020][ T6150] ? do_getname+0x191/0x390 [ 137.451064][ T6150] do_sys_openat2+0x10f/0x1e0 [ 137.451107][ T6150] ? __pfx_do_sys_openat2+0x10/0x10 [ 137.451153][ T6150] ? __fget_files+0x21f/0x3d0 [ 137.451214][ T6150] __x64_sys_openat+0x12d/0x210 [ 137.451259][ T6150] ? __pfx___x64_sys_openat+0x10/0x10 [ 137.451318][ T6150] do_syscall_64+0x115/0x840 [ 137.451372][ T6150] ? clear_bhb_loop+0x40/0x90 [ 137.451416][ T6150] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.451453][ T6150] RIP: 0033:0x7f58f0b9de59 [ 137.451481][ T6150] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 137.451515][ T6150] RSP: 002b:00007f58ee9b2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 137.451548][ T6150] RAX: ffffffffffffffda RBX: 00007f58f0e26270 RCX: 00007f58f0b9de59 [ 137.451570][ T6150] RDX: 0000000000002000 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 137.451592][ T6150] RBP: 00007f58f0c33e6f R08: 0000000000000000 R09: 0000000000000000 [ 137.451613][ T6150] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 137.451633][ T6150] R13: 00007f58f0e26308 R14: 00007f58f0e26270 R15: 00007ffc3359c6f8 [ 137.451678][ T6150] [ 138.995415][ T6174] ubi31: attaching mtd0 [ 139.079794][ T6174] ubi31: scanning is finished [ 139.079834][ T6174] ubi31: empty MTD device detected [ 139.709149][ T6174] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 139.709188][ T6174] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3518 bytes [ 139.709214][ T6174] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 139.715226][ T6174] ubi31: VID header offset: 514 (aligned 514), data offset: 578 [ 139.715279][ T6174] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 139.715307][ T6174] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 20 [ 139.715336][ T6174] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 1020488074 [ 139.715371][ T6174] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 139.726130][ T6188] ubi31: background thread "ubi_bgt31d" started, PID 6188 [ 143.427755][ T6236] FAULT_INJECTION: forcing a failure. [ 143.427755][ T6236] name failslab, interval 1, probability 0, space 0, times 0 [ 143.451479][ T6236] CPU: 1 UID: 0 PID: 6236 Comm: syz.1.73 Not tainted syzkaller #0 PREEMPT(full) [ 143.451521][ T6236] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 143.451544][ T6236] Call Trace: [ 143.451554][ T6236] [ 143.451566][ T6236] dump_stack_lvl+0x100/0x190 [ 143.451606][ T6236] should_fail_ex.cold+0x5/0xa [ 143.451642][ T6236] should_failslab+0xc2/0x120 [ 143.451684][ T6236] kmem_cache_alloc_noprof+0x91/0x6a0 [ 143.451718][ T6236] ? ksys_write+0x190/0x250 [ 143.451765][ T6236] ? create_new_namespaces+0x30/0xac0 [ 143.451824][ T6236] create_new_namespaces+0x30/0xac0 [ 143.451875][ T6236] ? bpf_lsm_capable+0x9/0x10 [ 143.451904][ T6236] ? security_capable+0x80/0x260 [ 143.451958][ T6236] unshare_nsproxy_namespaces+0xf2/0x220 [ 143.452015][ T6236] ksys_unshare+0x438/0xab0 [ 143.452055][ T6236] ? __pfx_ksys_unshare+0x10/0x10 [ 143.452107][ T6236] __x64_sys_unshare+0x31/0x40 [ 143.452142][ T6236] do_syscall_64+0x115/0x840 [ 143.452199][ T6236] ? clear_bhb_loop+0x40/0x90 [ 143.452240][ T6236] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.452274][ T6236] RIP: 0033:0x7fe7a959de59 [ 143.452302][ T6236] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 143.452335][ T6236] RSP: 002b:00007fe7a77d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 143.452367][ T6236] RAX: ffffffffffffffda RBX: 00007fe7a9826180 RCX: 00007fe7a959de59 [ 143.452390][ T6236] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 143.452410][ T6236] RBP: 00007fe7a9633e6f R08: 0000000000000000 R09: 0000000000000000 [ 143.452431][ T6236] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 143.452450][ T6236] R13: 00007fe7a9826218 R14: 00007fe7a9826180 R15: 00007ffed21ced18 [ 143.452490][ T6236] [ 143.903716][ T6239] FAULT_INJECTION: forcing a failure. [ 143.903716][ T6239] name failslab, interval 1, probability 0, space 0, times 0 [ 143.937519][ T6239] CPU: 1 UID: 0 PID: 6239 Comm: syz.0.74 Not tainted syzkaller #0 PREEMPT(full) [ 143.937565][ T6239] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 143.937588][ T6239] Call Trace: [ 143.937599][ T6239] [ 143.937611][ T6239] dump_stack_lvl+0x100/0x190 [ 143.937656][ T6239] should_fail_ex.cold+0x5/0xa [ 143.937695][ T6239] should_failslab+0xc2/0x120 [ 143.937740][ T6239] kmem_cache_alloc_noprof+0x91/0x6a0 [ 143.937778][ T6239] ? __pfx_map_id_range_down+0x10/0x10 [ 143.937824][ T6239] ? security_inode_alloc+0x3b/0x2c0 [ 143.937866][ T6239] security_inode_alloc+0x3b/0x2c0 [ 143.937902][ T6239] inode_init_always_gfp+0xc77/0xfb0 [ 143.937962][ T6239] alloc_inode+0x8e/0x250 [ 143.938004][ T6239] sock_alloc+0x44/0x280 [ 143.938044][ T6239] ? security_socket_create+0x7f/0x250 [ 143.938102][ T6239] __sock_create+0xc2/0x860 [ 143.938157][ T6239] __sys_socket+0x14d/0x260 [ 143.938206][ T6239] ? exc_page_fault+0x6f/0xd0 [ 143.938258][ T6239] ? __pfx___sys_socket+0x10/0x10 [ 143.938332][ T6239] __x64_sys_socket+0x72/0xb0 [ 143.938383][ T6239] ? lockdep_hardirqs_on+0x78/0x100 [ 143.938435][ T6239] do_syscall_64+0x115/0x840 [ 143.938485][ T6239] ? clear_bhb_loop+0x40/0x90 [ 143.938527][ T6239] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.938563][ T6239] RIP: 0033:0x7f0741f9f6c7 [ 143.938593][ T6239] Code: f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 0f 1f 44 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 143.938626][ T6239] RSP: 002b:00007f0742eb3f98 EFLAGS: 00000286 ORIG_RAX: 0000000000000029 [ 143.938659][ T6239] RAX: ffffffffffffffda RBX: 00007f0742225fa0 RCX: 00007f0741f9f6c7 [ 143.938681][ T6239] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 143.938700][ T6239] RBP: 00000000ffffffff R08: 0000000000000000 R09: 0000000000000000 [ 143.938720][ T6239] R10: 0000200000000280 R11: 0000000000000286 R12: 0000000000000000 [ 143.938741][ T6239] R13: 00007f0742226038 R14: 00007f0742225fa0 R15: 00007ffcbe9d8c08 [ 143.938785][ T6239] [ 143.938839][ T6239] socket: no more sockets [ 144.273932][ T6239] openvswitch: netlink: Message has 4 unknown bytes. [ 145.460273][ T6269] FAULT_INJECTION: forcing a failure. [ 145.460273][ T6269] name failslab, interval 1, probability 0, space 0, times 0 [ 145.493347][ T6269] CPU: 1 UID: 0 PID: 6269 Comm: syz.0.82 Not tainted syzkaller #0 PREEMPT(full) [ 145.493393][ T6269] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 145.493414][ T6269] Call Trace: [ 145.493424][ T6269] [ 145.493436][ T6269] dump_stack_lvl+0x100/0x190 [ 145.493480][ T6269] should_fail_ex.cold+0x5/0xa [ 145.493522][ T6269] should_failslab+0xc2/0x120 [ 145.493568][ T6269] kmem_cache_alloc_noprof+0x91/0x6a0 [ 145.493606][ T6269] ? __proc_create+0xc1/0x8f0 [ 145.493659][ T6269] ? __proc_create+0xc1/0x8f0 [ 145.493712][ T6269] ? __proc_create+0x247/0x8f0 [ 145.493778][ T6269] __proc_create+0x247/0x8f0 [ 145.493834][ T6269] ? __pfx___proc_create+0x10/0x10 [ 145.493904][ T6269] proc_mkdir+0x81/0x170 [ 145.493935][ T6269] ? __pfx_proc_mkdir+0x10/0x10 [ 145.493964][ T6269] ? cache_register_net+0x137/0x5e0 [ 145.494007][ T6269] ? cache_register_net+0x137/0x5e0 [ 145.494058][ T6269] cache_register_net+0x18f/0x5e0 [ 145.494106][ T6269] nfsd_idmap_init+0xb6/0x250 [ 145.494151][ T6269] ? __pfx_nfsd_net_init+0x10/0x10 [ 145.494194][ T6269] nfsd_net_init+0x85/0x3e0 [ 145.494238][ T6269] ? __pfx_nfsd_net_init+0x10/0x10 [ 145.494282][ T6269] ops_init+0x1e2/0x5f0 [ 145.494328][ T6269] setup_net+0x118/0x3a0 [ 145.494370][ T6269] ? __pfx_setup_net+0x10/0x10 [ 145.494411][ T6269] ? mutex_init_lockdep+0xf1/0x120 [ 145.494474][ T6269] copy_net_ns+0x46f/0x7c0 [ 145.494523][ T6269] create_new_namespaces+0x3ea/0xac0 [ 145.494591][ T6269] unshare_nsproxy_namespaces+0xf2/0x220 [ 145.494653][ T6269] ksys_unshare+0x438/0xab0 [ 145.494696][ T6269] ? __pfx_ksys_unshare+0x10/0x10 [ 145.494752][ T6269] __x64_sys_unshare+0x31/0x40 [ 145.494792][ T6269] do_syscall_64+0x115/0x840 [ 145.494845][ T6269] ? clear_bhb_loop+0x40/0x90 [ 145.494886][ T6269] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.494920][ T6269] RIP: 0033:0x7f0741f9de59 [ 145.494947][ T6269] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 145.494977][ T6269] RSP: 002b:00007f0742eb5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 145.495009][ T6269] RAX: ffffffffffffffda RBX: 00007f0742225fa0 RCX: 00007f0741f9de59 [ 145.495030][ T6269] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 145.495049][ T6269] RBP: 00007f0742033e6f R08: 0000000000000000 R09: 0000000000000000 [ 145.495069][ T6269] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 145.495088][ T6269] R13: 00007f0742226038 R14: 00007f0742225fa0 R15: 00007ffcbe9d8c08 [ 145.495138][ T6269] [ 146.684966][ T5632] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18 [ 148.768483][ T5632] Bluetooth: hci0: command 0x2016 tx timeout [ 150.838339][ T5632] Bluetooth: hci0: command 0x2016 tx timeout [ 151.461917][ T6378] ubi: mtd0 is already attached to ubi31 [ 155.020682][ T6424] binder: 6409:6424 ioctl c0306201 0 returned -14 [ 155.621835][ T6414] bond0: option slaves: interface -Âô]àæ©=,Dço does not exist! [ 156.284192][ T6437] FAULT_INJECTION: forcing a failure. [ 156.284192][ T6437] name failslab, interval 1, probability 0, space 0, times 0 [ 156.320160][ T6437] CPU: 1 UID: 0 PID: 6437 Comm: syz.1.110 Not tainted syzkaller #0 PREEMPT(full) [ 156.320209][ T6437] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 156.320229][ T6437] Call Trace: [ 156.320241][ T6437] [ 156.320254][ T6437] dump_stack_lvl+0x100/0x190 [ 156.320300][ T6437] should_fail_ex.cold+0x5/0xa [ 156.320340][ T6437] should_failslab+0xc2/0x120 [ 156.320386][ T6437] kmem_cache_alloc_noprof+0x91/0x6a0 [ 156.320425][ T6437] ? __pfx_map_id_range_down+0x10/0x10 [ 156.320470][ T6437] ? security_inode_alloc+0x3b/0x2c0 [ 156.320512][ T6437] security_inode_alloc+0x3b/0x2c0 [ 156.320549][ T6437] inode_init_always_gfp+0xc77/0xfb0 [ 156.320610][ T6437] alloc_inode+0x8e/0x250 [ 156.320652][ T6437] sock_alloc+0x44/0x280 [ 156.320693][ T6437] ? security_socket_create+0x7f/0x250 [ 156.320750][ T6437] __sock_create+0xc2/0x860 [ 156.320809][ T6437] __sys_socket+0x14d/0x260 [ 156.320859][ T6437] ? exc_page_fault+0x6f/0xd0 [ 156.320910][ T6437] ? __pfx___sys_socket+0x10/0x10 [ 156.320975][ T6437] __x64_sys_socket+0x72/0xb0 [ 156.321039][ T6437] ? lockdep_hardirqs_on+0x78/0x100 [ 156.321093][ T6437] do_syscall_64+0x115/0x840 [ 156.321145][ T6437] ? clear_bhb_loop+0x40/0x90 [ 156.321188][ T6437] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.321224][ T6437] RIP: 0033:0x7fe7a959f6c7 [ 156.321253][ T6437] Code: f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 0f 1f 44 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 156.321285][ T6437] RSP: 002b:00007fe7aa391f98 EFLAGS: 00000286 ORIG_RAX: 0000000000000029 [ 156.321317][ T6437] RAX: ffffffffffffffda RBX: 00007fe7a9825fa0 RCX: 00007fe7a959f6c7 [ 156.321341][ T6437] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 156.321362][ T6437] RBP: 00000000ffffffff R08: 0000000000000000 R09: 0000000000000000 [ 156.321383][ T6437] R10: 0000200000000280 R11: 0000000000000286 R12: 0000000000000000 [ 156.321405][ T6437] R13: 00007fe7a9826038 R14: 00007fe7a9825fa0 R15: 00007ffed21ced18 [ 156.321450][ T6437] [ 156.321495][ T6437] socket: no more sockets [ 156.673910][ T6437] openvswitch: netlink: Message has 4 unknown bytes. [ 157.931544][ T6463] netlink: 4 bytes leftover after parsing attributes in process `syz.2.116'. [ 159.096330][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 159.324773][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10a!!! [ 160.755591][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805a398800: rx timeout, send abort [ 160.881044][ T6504] FAULT_INJECTION: forcing a failure. [ 160.881044][ T6504] name failslab, interval 1, probability 0, space 0, times 0 [ 160.895362][ T6504] CPU: 0 UID: 0 PID: 6504 Comm: syz.0.123 Not tainted syzkaller #0 PREEMPT(full) [ 160.895408][ T6504] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 160.895428][ T6504] Call Trace: [ 160.895439][ T6504] [ 160.895453][ T6504] dump_stack_lvl+0x100/0x190 [ 160.895502][ T6504] should_fail_ex.cold+0x5/0xa [ 160.895552][ T6504] should_failslab+0xc2/0x120 [ 160.895598][ T6504] __kmalloc_cache_noprof+0x91/0x6c0 [ 160.895657][ T6504] ? tipc_group_create_member+0x58/0x6a0 [ 160.895724][ T6504] tipc_group_create_member+0x58/0x6a0 [ 160.895789][ T6504] tipc_group_proto_rcv+0x333/0x1e40 [ 160.895831][ T6504] tipc_sk_filter_rcv+0x18b4/0x3250 [ 160.895891][ T6504] ? __pfx_tipc_sk_filter_rcv+0x10/0x10 [ 160.895978][ T6504] tipc_sk_rcv+0xe90/0x1c80 [ 160.896025][ T6504] ? kasan_save_track+0x14/0x30 [ 160.896067][ T6504] ? __alloc_skb+0x185/0x710 [ 160.896104][ T6504] ? tipc_group_join+0xda/0x220 [ 160.896166][ T6504] ? __pfx_tipc_sk_rcv+0x10/0x10 [ 160.896226][ T6504] ? __lock_acquire+0x49f/0x1a40 [ 160.896299][ T6504] ? find_held_lock+0x2b/0x80 [ 160.896338][ T6504] ? tipc_node_xmit+0x1f6/0xfb0 [ 160.896394][ T6504] ? lockdep_init_map_type+0x5c/0x250 [ 160.896455][ T6504] tipc_node_xmit+0x23e/0xfb0 [ 160.896523][ T6504] ? __pfx_tipc_node_xmit+0x10/0x10 [ 160.896592][ T6504] ? kmalloc_reserve+0xf9/0x350 [ 160.896643][ T6504] ? tipc_node_distr_xmit+0x177/0x3c0 [ 160.896694][ T6504] tipc_node_distr_xmit+0x177/0x3c0 [ 160.896753][ T6504] ? __pfx_tipc_node_distr_xmit+0x10/0x10 [ 160.896819][ T6504] ? tipc_group_update_member+0x118/0x540 [ 160.896885][ T6504] tipc_group_join+0xfa/0x220 [ 160.896946][ T6504] ? __pfx_tipc_group_join+0x10/0x10 [ 160.897027][ T6504] tipc_setsockopt+0x841/0xe30 [ 160.897072][ T6504] ? __pfx_tipc_setsockopt+0x10/0x10 [ 160.897132][ T6504] ? __pfx_tipc_setsockopt+0x10/0x10 [ 160.897176][ T6504] do_sock_setsockopt+0xf3/0x1d0 [ 160.897226][ T6504] __sys_setsockopt+0x119/0x190 [ 160.897272][ T6504] __x64_sys_setsockopt+0xbd/0x160 [ 160.897309][ T6504] ? do_syscall_64+0x90/0x840 [ 160.897362][ T6504] ? lockdep_hardirqs_on+0x78/0x100 [ 160.897415][ T6504] do_syscall_64+0x115/0x840 [ 160.897467][ T6504] ? clear_bhb_loop+0x40/0x90 [ 160.897519][ T6504] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.897556][ T6504] RIP: 0033:0x7f0741f9de59 [ 160.897584][ T6504] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 160.897617][ T6504] RSP: 002b:00007f0742e94028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 160.897651][ T6504] RAX: ffffffffffffffda RBX: 00007f0742226090 RCX: 00007f0741f9de59 [ 160.897674][ T6504] RDX: 0000000000000087 RSI: 000000000000010f RDI: 0000000000000003 [ 160.897695][ T6504] RBP: 00007f0742033e6f R08: 0000000000000014 R09: 0000000000000000 [ 160.897716][ T6504] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 160.897737][ T6504] R13: 00007f0742226128 R14: 00007f0742226090 R15: 00007ffcbe9d8c08 [ 160.897783][ T6504] [ 161.263104][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805a398800: abort rx timeout. Force session deactivation [ 162.329073][ T6512] bond0: option arp_interval: invalid value (/dev/vmci) [ 162.337841][ T6512] bond0: option arp_interval: allowed values 0 - 2147483647 [ 163.702814][ T6552] netlink: 338 bytes leftover after parsing attributes in process `syz.0.133'. [ 163.965916][ T6552] netlink: 338 bytes leftover after parsing attributes in process `syz.0.133'. [ 173.154362][ T6714] netlink: del zone limit has 4 unknown bytes [ 173.823607][ T6736] netlink: 338 bytes leftover after parsing attributes in process `syz.3.161'. [ 173.938655][ T6736] netlink: 338 bytes leftover after parsing attributes in process `syz.3.161'. [ 178.837213][ T6793] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.011424][ T6824] FAULT_INJECTION: forcing a failure. [ 179.011424][ T6824] name failslab, interval 1, probability 0, space 0, times 0 [ 179.048220][ T6824] CPU: 0 UID: 0 PID: 6824 Comm: syz.2.180 Not tainted syzkaller #0 PREEMPT(full) [ 179.048267][ T6824] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 179.048287][ T6824] Call Trace: [ 179.048298][ T6824] [ 179.048311][ T6824] dump_stack_lvl+0x100/0x190 [ 179.048357][ T6824] should_fail_ex.cold+0x5/0xa [ 179.048396][ T6824] should_failslab+0xc2/0x120 [ 179.048441][ T6824] kmem_cache_alloc_noprof+0x91/0x6a0 [ 179.048476][ T6824] ? __proc_create+0xc1/0x8f0 [ 179.048519][ T6824] ? __proc_create+0xc1/0x8f0 [ 179.048558][ T6824] ? __proc_create+0x247/0x8f0 [ 179.048606][ T6824] __proc_create+0x247/0x8f0 [ 179.048650][ T6824] ? __pfx___proc_create+0x10/0x10 [ 179.048698][ T6824] ? _raw_write_unlock+0x28/0x50 [ 179.048743][ T6824] proc_create_reg+0x75/0x170 [ 179.048778][ T6824] proc_create_data+0x86/0x110 [ 179.048806][ T6824] ? __pfx_proc_create_data+0x10/0x10 [ 179.048834][ T6824] ? cache_register_net+0x137/0x5e0 [ 179.048873][ T6824] ? cache_register_net+0x137/0x5e0 [ 179.048912][ T6824] cache_register_net+0x1e0/0x5e0 [ 179.048948][ T6824] nfsd_idmap_init+0xb6/0x250 [ 179.048977][ T6824] ? __pfx_nfsd_net_init+0x10/0x10 [ 179.049013][ T6824] nfsd_net_init+0x85/0x3e0 [ 179.049051][ T6824] ? __pfx_nfsd_net_init+0x10/0x10 [ 179.049091][ T6824] ops_init+0x1e2/0x5f0 [ 179.049135][ T6824] setup_net+0x118/0x3a0 [ 179.049183][ T6824] ? __pfx_setup_net+0x10/0x10 [ 179.049218][ T6824] ? mutex_init_lockdep+0xf1/0x120 [ 179.049274][ T6824] copy_net_ns+0x46f/0x7c0 [ 179.049314][ T6824] create_new_namespaces+0x3ea/0xac0 [ 179.049377][ T6824] unshare_nsproxy_namespaces+0xf2/0x220 [ 179.049436][ T6824] ksys_unshare+0x438/0xab0 [ 179.049477][ T6824] ? __pfx_ksys_unshare+0x10/0x10 [ 179.049534][ T6824] __x64_sys_unshare+0x31/0x40 [ 179.049572][ T6824] do_syscall_64+0x115/0x840 [ 179.049621][ T6824] ? clear_bhb_loop+0x40/0x90 [ 179.049664][ T6824] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.049699][ T6824] RIP: 0033:0x7f58f0b9de59 [ 179.049727][ T6824] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 179.049760][ T6824] RSP: 002b:00007f58f198b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 179.049793][ T6824] RAX: ffffffffffffffda RBX: 00007f58f0e25fa0 RCX: 00007f58f0b9de59 [ 179.049813][ T6824] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 179.049834][ T6824] RBP: 00007f58f0c33e6f R08: 0000000000000000 R09: 0000000000000000 [ 179.049853][ T6824] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 179.049870][ T6824] R13: 00007f58f0e26038 R14: 00007f58f0e25fa0 R15: 00007ffc3359c6f8 [ 179.049902][ T6824] [ 179.326787][ T6821] Process accounting resumed [ 181.620514][ T6872] bond0: option arp_interval: invalid value (/dev/vmci) [ 181.631930][ T6872] bond0: option arp_interval: allowed values 0 - 2147483647 [ 184.011779][ T6915] ptp ptp0: new virtual clock ptp1 [ 184.035933][ T6903] FAULT_INJECTION: forcing a failure. [ 184.035933][ T6903] name failslab, interval 1, probability 0, space 0, times 0 [ 184.058471][ T6903] CPU: 0 UID: 0 PID: 6903 Comm: syz.0.198 Not tainted syzkaller #0 PREEMPT(full) [ 184.058515][ T6903] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 184.058533][ T6903] Call Trace: [ 184.058543][ T6903] [ 184.058554][ T6903] dump_stack_lvl+0x100/0x190 [ 184.058589][ T6903] should_fail_ex.cold+0x5/0xa [ 184.058632][ T6903] should_failslab+0xc2/0x120 [ 184.058668][ T6903] kmem_cache_alloc_noprof+0x91/0x6a0 [ 184.058698][ T6903] ? __proc_create+0xc1/0x8f0 [ 184.058743][ T6903] ? __proc_create+0xc1/0x8f0 [ 184.058787][ T6903] ? __proc_create+0x247/0x8f0 [ 184.058844][ T6903] __proc_create+0x247/0x8f0 [ 184.058891][ T6903] ? __pfx___proc_create+0x10/0x10 [ 184.058941][ T6903] ? __lock_acquire+0x49f/0x1a40 [ 184.059002][ T6903] proc_create_reg+0x75/0x170 [ 184.059037][ T6903] proc_create_net_data+0x8e/0x1c0 [ 184.059087][ T6903] ? __pfx_proc_create_net_data+0x10/0x10 [ 184.059137][ T6903] ? net_generic+0xea/0x2a0 [ 184.059177][ T6903] ? __pfx_phonet_init_net+0x10/0x10 [ 184.059214][ T6903] phonet_init_net+0x66/0x120 [ 184.059249][ T6903] ops_init+0x1e2/0x5f0 [ 184.059292][ T6903] setup_net+0x118/0x3a0 [ 184.059331][ T6903] ? __pfx_setup_net+0x10/0x10 [ 184.059370][ T6903] ? mutex_init_lockdep+0xf1/0x120 [ 184.059427][ T6903] copy_net_ns+0x46f/0x7c0 [ 184.059479][ T6903] create_new_namespaces+0x3ea/0xac0 [ 184.059546][ T6903] unshare_nsproxy_namespaces+0xf2/0x220 [ 184.059605][ T6903] ksys_unshare+0x438/0xab0 [ 184.059662][ T6903] ? __pfx_ksys_unshare+0x10/0x10 [ 184.059721][ T6903] __x64_sys_unshare+0x31/0x40 [ 184.059762][ T6903] do_syscall_64+0x115/0x840 [ 184.059815][ T6903] ? clear_bhb_loop+0x40/0x90 [ 184.059858][ T6903] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 184.059894][ T6903] RIP: 0033:0x7f0741f9de59 [ 184.059922][ T6903] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 184.059956][ T6903] RSP: 002b:00007f0742eb5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 184.059989][ T6903] RAX: ffffffffffffffda RBX: 00007f0742225fa0 RCX: 00007f0741f9de59 [ 184.060011][ T6903] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 184.060030][ T6903] RBP: 00007f0742033e6f R08: 0000000000000000 R09: 0000000000000000 [ 184.060050][ T6903] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 184.060070][ T6903] R13: 00007f0742226038 R14: 00007f0742225fa0 R15: 00007ffcbe9d8c08 [ 184.060112][ T6903] [ 184.067617][ T6915] ptp ptp0: new virtual clock ptp2 [ 184.340836][ T6915] ptp ptp0: new virtual clock ptp3 [ 184.369581][ T6915] ptp ptp0: new virtual clock ptp4 [ 184.383406][ T6922] netlink: 338 bytes leftover after parsing attributes in process `syz.1.200'. [ 184.403234][ T6915] ptp ptp0: new virtual clock ptp5 [ 184.408643][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 184.416477][ T6922] netlink: 338 bytes leftover after parsing attributes in process `syz.1.200'. [ 184.419335][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 184.436182][ T6915] ptp ptp0: new virtual clock ptp6 [ 184.468551][ T6915] ptp ptp0: new virtual clock ptp7 [ 184.523554][ T6915] ptp ptp0: new virtual clock ptp8 [ 184.547109][ T6915] ptp ptp0: new virtual clock ptp9 [ 184.568315][ T6915] ptp ptp0: new virtual clock ptp10 [ 184.643354][ T6915] ptp ptp0: new virtual clock ptp11 [ 184.688293][ T6915] ptp ptp0: new virtual clock ptp12 [ 184.861416][ T6915] ptp ptp0: new virtual clock ptp13 [ 184.929315][ T6915] ptp ptp0: new virtual clock ptp14 [ 184.965243][ T6915] ptp ptp0: new virtual clock ptp15 [ 185.005379][ T6915] ptp ptp0: guarantee physical clock free running [ 187.241436][ T6987] FAULT_INJECTION: forcing a failure. [ 187.241436][ T6987] name failslab, interval 1, probability 0, space 0, times 0 [ 187.256444][ T6987] CPU: 1 UID: 0 PID: 6987 Comm: syz.0.212 Not tainted syzkaller #0 PREEMPT(full) [ 187.256488][ T6987] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 187.256509][ T6987] Call Trace: [ 187.256519][ T6987] [ 187.256532][ T6987] dump_stack_lvl+0x100/0x190 [ 187.256575][ T6987] should_fail_ex.cold+0x5/0xa [ 187.256616][ T6987] should_failslab+0xc2/0x120 [ 187.256661][ T6987] __kmalloc_node_track_caller_noprof+0xf9/0x830 [ 187.256704][ T6987] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 187.256761][ T6987] ? append_filter_err+0x3d6/0x620 [ 187.256820][ T6987] kmemdup_nul+0x49/0xd0 [ 187.256885][ T6987] append_filter_err+0x3d6/0x620 [ 187.256936][ T6987] apply_subsystem_event_filter+0x711/0x17a0 [ 187.256997][ T6987] ? __pfx_apply_subsystem_event_filter+0x10/0x10 [ 187.257061][ T6987] ? _copy_from_user+0x59/0xd0 [ 187.257114][ T6987] subsystem_filter_write+0x95/0x120 [ 187.257164][ T6987] vfs_write+0x2aa/0x1050 [ 187.257216][ T6987] ? __pfx_subsystem_filter_write+0x10/0x10 [ 187.257266][ T6987] ? __pfx_vfs_write+0x10/0x10 [ 187.257315][ T6987] ? __fget_files+0x215/0x3d0 [ 187.257374][ T6987] ? __fget_files+0x21f/0x3d0 [ 187.257437][ T6987] ksys_write+0x12a/0x250 [ 187.257487][ T6987] ? __pfx_ksys_write+0x10/0x10 [ 187.257552][ T6987] do_syscall_64+0x115/0x840 [ 187.257604][ T6987] ? clear_bhb_loop+0x40/0x90 [ 187.257646][ T6987] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.257683][ T6987] RIP: 0033:0x7f0741f9de59 [ 187.257711][ T6987] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 187.257743][ T6987] RSP: 002b:00007f0742eb5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 187.257776][ T6987] RAX: ffffffffffffffda RBX: 00007f0742225fa0 RCX: 00007f0741f9de59 [ 187.257806][ T6987] RDX: 000000000000004a RSI: 0000200000000040 RDI: 000000000000000b [ 187.257831][ T6987] RBP: 00007f0742033e6f R08: 0000000000000000 R09: 0000000000000000 [ 187.257852][ T6987] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 187.257872][ T6987] R13: 00007f0742226038 R14: 00007f0742225fa0 R15: 00007ffcbe9d8c08 [ 187.257918][ T6987] [ 188.376142][ T7010] netlink: 338 bytes leftover after parsing attributes in process `syz.2.214'. [ 188.459088][ T7010] netlink: 338 bytes leftover after parsing attributes in process `syz.2.214'. [ 190.904457][ T7049] binder: 7043:7049 ioctl c0306201 0 returned -14 [ 191.654188][ T7060] FAULT_INJECTION: forcing a failure. [ 191.654188][ T7060] name fail_futex, interval 1, probability 0, space 0, times 0 [ 191.726483][ T7060] CPU: 0 UID: 0 PID: 7060 Comm: syz.2.227 Not tainted syzkaller #0 PREEMPT(full) [ 191.726529][ T7060] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 191.726550][ T7060] Call Trace: [ 191.726560][ T7060] [ 191.726573][ T7060] dump_stack_lvl+0x100/0x190 [ 191.726617][ T7060] should_fail_ex.cold+0x5/0xa [ 191.726655][ T7060] get_futex_key+0x1d2/0x14f0 [ 191.726716][ T7060] ? __pfx_get_futex_key+0x10/0x10 [ 191.726790][ T7060] ? reacquire_held_locks+0xce/0x1e0 [ 191.726850][ T7060] futex_wake+0xf4/0x5e0 [ 191.726898][ T7060] ? __pfx_futex_wake+0x10/0x10 [ 191.726939][ T7060] ? __local_bh_enable_ip+0x9e/0x120 [ 191.726977][ T7060] ? tipc_setsockopt+0x232/0xe30 [ 191.727017][ T7060] ? __local_bh_enable_ip+0x9e/0x120 [ 191.727051][ T7060] ? tipc_setsockopt+0x412/0xe30 [ 191.727097][ T7060] do_futex+0x2b2/0x440 [ 191.727132][ T7060] ? __pfx_do_futex+0x10/0x10 [ 191.727166][ T7060] ? rcu_is_watching+0x12/0xc0 [ 191.727203][ T7060] ? do_sock_setsockopt+0x101/0x1d0 [ 191.727246][ T7060] ? kfree+0x1e5/0x6c0 [ 191.727303][ T7060] __x64_sys_futex+0x34f/0x4d0 [ 191.727348][ T7060] ? __pfx___x64_sys_futex+0x10/0x10 [ 191.727390][ T7060] ? __sys_setsockopt+0x139/0x190 [ 191.727439][ T7060] do_syscall_64+0x115/0x840 [ 191.727492][ T7060] ? clear_bhb_loop+0x40/0x90 [ 191.727533][ T7060] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.727570][ T7060] RIP: 0033:0x7f58f0b9de59 [ 191.727599][ T7060] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 191.727632][ T7060] RSP: 002b:00007f58eedf60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 191.727666][ T7060] RAX: ffffffffffffffda RBX: 00007f58f0e26098 RCX: 00007f58f0b9de59 [ 191.727689][ T7060] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f58f0e2609c [ 191.727710][ T7060] RBP: 00007f58f0e26090 R08: 0000000000000001 R09: 0000000000000000 [ 191.727728][ T7060] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 191.727747][ T7060] R13: 00007f58f0e26128 R14: 00007ffc3359c610 R15: 00007ffc3359c6f8 [ 191.727799][ T7060] [ 194.060641][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.073353][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.360285][ T7102] netlink: del zone limit has 4 unknown bytes [ 196.684668][ T7117] binder: 7110:7117 ioctl c0306201 0 returned -14 [ 