last executing test programs: 19m0.31589261s ago: executing program 1 (id=3273): mmap$auto(0x4, 0x4020008, 0x6, 0xeb1, 0x401, 0x8000) rseq$auto(&(0x7f0000000140)={0xe, 0x5, 0x2c2, 0x23, 0x8007d, 0x80000000, "26c788a7a5024a9859acd35804093ad080405e5667c1ebdf247e1520d2c4f723c82081928a325dde6dcc8b245461261f1e847bfe4289c4a3d8893fe91794c1a983b7dec4715155f202bcb0489c4e8c9a1391f75a1e4c289bd6c51ca54f1d"}, 0x8000, 0x7fff, 0x6) r0 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x40080, 0x0) r1 = openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/ieee80211/phy11/netdev:wlan1/state\x00', 0x822, 0x0) write$auto(r1, 0x0, 0x5) ioctl$auto_UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000400)={{0xc, 0x23, 0xa6, 0x83}, "66ac010005000000000068d190eb0d4a4cada7272464294b9183349eef4c1f028fdcc8ecc66fdd02316f064ebd893007abb4c0bbc3b822f66eaf240963110d61771552c03de65800", 0x2}) ioctl$auto_UI_DEV_CREATE(r0, 0x5501, 0x0) ioctl$auto_UI_SET_MSCBIT(r0, 0x40045568, 0x0) r2 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/set_event\x00', 0x220442, 0x0) mmap$auto(0x6, 0x202000b, 0x9, 0x17, r2, 0x8000) close_range$auto(r0, 0x8, 0x0) mkdir$auto(0x0, 0x89) lseek$auto(r2, 0x200006, 0x6) r3 = io_uring_setup$auto(0xfffff7fc, 0x0) mmap$auto(0x3, 0xe, 0x339, 0xeb1, r2, 0x8000) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) syz_clone3(&(0x7f0000000240)={0x123062000, 0x0, 0x0, 0x0, {0x14}, 0x0, 0x0, 0x0, 0x0}, 0x58) mremap$auto(0x110c230000, 0x0, 0x101, 0x3, 0xfffffffffffffffc) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/amidi2\x00', 0x115101, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r4, &(0x7f00000002c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc3\xdd\xa7\xee$\xf5\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xe6\x06g\x1a\xfc\xa8\x02\vw\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xda\xd36\xea\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc\\\xf3\x18\xe5\xbc\xa9i[q\xa1_X\xe9\xcd_\xf5x\x01*\a~i\xa8\xd9\xec\xc1\xc8K\xf0\x9e\xca\x81G+\xc0I\xa3T\aG\xef\xef\xfe\x1f\x19\xee\xe4A\xbc\xb2u\xe3\x81#\xfdr\xe7.\xc7h&9ICJ\x0528!$\xbe\x00\x00\x00\x00', 0xc722) r5 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv6/conf/netdevsim2/hop_limit\x00', 0x5014c0, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x909a49ef52fba33d}, 0x24008800) sendmsg$auto_IPVS_CMD_ZERO(r5, &(0x7f0000000600)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000005c0)={&(0x7f00000004c0)={0xec, 0x0, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x93, 0x1, 0x0, 0x1, [@generic="75a6ebd5bdf1c7a93e6626a56f259edfde74243b336ceb019debbe5906a4b612a10b31b45307f6419fb021a7b4c402d7e87ae57763e0decf0e84b2cf858e1f6ca5a5168a353b76a221e5bed35e83456b45099a84dd0473e193fa00a726a4eada38f0c0f1830524740cf3478c17823528b5010eb03634e749cde0ea7279fb01", @typed={0x8, 0x3a, 0x0, 0x0, @fd=r4}, @typed={0x8, 0x132, 0x0, 0x0, @ipv4=@broadcast}]}, @IPVS_CMD_ATTR_DAEMON={0xd, 0x3, 0x0, 0x1, [@typed={0x5, 0x7e, 0x0, 0x0, @str='\x00'}, @generic="8d"]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@typed={0x8, 0x7e, 0x0, 0x0, @pid}]}, @IPVS_CMD_ATTR_SERVICE={0x28, 0x1, 0x0, 0x1, [@nested={0x1c, 0x146, 0x0, 0x1, [@nested={0x4, 0xdd}, @typed={0x8, 0x95, 0x0, 0x0, @ipv4=@rand_addr=0x64010100}, @nested={0x4, 0x131}, @nested={0x4, 0x5e}, @nested={0x4, 0x151}]}, @typed={0x8, 0x129, 0x0, 0x0, @uid=0xee01}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x10}, 0x885) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/class/zram-control/hot_remove\x00', 0x8001, 0x0) r7 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv6/conf/tunl0/disable_policy\x00', 0xd02, 0x0) sendfile$auto(r6, r7, 0x0, 0x800048) close_range$auto(r7, 0x8, 0x0) msync$auto(0x1ffff000, 0x1800000000000fe, 0x400000004) openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, &(0x7f0000000180)='/dev/input/mice\x00', 0x181383, 0x0) 18m59.27687925s ago: executing program 1 (id=3278): mmap$auto(0xfffffffffffffffc, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000140), 0xe0180, 0x0) ioctl$auto_KVM_GET_DEVICE_ATTR(r0, 0x4018aee2, 0x0) 18m59.125953915s ago: executing program 1 (id=3280): mmap$auto(0xfffffffffffffffc, 0x4, 0xdc05, 0x18, 0x2, 0x40000008002) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x2a742, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x17) close_range$auto(0xffffffffffffffff, 0x8, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x202, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) r1 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000240)='/dev/video37\x00', 0x8a240, 0x0) ioctl$auto(r1, 0x80685600, r1) unshare$auto(0x40000080) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) syz_genetlink_get_family_id$auto_nbd(&(0x7f0000003d40), 0xffffffffffffffff) madvise$auto(0x0, 0x2003f2, 0x15) madvise$auto(0x0, 0x200007, 0x19) msgrcv$auto(0x0, 0x0, 0x4, 0x9, 0x3) msgctl$auto(0x0, 0x1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000002f80)={&(0x7f0000000040)={0x2c, 0x0, 0x1, 0x70bd29, 0x25dfdbff, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x11}, 0x24000802) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1800"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) rename$auto(&(0x7f0000000140)='./file0\x00', &(0x7f0000000200)='./file0\x00') r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r3) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYRESHEX=r0, @ANYRES16=r4, @ANYBLOB="2f212cbd8f00fcdbdf252100000008000300", @ANYRES32=r5, @ANYBLOB="28ff6cc6dfda57725c11021624ae4ae9a0144e266f5053f941343fe776bd2821ef4ae42eabd837a17dc4e6c3ea281615a2f6c736cb04c733e947e418522e29ef318cbfb2b78619ddcd6ba35346388350f483d2d9f5248e4306957e1157e00da460a35dec5ff5d2afbf3405d4aa1ca867cba9cb9b2e0d27aca0d7be23"], 0x1c}}, 0x4000000) sendmsg$auto_NL80211_CMD_SET_HW_TIMESTAMP(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r4, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x3}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x3}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 18m58.116498632s ago: executing program 1 (id=3283): statfs$auto(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)={0x7fff, 0x80, 0x4, 0x80040000747fcfd8, 0x4000000023, 0x100000002, 0x0, {[0x8, 0x83b]}, 0x7fffffff, 0x6c62, 0xa13, [0x9, 0x3, 0x8000000200]}) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/vm/nr_overcommit_hugepages\x00', 0x100, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) bpf$auto(0x5, 0x0, 0x7) madvise$auto(0x0, 0x8000000000000000, 0x15) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0x200, 0x4) read$auto(r0, &(0x7f0000000240)='nl80211\x00', 0x7) r1 = socket(0xa, 0x1, 0x84) mmap$auto(0x10, 0x20004, 0x1ff, 0xeb1, 0x8000000000000024, 0x8000) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x41) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000400), 0x10001, 0x0) r2 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self/oom_adj\x00', 0x49402, 0x0) semctl$auto(0x1ff, 0x2, 0x13, 0x1) socket(0x2, 0x5, 0x0) setsockopt$auto(0x3, 0x10000000084, 0x82, 0x0, 0x8) read$auto(r2, 0x0, 0x9a28) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r3, &(0x7f0000000200)={0x0, 0x7}, 0x3) fcntl$auto_F_ADD_SEALS(r3, 0x409, 0x5) fanotify_mark$auto(r1, 0x78, 0x5, 0xffffffffffffffff, 0x0) mremap$auto(0x200000001000, 0x8, 0x37, 0x3, 0x110c230000) socket(0x2, 0x2, 0x0) mknod$auto(&(0x7f0000000180)=':,\x00', 0xcb, 0xfffffffa) execve$auto(&(0x7f0000000000)=':,\x00', 0x0, 0x0) bind$auto(0x3, &(0x7f0000000100)=@tipc=@id={0x1e, 0x3, 0x1, {0x4e20, 0x3}}, 0x6a) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) r4 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f00000000c0), r1) sendmsg$auto_IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="58010000691cfadd5f871723374c45e1baaa7b7b37f8902f84b9b3fdf7f741bc09cd82b0dd60d753d667c2f7b6a9a9a1549cca159e9bc25ce5f552ca29a5d5018d59a5dc7a1c9dc4560dbaef61ff3af917e6", @ANYRES16=r4, @ANYBLOB="100027bd7000fbdbdf250100000008000600810000002a010180cbf751e14f25043ba83fb145e6f4a1ffd65959d0c2f87fe387a0c31ee7e88263ff79dc9f7f7927eda9c6d381af340cbde30b88c821778c31bf70274c6da2cf94b2bbcfabef7ed19f6581bb4aef8516828cea565d9e7fd8ff73376d447a0196f91752b8f92ccd304dee4d6389e35e785f220ae7b8fa2f8db9e797b1cf5ba90389238dec95ad1a8cacdb6eee5a267e9ae2cdf271f40fa8b8f9c28cd11f282a9b8c30710576c52a789f4491a0839e27ec0a28dd213dca1548753e92c83d20e8eb2aef142b412ab8a3d8d82fe449d9c3ea8362c756438f76c5658a3d799c6bf943848c7ce02f9831f1ffb19d126a261415632fa41f48469066dfc428cfe4dcb2b51eed60044c6c02fc676a6d147d9edc1972b39fe222a5729a6b82bf11a10a364edffa24e86ca08b000008000600040000000800060006000000"], 0x158}, 0x1, 0x0, 0x0, 0x8004}, 0xc0) 18m57.3064895s ago: executing program 1 (id=3286): openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000340)='/dev/sequencer2\x00', 0x4100, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="18000000", @ANYBLOB='v\x00'], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40000) r0 = socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) sync_file_range$auto(r1, 0x7, 0x3d, 0x2) sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x207, 0x4008) 18m57.203383436s ago: executing program 1 (id=3287): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) timer_create$auto(0x3, 0x0, 0x0) r0 = openat$auto_proc_coredump_filter_operations_base(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) writev$auto(r0, &(0x7f0000000940)={0x0, 0xb}, 0x5) r1 = memfd_secret$auto(0x7) ioctl$auto_VHOST_SET_LOG_BASE(r1, 0x4008af04, &(0x7f00000000c0)) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/system/machinecheck/machinecheck0/monarch_timeout\x00', 0x2, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f0000000040)='3\x00', 0x2) socket(0x2, 0x5, 0x0) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) mmap$auto(0x0, 0x2020009, 0x8000000003, 0xeb1, 0xfffffffffffffffa, 0x8000) socketpair$auto(0x6, 0x1, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x155) getitimer$auto(0x3, 0x0) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000140)={{0x0, 0x10, 0x0, 0x7, 0x0, 0x5, 0xb}, 0xfff}, 0x8, 0x311) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, 0x0, 0x42942, 0x0) writev$auto(0x3, 0x0, 0x8) mmap$auto(0x0, 0x2, 0x80000000df, 0x14, 0x401, 0x8000) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x147) mmap$auto(0x0, 0x9, 0xdf, 0xeb1, 0x401, 0x8000) move_pages$auto(0x0, 0x200000020007, 0x0, 0x0, 0x0, 0x0) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000180)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0x4}, 0x1000000000028, 0x0, 0x1, 0x3e0}, 0x800}, 0x4, 0x4008) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) execve$auto(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) fallocate$auto(0x8000000000000003, 0x40, 0x9, 0x4cbd5d) socket(0x23, 0x80805, 0x0) execve$auto(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) execve$auto(&(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000100)=&(0x7f0000000600)='#\xdc\xfe\xd8E\xc8\x8bu4\xd9n\xcb\xca\xc7zw \x96\x9ejh\xad\x9eEc\xae\x1e\x89\x92\x9a\xbbP[B\xae\x9cf)\x15\xac\x90)l\x06\xf0\t\x12\x05zz\xa6\xb3\xce=\x00\x00\x00\x00\x00/\xc4T\x1f\xe5P\xff\xb4\xb7s0\x02\xc5\x81\x93\xc6\xc8\xb6Sp\x1a{8\xfc\xe0,X\xc7BU\xd0\x97\x7f1\x16\x99\x04\xabu/a(\x02\x7f\xbb\xbd\x906\xa8\xce\xee\xcd\xd7\t\x00\xfb\x83\xc8\x8aO\xe9\xbe=\xf7\xf4\x84,\x06\xd3j\x99b\xe6\xf6Y3A\xbb\xa4\xb2\f\x1b\xc3\x8a,g\xc6\xe8[\xdf\x88\x01\x9f7\xb5\x19m\xd8L\x84j\x8c\xec\xdf\x1a\xbd\xc5\x94\xb9\xb7\xd5\xa4\xc0\f-6\xfe\xa8\xed/u\x81_G\xfeR\xbb\x12\x16\xb8*\xa9\xc9\xe81\x9d\x06\xbbC\x17\xbb\xe6|\x97\xabB4J\xed+-\xf8u0/n\xcf\x8b\x95\x9d\xab\xa8\xc47\xa6\x0e\xdeOq\\\xc3\'{\b\xd3m\x94\xc2\xdd{\xeaO\x0e\xe4\xe0\xb9N:\xd60\x17,\x06\xc7B#Y0\x99\xeb\x874\xab?\xc8\x82\xe5\x8f\xb7\x91\xc2\xbe\xb2\x02\xfe\xd3k\xd5\xdcZ\xdcP\x8e+\xd8\xc7C\xcb\x15\x13c\xbf\xe8\xbd\"\x8f3\"\x14\xf8(\xda\x19\xcd\xec\x03.\xd9^\xc3A\xda\r[\x1a\xda\\#/\xd4\xaf\xd0\xe8\xa2\xdd\xc5{\xfa\xe0\x90\x8f\x99lQ\xec\x84h^\x11+\x93\b\xe0c\xe6\xd22\xf9\xa5') 18m41.661762591s ago: executing program 32 (id=3287): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) timer_create$auto(0x3, 0x0, 0x0) r0 = openat$auto_proc_coredump_filter_operations_base(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) writev$auto(r0, &(0x7f0000000940)={0x0, 0xb}, 0x5) r1 = memfd_secret$auto(0x7) ioctl$auto_VHOST_SET_LOG_BASE(r1, 0x4008af04, &(0x7f00000000c0)) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/system/machinecheck/machinecheck0/monarch_timeout\x00', 0x2, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f0000000040)='3\x00', 0x2) socket(0x2, 0x5, 0x0) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) mmap$auto(0x0, 0x2020009, 0x8000000003, 0xeb1, 0xfffffffffffffffa, 0x8000) socketpair$auto(0x6, 0x1, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x155) getitimer$auto(0x3, 0x0) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000140)={{0x0, 0x10, 0x0, 0x7, 0x0, 0x5, 0xb}, 0xfff}, 0x8, 0x311) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, 0x0, 0x42942, 0x0) writev$auto(0x3, 0x0, 0x8) mmap$auto(0x0, 0x2, 0x80000000df, 0x14, 0x401, 0x8000) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x147) mmap$auto(0x0, 0x9, 0xdf, 0xeb1, 0x401, 0x8000) move_pages$auto(0x0, 0x200000020007, 0x0, 0x0, 0x0, 0x0) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000180)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0x4}, 0x1000000000028, 0x0, 0x1, 0x3e0}, 0x800}, 0x4, 0x4008) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) execve$auto(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) fallocate$auto(0x8000000000000003, 0x40, 0x9, 0x4cbd5d) socket(0x23, 0x80805, 0x0) execve$auto(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) execve$auto(&(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000100)=&(0x7f0000000600)='#\xdc\xfe\xd8E\xc8\x8bu4\xd9n\xcb\xca\xc7zw \x96\x9ejh\xad\x9eEc\xae\x1e\x89\x92\x9a\xbbP[B\xae\x9cf)\x15\xac\x90)l\x06\xf0\t\x12\x05zz\xa6\xb3\xce=\x00\x00\x00\x00\x00/\xc4T\x1f\xe5P\xff\xb4\xb7s0\x02\xc5\x81\x93\xc6\xc8\xb6Sp\x1a{8\xfc\xe0,X\xc7BU\xd0\x97\x7f1\x16\x99\x04\xabu/a(\x02\x7f\xbb\xbd\x906\xa8\xce\xee\xcd\xd7\t\x00\xfb\x83\xc8\x8aO\xe9\xbe=\xf7\xf4\x84,\x06\xd3j\x99b\xe6\xf6Y3A\xbb\xa4\xb2\f\x1b\xc3\x8a,g\xc6\xe8[\xdf\x88\x01\x9f7\xb5\x19m\xd8L\x84j\x8c\xec\xdf\x1a\xbd\xc5\x94\xb9\xb7\xd5\xa4\xc0\f-6\xfe\xa8\xed/u\x81_G\xfeR\xbb\x12\x16\xb8*\xa9\xc9\xe81\x9d\x06\xbbC\x17\xbb\xe6|\x97\xabB4J\xed+-\xf8u0/n\xcf\x8b\x95\x9d\xab\xa8\xc47\xa6\x0e\xdeOq\\\xc3\'{\b\xd3m\x94\xc2\xdd{\xeaO\x0e\xe4\xe0\xb9N:\xd60\x17,\x06\xc7B#Y0\x99\xeb\x874\xab?\xc8\x82\xe5\x8f\xb7\x91\xc2\xbe\xb2\x02\xfe\xd3k\xd5\xdcZ\xdcP\x8e+\xd8\xc7C\xcb\x15\x13c\xbf\xe8\xbd\"\x8f3\"\x14\xf8(\xda\x19\xcd\xec\x03.\xd9^\xc3A\xda\r[\x1a\xda\\#/\xd4\xaf\xd0\xe8\xa2\xdd\xc5{\xfa\xe0\x90\x8f\x99lQ\xec\x84h^\x11+\x93\b\xe0c\xe6\xd22\xf9\xa5') 14m52.319778794s ago: executing program 4 (id=4312): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/zswap/parameters/compressor\x00', 0x149182, 0x0) write$auto_ocfs2_control_fops_stack_user(r0, &(0x7f0000003900)='\t', 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000100), r1) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) io_uring_setup$auto(0x6, 0x0) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) close_range$auto(0x0, 0xffffeffe, 0x2) openat$auto_ftrace_system_enable_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/events/vmalloc/enable\x00', 0xa0900, 0x0) openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000180)='/dev/mtd0\x00', 0x1, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/freezer.self_freezing\x00', 0x101080, 0x0) pipe$auto(0x0) unshare$auto(0x40000080) setsockopt$auto(0x3, 0x10000000084, 0x7b, 0x0, 0xd) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x4, &(0x7f00000002c0)={0x0, 0xffeb}, 0x1, 0x0, 0x5, 0x7}, 0x8}, 0xffffffff, 0xb00) mmap$auto(0x2, 0x20009, 0x4000000000df, 0xeb1, r3, 0x8000) setsockopt$auto(0x3, 0x10000000084, 0x7b, 0x0, 0xd) sendmsg$auto_ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000002f80)={&(0x7f0000000040)={0x34, r2, 0x1, 0x70bd29, 0x25dfdbff, {}, [@ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0x4}, @ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x11}, 0x24000802) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/module/workqueue/parameters/default_affinity_scope\x00', 0x1a9242, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000080), r5) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000240)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="00042abd7000fbdbdf25040000002d0011002f50136a450cf972f5a3d28479f92a9b221ca46c2d19fda4f47902c296fa844c12cd83f712d3c41e5d00000004001d00"], 0x48}, 0x1, 0x0, 0x0, 0x4008040}, 0x40800) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000001f00), r7) sendmsg$auto_NBD_CMD_STATUS(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002380)={&(0x7f0000000300)={0x14, r8, 0x700, 0x70bd29, 0x25dfdbfd}, 0x14}}, 0x400c014) sendfile$auto(r4, r4, 0x0, 0x5) 14m50.334685157s ago: executing program 4 (id=4318): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_hsr(&(0x7f0000000000), r1) r2 = syz_genetlink_get_family_id$auto_ovs_ct_limit(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_OVS_CT_LIMIT_CMD_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001940)={0x50, r2, 0x1, 0x51bd2e, 0x25dfcbfb, {}, [@OVS_CT_LIMIT_ATTR_ZONE_LIMIT={0x4}, @OVS_CT_LIMIT_ATTR_ZONE_LIMIT={0x38, 0x1, 0x0, 0x1, [@nested={0x31, 0x6, 0x0, 0x1, [@generic="9bfdc309424ccb0986f56e7f5a0ab68f0b50d0fdb2b93bd2c3fd40ef763f444405bad2531a44dcfbfad9db762d"]}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x4) 14m50.025541255s ago: executing program 4 (id=4321): pread64$auto(0xffffffffffffffff, &(0x7f00000012c0)='/d~v\apts/ptmx\x00', 0x10000000005, 0x8) 14m49.740513188s ago: executing program 4 (id=4322): mmap$auto(0x800000, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) (async, rerun: 32) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) (rerun: 32) write$auto(0x1, 0x0, 0x80000000) r0 = memfd_secret$auto(0x0) (async, rerun: 64) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0xfffffffffffffffd) (rerun: 64) getresgid$auto(&(0x7f0000000040)=0x6, &(0x7f0000000080)=0x5, &(0x7f0000000180)=0x7f) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) r2 = open(0x0, 0x261c2, 0x84) (async) close_range$auto(0x2, 0x8000, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x84) (async) io_uring_setup$auto(0x9, 0x0) (async) close_range$auto(0x2, 0x8000, 0x0) (async) r3 = socket(0xa, 0x2, 0x88) (async, rerun: 64) socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$auto(r0, 0x400454cb, r1) (async) r5 = bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_5={@target_fd=r2, r4, 0x4, 0x401, r3, @relative_id=0x14, 0xe600}, 0xd) bpf$auto(0x2, &(0x7f00000001c0)=@raw_tracepoint={0x5, r5, 0x0, 0x3}, 0x6) 14m48.576637114s ago: executing program 4 (id=4328): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) prctl$auto_PR_SET_VMA(0x53564d41, 0x0, 0x200000001000000, 0xfffff7fffffffff7, 0x3ee) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) bpf$auto(0x6, 0xffffffffffffffff, 0x0) mmap$auto(0x0, 0x400008, 0xe4, 0x9b72, 0x2, 0x400) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto_PR_SET_VMA(0x53564d41, 0x0, 0x9000, 0x8002, 0x2) mprotect$auto(0x0, 0x806121, 0x6) openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, 0x0, 0x20443, 0x0) r0 = io_uring_setup$auto(0x5, 0x0) close_range$auto(0x2, r0, 0x0) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x181881, 0x0) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sg0\x00', 0x100, 0x0) close_range$auto(0x2, 0xa, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x100, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x8c00, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = socket(0x10, 0x2, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x0, 0x1, 0x9, 0x7, 0x3c, 0x3ff, 0x1ffde, 0x7, 0x6, 0x2, 0x9, 0x2, 0x9, 0x4, 0xb2, 0x9, 0x0, 0xfffd, 0x80, 0x7, 0x40000, 0x7, 0x2000, 0x200, 0x0, 0x81, 0x0, 0x7, 0x0, 0x0, 0x0, [0x1, 0x6, 0x4, 0x0, 0x0, 0x0, 0x6, 0xfffffffffffffffe, 0x0, 0xfffffffffffffffe, 0xfffffffffffffffe, 0x0, 0x5, 0x0, 0x6, 0x0, 0xfffffffffffffffc, 0x0, 0x8000000000000000, 0x0, 0x0, 0x0, 0x5, 0x0, 0x2000000ffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x5]}, 0x202, 0x2000000d) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="10002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) sendmmsg$auto(r2, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x5}, 0x7, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x78, 0x4, 0x300000000000) madvise$auto(0x0, 0x4, 0x3) 14m47.533593137s ago: executing program 4 (id=4332): r0 = socket(0x2, 0x5, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) r1 = io_uring_setup$auto(0x1, 0x0) write$auto(r0, 0x0, 0x6) write$auto_fops_init_pkru_pkeys(r1, &(0x7f0000000280), 0x0) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x10000}, 0x7, 0x0, 0x5, 0xb}, 0xfff}, 0x8, 0x311) mmap$auto(0x0, 0x40009, 0x3, 0x9b72, 0x7, 0x28000) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x6, 0x2001000000000004, 0x6000000000df, 0x40eb2, 0xffffffffffffffff, 0x300000000000) write$auto(0xffffffffffffffff, 0x0, 0x1) io_uring_setup$auto(0x6, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x20a08200, 0x0, 0x0, 0x0, 0x0, 0x0) openat$auto_fops_x64_ro_(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/kernel/debug/ieee80211/phy14/netdev:wlan1/stations/08:02:11:00:00:00/driver_buffered_tids\x00', 0x400, 0x0) mmap$auto(0x0, 0x20009, 0xe, 0xeb1, 0x403, 0x8000) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$auto(0x10, r2, 0x4, 0x7ff) r3 = socket(0xa, 0x2, 0x88) syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'vcan0\x00'}) mmap$auto(0x200000000000000, 0x80000000000e983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x2, 0x0) r4 = socket(0xa, 0x801, 0x84) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/fs/netfs/cookies\x00', 0xd00, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}, 0x54) getsockopt$auto(r4, 0x84, 0x6c, 0x0, &(0x7f0000000280)=0x1000c0) 14m32.359970471s ago: executing program 33 (id=4332): r0 = socket(0x2, 0x5, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) r1 = io_uring_setup$auto(0x1, 0x0) write$auto(r0, 0x0, 0x6) write$auto_fops_init_pkru_pkeys(r1, &(0x7f0000000280), 0x0) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x10000}, 0x7, 0x0, 0x5, 0xb}, 0xfff}, 0x8, 0x311) mmap$auto(0x0, 0x40009, 0x3, 0x9b72, 0x7, 0x28000) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x6, 0x2001000000000004, 0x6000000000df, 0x40eb2, 0xffffffffffffffff, 0x300000000000) write$auto(0xffffffffffffffff, 0x0, 0x1) io_uring_setup$auto(0x6, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x20a08200, 0x0, 0x0, 0x0, 0x0, 0x0) openat$auto_fops_x64_ro_(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/kernel/debug/ieee80211/phy14/netdev:wlan1/stations/08:02:11:00:00:00/driver_buffered_tids\x00', 0x400, 0x0) mmap$auto(0x0, 0x20009, 0xe, 0xeb1, 0x403, 0x8000) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$auto(0x10, r2, 0x4, 0x7ff) r3 = socket(0xa, 0x2, 0x88) syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'vcan0\x00'}) mmap$auto(0x200000000000000, 0x80000000000e983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x2, 0x0) r4 = socket(0xa, 0x801, 0x84) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/fs/netfs/cookies\x00', 0xd00, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}, 0x54) getsockopt$auto(r4, 0x84, 0x6c, 0x0, &(0x7f0000000280)=0x1000c0) 12m20.56855151s ago: executing program 0 (id=4905): mmap$auto(0x0, 0x2020a0209, 0x5, 0x1f53, 0xfffffffffffffffa, 0x8) r0 = openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x401, 0x0) futex_wait$auto(0x0, 0x80000000, 0x21b1, 0x80, 0x0, 0x3) writev$auto(r0, &(0x7f0000000080)={0x0, 0x1}, 0x3) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x3fd, 0x8000) r1 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r1, 0x0, 0x40000) recvmmsg$auto(r1, 0x0, 0x10a, 0x8, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x28, 0x1, 0x0) connect$auto(0x3, &(0x7f00000000c0)=@vsock={0x28, 0x0, 0x2710, @hyper}, 0x55) ioctl$auto(0x3, 0x800005411, 0x38) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/power/resume\x00', 0x189002, 0x0) sendfile$auto(r2, r2, 0x0, 0x1) write$auto_proc_mem_operations_base(r0, 