204.971173][ T7225] FAULT_INJECTION: forcing a failure. [ 204.971173][ T7225] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 204.992039][ T7225] CPU: 0 UID: 0 PID: 7225 Comm: syz.1.258 Not tainted syzkaller #0 PREEMPT(full) [ 204.992072][ T7225] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 204.992087][ T7225] Call Trace: [ 204.992094][ T7225] [ 204.992103][ T7225] dump_stack_lvl+0x100/0x190 [ 204.992135][ T7225] should_fail_ex.cold+0x5/0xa [ 204.992163][ T7225] _copy_to_iter+0x5a4/0x1720 [ 204.992199][ T7225] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 204.992226][ T7225] ? __pfx__copy_to_iter+0x10/0x10 [ 204.992257][ T7225] ? _raw_spin_lock_irqsave+0x52/0x60 [ 204.992295][ T7225] ? mark_held_locks+0x40/0x70 [ 204.992330][ T7225] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 204.992365][ T7225] ? lockdep_hardirqs_on+0x78/0x100 [ 204.992407][ T7225] simple_copy_to_iter+0x46/0x90 [ 204.992448][ T7225] __skb_datagram_iter+0x129/0x900 [ 204.992485][ T7225] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 204.992532][ T7225] skb_copy_datagram_iter+0xa1/0x250 [ 204.992575][ T7225] tipc_recvmsg+0x4af/0xfc0 [ 204.992616][ T7225] ? __pfx_tipc_recvmsg+0x10/0x10 [ 204.992650][ T7225] ? __pfx_aa_sk_perm+0x10/0x10 [ 204.992686][ T7225] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 204.992727][ T7225] ? bpf_lsm_socket_recvmsg+0x9/0x10 [ 204.992760][ T7225] ? __pfx_tipc_recvmsg+0x10/0x10 [ 204.992794][ T7225] sock_recvmsg+0x1d5/0x220 [ 204.992829][ T7225] ____sys_recvmsg+0x21e/0x670 [ 204.992869][ T7225] ? __pfx_____sys_recvmsg+0x10/0x10 [ 204.992915][ T7225] ? __lock_acquire+0x49f/0x1a40 [ 204.992964][ T7225] ___sys_recvmsg+0x16a/0x1a0 [ 204.993003][ T7225] ? __pfx____sys_recvmsg+0x10/0x10 [ 204.993044][ T7225] ? find_held_lock+0x2b/0x80 [ 204.993090][ T7225] do_recvmmsg+0x2f3/0x740 [ 204.993169][ T7225] ? __pfx_do_recvmmsg+0x10/0x10 [ 204.993223][ T7225] ? do_futex+0x190/0x440 [ 204.993258][ T7225] ? __x64_sys_futex+0x34f/0x4d0 [ 204.993286][ T7225] __x64_sys_recvmmsg+0x22a/0x280 [ 204.993317][ T7225] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 204.993355][ T7225] do_syscall_64+0x115/0x840 [ 204.993392][ T7225] ? clear_bhb_loop+0x40/0x90 [ 204.993423][ T7225] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 204.993450][ T7225] RIP: 0033:0x7fe7a959de59 [ 204.993470][ T7225] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 204.993494][ T7225] RSP: 002b:00007fe7a77f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 204.993517][ T7225] RAX: ffffffffffffffda RBX: 00007fe7a9826090 RCX: 00007fe7a959de59 [ 204.993533][ T7225] RDX: 00000000ffffffff RSI: 0000200000000200 RDI: 0000000000000004 [ 204.993549][ T7225] RBP: 00007fe7a9633e6f R08: 0000000000000000 R09: 0000000000000000 [ 204.993563][ T7225] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000000 [ 204.993578][ T7225] R13: 00007fe7a9826128 R14: 00007fe7a9826090 R15: 00007ffed21ced18 [ 204.993609][ T7225] [ 205.293276][ T7229] netlink: 28 bytes leftover after parsing attributes in process `syz.2.259'. [ 205.828289][ T7227] hub 1-0:1.0: USB hub found [ 205.849813][ T7227] hub 1-0:1.0: 1 port detected [ 205.860634][ T7232] ptp ptp0: delete virtual clock ptp15 [ 205.890572][ T7229] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 205.931400][ T7229] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 206.017070][ T7232] ptp ptp0: delete virtual clock ptp14 [ 206.092631][ T7232] ptp ptp0: delete virtual clock ptp13 [ 206.129728][ T7232] ptp ptp0: delete virtual clock ptp12 [ 206.150307][ T7232] ptp ptp0: delete virtual clock ptp11 [ 206.174288][ T7232] ptp ptp0: delete virtual clock ptp10 [ 206.198202][ T7232] ptp ptp0: delete virtual clock ptp9 [ 206.227899][ T7232] ptp ptp0: delete virtual clock ptp8 [ 206.274227][ T7232] ptp ptp0: delete virtual clock ptp7 [ 206.335524][ T7232] ptp ptp0: delete virtual clock ptp6 [ 206.354011][ T7232] ptp ptp0: delete virtual clock ptp5 [ 206.379199][ T7232] ptp ptp0: delete virtual clock ptp4 [ 206.415868][ T7232] ptp ptp0: delete virtual clock ptp3 [ 206.450845][ T7232] ptp ptp0: delete virtual clock ptp2 [ 206.470007][ T7232] ptp ptp0: delete virtual clock ptp1 [ 206.495837][ T7232] ptp ptp0: only physical clock in use now [ 208.595276][ T50] Bluetooth: hci0: ACL packet for unknown connection handle 0 [ 208.958059][ T50] Bluetooth: hci1: unexpected event 0x1d length: 6 > 5 [ 208.986301][ T7276] input: f¬ as /devices/virtual/input/input6 [ 210.426868][ T7271] Process accounting paused [ 211.985329][ T7322] netlink: 342 bytes leftover after parsing attributes in process `syz.0.286'. [ 212.111156][ T7322] FAULT_INJECTION: forcing a failure. [ 212.111156][ T7322] name failslab, interval 1, probability 0, space 0, times 0 [ 212.168285][ T7322] CPU: 0 UID: 0 PID: 7322 Comm: syz.0.286 Not tainted syzkaller #0 PREEMPT(full) [ 212.168334][ T7322] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 212.168354][ T7322] Call Trace: [ 212.168365][ T7322] [ 212.168378][ T7322] dump_stack_lvl+0x100/0x190 [ 212.168423][ T7322] should_fail_ex.cold+0x5/0xa [ 212.168462][ T7322] should_failslab+0xc2/0x120 [ 212.168505][ T7322] kmem_cache_alloc_noprof+0x91/0x6a0 [ 212.168545][ T7322] ? fib_trie_unmerge+0x220/0xbd0 [ 212.168599][ T7322] fib_trie_unmerge+0x220/0xbd0 [ 212.168653][ T7322] ? __pfx_fib_trie_unmerge+0x10/0x10 [ 212.168700][ T7322] ? __pfx___mutex_lock+0x10/0x10 [ 212.168768][ T7322] fib_unmerge+0xee/0x510 [ 212.168818][ T7322] ? __pfx_fib_nl2rule.constprop.0+0x10/0x10 [ 212.168872][ T7322] fib4_rule_configure+0x383/0x10c0 [ 212.168916][ T7322] fib_newrule+0x356/0x1ed0 [ 212.168969][ T7322] ? rcu_is_watching+0x12/0xc0 [ 212.169012][ T7322] ? __pfx_fib_newrule+0x10/0x10 [ 212.169061][ T7322] ? kfree_skbmem+0x190/0x210 [ 212.169118][ T7322] ? kmem_cache_free+0x127/0x6b0 [ 212.169178][ T7322] ? skb_release_data+0x6ca/0x8e0 [ 212.169248][ T7322] ? find_held_lock+0x2b/0x80 [ 212.169289][ T7322] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 212.169330][ T7322] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 212.169374][ T7322] ? __pfx_fib_nl_newrule+0x10/0x10 [ 212.169426][ T7322] rtnetlink_rcv_msg+0x95e/0xe90 [ 212.169472][ T7322] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 212.169523][ T7322] ? ref_tracker_free+0x37e/0x6c0 [ 212.169577][ T7322] netlink_rcv_skb+0x159/0x420 [ 212.169632][ T7322] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 212.169678][ T7322] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 212.169741][ T7322] ? netlink_deliver_tap+0x1ae/0xcc0 [ 212.169796][ T7322] netlink_unicast+0x585/0x850 [ 212.169853][ T7322] ? __pfx_netlink_unicast+0x10/0x10 [ 212.169913][ T7322] netlink_sendmsg+0x8b0/0xda0 [ 212.169978][ T7322] ? __pfx_netlink_sendmsg+0x10/0x10 [ 212.170036][ T7322] ? apparmor_socket_sendmsg+0x15b/0x270 [ 212.170101][ T7322] ____sys_sendmsg+0xa4d/0xbe0 [ 212.170147][ T7322] ? __pfx_netlink_sendmsg+0x10/0x10 [ 212.170212][ T7322] ? __pfx_____sys_sendmsg+0x10/0x10 [ 212.170269][ T7322] ? rcu_is_watching+0x12/0xc0 [ 212.170307][ T7322] ? ___sys_sendmsg+0x19d/0x1e0 [ 212.170356][ T7322] ? kfree+0x1e5/0x6c0 [ 212.170414][ T7322] ___sys_sendmsg+0x190/0x1e0 [ 212.170469][ T7322] ? __pfx____sys_sendmsg+0x10/0x10 [ 212.170521][ T7322] ? futex_hash+0x311/0x400 [ 212.170608][ T7322] ? __pfx___might_resched+0x10/0x10 [ 212.170668][ T7322] __sys_sendmmsg+0x20c/0x440 [ 212.170714][ T7322] ? __pfx___sys_sendmmsg+0x10/0x10 [ 212.170752][ T7322] ? __fget_files+0x215/0x3d0 [ 212.170815][ T7322] ? __pfx_do_futex+0x10/0x10 [ 212.170870][ T7322] ? xfd_validate_state+0x129/0x190 [ 212.170918][ T7322] __x64_sys_sendmmsg+0x9c/0x100 [ 212.170958][ T7322] ? lockdep_hardirqs_on+0x78/0x100 [ 212.171012][ T7322] do_syscall_64+0x115/0x840 [ 212.171064][ T7322] ? clear_bhb_loop+0x40/0x90 [ 212.171108][ T7322] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.171144][ T7322] RIP: 0033:0x7f0741f9de59 [ 212.171180][ T7322] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 212.171214][ T7322] RSP: 002b:00007f0742e94028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 212.171248][ T7322] RAX: ffffffffffffffda RBX: 00007f0742226090 RCX: 00007f0741f9de59 [ 212.171272][ T7322] RDX: 0000000000000003 RSI: 0000200000000080 RDI: 0000000000000003 [ 212.171293][ T7322] RBP: 00007f0742033e6f R08: 0000000000000000 R09: 0000000000000000 [ 212.171314][ T7322] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 212.171334][ T7322] R13: 00007f0742226128 R14: 00007f0742226090 R15: 00007ffcbe9d8c08 [ 212.171380][ T7322] [ 214.160750][ T7344] input: f¬ as /devices/virtual/input/input7 [ 214.225620][ T50] Bluetooth: hci0: unexpected event 0x1d length: 6 > 5 [ 214.414931][ T50] Bluetooth: hci1: ACL packet for unknown connection handle 0 [ 221.600262][ T7436] Bluetooth: hci1: command 0x0406 tx timeout [ 221.610500][ T7436] Bluetooth: hci2: command 0x0406 tx timeout [ 221.617548][ T7436] Bluetooth: hci3: command 0x0406 tx timeout [ 221.623747][ T7436] Bluetooth: hci0: command 0x2016 tx timeout [ 225.249013][ T7507] kAFS: unparsable volume name [ 231.492917][ T7596] netlink: 28 bytes leftover after parsing attributes in process `syz.0.329'. [ 231.585109][ T7596] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 231.722870][ T7596] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 232.209041][ T7596] ptp ptp0: only physical clock in use now [ 232.342730][ T7594] hub 1-0:1.0: USB hub found [ 232.378742][ T7594] hub 1-0:1.0: 1 port detected [ 233.401009][ T7615] zram0: detected capacity change from 16 to 0 [ 233.498650][ T7615] zram: Removed device: zram0 [ 234.756471][ T4943] Bluetooth: hci2: ACL packet for unknown connection handle 0 [ 238.295025][ T4943] Bluetooth: hci3: ACL packet for unknown connection handle 0 [ 239.760656][ T7754] vivid-007: ================= START STATUS ================= [ 239.768684][ T7754] vivid-007: Generate PTS: true [ 239.778257][ T7754] vivid-007: Generate SCR: true [ 239.789845][ T7754] tpg source WxH: 320x240 (Y'CbCr) [ 239.804267][ T7754] tpg field: 1 [ 239.820921][ T7754] tpg crop: (0,0)/320x240 [ 239.847184][ T7754] tpg compose: (0,0)/320x240 [ 239.875196][ T7754] tpg colorspace: 8 [ 239.903212][ T7754] tpg transfer function: 0/0 [ 239.943013][ T7754] tpg Y'CbCr encoding: 0/0 [ 239.949262][ T7754] tpg quantization: 0/0 [ 239.959982][ T7754] tpg RGB range: 0/2 [ 239.987690][ T7754] vivid-007: ================== END STATUS ================== [ 240.292174][ T7753] Process accounting resumed [ 242.899138][ T7811] Page cache invalidation failure on direct I/O. Possible data corruption due to collision with buffered I/O! [ 242.969745][ T7811] File: /dev/nullb0 PID: 7811 Comm: syz.2.365 [ 245.940234][ T7855] FAULT_INJECTION: forcing a failure. [ 245.940234][ T7855] name failslab, interval 1, probability 0, space 0, times 0 [ 245.963582][ T7855] CPU: 0 UID: 0 PID: 7855 Comm: syz.3.371 Not tainted syzkaller #0 PREEMPT(full) [ 245.963637][ T7855] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 245.963672][ T7855] Call Trace: [ 245.963685][ T7855] [ 245.963698][ T7855] dump_stack_lvl+0x100/0x190 [ 245.963749][ T7855] should_fail_ex.cold+0x5/0xa [ 245.963788][ T7855] should_failslab+0xc2/0x120 [ 245.963833][ T7855] kmem_cache_alloc_noprof+0x91/0x6a0 [ 245.963873][ T7855] ? trace_kmem_cache_alloc+0xdd/0x100 [ 245.963918][ T7855] ? security_file_alloc+0x34/0x2c0 [ 245.963968][ T7855] security_file_alloc+0x34/0x2c0 [ 245.964010][ T7855] init_file+0x95/0x480 [ 245.964048][ T7855] alloc_empty_file+0x79/0x1c0 [ 245.964089][ T7855] path_openat+0xe7/0x4280 [ 245.964142][ T7855] ? __kasan_slab_alloc+0x89/0x90 [ 245.964182][ T7855] ? kmem_cache_alloc_noprof+0x26b/0x6a0 [ 245.964219][ T7855] ? do_getname+0x35/0x390 [ 245.964255][ T7855] ? do_sys_openat2+0xc7/0x1e0 [ 245.964293][ T7855] ? __x64_sys_openat+0x12d/0x210 [ 245.964333][ T7855] ? do_syscall_64+0x115/0x840 [ 245.964384][ T7855] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 245.964433][ T7855] ? __pfx_path_openat+0x10/0x10 [ 245.964505][ T7855] do_file_open+0x20e/0x430 [ 245.964564][ T7855] ? __pfx_do_file_open+0x10/0x10 [ 245.964655][ T7855] ? alloc_fd+0x471/0x7a0 [ 245.964711][ T7855] ? do_getname+0x191/0x390 [ 245.964753][ T7855] do_sys_openat2+0x10f/0x1e0 [ 245.964795][ T7855] ? __pfx_do_sys_openat2+0x10/0x10 [ 245.964839][ T7855] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 245.964908][ T7855] __x64_sys_openat+0x12d/0x210 [ 245.964950][ T7855] ? __pfx___x64_sys_openat+0x10/0x10 [ 245.965007][ T7855] do_syscall_64+0x115/0x840 [ 245.965057][ T7855] ? clear_bhb_loop+0x40/0x90 [ 245.965098][ T7855] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 245.965133][ T7855] RIP: 0033:0x7fa4c215e68e [ 245.965162][ T7855] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 245.965194][ T7855] RSP: 002b:00007fa4c2fb0ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 245.965224][ T7855] RAX: ffffffffffffffda RBX: 00007fa4c2fb16c0 RCX: 00007fa4c215e68e [ 245.965246][ T7855] RDX: 0000000000000002 RSI: 00007fa4c2fb0f90 RDI: ffffffffffffff9c [ 245.965267][ T7855] RBP: 00007fa4c2233e6f R08: 0000000000000000 R09: 0000000000000000 [ 245.965286][ T7855] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 245.965313][ T7855] R13: 00007fa4c2426038 R14: 00007fa4c2425fa0 R15: 00007ffd57772278 [ 245.965355][ T7855] [ 246.782673][ T7855] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 246.792180][ T7855] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 246.918242][ T7855] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 246.924509][ T7855] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 247.056580][ T7855] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 247.084532][ T7855] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 247.169563][ T7855] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 247.199452][ T7855] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 247.491305][ T7873] FAULT_INJECTION: forcing a failure. [ 247.491305][ T7873] name failslab, interval 1, probability 0, space 0, times 0 [ 247.525810][ T7873] CPU: 0 UID: 0 PID: 7873 Comm: syz.0.377 Not tainted syzkaller #0 PREEMPT(full) [ 247.525854][ T7873] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 247.525873][ T7873] Call Trace: [ 247.525885][ T7873] [ 247.525899][ T7873] dump_stack_lvl+0x100/0x190 [ 247.525942][ T7873] should_fail_ex.cold+0x5/0xa [ 247.525982][ T7873] should_failslab+0xc2/0x120 [ 247.526023][ T7873] kmem_cache_alloc_lru_noprof+0x8d/0x6a0 [ 247.526057][ T7873] ? __pfx_inode_set_ctime_to_ts+0x10/0x10 [ 247.526106][ T7873] ? __d_alloc+0x35/0xa50 [ 247.526137][ T7873] __d_alloc+0x35/0xa50 [ 247.526172][ T7873] d_alloc_pseudo+0x1c/0xc0 [ 247.526208][ T7873] alloc_file_pseudo+0x118/0x290 [ 247.526243][ T7873] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 247.526275][ T7873] ? __pfx_pipe_lock_cmp_fn+0x10/0x10 [ 247.526326][ T7873] create_pipe_files+0x360/0x970 [ 247.526376][ T7873] do_pipe2+0xbd/0x1e0 [ 247.526428][ T7873] ? __pfx_do_pipe2+0x10/0x10 [ 247.526494][ T7873] __x64_sys_pipe+0x33/0x50 [ 247.526528][ T7873] do_syscall_64+0x115/0x840 [ 247.526577][ T7873] ? clear_bhb_loop+0x40/0x90 [ 247.526613][ T7873] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 247.526643][ T7873] RIP: 0033:0x7f0741f9de59 [ 247.526667][ T7873] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 247.526695][ T7873] RSP: 002b:00007f0742eb5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000016 [ 247.526722][ T7873] RAX: ffffffffffffffda RBX: 00007f0742225fa0 RCX: 00007f0741f9de59 [ 247.526741][ T7873] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000080 [ 247.526758][ T7873] RBP: 00007f0742033e6f R08: 0000000000000000 R09: 0000000000000000 [ 247.526775][ T7873] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 247.526791][ T7873] R13: 00007f0742226038 R14: 00007f0742225fa0 R15: 00007ffcbe9d8c08 [ 247.526826][ T7873] [ 248.579507][ T4943] Bluetooth: hci0: command 0x2016 tx timeout [ 248.759832][ T7883] hub 1-0:1.0: USB hub found [ 248.771061][ T7883] hub 1-0:1.0: 1 port detected [ 248.977974][ T4943] Bluetooth: hci1: command 0x0406 tx timeout [ 249.067110][ T4943] Bluetooth: hci2: command 0x0406 tx timeout [ 249.216238][ T4943] Bluetooth: hci3: command 0x0406 tx timeout [ 250.647860][ T4943] Bluetooth: hci0: command 0x2016 tx timeout [ 251.055624][ T4943] Bluetooth: hci1: command 0x0406 tx timeout [ 251.130681][ T4943] Bluetooth: hci2: command 0x0406 tx timeout [ 251.139072][ T7939] kAFS: unparsable volume name [ 251.249958][ T7941] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 251.284300][ T4943] Bluetooth: hci3: command 0x0406 tx timeout [ 252.868358][ T7953] queue_state_write: unsupported operation '' [ 252.891507][ T7953] queue_state_write: use 'run', 'start' or 'kick' [ 255.184101][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.191599][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.790494][ T8011] ptrace attach of ""[8015] was attempted by "ci-qemu-gce-upstream-auto/syz-executor exec"[8011] [ 255.821933][ T8014] netlink: 28 bytes leftover after parsing attributes in process `syz.2.405'. [ 255.856257][ T8013] warning: `syz.2.405' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 256.176290][ T8014] bond0: (slave bond_slave_0): Releasing backup interface [ 257.519629][ T8022] vivid-007: ================= START STATUS ================= [ 257.534998][ T8022] vivid-007: Generate PTS: true [ 257.553897][ T8022] vivid-007: Generate SCR: true [ 257.573395][ T8022] tpg source WxH: 320x240 (Y'CbCr) [ 257.587874][ T8022] tpg field: 1 [ 257.603490][ T8022] tpg crop: (0,0)/320x240 [ 257.642097][ T8022] tpg compose: (0,0)/320x240 [ 257.692441][ T8022] tpg colorspace: 8 [ 257.756057][ T8022] tpg transfer function: 0/0 [ 257.820526][ T8022] tpg Y'CbCr encoding: 0/0 [ 257.839827][ T8022] tpg quantization: 0/0 [ 257.870862][ T8022] tpg RGB range: 0/2 [ 257.901591][ T8022] vivid-007: ================== END STATUS ================== [ 259.006823][ T8044] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 261.681476][ T8076] netlink: 28 bytes leftover after parsing attributes in process `syz.0.416'. [ 261.920460][ T8076] bond0: (slave bond_slave_0): Releasing backup interface [ 270.129413][ T8218] ptrace attach of ""[8227] was attempted by "ci-qemu-gce-upstream-auto/syz-executor exec"[8218] [ 270.551262][ T30] audit: type=1804 audit(1644.910:2): pid=8226 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.441" name="/newroot/107/file0" dev="tmpfs" ino=580 res=1 errno=0 [ 270.642659][ T30] audit: type=1804 audit(1644.950:3): pid=8230 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.441" name="/newroot/107/file0" dev="tmpfs" ino=580 res=1 errno=0 [ 270.925160][ T8219] Process accounting paused [ 271.243130][ T8242] futex_wake_op: syz.1.443 tries to shift op by -2048; fix this program [ 271.290961][ T8242] futex_wake_op: syz.1.443 tries to shift op by -2048; fix this program [ 271.375313][ T8251] 0x000000000001-0x000000020000 : "" [ 271.836195][ T8251] ftl_cs: FTL header corrupt! [ 274.446470][ T8300] random: crng reseeded on system resumption [ 279.175681][ T8347] Process accounting resumed [ 280.040786][ T8393] Page cache invalidation failure on direct I/O. Possible data corruption due to collision with buffered I/O! [ 280.066483][ T8393] File: /dev/nullb0 PID: 8393 Comm: syz.0.472 [ 281.464874][ T8421] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 284.963107][ T8468] netlink: 4 bytes leftover after parsing attributes in process `syz.1.490'. [ 284.991375][ T8468] netlink: 354 bytes leftover after parsing attributes in process `syz.1.490'. [ 286.112928][ T8487] netlink: 4 bytes leftover after parsing attributes in process `syz.1.493'. [ 286.310264][ T8487] netlink: 25 bytes leftover after parsing attributes in process `syz.1.493'. [ 289.008568][ T8520] vivid-007: ================= START STATUS ================= [ 289.017683][ T8520] vivid-007: Generate PTS: true [ 289.022978][ T8520] vivid-007: Generate SCR: true [ 289.028459][ T8520] tpg source WxH: 320x240 (Y'CbCr) [ 289.037653][ T8520] tpg field: 1 [ 289.042338][ T8520] tpg crop: (0,0)/320x240 [ 289.046792][ T8520] tpg compose: (0,0)/320x240 [ 289.052458][ T8520] tpg colorspace: 8 [ 289.056539][ T8520] tpg transfer function: 0/0 [ 289.062001][ T8520] tpg Y'CbCr encoding: 0/0 [ 289.066933][ T8520] tpg quantization: 0/0 [ 289.085861][ T8520] tpg RGB range: 0/2 [ 289.093791][ T8520] vivid-007: ================== END STATUS ================== [ 290.129283][ T30] audit: type=1800 audit(1664.590:4): pid=8530 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.503" name="filter" dev="tracefs" ino=19680823 res=0 errno=0 [ 291.542422][ T8569] netlink: 28 bytes leftover after parsing attributes in process `syz.1.511'. [ 291.593314][ T8569] veth1_macvtap: left promiscuous mode [ 294.003076][ T8600] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 297.073954][ T4943] Bluetooth: hci0: unexpected event 0x02 length: 1021 > 260 [ 297.096604][ T8669] netlink: 146 bytes leftover after parsing attributes in process `syz.0.533'. [ 298.827064][ T8687] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 300.282030][ T8710] vivid-007: ================= START STATUS ================= [ 300.311987][ T8710] vivid-007: Generate PTS: true [ 300.349353][ T8710] vivid-007: Generate SCR: true [ 300.367337][ T8710] tpg source WxH: 320x240 (Y'CbCr) [ 300.384688][ T8710] tpg field: 1 [ 300.396691][ T8710] tpg crop: (0,0)/320x240 [ 300.404846][ T8710] tpg compose: (0,0)/320x240 [ 300.412134][ T8710] tpg colorspace: 8 [ 300.419829][ T8710] tpg transfer function: 0/0 [ 300.433628][ T8710] tpg Y'CbCr encoding: 0/0 [ 300.445442][ T8710] tpg quantization: 0/0 [ 300.463782][ T8710] tpg RGB range: 0/2 [ 300.472095][ T8710] vivid-007: ================== END STATUS ================== [ 301.366067][ T8726] netlink: 164 bytes leftover after parsing attributes in process `syz.2.544'. [ 301.873923][ T8729] vivid-007: ================= START STATUS ================= [ 301.884098][ T8729] vivid-007: Generate PTS: true [ 301.892313][ T8729] vivid-007: Generate SCR: true [ 301.906817][ T8729] tpg source WxH: 320x240 (Y'CbCr) [ 301.922183][ T8729] tpg field: 1 [ 301.933822][ T8729] tpg crop: (0,0)/320x240 [ 301.944958][ T8729] tpg compose: (0,0)/320x240 [ 301.960646][ T8729] tpg colorspace: 8 [ 301.972845][ T8729] tpg transfer function: 0/0 [ 302.051167][ T8729] tpg Y'CbCr encoding: 0/0 [ 302.104007][ T8729] tpg quantization: 0/0 [ 302.146950][ T8729] tpg RGB range: 0/2 [ 302.163227][ T8729] vivid-007: ================== END STATUS ================== [ 303.659059][ T8774] vivid-007: ================= START STATUS ================= [ 303.714519][ T8774] vivid-007: Enable Output Cropping: true grabbed [ 303.749984][ T8774] vivid-007: Enable Output Composing: true grabbed [ 303.779053][ T8774] vivid-007: Enable Output Scaler: true grabbed [ 303.802571][ T8774] vivid-007: Tx RGB Quantization Range: Automatic grabbed [ 303.810957][ T8774] vivid-007: Transmit Mode: HDMI grabbed [ 303.825728][ T8774] vivid-007: Hotplug Present: 0x00000000 [ 303.831598][ T8774] vivid-007: RxSense Present: 0x00000000 [ 303.837923][ T8774] vivid-007: EDID Present: 0x00000000 [ 303.868522][ T8774] vivid-007: ================== END STATUS ================== [ 304.188975][ T8776] syz.0.554(8776): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 304.756485][ T8793] random: crng reseeded on system resumption [ 308.852351][ T8868] capability: warning: `syz.0.573' uses 32-bit capabilities (legacy support in use) [ 308.929248][ T8868] FAULT_INJECTION: forcing a failure. [ 308.929248][ T8868] name failslab, interval 1, probability 0, space 0, times 0 [ 308.964275][ T8868] CPU: 0 UID: 0 PID: 8868 Comm: syz.0.573 Not tainted syzkaller #0 PREEMPT(full) [ 308.964319][ T8868] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 308.964340][ T8868] Call Trace: [ 308.964350][ T8868] [ 308.964362][ T8868] dump_stack_lvl+0x100/0x190 [ 308.964404][ T8868] should_fail_ex.cold+0x5/0xa [ 308.964443][ T8868] should_failslab+0xc2/0x120 [ 308.964487][ T8868] kmem_cache_alloc_lru_noprof+0x8d/0x6a0 [ 308.964528][ T8868] ? hugetlbfs_alloc_inode+0x8c/0x1d0 [ 308.964569][ T8868] hugetlbfs_alloc_inode+0x8c/0x1d0 [ 308.964602][ T8868] ? __pfx_hugetlbfs_alloc_inode+0x10/0x10 [ 308.964637][ T8868] alloc_inode+0x68/0x250 [ 308.964680][ T8868] new_inode+0x22/0x1c0 [ 308.964716][ T8868] hugetlbfs_get_inode+0x39a/0x700 [ 308.964745][ T8868] ? do_raw_spin_lock+0x128/0x260 [ 308.964778][ T8868] hugetlb_file_setup+0x15b/0x5b0 [ 308.964817][ T8868] memfd_alloc_file+0xc2/0x610 [ 308.964851][ T8868] ? _raw_spin_unlock+0x28/0x50 [ 308.964902][ T8868] ? __pfx_memfd_alloc_file+0x10/0x10 [ 308.964947][ T8868] __do_sys_memfd_create+0x236/0x3d0 [ 308.964993][ T8868] do_syscall_64+0x115/0x840 [ 308.965053][ T8868] ? clear_bhb_loop+0x40/0x90 [ 308.965089][ T8868] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 308.965119][ T8868] RIP: 0033:0x7f0741f9de59 [ 308.965149][ T8868] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 308.965176][ T8868] RSP: 002b:00007f0742e94028 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 308.965203][ T8868] RAX: ffffffffffffffda RBX: 00007f0742226090 RCX: 00007f0741f9de59 [ 308.965221][ T8868] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000200000000040 [ 308.965238][ T8868] RBP: 00007f0742033e6f R08: 0000000000000000 R09: 0000000000000000 [ 308.965255][ T8868] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 308.965272][ T8868] R13: 00007f0742226128 R14: 00007f0742226090 R15: 00007ffcbe9d8c08 [ 308.965312][ T8868] [ 310.368151][ T8859] Process accounting paused [ 313.954977][ T8943] Page cache invalidation failure on direct I/O. Possible data corruption due to collision with buffered I/O! [ 313.977837][ T8943] File: /dev/nullb0 PID: 8943 Comm: syz.3.588 [ 314.742672][ T8961] ACPI: \_SB_.LNKS: No IRQ available. Try pci=noacpi or acpi=off [ 314.771568][ T8961] pci 0000:00:01.3: PCI INT A: no GSI [ 316.099621][ T8980] FAULT_INJECTION: forcing a failure. [ 316.099621][ T8980] name failslab, interval 1, probability 0, space 0, times 0 [ 316.141875][ T8980] CPU: 1 UID: 0 PID: 8980 Comm: syz.0.596 Not tainted syzkaller #0 PREEMPT(full) [ 316.141933][ T8980] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 316.141956][ T8980] Call Trace: [ 316.141968][ T8980] [ 316.141984][ T8980] dump_stack_lvl+0x100/0x190 [ 316.142034][ T8980] should_fail_ex.cold+0x5/0xa [ 316.142082][ T8980] should_failslab+0xc2/0x120 [ 316.142146][ T8980] kmem_cache_alloc_noprof+0x91/0x6a0 [ 316.142185][ T8980] ? __proc_create+0xc1/0x8f0 [ 316.142241][ T8980] ? __proc_create+0xc1/0x8f0 [ 316.142291][ T8980] ? __proc_create+0x247/0x8f0 [ 316.142389][ T8980] __proc_create+0x247/0x8f0 [ 316.142446][ T8980] ? __pfx___proc_create+0x10/0x10 [ 316.142517][ T8980] proc_mkdir+0x81/0x170 [ 316.142556][ T8980] ? __pfx_proc_mkdir+0x10/0x10 [ 316.142587][ T8980] ? cache_register_net+0x137/0x5e0 [ 316.142634][ T8980] ? cache_register_net+0x137/0x5e0 [ 316.142697][ T8980] cache_register_net+0x18f/0x5e0 [ 316.142753][ T8980] nfsd_export_init+0x16e/0x250 [ 316.142805][ T8980] ? __pfx_nfsd_net_init+0x10/0x10 [ 316.142850][ T8980] nfsd_net_init+0x69/0x3e0 [ 316.143121][ T8980] ? __pfx_nfsd_net_init+0x10/0x10 [ 316.143163][ T8980] ops_init+0x1e2/0x5f0 [ 316.143205][ T8980] setup_net+0x118/0x3a0 [ 316.143249][ T8980] ? __pfx_setup_net+0x10/0x10 [ 316.143292][ T8980] ? mutex_init_lockdep+0xf1/0x120 [ 316.143390][ T8980] copy_net_ns+0x46f/0x7c0 [ 316.143435][ T8980] create_new_namespaces+0x3ea/0xac0 [ 316.143505][ T8980] unshare_nsproxy_namespaces+0xf2/0x220 [ 316.143571][ T8980] ksys_unshare+0x438/0xab0 [ 316.143627][ T8980] ? __pfx_ksys_unshare+0x10/0x10 [ 316.143696][ T8980] __x64_sys_unshare+0x31/0x40 [ 316.143742][ T8980] do_syscall_64+0x115/0x840 [ 316.143796][ T8980] ? clear_bhb_loop+0x40/0x90 [ 316.143839][ T8980] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 316.143875][ T8980] RIP: 0033:0x7f0741f9de59 [ 316.143906][ T8980] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 316.143940][ T8980] RSP: 002b:00007f0742eb5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 316.143970][ T8980] RAX: ffffffffffffffda RBX: 00007f0742225fa0 RCX: 00007f0741f9de59 [ 316.143991][ T8980] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 316.144011][ T8980] RBP: 00007f0742033e6f R08: 0000000000000000 R09: 0000000000000000 [ 316.144032][ T8980] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 316.144052][ T8980] R13: 00007f0742226038 R14: 00007f0742225fa0 R15: 00007ffcbe9d8c08 [ 316.144096][ T8980] [ 316.410811][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.417222][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 316.525859][ T8946] Process accounting resumed [ 318.031802][ T8996] random: crng reseeded on system resumption [ 319.438905][ T9006] vivid-007: ================= START STATUS ================= [ 319.468457][ T9006] vivid-007: Generate PTS: true [ 319.488097][ T9006] vivid-007: Generate SCR: true [ 319.504433][ T9006] tpg source WxH: 320x240 (Y'CbCr) [ 319.517463][ T9006] tpg field: 1 [ 319.521038][ T9006] tpg crop: (0,0)/320x240 [ 319.530526][ T9006] tpg compose: (0,0)/320x240 [ 319.537002][ T9006] tpg colorspace: 8 [ 319.543043][ T9006] tpg transfer function: 0/0 [ 319.548287][ T9006] tpg Y'CbCr encoding: 0/0 [ 319.553371][ T9006] tpg quantization: 0/0 [ 319.557764][ T9006] tpg RGB range: 0/2 [ 319.561832][ T9006] vivid-007: ================== END STATUS ================== [ 320.411932][ T30] audit: type=1800 audit(1694.994:5): pid=9012 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.601" name="filter" dev="tracefs" ino=19680823 res=0 errno=0 [ 326.048050][ T9146] FAULT_INJECTION: forcing a failure. [ 326.048050][ T9146] name failslab, interval 1, probability 0, space 0, times 0 [ 326.078804][ T9146] CPU: 0 UID: 0 PID: 9146 Comm: syz.1.625 Not tainted syzkaller #0 PREEMPT(full) [ 326.078869][ T9146] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 326.078891][ T9146] Call Trace: [ 326.078904][ T9146] [ 326.078917][ T9146] dump_stack_lvl+0x100/0x190 [ 326.078965][ T9146] should_fail_ex.cold+0x5/0xa [ 326.079006][ T9146] should_failslab+0xc2/0x120 [ 326.079052][ T9146] __kmalloc_noprof+0xfc/0x820 [ 326.079089][ T9146] ? tomoyo_encode2+0xfb/0x3c0 [ 326.079143][ T9146] tomoyo_encode2+0xfb/0x3c0 [ 326.079196][ T9146] tomoyo_encode+0x29/0x50 [ 326.079239][ T9146] tomoyo_realpath_from_path+0x18c/0x690 [ 326.079295][ T9146] tomoyo_check_open_permission+0x2af/0x3c0 [ 326.079338][ T9146] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 326.079377][ T9146] ? look_up_lock_class+0x64/0x120 [ 326.079442][ T9146] ? hook_file_open+0x24f/0x8f0 [ 326.079526][ T9146] ? path_get+0x61/0x80 [ 326.079567][ T9146] tomoyo_file_open+0x6b/0x90 [ 326.079622][ T9146] security_file_open+0xb5/0x1e0 [ 326.079666][ T9146] do_dentry_open+0x588/0x14d0 [ 326.079734][ T9146] vfs_open+0x82/0x3f0 [ 326.079776][ T9146] path_openat+0x2873/0x4280 [ 326.079846][ T9146] ? __pfx_path_openat+0x10/0x10 [ 326.079909][ T9146] do_file_open+0x20e/0x430 [ 326.079959][ T9146] ? __lock_acquire+0x49f/0x1a40 [ 326.080016][ T9146] ? __pfx_do_file_open+0x10/0x10 [ 326.080104][ T9146] ? _raw_spin_unlock+0x28/0x50 [ 326.080149][ T9146] ? alloc_fd+0x471/0x7a0 [ 326.080212][ T9146] do_sys_openat2+0x10f/0x1e0 [ 326.080253][ T9146] ? __pfx_do_sys_openat2+0x10/0x10 [ 326.080316][ T9146] __x64_sys_open+0xfe/0x1d0 [ 326.080360][ T9146] ? __pfx___x64_sys_open+0x10/0x10 [ 326.080420][ T9146] do_syscall_64+0x115/0x840 [ 326.080480][ T9146] ? clear_bhb_loop+0x40/0x90 [ 326.080526][ T9146] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 326.080562][ T9146] RIP: 0033:0x7fe7a959de59 [ 326.080593][ T9146] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 326.080627][ T9146] RSP: 002b:00007fe7aa393028 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 326.080660][ T9146] RAX: ffffffffffffffda RBX: 00007fe7a9825fa0 RCX: 00007fe7a959de59 [ 326.080684][ T9146] RDX: 0000000000000154 RSI: 00000000000206c0 RDI: 0000200000000040 [ 326.080705][ T9146] RBP: 00007fe7a9633e6f R08: 0000000000000000 R09: 0000000000000000 [ 326.080725][ T9146] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 326.080745][ T9146] R13: 00007fe7a9826038 R14: 00007fe7a9825fa0 R15: 00007ffed21ced18 [ 326.080790][ T9146] [ 326.346446][ T9146] ERROR: Out of memory at tomoyo_realpath_from_path. [ 327.046019][ T9157] random: crng reseeded on system resumption [ 328.187405][ T9136] Process accounting resumed [ 331.839612][ T9203] Page cache invalidation failure on direct I/O. Possible data corruption due to collision with buffered I/O! [ 331.899975][ T9203] File: /dev/nullb0 PID: 9203 Comm: syz.0.634 [ 333.512037][ T9224] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 341.414799][ T9322] Process accounting resumed [ 343.179218][ T9329] Process accounting resumed [ 343.402200][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 343.546875][ T9361] hub 1-0:1.0: USB hub found [ 343.575225][ T9361] hub 1-0:1.0: 1 port detected [ 344.506145][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 347.915160][ T9436] FAULT_INJECTION: forcing a failure. [ 347.915160][ T9436] name failslab, interval 1, probability 0, space 0, times 0 [ 348.010221][ T9436] CPU: 0 UID: 0 PID: 9436 Comm: syz.1.680 Not tainted syzkaller #0 PREEMPT(full) [ 348.010257][ T9436] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 348.010272][ T9436] Call Trace: [ 348.010281][ T9436] [ 348.010291][ T9436] dump_stack_lvl+0x100/0x190 [ 348.010327][ T9436] should_fail_ex.cold+0x5/0xa [ 348.010356][ T9436] should_failslab+0xc2/0x120 [ 348.010390][ T9436] kmem_cache_alloc_noprof+0x91/0x6a0 [ 348.010427][ T9436] ? __thp_vma_allowable_orders+0x1d9/0xf00 [ 348.010469][ T9436] ? ptlock_alloc+0x1f/0x70 [ 348.010513][ T9436] ptlock_alloc+0x1f/0x70 [ 348.010550][ T9436] pte_alloc_one+0x82/0x3d0 [ 348.010587][ T9436] do_fault+0x86c/0x1750 [ 348.010624][ T9436] __handle_mm_fault+0x187d/0x2a00 [ 348.010667][ T9436] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 348.010696][ T9436] ? __pfx___handle_mm_fault+0x10/0x10 [ 348.010738][ T9436] ? folio_mark_accessed+0xf3/0x1040 [ 348.010780][ T9436] ? __pfx_folio_mark_accessed+0x10/0x10 [ 348.010821][ T9436] ? find_held_lock+0x2b/0x80 [ 348.010868][ T9436] handle_mm_fault+0x37b/0xa30 [ 348.010914][ T9436] __get_user_pages+0x1178/0x32a0 [ 348.010957][ T9436] ? __pfx___get_user_pages+0x10/0x10 [ 348.010998][ T9436] populate_vma_page_range+0x267/0x3f0 [ 348.011034][ T9436] ? __pfx_populate_vma_page_range+0x10/0x10 [ 348.011068][ T9436] ? __pfx_find_vma_intersection+0x10/0x10 [ 348.011100][ T9436] ? __pfx_apply_mlockall_flags.isra.0+0x10/0x10 [ 348.011148][ T9436] __mm_populate+0x107/0x3a0 [ 348.011183][ T9436] ? __pfx___mm_populate+0x10/0x10 [ 348.011219][ T9436] ? up_write+0x2e5/0x5c0 [ 348.011244][ T9436] __do_sys_mlockall+0x4f4/0x5d0 [ 348.011271][ T9436] do_syscall_64+0x115/0x840 [ 348.011309][ T9436] ? clear_bhb_loop+0x40/0x90 [ 348.011342][ T9436] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 348.011368][ T9436] RIP: 0033:0x7fe7a959de59 [ 348.011389][ T9436] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 348.011420][ T9436] RSP: 002b:00007fe7aa393028 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 348.011447][ T9436] RAX: ffffffffffffffda RBX: 00007fe7a9825fa0 RCX: 00007fe7a959de59 [ 348.011464][ T9436] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 348.011479][ T9436] RBP: 00007fe7a9633e6f R08: 0000000000000000 R09: 0000000000000000 [ 348.011494][ T9436] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 348.011509][ T9436] R13: 00007fe7a9826038 R14: 00007fe7a9825fa0 R15: 00007ffed21ced18 [ 348.011540][ T9436] [ 354.751883][ T9558] sysfs_service_op_store: Client not running :-5: [ 354.796838][ T9539] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 355.660084][ T9562] FAULT_INJECTION: forcing a failure. [ 355.660084][ T9562] name failslab, interval 1, probability 0, space 0, times 0 [ 355.701879][ T9562] CPU: 1 UID: 0 PID: 9562 Comm: syz.0.707 Not tainted syzkaller #0 PREEMPT(full) [ 355.701925][ T9562] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 355.701945][ T9562] Call Trace: [ 355.701959][ T9562] [ 355.701968][ T9562] dump_stack_lvl+0x100/0x190 [ 355.702008][ T9562] should_fail_ex.cold+0x5/0xa [ 355.702041][ T9562] should_failslab+0xc2/0x120 [ 355.702078][ T9562] kmem_cache_alloc_noprof+0x91/0x6a0 [ 355.702110][ T9562] ? __thp_vma_allowable_orders+0x1d9/0xf00 [ 355.702152][ T9562] ? ptlock_alloc+0x1f/0x70 [ 355.702204][ T9562] ptlock_alloc+0x1f/0x70 [ 355.702244][ T9562] pte_alloc_one+0x82/0x3d0 [ 355.702280][ T9562] do_fault+0x86c/0x1750 [ 355.702315][ T9562] __handle_mm_fault+0x187d/0x2a00 [ 355.702364][ T9562] ? mark_held_locks+0x40/0x70 [ 355.702400][ T9562] ? __pfx___handle_mm_fault+0x10/0x10 [ 355.702437][ T9562] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 355.702473][ T9562] ? rcu_preempt_deferred_qs_irqrestore+0x4fd/0xb90 [ 355.702532][ T9562] handle_mm_fault+0x37b/0xa30 [ 355.702575][ T9562] __get_user_pages+0x1178/0x32a0 [ 355.702617][ T9562] ? __pfx___get_user_pages+0x10/0x10 [ 355.702656][ T9562] populate_vma_page_range+0x267/0x3f0 [ 355.702692][ T9562] ? __pfx_populate_vma_page_range+0x10/0x10 [ 355.702725][ T9562] ? __pfx_find_vma_intersection+0x10/0x10 [ 355.702756][ T9562] ? __pfx_apply_mlockall_flags.isra.0+0x10/0x10 [ 355.702803][ T9562] __mm_populate+0x107/0x3a0 [ 355.702838][ T9562] ? __pfx___mm_populate+0x10/0x10 [ 355.702873][ T9562] ? up_write+0x2e5/0x5c0 [ 355.702905][ T9562] __do_sys_mlockall+0x4f4/0x5d0 [ 355.702931][ T9562] do_syscall_64+0x115/0x840 [ 355.702982][ T9562] ? clear_bhb_loop+0x40/0x90 [ 355.703023][ T9562] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 355.703054][ T9562] RIP: 0033:0x7f0741f9de59 [ 355.703080][ T9562] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 355.703110][ T9562] RSP: 002b:00007f0742eb5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 355.703143][ T9562] RAX: ffffffffffffffda RBX: 00007f0742225fa0 RCX: 00007f0741f9de59 [ 355.703165][ T9562] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 355.703185][ T9562] RBP: 00007f0742033e6f R08: 0000000000000000 R09: 0000000000000000 [ 355.703205][ T9562] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 355.703225][ T9562] R13: 00007f0742226038 R14: 00007f0742225fa0 R15: 00007ffcbe9d8c08 [ 355.703269][ T9562] [ 356.920328][ T9585] netlink: 186 bytes leftover after parsing attributes in process `syz.0.711'. [ 358.559475][ T9604] Process accounting paused [ 358.575985][ T9610] netlink: 252 bytes leftover after parsing attributes in process `syz.1.718'. [ 358.606750][ T9610] netlink: 252 bytes leftover after parsing attributes in process `syz.1.718'. [ 360.811598][ T9614] Process accounting resumed [ 373.589147][ T9798] Process accounting resumed [ 373.757087][ T9849] openvswitch: netlink: Message has 4 unknown bytes. [ 373.831006][ T9820] Process accounting paused [ 375.731196][ T9880] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 376.310706][ T9893] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 377.443681][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 377.450377][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 377.564670][ T9908] FAULT_INJECTION: forcing a failure. [ 377.564670][ T9908] name failslab, interval 1, probability 0, space 0, times 0 [ 377.608385][ T9908] CPU: 0 UID: 0 PID: 9908 Comm: syz.0.767 Not tainted syzkaller #0 PREEMPT(full) [ 377.608433][ T9908] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 377.608462][ T9908] Call Trace: [ 377.608475][ T9908] [ 377.608489][ T9908] dump_stack_lvl+0x100/0x190 [ 377.608539][ T9908] should_fail_ex.cold+0x5/0xa [ 377.608582][ T9908] should_failslab+0xc2/0x120 [ 377.608630][ T9908] kmem_cache_alloc_lru_noprof+0x8d/0x6a0 [ 377.608672][ T9908] ? start_dirop+0x79/0xb0 [ 377.608722][ T9908] ? alloc_inode+0x68/0x250 [ 377.608766][ T9908] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 377.608812][ T9908] alloc_inode+0x68/0x250 [ 377.608853][ T9908] new_inode+0x22/0x1c0 [ 377.608906][ T9908] __debugfs_create_file+0x105/0x4f0 [ 377.608961][ T9908] debugfs_create_file_full+0x41/0x60 [ 377.609013][ T9908] ref_tracker_dir_debugfs+0x19e/0x2e0 [ 377.609067][ T9908] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 377.609116][ T9908] ? ida_alloc_range+0x70d/0x830 [ 377.609180][ T9908] ? kasan_save_track+0x14/0x30 [ 377.609228][ T9908] ? __kasan_kmalloc+0xaa/0xb0 [ 377.609271][ T9908] ? lockdep_init_map_type+0x5c/0x250 [ 377.609338][ T9908] preinit_net.part.0+0x252/0x920 [ 377.609384][ T9908] copy_net_ns+0x339/0x7c0 [ 377.609433][ T9908] create_new_namespaces+0x3ea/0xac0 [ 377.609502][ T9908] unshare_nsproxy_namespaces+0xf2/0x220 [ 377.609563][ T9908] ksys_unshare+0x438/0xab0 [ 377.609608][ T9908] ? __pfx_ksys_unshare+0x10/0x10 [ 377.609669][ T9908] __x64_sys_unshare+0x31/0x40 [ 377.609710][ T9908] do_syscall_64+0x115/0x840 [ 377.609764][ T9908] ? clear_bhb_loop+0x40/0x90 [ 377.609807][ T9908] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 377.609842][ T9908] RIP: 0033:0x7f0741f9de59 [ 377.609872][ T9908] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 377.609910][ T9908] RSP: 002b:00007f0742e94028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 377.609953][ T9908] RAX: ffffffffffffffda RBX: 00007f0742226090 RCX: 00007f0741f9de59 [ 377.609978][ T9908] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 377.610000][ T9908] RBP: 00007f0742033e6f R08: 0000000000000000 R09: 0000000000000000 [ 377.610023][ T9908] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 377.610044][ T9908] R13: 00007f0742226128 R14: 00007f0742226090 R15: 00007ffcbe9d8c08 [ 377.610092][ T9908] [ 377.613205][ T9908] debugfs: out of free dentries, can not create file 'net_refcnt@ffff888076e129c0' [ 378.127270][ T9909] bridge0: port 3(veth1) entered blocking state [ 378.172688][ T9909] bridge0: port 3(veth1) entered disabled state [ 378.206149][ T9909] veth1: entered allmulticast mode [ 378.288627][ T9909] veth1: entered promiscuous mode [ 378.318978][ T9909] bridge0: port 3(veth1) entered blocking state [ 378.325645][ T9909] bridge0: port 3(veth1) entered forwarding state [ 379.910711][ T9934] random: crng reseeded on system resumption [ 381.715924][ T9921] Process accounting resumed [ 382.057368][ T9956] random: crng reseeded on system resumption [ 382.275251][ T9954] netlink: 186 bytes leftover after parsing attributes in process `syz.3.774'. [ 384.303877][ T9978] hub 1-0:1.0: USB hub found [ 384.321976][ T9978] hub 1-0:1.0: 1 port detected [ 387.135173][T10028] workqueue: name exceeds WQ_NAME_LEN. Truncating to: ›11!phy1!netdev:wlan1!rc_rateid [ 387.239398][T10026] sysfs: cannot create duplicate filename '/class/ieee80211/›11!phy1!netdev:wlan1!rc_rateidx_mcs_mask' [ 387.287733][T10026] CPU: 0 UID: 0 PID: 10026 Comm: syz.1.788 Not tainted syzkaller #0 PREEMPT(full) [ 387.287784][T10026] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 387.287806][T10026] Call Trace: [ 387.287817][T10026] [ 387.287830][T10026] dump_stack_lvl+0x100/0x190 [ 387.287881][T10026] sysfs_warn_dup.cold+0x1c/0x28 [ 387.287938][T10026] sysfs_do_create_link_sd+0x113/0x140 [ 387.287991][T10026] sysfs_create_link+0x61/0xc0 [ 387.288039][T10026] device_add+0x675/0x1970 [ 387.288103][T10026] ? __pfx_device_add+0x10/0x10 [ 387.288154][T10026] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 387.288208][T10026] ? ieee80211_set_bitrate_flags+0x41b/0x6b0 [ 387.288255][T10026] wiphy_register+0x2151/0x3110 [ 387.288316][T10026] ? __pfx_wiphy_register+0x10/0x10 [ 387.288362][T10026] ? __asan_memset+0x23/0x50 [ 387.288394][T10026] ? minstrel_ht_alloc+0x5e6/0x7f0 [ 387.288451][T10026] ieee80211_register_hw+0x3053/0x4580 [ 387.288509][T10026] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 387.288545][T10026] ? __pfx___debug_object_init+0x10/0x10 [ 387.288600][T10026] ? find_held_lock+0x2b/0x80 [ 387.288645][T10026] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 387.288697][T10026] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 387.288754][T10026] ? __hrtimer_setup+0x208/0x330 [ 387.288793][T10026] mac80211_hwsim_new_radio+0x2acc/0x64c0 [ 387.288863][T10026] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 387.288909][T10026] ? __asan_memcpy+0x3c/0x60 [ 387.288946][T10026] hwsim_new_radio_nl+0xc6b/0x13f0 [ 387.288990][T10026] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 387.289043][T10026] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1e5/0x2f0 [ 387.289115][T10026] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1ef/0x2f0 [ 387.289188][T10026] genl_family_rcv_msg_doit+0x214/0x300 [ 387.289261][T10026] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 387.289320][T10026] ? genl_get_cmd+0x3e7/0x760 [ 387.289385][T10026] ? bpf_lsm_capable+0x9/0x10 [ 387.289418][T10026] ? security_capable+0x80/0x260 [ 387.289473][T10026] ? ns_capable+0xd2/0xf0 [ 387.289534][T10026] genl_rcv_msg+0x560/0x800 [ 387.289573][T10026] ? __pfx_genl_rcv_msg+0x10/0x10 [ 387.289608][T10026] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 387.289664][T10026] netlink_rcv_skb+0x159/0x420 [ 387.289715][T10026] ? __pfx_genl_rcv_msg+0x10/0x10 [ 387.289751][T10026] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 387.289818][T10026] ? netlink_deliver_tap+0x1ae/0xcc0 [ 387.289875][T10026] genl_rcv+0x28/0x40 [ 387.289927][T10026] netlink_unicast+0x585/0x850 [ 387.289986][T10026] ? __pfx_netlink_unicast+0x10/0x10 [ 387.290057][T10026] netlink_sendmsg+0x8b0/0xda0 [ 387.290132][T10026] ? __pfx_netlink_sendmsg+0x10/0x10 [ 387.290196][T10026] ? apparmor_socket_sendmsg+0x15b/0x270 [ 387.290266][T10026] ____sys_sendmsg+0xa4d/0xbe0 [ 387.290314][T10026] ? __pfx_netlink_sendmsg+0x10/0x10 [ 387.290373][T10026] ? __pfx_____sys_sendmsg+0x10/0x10 [ 387.290432][T10026] ? rcu_is_watching+0x12/0xc0 [ 387.290469][T10026] ? ___sys_sendmsg+0x19d/0x1e0 [ 387.290517][T10026] ? kfree+0x1e5/0x6c0 [ 387.290576][T10026] ___sys_sendmsg+0x190/0x1e0 [ 387.290628][T10026] ? __pfx____sys_sendmsg+0x10/0x10 [ 387.290681][T10026] ? futex_hash+0x311/0x400 [ 387.290769][T10026] ? __pfx___might_resched+0x10/0x10 [ 387.290829][T10026] __sys_sendmmsg+0x20c/0x440 [ 387.290873][T10026] ? __pfx___sys_sendmmsg+0x10/0x10 [ 387.290926][T10026] ? __pfx_do_futex+0x10/0x10 [ 387.290982][T10026] ? xfd_validate_state+0x129/0x190 [ 387.291031][T10026] __x64_sys_sendmmsg+0x9c/0x100 [ 387.291070][T10026] ? lockdep_hardirqs_on+0x78/0x100 [ 387.291173][T10026] do_syscall_64+0x115/0x840 [ 387.291229][T10026] ? clear_bhb_loop+0x40/0x90 [ 387.291274][T10026] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 387.291310][T10026] RIP: 0033:0x7fe7a959de59 [ 387.291341][T10026] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 387.291374][T10026] RSP: 002b:00007fe7aa393028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 387.291413][T10026] RAX: ffffffffffffffda RBX: 00007fe7a9825fa0 RCX: 00007fe7a959de59 [ 387.291436][T10026] RDX: 0000000000000003 RSI: 0000200000000080 RDI: 0000000000000003 [ 387.291456][T10026] RBP: 00007fe7a9633e6f R08: 0000000000000000 R09: 0000000000000000 [ 387.291477][T10026] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 387.291498][T10026] R13: 00007fe7a9826038 R14: 00007fe7a9825fa0 R15: 00007ffed21ced18 [ 387.291545][T10026] [ 388.435344][T10047] netlink: 28 bytes leftover after parsing attributes in process `syz.0.790'. syzkaller syzkaller login: [ 388.926280][T10055] hub 1-0:1.0: USB hub found [ 388.961718][ T36] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.971677][T10055] hub 1-0:1.0: 1 port detected [ 390.638420][T10075] vivid-007: ================= START STATUS ================= [ 390.668010][T10075] vivid-007: Generate PTS: true [ 390.683626][T10075] vivid-007: Generate SCR: true [ 390.693295][T10075] tpg source WxH: 320x240 (Y'CbCr) [ 390.707034][T10075] tpg field: 1 [ 390.718916][T10075] tpg crop: (0,0)/320x240 [ 390.743857][T10075] tpg compose: (0,0)/320x240 [ 390.759582][T10075] tpg colorspace: 8 [ 390.786506][T10075] tpg transfer function: 0/0 [ 390.803261][T10075] tpg Y'CbCr encoding: 0/0 [ 390.819324][T10075] tpg quantization: 0/0 [ 390.850745][T10075] tpg RGB range: 0/2 [ 390.896132][T10075] vivid-007: ================== END STATUS ================== [ 390.963823][T10082] FAULT_INJECTION: forcing a failure. [ 390.963823][T10082] name failslab, interval 1, probability 0, space 0, times 0 [ 390.990076][T10082] CPU: 1 UID: 0 PID: 10082 Comm: syz.2.798 Not tainted syzkaller #0 PREEMPT(full) [ 390.990128][T10082] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 390.990150][T10082] Call Trace: [ 390.990160][T10082] [ 390.990178][T10082] dump_stack_lvl+0x100/0x190 [ 390.990223][T10082] should_fail_ex.cold+0x5/0xa [ 390.990263][T10082] should_failslab+0xc2/0x120 [ 390.990309][T10082] __kmalloc_noprof+0xfc/0x820 [ 390.990341][T10082] ? __register_sysctl_table+0xbc8/0x1650 [ 390.990389][T10082] ? __register_sysctl_table+0xbc8/0x1650 [ 390.990435][T10082] ? __register_sysctl_table+0xbe4/0x1650 [ 390.990489][T10082] __register_sysctl_table+0xbe4/0x1650 [ 390.990544][T10082] ? __pfx___register_sysctl_table+0x10/0x10 [ 390.990589][T10082] ? is_module_address+0x69/0xf0 [ 390.990634][T10082] ? register_net_sysctl_sz+0x222/0x430 [ 390.990675][T10082] __devinet_sysctl_register+0x1b9/0x360 [ 390.990727][T10082] ? __pfx___devinet_sysctl_register+0x10/0x10 [ 390.990780][T10082] ? __asan_memcpy+0x3c/0x60 [ 390.990813][T10082] devinet_init_net+0x334/0x8d0 [ 390.990868][T10082] ? __pfx_devinet_init_net+0x10/0x10 [ 390.990924][T10082] ops_init+0x1e2/0x5f0 [ 390.990981][T10082] setup_net+0x118/0x3a0 [ 390.991025][T10082] ? __pfx_setup_net+0x10/0x10 [ 390.991067][T10082] ? mutex_init_lockdep+0xf1/0x120 [ 390.991129][T10082] copy_net_ns+0x46f/0x7c0 [ 390.991183][T10082] create_new_namespaces+0x3ea/0xac0 [ 390.991239][T10082] unshare_nsproxy_namespaces+0xf2/0x220 [ 390.991294][T10082] ksys_unshare+0x438/0xab0 [ 390.991331][T10082] ? __pfx_ksys_unshare+0x10/0x10 [ 390.991381][T10082] __x64_sys_unshare+0x31/0x40 [ 390.991429][T10082] do_syscall_64+0x115/0x840 [ 390.991486][T10082] ? clear_bhb_loop+0x40/0x90 [ 390.991533][T10082] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 390.991569][T10082] RIP: 0033:0x7f58f0b9de59 [ 390.991596][T10082] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 390.991628][T10082] RSP: 002b:00007f58f198b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 390.991661][T10082] RAX: ffffffffffffffda RBX: 00007f58f0e25fa0 RCX: 00007f58f0b9de59 [ 390.991684][T10082] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 390.991703][T10082] RBP: 00007f58f0c33e6f R08: 0000000000000000 R09: 0000000000000000 [ 390.991724][T10082] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 390.991744][T10082] R13: 00007f58f0e26038 R14: 00007f58f0e25fa0 R15: 00007ffc3359c6f8 [ 390.991789][T10082] [ 390.991926][T10082] sysctl could not get directory: /net/ipv4/conf/default -12 [ 391.473511][T10082] ubi: mtd0 is already attached to ubi31 [ 392.744385][T10047] Process accounting paused [ 393.688892][T10109] openvswitch: netlink: Message has 4 unknown bytes. [ 395.624981][T10143] vhci_hcd: not connected 4 [ 395.740470][T10146] netlink: 186 bytes leftover after parsing attributes in process `syz.2.809'. [ 396.027233][T10134] Console: switching to colour VGA+ 80x25 [ 397.209916][T10155] vivid-007: ================= START STATUS ================= [ 397.221883][T10155] vivid-007: Generate PTS: true [ 397.229282][T10155] vivid-007: Generate SCR: true [ 397.234679][T10155] tpg source WxH: 320x240 (Y'CbCr) [ 397.240468][T10155] tpg field: 1 [ 397.243989][T10155] tpg crop: (0,0)/320x240 [ 397.249165][T10155] tpg compose: (0,0)/320x240 [ 397.253954][T10155] tpg colorspace: 8 [ 397.265413][T10155] tpg transfer function: 0/0 [ 397.272504][T10155] tpg Y'CbCr encoding: 0/0 [ 397.315645][T10155] tpg quantization: 0/0 [ 397.336716][T10155] tpg RGB range: 0/2 [ 397.340889][T10155] vivid-007: ================== END STATUS ================== [ 402.634587][T10241] random: crng reseeded on system resumption [ 403.124566][T10242] bridge0: port 3(team0) entered blocking state [ 403.140548][T10242] bridge0: port 3(team0) entered disabled state [ 403.163816][T10242] team0: entered allmulticast mode [ 403.176312][T10242] team_slave_0: entered allmulticast mode [ 403.194574][T10242] team_slave_1: entered allmulticast mode [ 403.259683][T10242] team0: entered promiscuous mode [ 403.269554][T10242] team_slave_0: entered promiscuous mode [ 403.316330][T10242] team_slave_1: entered promiscuous mode [ 403.887657][T10259] hub 1-0:1.0: USB hub found [ 403.893072][T10259] hub 1-0:1.0: 1 port detected [ 405.663458][T10276] vivid-007: ================= START STATUS ================= [ 405.695088][T10276] vivid-007: Generate PTS: true [ 405.718672][T10276] vivid-007: Generate SCR: true [ 405.742475][T10276] tpg source WxH: 320x240 (Y'CbCr) [ 405.781094][T10276] tpg field: 1 [ 405.805709][T10276] tpg crop: (0,0)/320x240 [ 405.828309][T10276] tpg compose: (0,0)/320x240 [ 405.844521][T10287] [U] ^\ [ 405.848739][T10276] tpg colorspace: 8 [ 405.860706][T10276] tpg transfer function: 0/0 [ 405.883798][T10276] tpg Y'CbCr encoding: 0/0 [ 405.895152][T10276] tpg quantization: 0/0 [ 405.911382][T10276] tpg RGB range: 0/2 [ 405.932713][T10276] vivid-007: ================== END STATUS ================== [ 406.036223][T10292] ubi: mtd0 is already attached to ubi31 [ 406.844299][T10301] smpboot: CPU 1 is now offline [ 412.014550][T10371] netlink: 20 bytes leftover after parsing attributes in process `syz.2.850'. [ 413.058550][T10384] FAULT_INJECTION: forcing a failure. [ 413.058550][T10384] name failslab, interval 1, probability 0, space 0, times 0 [ 413.128647][T10384] CPU: 0 UID: 0 PID: 10384 Comm: syz.1.853 Not tainted syzkaller #0 PREEMPT(full) [ 413.128686][T10384] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 413.128703][T10384] Call Trace: [ 413.128713][T10384] [ 413.128724][T10384] dump_stack_lvl+0x100/0x190 [ 413.128760][T10384] should_fail_ex.cold+0x5/0xa [ 413.128791][T10384] should_failslab+0xc2/0x120 [ 413.128828][T10384] __kmalloc_noprof+0xfc/0x820 [ 413.128859][T10384] ? process_preds+0x452/0x1d90 [ 413.128908][T10384] process_preds+0x452/0x1d90 [ 413.128957][T10384] apply_subsystem_event_filter+0x4a0/0x17a0 [ 413.129010][T10384] ? __pfx_apply_subsystem_event_filter+0x10/0x10 [ 413.129056][T10384] ? _copy_from_user+0x59/0xd0 [ 