0x0, 0x0) keyctl$auto(0x6, 0xffffffffffffffff, 0x5, 0x5, 0x8) keyctl$auto(0x15, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0x8) r3 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/system/machinecheck/machinecheck0/ignore_ce\x00', 0x121042, 0x0) read$auto(r4, 0x0, 0x6) write$auto(r4, 0x0, 0x7) r5 = io_uring_setup$auto(0x406, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'pimreg1\x00'}) sendmsg$auto_ETHTOOL_MSG_RINGS_SET(r5, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16, @ANYBLOB="000c2abd7000fddbdf251000000008400600d408000100f295cb1949d481a550acc4025d51fc30c6085e0ea9ca15eaf6aef5630dab953e15f024448c2e22396862acb1ad9cb9c2636b05e03f4a124ea26841a601dbf971ae4585235434bcd42575e149c1c1e7059cb0a5aecbf56a701756ce6e4753ec839031d1694d8e5a5d0f5c82d37fc781af0ea19083f77aa76c311856254a2b8fa8cb4a8c7ed25acb1119a60bc6a0c79f451d571e670daf2265a7bf4524fb4330622319f9fb6d199ae0727aa16689b4abcd7fd862bc1600"/218, @ANYRESOCT=r4, @ANYRESOCT=r3], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80) ioctl$auto_XFS_IOC_OPEN_BY_HANDLE(r5, 0xc038586b, &(0x7f0000000400)={r2, &(0x7f0000000240)="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", 0x2, &(0x7f0000000a80)="ab367ae0697b82d14434798f77b470e89248ee1c1a03e0dc83adf5266a426e01a02ab2167dba4b08e4d720f067007627c8f5d288077073a4d2e69e96fcb99f47238c7007cbf127b83bd846ff7d92267f152f12b1cd4f2e21d26822998db067472d64f0d240aea3a0501a6b7527b36add6212a8a143c6b525a0f644cdacbddfa6526fabc8aa41ccc61e818560d766fe8b418023167eb2896b2203c522b103dbed1a0815b73d17feddcc7be8175a2600bceace02a3b4d78b1e3a8d637d751c86fff7063d407f30f97b6c8101ccb65a45dea757d90c9b9f3a19c891c1c8067cfd03a1ac57d83d7c198384b90bd00d541cc774d29b2d66f8ad37a72b3a31f45c194d37cce138e724303f367515b9038e843d1ebb681586f7f4302fb8b2e7271630c849cc94097ddfc0e6f01000cf6de4f3652249de1014e104516b89ce272519b0861c3026a2699b55314c235e6770b3f301d0b914110e6e1801b0ecd5964c8dc55ce9aa472b958a16eabfec6ba9aa790c7eeb7b9cc3d015c0f913f9b6ea48af99aa694fe6e3a31b41ff99976bfa22f6b244ab2fa0af625966ce3904ee2d336c219a5dd9d5605f5ebfd0f45ff4a4daa3773ab4111678cb54b71984d5e8ca75d409c8301989bed23b923a20b99a84b3729bc3633efe4efeeb976f8f699730a2ddcf55ff8bcd0932a33cea21a591302ffcd6bdfb438c8a7d38b9c72943b6438db3a697e93a9263d1211642d482b702e570191641a8937015cb7f56346ec413b14b1fe79c8756d2a3b16e76e64efc973ca0867172fc31a0f37923710f87ac13462b75e86e526ed259c12f269cb405cce6047964cf692f33d741e7362ff05b099125cb9e374b997e8c91405d352a7c4d4abc7558a5d7c7612f76669a98b512d5ec197aada89e92197d1b1ea5d133ea1eeabed7629f3bd8ed5316bf13e5382d68b4c13dd6d01c376ca08a12a1a67f036bbf59ec37c96f8ba2b08d7f923817f8815542eaa59ea4e456276ef40833f04a107edfb26bdad9bacd8487613331648747419218ee330f07a990cbb2b5f114ca6e96a06911d522a14cbcbc0e5eeee6c743340be9f1c511facaa17b168542115b11698e709166ecde463a5c4051cf37002d1e6c6f111d7fe912a10f47ecd8353a7a6df629c63e7694f272decb3607a71702143aa4271ec9d56f1d0dfda72b1b58b96862f3e9bb0980d4cb06f9d751d6e6f9290051b030b1a1165807811eac44a95f971662ea5a9f601f7581c26f15e712a4637b84bf2439e14441ef5c57aa988580badf7e9cf686aea7fb826d8a2fa05b10379b45f392c6de4188a8480c3744a09d1ba7c30e90e42d45dbb98bc28e7c164ff985b6d6e1119a212dc6773f7ea3c1a3fb61c1d6203b68b46ce8680802eada92bf188a1bbbc0bc5de8c587fbca9d5fa93df4d6c41dd3be6903f799ecb9df41fddbb83ac7ebab8300aa7c8c03bee28aa2e6ac469d02dc89c51f59959b5b2bdcd0e67356a1aaefaab182cd97600b69bbb49fba2fd3501ccde8fe387ed6566f65dc583d4c29520c7fc696aec9ecdc99d847feeaf79f6aaa5452a8d6d426ebe25fe66d0efadd244d6d51f6e248cd5a09d9cb6942169359c321b7e2d75eb58c70585baab6fdff72b17204d1e4f7a8be127f4e45eaecf7bb56dad5bd65616cde57accbab2fc8edef655908692aa8093f346c4114b0ff155cc2f9b58370df77fc924d32c3e746fa592963b9d71b16c1ec0bc9600c6fdd5baea873ca9793610ff49079adbc750e6974b354e5d08a8d3a3bec08c551977a2a5794ae0f74a7d96d33f705136b7bcaa7e055405ef41599406bbd4b0156c7ef0437774e338e2a0ec41ab764dfe5d151e442e733b1341461c98ba53b5bb098df317a64bc2e39e300c8c592b1fd46b8a862e257c55eb3b1ee6feb20defc7dc24f224bf3583c82a40db8d3a4dc0d52e8dbbdb06475f5cebe5c173846f3c874dda060c90394a8ae373318045b36f837d954341243d6c2c62ac436eac6ebc652d47d3c7506a3e5e39c1afe50d5159389e9110ac091c5f8e3bb0d8c883710142e9f1983f6703a240f6202fae0252d954166602fc6fed951bd048e8bbca5f1e54825d1a09aba49d83a998b2ca9ffaf2ddb902e02948fecb4b9f4ea0ca87911338c3b1205f0235a50683d15bcda97fd4060968a0df035d636b7bcb311b1d39520bb2f8a5a8b0d9a1c1880d728bc810d45860c9ed115d2987cfa056a8d68db5a5f41a6a77220aa9c9f999d1c63b46538fb733bb49bf236c2a5f4c0dfcb65243ceef11d7cc636a1c1c8554c9da84f2d1db9b4b7893acecff403b80ea7cb9b5d47c2b99986de993a2a954f6459b7421417d93ccb7e4a5073b4177545973e82c00fd6b267ada450e02bd5fb44011ba650a344049efdcf49f5cd3993ac89f797291c137e80887cb515e36dcfb8e2f86fe71d7d23297c3ed164c23106582f5c04b9f097d858fabaf3e7b5bc291bb91afb15009c9b462443510cbf1bbc31424a3f294ef417c888ea586f65aa191b61c9635445bc635428016b4a2bc37b114654f147d811f05fabe7d0eaeb59a79634b0a4ff055808012ae384efc772372e42c43386e219b464674c7a889c300f5b155f1ee28817d550101c2575906c2a26d85850bc2a8992ee650c2fa045374ccd2d13c36b37a86abcc45c1b7700b5ddef8d09669a2e7481a4bbc1b11d02832ec7d3c282ff3d2d940a7dc9c6cceb5fa9b02de55d7e70c7721bfdf9af0da2edfb760e5cd033bd568e5ac98ffb153fde87eab4ec3c854c200653c148c3a23150dea1645c9c73366ffc5a3d39e12b0bb22c2bcf1a3f62b0915bc38a4641660c7068397034b73ab128712c8c0dfdcaaa7ce6ee52a3e1e7db52701982994af5f2a2b8d730931f54bdd7dd29d3497b1e67496627a8e9007368745c7dd71f71a56e3a257d0c26791fdd1a78518f71e6aa3ba85d3521f15695e44e7ed9a2c49ecec8020cc35bebc3e2b3beaae366fcdb663d5624fa67bdd92f151452e756013f7fc5f9aa3fe3b3ef4dfc8b201cfc554205d7fdf400dfdfe6598bf3d7f417506ab6931836b517498b73dfb5811f75d1934a99fd8898543b9ddd5f7fd33b7c9e73626c84fdc514e14a9679e30227b7f02f71b297adda4174810d22af730a200031bddd952b259303195a3e01d8908e9018b8a6ea5e856cffbae336ef088339d7730cc05a1686e3122f563cec5dda0ddabaf57d82b60078f2f4c610638f1ed1dced28a0a6c1e709f9f4852be0f16de9cc8f182f854f41cfc7bc3c673b5766a6895e5f8c3601481f17d01df18c9ed9bba98334d7759255d910e06ab6b573720b83599b6665c416501d0656328094a21df4d15dea85344e0d9a1511d7ca8732cebf6c4111577185c3ca121fec79697be9c14b6b43400bf193d4fac75fedeacc04cc3f2d5f7e9328b083deecb194f501d89b3f3128cb47787a4acf6e8c9419e96bef5a2f7aa9599ef8721d26f534cfe458a21304cf96abd61d659e75200bd16833e79074a9ff65dbed04dfb8b58c6b38673c773173bb84b82ffa9e48cec0a6935140ad1a3bd4b13248effff710cafa864cffa45f6c690a446b41909f1eaf085ad3bce75ce378f8c55c4926b21c9ebe59aecdf22d07279175d3457e41a53233b3b6ad6fc0680d26b39e6b3bf3ab6496959f87b46911b962d0625e7a80af4d4f281ffc0f8fa440af0389914b929328e2ff7f084d04174c5317ba3204e2a9a29a173c68eac300a25c64e22deed2e9b4f45a7b49ddd38a787e196ec43e7b9448f6419a5b67baa669be17170df4d8e2d83e7a3dea767bd6bcb4b51a0619c33b306e97c6766a0733348ea2643d2d832c377780e6475697859ea3c15cd1a1333b481c25e59722d8fd79d58f890cb39b004028cdbe75ec68719dff44bad45d6bac8c818288d1f20a49a9709c02ba6d7efd50e01c65e48a4718c46d056ee5cd5f76e4067724c06210e46a2f1f25b6d7098221d6bf4a032e9af391523a39dd56486190a9df5adf8acfc2324d2579ed9fbd437ec2c143ce6515aac69393b3584f71e3b3e7cf6d139475c3283f46e391b5b76d0d285d02d9f28c125b4027f57e575cf62246b3dc6d30edaad9345c10aeb72fc29b1083e4cb8019494fe42c2b9f69560d411b9ae3d9a96a0a8bc09e303fe230073221b1ea1e8f3e2f39be9828f878ab8d554a49fd9786dce09bd204d2215d4b44cfd38b8c98d3558c67839c3c794f044eb369453f528968eff624678c6ef08eada4c305e731036519086a696484d41288eb0c2c9afea34be605c6b0c799c10fffa18e591ec8021bd69022eae7d128fa1217394c0bbf1305f0716265788c0cc29446c85e1937c431a68f404c84c42bf715548909a6db78d799586c403f18960bd5cdc8101bd110fd8b47eb7c1f18356e7ee9111401f1e9a1e95cf9db83b34f5f3cde3933cf117200dfce6cab877331d3667568fc19ea36d5050a219c711c3074fbb47cf480ce9a38153c4e08a18ef05d61f64ec730538ce82770038298679314baa3d7ba229843bb236d5c23fcabbf927e565a41aefaad337fdf3c4829748a0bd37054c9524b9b9e2933b28d36d70407eedee70ff4765bd3f7e9cc66ca2b4b38b9420ee58f1d2614e06d0f932bcae984d6a4e65e604eebaacfd7208277585cb6ebc6654a17107979089abae1b6e05dfc406d3854cf89d0364f653286281455553189971f94625799a49432be361ac0470ab06caef63b10c2aa7c1eca59375f2b373e22477f9344ea75999d27149d834298575051e10ddc5aa7fbe3ed378d9632be5e0577f98c380265576267c15012c64342555ef33121576a0eed92625e7db4f43d35b3ff48852a6658455a7ac8649204a493d6d40b9e5c6a6261c8f5414c33db24b79296966837afbb03b6dae7d876c8a27344ceb60d06e363b33fb5b2622c9fa6b35d1aa087bf8fbf0732c681d0802e19233137833846775e90c23cee07c7a2fe62cbdb7490a523dc16f80533815979d4dcf2be388730a0a10b40d20dfbf0b6f855d17cef8d1be38e6f497bef03ea0b351063e29ded5a14db9f8d02142ba1cc13f9c5eca3de5d9ed3016f007819a3089bcfd7711dcb468fc8fbbe2c27a86decceb553e0f9a129ca15e6834e2d4ae716446abc4522df2bef3b4964c0d6ad83e326b06e1ae428b2ebc9e6cabf6087a84af7ab11360d922973c7bcdaf3cd13a70c0ca16f95b863c8e7ab5a71568d5692087d47db8f77201e83d398857311d33a60cdb4aea8e40829a456df80e12aafca1ded39b98480375293a896876a2a46155402d6425541b7edd5500e3ab3e685c9a207a2cd4850768ccab05c784ef6f5cb35aa0ea400d1bb4e82c66632512c4b69bdf1c6931e675db715265fae5f98483cfd508fff8a01f4aa9dfcc408eb929f7947113904cb2a230cfb20d699bd05fad65a60ff62ae7e3b178dc668d665071b1980b422ed3b4877d6476a39cc9a4bb0d2e517805ef49731abb39f5c268916ab7f11d22c15a2cca37101eb975ddbabe435ae7c8f82cdbf9be7c6aa1cff441dd2edf01c7b80f7eb1b78171d500edf14b5b932e1173f748ea636bda686f3f5b3151e5779bb97aba57a0e440675b4a9b6b98ed02bc5c66fd36295b720faad22f7546c91b01f96bc853fb0258744160d775d6e2922643246bc829ca9f50f58d87cf18a57aa60ca74779822fbc2e27199309a7a06d7baa215cd7bdce5100bd640b389fa6fc881e2b09e2e26b0e48f5b739d60268e75845d2a879e0d7219dd3a95380f11de71955eb59808d80d503c79ba4ebf3f1ffb6e54a452", 0x756, &(0x7f0000000380)="f07e9236e5e6c4b3751d89a5c46ccebe18e37ffe62cbee9ab25d623f001ca52aa7c2093f977bc8d1", &(0x7f00000003c0)=0x7}) r6 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$auto_IPVS_CMD_SET_DEST(r6, &(0x7f0000000a40)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x20040011) mmap$auto(0x0, 0x400008, 0x36, 0x1009b72, 0x2, 0x8000) socketpair$auto(0x409, 0x85, 0x2, 0x0) 12m19.269106855s ago: executing program 0 (id=4912): mmap$auto(0x0, 0x3, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x4000804) lstat$auto(0x0, &(0x7f0000000180)={0x12, 0xd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1000000006, 0x7, 0x8, 0x5, 0x1000, 0x42, 0x8001, 0x1, 0x60, 0x40000102}) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000000), r1) ioctl$sock_SIOCGIFINDEX(r0, 0x89fc, &(0x7f0000000040)={'bridge0\x00'}) 12m18.332917989s ago: executing program 0 (id=4918): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_METER_CMD_DEL(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x30, 0x0, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@OVS_METER_ATTR_STATS={0x14, 0x3, {0x30e, 0x1}}, @OVS_METER_ATTR_ID={0x8, 0x1, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x8001) (async, rerun: 32) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000640), r0) (rerun: 32) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000100), r2) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="07031abd70250c00587b22"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x40800) (async, rerun: 64) writev$auto(0x3, &(0x7f0000000140)={&(0x7f0000000000), 0xdc7}, 0x4) (async, rerun: 64) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x805, 0x70bd2d, 0x25dfdbfb, {}, [@NL80211_ATTR_NETNS_FD={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004044}, 0x8000) 12m17.168012293s ago: executing program 0 (id=4921): mprotect$auto(0x200000000000, 0x806124, 0x8) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) bpf$auto(0xaa0, &(0x7f00000001c0)=@test={0xffffffffffffffff, 0x3, 0xfd0, 0xa0, 0x2878, 0x8, 0x7, 0x0, 0xfffffffd, 0x1000, 0x2, 0xa, 0xfffffff8, 0x7, 0xf}, 0x660e) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x7ffd) r0 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x82802, 0x0) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x51, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01002dbd7000f9dbdf2501000000060002000100000005000700570000000800090108000000050004000300000014001f00fe88000000000000000000000000000114002000ff010000000000000000000000000001"], 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r1 = getpid() process_vm_readv$auto(r1, &(0x7f0000000000)={0x0, 0xfff}, 0x800000001, &(0x7f0000000280)={&(0x7f0000000080), 0x1ffffffff}, 0x6, 0x0) write$auto(r0, &(0x7f0000000040)='S\x00\x00\x00\xfc\xff\xff\xff', 0x8587) close_range$auto(0x2, 0x8000, 0x0) io_uring_register$auto(0x2, 0x19, &(0x7f0000000000), 0x0) mprotect$auto(0x200000000000, 0x806124, 0x8) (async) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) (async) bpf$auto(0xaa0, &(0x7f00000001c0)=@test={0xffffffffffffffff, 0x3, 0xfd0, 0xa0, 0x2878, 0x8, 0x7, 0x0, 0xfffffffd, 0x1000, 0x2, 0xa, 0xfffffff8, 0x7, 0xf}, 0x660e) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x7ffd) (async) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x82802, 0x0) (async) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x51, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01002dbd7000f9dbdf2501000000060002000100000005000700570000000800090108000000050004000300000014001f00fe88000000000000000000000000000114002000ff010000000000000000000000000001"], 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) getpid() (async) process_vm_readv$auto(r1, &(0x7f0000000000)={0x0, 0xfff}, 0x800000001, &(0x7f0000000280)={&(0x7f0000000080), 0x1ffffffff}, 0x6, 0x0) (async) write$auto(r0, &(0x7f0000000040)='S\x00\x00\x00\xfc\xff\xff\xff', 0x8587) (async) close_range$auto(0x2, 0x8000, 0x0) (async) io_uring_register$auto(0x2, 0x19, &(0x7f0000000000), 0x0) (async) 12m16.436566258s ago: executing program 0 (id=4927): openat$auto_proc_pid_set_timerslack_ns_operations_base(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/nbd7/queue/max_discard_segments\x00', 0x80000, 0x0) read$auto(r0, 0x0, 0x9) socket(0x21, 0x2, 0x2) socket$nl_generic(0x10, 0x3, 0x10) msgrcv$auto(0x0, 0x0, 0x6, 0x0, 0xf1) r1 = socket(0x1d, 0x2, 0x2) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) connect$auto(0x5, 0x0, 0x9) sendmsg$auto_HSR_C_GET_NODE_STATUS(r1, &(0x7f0000000240)={&(0x7f0000000000)={0x1d, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, 0x0, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@HSR_A_NODE_ADDR_B={0xa}, @HSR_A_IF1_SEQ={0x6, 0x6, 0x3}, @HSR_A_IFINDEX={0x8}, @HSR_A_IF2_AGE={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) write$auto(0x3, 0x0, 0xfdef) ioctl$auto_TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f0000000040)=0x1000) r2 = bpf$auto(0x8000000, 0x0, 0x0) sendmsg$auto_ETHTOOL_MSG_PAUSE_SET(r2, 0x0, 0x24044044) r3 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000180), r2) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000f40)={'batadv0\x00', 0x0}) sendmsg$auto_BATADV_CMD_SET_MESH(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={0x24, r3, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x140080e4) r6 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/vm/drop_caches\x00', 0x141241, 0x0) acct$auto(&(0x7f0000000140)='/dev/fb0\x00') pwrite64$auto(r6, &(0x7f0000000000)='./cgroup/memory.pressure\x00', 0x6bc, 0x5) 12m15.199367343s ago: executing program 0 (id=4932): r0 = socket(0xa, 0x1, 0x84) mmap$auto(0x3, 0x100000000, 0x4000000080df, 0x40eb2, r0, 0x300000000000) uname$auto(0x0) setsockopt$auto(0x3, 0x10000000084, 0x85, 0x0, 0x90) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @loopback}, 0x54) 11m59.570839937s ago: executing program 34 (id=4932): r0 = socket(0xa, 0x1, 0x84) mmap$auto(0x3, 0x100000000, 0x4000000080df, 0x40eb2, r0, 0x300000000000) uname$auto(0x0) setsockopt$auto(0x3, 0x10000000084, 0x85, 0x0, 0x90) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @loopback}, 0x54) 9m0.534710297s ago: executing program 5 (id=5573): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sg0\x00', 0x20000, 0x0) openat$auto_safesetid_uid_file_fops_securityfs(0xffffffffffffff9c, &(0x7f0000000740), 0x101001, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/platform/dummy_hcd.7/usb8/ep_00/direction\x00', 0x20400, 0x0) r0 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x64842, 0x0) recvfrom$auto(r0, &(0x7f0000000100)="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", 0x80000000, 0x2, &(0x7f0000000000)=@l2={0x1f, 0x7, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xb06, 0x1}, &(0x7f0000000040)=0x6d) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f00000011c0)='/dev/ptyq3\x00', 0x40001, 0x0) ioctl$auto_TIOCSETD2(r1, 0x5423, 0x0) ioctl$auto(0x3, 0x8924, 0x10000000000402) 8m57.454930155s ago: executing program 5 (id=5588): statmount$auto(0x0, &(0x7f0000000640)={0xc, 0x1, 0x0, 0x7352, 0x34, 0x400000000065f, 0x1ffdb, 0x40003, 0x40000000007f, 0x20000005, 0x8, 0x3, 0x6, 0x2400000004, 0xb4, 0x4, 0x6, 0x2, 0x1, 0xab, 0xfffffff7, 0x9, 0x1, 0x203, 0x838b, 0x84, 0x2, 0x0, 0x5, 0x0, 0x0, [0x67b, 0x2000000000000000, 0x0, 0x40000000000, 0x1, 0x2, 0xfffffffffffffffc, 0x0, 0x400, 0x10000003, 0x0, 0x401, 0x0, 0x0, 0x7, 0x0, 0x81, 0x9e, 0x0, 0xfffffffffffffff9, 0x10, 0x1, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0, 0x0, 0x251, 0x3, 0x0, 0x5, 0x9, 0x6, 0xfffffffffffff7cc, 0xfffffffffffffffe, 0x400000000000002, 0x0, 0x0, 0x0, 0x8000000, 0x8, 0x8, 0x6], "6d2fe79fc073b58e49223e806b725b86b06bd26a1a83b95902205e"}, 0x1fe, 0x408) r0 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cec29\x00', 0x101901, 0x0) ioctl$auto_CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f0000000100)={'\x00', 0x0, 0x6, 0x2, 0x9b3, 0x9, "0200000002000000997e763f222ce1", '\x00', "0001410c", '\x00', ["f5404de9641f0000000060c1", "70d9a9a3af9f39d000000001", "ef5ac4927ad89c5c00"]}) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dsp\x00', 0x8e40, 0x0) ioctl$auto_SNDCTL_DSP_SETFMT(r1, 0xc0045005, 0x0) r2 = socket(0x1d, 0x1, 0x7fff) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = openat$auto_tracing_entries_fops_trace(0xffffffffffffff9c, 0x0, 0x1, 0x0) getsockopt$auto_SO_DOMAIN(r1, 0x4, 0x27, &(0x7f0000000240)='/dev/dsp\x00', &(0x7f0000000280)) write$auto(r3, &(0x7f00000002c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xdf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\b\xb3\x959-\n\xccWw\xe2\x9cK\fE\xf7\xff\xff\xff\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x00\x01\x00\x00\xcc\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xd6\xcd\xea>h\x91\xc5\xe9\xc6\x8c2\xb6\x87\xbb\xa8{\xb4@\x86\x978Y\x892\x98\xf5\xfd=\xda\xf12\v\xa7\x0f\x80w3\xe3\xeb=T\xbe\xd7\xa0\xd5\x1ch\r\xcc\xdd\xe9\x85\x93x\xfa\x10\x80\xa9\xb7\x18\x13P \x86', 0x5) syz_genetlink_get_family_id$auto_nlbl_calipso(&(0x7f0000000040), r2) ioctl$auto_CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, 0x0) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r4, &(0x7f0000001100)=""/4105, 0x1009) r5 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000040), 0x20904, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f0000000000)={{0x3, 0x1002, 0xfffffffc, 0x5, 0x2}, "654c6dbc7a4d30983899a7e1325b6a29ba1e18441074052a3fa6c3ccf1bf00"}) r6 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty17\x00', 0x801, 0x0) write$auto_tty_fops_tty_io(r6, 0x0, 0x0) readv$auto(r5, &(0x7f0000000a80)={0x0, 0x2}, 0x2) mmap$auto(0x0, 0x7, 0xdf, 0x9b72, 0x7, 0x28000) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) r7 = socket(0xa, 0x1, 0x84) getsockopt$auto(r7, 0x84, 0x11, 0x0, &(0x7f0000000000)=0x28000000) sysfs$auto(0x2, 0x45, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$auto_VHOST_SET_VRING_CALL(0xffffffffffffffff, 0x4008af21, &(0x7f0000000280)={0x8}) syz_genetlink_get_family_id$auto_ovs_packet(0x0, 0xffffffffffffffff) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r8, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400c000}, 0x20004880) openat$auto_ubi_ctrl_cdev_operations_ubi(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0) 8m55.056437249s ago: executing program 5 (id=5602): openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card0\x00', 0x0, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) mmap$auto(0x0, 0x20009, 0xe, 0xeb1, 0x403, 0x8000) openat$auto_tun_fops_tun(0xffffffffffffff9c, 0x0, 0x2002, 0x0) msgctl$auto_IPC_INFO(0x2, 0x3, &(0x7f0000000440)={{0x3a, 0x0, 0xee00, 0x73, 0x80, 0x2, 0x14d}, 0x0, &(0x7f0000000400)=0x40, 0x7, 0x3, 0x1, 0x5, 0x5, 0x0, 0x1000, 0x0, @inferred, @raw=0x5}) bpf$auto_BPF_PROG_TEST_RUN(0xa, 0x0, 0x1000) r0 = openat$auto_ubi_ctrl_cdev_operations_ubi(0xffffffffffffff9c, &(0x7f0000000180), 0x40900, 0x0) ioctl$auto_UBI_IOCATT(r0, 0x40186f40, 0x0) ioctl$auto_UBI_IOCDET(r0, 0x40046f41, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/nbd12\x00', 0x6600, 0x0) openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000000)='/dev/binderfs/binder0\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nfsd(0x0, 0xffffffffffffffff) socket(0x2, 0x2, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, 0x0, 0x181040, 0x0) openat$auto_tracing_saved_cmdlines_fops_trace(0xffffffffffffff9c, 0x0, 0x48400, 0x0) openat$auto_proc_uid_map_operations_base(0xffffffffffffff9c, 0x0, 0x1, 0x0) openat$auto_binder_ctl_fops_binderfs(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) pipe$auto(0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/platform/dummy_udc.0/udc/dummy_udc.0/maximum_speed\x00', 0x0, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/irq.pressure\x00', 0x101102, 0x0) openat$auto_ocfs2_control_fops_stack_user(0xffffffffffffff9c, &(0x7f0000000040), 0x669400, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000340)='/proc/asound/card0/pcm0p/sub3/xrun_injection\x00', 0x8a180, 0x0) socketpair$auto(0x800001, 0x2, 0x615e, 0x0) close_range$auto(0x2, 0xffffffffffffffff, 0x0) open(0x0, 0x22240, 0x55) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x2, 0x0) 8m52.876745508s ago: executing program 5 (id=5609): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram5\x00', 0x1eba02, 0x0) setresuid$auto(0x0, 0x0, 0x0) ioctl$auto_BLKALIGNOFF(r0, 0x127a, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/mtd/mtd0/bitflip_threshold\x00', 0x2062, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000002680), 0xffffffffffffffff) sendmsg$auto_IPVS_CMD_DEL_DAEMON(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x24, r4, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0x10, 0x3, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64=0x1}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x40014}, 0x0) r5 = syz_clone(0x20000000, &(0x7f00000001c0), 0x0, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000300)="2918758169251555183442853a27ba37074b62633f338d1a7b74c6ff4c91676d9a5e0078ab1db0f30dc404f23fd5820a80ed88704e31ac2c5f3169cb36f22141f45b35a2e04fe71bc918ec46671bf5d28d8d26ce4970c811a8b669c7011c3e9ff8b2109640c07450f5b7b624fde03bb975adc229120a3b8750efcf8a90044854f04b55f429540f9fc390d24df293299b9c4395aed65212fdd9a1597ffcfaf9b3008f77bcc5a593486eb61127560aa974af592514e14d7d") r6 = waitid$auto_P_PID(0x1, 0xffffffffffffffff, &(0x7f00000003c0)={@_si_pad}, 0x1ecc, &(0x7f0000000440)={{0xffffffff, 0x2}, {0x7, 0x19}, 0x9, 0x80000000, 0x4, 0x5, 0x8000000000000001, 0x6, 0x6, 0x0, 0x9, 0x0, 0x0, 0x1000, 0x0, 0x4}) r7 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000000)='/dev/binderfs/binder1\x00', 0x2001, 0x0) ioctl$auto(r7, 0xc0046209, 0x9) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x801, 0x84) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x9, 0xffb, 0x8000000008011, 0x3, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) io_uring_enter$auto(0x3, 0x1, 0x82400001, 0xb, 0x0, 0xd) set_tid_address$auto(&(0x7f0000000500)=0x5) r8 = getpgid$auto(0x0) r9 = socket(0x2, 0x801, 0x106) setsockopt$auto(r9, 0x6, 0x12, 0x0, 0xa1) sendmsg$auto_IPVS_CMD_SET_SERVICE(r2, &(0x7f0000000ac0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000a80)={&(0x7f0000000540)=ANY=[@ANYBLOB="3405", @ANYRES16=r4, @ANYBLOB="000226bd7000fbdbdf25020000000800050007000000080006000300000008000400050000001001028075ff83876574dcf7444c53b88992e69a471bfa58053dc94ad66d0953fb1b9cb401c147df5f31671dfc0f9284424129a2c5ce70c649ade9aae6d814619bf71bbd80efe680cd9bc3e7aa59478b4e3e4d0ce05691deebfebdb666888d6f5549d48d92470028f2ccb239e0e683f1107459a18b09a092829949129087a8c782cb94fd36de9315f583a56ceee0e6023fa204fdb92ada8640c18311479406aa31ba39687f786747f4eaef95", @ANYRES32=0x0, @ANYBLOB="19e833e93fdf0b102a18ee6b8436634483ed5729eb26e2267dcf5d3a2eaf51db79c25d370c37cf662d480e08f268f1743cd215589548d9cb71", @ANYRES32=r5, @ANYBLOB="1800fd80040086807290395bf5dd39680400b5800400098021011a800400", @ANYRES32=r6, @ANYRES32=0x0, @ANYBLOB="490f786928777dc08e0861d26a194926ce9dc2c2fcb0dd40666bd041f1c1ee6c8800c408008000", @ANYBLOB="0800e300", @ANYRES32=r8, @ANYBLOB="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"], 