413.129098][T10384] subsystem_filter_write+0x95/0x120 [ 413.129138][T10384] vfs_write+0x2aa/0x1050 [ 413.129183][T10384] ? __pfx_subsystem_filter_write+0x10/0x10 [ 413.129224][T10384] ? __pfx_vfs_write+0x10/0x10 [ 413.129265][T10384] ? __fget_files+0x215/0x3d0 [ 413.129317][T10384] ? __fget_files+0x21f/0x3d0 [ 413.129368][T10384] ksys_write+0x12a/0x250 [ 413.129410][T10384] ? __pfx_ksys_write+0x10/0x10 [ 413.129461][T10384] do_syscall_64+0x115/0x840 [ 413.129515][T10384] ? clear_bhb_loop+0x40/0x90 [ 413.129553][T10384] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 413.129583][T10384] RIP: 0033:0x7fe7a959de59 [ 413.129606][T10384] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 413.129632][T10384] RSP: 002b:00007fe7aa393028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 413.129658][T10384] RAX: ffffffffffffffda RBX: 00007fe7a9825fa0 RCX: 00007fe7a959de59 [ 413.129677][T10384] RDX: 0000000000000071 RSI: 0000200000000040 RDI: 0000000000000008 [ 413.129693][T10384] RBP: 00007fe7a9633e6f R08: 0000000000000000 R09: 0000000000000000 [ 413.129710][T10384] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 413.129726][T10384] R13: 00007fe7a9826038 R14: 00007fe7a9825fa0 R15: 00007ffed21ced18 [ 413.129763][T10384] [ 415.179263][T10370] Process accounting paused [ 415.464592][T10409] random: crng reseeded on system resumption [ 417.132542][T10431] vivid-007: ================= START STATUS ================= [ 417.224261][T10431] vivid-007: Generate PTS: true [ 417.278369][T10431] vivid-007: Generate SCR: true [ 417.316117][T10431] tpg source WxH: 320x240 (Y'CbCr) [ 417.378085][T10431] tpg field: 1 [ 417.416750][T10431] tpg crop: (0,0)/320x240 [ 417.438514][T10431] tpg compose: (0,0)/320x240 [ 417.460033][T10431] tpg colorspace: 8 [ 417.479067][T10431] tpg transfer function: 0/0 [ 417.504182][T10431] tpg Y'CbCr encoding: 0/0 [ 417.523206][T10431] tpg quantization: 0/0 [ 417.542209][T10431] tpg RGB range: 0/2 [ 417.567628][T10431] vivid-007: ================== END STATUS ================== [ 423.449733][T10504] Process accounting resumed [ 428.731930][T10616] netlink: 24 bytes leftover after parsing attributes in process `syz.1.895'. [ 437.296019][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 437.302696][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 439.304033][T10753] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 442.169035][T10822] random: crng reseeded on system resumption [ 446.248313][T10832] Process accounting resumed [ 450.593912][T10916] usb usb21: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 453.914438][T10971] Process accounting paused [ 462.474285][T11110] FAULT_INJECTION: forcing a failure. [ 462.474285][T11110] name fail_futex, interval 1, probability 0, space 0, times 0 [ 462.748703][T11110] CPU: 0 UID: 0 PID: 11110 Comm: syz.3.984 Not tainted syzkaller #0 PREEMPT(full) [ 462.748742][T11110] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 462.748759][T11110] Call Trace: [ 462.748768][T11110] [ 462.748778][T11110] dump_stack_lvl+0x100/0x190 [ 462.748813][T11110] should_fail_ex.cold+0x5/0xa [ 462.748843][T11110] get_futex_key+0x1d2/0x14f0 [ 462.748889][T11110] ? __pfx_get_futex_key+0x10/0x10 [ 462.748927][T11110] ? nsim_dev_take_snapshot_write+0x12c/0x1b0 [ 462.748960][T11110] ? do_raw_spin_unlock+0x145/0x1e0 [ 462.748986][T11110] ? _raw_spin_unlock+0x28/0x50 [ 462.749023][T11110] futex_wake+0xf4/0x5e0 [ 462.749054][T11110] ? find_held_lock+0x2b/0x80 [ 462.749082][T11110] ? __pfx_futex_wake+0x10/0x10 [ 462.749116][T11110] ? rcu_read_lock_any_held+0x6a/0xa0 [ 462.749157][T11110] ? find_held_lock+0x2b/0x80 [ 462.749185][T11110] ? ksys_write+0x190/0x250 [ 462.749224][T11110] ? ksys_write+0x190/0x250 [ 462.749264][T11110] do_futex+0x2b2/0x440 [ 462.749290][T11110] ? __pfx_do_futex+0x10/0x10 [ 462.749316][T11110] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 462.749362][T11110] __x64_sys_futex+0x34f/0x4d0 [ 462.749390][T11110] ? fput+0x79/0x100 [ 462.749413][T11110] ? __pfx___x64_sys_futex+0x10/0x10 [ 462.749437][T11110] ? ksys_write+0x1ac/0x250 [ 462.749474][T11110] ? __pfx_ksys_write+0x10/0x10 [ 462.749519][T11110] do_syscall_64+0x115/0x840 [ 462.749558][T11110] ? clear_bhb_loop+0x40/0x90 [ 462.749589][T11110] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 462.749616][T11110] RIP: 0033:0x7fa4c219de59 [ 462.749638][T11110] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 462.749665][T11110] RSP: 002b:00007fa4bffd30e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 462.749690][T11110] RAX: ffffffffffffffda RBX: 00007fa4c2426278 RCX: 00007fa4c219de59 [ 462.749707][T11110] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fa4c242627c [ 462.749724][T11110] RBP: 00007fa4c2426270 R08: 0000000000000001 R09: 0000000000000000 [ 462.749739][T11110] R10: 000000007ffff000 R11: 0000000000000246 R12: 0000000000000000 [ 462.749755][T11110] R13: 00007fa4c2426308 R14: 00007ffd57772190 R15: 00007ffd57772278 [ 462.749787][T11110] [ 463.991223][T11114] Console: switching to colour frame buffer device 128x48 [ 464.088553][T11127] vivid-007: ================= START STATUS ================= [ 464.125747][T11127] vivid-007: Enable Output Cropping: true grabbed [ 464.170429][T11127] vivid-007: Enable Output Composing: true grabbed [ 464.206689][T11127] vivid-007: Enable Output Scaler: true grabbed [ 464.307494][T11127] vivid-007: Tx RGB Quantization Range: Automatic grabbed [ 464.307562][T11127] vivid-007: Transmit Mode: HDMI grabbed [ 464.307595][T11127] vivid-007: Hotplug Present: 0x00000000 [ 464.307624][T11127] vivid-007: RxSense Present: 0x00000000 [ 464.307649][T11127] vivid-007: EDID Present: 0x00000000 [ 464.307675][T11127] vivid-007: ================== END STATUS ================== [ 468.583833][T11171] Process accounting resumed [ 469.100051][T11195] netlink: 28 bytes leftover after parsing attributes in process `syz.3.999'. [ 480.510718][T11348] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1029'. [ 489.125969][ T5630] Process accounting resumed [ 489.706630][ T50] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 489.722800][ T50] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 489.736090][ T50] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 489.757896][ T50] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 489.767859][ T50] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 490.587755][T11448] HfR: entered promiscuous mode [ 491.428474][T11448] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1050'. [ 491.588506][T11458] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1050'. [ 491.788989][T11458] HfR: left promiscuous mode [ 491.806267][ T50] Bluetooth: hci4: command tx timeout [ 492.601678][T11474] Process accounting resumed [ 493.866201][ T50] Bluetooth: hci4: command tx timeout [ 494.888303][T11449] bridge0: port 1(bridge_slave_0) entered blocking state [ 494.938714][T11449] bridge0: port 1(bridge_slave_0) entered disabled state [ 494.987497][T11449] bridge_slave_0: entered allmulticast mode [ 495.033793][T11449] bridge_slave_0: entered promiscuous mode [ 495.074043][T11510] netlink: 330 bytes leftover after parsing attributes in process `syz.3.1058'. [ 495.084133][T11449] bridge0: port 2(bridge_slave_1) entered blocking state [ 495.136771][T11449] bridge0: port 2(bridge_slave_1) entered disabled state [ 495.175570][T11449] bridge_slave_1: entered allmulticast mode [ 495.230375][T11449] bridge_slave_1: entered promiscuous mode [ 495.604636][T11449] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 495.681302][T11449] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 495.935216][ T50] Bluetooth: hci4: command tx timeout [ 495.962277][T11449] team0: Port device team_slave_0 added [ 496.005778][T11449] team0: Port device team_slave_1 added [ 496.209959][T11449] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 496.255095][T11449] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 496.374797][T11449] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 496.462727][T11449] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 496.502204][T11449] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 496.691187][T11449] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 497.236255][T11449] hsr_slave_0: entered promiscuous mode [ 497.302726][T11449] hsr_slave_1: entered promiscuous mode [ 497.352514][T11449] debugfs: 'hsr0' already exists in 'hsr' [ 497.400526][T11449] Cannot create hsr debugfs directory [ 498.004829][ T50] Bluetooth: hci4: command tx timeout [ 499.583485][T11449] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 499.675558][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 499.683260][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 500.160105][T11449] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 500.208527][T11449] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 500.297482][T11449] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 500.350322][T11449] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 501.036864][T11449] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 501.085263][T11449] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 501.145991][T11449] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 502.527311][T11449] 8021q: adding VLAN 0 to HW filter on device bond0 [ 502.665799][T11449] 8021q: adding VLAN 0 to HW filter on device team0 [ 502.731189][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 502.738567][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 503.134861][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 503.142106][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 504.193912][T11587] FAULT_INJECTION: forcing a failure. [ 504.193912][T11587] name failslab, interval 1, probability 0, space 0, times 0 [ 504.443658][T11587] CPU: 0 UID: 0 PID: 11587 Comm: syz.1.1071 Not tainted syzkaller #0 PREEMPT(full) [ 504.443692][T11587] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 504.443709][T11587] Call Trace: [ 504.443717][T11587] [ 504.443726][T11587] dump_stack_lvl+0x100/0x190 [ 504.443826][T11587] should_fail_ex.cold+0x5/0xa [ 504.443869][T11587] should_failslab+0xc2/0x120 [ 504.443920][T11587] kmem_cache_alloc_lru_noprof+0x8d/0x6a0 [ 504.443958][T11587] ? __d_alloc+0x35/0xa50 [ 504.443997][T11587] __d_alloc+0x35/0xa50 [ 504.444023][T11587] d_alloc+0x4a/0x1e0 [ 504.444054][T11587] lookup_one_qstr_excl+0x171/0x250 [ 504.444086][T11587] start_dirop+0x59/0xb0 [ 504.444123][T11587] simple_start_creating+0xf9/0x110 [ 504.444170][T11587] ? __pfx_simple_start_creating+0x10/0x10 [ 504.444209][T11587] ? mntput+0x70/0xa0 [ 504.444243][T11587] ? simple_pin_fs+0xa3/0x190 [ 504.444278][T11587] debugfs_start_creating.part.0+0x82/0x170 [ 504.444391][T11587] __debugfs_create_file+0xb3/0x4f0 [ 504.444427][T11587] debugfs_create_file_full+0x41/0x60 [ 504.444463][T11587] ref_tracker_dir_debugfs+0x19e/0x2e0 [ 504.444538][T11587] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 504.444597][T11587] ? kasan_save_track+0x14/0x30 [ 504.444625][T11587] ? __kasan_kmalloc+0xaa/0xb0 [ 504.444653][T11587] ? lockdep_init_map_type+0x5c/0x250 [ 504.444712][T11587] preinit_net.part.0+0x43b/0x920 [ 504.444794][T11587] copy_net_ns+0x339/0x7c0 [ 504.444829][T11587] create_new_namespaces+0x3ea/0xac0 [ 504.444886][T11587] unshare_nsproxy_namespaces+0xf2/0x220 [ 504.444931][T11587] ksys_unshare+0x438/0xab0 [ 504.444970][T11587] ? __pfx_ksys_unshare+0x10/0x10 [ 504.445009][T11587] __x64_sys_unshare+0x31/0x40 [ 504.445043][T11587] do_syscall_64+0x115/0x840 [ 504.445132][T11587] ? clear_bhb_loop+0x40/0x90 [ 504.445167][T11587] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 504.445193][T11587] RIP: 0033:0x7fe7a959de59 [ 504.445216][T11587] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 504.445241][T11587] RSP: 002b:00007fe7a77d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 504.445266][T11587] RAX: ffffffffffffffda RBX: 00007fe7a9826180 RCX: 00007fe7a959de59 [ 504.445283][T11587] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 504.445298][T11587] RBP: 00007fe7a9633e6f R08: 0000000000000000 R09: 0000000000000000 [ 504.445314][T11587] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 504.445329][T11587] R13: 00007fe7a9826218 R14: 00007fe7a9826180 R15: 00007ffed21ced18 [ 504.445361][T11587] [ 506.379842][T11605] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1074'. [ 508.436069][T11449] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 510.193099][T11449] veth0_vlan: entered promiscuous mode [ 510.273394][T11449] veth1_vlan: entered promiscuous mode [ 510.473766][T11449] veth0_macvtap: entered promiscuous mode [ 510.541191][T11449] veth1_macvtap: entered promiscuous mode [ 510.698160][T11449] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 510.778926][T11449] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 510.915228][ T3351] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 510.969735][ T3351] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 511.028429][ T3351] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 511.081634][ T3351] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 511.561301][ T3351] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 511.627504][ T3351] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 511.872646][ T3351] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 511.920942][ T3351] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 517.156546][T11712] netlink: 'syz.1.1091': attribute type 1 has an invalid length. [ 522.597828][T11763] futex_wake_op: syz.3.1102 tries to shift op by -2048; fix this program [ 