0x534}, 0x1, 0x0, 0x0, 0x28014044}, 0x0) r10 = openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000080), 0x8203, 0x0) ioctl$auto(r10, 0x80046f45, 0x38) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) 8m47.385735462s ago: executing program 5 (id=5620): r0 = openat$auto_adf_ctl_ops_adf_ctl_drv(0xffffffffffffff9c, &(0x7f0000000000), 0x600002, 0x0) (async) r1 = openat$auto_random_fops_random(0xffffffffffffff9c, &(0x7f0000000040), 0x386841, 0x0) ioctl$auto(r0, 0x7, r1) (async) r2 = prctl$auto_PR_SCHED_CORE_CREATE(0x8f, 0x1, 0xffffffffffffffff, 0x7, 0x8) sendmsg$auto_NL80211_CMD_SET_MPATH(r2, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)={0x10c, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@NL80211_ATTR_SPLIT_WIPHY_DUMP={0x4}, @NL80211_ATTR_FILS_DISCOVERY={0xd4, 0x126, 0x0, 0x1, [@NL80211_FILS_DISCOVERY_ATTR_TMPL={0xcd, 0x3, "e1e690321dcf85b92b307957a771a25d7b3c34836e6eac707544ad4ccc7a7fbfc60952f33aae95cd1d741f3cb3e279a38d51ce1d6fa9ca8b2cd3ec2f051e241db184315c11e85deca78dbc1398a6ca86494a78a0a8f6a3f9d09935ce891236fbf88ef71b2124e3266bd8f77f6e7e855e43d2eeadd6c07b73493b31fe1978f1aed6815e1869892c19321fc2c7dfcfe587f8822b1938b30b9e2cd6565de56fb83911536327c739b1cf98486a951ccb3227a1fa4b399989385cf6f3829dd558fa0c1c818875c1893afbe6"}]}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, "c7ffe7ecf3cc510226ad536ea9c3a745ded596d959232c72b619"}]}, 0x10c}, 0x1, 0x0, 0x0, 0x20044080}, 0x20000800) r3 = openat$auto_kmsg_fops_printk(0xffffffffffffff9c, &(0x7f0000000280), 0x430000, 0x0) read$auto_kmsg_fops_printk(r3, &(0x7f00000002c0)=""/56, 0x38) openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/maps\x00', 0x2, 0x0) (async) r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000380), r2) sendmsg$auto_NL80211_CMD_GET_PROTOCOL_FEATURES(r2, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)={0x98, r4, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0xf1}, @NL80211_ATTR_MNTR_FLAGS={0x5d, 0x17, "bbeb29ea3a9150898795738e6626b2b6435489ab95c9b1787e4a9a5d8fee7251f172c3b0dc7c88a92e4e18f0cdb0103d3ff9bf365c24dffc7bfd405e6652117f9cdb67be966c6348592213186f7827211796dd46004e71b7dc"}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x8}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x8}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x8}]}, 0x98}, 0x1, 0x0, 0x0, 0x8002}, 0x10) (async) ioctl$auto_KVM_GET_MSRS(r2, 0xc008ae88, &(0x7f0000000500)={0xfffffff1, 0x0, [{0x7, 0x0, 0x100}, {0xcb11, 0x40, 0x531}, {0x80, 0x426, 0xffffffff}, {0xb6}, {0xffff0001, 0x200, 0x8}, {0x5, 0x6}]}) (async) r5 = socket(0x1e, 0x4, 0x80000000) (async) r6 = openat$auto_sco_debugfs_fops_(0xffffffffffffff9c, &(0x7f0000000580), 0x180, 0x0) getsockopt$auto_SO_BINDTODEVICE(r6, 0x80000001, 0x19, &(0x7f00000005c0)='/dev/random\x00', &(0x7f0000000600)=0x80000001) shutdown$auto(r2, 0x18a00000) (async) msgctl$auto_IPC_STAT(0xffffffff, 0x2, &(0x7f0000000700)={{0x3ff, 0xee00, 0xee01, 0x6e5, 0x100000, 0x8000, 0x60}, &(0x7f0000000680)=0x2, &(0x7f00000006c0)=0x4, 0x7ff, 0x4, 0x2f8b, 0x200, 0x9, 0x1ff, 0xfff, 0x3, @inferred=0xffffffffffffffff, @raw=0x46}) sendmsg$auto_IPVS_CMD_ZERO(r5, &(0x7f0000001b00)={&(0x7f0000000640), 0xc, &(0x7f0000001ac0)={&(0x7f0000000780)={0x1308, 0x0, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4ac1}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@typed={0x8, 0x109, 0x0, 0x0, @uid=r7}]}, @IPVS_CMD_ATTR_SERVICE={0x12cf, 0x1, 0x0, 0x1, [@typed={0x24, 0xa0, 0x0, 0x0, @str='/sys/kernel/debug/bluetooth/sco\x00'}, @generic="5a92cc3bd19d65cd54ccada747be9ecddbef7b2e1c9b90a6f836ffe9b58653512ac5264ecd217389173ee6b36179a9f03dab0f644e0518caacf91f7af7eb782b660d980ef8aa2a8284a71b41b4feba6bb2aa0affb6167f52da730c4c3694fd68a45a6c20cd71e916afd93f08e598f89b66588e025766ac1dde6439fc43c05c3d1761e3560eb2e35f16cc7feffeb03ce7a1a0ab50957bfe5909bcfc709041da0fc09a34ddcb86845975379943ebd3a25928a530733ea8e1931e041d8345f38a691930aacbab6514dee21edc227ebae140f7b9da6b2857ced2d66af76eaecaa224d45e342cb4f1", @nested={0x79, 0x2d, 0x0, 0x1, [@typed={0x8, 0x9, 0x0, 0x0, @fd=r1}, @typed={0x8, 0x107, 0x0, 0x0, @u32=0x6}, @generic="55563581906923375b3d85f7cbc7c4e7fb56ce7f41e5d6a243cdc8d1a945adbffbade2e7f189e19b6d24c1ad9a13231ab32c3564e16f99c2b5a8cf073455864283c58ede1e9749975d10d221319c2824c1be2ace19f04f0232dd46e877691707de7294d2b3"]}, @generic="b66c272cd7bd4dd82ff8276bab08d29ddffa9803af73a34a2b068bf4b1a609ff5fcf0556032e05d05d23a595e9cd4a631fe0f567cbcf2966cd21ff01749e20b63d46db93951a7dfa44f3c8af61b7ff84bd6ff27cd3481d45172c35e0106065af35f9a59d255329b6fe0bd01d2b5f8a54a189733051db0bf4409269d0fd045d86e081e55b611269820b607d789cba924a6a34592e8f8b7eec96", @nested={0x10a6, 0x13a, 0x0, 0x1, [@generic="4cb15dbeeff7c4e79cce6f4d2c5980e7c9c7d0b743c8c4a7e9d9c3755146ecb4f01f0486909c11d82127709bc2ca58a6334d3cb4093c847e5b67ab61d0891aaf180ebf962b44ecec1544045791c0ff77179fefdac55ebfe886021b93cc3cc993dc2d2d3fb6453cbdc4b66a31135f5c65d7e6229bde48c3d464ca82ca895726ff1148819cf556890f9ccce7bdfe193ab7010e2dbce6dd757f09f61980f81d489ac137eff6d8b737afdab3a7064f35e141ec241cd460f111a6149ab342451aac0adeb69e2bf8fa8b4bad904f636071e1473dd0a3be31fd65dada27cf1b957c9833ca86b9d67ac5ecdf079648495a82db0e009285a82bedf39b7cba3ed73df49d735f39562951ab048fa7cbe7579d63e1d67f271c8515bdca9a51943c1e18cf7d5546fdf485a8eff1228e3550ed118ddd35ccb066cee6b618ec32adc77e67b1ff2b6100635807c79f9b7d17c8e289cc4e80056f4440279567244753cafb225984e7726e6e6e1caa34622c54cbed3d12ea888f8a1014303f27d82be87818cb26837718041c877d4ee185890c9a8affdedd6882d6d760bb8c9f206dac9e09ef9a415f78bf38fbd5d62d78b2e63c01f861344f7833ccc1aa7f3d0765aa4d5d727761b8ff39fc4ccd885dbcaee738933dde1d5c7d8201c93183ef3df1b78fae3265c8e57543a001e2d7924ea7248beffc8be36303f3ed86f77ac6617d274d858f351671287d8dca9cf39d54537c3efb46307171bb7c7e6d56878c14ef0c7a1c5143000629a9dd1b91e5daf5f9dce8dea88bffcf3051f2341812c0ee26ecbc316ff7e83f483633722e642eb5a6c4f731b3c0e08eb6e0ecf97eb5508e6056fa4a8268929a31622d3337eb7d04f2b7a0f755a3404daf4325b236e0521e3befc91d3329c6dba89310a0b1411748ff9b843ae223cdb7c555b826c301cc3dec346e6a131a8df677416d02a4a778b56571042fc9ef1259ff679afd5995bfb37ace7a093ec1f5117da6728207e73c02bdcfdb60bdcfdc399e22d4da94915cc18731b1c1eb63dd2fa5ff1ff61fba938b09d9748dc76d1cc9f3a3ff87de58569c44c0a4830d4425a59af3eac53d2f29a115242d9dbb717702954452eebcad9ab1ef07be8415f33a502859a77768e2d23aa43f70db8e338b3ed7cd670f18f6c0b51dc9f77e5a40bfc956e9276df905f1c7856e3616b34a05e9d2cdde5e5f2200ab6fe49c352650333fc80d093ea48344f85948ae98ae633f12c24ee842f00286ce982ed6b9c7d3f8864ba3c8cea12802e0548cdcdbaa115f928b0f62f756c92d4af5c61aebebe24f2fb728aec0ed639d4954b516f736629a9365bb8294980ccbc008306d27894ed785c86dd6b6a88ef7eb0845bbb71b294a859b8ebba3c22ebf68eb35e7a6874147f53ebba952287517e5ce21bcb19fc8cc60067c5fda83bfdb0038a8e2642809cc95892c9fd55d0cd0098381c29de542949ed867b594447b368e4b6282a0141d29773b9190207619694998279afc623350b7d32923d9fa571fc4f134eda2405718018278cf49e6ab4567d9a9b9f3093ea4c2bd44701fe7c0666fefd3f4c64cc9bc2d675f977b52fc775327aee0e26598c2efbc477b5fc531983404d46500dcae6a69bc9f6a7a28cbf87fab810d7e44c6a329d83ed8e0e0611729cd11bd4bd29250a7c9be81905b857ed40eedf8cdabcc70060fa4222c753df1fea04f00995fc9fdccf692efba801510bd78a828c3cbc99b86c8ed1f0d96faad33dad162efe1e204f219ac2e6ce4da77bf036f6fcaca54f80d4af6e16d54f4b303193c8bcfcb2dbf43a2737f0482fc7441723cd8ac533a62cbfd232af96a1cc04bd7fd8a015edb5312444be9bc7c817ef35e26c24070f157c89a106c25b2d2daf07b4ae8855f4063f5b6f21f43948ee3299d65c2b5105d210ba481ffaea13c478a287e2cc6382ee33fb5a709ae4e10617b941d70b037c4cc5172ba4d5428edad665ae632f6d6a0e8ea4864bee341986b3d7475aff43367ed413623ae8371e9811649a2ff67bf0390f913ffabd2e6d1299d9803287196d77c2275a71de1b35b30eeb8aa221e1edf0c391419e3c7b0ba354b474fe7aefd9fdcbf1bded5e0bc06e4a8ec4f62ef96c350e72a91bcc13699db02c0b7ad0d0040748f027ba3853612246c861e5a5bad1a83af35f8b6ced0f13e07b93033c23265c024ff240817104ebc7c71df6361fa2bbf2b39d3dad2886207c89192b4a62aa860eea000eeaceb3cea692846cd4a81b7e695834363959bc9b8a81237fb884e2ba0697116cda3026f8e1bd280caeabeddf2aa3844575cba7245ca0beb1c1109cdcdbca66a3c4e29849facdd16bd85cd603c08e302dbc46d9236468ef5e2952a2658bb136c3db93b615c5c716118ef4b4b686fba066d942eb6505bbf029609a663c64d3d831f93924c4118718cca753a5205e4820c2370dd2aaf589c998d88b6e0cec9808f79a8f848ee3a1fac4fc45d6708985e8558feabb4868f29f9cda6b53aed292602729c234dc2a9147d02809f50e83e4e840cff0ab5e6325a7fec06271e20935458252b0cc2f0df56bac9938b2f31b7b7eede892d200c352599a32e2b96b1871859e071cd3596e19af48196882f9b799acf6dd38663fbeed99811979e79c4308b64b0b78a4ecdd2e59e07c6b60d6f42ddf01a4f9f76b00158aa2d1d2421a8f0ce623dc2787abd1dc896ec7aec5ce011089027b8d0a778fed2a0562d762428d61950288d974883b290777a42d58d1b0eae33afd1471f8afac23317284d6c570df1b9b40fd1764079d9ebc9cf378aa37cf547316da4f4c8d536e13c013907a4779ecf614b5d8b91093ece8f63299fca172d3f73ba41638563b0cea0822b4ba93fbc0c08cae72ccbd03229618daa46330128d1d4586e4deb5aad3cef99571c735de56b65bf5a3ba39edd7c9e0be6345734ac371fd5e6410d372e3e68c73268ee4c958dce9a9012c8f884878839f27c7edb19d51a170aa9385699470182d6fdbf9ef43e55a4e5aacf820c34f3beb22229fa28423381a8c85686021960392c77326e66e6082a9d5bf322e0bc0c2748e34ce2c3a834c52580434faf7d3d17234c4a8112f73c13f4ba11a145a0ead8e55cb9ac197ce5c3564ff195e98cffc96e75f78c257bd6b141d63a5c7b8c1ed50540168f5149156e8117404c64f6fdd29d044649e731965bf244a0a6ecf4670a61750f887a7993cede94d21ffe2063b98a815bde836af8ae1c9ebff7c4c8beecce94ba644529a1378038878ad3c93208f071947184486566a4af665ce777b129ec5d00f56a09dc43e90a933f376b0555ebb4fdd8c425e0171ed57c2de37d02c62f3b004dd2ee8b7a4f17a1f2f2522e3e73e0a5a4de8b713e64cc524cd49cc8a1d2be3b0d22003d6059cbdd2902f93b1bdcd2b57d524e6e3f4499a8ac41ccacec695d2ee95c4570354aaa9118bb83eb38befa6b653ba41902fbbb62dd433113c646bec5e5507fcac376f0a8ea3956378951a98d4511ca336f112321d634f052b6d6ddb8d47d3fcb7528f2d79207a8aa43f7ae30e5f18e0b8ee93f3409e35170ea2e7d164fda0eea67036a4273464321dd2e8a4b28d8a2072b166146639679633846a5900912323c3fcda698812bdbf00b5825a2ac1df93972adc1b161769c986a9294ed89b9b6b5095b6c859c3e2378eb3191d49fc5cb543ace7a14d10ec7cf2ef4b6cc2a1737e0217aa3382cfc84002e11d97abc5adbb873a71be7d41b54dfd885a7e1ce76b2e3e08b50270089c33520bd461c217987c0989bfd6abba6a004214f340761b47123548152d0d6eba993df5458aac4772be0004713a3159f44bddeb53cd6843b56bb23ab3312fb2545b3eac3055cba23a524af6d4673b51f2c15e9ab7aa3b688444cdc3867aa24ef942a7f2d094b1fbb856a69d11b14b84f14d0f3264490f48d2654300f2c8fe4862068933679fe29461722de22140c8713311b073ae83765a4be655d7a07f730ef9642d1ae3e32b585e9e47d150803140d49b1f64c6fb5f3f53368bb8aee0e1657736f356fd9ddd5bb4f12a84dfb127190a52dda6040194e18599933cfa19a12f2718059b050954f950fe6fcbf3a9bfcf4ba70cec3cc3dbfe6fc1239ab2fa5ba9d4d5dd04a19186617db198890f1ac0e773aed227dbe3b862a55caaaa22f3ca226acf5f0d64c0ccc8694884129fe7fb454ee70c21a55a57cb203a53017e9059667ce8331be5be0b40fad9520f0fe80e697ede686a9ff137fbb61067d7b4b7075ae5a48f2bc61f8f504f7849075e014ebf19c8193dc5bf2a8642bbbb4136233d03c3a4c8eed92aacc99a7284fec7109d3159ae7af52fc5f4fa911da98cfcbff45de4bba6cb0c72e482fd82e76809cde2b21424c19af6613b0f4505f0c6fed9b0abdb78ca9a47c54a78201c251fbbef7f167c85e9eb38529b8e4a5b71513906f59b4b2835c65ac69f2f02084b0951604308c56aac7ff4059a882d14fb3a258bcc6d8e5c6c8f465785ab91f6ec0fa5d911c5636b7f06437a2d21dcce574f5158eeb31f0251eb3515d01517f909925b6014b69f6dbeaa7a277240366b603e5612a7b38541d819c951100586b764c4bfebd20eb46a608d9a02a5667f38d207117fe09aacd0da3ccc5218c067bf9a17ae5061715b27b9726c4c2ac66274c05e245b70095857bd6ec871f6ad3442c02c8b678d314fa1802cbc416e52255cad483fe6d2f18c984aab5afb683f5cdc148de42801e72f33566e7547db78d7cb467de2bc1cdc04bc17922fb85ce355eb9302784a5ea1e8daab3ee3571e2cdd732d17e8aa27e12d05c9418b2af6fcf0684d9291f18828acfb9bd459c110eb1557dfeb88c46f3c7cf28590632f5de91664f65bca56cc90f8adb1238a9586e8e21daf8ae0874e890c66b26c9420d5e222f75327008871e905fca865fcd9f765aebb25f3abfc9f4bdea4f8b3a3cf20c33e963753e805e1f36a823e04dd954f7fc6aa4227bf1b85b6e4816f121f2064132817b1e121d25764497ef8a62084b4ce2d1259bd1b7882dc30ba351e432904941ef69760461f90bee0548962b9104d26d797543eccd4cdfa1982bd65dab782692b776bbd304e5041dfe4f2daac82f72e4fb4b3c934fb72f79bae5f2c7df4981ae110c2947f216b26941df9ed515a3eafaf013cc935b54e2256b1c984599010a89f6271e43875db818f980af9177015881a99e54a42964f7cd453c6a8473e541e6dfccfe9b96b8683513e8d7c019e2ea2ff073bf5258b02a819c33808f8d50db705073d5b7a6fadcb1ee641facf2faf104d94488c3df613cd114bc3032c8c09096de9b47753ef0564a67b24fcc94e574dd839d06cdfa463704fc711745c6340e166b2a9f7f0d0d0f9125387a29c4c4240e17f57133a00957666ab6a3dcbf099ccb726a4b52d202f1239ff54af45c5694b0f7f34fd72edd32600c86e42b3c925c3de3c5c042aaee372548a004778802e01a20d8e7d3d10e8fd22aa21cf2cb5535eddd9dc5229a66cde2f4520cb7898bb0a9fa17ef6efff3ab37e517cb25f47f772f26f3db830b2f69dc3d6ee75c5c7e245f54cbaa1db1b775819ca4365f48fbf72642f17d962548d6eb03ab23be022a72bd9a46ab295c6379b3f68d0bd246e71849e9219a43f842cfb82c4f22b5006f1eb2a222f15f59250cac0e837cd15b62c9f789b26ea7db61ec0b8ad101cc44d671e513dd53d4bc32b72572c1b881c17376db2de859ab3ac456c1e00faac09e35c22ff164d9a8f3f69dd5fd4c02bc3622e653834a6679babf99b731f015717b3564", @typed={0x8, 0x15a, 0x0, 0x0, @u32=0x5}, @nested={0x4, 0xe0}, @generic="c7e20641b1fb055d7f3c3ac1f77ec93461963eeb05f9475227c1b504253d18370613796e7daac829d98546363f47d3cda013701b51680ae1b1807b435d2ac7edf0a46adfa9cfead1010714cc93d58311dbd60f9eaf03b5d474d1ca4ffe8ebadff3717e85cc4e54c190d0f572030783d983cac38e9e400fccba939562207630e2095db6b4f698da673ad4c595bbb6", @nested={0x4, 0x81}, @typed={0x4, 0x10d}]}, @nested={0x4, 0xd8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfff}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x80000001}]}, 0x1308}, 0x1, 0x0, 0x0, 0x44040}, 0x20008001) (async) r9 = ioctl$auto_NS_GET_USERNS(r2, 0xb701, 0x0) write$auto_tracing_entries_fops_trace(r9, &(0x7f0000001b40)="6d520f4c9a329bf28e4afaf282854ebe0a9782b8b76386", 0x17) (async) ioctl$auto_AUTOFS_IOC_SETTIMEOUT32(0xffffffffffffffff, 0xc0049364, &(0x7f0000001b80)=0x10000) mmap$auto_sg_fops_sg(&(0x7f00007ff000/0x800000)=nil, 0x800000, 0x0, 0x10, r2, 0x200) sendmsg$auto_NFC_CMD_DEP_LINK_UP(r5, &(0x7f0000001c80)={&(0x7f0000001bc0)={0x10, 0x0, 0x0, 0xa124dc95abf14c4e}, 0xc, &(0x7f0000001c40)={&(0x7f0000001c00)={0x2c, 0x0, 0x20, 0x70bd2a, 0x25dfdbfd, {}, [@NFC_ATTR_IM_PROTOCOLS={0x8, 0xd, 0x46d}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, 0xe2f}, @NFC_ATTR_IM_PROTOCOLS={0x8, 0xd, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x8802) r10 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000001d00), r9) sendmsg$auto_NFSD_CMD_LISTENER_SET(r2, &(0x7f00000032c0)={&(0x7f0000001cc0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000003280)={&(0x7f0000001d40)={0x151c, r10, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@NFSD_A_SERVER_SOCK_ADDR={0xa4, 0x1, 0x0, 0x1, [@NFSD_A_SOCK_ADDR={0x9e, 0x1, "0315b39683e94744b837e33773f674c574f06d2f331ff65bd0d0b4be3b5ecc2b79445ce094ceba7499a9a1f65b95bd812d4ba808dfadf3d60df99363617c1669e60740785ff4ff5722fb20599631c6337f984175eeda0d2227b47e4ee7d7f716a790f5874d546403091eca1733709fc2dcb70fba49b41b13fa338ccabb36ffb54be75cf5bcfc1a1cf4cf5c584144b60a9b98739dc72d15bce51e"}]}, @NFSD_A_SERVER_SOCK_ADDR={0x126c, 0x1, 0x0, 0x1, [@NFSD_A_SOCK_TRANSPORT_NAME={0x6, 0x2, '[\x00'}, @NFSD_A_SOCK_ADDR={0x82, 0x1, "33e2cd05a765a4f962ab17cebe4da4eae0c2d1a1738e28506fbbdc79a80e1b27fc7ce51ac16bf3bb3a93f79b8652413de0c70e5c65f137d7d3ccaaa045060a9c0ee387e3b5aa7323aac1093af3b48dc9a0bfbcd7fa4b11d6eae0ed71f5a4f1996127287d7ea5cd6a18a964da4a865f312621d935602493be2e6d4a76c862"}, @NFSD_A_SOCK_ADDR={0xf0, 0x1, "e81ab1c7ae2bc0d0618f67a3025c24dc567b40d0d10718c4d68627c4fa655817680722ecc4c37e422e74af6cf24aedea51c2890ca814b6ff78416a5d46d5b227783f04b7eabfacf6156f3be22bd12d65cc98af46df42d516373c1a014036e7d326c48c37adb2d05220eda48d0139360361d52cd495ac6c235e93681f677b10bb11a5cb45c9e5ae127e6afe40eef1755504bd546114b76fc08b4f84450a13de0757576cd54dfe730a4d43c74db48d682dcc94cbae12db8157a4828b7bfd06c9c5020ead59c90da615ed258ae9b33e161bbe600e8f80998de46058c8014680a27a0ad8b7c42f8a0431c98d022d"}, @NFSD_A_SOCK_ADDR={0x1004, 0x1, "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"}, @NFSD_A_SOCK_TRANSPORT_NAME={0x8, 0x2, '^,}\x00'}, @NFSD_A_SOCK_TRANSPORT_NAME={0x8, 0x2, '\t&\'\x00'}, @NFSD_A_SOCK_TRANSPORT_NAME={0x10, 0x2, '/dev/random\x00'}, @NFSD_A_SOCK_TRANSPORT_NAME={0x24, 0x2, '/sys/kernel/debug/bluetooth/sco\x00'}, @NFSD_A_SOCK_ADDR={0x9b, 0x1, "db505cb0d1ce6f00acb224a7019977331471232c232ed55bf90d4272293647a4693d2d3cbb789eb287025e91895797ac64a39e53627c780e1b6fe58313da91b692f657ed40d36555679eccef4dee1335e9e4a90dc567f04a5456e2c3c3f2af1fbe43d14212f656e02e3c3801dddc70b7935938fb88e3064dde0489a8c69ef1d838517441d506c755e04f2c8cbf1c7c20af5e61d7c5ffa5"}, @NFSD_A_SOCK_TRANSPORT_NAME={0x5, 0x2, '\x00'}]}, @NFSD_A_SERVER_SOCK_ADDR={0xd4, 0x1, 0x0, 0x1, [@NFSD_A_SOCK_ADDR={0x5a, 0x1, "e9e976e864c3b76e5a9ad00fa37c87599c9093c521377dc4d5988563378b5445f117925f7719963b7731e0fc27c390aaa85c78f8c524323f36149e546c8d03c78017c77ba6da17a834ddd6fffe695c40faac59a580b6"}, @NFSD_A_SOCK_ADDR={0x10, 0x1, "60fcf343c5bbebe4f7de48b1"}, @NFSD_A_SOCK_TRANSPORT_NAME={0x10, 0x2, '/dev/random\x00'}, @NFSD_A_SOCK_ADDR={0x54, 0x1, "95ef62f54e031ace814974e651c62cf2d4e979948d2bcb01650f3a54dbbe1fb021d4a94f0991a7c13b0e195ac51d29f65a65ba3b93d6f33f0fcb95aaff026cf619f084561c169e8281aa40e099a688f2"}]}, @NFSD_A_SERVER_SOCK_ADDR={0x114, 0x1, 0x0, 0x1, [@NFSD_A_SOCK_TRANSPORT_NAME={0x5, 0x2, '\x00'}, @NFSD_A_SOCK_ADDR={0x19, 0x1, "d6348ab098bcab780433658b0196a7413ee3d4e3f0"}, @NFSD_A_SOCK_TRANSPORT_NAME={0x11, 0x2, '+,^3,!,-}@+*\x00'}, @NFSD_A_SOCK_TRANSPORT_NAME={0x6, 0x2, '+\x00'}, @NFSD_A_SOCK_ADDR={0xbc, 0x1, "fc9f833a83c28140b9ec4bfa711c49a63e93c9d4a8cfac613f93c9f7c768b6d70cf70b63c132dcfbaa75aa6ab1176e397bbf8fca18fc8c5d16b76b152be42074f40bf2b0416eb3dcfc7f5e7a1ac046e4a2cd1f7fd3e6dc2c27fff85aecfb9102358761cf066647d0b79aad26d602931e241f800a54d474d9b34cb1d091fdf85352a862d17733f746adab526e7557c9f1400b9743a8c1ae0f7847cfa603056d4c05f57a483acd57dca44d220cd0be3af03f6ff0d36840119d"}, @NFSD_A_SOCK_TRANSPORT_NAME={0x14, 0x2, '/proc/self/maps\x00'}]}, @NFSD_A_SERVER_SOCK_ADDR={0x10, 0x1, 0x0, 0x1, [@NFSD_A_SOCK_TRANSPORT_NAME={0xc, 0x2, 'nl80211\x00'}]}]}, 0x151c}, 0x1, 0x0, 0x0, 0x14}, 0x40040) sendmmsg$auto(r5, &(0x7f0000003580)={{&(0x7f0000003300)="4b34606e7e10122f1ef4969f63", 0x88, &(0x7f0000003440)={&(0x7f0000003340)="448dd3081be4174a3b86f04e13c510898ad7200819d7ba8e9869559df4a19aa77537647b4caa23bddae14083d748fe01a36351935e215315db25a8d6595fdabc7814b7b348ffda4c1c9d39c9a3771479f90822ed96f0da91dadd201afe007cfbaa6cd6cf5c7153b120c3426c9cff2373f44b9838b174a27dddaac659fc5709523dd019adf80b7612b39bc32a2d24ded82feb8a72673e526d3611a368fd003b40b44950d4985df799f5d04253f99417bb16ccc3f5144fffa4a7b485cc9abbd5cd504cf2b2f8093ef582be48840b7a9f4f234e15599142dff941e199670b2e01"}, 0x3, &(0x7f0000003480)="7632c754bef97564107b54c87af0f93f0ecb0d36f1fb6266aaf0e0f6e08fb794772f3a29f90e5748c039931c7bbe8b796ac5310452bb6453d039811d14a4ba6575834f59d48034cc94275c7e094f32f77e7d81f4203cc8fccab3f9246fde270b7fe8af559d1ab17ba6f303f3498805193cbc04263a96b9b2f56de8070d24371970e9eea6d0285de9ffa0c623d909882cba4dcf5e32006e9ec042a3628c10b7586a5624155396b0548785c224f09787a8a6b5db6f9292b52b6ae8ed81ff9951d9dec2e7d0e6186cdb48482f8458899c2b58a32200", 0x1, 0xf}, 0x9}, 0x274, 0x5) unshare$auto(0x3) (async) getsockopt$auto_SO_NO_CHECK(r9, 0x5, 0xb, &(0x7f00000035c0)='/dev/kmsg\x00', &(0x7f0000003600)=0x7) r11 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000003680), r9) sendmsg$auto_NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r9, &(0x7f0000004a00)={&(0x7f0000003640)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000049c0)={&(0x7f00000036c0)={0x12f4, r11, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_PHY_CAPS={0x1142, 0x18, 0x0, 0x1, [@typed={0x1004, 0xa7, 0x0, 0x0, @binary="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"}, @generic="425ca4569cd7fab61d7f", @generic="1a2158c9060278d35eeef179606dc464a7d00af35ca00350a45de0f4ea53f88b", @typed={0x8, 0xef, 0x0, 0x0, @uid=r7}, @nested={0x8, 0xd3, 0x0, 0x1, [@nested={0x4, 0x33}]}, @typed={0x8, 0x9b, 0x0, 0x0, @fd=r0}, @typed={0x14, 0x1f, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @generic="019148252448556bcd3af7d351db571646ac16c42c581e82293ecb6b993fcac5619499e94246c43bd234653aa58fa6ba314baffdb68f14fd529300787a79b12534fdd2959489546e4db60a3b2f529da4f3e78a0180a29d8e4ded375ef8a3078c2012459a87c735841a1ed3c5a772a9920bee73bc9c2cbf1a9c49c3790cb03fb2a979d915d038c571382ca36a449de3decc2e592dd8c56e0728bf77133281c6c48d4cb192b8a64048a92679c71fde6ff836982e7f5ae0f2fafb88441821631b715a2a430f9936cabfbfa3ce919e5e7dba4256c4ad1af5bd5e8868c6af7793068aeecf0c65"]}, @NL802154_ATTR_PID={0x8, 0x1c, r8}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0x3}, @NL802154_ATTR_SCAN_TYPE={0x5, 0x1f, 0x87}, @NL802154_ATTR_PID={0x8, 0x1c, r8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0xa67d}, @NL802154_ATTR_SEC_KEY={0xc, 0x30, 0x0, 0x1, [@typed={0x6, 0x120, 0x0, 0x0, @str=')\x00'}]}, @NL802154_ATTR_WPAN_PHY_CAPS={0x15e, 0x18, 0x0, 0x1, [@typed={0xa, 0x9c, 0x0, 0x0, @str='\'{[#-\x00'}, @nested={0x57, 0x114, 0x0, 0x1, [@typed={0x8, 0x119, 0x0, 0x0, @fd=r1}, @nested={0x4, 0xa2}, @nested={0x4, 0x89}, @generic="80efed7326e82e34f230269c96f54d832c772b1b6c6ef694d1d9a30d3190f61fbf3352d0f4f3462da9c4a56e1738e7ab8b278a0d16a795722e62adeba0aeb0d6677832"]}, @typed={0x8, 0x78, 0x0, 0x0, @uid=r7}, @typed={0x8, 0x52, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}, @typed={0xc, 0x7c, 0x0, 0x0, @u64=0x8}, @generic="978d0baaa671b9c9a9121274d5455f3cedec6f4ca9caed6f7f7b3d417000bd758daa1cc3c5e58c01e02deebdf2b1b88935deda14acc237ece6b6f544b40d2888a77bd144ffda4057f7de", @typed={0x8, 0xc3, 0x0, 0x0, @str='\t&\'\x00'}, @nested={0x86, 0x8b, 0x0, 0x1, [@generic="1fb7c15dd20f4dbb0dde416b27ea1480138fb6e6a8fb353c7df9fd5c46a509c301c65f2a56d9147841e1749e38702182c34189ddd784ad19c8a9ba5b2df2", @nested={0x4, 0x22}, @nested={0x4, 0xb8}, @nested={0x4, 0xdd}, @generic="b1f7c56462fa342ac819d4c7830f254d0979383e96f7f4654e78b3f5b12a7201131240e5aba59d9865340e2b0f3eea6eda3a82f13c704f46"]}]}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x5}]}, 0x12f4}, 0x1, 0x0, 0x0, 0x4000000}, 0x48801) (async) ioctl$auto_BTRFS_IOC_QGROUP_CREATE(r2, 0x4010942a, &(0x7f0000004a40)={0x7, 0xa}) 8m44.268394079s ago: executing program 5 (id=5630): mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/sda\x00', 0x84100, 0x0) dup$auto(0xffffffffffffffff) r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) write$auto(r0, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) unshare$auto(0x20000080) mmap$auto(0x0, 0x9d90, 0xdf, 0xeb1, 0x401, 0x8000) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x14f602, 0x0) read$auto_buffer_subbuf_size_fops_trace(0xffffffffffffffff, 0x0, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x0) write$auto(r1, 0x0, 0x10007c) fcntl$auto_F_GETOWN(0xffffffffffffffff, 0x9, 0x6) openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/set_event\x00', 0x121000, 0x0) openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) socket(0x2, 0x1, 0x100) r2 = wait4$auto(0x0, &(0x7f0000000080), 0xff, 0x0) prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x8, 0x3, r2, 0x6, 0xffffffff00000000) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r3, &(0x7f0000000180)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8\xa6\xb6\xaa\x96/OX\xba\x02\xc5\xc6B\x1d}Y\xbc@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf\xd6f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8', 0x100000a3d6) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/admmidi2\x00', 0x40080, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x10000000000001ff, 0x7, 0xd3e, 0x20, 0x9687, 0x100000000000003, 0x3c2a19d5, 0x6, 0x3, 0x62, 0x8, 0x7, 0x6d3f, 0x6, 0xa, 0xfffffffffffffffe]}, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000e3, 0x40000000000ebe, 0xffffffffffffffff, 0x8000) r4 = socket(0x2, 0x2, 0x0) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x50) r5 = io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0xe, 0x2, 0x6, 0x5, 0x8, 0xffffffffffffffff, [], {0xd74c, 0x6, 0x2, 0x29f, 0x100, 0x7f, 0x101, 0x6, 0x2}, {0xff, 0x1, 0x10001, 0x7, 0x1, 0x40, 0x76c5, 0x400005, 0x100000005}}) io_uring_enter$auto(r5, 0x9, 0x820e, 