522.673110][T11763] futex_wake_op: syz.3.1102 tries to shift op by -2048; fix this program [ 522.743334][T11764] 0x000000000001-0x000000020000 : "" [ 522.839258][T11764] ftl_cs: FTL header corrupt! [ 523.809788][T11764] Process accounting paused [ 528.523021][T11844] netlink: 342 bytes leftover after parsing attributes in process `syz.2.1115'. [ 529.851159][T11866] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1118'. [ 530.307340][T11866] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 530.439420][T11866] bond0 (unregistering): Released all slaves [ 533.925623][T11911] ubi: mtd0 is already attached to ubi31 [ 534.984519][T11919] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 538.836795][T11964] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1133'. [ 539.610149][ T30] audit: type=1800 audit(1843104594.711:6): pid=11970 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1136" name="lu_gp_id" dev="configfs" ino=35470 res=0 errno=0 [ 549.670268][T12106] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1160'. [ 552.373426][T12133] ubi: mtd0 is already attached to ubi31 [ 554.761703][T12127] Process accounting resumed [ 556.742849][T12167] FAULT_INJECTION: forcing a failure. [ 556.742849][T12167] name failslab, interval 1, probability 0, space 0, times 0 [ 556.938601][T12167] CPU: 0 UID: 0 PID: 12167 Comm: syz.3.1170 Tainted: G L syzkaller #0 PREEMPT(full) [ 556.938642][T12167] Tainted: [L]=SOFTLOCKUP [ 556.938651][T12167] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 556.938667][T12167] Call Trace: [ 556.938674][T12167] [ 556.938685][T12167] dump_stack_lvl+0x100/0x190 [ 556.938717][T12167] should_fail_ex.cold+0x5/0xa [ 556.938745][T12167] should_failslab+0xc2/0x120 [ 556.938778][T12167] kmem_cache_alloc_lru_noprof+0x8d/0x6a0 [ 556.938809][T12167] ? __d_alloc+0x35/0xa50 [ 556.938838][T12167] __d_alloc+0x35/0xa50 [ 556.938865][T12167] d_alloc+0x4a/0x1e0 [ 556.938889][T12167] lookup_one_qstr_excl+0x171/0x250 [ 556.938922][T12167] start_dirop+0x59/0xb0 [ 556.938964][T12167] simple_start_creating+0xf9/0x110 [ 556.939006][T12167] ? __pfx_simple_start_creating+0x10/0x10 [ 556.939046][T12167] ? mntput+0x70/0xa0 [ 556.939080][T12167] ? simple_pin_fs+0xa3/0x190 [ 556.939115][T12167] debugfs_start_creating.part.0+0x82/0x170 [ 556.939150][T12167] __debugfs_create_file+0xb3/0x4f0 [ 556.939186][T12167] debugfs_create_file_full+0x41/0x60 [ 556.939228][T12167] ref_tracker_dir_debugfs+0x19e/0x2e0 [ 556.939268][T12167] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 556.939325][T12167] ? kasan_save_track+0x14/0x30 [ 556.939355][T12167] ? __kasan_kmalloc+0xaa/0xb0 [ 556.939382][T12167] ? lockdep_init_map_type+0x5c/0x250 [ 556.939426][T12167] preinit_net.part.0+0x43b/0x920 [ 556.939460][T12167] copy_net_ns+0x339/0x7c0 [ 556.939495][T12167] create_new_namespaces+0x3ea/0xac0 [ 556.939551][T12167] unshare_nsproxy_namespaces+0xf2/0x220 [ 556.939596][T12167] ksys_unshare+0x438/0xab0 [ 556.939627][T12167] ? __pfx_ksys_unshare+0x10/0x10 [ 556.939667][T12167] __x64_sys_unshare+0x31/0x40 [ 556.939696][T12167] do_syscall_64+0x115/0x840 [ 556.939736][T12167] ? clear_bhb_loop+0x40/0x90 [ 556.939767][T12167] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 556.939792][T12167] RIP: 0033:0x7fa4c219de59 [ 556.939813][T12167] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 556.939837][T12167] RSP: 002b:00007fa4c2f90028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 556.939861][T12167] RAX: ffffffffffffffda RBX: 00007fa4c2426090 RCX: 00007fa4c219de59 [ 556.939878][T12167] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 556.939893][T12167] RBP: 00007fa4c2233e6f R08: 0000000000000000 R09: 0000000000000000 [ 556.939908][T12167] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 556.939923][T12167] R13: 00007fa4c2426128 R14: 00007fa4c2426090 R15: 00007ffd57772278 [ 556.939955][T12167] [ 558.482587][T12171] bridge0: port 3(veth1) entered blocking state [ 558.608841][T12171] bridge0: port 3(veth1) entered disabled state [ 558.717671][T12171] veth1: entered allmulticast mode [ 558.828166][T12171] veth1: entered promiscuous mode [ 558.919494][T12171] bridge0: port 3(veth1) entered blocking state [ 558.925974][T12171] bridge0: port 3(veth1) entered forwarding state [ 560.778630][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 560.792297][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 561.317529][T12204] [U] ^\ [ 563.463614][T12236] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1179'. [ 564.609122][T12229] ubi: mtd0 is already attached to ubi31 [ 569.327769][T12295] [U] ^\ [ 570.784242][T12313] Console: switching to colour VGA+ 80x25 [ 578.836955][T12405] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1203'. [ 582.874508][ T30] audit: type=1800 audit(1843104638.223:7): pid=12435 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1209" name="lu_gp_id" dev="configfs" ino=37171 res=0 errno=0 [ 584.768398][T12438] Process accounting paused [ 595.538865][T12579] random: crng reseeded on system resumption [ 595.738511][T12577] usb usb21: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 596.753008][T12588] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1235'. [ 609.642168][T12729] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1259'. [ 613.754790][T12756] Bluetooth: hci4: command 0x0406 tx timeout [ 615.345864][T12807] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1274'. [ 615.442018][T12807] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 615.532699][T12807] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 616.026643][T12807] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 616.118766][T12807] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 616.407658][T12798] Process accounting resumed [ 621.871891][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 621.881650][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 623.781074][ T31] INFO: task syz.0.1014:11268 blocked for more than 143 seconds. [ 623.851870][ T31] Tainted: G L syzkaller #0 [ 623.907747][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 623.984131][ T31] task:syz.0.1014 state:D stack:26328 pid:11268 tgid:11265 ppid:5630 task_flags:0x400040 flags:0x00080002 [ 624.073130][ T31] Call Trace: [ 624.103221][ T31] [ 624.130357][ T31] __schedule+0x125c/0x6730 [ 624.172658][ T31] ? do_raw_spin_lock+0x128/0x260 [ 624.212541][ T31] ? __pfx___schedule+0x10/0x10 [ 624.254211][ T31] ? find_held_lock+0x2b/0x80 [ 624.254260][ T31] ? schedule+0x225/0x2c0 [ 624.254307][ T31] schedule+0xdd/0x2c0 [ 624.254341][ T31] schedule_preempt_disabled+0x13/0x30 [ 624.254377][ T31] __mutex_lock+0xccc/0x1bd0 [ 624.254416][ T31] ? fdget_pos+0x2aa/0x380 [ 624.254447][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 624.254490][ T31] ? __fget_files+0x215/0x3d0 [ 624.254534][ T31] ? __fget_files+0x21f/0x3d0 [ 624.254574][ T31] ? fdget_pos+0x2aa/0x380 [ 624.254595][ T31] fdget_pos+0x2aa/0x380 [ 624.254618][ T31] do_writev+0x77/0x340 [ 624.254655][ T31] ? __pfx_do_writev+0x10/0x10 [ 624.254697][ T31] do_syscall_64+0x115/0x840 [ 624.254734][ T31] ? clear_bhb_loop+0x40/0x90 [ 624.254766][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 624.254792][ T31] RIP: 0033:0x7f0741f9de59 [ 624.254814][ T31] RSP: 002b:00007f0742e94028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 624.254839][ T31] RAX: ffffffffffffffda RBX: 00007f0742226090 RCX: 00007f0741f9de59 [ 624.254856][ T31] RDX: 0000000000000008 RSI: 0000200000000100 RDI: 0000000000000003 [ 624.254872][ T31] RBP: 00007f0742033e6f R08: 0000000000000000 R09: 0000000000000000 [ 624.254888][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 624.254904][ T31] R13: 00007f0742226128 R14: 00007f0742226090 R15: 00007ffcbe9d8c08 [ 624.254936][ T31] [ 624.261114][ T31] [ 624.261114][ T31] Showing all locks held in the system: [ 624.261135][ T31] 1 lock held by khungtaskd/31: [ 624.261151][ T31] #0: ffffffff8ebe5f00 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 624.261258][ T31] 1 lock held by klogd/4982: [ 624.261284][ T31] 3 locks held by kworker/0:4/5707: [ 624.261298][ T31] #0: ffff88801bc07140 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x12b1/0x1940 [ 624.261370][ T31] #1: ffffc900044cfd08 ((fqdir_free_work).work){+.+.}-{0:0}, at: process_one_work+0x988/0x1940 [ 624.261471][ T31] #2: ffffffff8ebf1878 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x48/0x6d0 [ 624.261570][ T31] 2 locks held by getty/10043: [ 624.261583][ T31] #0: ffff888036b670a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 624.271300][ T31] #1: ffffc900043792e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x14e0 [ 624.271456][ T31] 2 locks held by syz.0.1014/11266: [ 624.271471][ T31] 1 lock held by syz.0.1014/11268: [ 624.271486][ T31] #0: ffff888034f79430 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380 [ 624.271549][ T31] 4 locks held by kworker/u10:4/12223: [ 624.271563][ T31] #0: ffff88801caf6140 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x12b1/0x1940 [ 624.271633][ T31] #1: ffffc9000501fd08 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x988/0x1940 [ 624.271700][ T31] #2: ffffffff90a851e8 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xb8/0x920 [ 624.271766][ T31] #3: ffffffff8ebf1878 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x48/0x6d0 [ 624.271839][ T31] 2 locks held by kworker/u10:7/12283: [ 624.271854][ T31] 2 locks held by syz.3.1288/12899: [ 624.271868][ T31] 2 locks held by syz.4.1289/12904: [ 624.271882][ T31] 1 lock held by syz.4.1289/12905: [ 624.271895][ T31] #0: ffff888035e31d38 (&mm->mmap_lock){++++}-{4:4}, at: lock_mm_and_find_vma+0x160/0x6f0 [ 624.272013][ T31] 2 locks held by syz.4.1289/12910: [ 624.272027][ T31] #0: ffff8880365739e0 (sk_lock-AF_INET6){+.+.}-{0:0}, at: sctp_inet_connect+0xac/0x220 [ 624.272141][ T31] #1: ffffffff8ebe5f00 (rcu_read_lock){....}-{1:3}, at: ip_route_output_key_hash+0xd6/0x2b0 [ 624.272245][ T31] 1 lock held by syz.2.1291/12913: [ 624.277566][ T31] #0: ffff88803396b970 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380 [ 624.277639][ T31] 6 locks held by syz.2.1291/12919: [ 624.277654][ T31] 2 locks held by syz.1.1292/12914: [ 624.277668][ T31] 1 lock held by syz.1.1292/12915: [ 624.277682][ T31] #0: ffff88807f0da9f8 (&mm->mmap_lock){++++}-{4:4}, at: __mm_populate+0x229/0x3a0 [ 624.277751][ T31] 2 locks held by syz.1.1292/12917: [ 624.277765][ T31] #0: ffff888028181ee8 (&sb->s_type->i_mutex_key#10){++++}-{4:4}, at: blkdev_read_iter+0x2b6/0x4f0 [ 624.277956][ T31] #1: ffff88807f0da9f8 (&mm->mmap_lock){++++}-{4:4}, at: lock_mm_and_find_vma+0x160/0x6f0 [ 624.284701][ T31] 2 locks held by syz.1.1292/12918: [ 624.284718][ T31] [ 624.284725][ T31] ============================================= [ 624.284725][ T31] [ 624.284752][ T31] NMI backtrace for cpu 0 [ 624.284772][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 624.284805][ T31] Tainted: [L]=SOFTLOCKUP [ 624.284813][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 624.284826][ T31] Call Trace: [ 624.284834][ T31] [ 624.284842][ T31] dump_stack_lvl+0x100/0x190 [ 624.284870][ T31] nmi_cpu_backtrace.cold+0x12d/0x151 [ 624.284900][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 624.284928][ T31] nmi_trigger_cpumask_backtrace+0x21c/0x2a0 [ 624.285042][ T31] sys_info+0x141/0x190 [ 624.285067][ T31] watchdog+0xcb1/0x1030 [ 624.285104][ T31] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 624.285157][ T31] ? __pfx_watchdog+0x10/0x10 [ 624.285188][ T31] ? __kthread_parkme+0x18c/0x230 [ 624.285216][ T31] ? kthread+0x13a/0x450 [ 624.285242][ T31] ? __pfx_watchdog+0x10/0x10 [ 624.285278][ T31] kthread+0x370/0x450 [ 624.285306][ T31] ? __pfx_kthread+0x10/0x10 [ 624.285336][ T31] ret_from_fork+0x72b/0xd50 [ 624.285363][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 624.285390][ T31] ? __switch_to+0x800/0x10f0 [ 624.285430][ T31] ? __switch_to_asm+0x39/0x70 [ 624.285461][ T31] ? __pfx_kthread+0x10/0x10 [ 624.285491][ T31] ret_from_fork_asm+0x1a/0x30 [ 624.285546][ T31] [ 624.300611][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 624.300638][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 624.300672][ T31] Tainted: [L]=SOFTLOCKUP [ 624.300681][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 624.300696][ T31] Call Trace: [ 624.300705][ T31] [ 624.300715][ T31] dump_stack_lvl+0x100/0x190 [ 624.300745][ T31] vpanic+0x552/0x970 [ 624.300769][ T31] ? __pfx_vpanic+0x10/0x10 [ 624.300793][ T31] ? rcu_is_watching+0x12/0xc0 [ 624.300823][ T31] panic+0xd1/0xe0 [ 624.300845][ T31] ? __pfx_panic+0x10/0x10 [ 624.300871][ T31] ? nmi_trigger_cpumask_backtrace+0x1fa/0x2a0 [ 624.300904][ T31] ? nmi_trigger_cpumask_backtrace+0x260/0x2a0 [ 624.300936][ T31] ? nmi_trigger_cpumask_backtrace+0x26a/0x2a0 [ 624.300969][ T31] ? watchdog.cold+0x1ec/0x234 [ 624.300995][ T31] ? watchdog+0xcc1/0x1030 [ 624.301029][ T31] watchdog.cold+0x1fd/0x234 [ 624.301060][ T31] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 624.301095][ T31] ? __pfx_watchdog+0x10/0x10 [ 624.301136][ T31] ? __kthread_parkme+0x18c/0x230 [ 624.301168][ T31] ? kthread+0x13a/0x450 [ 624.301194][ T31] ? __pfx_watchdog+0x10/0x10 [ 624.301225][ T31] kthread+0x370/0x450 [ 624.301253][ T31] ? __pfx_kthread+0x10/0x10 [ 624.301290][ T31] ret_from_fork+0x72b/0xd50 [ 624.301318][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 624.301346][ T31] ? __switch_to+0x800/0x10f0 [ 624.301381][ T31] ? __switch_to_asm+0x39/0x70 [ 624.301412][ T31] ? __pfx_kthread+0x10/0x10 [ 624.301443][ T31] ret_from_fork_asm+0x1a/0x30 [ 624.301488][ T31] [ 624.301565][ T31] Kernel Offset: disabled