0x6, 0x0, 0x18) ioctl$auto_EXT4_IOC_MOVE_EXT(r5, 0xc028660f, &(0x7f0000000040)={0x0, r4, 0x2, 0x2, 0x1, 0x2}) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) 8m29.162909841s ago: executing program 35 (id=5630): mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/sda\x00', 0x84100, 0x0) dup$auto(0xffffffffffffffff) r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) write$auto(r0, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) unshare$auto(0x20000080) mmap$auto(0x0, 0x9d90, 0xdf, 0xeb1, 0x401, 0x8000) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x14f602, 0x0) read$auto_buffer_subbuf_size_fops_trace(0xffffffffffffffff, 0x0, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x0) write$auto(r1, 0x0, 0x10007c) fcntl$auto_F_GETOWN(0xffffffffffffffff, 0x9, 0x6) openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/set_event\x00', 0x121000, 0x0) openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) socket(0x2, 0x1, 0x100) r2 = wait4$auto(0x0, &(0x7f0000000080), 0xff, 0x0) prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x8, 0x3, r2, 0x6, 0xffffffff00000000) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r3, &(0x7f0000000180)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8\xa6\xb6\xaa\x96/OX\xba\x02\xc5\xc6B\x1d}Y\xbc@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf\xd6f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8', 0x100000a3d6) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/admmidi2\x00', 0x40080, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x10000000000001ff, 0x7, 0xd3e, 0x20, 0x9687, 0x100000000000003, 0x3c2a19d5, 0x6, 0x3, 0x62, 0x8, 0x7, 0x6d3f, 0x6, 0xa, 0xfffffffffffffffe]}, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000e3, 0x40000000000ebe, 0xffffffffffffffff, 0x8000) r4 = socket(0x2, 0x2, 0x0) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x50) r5 = io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0xe, 0x2, 0x6, 0x5, 0x8, 0xffffffffffffffff, [], {0xd74c, 0x6, 0x2, 0x29f, 0x100, 0x7f, 0x101, 0x6, 0x2}, {0xff, 0x1, 0x10001, 0x7, 0x1, 0x40, 0x76c5, 0x400005, 0x100000005}}) io_uring_enter$auto(r5, 0x9, 0x820e, 0x6, 0x0, 0x18) ioctl$auto_EXT4_IOC_MOVE_EXT(r5, 0xc028660f, &(0x7f0000000040)={0x0, r4, 0x2, 0x2, 0x1, 0x2}) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) 2m57.585550926s ago: executing program 7 (id=6826): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x1cb602, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/midiC2D3\x00', 0x20c00, 0x0) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x82040, 0x0) socket(0xa, 0x1, 0x100) modify_ldt$auto(0x1, 0x0, 0x10) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, 0x0, 0xc0000, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) wait4$auto(0x80000000, 0x0, 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/virtual/block/loop10/queue/add_random\x00', 0x80302, 0x0) sendfile$auto(r0, r0, 0x0, 0x3) mmap$auto(0x0, 0x4020009, 0xdf, 0x400000000e31, 0xffffffffffffffff, 0x0) clock_gettime$auto(0xfffffffffffffff0, 0x0) mmap$auto(0x6, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x7fff) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r1 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x147) move_pages$auto(0x1, 0x20007, 0x0, 0x0, 0x0, 0x8000000000000000) modify_ldt$auto(0x7f, &(0x7f0000000040)="bfb062dd69b5d383db8aba371f458c658032c644bf0380f1d9bae4758ae99e1f1e2b960cd65c7957dd592d96e7164ed84b7e05fd03b45eadec7235deb8da1b70cc7e3371febf7d5c3d44ee0345c2a8065e84e1a27c30dbde", 0x2400000000) ioctl$auto_FIDEDUPERANGE(r1, 0xc0189436, 0x29d) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0x2003f2, 0x15) mmap$auto(0x0, 0x2000a, 0x10000000000df, 0xeb2, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) r2 = socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) statx$auto(r2, 0x0, 0x1003, 0x4005, 0x0) setsockopt$auto(0x3, 0x1, 0x41, 0x0, 0x88) setsockopt$auto(0x3, 0x1, 0x41, 0x0, 0x88) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) 2m55.95565111s ago: executing program 7 (id=6832): mmap$auto(0x0, 0x400008, 0x36, 0x1009b72, 0x2, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x10004) mprotect$auto(0x200000000000, 0x806121, 0x4) sched_setattr$auto(0x0, &(0x7f0000000000)={0x1000, 0x4c, 0x7fff, 0xa9, 0x0, 0x4, 0x100400c, 0x9, 0xb, 0xfffffff8}, 0x0) 2m54.905133127s ago: executing program 7 (id=6836): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) sendmmsg$auto(0x3, 0x0, 0xfffffff7, 0x3) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) mmap$auto(0x0, 0x40006, 0xf, 0x20009b72, r0, 0x28000) openat$auto_drm_crtc_crc_data_fops_drm_debugfs_crc(0xffffffffffffff9c, &(0x7f0000000000), 0x8080, 0x0) r1 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/fb0\x00', 0x20401, 0x0) futex_wait$auto(&(0x7f0000000040)="4d090dea05e6d6d4ebd62a483cf9507a6ff1f4269949a39b6a8124cc93d7636ce68eb605d1ab46b93e329b1b4125f2d52c100298b35818c4c9f57ff1da25df4af26c820670828d104356fdffcf954520f10637a3e521312cc47e99f3d6de5c9119c2c456a32028b4cbb88985a6674f9c50c2890e87248ba545772c6d3924a4bddbe424ec7b02ce7e1dc864eb6c9d42392c91c4ede499e530e4bb11d74affd584f87969", 0x1, 0x7fffffffffffffff, 0xfffffffc, &(0x7f0000000140)={0x6, 0xa}, 0x0) ioctl$auto(r1, 0x40044620, 0xffffffffffffffff) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) getdents$auto(r2, 0x0, 0x4) r3 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x40000, 0x0) init_module$auto(0x0, 0x1ff, &(0x7f00000002c0)='\x94\x19\xac\x80/der/S\x1auenc9\xf6a\x1b`\b\xab\xfaf\x94;\xc9\xc2,x1y\xd4\x1e\xba\xe4\x84\xcbWW\x8eK`lT\x9c\xc1\x98G \xad\v\x82U\x80w\xac\xe4OW?\xd6\x1e]\xac\x19\xf2\xc2\x98\x9d\xe3-\x95\xc1\x90\x99J\xccB\xd2,\x99R\x85\xd6h\xc8\xe4Ex\x18\x19\x8b\x9e\x05\a\x94l\xde\xc1x/lB\xf6\xe6\x00\xef6\xd6wJ') ioctl$auto_SNDCTL_SYNTH_MEMAVL(r3, 0xc004510e, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000400)='/dev/amidi2\x00', 0x201, 0x0) mmap$auto(0x0, 0x400008, 0x803c, 0x9b72, 0xffffffffffffffff, 0x8000) statmount$auto(0x0, &(0x7f0000000180)={0x40a, 0x1, 0x44f, 0x7, 0x1, 0x1007181, 0x8a0d, 0x7, 0x7, 0x7, 0x86, 0x26, 0x4, 0x200000000001, 0xfffffffffffff343, 0xfffffffffffffffa, 0x500000000000000, 0x0, 0x30, 0x0, 0x864, 0xe, 0x22000, 0x9, 0x0, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x2d3d3baf, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffffffffffd, 0xfffffffffffffffd, 0x0, 0x0, 0x4]}, 0x9, 0x9) r4 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000000180), 0x1541, 0x0) ioctl$auto__ctl_fops_dm_ioctl(r4, 0xfffffff7effffd06, &(0x7f00000001c0)) prctl$auto(0x1000000003b, 0x0, 0x4, 0x400, 0x400) r5 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dri/card1\x00', 0x101002, 0x0) ioctl$auto(r5, 0x9000643a, 0xc35) execve$auto(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)=&(0x7f00000003c0)='/dev/dri/card1\x00', &(0x7f00000004c0)=&(0x7f0000000480)='wlan1\x00') connect$auto(0x3, 0x0, 0x55) r6 = socket$nl_generic(0x10, 0x3, 0x10) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) madvise$auto(0x0, 0x240007, 0x19) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000700), r6) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000740)={'wlan1\x00'}) 2m50.964185772s ago: executing program 7 (id=6842): r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram5\x00', 0x14fa02, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x130) fallocate$auto(0x8000000000000003, 0x0, 0x9, 0x4cbd5d) rename$auto(&(0x7f0000000500)='./file0\x00', &(0x7f0000000100)='./cgroup\x00') fdatasync$auto(r0) open(&(0x7f0000000040)='./file0\x00', 0x1e9e02, 0x61) mincore$auto(0x80000000001, 0x2, 0x0) write$auto(0xca, &(0x7f0000000000)='\x04\x1d\x19\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xa4Cn\xb2./jn>9\xd2\xdb\x88\xf4\x1aVj\x13j\xe1\x96\xf7\xc2\xd3qm\xe6q\xf9\xa6u\x8eZ\x00\xf8*C]\xfd)/\xf3\xa1\x92|\x06|\xd0\x82\x93\xa5\x9a5if\xd0\x8e%g,\xc5\xec\xef\x87\x19\x17\xb0\xe1s\xf6U\xc0\x90r\xc5\xc8H\xa3\x9d\xce\x98\xe7\xb1B:\x179\xdc8\xa8) \x15\xce\xd8\x86\xff-\x80\xf5jMj\xda\x8f\x03EO\xe6\xa4Q\x81+v\xc9\xb8\x00\xcf\x94_\xa7\xadV\xc9\x7f;1R\xa0\x7f\xbe\x1e\x83\an/w[i\th\x9c\xb8\xd1\xed\xba\\\v\xe1\v\x81\xcc\xba\x03-N@ \x14\x1e\n\xe9g\x9fF\x05\xc8\x9f\xe5[\xba\xd2V\x9b\xc1\x9f\xf1%\x9c\xba\xf9\xb4\xa8\xd4\x05G\xf6\x82\xf3m\xe6V\xba\xa0\xf9K\x15\xcc_H\xce\xfd\xe2\x88\"\xe0\xd5Ld\x7f\x1c\x90^\x8d%\xb4', 0x9) kexec_load$auto(0x7ceb, 0x5, 0x0, 0xff) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/pts/ptmx\x00', 0x40001, 0x0) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$auto_TCFLSH2(r2, 0x80045439, 0x0) ioctl$auto(0x1, 0x5421, 0xa) ioctl$auto_TIOCSETD2(r1, 0x5423, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) ioctl$auto(r1, 0x89f2, r1) ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, 0x0, 0x400, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x109401, 0x0) 2m49.985320018s ago: executing program 7 (id=6845): r0 = openat$auto_kmsg_fops_printk(0xffffffffffffff9c, &(0x7f00000006c0), 0x121300, 0x0) readv$auto(r0, &(0x7f0000000040)={0x0, 0x5}, 0x6) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/pagemap\x00', 0x80800, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000140), 0x4cb00, 0x0) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) unshare$auto(0x40000080) bind$auto(0x3, 0x0, 0xb) socket(0x1d, 0x2, 0x7) openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fb0\x00', 0x8002, 0x0) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) preadv2$auto(r1, &(0x7f0000000080)={0x0, 0x80000000}, 0x6, 0xffffffffffffffff, 0x4, 0x2e) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x4, 0x2000c, 0xde, 0x20eb1, 0x40000000000a5, 0x8000) r2 = memfd_create$auto(0x0, 0x4) r3 = socket(0xa, 0x3, 0x3a) statx$auto(r2, 0x0, 0x1000, 0xbdfc, 0x0) setsockopt$auto(r3, 0x29, 0x14, 0x0, 0x56b) r4 = socket(0xa, 0x2, 0x3a) setsockopt$auto(r4, 0x29, 0x14, 0x0, 0x568) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x28, 0x1, 0x0) connect$auto(0x3, &(0x7f00000000c0)=@vsock={0x28, 0x0, 0x2710, @host}, 0x55) mknod$auto(&(0x7f0000000180)='./file0\x00', 0x4, 0x2) accept$auto(0x3, 0xffffffffffffffff, 0xffffffffffffffff) setns(0xffffffffffffffff, 0x60020000) umount2$auto(&(0x7f0000000000)='.\x00', 0x3) socket$nl_generic(0x10, 0x3, 0x10) 2m47.992951192s ago: executing program 7 (id=6850): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vcan0\x00'}) r0 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fb0\x00', 0x20401, 0x0) ioctl$auto_TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000080)=0x400) ioctl$auto_FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000080)) fanotify_init$auto(0x5, 0x2000000000002) socket(0x2, 0x2, 0x1) socket(0x2, 0x801, 0x106) socket(0x26, 0x80805, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x12ba7e, 0x145) fanotify_mark$auto(0x0, 0x1, 0x9, 0x4, 0x0) close_range$auto(0x2, 0xffffffffffffffff, 0x0) readv$auto(0x0, &(0x7f0000000080)={0x0, 0xc08a}, 0x33) socket(0xa, 0x3, 0x3a) bind$auto(0x3, &(0x7f0000000040)=@tipc=@nameseq={0x1e, 0x1, 0x0, {0x43, 0x1, 0x3}}, 0x6a) r1 = getpid() openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x101181, 0x0) process_vm_readv$auto(r1, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000040), 0xffffffff}, 0x6, 0x0) setsockopt$auto(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x14) recvmmsg$auto(0xffffffffffffffff, &(0x7f0000000200)={{0x0, 0x2, &(0x7f0000000140)={0x0, 0x4da}, 0x6, 0x0, 0x8, 0x7ff}, 0x1000}, 0xffffffff, 0x5, 0x0) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) ioctl$auto(0x3, 0x400454ca, 0x38) r2 = socket(0x2, 0x3, 0x2) setsockopt$auto(r2, 0x0, 0x8, 0xfffffffffffffffc, 0x0) mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb2, 0x401, 0x8000) write$auto(0x3, 0x0, 0xfdf3) 2m32.694989943s ago: executing program 36 (id=6850): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vcan0\x00'}) r0 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fb0\x00', 0x20401, 0x0) ioctl$auto_TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000080)=0x400) ioctl$auto_FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000080)) fanotify_init$auto(0x5, 0x2000000000002) socket(0x2, 0x2, 0x1) socket(0x2, 0x801, 0x106) socket(0x26, 0x80805, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x12ba7e, 0x145) fanotify_mark$auto(0x0, 0x1, 0x9, 0x4, 0x0) close_range$auto(0x2, 0xffffffffffffffff, 0x0) readv$auto(0x0, &(0x7f0000000080)={0x0, 0xc08a}, 0x33) socket(0xa, 0x3, 0x3a) bind$auto(0x3, &(0x7f0000000040)=@tipc=@nameseq={0x1e, 0x1, 0x0, {0x43, 0x1, 0x3}}, 0x6a) r1 = getpid() openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x101181, 0x0) process_vm_readv$auto(r1, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000040), 0xffffffff}, 0x6, 0x0) setsockopt$auto(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x14) recvmmsg$auto(0xffffffffffffffff, &(0x7f0000000200)={{0x0, 0x2, &(0x7f0000000140)={0x0, 0x4da}, 0x6, 0x0, 0x8, 0x7ff}, 0x1000}, 0xffffffff, 0x5, 0x0) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) ioctl$auto(0x3, 0x400454ca, 0x38) r2 = socket(0x2, 0x3, 0x2) setsockopt$auto(r2, 0x0, 0x8, 0xfffffffffffffffc, 0x0) mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb2, 0x401, 0x8000) write$auto(0x3, 0x0, 0xfdf3) 31.93350782s ago: executing program 2 (id=7175): unshare$auto(0x40000080) write$auto(0xffffffffffffffff, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x5e1041, 0x0) ioctl$auto_SNDCTL_DSP_GETBLKSIZE(r0, 0xc0045004, &(0x7f0000000000)) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r1 = io_uring_setup$auto(0x5, 0x0) close_range$auto(0x2, r1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2b, 0x1, 0x0) mmap$auto(0x0, 0x400008, 0x805, 0x9b72, 0x2, 0x8000) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0xffff, @remote}, 0x6d) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$auto(0x3, 0xae64, 0xffffffffffffffff) close_range$auto(0x2, 0x8, 0x0) syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000040), 0xffffffffffffffff) unshare$auto(0x6) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8004) close_range$auto(0x2, 0xffffffffffffffff, 0x48) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) ioctl$auto(0x3, 0xc08c5336, 0x38) 30.69472936s ago: executing program 2 (id=7179): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda1\x00', 0xe6e43, 0x0) ioctl$auto_BLKFLSBUF(r0, 0x1261, 0xfb) 30.165797873s ago: executing program 2 (id=7183): mmap$auto(0x1, 0x4020009, 0xdb, 0x400eb1, 0xffffffffffffffff, 0x8002) r0 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) mmap$auto(0x0, 0x1, 0x4, 0xeb5, 0xffffffffffffffff, 0x8001) syz_genetlink_get_family_id$auto_tipcv2(0x0, r0) r1 = getpid() sendmsg$auto_TIPC_NL_BEARER_ADD(r0, &(0x7f0000000040)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={0x0, 0x224c}, 0x1, 0x0, 0x0, 0x4048804}, 0x4000) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x5, 0xa, 0x80000010, 0x2, 0x8002) recvmmsg$auto(0x3, 0x0, 0xfffc, 0x0, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socketpair$auto(0x3, 0x4, 0x8000000000000000, 0x0) close_range$auto(0x0, r2, 0x4000000000002) r3 = open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x100) copy_file_range$auto(r3, 0x0, r3, 0x0, 0x2, 0x0) close_range$auto(0x2, 0xffffffffffffffff, 0x0) open(0x0, 0x22240, 0x55) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x10400, 0x0) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) close_range$auto(0x2, 0x8, 0x0) r4 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) syz_genetlink_get_family_id$auto_ipvs(&(0x7f00000000c0), r2) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/thermal/cooling_device1/cur_state\x00', 0x20b42, 0x0) msgctl$auto_MSG_STAT_ANY(0x1, 0xd, &(0x7f0000000380)={{0xfffffff9, 0xee01, 0xffffffffffffffff, 0xfffffffe, 0x1, 0xdbf, 0x5}, &(0x7f0000000300)=0x8, &(0x7f0000000340)=0x5, 0x81, 0x6, 0x8, 0xfffffffffffffffb, 0x5, 0x7, 0x3, 0x100, @inferred=r1, @inferred=r1}) r5 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x109401, 0x0) ioctl$auto(r4, 0x8, 0x0) ioctl$auto_TIOCSTI2(r5, 0x5412, &(0x7f0000000080)) sendmsg$auto_NETDEV_CMD_PAGE_POOL_GET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000540)={0x0}, 0x1, 0x0, 0x0, 0x14}, 0x4) 29.103324083s ago: executing program 2 (id=7185): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/zswap/parameters/compressor\x00', 0xc0002, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sendmsg$auto_NL802154_CMD_SET_PAN_ID(0xffffffffffffffff, 0x0, 0x20000010) r1 = socket(0x29, 0x2, 0x0) socket(0x1, 0x4, 0x0) ioctl$auto(r1, 0x89ff, 0x24) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/net/igmp\x00', 0x0, 0x0) pread64$auto(r2, 0x0, 0x40001000f42a, 0x586) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/virtual/block/nbd15/queue/zone_append_max_bytes\x00', 0x3a1903, 0x0) writev$auto(r3, &(0x7f0000000200)={0x0, 0x9}, 0x7) socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x1e, 0x2, 0xffffffff, 0x0) r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptyyf\x00', 0x80b40, 0x0) ioctl$auto_TIOCSETD2(r4, 0x5423, 0x0) ioctl$auto_TIOCSTI2(r4, 0x5412, &(0x7f00000000c0)="c0") write$auto_ocfs2_control_fops_stack_user(r0, &(0x7f0000003900)='\t', 0x1) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/nfs/parameters/nfs_idmap_cache_timeout\x00', 0xc2902, 0x0) read$auto(r5, 0x0, 0x20) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/system/clockevents/broadcast/current_device\x00', 0x181400, 0x0) pread64$auto(r6, 0x0, 0x7, 0xd3f3) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) unshare$auto(0x40000080) unshare$auto(0x40000080) clone$auto(0x9001, 0x5, 0xffffffffffffffff, 0xfffffffffffffffc, 0x5) swapon$auto(0x0, 0x8000004) 25.228200714s ago: executing program 2 (id=7190): openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snd/controlC0\x00', 0x0, 0x0) unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) setresuid$auto(0xffffffffffffffff, 0x0, 0x0) sendmmsg$auto(r1, &(0x7f00000003c0)={{&(0x7f0000000280)="41f675947d2c9196af9c054c60ca237321ddd5c116ecd37e3fc09fc4", 0x4, &(0x7f0000000300)={&(0x7f00000002c0)="6980da76c01757314f5498"}, 0x2, &(0x7f0000000340)="e2e601bf792137793f5ee730ea1554c1af73edb847a96b773cbb60e56abc2e61db41b9f5255735bfabc04ec002f5a0879e51230ad16b1e1637da1b5ab8fdab8612ce60c2050aa6e8349855e70758a7558bc560b5de3f268fe11b9e006590d8ec167c0c772ceaba89", 0xffff, 0xfffffffc}, 0x7ff}, 0x253e, 0x37f34b9) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = prctl$auto(0x1000000003b, 0x1, 0x0, 0x5, 0x5) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x1) madvise$auto(0x0, 0x200007, 0x19) syslog$auto(0x3, &(0x7f0000000080)='..\x00k\xac\x8c\x1d\x0e\x98\x80\xd2\xaf\xa1\xf2\x1e\xe1R1\xa2\x8e\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\xa6\xf4#+\xfa\xd7\x01\xb9j<\v\xf47\n\xa7\xd2\x8b\x11e1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\xa1q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa2', 0x5) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS1\x00', 0x20000, 0x0) mmap$auto(0x20000000000, 0x1000000020009, 0x40, 0xeb1, r2, 0x9) mmap$auto(0x0, 0x400008, 0xdf, 0x4000000000009b72, 0x2, 0x8000) openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f0000002040)='/dev/snd/pcmC1D1c\x00', 0x80, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/class/devcoredump/disabled\x00', 0xe3102, 0x0) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/pagemap\x00', 0x201, 0x0) write$auto(r3, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0x10, 0x0, 0x0, &(0x7f0000000140)={[0x1ff, 0x4, 0x3f, 0x5, 0x2000000000948b, 0x3, 0x800295f4da0a, 0x2, 0x3, 0x62, 0x80000001, 0x50a7, 0x6d3f, 0x9, 0x3, 0xfffffffffffffffe]}, 0x0) 22.077281845s ago: executing program 2 (id=7198): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2b, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @remote}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000000)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xfffffffd}, 0xffff}, 0x5, 0x20000043) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/ram5/queue/discard_granularity\x00', 0x0, 0x0) mmap$auto(0x0, 0x10005, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) r1 = socket(0x15, 0x5, 0x0) r2 = getsockopt$auto(r1, 0x114, 0x2719, 0xfffffffffffffffc, 0x0) fcntl$auto_F_UNLCK(0xffffffffffffffff, 0xfff, 0x2) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/bus/usb/040/001\x00', 0x228000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) fcntl$auto(0x3, 0x4, 0xa553) select$auto(0x4, 0x0, 0x0, &(0x7f0000000100)={[0x1ff, 0x7, 0x2, 0x1, 0x948b, 0x1000000000000004, 0x15f4da0a, 0x39, 0x80000001, 0x2fffffffffffffe, 0x80000002, 0x7a142c64, 0x6d3c, 0x5, 0x84, 0xfb]}, 0x0) shutdown$auto(0x200000003, 0x2) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) preadv2$auto(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x80000000}, 0x6, 0xffffffffffffffff, 0x4, 0x2e) r3 = socket(0x10, 0x2, 0x14) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000140), r3) sendmsg$auto_NL80211_CMD_SET_MCAST_RATE(0xffffffffffffffff, 0x0, 0x814) r4 = openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000380)='/dev/cuse\x00', 0x0, 0x0) read$auto(r4, 0x0, 0x7fff) rt_sigqueueinfo$auto(0x0, 0x11, &(0x7f0000000000)={@siginfo_0_0={0x76bb, 0x3, 0x4, @_sigfault={0x0, @_trapno=0xfffffffe}}}) writev$auto(r3, &(0x7f00000000c0)={0x0, 0x710f}, 0x5) r5 = open(&(0x7f0000000480)='./cgroup.cpu/cgroup.procs\x00', 0x80842, 0x91) read$auto(r5, 0x0, 0x1) fchmodat2$auto(r2, &(0x7f0000000180)='./cgroup.cpu/cgroup.procs\x00', 0x45e, 0x6) 6.93892165s ago: executing program 8 (id=7238): read$auto(0xffffffffffffffff, 0x0, 0x20) 6.77432456s ago: executing program 8 (id=7232): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) madvise$auto(0x0, 0xffffffffffff0001, 0x15) (async) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) (async) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000002940)='/dev/fb0\x00', 0x841, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x2242, 0x0) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, 0x0, 0x191000, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/admmidi2\x00', 0x20000, 0x0) openat$auto_tracing_pipe_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/trace_pipe\x00', 0x20c01, 0x0) (async) openat$auto_tracing_pipe_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/trace_pipe\x00', 0x20c01, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D3\x00', 0x1, 0x0) (async) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D3\x00', 0x1, 0x0) select$auto(0x9, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0xffffffffffffffff, 0x15f4da07, 0x6, 0x10, 0x64, 0x80000020, 0x1000, 0xb, 0x9, 0x2, 0x8]}, 0x0) (async) select$auto(0x9, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0xffffffffffffffff, 0x15f4da07, 0x6, 0x10, 0x64, 0x80000020, 0x1000, 0xb, 0x9, 0x2, 0x8]}, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x8000000000001fd, 0x20000000007, 0x1, 0xbc3, 0x800, 0x3, 0x8, 0x10001, 0x400000000003, 0x3, 0xffffffffffffffff, 0xfffffffffffffffe, 0x6, 0x9, 0xffffffffffffff81, 0x4]}, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_drm_debugfs_entry_fops_drm_debugfs(0xffffffffffffff9c, 0x0, 0x503083, 0x0) (async) openat$auto_drm_debugfs_entry_fops_drm_debugfs(0xffffffffffffff9c, 0x0, 0x503083, 0x0) r1 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/driver/nvram\x00', 0xa502, 0x0) read$auto_proc_iter_file_ops_compat_inode(r1, &(0x7f00000001c0)=""/213, 0xd5) openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mouse0\x00', 0x2000, 0x0) close_range$auto(0x2, 0x8, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sda\x00', 0x8001, 0x0) (async) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sda\x00', 0x8001, 0x0) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x2020009, 0x203, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) mmap$auto(0x0, 0x2020009, 0x203, 0xeb1, 0xfffffffffffffffa, 0x8000) unshare$auto(0x40000080) ioprio_get$auto(0x3, 0x0) 4.084325712s ago: executing program 8 (id=7239): r0 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0xa, 0x0) socket$nl_generic(0x10, 0x3, 0x10) time$auto(&(0x7f0000000000)=0x101) r1 = getpid() process_vm_readv$auto(r1, &(0x7f0000000000)={0x0, 0x1003}, 0xffffffffffffffff, 0x0, 0x2a08326e, 0x0) openat$auto_proc_clear_refs_operations_internal(0xffffffffffffff9c, &(0x7f0000000600)='/proc/thread-self/clear_refs\x00', 0x2, 0x0) r2 = waitid$auto(0x5, 0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000180)={{0x8, 0x80}, {0x2, 0x6}, 0x4, 0x5, 0x1, 0x3, 0x0, 0x8000, 0x80000000, 0x7, 0xb7, 0x5d9, 0x5, 0x7ff, 0x2055}) prctl$auto(0x5, 0x80000000, r2, 0x78, 0x8) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) preadv2$auto(r3, &(0x7f0000000080)={0x0, 0x80000000}, 0x6, 0xffffffffffffffff, 0x4, 0x2e) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/ieee80211/phy0/netdev:wlan0/state\x00', 0x88002, 0x0) read$auto(r4, &(0x7f0000001200)='\x00', 0x100000004) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, 0x0, 0x42, 0x0) rseq$auto(&(0x7f0000000580)={0x5, 0x85, 0x9416, 0x1, 0x7, 0x6, "551e7285968d8e86bd4794a0e875ee9f7b35db28d0a7e72b7a19039c336389cb57a05ba0582cc612c6c0be4beb4cc54d8337d40c93638ba34c4a0435c32a206e808194584d8c359d418662d18943a5e3c6234e712a096205457b56f0a1e5d4d19835696295a54f38117d9d751e23b5fb61daa5a6b2c75148106dc167a20061e3fe55cc53ffadf62b0945da4b27515a0102a8d2d002a842362b4744b8972a5e11e8a6aab89c7b85947f3901d696d459641aa7e6b89b73387ec5fa2d2af6c992213d82c5774c4bcd4187585bcf652af094e988e75002e01f607abf5e25ae0f5548fd13175b681fc059c1f9160aef893bae78cf6cf62c30fa3f0c5c60cbe383a9c0cc1289519b0c7cff81cc3b4fec739fad19c662b0f98d607b61d825d10e2dd3b27b0f7a6b1adc5a452f344c39da5f086ea7c5d99674ca69c4f5635776e67c151bad72f906cd65231da3a55d6056e23b00686723714fabd752f3e2c86dafdee9d379230c0abeabfde9cf88cae099f3ccc76ea7e64a3734ced5ffe749a8012db53ad4d6a5e347bdd83bb409c1bdb762f4aba145df74833d73ccd583797d4fb4ed3e0c7c29d502aacaef02e114d9e60ca6b0bcb28f825f5d49e94ccd2f830933c39a3ba3782505453e3de872ad8da84a6a22aaa62970428bb9a95d1817dbeeded1c53c5d508dea6cc53d80153b05f954c263278bb9c8bc02f3b1805dd9299dc8b97ebff0165d615ba7bf5ce8c490f4dd273642a18267b0a61a594cb1d608f3dffb292991ea32bb647a6f9b951f283e118dc73b45843b5aa883410e402e3bec9ba889ec237462042cedaed761cca0c3b7058d3ffc276c9a75e18b79804f4e21650d911edbedb9fedd31959a8783b1e39d7d6408554bddb2a5d67703d225fe4422bf2367ca483e77fe479495be3235f4c77b3872a9e33946d2602486b83e84e7d8d1742d369e2d00b9dbb552385502c0f597b3615bed54de65af106b58d2b6bebbdd3fe625152527af965b67e9424da7be2e2574e1492aed568d4faaa9da508e0a2e687876fa291e38b7c3ef38643e2c49e0d46d0f2d53352da2f184c4ced2305865ab0ad1435644419773ea82336ffdf62dd325a6a8b2d199d96dba8a13bb5a86ff65b80818ceb37ee8a2b2a8813b33e474e5b110e1ed13dbc4f52efabbce38935a8ada53a0ed5a1a01453a254a1dc528492159591aa192ff6cfa0b372caf236c78d1a0c94dc37916746358b4cf3cc1c0132657818ce6465e58936dbf5991dfb74ff97382c066ba0ceb06ac4f0c005e4c9166e94161bc08e1c23df7ed3419b10ae229aa6bafb19e6af003c9e319956723d839dc50a7edd8d80bce971ba504e0aac811d76e65acffdc4f7e9836396ba98b824be6cc704c59f5849642b191437a5cf902fc1ac491e8c59241586c6791b282b5cfae57eb7e6792048c4769b5b3f21987ec5097e530fd001da5d2999db4ded708225e9a53a2b48d2be3401a063da3c19168769eccaef710d7c2e06818bb05c4a9aa0ce2785a5a6d2846bac9836f1905a9b042029dcc59d918450b6affb522fbf78116941c5cef4ecb82a2134ee8e67ea6091170b67bfc3abec9e2cfc8208d4ba3bb732230fe6a9470c1152ebdc31bbce93cb742b4484bc1cef4298ce897a36c7e8b3ef8bd1b0e3d4dfa46da8bf89b06d67d8a5da465e8f68f999ec38ef8d1b7972125d2d8492680f6698419313afb74b5f715c90aa5ca0a6ea5561acd89a25d0fd066234b1752d6535251be347d8e69afea162f0ae84aa08a1a5475e6860af5956babe0530b6349e918fa97f14e6a83f7e2054c85ec37424757c49c6b76a889cde8473eebc495ac1088fda54f5c70bb17ef4873bf7b524ae892cd8267adfcd1e7054ac0c8b904855f816cbab8a6c5332d2221060b97931130187e1f07b0b9fad917c06f56d3f9fbca9d0ad93c300d88a6025359eb609e86c2b604d6834cde1351ccb0ba238715d6a77953f58b23a78db05bc38cf1e47d5336226a966af0a88fa19b"}, 0x6, 0x3, 0xff) r5 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/stat\x00', 0xc0802, 0x0) write$auto_tomoyo_operations_securityfs_if(r5, &(0x7f00000001c0)="ce890a", 0x3) r6 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r6, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) r7 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/controlC2\x00', 0x8800, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r7, 0xc0045516, &(0x7f0000000040)=0x5) ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r7, 0xc0045516, &(0x7f0000000180)) mmap$auto(0x1, 0x40009, 0xdf, 0x13, 0xffffffffffffffff, 0x10001) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x0) kexec_load$auto(0xff, 0x2, &(0x7f0000000080)={@kbuf=0x0, 0x2, 0x8000, 0x3000}, 0x4) syz_genetlink_get_family_id$auto_ovs_vport(&(0x7f0000000200), r0) sendmsg$auto_OVS_VPORT_CMD_SET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES64, @ANYBLOB="84fe2f5b4a57b39bf000d0b31d8142f1140ffc0b96a3b04c41927b58686873de4a837813847591e28f4f65233142365cf30ea83f8a0b83e676a487cd6b7ed4183df292d713afbe723bb02b86bbabded81f9b566d6b956514b381ecdca9f9e6cd71e7291134ecef1ee497c02fe7a1f84239730ca0fa85ee826a03888803580ecce2a9eb2c7437252a526a3d5ea65be7", @ANYRES32=0x0, @ANYBLOB], 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x10) 3.781144347s ago: executing program 3 (id=7240): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x8200, 0x0) read$auto(r0, 0x0, 0x20) 3.490269386s ago: executing program 3 (id=7241): mmap$auto(0x0, 0xe983, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000) sysinfo$auto(0x0) r0 = socket(0xa, 0x801, 0x100) setsockopt$auto(r0, 0x6, 0x1e, 0x0, 0xfb3) 3.151643415s ago: executing program 3 (id=7242): bpf$auto(0x5, &(0x7f0000000000)=@iter_create={0x1e, 0x5}, 0x7) ioctl$auto_SOUND_MIXER_READ_RECSRC2(r0, 0x80044dff, &(0x7f00000001c0)="900633aea431dda019e1d80be95807b0afd44770f5a90e48f64b0c4bec3a7fc8caed5e26f88f77c3e8ee98906f9f5655214dfeeebcf7e76352e673e5eccac1ebcac70780faf5a8cf8553b1c5630a7c74cdcf4474bfbdc9d1c6ae5768728cc62243ef79f68f34d8d0df8ee7c3f37ad7370fbddcfc95ef538f362fa02dd9809534be7a1033ec56093c0e4bd2e60ace2d956e9052a5e276795a4dcfcd5a2ee868b48d543006ad1120212d2c") r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x1c1080, 0x0) read$auto_proc_reg_file_ops_compat_inode(r1, &(0x7f00000010c0)=""/4096, 0x1000) io_submit$auto(0x5, 0xb12, &(0x7f0000000080)=&(0x7f0000000040)={0x7, 0x9f33, 0x81, 0x6, 0x8, r1, 0x2, 0x81, 0x7, 0x0, 0xfffff9bb, r1}) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) capset$auto(&(0x7f0000000200)={0x20080522}, 0x0) name_to_handle_at$auto(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x2) setreuid$auto(0x3, 0x7) r3 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/024/001\x00', 0x40001, 0x0) ioctl$auto_USBDEVFS_CONTROL(r3, 0xc0185500, &(0x7f0000001040)={0x80, 0x6, 0x302, 0x401, 0x11, 0x6, 0x0}) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/system/memory/memory12/power/control\x00', 0x100, 0x0) close_range$auto(0x2, 0x8, 0x0) r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xae00, 0x0) ioctl$auto_KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$auto(0x3, 0x4018aebd, r4) write$auto_ocfs2_control_fops_stack_user(r2, &(0x7f00000000c0)="87564bb52dfd1f2c23894d66d1aecc1501a37b81fba4c57e9f77ba2dc6deb8b52534f33d57812b8ee8e9b21ee1bc9235a29059b4c4140ffdccbf61954c3f3f4161300a998f46df69b5cb58ea2773a7d2f72f1c7f810def2ac7f33564620b76059cfc254ddaed993c81b20cae412523653b3939141d520375446e2f6dcf5ca1a8020a3545d56a51086a580af580505abc2adca550278da3fecbf6baa522c2e3f81266e94c091075d12b8c432252605005b78cbe809335a9602c8fe10bfac06e61ada57cd315d590fc9782e00cf5683d03a54c842eb65c8936d707a25ae219268f671d45ea842223bb139ed414c7", 0xed) bpf$auto(0x5, &(0x7f0000000000)=@iter_create={0x1e, 0x5}, 0x7) (async) ioctl$auto_SOUND_MIXER_READ_RECSRC2(r0, 0x80044dff, &(0x7f00000001c0)="900633aea431dda019e1d80be95807b0afd44770f5a90e48f64b0c4bec3a7fc8caed5e26f88f77c3e8ee98906f9f5655214dfeeebcf7e76352e673e5eccac1ebcac70780faf5a8cf8553b1c5630a7c74cdcf4474bfbdc9d1c6ae5768728cc62243ef79f68f34d8d0df8ee7c3f37ad7370fbddcfc95ef538f362fa02dd9809534be7a1033ec56093c0e4bd2e60ace2d956e9052a5e276795a4dcfcd5a2ee868b48d543006ad1120212d2c") (async) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x1c1080, 0x0) (async) read$auto_proc_reg_file_ops_compat_inode(r1, &(0x7f00000010c0)=""/4096, 0x1000) (async) io_submit$auto(0x5, 0xb12, &(0x7f0000000080)=&(0x7f0000000040)={0x7, 0x9f33, 0x81, 0x6, 0x8, r1, 0x2, 0x81, 0x7, 0x0, 0xfffff9bb, r1}) (async) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) (async) capset$auto(&(0x7f0000000200)={0x20080522}, 0x0) (async) name_to_handle_at$auto(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x2) (async) setreuid$auto(0x3, 0x7) (async) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/024/001\x00', 0x40001, 0x0) (async) ioctl$auto_USBDEVFS_CONTROL(r3, 0xc0185500, &(0x7f0000001040)={0x80, 0x6, 0x302, 0x401, 0x11, 0x6, 0x0}) (async) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/system/memory/memory12/power/control\x00', 0x100, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) (async) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xae00, 0x0) (async) ioctl$auto_KVM_CREATE_VM(r5, 0xae01, 0x0) (async) ioctl$auto(0x3, 0x4018aebd, r4) (async) write$auto_ocfs2_control_fops_stack_user(r2, &(0x7f00000000c0)="87564bb52dfd1f2c23894d66d1aecc1501a37b81fba4c57e9f77ba2dc6deb8b52534f33d57812b8ee8e9b21ee1bc9235a29059b4c4140ffdccbf61954c3f3f4161300a998f46df69b5cb58ea2773a7d2f72f1c7f810def2ac7f33564620b76059cfc254ddaed993c81b20cae412523653b3939141d520375446e2f6dcf5ca1a8020a3545d56a51086a580af580505abc2adca550278da3fecbf6baa522c2e3f81266e94c091075d12b8c432252605005b78cbe809335a9602c8fe10bfac06e61ada57cd315d590fc9782e00cf5683d03a54c842eb65c8936d707a25ae219268f671d45ea842223bb139ed414c7", 0xed) (async) 2.956351958s ago: executing program 6 (id=7243): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/bus/pci/resource_alignment\x00', 0x8ea182, 0x0) gettid() openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, 0x0, 0x1c1041, 0x0) syz_clone3(0x0, 0x0) sysfs$auto(0x4, 0x8000000000000001, 0x3ff) acct$auto(&(0x7f0000000000)=']\x00') sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda1\x00', 0xe6e43, 0x0) ioctl$auto_BLKFLSBUF(r0, 0x1261, 0x0) 2.894122189s ago: executing program 8 (id=7244): openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/usbmon0\x00', 0x640, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/net/rpc/nfs4.idtoname/channel\x00', 0x8f3b7a51b80ebd01, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket(0x2, 0x5, 0x0) io_uring_setup$auto(0x4, 0x0) getsockopt$auto(r0, 0x84, 0xd, 0x0, 0x0) r1 = socket(0x10, 0x2, 0x4) sendmsg$auto_NFSD_CMD_THREADS_SET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001400c7"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0xc084) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x2, 0x88) socket(0x2, 0x1, 0x0) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video4\x00', 0xa200, 0x0) r2 = socket(0x10, 0x2, 0xc) r3 = socket(0x2, 0x3, 0xc) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000", @ANYRES8=r3, @ANYBLOB="01"], 0x18}, 0x1, 0x0, 0x0, 0x60008004}, 0x80) write$auto(r1, &(0x7f0000000000)='-\x00', 0xfdef) 2.411958645s ago: executing program 3 (id=7245): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2b, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @remote}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000000)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xfffffffd}, 0xffff}, 0x5, 0x20000043) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/ram5/queue/discard_granularity\x00', 0x0, 0x0) mmap$auto(0x0, 0x10005, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) r1 = socket(0x15, 0x5, 0x0) r2 = getsockopt$auto(r1, 0x114, 0x2719, 0xfffffffffffffffc, 0x0) fcntl$auto_F_UNLCK(0xffffffffffffffff, 0xfff, 0x2) socket$nl_generic(0x10, 0x3, 0x10) ioctl$auto_TIOCSETD2(0xffffffffffffffff, 0x5423, 0x0) fcntl$auto(0x3, 0x4, 0xa553) select$auto(0x4, 0x0, 0x0, &(0x7f0000000100)={[0x1ff, 0x7, 0x2, 0x1, 0x948b, 0x1000000000000004, 0x15f4da0a, 0x39, 0x80000001, 0x2fffffffffffffe, 0x80000002, 0x7a142c64, 0x6d3c, 0x5, 0x84, 0xfb]}, 0x0) shutdown$auto(0x200000003, 0x2) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) preadv2$auto(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x80000000}, 0x6, 0xffffffffffffffff, 0x4, 0x2e) r3 = socket(0x10, 0x2, 0x14) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000140), r3) sendmsg$auto_NL80211_CMD_SET_MCAST_RATE(0xffffffffffffffff, 0x0, 0x814) r4 = openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000380)='/dev/cuse\x00', 0x0, 0x0) read$auto(r4, 0x0, 0x7fff) rt_sigqueueinfo$auto(0x0, 0x11, &(0x7f0000000000)={@siginfo_0_0={0x76bb, 0x3, 0x4, @_sigfault={0x0, @_trapno=0xfffffffe}}}) writev$auto(r3, &(0x7f00000000c0)={0x0, 0x710f}, 0x5) r5 = open(&(0x7f0000000480)='./cgroup.cpu/cgroup.procs\x00', 0x80842, 0x91) read$auto(r5, 0x0, 0x1) fchmodat2$auto(r2, &(0x7f0000000180)='./cgroup.cpu/cgroup.procs\x00', 0x45e, 0x6) 2.410388728s ago: executing program 6 (id=7246): mmap$auto(0x0, 0xe983, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000) sysinfo$auto(0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/platform/dummy_hcd.3/usb4/power/connected_duration\x00', 0x22100, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000003480)=""/247, 0xf7) r1 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) inotify_rm_watch$auto(r1, 0xd89) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100cda4429629bd7100f9db5f250200000000", @ANYRESOCT=r2], 0x24}, 0x1, 0x0, 0x0, 0x2c0080c0}, 0x80) ioctl$auto_PPPIOCSACTIVE(r1, 0x40107446, &(0x7f0000000040)={0x3, &(0x7f0000000000)={0x6, 0x1, 0xc, @inferred=r2}}) r4 = socket(0xa, 0x801, 0x100) setsockopt$auto(r4, 0x6, 0x2, 0x0, 0xfb3) 2.244646398s ago: executing program 8 (id=7247): r0 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x80, 0x0) ioctl$auto_BLKTRACETEARDOWN2(r0, 0x1276, 0x0) (async) ioctl$auto_SG_GET_RESERVED_SIZE2(r0, 0x2272, &(0x7f0000000040)="84e66da3b9df13fa78a42388ef27110d70d3084853694a20839ddb50152d8f20cbb4f4ffb718957b24c1768227e31940010c4c80294305ca77631ff164523742ace07c942402a8b91ab33f2bd2b12eb857c3b9333814") write$auto_sg_fops_sg(r0, &(0x7f00000000c0)="22276bb492ff746c1b423ef190c56dca6fb775f33effca118b5128beea2dc2efb094b3f122d858e1d3d8af27c0c902724c1039f1cc9178dc4a8b332b650b31c9a147966a34976217f1f1b42ee8824337961a693d80d9b9b66f39c9e59c0a03c209684bba43103f105a9be0cd3d9e1cee2addc6440fba60463de83998ab266e06b92271f92199a7161e980d66539d95cc1072f8308f9513cd42a2", 0x9a) (async, rerun: 64) syz_clone3(&(0x7f00000003c0)={0x2000, &(0x7f0000000180)=0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000200)=0x0, {0x15}, &(0x7f0000000240)=""/36, 0x24, &(0x7f0000000280)=""/200, &(0x7f0000000380)=[0xffffffffffffffff], 0x1}, 0x58) (rerun: 64) process_madvise$auto_MADV_SEQUENTIAL(r1, &(0x7f00000004c0)={&(0x7f0000000440)="39bd14951e16f9ae1caf13b5afe56e36d860eae95812679e9b649178c13ecce43c5dca104e453ea31553c7a87b58ea58235fa52ba301e85f9e53f7e06f991627ecf9f25e70e1fa422122cc465ebce2a783f7b1446db3a59b7868c8e3481d535b9f821fc719b7aac0b6c3625ec49619a9831041f1e2e02816c4356bf8", 0x5}, 0x5, 0x2, 0x9) sched_get_priority_max$auto(0x7ff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000540), r3) sendmsg$auto_NL80211_CMD_SET_WIPHY(r3, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x14, r4, 0x100, 0x70bd27, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x80c4}, 0x8000) r5 = syz_genetlink_get_family_id$auto_ncsi(&(0x7f0000000680), r3) sendmsg$auto_NCSI_CMD_SET_CHANNEL_MASK(r3, &(0x7f0000001140)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001100)={&(0x7f00000006c0)={0xa2c, r5, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [@NCSI_ATTR_PACKAGE_LIST={0x22a, 0x2, 0x0, 0x1, [@typed={0x4, 0xd0}, @typed={0x9, 0xbb, 0x0, 0x0, @str='{}^\x16\x00'}, @typed={0x8, 0x23, 0x0, 0x0, @pid=r2}, @typed={0xc, 0x5b, 0x0, 0x0, @str='nl80211\x00'}, @generic="6921afd10f37a3c366396d6abd30f48d8a59ca443774df832c1499e0eec6813bc67eb6fa6be0c5bc216e77052abe7e4f1e38548ea04d87ccc81934ff5f92ad89884a5873b787091eeece205d741de658253d3a8f0faf479edd7471dead7839b290a10e82d7365fb2682f051b07651f897f22b195cb01c6273e0447d5514f9db4d79fa12cb65760b5363197ee7364157b2d8b058fd6a03f44f03d7f1d0f21ce8f998f89c0961d", @nested={0x104, 0xa8, 0x0, 0x1, [@nested={0x4, 0xdd}, @nested={0x4, 0xa3}, @typed={0xf7, 0x142, 0x0, 0x0, @binary="9ae56a03cc7966dae2ea5c2f1fe0c822c044a14d19891e29c6c109cf751e40bba952f7cbdb4f4331679d87e989662a064e7d74c3fc4c9088dd60675113a0f8554f90e6a970218d1c78a00b0621c16c4ec825af81953eefd271523df6418d29b71e680f1ecb86f05f2357d7a37eb65fbfb84e7c7a9a3fe63caa147621825ef3e8452dfff6af394d8ba173bcd5dce5c9a04291952e92ce0eb7941e329470db977726bbb805e777519549581bdf3cd117b23b11d06440072628054fabd8152ca2c382bb060e69919cd71f3998928c98c3f04fd0461fff8a75b703d86c0498f3857159770f8b9694bf9f0c8b91cce5bf34cb48cc5a"}]}, @generic="614674d21f4fdf160ec6ae20d8ad2ac58c88e0eb4038ee8fdf7f", @generic="3b9cf1f5d3d347df9558eb74a8ab0c6ec1ce41d25d53465bbb9e2735472346d901fad9eb151c2f9437bd03714e7dae828dcb0caca0e73f2a864cec171975"]}, @NCSI_ATTR_MULTI_FLAG={0x4}, @NCSI_ATTR_MULTI_FLAG={0x4}, @NCSI_ATTR_CHANNEL_ID={0x8, 0x4, 0x279ea68a}, @NCSI_ATTR_PACKAGE_LIST={0x10b, 0x2, 0x0, 0x1, [@typed={0x8, 0x24, 0x0, 0x0, @u32=0x80}, @generic="6329c8", @typed={0x4, 0x24}, @nested={0xf7, 0x10a, 0x0, 0x1, [@typed={0x9d, 0x12b, 0x0, 0x0, @binary="caa499bf0d4e83da5e8cf05007cab21deb0dcf405c05af3d859eb5ed1bf5728e17887f6bf87cadb679e5bd012bdedff5679e67e928e185e53e4b832780db4e45eb49fdefa52792f6eb6e3f567dde975b3716014b2ee3a912b7161e13734c063777c4fce0b8c7208fdb07b66bf1d00f8ecf246f748c5c4abec0846d63d0a02c759de7f1110af3cd3614b612c6ec16bd153565f80702e3e29413"}, @typed={0x8, 0x131, 0x0, 0x0, @u32=0x100}, @nested={0x4, 0xa}, @generic="b2255a4e04dcd4a0d63d751ecdd188fc79ee4ffb70dce07a272ec8a9af664f9fe12c058901058de2ae5d2f8ca45b7f17a57ec0ad58288f1827031253ae36b8", @nested={0x4, 0x136}, @nested={0x4, 0x84}]}]}, @NCSI_ATTR_MULTI_FLAG={0x4}, @NCSI_ATTR_MULTI_FLAG={0x4}, @NCSI_ATTR_PACKAGE_ID={0x8, 0x3, 0xffffffff}, @NCSI_ATTR_DATA={0x6bf, 0x5, "b4528a9b43860092c00d71c47656fb085a76f6c1d5c2aae238e036bc3cde4648c107cfc803217b684d42d8625e3e069bd9bbbe3e5ad9a0ce7a5a70c8149b1c19515aad289ef8063b37ef0e1844db724cf960e3b245f5c6dbdf2cc20a5c87fe9c9bbfb3f549815a924688abd87c4b055fc5fd43da87f959ce39a8357d63b2737c90e9dfdd2a01d4ba122469989d8b33936bb2ff70fdb8e6d40a10cff7b0e94362a47e477c2018e3b8181685439323ba7b2107b4becc96e4d79f3077d77eb30f6f796adc2d8b9ba99ef26bd8c7cd0bf3f3a54dbb372ca43c467d96c70823121c121e3dfc1bd8665b459e5dd9a13345aa9c362e2d4be22103ea2b38ba51621f3f58ced68a5b658f1f115752879467eb0c2d10a01cf40c66f2875acb1b87bf99a77115538ca363ebefcc08d2aada56fbec94cb9c665cb85328451a6a2de5329f9b0c4a17415df348f495410871f8477f9498c707d393e59f23e51b2d57ac802e0354d2df9f2e356d75a12a25170b074c2c252f92ab22359fff3829a2c0c2d9c779e808d7b55af89b6da5d5701ffa7a436a3a9d20c5e79495f2a4c9a1f38d0711188fde297283dd6189860080adb6e9c1f43630da92fd8ee704fa752d4cea3c9b259d5db61bdbf84bef76fd57e509724e1934c3ceb3f1c10dbf3e280bd157bb26d9b4fd42762c3d6b5662a0cc9ba4ddc3e859883d0acda3d5e049949acdb682ad6dd865dfdd949b820330f0b43abfde45cd9c885a7be6db7c349dd105aaaf2380131040644e52ac45ae0d90b713196f2c0f36dc64d8cc07246a2c0cfbf266de1312d085cd2c24a861f2ac8a66c8ff2facf56f337db4bae4ed630f8263cfd60c695e48eb51a3161ae532e4f28cf1cd027c365ecbc9a075f0e04fae8160e254ea4e94ee2dff5baf43b0074c7b02041f01e06253a4c6151033996ae8ff45383396965dbb944b4864df9ad12a94d8ba38687a5e11f0c1dbb878a33d69b3c28a0a3de75d90f6e3d0db7fe8794b822106c83642faeb9ba190a3d5511a281e33d548bce5cba91da3acdef396c7d16391a36ee3eeb94466fcb274e5244060736fc44b8d20268dd7cfb92be5878df8601ade61d93d288fe0199eaa2a7f59a260678cb972eeb5470665880781841a2608aacc78bb1773b85dfb9b7bf7e98b2ca457c0372b8b3e2e73d97fb13362690889e69d25ab89af48feb3180f45ac4c1de444b82b1e6e05c445bed9194904febb6109f737c219966fe90746af7c0c6d8caf0e13b166aaed4cb1586c0461e0ac58802c3b3850d6e25f8a935b13036bf521b7a9e737bf9cedad6be5240858282fabf0713e80b32a2f25c268de2e04027fec57eb853a666ccf31f08ff01125ee45678ecace92566a0d8c23a105067b7e21a3ed43e3df8fb02b02c250fc893e43f7f0993e2d508c262068cae38a4074e63a9073561fab80fb7d986ed97f90d56eab40e02126ad0c815657686acd4812ea810326ac041afcffda8645fcf596f61af557fa4670fe078b227916ba57491440c34232da01879f94cb70fad428d9e74d4b2cf93ffb9dfa14e5c76b7da6238613acfea2579d1fd219621427dc48b49149dc3cd21f049770ec0a8d1fc1a5b4957ea1d0c00cb91bb7d52ad6d3385af3f42b1afd44c32783dd75e0cab08a257329cb0cb85372931a4b62a7682db7b70375f51880887fa817e4b40c202a1f9f08f6bc38b10ec0474ae911721a76667ef81336e6727949b888b69ccb9afa9104e1f1749cc7c8701fb9e0ea583a8b7e5049b683cb9ca5f262e5c0f103cfc8d7602f23a82bf635d172c3e6eae2b5b412486ada4510cf682d8f8725de0d6e594a91f83413d85e036b2b64946a114c3b38464d308b3504242c743b5cf7ea7628d6a0cbe81142148acf8e2ce4d335401cc2984adfdb1226d4d549e47658d9326cad490dfd27aebf9cbd8b89bd21a1bc9725a98caa140b0c1981b9775dfba8432dc6877233eaec3da35ed87685263311f3a7c82639b0a5aa7a8c8574322a8e88d26fb351dc8058be5504fa530f1ca354a3303b58d693d3969ff0983fa3faaba51c46c6fdafc113fcc441aac685e97852df0438e90cf5779abb06f7096480815c21bc15fb0581c296808dfa1f32a4e97df3679565c19dcd1cf403a96f8fc34ae2cee79154b5aca582458d292182ad9f6eb4ece0b95852541c67745225ed160fa51d93404c6c5a3268bbee68f5f4f40ffdfd4a5bb7e6797a6729d2fe82cea1f734ee413ec2cc522e2247080c04eb87f9adc62460df0edf01db53b81f1b53043b0023a6020d301a6c857df381c9e0f4f1480bec3d1f7ca9678fe0c36b970a14780927646dbb762c1732b81d9bb6773882ee3f235c7d8c2942e683145ce002a89f4acc4af0dc67fcf2d7847c132409fe9b885cfa499b9f28ac52fe51a1f567f4e30fd24a53c26b829276ed3c10"}]}, 0xa2c}, 0x1, 0x0, 0x0, 0x404c070}, 0x0) (async) r6 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000001180), 0x303000, 0x0) ioctl$auto_PPPIOCGUNIT(r6, 0x80047456, &(0x7f00000011c0)=0x4fa) sched_get_priority_max$auto(0x3) (async) r7 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000001200)='/dev/mtd0\x00', 0x56000, 0x0) ioctl$auto_MEMUNLOCK(r7, 0x40084d06, &(0x7f0000001240)={0x5}) read$auto(r0, &(0x7f0000001280)='\'+[\x00', 0x2) (async) ioctl$auto_SG_EMULATED_HOST2(r0, 0x2203, &(0x7f00000012c0)="c284275483883ad537adc57b060535b9f0136c10dd5341ead5b30c7ba6a7ed624a929de5713254076bfa0c27ff021c61b3426db29e46ab303c5f2d58f7ad62aeaac4e0ee458fcf3eccb6124041b338e8bb0c6594d0b87a") (async) read$auto(r7, &(0x7f0000001340)='nl80211\x00', 0x0) r8 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f00000013c0), r3) (async) r9 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000001400), 0x800, 0x0) sendmsg$auto_TIPC_NL_NET_GET(r3, &(0x7f0000003640)={&(0x7f0000001380)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000003600)={&(0x7f0000001440)={0x21bc, r8, 0x10, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0x21a8, 0x7, 0x0, 0x1, [@generic="fb20f4386811ca4371b1510464f61127c6c1ef7ddc47be60839ac85dcaf26facb52af74ee0adcec63e02cbed2abf69d4b923bcb9bc5243209891d545e94c39ab93a8c27a3c82712467eceaf99f354681b81ba1b70aab6a45933fa2ea1a35623eca6f7a955d0caf64e1acd6dc573dabffeb691c14dbd78354b87d3785a9a5c31b01709bb7eb5f94ee54cbeaacbc313df88ef5a1f9514ff5812f7ef075ce77456c31437fa60f75cf25bffd2490ab9184d62e9445ef380c620f72c5eb2500a1ba2e97417e6e2b3bf473c584f02addc80c7b22e5748f13d8dfa2364d2aeeaa48c8935d2ba5e8ef8860f586635784194eb5a1d54206e2316db42fb812ef71e4ddbdd750f35275f673240ee36db537d1dd25ad486215d8483a5b1e05dd34e37b523222911fc7fe505eabb8b8ca27c642e6bb47c868ba6ee6f3318795a5b19124d0348b8398b2140e51cef32bbfb1554b42f44a8328bc3014449b4ce398bb411a2fbc64758b52cd2fa431554cdd0ccf191c23074ca0fe485feb60a43b573cda3f33ec6a3b22c94d9be6740fa83ad104315a193939932f2ac17a61c03b804f2bef9479c8d7fb1d7e7b048f7f777516e04ae32033392732d668939d23a94738fac7585700dd33c9ffdf4b7873edc506d5fbb3ad36d43f2fe0b9bed8dae4f7d9f795d8d4337a2401d543564692417df85a2a0975218b0a8d5492b4684e3a15329551cf60f6e2887bee9e3dd34900718c123991ab1e62ced6827d2b192d55a5bb9c80e167000c5f6cc7527db6311cdb54c48e72f9e78ff720103be96782e6fafcf16787dbfba50a4f5bd925cfdc7a13b209d1e8fd1edf5e06c83ed3999c7fb53f90295796ef6a78612442df870cfe359d1f372b56832664092e14ed04b4ef143ad6c188c9d83144efdef62eb29fa70644669aa908a58ef7db869fde070ca17e7fba516a06ace2fc0e6cad329fc9ac267aee61361632e479b22729e64922bf19603015ac21eba3b4bc90e217f87ecf7f248f3773574269f948a5d6639f30f0254baf7bbeceafa670f61a3f4ead2da5cfa49528d2d162291c1d532438d7751132f3c7d27075a6650ab09cc961d9284c5fa6dd27d6a68f8a2778b3fa004d450eeb978db3f4c04360e03c02be729edeb145cf98658c5c8ae580ef809f3220ed7f47c9ff0c5706561235df0f999bdfeee53d7f163f1d28b03dacec80c98d5588ef698597e78ec04d1131d3fc3c63e27c0934ec106d4f04df528050a95f9dfd8de9331818726a4de8a2ed625a8dc0a6bd7e16da7dbc7dd09140ebb2d6d128b6474458976837ce348c3e400cead76dd132cc52d3cbfd45b48ad59e2d23b1487f82616768941e1d9b8bbe3646e2cc5a3b96ffcbe9794c38b36e8ca1fc1c7b43bc33d50c5964c324dd92653346e38b4b72486bc1297c0a94f80842d69ab895a10ee8aef5fb942aa29ba85e469b9958b4b84eea27123daaf3a3afce98e119306685826f84596d367ed683c2542758ff73733a0a14c19240612a95828fc0f5c1964c83d68b3d657039c0d7aee75532d6e5c5626a78a2f40882799161a08a72c302e91a0418d3d0e5a0140b39b89a8abd9cd656f97c7cbe2993ad221be8b4512855903722c5d16df2d54f103ebf47a32715cf1a693ef7a78b6b51dde0c2fe9d44f4438cb87b0742049778769b90478bfca105305bf762695134ed14ea44094bbe700a51e80be2fd2294351f0236c36f0239547eb7ff879fc074a1c1f0c7645bcfd00f2aaa3aa2ab011611e4b27c7ff34a2ee2643a1972f40dcbca6b8a40b9e6c2935813c7eb7c7ae71041db05514348eb356abb0f28e35cca40d57f21106ec57fa2d677684a5827e9cbde46638a28c43129e55502941391e08ec1407c0bf9fdbb9fa3645f55c43c510f10d10579aa00446ec4f2527a216638419ceaf4cb3a7a6bae5bd6945d3f74647e28de9b123d53d49d2a3679abf6faa78c2f9f33b16c958b0be2e542900930b2e9d60d0358ea72c3c734427cf25d37fa4e5f35912d3fe7d648034e62323d04ff91c26413c0d2973923e329ca379147602d48b522881011195229f49ae08e49f81282fe46be4145aea0ed1486d41c504d277388a053e0220d00c63eb1d017f9090e5c44af5321f11c768e8d4185b75f28d2a752cf6552511b017527bcd282aac3425808ac972a915393c524669bb77ac09b9b167a3274f4906ab8cc2377bd017a66cc93b668f33a1fba38d64252c3a4609d3a6be760a7a408ee5cba615cf8d6b5be212673c3ef85492ee80f2689d2ced04a1753a7a03140a2525772e74d0e4b08d3eafa318f65922e23fd45fda79be967082df7777d2b6eba592099bad3182c797d0ff2f45a0a6c08ff45edf903234992dd7e589cc34eab09104a0bcdb957ce70ba260e1ce76016cc9baa6dc604274686782224049d329699233ee8419e0877e77538816ebc12ceadf0a82271179fb8dda5359ee6fa0f699b3fd70fd957420e269c37b147e7f70838dd1b2f7ca878a2655beb3d06aef165e65f03460949c8bcf6a04843e217f04ef22031d01f1f3bd4dfb057424db5e2e9025de4ae304998d90ef6bb9e4d3da2772de5e870cbaa177e761b27bd5a1ac3c30b2fe5e210e5fdc5ba7282ece76753f2d2eb5297d4d45006a2802aab662da9b118a142affaa303b9de12251da5ebe81c750c0d669bcba9d98cde530c0b9f55e435059a669055cf85b5464e90819f415d979fae232dcd64f9ba3abe8cfdee57c50cac63a543bd407459a3ae84d247c49219ce029d86ee1f8f0f0da51ada5662cbc427713ecb06788bc5af57be3641f00633c359b7933898af0316156b33db529ed990d5eab37a4752a1b3b338f7d16dd230d0815301368f3c5d86d1c9df87cecd503b2c7d62baac783428bffefdd9462a89ca88cd7d9a9028e93f566acbf2280aa11b15ccb1ae6934e661ae9d008efa9089ef716a834c99e601817e5bf12d60b077f4239a40e3a4218cd35fd7107c0cdf3999bd2668c844259762c452513ab86ef347130f69577e1348fa88d64391befd45dec5a84bb11dc45579289f4f1adf78872dd930de59cd233f58720974feda749f6ddcddb854fa2f22efb136f129434a4bf45a0f7f26a41ab8db603150ed73a1f3f4bb8a2e158b11be70f65624038766e57040eaeb953a2863fa08d6aa3fe991efc26d6fe567efe093f2a6ce3b62b0ab60545d138aac65122d120809c63e475a9d1f7dcfeed6c4d92f200c4ffc457c77e37bdb4f0d590400f78494edb03f9d9b69faa9f381890033f0564cc49c2f6fdf4dc7b2ca6b8612779e22c1c527dec1d6fa493e86e3516646da1b0095980ff795d060ff4ac2c55bbf823933c642e835998d9223a042b985097c7810668602e1f33e3cdfc66f30843bc6dfa5a6694289aa8f2518322ea42b5dc39f3dd68c257ac15b298cf5f1e48b2cba101776ddf2910d5e709da5dbf5d7433f6716cd2437c1e5a48450edc3b519b5a1a5db999d441b16359e8b2ee4d02c479ae387c75ff99f8c4235a4b62d32cf6a23e48d9c410d20fc73f2d7dcb5946ec707b7061376ff231f968a28fec4b4eca426e283286d7dbf474a0f778be1efa6204ceb9f06f71e03540701c5c08c2e4b1d7cdea4de97c0d89645e619623d2de8140d9c9f6e44120b62c3da3975f9fa15c6e2471583068d36a3a3a77e45020436168db38ef5a0797c9b66cf34f1012ba307f98d54f76705e2286651b401815101b8465402134d11b686d4b910855bef31b9323c770d3fcc2d6abdc70a5d6100596e7a1c4a7199914c2ac5a4f1c9e097d911bf723d3e6486b604b0cd9310428bca8cad386b09a33da20901810ade887f1664179f3f26493117fb7f61aab8b507dbb11766f72dd356b30e5e48adf48562e3744223baca591ef7e46b07def0674bf624e44c83ddb62186a8294d23b53583b8ae2079c07b125074c28c7368e052bfe40f94d8197451b1c70b3ba41ef6b186095efcad1deff46bbff748c38bf4d5183f0a8e7335c9e21e27bd0785d004f778554b0e15724aae2ea3fb2531491fdce8daa9b8881651e5b63897f701ba09f16816642996bc5433e8d41abae39e23c8c605d32806dd503ce47cc6a442a0c25a8651f93dda42b353ebad1f807eac910f5b2222107f00133dafab7b326f9175e47377f7913ce1724f5b674674032bd51a46ddb32dbf08d54e5c1c8664af1856d59d4b4dc5e1feaef2d9d62f9c25224d970e8992dc2705c5292b2456375f271ae93a42a191bd0c606f5c004233767adc99b1c0a7147ff946f0d3df520ef8fdd0d4f377b035fbc260d0482ee419c7f2ffaa0dc6f8153646e5b3d4361947dc602b966c7486b46f71b7b96cc8fdaac6d303c7ddcda34283747ce993f8012ded79b926a48362ee1c0f77d6031a9ab0de628698663f5c021529e949d24d3a854d2f0ed4c88d018b3cb084cfa5fd82a66f8c9cf99788634fc89cb472363cdc1b80a32b5214e481b2cde47410157ac1acbda4deef429a5f95dc4987c65f4d70fabaf4a58c2421046a260206a074524f22b1b5947a1a8a05ab1f3182ebccf6cd16a9f52c00be4dd74181b66fdb318583d719b099a7d75691a1c8f54cc0a95fabe9acab7d3dc9c8bbcf533545915696e21d42bd891a42a8bdbedb2ea6f2bb87c6e724405a7472c37f1a52bd5dcca6d8901fa2083f5b9e8025e9a105669e7251306624a57b7ec072dd97555c9017cad0b57af2951532711d8cecab9d450d6c7a264558bb5965aa520fc7fc4ecd9be07863080bdde1051dc967af71fac6985dab44e7d494980951145fd6c3903c39be95daaded2e81cdb9d821d9a5b0023696b13927c5663e2302f684116db79020312e859fa7747944911e72f5e796c79338d282477cc19b57458ea9740826f8b66a5a72a144d9d08e67cdda8d8077e8bcd80b4950ddbaa6fc917eb39b6874646ac0e6b1b1b4ccbef3059176dd1fd2f35358f729c578dc0a1ff9d0936ce47b48376dc8e02a953dbad95febd93bcf6773f43dd1c851afb8a1fd923a3af9a04e7d015902fbc912f95ba15226f03f22270bbae92c3d3f37f8dedca6eb4506e850f73f75a2ed5588713d8908534e059d1a86bb3c210715a20c7f507513ae49f90c0ca10eafae9cc034540a2652678fc0423ea17a32865b06dbb1d57ccdfe6271d2ca0ec741c50cdad33ea6d04a2a951ca944116fd7dcb70e19c4ee423f8c914b5c696efe945b00fac82d1cf0a6380885eaa02418335b7219619b1ec7f40c8f055f6dcaadd28361aa035a0296a291bf9ef170ca03a4dfc0d153ae991b6859173e04468eba5bb2b8dd7ab43e85f5ce7b381ce79ba69c013155e01ed2d7874443c293e308ce1aa3e76956cb4dba58666fb66b41a785dec39a1e3acadffb6455ff3dd507e7468df479064432bb8797e65a2a22394af82718a5bf3ffa19ef296872f692023c3f6c0356f0d1a0b533378d0efc3410a09f218b990006ae0751c322a23ae2acdc511e3f4ad22b27c2f932d18a789ffec828d496d2dd1ba9c7cda66cb94d1e0fe57a0a52296445375055a1b79f68d7713c5ff8a7e9b25551ff18aee17ff2acc00ee12552ce4c244b350bcf2b372f9069d6e924d9b3bb542ed76e006d35575385809d7b3b6750fb66b8e72ea37e89ccf7ca76f2ba57f5420cac16f6785550da2b2f5fde52cdee532067713d42fec7403add40f382771f1b9db63509063b33c83d19c92b3ca9a6ce24b0f04a7d2cd98a261bdb506120a805ad11db64cd6f96ae21ab01f7800774efc931acd6f2d6762692e0f390ded134ad41c33a3a334ece8f8c", @typed={0x14, 0x105, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, @typed={0xe3, 0xdb, 0x0, 0x0, @binary="0ef32afff209aed7eaae1a6fef027328b9fc332b71d8f6a157ca249da9cc38bcfbeebee58fe158d8f911b74a8a214222dd3c9ba89fef5f17e6de4d4d305aefde595366b37f9a7868fc2fe93af4dbcc74c148ba1925433b32778597c199e8105e542ad6902e7796f500b324d7424301d0e386e591155153dabf0c3bff942a33e8ddf6408c95fe94ec9a073b9561e6b34163a7fecf8e5a31ae39719bf47d3f4c378e5d6e128b25d3ed554c259e560a41edeba5fcd9838b4754d4ed5eb10c23030744b36d236b6106782550e1b8525a2389e59a06ed30dbbcb54c3ba549bb4be8"}, @nested={0x101c, 0x14c, 0x0, 0x1, [@generic="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", @nested={0x4, 0xf1}, @nested={0x4, 0xdd}, @typed={0x8, 0xd6, 0x0, 0x0, @fd=r9}, @nested={0x4, 0x9f}, @typed={0x4, 0x73}]}, @nested={0x8d, 0x147, 0x0, 0x1, [@generic="d966a22c7014bed44b51a962b7c81b366a655a856c3e930c59407f790ff834a1bfe23fb085aea4de61577b6e028961392856623f86bff032877cc9e462463fca5093e92e2d29ae2ce9e40f2a19e1a53d541f2282b4", @typed={0xc, 0x29, 0x0, 0x0, @str='nl80211\x00'}, @generic="e7962bb7d0e0d4a25187da80953a2e4af18bff6044caaf587346265c7b2c111fd68be6dac1375b28"]}]}]}, 0x21bc}, 0x1, 0x0, 0x0, 0x24048092}, 0x10) ioctl$auto_VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000003680)=r6) setsockopt$auto_SO_RXQ_OVFL(r10, 0xc, 0x28, &(0x7f00000036c0)='[\x00', 0x8) (async) r11 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000003740), r3) sendmsg$auto_NL80211_CMD_UPDATE_FT_IES(r10, &(0x7f0000003840)={&(0x7f0000003700)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000003800)={&(0x7f0000003780)={0x78, r11, 0x800, 0x70bd2a, 0x25dfdbfc, {}, [@NL80211_ATTR_STA_WME={0x2c, 0x81, 0x0, 0x1, [@NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x8}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x10}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x5}, @NL80211_STA_WME_UAPSD_QUEUES={0x5}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x9}]}, @NL80211_ATTR_AUTH_DATA={0x38, 0x9c, "939c9ca0e58f134a5cf12f36c34393b1a3ac49c09b7f8940a23748c10d95386508c15270660c93860f968cfd304aa34fcebc9e5a"}]}, 0x78}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000805) write$auto_snd_rawmidi_f_ops_rawmidi(r10, &(0x7f0000003880)="0fc7cee9140813e48d22eabdf6af8591091b68d2b71ef604facd6045241f61bcea6932b6b7668a08232073e826ce894d6958d1d4fae0a83cb09a28dd9e6fca288084e28226f63063c9d6c12b027759cc468bf7d0982ec5", 0x57) (async) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_REMOVE_LINK(r12, &(0x7f00000039c0)={&(0x7f0000003900)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000003980)={&(0x7f0000003940)={0x18, r4, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@NL80211_ATTR_PBSS={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x804}, 0x4000010) 2.073119679s ago: executing program 6 (id=7248): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x8200, 0x0) read$auto(r0, 0x0, 0x20) 1.832548267s ago: executing program 6 (id=7249): madvise$auto(0x0, 0xffffffffffff0005, 0x17) r0 = socketcall$auto_SYS_SOCKETPAIR(0x8, 0x0) r1 = openat$auto_split_huge_pages_fops_huge_memory(0xffffffffffffff9c, &(0x7f00000000c0), 0x642, 0x0) write$auto(0x3, 0x0, 0xffd8) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/card1/pcm0p/sub6/info\x00', 0x1cb842, 0x0) write$auto(r2, &(0x7f0000000040)='@-[!\x00', 0x9) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vcan0\x00'}) futex$auto(0x0, 0x9, 0x3e, 0x0, &(0x7f00000000c0)=0x4, 0x0) bpf$auto(0x8, &(0x7f0000000100)=@bpf_attr_11={0x3, 0x8, 0x5, 0x3f800, 0x9ed, 0xfffffff3, 0x5da, r1}, 0x9) r3 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/fb0\x00', 0x244443, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x7ffd) ioctl$auto_BLKTRACESTOP2(r0, 0x1275, 0x0) ioctl$auto_FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000080)) 1.529981622s ago: executing program 6 (id=7250): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda1\x00', 0xe6e43, 0x0) ioctl$auto_BLKFLSBUF(r0, 0x1261, 0xf5ff) 1.341817174s ago: executing program 3 (id=7251): r0 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card0\x00', 0x129800, 0x0) ioctl$auto(r0, 0x921064a6, 0x20000000020000a) mmap$auto(0x6, 0xe986, 0x6, 0xeb1, 0xffffffffffffffff, 0x303) ioctl$auto_VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, &(0x7f0000000040)={0x4, 0xffffffffffffffff}) ioctl$auto_FS_IOC_MEASURE_VERITY3(r1, 0xc0046686, &(0x7f0000000080)={0x5, 0x8000, "4d516c6c69fa907d5e5aa33688b555657fa7e8089312fb9264c0eff1"}) openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/arch_status\x00', 0x3f5241, 0x0) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) mlockall$auto(0x7) mremap$auto(0x0, 0x4, 0x4, 0x7, 0x100000000) madvise$auto(0x200000, 0x2003f2, 0x15) mmap$auto(0x0, 0x4020009, 0xdf, 0x14, 0x401, 0x8000) io_uring_setup$auto(0x6, 0x0) move_pages$auto(0x0, 0x1002, 0x0, 0x0, 0x0, 0x2) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/system/memory/memory12/power/control\x00', 0x80000, 0x0) mmap$auto(0x0, 0x20009, 0x5, 0xeb2, 0x8, 0x1008000) r2 = socket(0x10, 0x2, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/pid_for_children\x00') sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="72010000", @ANYRES64=r1], 0x1ac}}, 0x40000) write$auto_console_fops_tty_io(0xffffffffffffffff, &(0x7f0000000000)="c80d1b5d399b71", 0x7) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000002100), 0xffffffffffffffff) sendmsg$auto_NBD_CMD_DISCONNECT(r3, &(0x7f0000002240)={0x0, 0x0, &(0x7f0000002200)={&(0x7f0000000000)={0x1c, r4, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x8470}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20044800}, 0x4000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0x8af}, 0x1, 0x0, 0x0, 0x9}, 0x5}, 0x3, 0x4) recvmmsg$auto(r2, &(0x7f0000000100)={{0x0, 0x4, &(0x7f0000000080)={&(0x7f0000000040), 0xcb}, 0x3, 0x0, 0x80000000, 0x6}, 0x9}, 0x7, 0x6, 0x0) r5 = socket(0x2, 0x2, 0x0) setsockopt$auto_SO_WIFI_STATUS(r5, 0x0, 0x29, 0x0, 0xbff) r6 = open(&(0x7f0000000100)='./bus\x00', 0x14d27e, 0x72) copy_file_range$auto(r6, 0x0, r6, &(0x7f0000000080)=0xeb2f, 0xfffffffffffffffe, 0x0) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) 1.122276231s ago: executing program 6 (id=7252): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0xa, 0x3e, 0xfffffffffffffffa, 0x1ffde, 0x7, 0x4, 0x5, 0x9, 0x3, 0x6, 0x4, 0xb4, 0x9, 0x3, 0x10000, 0x80, 0x7, 0x0, 0x8000007, 0x2003, 0x200, 0x0, 0x40084, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000, 0x0, 0x0, 0x0, 0x0, 0xb8a0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}, 0x1fe, 0x200c) r0 = socket(0x10, 0x2, 0x0) mmap$auto(0xa9b, 0x20008, 0x4000000000df, 0x2000eb1, 0xffffffffffffffff, 0x3) move_pages$auto(0x1, 0x20007, 0x0, 0x0, 0x0, 0x8000000000000000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="abe4bbfacdb9358406b56db145c06761fcb2990de3b195eca21c7770cc332892dea86e5004d6e7a85d455d8c80516340eb9b6f6df7a824ee7701d38027c42e599e89cdbf30b0ed38f96afe33dec54c5a01d8db7f09cd3e346ce24cc406e385d0a7d92fe7dae8ffacb1030000006344f42e0d0b9f2132151f7c3c4d80c76c35fa33ead576b5bd3d23ce01d03e3972f69bd1361d9c395d10dc423002a7b999378ab7dff170831954933457dd5fa70ddb21935127667271d5c104eb7a60c5b8fb147bfbe94c6456f13cb18eeaca7c98e24829647c958f665227be4702286d6e5c88ffa1b0e24c0ab7c9a3245c8930d38b766a968bdecd3ccf1a979b3f7f49259dde29b21e", @ANYRES16=r2, @ANYBLOB="e5b725bd7000fcdbdd2519000000"], 0x14}, 0x1, 0x0, 0x0, 0x4010}, 0x4008810) r3 = socket(0x1d, 0x1, 0x7fff) syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000003c0), r0) sendmsg$auto_NL80211_CMD_GET_WOWLAN(r0, &(0x7f0000000480)={&(0x7f0000000380), 0xc, &(0x7f0000000400)={&(0x7f0000000740)=ANY=[@ANYBLOB="30010000", @ANYRESDEC=r3, @ANYBLOB="010026bd7000fddbdf254900000014000400766c616e3100000000000000000000000500880000000000ff00bd0029aa3e736e3cc72126a0198aea41442e951e42b7307de8f1b01f01cebf184362d0ecde1033e880d54cde65bb7993b8eb993149252b40e15cef8621c4747df87664475151288388d6d0ab0ed34496049573f1efa4cabe4d213efe767348e436a9e344552c6f4e96f0ab7656d9419a42965ad59b485d20a6c3afaeb1163adb4db76f56e94f6a5ac4a1eb11b6cba06af8e515d7227ef5ddd2ac8301c5afbfd2f8e63f19c2b6d0c58412ed57cd9dce349a34fa952d3576a60a237aaada4a3f7488e26b266ef8b5ce0554e98b7106d5c7c64eb19aee073d8a0e16d3529c65d259a5696cc8bc02448a3ccfb5ad7e94e7e3eeb647186117a4fc4ead0b068100"], 0x130}, 0x1, 0x0, 0x0, 0x20040000}, 0x20008010) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r5 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_tracing_entries_fops_trace(0xffffffffffffff9c, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x5, 0xeb1, 0xfffffffffffffffa, 0x8000) write$auto(r4, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/system/node/node1/compact\x00', 0xc2481, 0x0) read$auto_dfs_cpu_ops_debugfs(r5, &(0x7f0000000040)=""/29, 0x1d) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mprotect$auto(0x200000000000, 0x806121, 0x6) 1.07240658s ago: executing program 8 (id=7253): select$auto(0x4, 0x0, 0x0, &(0x7f0000000100)={[0x1ff, 0x7, 0x2, 0x1, 0x948b, 0x1000000000000004, 0x15f4da0a, 0x39, 0x3, 0x2fffffffffffffe, 0x80000002, 0x7a142c64, 0x6d3c, 0x5, 0x80, 0xfb]}, 0x0) openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/pcmC1D1p\x00', 0x2480, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/fs/ocfs2/loaded_cluster_plugins\x00', 0x800, 0x0) syz_clone(0x4000, &(0x7f00000002c0)="f03f0b0be4f2597d8b11ed14dfa636ba", 0x10, 0x0, 0x0, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/platform/i8042/serio1/rate\x00', 0x2, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cpu.max\x00', 0x2a02c0, 0x0) sendfile$auto(r1, r1, &(0x7f0000000000)=0x3, 0xad6) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/vtconsole/vtcon1/bind\x00', 0x182b02, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda1\x00', 0xe6e43, 0x0) ioctl$auto_BLKFLSBUF(r3, 0x1261, 0x0) ioctl$auto_BLKFLSBUF(r3, 0x1261, 0x0) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, 0x0, 0x20800, 0x0) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x9}, 0x8) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) landlock_create_ruleset$auto(&(0x7f0000000000)={0x6, 0x3, 0x3}, 0x18, 0x0) read$auto(r4, 0x0, 0x20) r5 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000200)='/proc/fs/cifs/LinuxExtensionsEnabled\x00', 0x48043, 0x0) write$auto(r5, 0x0, 0x6) unshare$auto(0x40000080) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001180)='/sys/bus/hid/drivers/xiaomi/bind\x00', 0x20f42, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000300)="b2b083ef6ab3908cb18f99fc383912a0cc77a81c856e3a29f938de1781a5f3e713dabfd885fa962ea0d8301edeadf1ce4d09adc8e6fc67e1d3a1d028ef199e229418765c8cf02a953113d3a0ed8f12419496f72192a61ae5a83b6c1147935787e1d4e95619ac35f74e9d818e4550fdf22caf7f0bee6d8c0ae452ab528b45d33d041e69993426fc2604e41e", 0x4a) r6 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv6/neigh/bond_slave_1/ucast_solicit\x00', 0x101202, 0x0) sendfile$auto(r2, r6, 0x0, 0x1) 0s ago: executing program 3 (id=7254): openat$auto_dynamic_events_ops_trace_dynevent(0xffffffffffffff9c, 0x0, 0x103, 0x0) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) r0 = fsopen$auto(0x0, 0x1) fsconfig$auto(r0, 0x6, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x801, 0x84) socket(0x2, 0x3, 0x1) sendmmsg$auto(0x3, 0x0, 0x3, 0x0) ioctl$auto_PPPIOCSMRU(0xffffffffffffffff, 0xc004743e, 0x0) bind$auto(0xffffffffffffffff, &(0x7f0000000200)=@generic={0x11, "00030f00"}, 0x80) r1 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0) read$auto(r1, 0x0, 0x1f40) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r2, &(0x7f0000000200)={0x0, 0x9}, 0x3) close_range$auto(0x2, 0x8, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0xa, 0x0) socket$nl_generic(0x10, 0x3, 0x10) time$auto(&(0x7f0000000000)=0x101) r3 = getpid() process_vm_readv$auto(r3, &(0x7f0000000000)={0x0, 0xfff}, 0x1, 0x0, 0x6, 0x0) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) openat$auto_proc_clear_refs_operations_internal(0xffffffffffffff9c, &(0x7f0000000600)='/proc/thread-self/clear_refs\x00', 0x2, 0x0) r4 = waitid$auto(0x5, 0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000180)={{0x8, 0x80}, {0x2, 0x6}, 0x4, 0x5, 0x1, 0x3, 0x0, 0x8000, 0x80000000, 0x7, 0xb7, 0x5d9, 0x5, 0x7ff, 0x2055}) prctl$auto(0x5, 0x80000000, r4, 0x78, 0x8) r5 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) preadv2$auto(r5, &(0x7f0000000080)={0x0, 0x80000000}, 0x6, 0xffffffffffffffff, 0x4, 0x2e) kernel console output (not intermixed with test programs): ASK> [ 1671.568955][ T3062] dump_stack_lvl+0x100/0x190 [ 1671.568982][ T3062] should_fail_ex.cold+0x5/0xa [ 1671.569001][ T3062] should_failslab+0xc2/0x120 [ 1671.569017][ T3062] __kmalloc_node_track_caller_noprof+0xe3/0x850 [ 1671.569041][ T3062] ? kstrdup_const+0x63/0x80 [ 1671.569067][ T3062] kstrdup+0x51/0xe0 [ 1671.569091][ T3062] kstrdup_const+0x63/0x80 [ 1671.569114][ T3062] __kernfs_new_node+0x9b/0x960 [ 1671.569137][ T3062] ? __pfx___kernfs_new_node+0x10/0x10 [ 1671.569163][ T3062] ? find_held_lock+0x2b/0x80 [ 1671.569177][ T3062] ? kernfs_root+0xee/0x2a0 [ 1671.569196][ T3062] ? kernfs_root+0xee/0x2a0 [ 1671.569220][ T3062] kernfs_new_node+0x11b/0x1a0 [ 1671.569245][ T3062] kernfs_create_link+0xcc/0x240 [ 1671.569263][ T3062] sysfs_do_create_link_sd+0x90/0x140 [ 1671.569284][ T3062] sysfs_create_link+0x61/0xc0 [ 1671.569304][ T3062] device_add+0x675/0x1950 [ 1671.569329][ T3062] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1671.569354][ T3062] ? __pfx_device_add+0x10/0x10 [ 1671.569377][ T3062] ? lockdep_init_map_type+0x5c/0x250 [ 1671.569398][ T3062] ? __init_waitqueue_head+0xca/0x150 [ 1671.569424][ T3062] netdev_register_kobject+0x1a9/0x3d0 [ 1671.569450][ T3062] register_netdevice+0x12e0/0x2210 [ 1671.569474][ T3062] ? __pfx_register_netdevice+0x10/0x10 [ 1671.569498][ T3062] ? __pfx_loopback_net_init+0x10/0x10 [ 1671.569537][ T3062] register_netdev+0x34/0x50 [ 1671.569556][ T3062] loopback_net_init+0x7a/0x170 [ 1671.569579][ T3062] ? __pfx_loopback_net_init+0x10/0x10 [ 1671.569599][ T3062] ops_init+0x1e2/0x5f0 [ 1671.569620][ T3062] setup_net+0x118/0x3a0 [ 1671.569639][ T3062] ? __pfx_setup_net+0x10/0x10 [ 1671.569656][ T3062] ? lockdep_init_map_type+0x5c/0x250 [ 1671.569676][ T3062] ? mutex_init_lockep+0x110/0x150 [ 1671.569707][ T3062] copy_net_ns+0x46f/0x7c0 [ 1671.569730][ T3062] create_new_namespaces+0x3ea/0xac0 [ 1671.569752][ T3062] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 1671.569771][ T3062] ksys_unshare+0x473/0xad0 [ 1671.569790][ T3062] ? __pfx_ksys_unshare+0x10/0x10 [ 1671.569816][ T3062] __x64_sys_unshare+0x31/0x40 [ 1671.569834][ T3062] do_syscall_64+0x106/0xf80 [ 1671.569851][ T3062] ? clear_bhb_loop+0x40/0x90 [ 1671.569870][ T3062] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1671.569887][ T3062] RIP: 0033:0x7fecf739c799 [ 1671.569902][ T3062] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1671.569916][ T3062] RSP: 002b:00007fecf55d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1671.569932][ T3062] RAX: ffffffffffffffda RBX: 00007fecf7616090 RCX: 00007fecf739c799 [ 1671.569943][ T3062] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 1671.569952][ T3062] RBP: 00007fecf7432bd9 R08: 0000000000000000 R09: 0000000000000000 [ 1671.569962][ T3062] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1671.569971][ T3062] R13: 00007fecf7616128 R14: 00007fecf7616090 R15: 00007ffe92140a48 [ 1671.569993][ T3062] [ 1673.734575][ T3127] FAULT_INJECTION: forcing a failure. [ 1673.734575][ T3127] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1673.848687][ T3127] CPU: 0 UID: 0 PID: 3127 Comm: syz.6.6550 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1673.848724][ T3127] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1673.848730][ T3127] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1673.848739][ T3127] Call Trace: [ 1673.848745][ T3127] [ 1673.848751][ T3127] dump_stack_lvl+0x100/0x190 [ 1673.848778][ T3127] should_fail_ex.cold+0x5/0xa [ 1673.848795][ T3127] _copy_from_user+0x2e/0xd0 [ 1673.848820][ T3127] mem_rw+0x1d2/0x640 [ 1673.848841][ T3127] vfs_write+0x2aa/0x1070 [ 1673.848865][ T3127] ? __pfx_mem_write+0x10/0x10 [ 1673.848881][ T3127] ? __pfx_vfs_write+0x10/0x10 [ 1673.848903][ T3127] ? __fget_files+0x215/0x3d0 [ 1673.848920][ T3127] ? __fget_files+0x21f/0x3d0 [ 1673.848939][ T3127] ksys_write+0x12a/0x250 [ 1673.848961][ T3127] ? __pfx_ksys_write+0x10/0x10 [ 1673.848989][ T3127] do_syscall_64+0x106/0xf80 [ 1673.849006][ T3127] ? clear_bhb_loop+0x40/0x90 [ 1673.849025][ T3127] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1673.849040][ T3127] RIP: 0033:0x7fceb9f9c799 [ 1673.849052][ T3127] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1673.849067][ T3127] RSP: 002b:00007fcebae50028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1673.849082][ T3127] RAX: ffffffffffffffda RBX: 00007fceba215fa0 RCX: 00007fceb9f9c799 [ 1673.849092][ T3127] RDX: 00000000fffffc96 RSI: 0000200000001680 RDI: 0000000000000008 [ 1673.849101][ T3127] RBP: 00007fcebae50090 R08: 0000000000000000 R09: 0000000000000000 [ 1673.849110][ T3127] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1673.849118][ T3127] R13: 00007fceba216038 R14: 00007fceba215fa0 R15: 00007ffe5b4f3488 [ 1673.849138][ T3127] [ 1674.409201][ T3143] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.2.6553: iget: checksum invalid [ 1674.472790][ T3143] faux_driver regulatory: loading /lib/firmware/updates/syzkaller/regulatory.db failed with error -74 [ 1674.579093][ T3143] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.2.6553: iget: checksum invalid [ 1674.626272][ T3148] FAULT_INJECTION: forcing a failure. [ 1674.626272][ T3148] name failslab, interval 1, probability 0, space 0, times 0 [ 1674.669854][ T3143] faux_driver regulatory: loading /lib/firmware/updates/regulatory.db failed with error -74 [ 1674.712474][ T3148] CPU: 0 UID: 0 PID: 3148 Comm: syz.6.6555 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1674.712501][ T3148] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1674.712508][ T3148] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1674.712518][ T3148] Call Trace: [ 1674.712524][ T3148] [ 1674.712530][ T3148] dump_stack_lvl+0x100/0x190 [ 1674.712559][ T3148] should_fail_ex.cold+0x5/0xa [ 1674.712578][ T3148] should_failslab+0xc2/0x120 [ 1674.712594][ T3148] __kmalloc_cache_noprof+0x7a/0x6f0 [ 1674.712614][ T3148] ? vhost_net_open+0x73/0x8b0 [ 1674.712725][ T3148] ? __pfx_vhost_net_open+0x10/0x10 [ 1674.712744][ T3148] vhost_net_open+0x73/0x8b0 [ 1674.712761][ T3148] ? __pfx_vhost_net_open+0x10/0x10 [ 1674.712780][ T3148] misc_open+0x26d/0x450 [ 1674.712815][ T3148] ? __pfx_misc_open+0x10/0x10 [ 1674.712837][ T3148] chrdev_open+0x234/0x6a0 [ 1674.712852][ T3148] ? __pfx_apparmor_file_open+0x10/0x10 [ 1674.712873][ T3148] ? __pfx_chrdev_open+0x10/0x10 [ 1674.712889][ T3148] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 1674.712909][ T3148] do_dentry_open+0x6d8/0x1660 [ 1674.712923][ T3148] ? __pfx_chrdev_open+0x10/0x10 [ 1674.712943][ T3148] vfs_open+0x82/0x3f0 [ 1674.712963][ T3148] path_openat+0x208c/0x31a0 [ 1674.712984][ T3148] ? __pfx_path_openat+0x10/0x10 [ 1674.713006][ T3148] do_file_open+0x20e/0x430 [ 1674.713023][ T3148] ? __pfx_do_file_open+0x10/0x10 [ 1674.713051][ T3148] ? alloc_fd+0x476/0x790 [ 1674.713067][ T3148] ? do_getname+0x191/0x390 [ 1674.713088][ T3148] do_sys_openat2+0x10d/0x1e0 [ 1674.713106][ T3148] ? __pfx_do_sys_openat2+0x10/0x10 [ 1674.713127][ T3148] ? __fget_files+0x21f/0x3d0 [ 1674.713145][ T3148] __x64_sys_openat+0x12d/0x210 [ 1674.713164][ T3148] ? __pfx___x64_sys_openat+0x10/0x10 [ 1674.713191][ T3148] do_syscall_64+0x106/0xf80 [ 1674.713208][ T3148] ? clear_bhb_loop+0x40/0x90 [ 1674.713227][ T3148] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1674.713243][ T3148] RIP: 0033:0x7fceb9f9c799 [ 1674.713259][ T3148] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1674.713274][ T3148] RSP: 002b:00007fcebae50028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1674.713290][ T3148] RAX: ffffffffffffffda RBX: 00007fceba215fa0 RCX: 00007fceb9f9c799 [ 1674.713301][ T3148] RDX: 0000000000000000 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 1674.713311][ T3148] RBP: 00007fceba032bd9 R08: 0000000000000000 R09: 0000000000000000 [ 1674.713322][ T3148] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1674.713332][ T3148] R13: 00007fceba216038 R14: 00007fceba215fa0 R15: 00007ffe5b4f3488 [ 1674.713352][ T3148] [ 1675.274547][ T3143] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.2.6553: iget: checksum invalid [ 1675.324120][ T3143] faux_driver regulatory: loading /lib/firmware/syzkaller/regulatory.db failed with error -74 [ 1675.381993][ T3143] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.2.6553: iget: checksum invalid [ 1675.436868][ T3143] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -74 [ 1675.468151][T29579] Bluetooth: hci5: unexpected event 0x1d length: 6 > 5 [ 1675.482315][ T3143] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -74 [ 1675.542190][ T3143] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 1678.556690][ T3225] FAULT_INJECTION: forcing a failure. [ 1678.556690][ T3225] name failslab, interval 1, probability 0, space 0, times 0 [ 1678.693089][ T3225] CPU: 0 UID: 0 PID: 3225 Comm: syz.2.6565 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1678.693119][ T3225] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1678.693125][ T3225] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1678.693135][ T3225] Call Trace: [ 1678.693141][ T3225] [ 1678.693148][ T3225] dump_stack_lvl+0x100/0x190 [ 1678.693176][ T3225] should_fail_ex.cold+0x5/0xa [ 1678.693195][ T3225] should_failslab+0xc2/0x120 [ 1678.693211][ T3225] __kvmalloc_node_noprof+0xfa/0xa00 [ 1678.693235][ T3225] ? alloc_fdtable+0x110/0x2d0 [ 1678.693262][ T3225] alloc_fdtable+0x110/0x2d0 [ 1678.693285][ T3225] dup_fd+0x995/0xd10 [ 1678.693305][ T3225] __x64_sys_close_range+0x405/0x5d0 [ 1678.693323][ T3225] ? __pfx___x64_sys_close_range+0x10/0x10 [ 1678.693357][ T3225] do_syscall_64+0x106/0xf80 [ 1678.693377][ T3225] ? clear_bhb_loop+0x40/0x90 [ 1678.693397][ T3225] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1678.693412][ T3225] RIP: 0033:0x7fecf739c799 [ 1678.693426][ T3225] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1678.693441][ T3225] RSP: 002b:00007fecf55f6028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 1678.693457][ T3225] RAX: ffffffffffffffda RBX: 00007fecf7615fa0 RCX: 00007fecf739c799 [ 1678.693468][ T3225] RDX: 0000000000000002 RSI: 0000000000000008 RDI: 0000000000000003 [ 1678.693477][ T3225] RBP: 00007fecf7432bd9 R08: 0000000000000000 R09: 0000000000000000 [ 1678.693486][ T3225] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1678.693495][ T3225] R13: 00007fecf7616038 R14: 00007fecf7615fa0 R15: 00007ffe92140a48 [ 1678.693515][ T3225] [ 1680.592574][ T3241] block2mtd: parameter too long [ 1680.616913][ T3241] program syz.2.6567 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1681.035113][ T3253] capability: warning: `syz.3.6569' uses 32-bit capabilities (legacy support in use) [ 1681.541511][ T3262] input: jJǸ-¶š9ã%vø“û¨lÐQ  J86Ö‘ as /devices/virtual/input/input104 [ 1683.633041][ T3310] FAULT_INJECTION: forcing a failure. [ 1683.633041][ T3310] name failslab, interval 1, probability 0, space 0, times 0 [ 1683.738930][ T3310] CPU: 0 UID: 0 PID: 3310 Comm: syz.7.6581 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1683.738960][ T3310] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1683.738968][ T3310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1683.738978][ T3310] Call Trace: [ 1683.738984][ T3310] [ 1683.738991][ T3310] dump_stack_lvl+0x100/0x190 [ 1683.739020][ T3310] should_fail_ex.cold+0x5/0xa [ 1683.739041][ T3310] should_failslab+0xc2/0x120 [ 1683.739058][ T3310] __kmalloc_cache_noprof+0x7a/0x6f0 [ 1683.739080][ T3310] ? ovs_ct_limit_cmd_set+0x30a/0xa70 [ 1683.739108][ T3310] ovs_ct_limit_cmd_set+0x30a/0xa70 [ 1683.739133][ T3310] ? __pfx_ovs_ct_limit_cmd_set+0x10/0x10 [ 1683.739154][ T3310] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1a0/0x280 [ 1683.739183][ T3310] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1aa/0x280 [ 1683.739211][ T3310] genl_family_rcv_msg_doit+0x214/0x300 [ 1683.739236][ T3310] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1683.739257][ T3310] ? genl_get_cmd+0x3ef/0x720 [ 1683.739282][ T3310] ? bpf_lsm_capable+0x9/0x10 [ 1683.739298][ T3310] ? security_capable+0x80/0x260 [ 1683.739320][ T3310] ? ns_capable+0xd2/0xf0 [ 1683.739337][ T3310] genl_rcv_msg+0x560/0x800 [ 1683.739361][ T3310] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1683.739384][ T3310] ? __pfx_ovs_ct_limit_cmd_set+0x10/0x10 [ 1683.739424][ T3310] netlink_rcv_skb+0x159/0x420 [ 1683.739445][ T3310] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1683.739469][ T3310] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1683.739497][ T3310] ? netlink_deliver_tap+0x1ae/0xcc0 [ 1683.739519][ T3310] genl_rcv+0x28/0x40 [ 1683.739539][ T3310] netlink_unicast+0x5aa/0x870 [ 1683.739568][ T3310] ? __pfx_netlink_unicast+0x10/0x10 [ 1683.739587][ T3310] ? __asan_memset+0x23/0x50 [ 1683.739608][ T3310] ? __build_skb_around+0x278/0x390 [ 1683.739635][ T3310] ? is_vmalloc_addr+0x86/0xa0 [ 1683.739658][ T3310] netlink_sendmsg+0x8b0/0xda0 [ 1683.739680][ T3310] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1683.739698][ T3310] ? __import_iovec+0x1d2/0x640 [ 1683.739716][ T3310] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 1683.739739][ T3310] ____sys_sendmsg+0xa54/0xc30 [ 1683.739763][ T3310] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1683.739787][ T3310] ? try_to_wake_up+0x644/0x1a80 [ 1683.739807][ T3310] ___sys_sendmsg+0x190/0x1e0 [ 1683.739831][ T3310] ? __pfx____sys_sendmsg+0x10/0x10 [ 1683.739853][ T3310] ? futex_private_hash_put+0x107/0x1c0 [ 1683.739894][ T3310] __sys_sendmsg+0x170/0x220 [ 1683.739912][ T3310] ? __pfx___sys_sendmsg+0x10/0x10 [ 1683.739930][ T3310] ? __x64_sys_futex+0x34f/0x4d0 [ 1683.739962][ T3310] do_syscall_64+0x106/0xf80 [ 1683.739980][ T3310] ? clear_bhb_loop+0x40/0x90 [ 1683.739999][ T3310] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1683.740014][ T3310] RIP: 0033:0x7f138179c799 [ 1683.740029][ T3310] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1683.740044][ T3310] RSP: 002b:00007f138264e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1683.740060][ T3310] RAX: ffffffffffffffda RBX: 00007f1381a15fa0 RCX: 00007f138179c799 [ 1683.740070][ T3310] RDX: 0000000000000004 RSI: 0000200000000100 RDI: 0000000000000007 [ 1683.740081][ T3310] RBP: 00007f1381832bd9 R08: 0000000000000000 R09: 0000000000000000 [ 1683.740090][ T3310] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1683.740100][ T3310] R13: 00007f1381a16038 R14: 00007f1381a15fa0 R15: 00007ffe3fb72838 [ 1683.740121][ T3310] [ 1685.103752][T29579] Bluetooth: hci0: unexpected event 0x1d length: 6 > 5 [ 1685.422411][ T3338] FAULT_INJECTION: forcing a failure. [ 1685.422411][ T3338] name failslab, interval 1, probability 0, space 0, times 0 [ 1685.544488][ T3338] CPU: 0 UID: 0 PID: 3338 Comm: syz.7.6588 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1685.544518][ T3338] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1685.544524][ T3338] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1685.544534][ T3338] Call Trace: [ 1685.544540][ T3338] [ 1685.544548][ T3338] dump_stack_lvl+0x100/0x190 [ 1685.544577][ T3338] should_fail_ex.cold+0x5/0xa [ 1685.544596][ T3338] should_failslab+0xc2/0x120 [ 1685.544612][ T3338] __kmalloc_cache_noprof+0x7a/0x6f0 [ 1685.544632][ T3338] ? alloc_mnt_ns+0xce/0x520 [ 1685.544657][ T3338] alloc_mnt_ns+0xce/0x520 [ 1685.544678][ T3338] copy_mnt_ns+0x220/0xc30 [ 1685.544695][ T3338] ? kmem_cache_alloc_noprof+0x292/0x6e0 [ 1685.544715][ T3338] ? create_new_namespaces+0x30/0xac0 [ 1685.544731][ T3338] ? rcu_is_watching+0x12/0xc0 [ 1685.544756][ T3338] create_new_namespaces+0xd3/0xac0 [ 1685.544772][ T3338] ? bpf_lsm_capable+0x9/0x10 [ 1685.544786][ T3338] ? security_capable+0x80/0x260 [ 1685.544810][ T3338] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 1685.544828][ T3338] ksys_unshare+0x473/0xad0 [ 1685.544849][ T3338] ? __pfx_ksys_unshare+0x10/0x10 [ 1685.544874][ T3338] __x64_sys_unshare+0x31/0x40 [ 1685.544893][ T3338] do_syscall_64+0x106/0xf80 [ 1685.544910][ T3338] ? clear_bhb_loop+0x40/0x90 [ 1685.544929][ T3338] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1685.544945][ T3338] RIP: 0033:0x7f138179c799 [ 1685.544959][ T3338] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1685.544975][ T3338] RSP: 002b:00007f138264e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1685.544990][ T3338] RAX: ffffffffffffffda RBX: 00007f1381a15fa0 RCX: 00007f138179c799 [ 1685.545000][ T3338] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000020000 [ 1685.545009][ T3338] RBP: 00007f1381832bd9 R08: 0000000000000000 R09: 0000000000000000 [ 1685.545019][ T3338] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1685.545029][ T3338] R13: 00007f1381a16038 R14: 00007f1381a15fa0 R15: 00007ffe3fb72838 [ 1685.545049][ T3338] [ 1686.067058][ T30] audit: type=1804 audit(4294967300.390:144): pid=3339 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.7.6588" name="/newroot/sys/kernel/debug/tracing/events/vmalloc/alloc_vmap_area/filter" dev="tracefs" ino=19680823 res=1 errno=0 [ 1687.507857][ T3365] Invalid ELF header magic: != ELF [ 1692.255585][ T3467] input: f¬ as /devices/virtual/input/input105 [ 1692.855356][ T3496] No such timeout policy "" [ 1692.902167][ T3496] netlink: Failed to associated timeout policy '' [ 1693.739160][ T3509] FAULT_INJECTION: forcing a failure. [ 1693.739160][ T3509] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1693.871933][ T3509] CPU: 0 UID: 0 PID: 3509 Comm: syz.7.6613 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1693.871962][ T3509] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1693.871969][ T3509] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1693.871979][ T3509] Call Trace: [ 1693.871984][ T3509] [ 1693.871991][ T3509] dump_stack_lvl+0x100/0x190 [ 1693.872020][ T3509] should_fail_ex.cold+0x5/0xa [ 1693.872043][ T3509] _copy_from_user+0x2e/0xd0 [ 1693.872069][ T3509] io_uring_setup+0xc0/0x160 [ 1693.872189][ T3509] ? __pfx_io_uring_setup+0x10/0x10 [ 1693.872208][ T3509] ? do_futex+0x192/0x350 [ 1693.872228][ T3509] ? __pfx_do_futex+0x10/0x10 [ 1693.872246][ T3509] ? __pfx___do_sys_newfstatat+0x10/0x10 [ 1693.872274][ T3509] ? xfd_validate_state+0x129/0x190 [ 1693.872302][ T3509] __x64_sys_io_uring_setup+0xc2/0x170 [ 1693.872320][ T3509] do_syscall_64+0x106/0xf80 [ 1693.872339][ T3509] ? clear_bhb_loop+0x40/0x90 [ 1693.872358][ T3509] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1693.872375][ T3509] RIP: 0033:0x7f138179c799 [ 1693.872389][ T3509] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1693.872404][ T3509] RSP: 002b:00007f138264e028 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 1693.872420][ T3509] RAX: ffffffffffffffda RBX: 00007f1381a15fa0 RCX: 00007f138179c799 [ 1693.872431][ T3509] RDX: 0000000000000000 RSI: 0000200000000340 RDI: 0000000000001d48 [ 1693.872440][ T3509] RBP: 00007f1381832bd9 R08: 0000000000000000 R09: 0000000000000000 [ 1693.872450][ T3509] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1693.872459][ T3509] R13: 00007f1381a16038 R14: 00007f1381a15fa0 R15: 00007ffe3fb72838 [ 1693.872478][ T3509] [ 1698.259950][ T3569] Invalid ELF header magic: != ELF [ 1700.481805][ T3595] ptp ptp0: new virtual clock ptp1 [ 1700.614975][ T3595] ptp ptp0: guarantee physical clock free running [ 1700.693421][ T3609] ptp ptp0: delete virtual clock ptp1 [ 1700.884012][ T3609] ptp ptp0: only physical clock in use now [ 1701.254439][ T3653] syz.3.6626 uses obsolete (PF_INET,SOCK_PACKET) [ 1702.518247][ T3687] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1703.236837][ T3683] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1707.393800][ T3754] mkiss: ax0: crc mode is auto. [ 1708.355618][ T3765] FAULT_INJECTION: forcing a failure. [ 1708.355618][ T3765] name failslab, interval 1, probability 0, space 0, times 0 [ 1708.504317][ T3765] CPU: 0 UID: 0 PID: 3765 Comm: syz.3.6649 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1708.504348][ T3765] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1708.504354][ T3765] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1708.504365][ T3765] Call Trace: [ 1708.504370][ T3765] [ 1708.504377][ T3765] dump_stack_lvl+0x100/0x190 [ 1708.504407][ T3765] should_fail_ex.cold+0x5/0xa [ 1708.504426][ T3765] should_failslab+0xc2/0x120 [ 1708.504442][ T3765] kmem_cache_alloc_node_noprof+0x81/0x6f0 [ 1708.504464][ T3765] ? __alloc_skb+0x140/0x710 [ 1708.504486][ T3765] __alloc_skb+0x140/0x710 [ 1708.504501][ T3765] ? __alloc_skb+0x5b7/0x710 [ 1708.504517][ T3765] ? __pfx___alloc_skb+0x10/0x10 [ 1708.504532][ T3765] ? genl_rcv_msg+0x4be/0x800 [ 1708.504569][ T3765] netlink_ack+0x117/0xb80 [ 1708.504595][ T3765] netlink_rcv_skb+0x333/0x420 [ 1708.504615][ T3765] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1708.504639][ T3765] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1708.504666][ T3765] ? netlink_deliver_tap+0x1ae/0xcc0 [ 1708.504688][ T3765] genl_rcv+0x28/0x40 [ 1708.504707][ T3765] netlink_unicast+0x5aa/0x870 [ 1708.504729][ T3765] ? __pfx_netlink_unicast+0x10/0x10 [ 1708.504755][ T3765] netlink_sendmsg+0x8b0/0xda0 [ 1708.504778][ T3765] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1708.504800][ T3765] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 1708.504825][ T3765] __sys_sendto+0x4aa/0x520 [ 1708.504842][ T3765] ? __pfx___sys_sendto+0x10/0x10 [ 1708.504864][ T3765] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 1708.504890][ T3765] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 1708.504928][ T3765] __x64_sys_sendto+0xe0/0x1c0 [ 1708.504944][ T3765] ? do_syscall_64+0x95/0xf80 [ 1708.504962][ T3765] ? lockdep_hardirqs_on+0x78/0x100 [ 1708.504980][ T3765] do_syscall_64+0x106/0xf80 [ 1708.504997][ T3765] ? clear_bhb_loop+0x40/0x90 [ 1708.505015][ T3765] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1708.505031][ T3765] RIP: 0033:0x7f38d9b5cfce [ 1708.505046][ T3765] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1708.505061][ T3765] RSP: 002b:00007f38daaf5e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1708.505077][ T3765] RAX: ffffffffffffffda RBX: 00007f38daaf76c0 RCX: 00007f38d9b5cfce [ 1708.505087][ T3765] RDX: 0000000000000020 RSI: 00007f38daaf6000 RDI: 0000000000000004 [ 1708.505097][ T3765] RBP: 0000000000000000 R08: 00007f38daaf5f04 R09: 000000000000000c [ 1708.505106][ T3765] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1708.505116][ T3765] R13: 00007f38daaf5f58 R14: 00007f38daaf6000 R15: 0000000000000000 [ 1708.505136][ T3765] [ 1709.682662][ T3796] netlink: 342 bytes leftover after parsing attributes in process `syz.3.6656'. [ 1710.222806][ T3799] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6657'. [ 1710.762609][ T3799] team0: Port device team_slave_0 removed [ 1711.880627][ T3821] zswap: compressor not available [ 1713.852589][ T3853] vivid-007: ================= START STATUS ================= [ 1713.934077][ T3853] vivid-007: Generate PTS: true [ 1713.938978][ T3853] vivid-007: Generate SCR: true [ 1714.034945][ T3853] tpg source WxH: 320x240 (Y'CbCr) [ 1714.040095][ T3853] tpg field: 1 [ 1714.162428][ T3853] tpg crop: (0,0)/320x240 [ 1714.222201][ T3853] tpg compose: (0,0)/320x240 [ 1714.295397][ T3853] tpg colorspace: 8 [ 1714.332454][ T3853] tpg transfer function: 0/0 [ 1714.350941][ T3853] tpg Y'CbCr encoding: 0/0 [ 1714.397310][ T3853] tpg quantization: 0/0 [ 1714.425849][ T3853] tpg RGB range: 0/2 [ 1714.470461][ T3853] vivid-007: ================== END STATUS ================== [ 1716.476187][ T3881] FAULT_INJECTION: forcing a failure. [ 1716.476187][ T3881] name failslab, interval 1, probability 0, space 0, times 0 [ 1716.598662][ T3881] CPU: 0 UID: 0 PID: 3881 Comm: syz.3.6672 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1716.598692][ T3881] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1716.598698][ T3881] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1716.598708][ T3881] Call Trace: [ 1716.598715][ T3881] [ 1716.598722][ T3881] dump_stack_lvl+0x100/0x190 [ 1716.598750][ T3881] should_fail_ex.cold+0x5/0xa [ 1716.598770][ T3881] should_failslab+0xc2/0x120 [ 1716.598786][ T3881] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1716.598808][ T3881] ? posix_lock_inode+0x5b2/0x2440 [ 1716.598823][ T3881] ? lockdep_init_map_type+0x5c/0x250 [ 1716.598847][ T3881] posix_lock_inode+0x5b2/0x2440 [ 1716.598870][ T3881] ? __pfx_posix_lock_inode+0x10/0x10 [ 1716.598891][ T3881] vfs_lock_file+0xfb/0x150 [ 1716.598906][ T3881] fcntl_setlk+0x782/0xe40 [ 1716.598924][ T3881] ? __pfx_fcntl_setlk+0x10/0x10 [ 1716.598942][ T3881] ? __might_fault+0xc5/0x140 [ 1716.598962][ T3881] ? __might_fault+0xc5/0x140 [ 1716.598990][ T3881] do_fcntl+0xf39/0x1670 [ 1716.599009][ T3881] ? __pfx_do_fcntl+0x10/0x10 [ 1716.599029][ T3881] ? __x64_sys_futex+0x34f/0x4d0 [ 1716.599047][ T3881] ? __x64_sys_futex+0x358/0x4d0 [ 1716.599068][ T3881] ? xfd_validate_state+0x129/0x190 [ 1716.599088][ T3881] ? tomoyo_file_fcntl+0x6c/0xc0 [ 1716.599111][ T3881] __x64_sys_fcntl+0x163/0x200 [ 1716.599140][ T3881] do_syscall_64+0x106/0xf80 [ 1716.599159][ T3881] ? clear_bhb_loop+0x40/0x90 [ 1716.599179][ T3881] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1716.599195][ T3881] RIP: 0033:0x7f38d9b9c799 [ 1716.599210][ T3881] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1716.599225][ T3881] RSP: 002b:00007f38daaf7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000048 [ 1716.599240][ T3881] RAX: ffffffffffffffda RBX: 00007f38d9e15fa0 RCX: 00007f38d9b9c799 [ 1716.599250][ T3881] RDX: 0000000000001298 RSI: 0000000000000026 RDI: 0000000000000001 [ 1716.599259][ T3881] RBP: 00007f38d9c32bd9 R08: 0000000000000000 R09: 0000000000000000 [ 1716.599269][ T3881] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1716.599278][ T3881] R13: 00007f38d9e16038 R14: 00007f38d9e15fa0 R15: 00007ffe92ae7638 [ 1716.599298][ T3881] [ 1718.032151][T29579] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 1718.509458][ T3904] openvswitch: netlink: IP tunnel TTL not specified. [ 1719.675018][ T3920] FAULT_INJECTION: forcing a failure. [ 1719.675018][ T3920] name failslab, interval 1, probability 0, space 0, times 0 [ 1719.786186][ T3920] CPU: 0 UID: 0 PID: 3920 Comm: syz.6.6678 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1719.786217][ T3920] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1719.786223][ T3920] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1719.786233][ T3920] Call Trace: [ 1719.786240][ T3920] [ 1719.786246][ T3920] dump_stack_lvl+0x100/0x190 [ 1719.786275][ T3920] should_fail_ex.cold+0x5/0xa [ 1719.786294][ T3920] ? usb_hcd_submit_urb+0x601/0x2150 [ 1719.786407][ T3920] should_failslab+0xc2/0x120 [ 1719.786424][ T3920] __kmalloc_noprof+0xe0/0x850 [ 1719.786447][ T3920] ? mark_held_locks+0x40/0x70 [ 1719.786470][ T3920] usb_hcd_submit_urb+0x601/0x2150 [ 1719.786499][ T3920] usb_submit_urb+0x8aa/0x1910 [ 1719.786542][ T3920] ? __init_swait_queue_head+0xca/0x150 [ 1719.786568][ T3920] usb_start_wait_urb+0x106/0x4c0 [ 1719.786586][ T3920] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 1719.786609][ T3920] ? __asan_memset+0x23/0x50 [ 1719.786634][ T3920] usb_control_msg+0x326/0x4a0 [ 1719.786650][ T3920] ? __pfx_usb_control_msg+0x10/0x10 [ 1719.786665][ T3920] ? kernfs_find_and_get_ns+0x5f/0x70 [ 1719.786692][ T3920] usb_hub_set_port_power+0x125/0x180 [ 1719.786714][ T3920] disable_store+0x2eb/0x450 [ 1719.786777][ T3920] ? __pfx_disable_store+0x10/0x10 [ 1719.786796][ T3920] ? find_held_lock+0x2b/0x80 [ 1719.786810][ T3920] ? sysfs_file_kobj+0xe4/0x290 [ 1719.786832][ T3920] ? sysfs_file_kobj+0xe4/0x290 [ 1719.786851][ T3920] ? __pfx_disable_store+0x10/0x10 [ 1719.786868][ T3920] dev_attr_store+0x58/0x80 [ 1719.786894][ T3920] ? __pfx_dev_attr_store+0x10/0x10 [ 1719.786917][ T3920] sysfs_kf_write+0xf2/0x150 [ 1719.786937][ T3920] kernfs_fop_write_iter+0x3e0/0x5f0 [ 1719.786952][ T3920] ? __pfx_sysfs_kf_write+0x10/0x10 [ 1719.786979][ T3920] vfs_write+0x6ac/0x1070 [ 1719.787005][ T3920] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 1719.787023][ T3920] ? __pfx_vfs_write+0x10/0x10 [ 1719.787060][ T3920] ksys_write+0x12a/0x250 [ 1719.787084][ T3920] ? __pfx_ksys_write+0x10/0x10 [ 1719.787113][ T3920] do_syscall_64+0x106/0xf80 [ 1719.787131][ T3920] ? clear_bhb_loop+0x40/0x90 [ 1719.787151][ T3920] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1719.787167][ T3920] RIP: 0033:0x7fceb9f9c799 [ 1719.787182][ T3920] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1719.787196][ T3920] RSP: 002b:00007fcebae2f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1719.787213][ T3920] RAX: ffffffffffffffda RBX: 00007fceba216090 RCX: 00007fceb9f9c799 [ 1719.787224][ T3920] RDX: 00000000000005c8 RSI: 0000000000000000 RDI: 0000000000000003 [ 1719.787233][ T3920] RBP: 00007fceba032bd9 R08: 0000000000000000 R09: 0000000000000000 [ 1719.787243][ T3920] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1719.787252][ T3920] R13: 00007fceba216128 R14: 00007fceba216090 R15: 00007ffe5b4f3488 [ 1719.787274][ T3920] [ 1721.729967][T29579] Bluetooth: hci0: unexpected event 0x1d length: 6 > 5 [ 1722.685487][ T3956] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1725.502884][ T3993] ======================================================= [ 1725.502884][ T3993] WARNING: The mand mount option has been deprecated and [ 1725.502884][ T3993] and is ignored by this kernel. Remove the mand [ 1725.502884][ T3993] option from the mount to silence this warning. [ 1725.502884][ T3993] ======================================================= [ 1725.555605][ T3993] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6698'. [ 1725.654633][T29579] Bluetooth: hci5: unexpected event 0x1d length: 6 > 5 [ 1725.769294][ T4003] netlink: 28 bytes leftover after parsing attributes in process `syz.6.6697'. [ 1725.911660][ T4003] veth1_macvtap: left promiscuous mode [ 1726.461356][ T4013] zram: Added device: zram2 [ 1726.524903][ T4015] pci 0000:00:01.3: enabling device (0000 -> 0001) [ 1726.893475][ T4015] ACPI: \_SB_.LNKS: No IRQ available. Try pci=noacpi or acpi=off [ 1726.966350][ T4015] pci 0000:00:01.3: PCI INT A: no GSI [ 1728.201066][ T4061] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1728.269125][ T4059] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1729.228404][ T4074] zram: Added device: zram3 [ 1729.807406][T29579] Bluetooth: hci5: unexpected event 0x1d length: 6 > 5 [ 1730.549441][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 1730.556437][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 1732.727633][T29579] Bluetooth: hci2: unexpected event 0x1d length: 6 > 5 [ 1733.266045][ T4150] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6728'. [ 1733.518830][ T4158] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1734.915979][T29579] Bluetooth: hci2: unexpected subevent 0x01 length: 3 < 18 [ 1735.170109][T29579] Bluetooth: hci5: unexpected event 0x1d length: 6 > 5 [ 1740.192111][ T4265] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 0 out of range (51000000..2150000000) [ 1740.615160][ T4270] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1740.769157][ T4271] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1740.810474][ T4275] FAULT_INJECTION: forcing a failure. [ 1740.810474][ T4275] name failslab, interval 1, probability 0, space 0, times 0 [ 1740.879451][ T4275] CPU: 0 UID: 0 PID: 4275 Comm: syz.6.6756 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1740.879482][ T4275] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1740.879488][ T4275] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1740.879498][ T4275] Call Trace: [ 1740.879504][ T4275] [ 1740.879512][ T4275] dump_stack_lvl+0x100/0x190 [ 1740.879539][ T4275] should_fail_ex.cold+0x5/0xa [ 1740.879558][ T4275] should_failslab+0xc2/0x120 [ 1740.879577][ T4275] __kmalloc_cache_noprof+0x7a/0x6f0 [ 1740.879597][ T4275] ? alloc_mnt_ns+0xce/0x520 [ 1740.879621][ T4275] alloc_mnt_ns+0xce/0x520 [ 1740.879643][ T4275] copy_mnt_ns+0x220/0xc30 [ 1740.879660][ T4275] ? kmem_cache_alloc_noprof+0x292/0x6e0 [ 1740.879681][ T4275] ? create_new_namespaces+0x30/0xac0 [ 1740.879703][ T4275] ? rcu_is_watching+0x12/0xc0 [ 1740.879729][ T4275] create_new_namespaces+0xd3/0xac0 [ 1740.879744][ T4275] ? bpf_lsm_capable+0x9/0x10 [ 1740.879760][ T4275] ? security_capable+0x80/0x260 [ 1740.879783][ T4275] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 1740.879802][ T4275] ksys_unshare+0x473/0xad0 [ 1740.879822][ T4275] ? __pfx_ksys_unshare+0x10/0x10 [ 1740.879847][ T4275] __x64_sys_unshare+0x31/0x40 [ 1740.879865][ T4275] do_syscall_64+0x106/0xf80 [ 1740.879882][ T4275] ? clear_bhb_loop+0x40/0x90 [ 1740.879901][ T4275] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1740.879917][ T4275] RIP: 0033:0x7fceb9f9c799 [ 1740.879930][ T4275] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1740.879945][ T4275] RSP: 002b:00007fcebae50028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1740.879960][ T4275] RAX: ffffffffffffffda RBX: 00007fceba215fa0 RCX: 00007fceb9f9c799 [ 1740.879971][ T4275] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000020000 [ 1740.879980][ T4275] RBP: 00007fceba032bd9 R08: 0000000000000000 R09: 0000000000000000 [ 1740.879989][ T4275] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1740.879998][ T4275] R13: 00007fceba216038 R14: 00007fceba215fa0 R15: 00007ffe5b4f3488 [ 1740.880018][ T4275] [ 1741.698825][ T4286] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1741.794116][ T4286] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1741.983248][ T4293] netlink: 334 bytes leftover after parsing attributes in process `syz.7.6759'. [ 1745.455233][ T4348] process 'syz.7.6772' launched ':,' with NULL argv: empty string added [ 1747.858821][ T4382] sg_write: process 1747 (syz.6.6779) changed security contexts after opening file descriptor, this is not allowed. [ 1747.901566][ T30] audit: type=1806 audit(4294969410.406:145): xattr="" res=-22 [ 1749.000034][ T4412] ACPI: Enabling force_remove is not supported anymore. Please report to linux-acpi@vger.kernel.org if you depend on this functionality [ 1749.374527][T29579] Bluetooth: hci2: unexpected event 0x1d length: 6 > 5 [ 1749.542438][ T4428] FAULT_INJECTION: forcing a failure. [ 1749.542438][ T4428] name failslab, interval 1, probability 0, space 0, times 0 [ 1749.948718][ T4428] CPU: 0 UID: 0 PID: 4428 Comm: syz.7.6787 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1749.948745][ T4428] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1749.948751][ T4428] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1749.948760][ T4428] Call Trace: [ 1749.948765][ T4428] [ 1749.948771][ T4428] dump_stack_lvl+0x100/0x190 [ 1749.948799][ T4428] should_fail_ex.cold+0x5/0xa [ 1749.948816][ T4428] should_failslab+0xc2/0x120 [ 1749.948832][ T4428] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1749.948853][ T4428] ? do_getname+0x35/0x390 [ 1749.948869][ T4428] ? fput+0x79/0x100 [ 1749.948887][ T4428] do_getname+0x35/0x390 [ 1749.948906][ T4428] __x64_sys_rename+0x57/0xb0 [ 1749.948924][ T4428] do_syscall_64+0x106/0xf80 [ 1749.948941][ T4428] ? clear_bhb_loop+0x40/0x90 [ 1749.948960][ T4428] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1749.948974][ T4428] RIP: 0033:0x7f138179c799 [ 1749.948987][ T4428] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1749.949001][ T4428] RSP: 002b:00007f138262d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000052 [ 1749.949015][ T4428] RAX: ffffffffffffffda RBX: 00007f1381a16090 RCX: 00007f138179c799 [ 1749.949025][ T4428] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000200000000500 [ 1749.949034][ T4428] RBP: 00007f138262d090 R08: 0000000000000000 R09: 0000000000000000 [ 1749.949043][ T4428] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1749.949051][ T4428] R13: 00007f1381a16128 R14: 00007f1381a16090 R15: 00007ffe3fb72838 [ 1749.949070][ T4428] [ 1750.999636][ T4452] netlink: 504 bytes leftover after parsing attributes in process `syz.2.6795'. [ 1751.076014][ T4456] netlink: 504 bytes leftover after parsing attributes in process `syz.2.6795'. [ 1752.086795][T29579] Bluetooth: hci1: unexpected event 0x1d length: 6 > 5 [ 1755.028612][T29685] Bluetooth: hci2: unexpected event 0x1d length: 6 > 5 [ 1755.761485][T29579] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 1757.212157][ T4554] FAULT_INJECTION: forcing a failure. [ 1757.212157][ T4554] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1757.326118][ T4554] CPU: 0 UID: 0 PID: 4554 Comm: syz.7.6814 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1757.326145][ T4554] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1757.326151][ T4554] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1757.326160][ T4554] Call Trace: [ 1757.326166][ T4554] [ 1757.326172][ T4554] dump_stack_lvl+0x100/0x190 [ 1757.326199][ T4554] should_fail_ex.cold+0x5/0xa [ 1757.326217][ T4554] get_futex_key+0x1d2/0x1620 [ 1757.326238][ T4554] ? __pfx_get_futex_key+0x10/0x10 [ 1757.326255][ T4554] ? __might_fault+0xc5/0x140 [ 1757.326274][ T4554] ? __might_fault+0xc5/0x140 [ 1757.326298][ T4554] futex_wake+0xea/0x530 [ 1757.326318][ T4554] ? _copy_to_user+0xaf/0xd0 [ 1757.326343][ T4554] ? __pfx_futex_wake+0x10/0x10 [ 1757.326363][ T4554] ? lockdep_hardirqs_on+0x78/0x100 [ 1757.326383][ T4554] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1757.326411][ T4554] do_futex+0x32b/0x350 [ 1757.326429][ T4554] ? __pfx_do_futex+0x10/0x10 [ 1757.326448][ T4554] ? read_tsc+0x9/0x20 [ 1757.326463][ T4554] ? ktime_get_ts64+0x256/0x3f0 [ 1757.326481][ T4554] __x64_sys_futex+0x34f/0x4d0 [ 1757.326501][ T4554] ? __pfx___x64_sys_futex+0x10/0x10 [ 1757.326527][ T4554] do_syscall_64+0x106/0xf80 [ 1757.326543][ T4554] ? clear_bhb_loop+0x40/0x90 [ 1757.326562][ T4554] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1757.326576][ T4554] RIP: 0033:0x7f138179c799 [ 1757.326589][ T4554] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1757.326609][ T4554] RSP: 002b:00007f138264e0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1757.326625][ T4554] RAX: ffffffffffffffda RBX: 00007f1381a15fa8 RCX: 00007f138179c799 [ 1757.326634][ T4554] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f1381a15fac [ 1757.326643][ T4554] RBP: 00007f1381a15fa0 R08: 0000000000000000 R09: 0000000000000000 [ 1757.326652][ T4554] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 1757.326661][ T4554] R13: 00007f1381a16038 R14: 00007ffe3fb72750 R15: 00007ffe3fb72838 [ 1757.326680][ T4554] [ 1758.137802][ T4566] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6817'. [ 1758.257002][T29579] Bluetooth: hci2: unexpected event 0x1d length: 6 > 5 [ 1758.515415][ T4583] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6823'. [ 1759.943729][ T4612] FAULT_INJECTION: forcing a failure. [ 1759.943729][ T4612] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1760.032292][ T4612] CPU: 0 UID: 0 PID: 4612 Comm: syz.3.6829 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1760.032322][ T4612] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1760.032328][ T4612] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1760.032339][ T4612] Call Trace: [ 1760.032344][ T4612] [ 1760.032352][ T4612] dump_stack_lvl+0x100/0x190 [ 1760.032381][ T4612] should_fail_ex.cold+0x5/0xa [ 1760.032400][ T4612] _copy_to_user+0x32/0xd0 [ 1760.032426][ T4612] cp_new_stat+0x467/0x5c0 [ 1760.032444][ T4612] ? __pfx_cp_new_stat+0x10/0x10 [ 1760.032460][ T4612] ? __pfx_make_vfsgid+0x10/0x10 [ 1760.032488][ T4612] ? vfs_getattr_nosec+0x340/0x430 [ 1760.032505][ T4612] ? fput+0x79/0x100 [ 1760.032523][ T4612] __do_sys_newfstat+0xab/0x110 [ 1760.032541][ T4612] ? __pfx___do_sys_newfstat+0x10/0x10 [ 1760.032575][ T4612] do_syscall_64+0x106/0xf80 [ 1760.032593][ T4612] ? clear_bhb_loop+0x40/0x90 [ 1760.032612][ T4612] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1760.032628][ T4612] RIP: 0033:0x7f38d9b9c799 [ 1760.032642][ T4612] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1760.032657][ T4612] RSP: 002b:00007f38daaf7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000005 [ 1760.032672][ T4612] RAX: ffffffffffffffda RBX: 00007f38d9e15fa0 RCX: 00007f38d9b9c799 [ 1760.032682][ T4612] RDX: 0000000000000000 RSI: 0000200000000340 RDI: 0000000000000004 [ 1760.032692][ T4612] RBP: 00007f38d9c32bd9 R08: 0000000000000000 R09: 0000000000000000 [ 1760.032701][ T4612] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1760.032710][ T4612] R13: 00007f38d9e16038 R14: 00007f38d9e15fa0 R15: 00007ffe92ae7638 [ 1760.032730][ T4612] [ 1760.467440][ T4622] FAULT_INJECTION: forcing a failure. [ 1760.467440][ T4622] name failslab, interval 1, probability 0, space 0, times 0 [ 1760.495891][T29579] Bluetooth: hci1: unexpected event 0x1d length: 6 > 5 [ 1760.604329][ T4622] CPU: 0 UID: 0 PID: 4622 Comm: syz.3.6829 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1760.604360][ T4622] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1760.604366][ T4622] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1760.604376][ T4622] Call Trace: [ 1760.604382][ T4622] [ 1760.604389][ T4622] dump_stack_lvl+0x100/0x190 [ 1760.604417][ T4622] should_fail_ex.cold+0x5/0xa [ 1760.604436][ T4622] should_failslab+0xc2/0x120 [ 1760.604452][ T4622] __kmalloc_cache_node_noprof+0x7d/0x770 [ 1760.604476][ T4622] ? __alloc_workqueue+0xf78/0x1880 [ 1760.604494][ T4622] ? lockdep_init_map_type+0x5c/0x250 [ 1760.604517][ T4622] __alloc_workqueue+0xf78/0x1880 [ 1760.604538][ T4622] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1760.604557][ T4622] alloc_workqueue_noprof+0xd2/0x200 [ 1760.604586][ T4622] ? __pfx_alloc_workqueue_noprof+0x10/0x10 [ 1760.604610][ T4622] ? __pfx___debug_object_init+0x10/0x10 [ 1760.604637][ T4622] nci_register_device+0x21e/0xb80 [ 1760.604663][ T4622] ? __pfx_nci_register_device+0x10/0x10 [ 1760.604689][ T4622] ? lockdep_init_map_type+0x5c/0x250 [ 1760.604712][ T4622] virtual_ncidev_open+0x141/0x220 [ 1760.604752][ T4622] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 1760.604770][ T4622] misc_open+0x26d/0x450 [ 1760.604795][ T4622] ? __pfx_misc_open+0x10/0x10 [ 1760.604817][ T4622] chrdev_open+0x234/0x6a0 [ 1760.604832][ T4622] ? __pfx_apparmor_file_open+0x10/0x10 [ 1760.604857][ T4622] ? __pfx_chrdev_open+0x10/0x10 [ 1760.604873][ T4622] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 1760.604893][ T4622] do_dentry_open+0x6d8/0x1660 [ 1760.604908][ T4622] ? __pfx_chrdev_open+0x10/0x10 [ 1760.604927][ T4622] vfs_open+0x82/0x3f0 [ 1760.604947][ T4622] path_openat+0x208c/0x31a0 [ 1760.604969][ T4622] ? __pfx_path_openat+0x10/0x10 [ 1760.604991][ T4622] do_file_open+0x20e/0x430 [ 1760.605008][ T4622] ? __pfx_do_file_open+0x10/0x10 [ 1760.605037][ T4622] ? alloc_fd+0x476/0x790 [ 1760.605053][ T4622] ? do_getname+0x191/0x390 [ 1760.605077][ T4622] do_sys_openat2+0x10d/0x1e0 [ 1760.605096][ T4622] ? __pfx_do_sys_openat2+0x10/0x10 [ 1760.605116][ T4622] ? __fget_files+0x21f/0x3d0 [ 1760.605134][ T4622] __x64_sys_openat+0x12d/0x210 [ 1760.605154][ T4622] ? __pfx___x64_sys_openat+0x10/0x10 [ 1760.605180][ T4622] do_syscall_64+0x106/0xf80 [ 1760.605198][ T4622] ? clear_bhb_loop+0x40/0x90 [ 1760.605216][ T4622] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1760.605232][ T4622] RIP: 0033:0x7f38d9b9c799 [ 1760.605246][ T4622] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1760.605261][ T4622] RSP: 002b:00007f38daab5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1760.605276][ T4622] RAX: ffffffffffffffda RBX: 00007f38d9e16180 RCX: 00007f38d9b9c799 [ 1760.605287][ T4622] RDX: 0000000000000002 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 1760.605297][ T4622] RBP: 00007f38d9c32bd9 R08: 0000000000000000 R09: 0000000000000000 [ 1760.605306][ T4622] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1760.605316][ T4622] R13: 00007f38d9e16218 R14: 00007f38d9e16180 R15: 00007ffe92ae7638 [ 1760.605336][ T4622] [ 1761.886410][ T4639] Invalid ELF header magic: != ELF [ 1765.950011][T29579] Bluetooth: hci5: unexpected event 0x1d length: 6 > 5 [ 1766.270976][ T4666] zswap: compressor not available [ 1767.520028][ T4690] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6846'. [ 1769.468698][ T4724] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 0 out of range (51000000..2150000000) [ 1770.942514][ T4755] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6858'. [ 1772.276740][ T4771] random: crng reseeded on system resumption [ 1773.731891][T29685] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1773.768971][T29685] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1773.779710][T29685] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1773.787975][T29685] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1773.799207][T29685] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1775.212102][ T4794] random: crng reseeded on system resumption [ 1775.348305][ T4799] sd 0:0:1:0: PR command failed: 1026 [ 1775.353736][ T4799] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 1775.487781][ T4800] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6867'. [ 1775.597089][ T4799] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 1775.732305][T32259] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1775.816019][T29685] Bluetooth: hci4: command tx timeout [ 1776.248142][T32259] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1776.340729][ T4788] chnl_net:caif_netlink_parms(): no params data found [ 1776.656962][T32259] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1776.898773][T32259] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1777.886173][T29685] Bluetooth: hci4: command tx timeout [ 1777.985471][ T4788] bridge0: port 1(bridge_slave_0) entered blocking state [ 1778.033966][ T4788] bridge0: port 1(bridge_slave_0) entered disabled state [ 1778.084788][ T4788] bridge_slave_0: entered allmulticast mode [ 1778.138337][ T4788] bridge_slave_0: entered promiscuous mode [ 1778.230919][ T4788] bridge0: port 2(bridge_slave_1) entered blocking state [ 1778.279632][ T4788] bridge0: port 2(bridge_slave_1) entered disabled state [ 1778.342845][ T4788] bridge_slave_1: entered allmulticast mode [ 1778.415465][ T4788] bridge_slave_1: entered promiscuous mode [ 1778.831563][ T4788] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1778.907606][ T4788] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1779.002104][T32259] bridge_slave_0: left allmulticast mode [ 1779.007825][T32259] bridge_slave_0: left promiscuous mode [ 1779.086594][T32259] bridge0: port 1(bridge_slave_0) entered disabled state [ 1779.954740][T29685] Bluetooth: hci4: command tx timeout [ 1780.437834][T32259] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1780.528004][T32259] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1780.595035][T32259] bond0 (unregistering): Released all slaves [ 1780.805639][T32259] HfR: left promiscuous mode [ 1780.980878][ T4788] team0: Port device team_slave_0 added [ 1781.012815][T32259] i: left promiscuous mode [ 1781.093132][ T4788] team0: Port device team_slave_1 added [ 1781.227939][T32259] tipc: Left network mode [ 1781.348473][ T4788] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1781.355442][ T4788] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1781.629833][ T4866] QAT: Stopping all acceleration devices. [ 1781.656462][ T4788] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1781.901930][ T4788] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1781.986398][ T4788] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1782.029811][T29685] Bluetooth: hci4: command tx timeout [ 1782.196855][ T4788] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1782.235617][ T4874] FAULT_INJECTION: forcing a failure. [ 1782.235617][ T4874] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1782.314350][ T4874] CPU: 0 UID: 0 PID: 4874 Comm: syz.6.6881 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1782.314378][ T4874] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1782.314384][ T4874] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1782.314393][ T4874] Call Trace: [ 1782.314398][ T4874] [ 1782.314404][ T4874] dump_stack_lvl+0x100/0x190 [ 1782.314434][ T4874] should_fail_ex.cold+0x5/0xa [ 1782.314452][ T4874] _copy_to_user+0x32/0xd0 [ 1782.314477][ T4874] copy_siginfo_to_user+0x27/0xc0 [ 1782.314496][ T4874] x64_setup_rt_frame+0xa03/0xce0 [ 1782.314518][ T4874] ? __pfx_x64_setup_rt_frame+0x10/0x10 [ 1782.314541][ T4874] arch_do_signal_or_restart+0x587/0x770 [ 1782.314559][ T4874] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1782.314582][ T4874] ? do_readv+0x234/0x340 [ 1782.314607][ T4874] exit_to_user_mode_loop+0x86/0x4a0 [ 1782.314628][ T4874] do_syscall_64+0x668/0xf80 [ 1782.314646][ T4874] ? clear_bhb_loop+0x40/0x90 [ 1782.314664][ T4874] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1782.314679][ T4874] RIP: 0033:0x7fceb9f9c797 [ 1782.314692][ T4874] Code: 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 [ 1782.314706][ T4874] RSP: 002b:00007fcebae50028 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 1782.314721][ T4874] RAX: 0000000000000013 RBX: 00007fceba215fa0 RCX: 00007fceb9f9c799 [ 1782.314730][ T4874] RDX: 0000000000000003 RSI: 0000200000000040 RDI: 0000000000000003 [ 1782.314739][ T4874] RBP: 00007fcebae50090 R08: 0000000000000000 R09: 0000000000000000 [ 1782.314748][ T4874] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1782.314757][ T4874] R13: 00007fceba216038 R14: 00007fceba215fa0 R15: 00007ffe5b4f3488 [ 1782.314776][ T4874] [ 1783.160850][ T4788] hsr_slave_0: entered promiscuous mode [ 1783.205156][ T4788] hsr_slave_1: entered promiscuous mode [ 1783.235373][ T4788] debugfs: 'hsr0' already exists in 'hsr' [ 1783.274782][ T4788] Cannot create hsr debugfs directory [ 1783.418518][T29685] Bluetooth: hci1: unexpected event 0x1d length: 6 > 5 [ 1784.358881][T29579] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1784.382121][T29579] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1784.390702][T29579] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1784.407107][T29579] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1784.421235][T29579] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1784.559296][T32259] hsr_slave_0: left promiscuous mode [ 1784.595329][T32259] hsr_slave_1: left promiscuous mode [ 1784.632350][T32259] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1784.698592][T32259] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1784.754529][T32259] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1784.806217][T32259] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1784.986600][T32259] veth1_macvtap: left allmulticast mode [ 1785.008394][T32259] veth1_macvtap: left promiscuous mode [ 1785.067181][T32259] veth0_macvtap: left promiscuous mode [ 1785.107859][T32259] veth1_vlan: left promiscuous mode [ 1785.156943][T32259] veth0_vlan: left promiscuous mode [ 1786.155541][T32259] team0 (unregistering): Port device team_slave_1 removed [ 1786.291859][T32259] team0 (unregistering): Port device team_slave_0 removed [ 1786.483854][T29579] Bluetooth: hci0: command tx timeout [ 1788.552318][T29579] Bluetooth: hci0: command tx timeout [ 1790.618850][T29579] Bluetooth: hci0: command tx timeout [ 1790.691875][ T4910] chnl_net:caif_netlink_parms(): no params data found [ 1791.288614][ T4946] Invalid ELF header magic: != ELF [ 1791.660361][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 1791.666797][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 1791.793963][ T4788] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1791.978482][ T4788] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1792.092300][ T4788] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1792.172021][ T4910] bridge0: port 1(bridge_slave_0) entered blocking state [ 1792.179134][ T4910] bridge0: port 1(bridge_slave_0) entered disabled state [ 1792.280672][ T4910] bridge_slave_0: entered allmulticast mode [ 1792.344507][ T4910] bridge_slave_0: entered promiscuous mode [ 1792.390917][ T4788] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1792.454962][ T4910] bridge0: port 2(bridge_slave_1) entered blocking state [ 1792.529305][ T4910] bridge0: port 2(bridge_slave_1) entered disabled state [ 1792.576494][ T4910] bridge_slave_1: entered allmulticast mode [ 1792.652698][ T4910] bridge_slave_1: entered promiscuous mode [ 1792.689147][T29579] Bluetooth: hci0: command tx timeout [ 1792.898693][ T4910] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1792.992481][ T4910] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1793.066762][ T4967] FAULT_INJECTION: forcing a failure. [ 1793.066762][ T4967] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1793.169277][ T4967] CPU: 0 UID: 0 PID: 4967 Comm: syz.6.6890 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1793.169304][ T4967] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1793.169310][ T4967] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1793.169319][ T4967] Call Trace: [ 1793.169325][ T4967] [ 1793.169331][ T4967] dump_stack_lvl+0x100/0x190 [ 1793.169357][ T4967] should_fail_ex.cold+0x5/0xa [ 1793.169375][ T4967] get_futex_key+0x1d2/0x1620 [ 1793.169395][ T4967] ? __pfx_get_futex_key+0x10/0x10 [ 1793.169411][ T4967] ? lock_acquire+0x1cf/0x380 [ 1793.169436][ T4967] futex_wake+0xea/0x530 [ 1793.169459][ T4967] ? __pfx_futex_wake+0x10/0x10 [ 1793.169480][ T4967] ? exit_mm_release+0x19/0x30 [ 1793.169503][ T4967] do_futex+0x32b/0x350 [ 1793.169521][ T4967] ? __pfx_do_futex+0x10/0x10 [ 1793.169537][ T4967] ? __might_fault+0xc5/0x140 [ 1793.169571][ T4967] mm_release+0x24a/0x2f0 [ 1793.169586][ T4967] do_exit+0x675/0x2aa0 [ 1793.169603][ T4967] ? __pfx___might_resched+0x10/0x10 [ 1793.169627][ T4967] ? __pfx_do_exit+0x10/0x10 [ 1793.169645][ T4967] ? do_raw_spin_lock+0x128/0x260 [ 1793.169665][ T4967] ? find_held_lock+0x2b/0x80 [ 1793.169677][ T4967] ? get_signal+0x7e0/0x21e0 [ 1793.169694][ T4967] do_group_exit+0xd5/0x2a0 [ 1793.169715][ T4967] get_signal+0x1ec7/0x21e0 [ 1793.169732][ T4967] ? task_work_add+0x201/0x3b0 [ 1793.169755][ T4967] ? __pfx_get_signal+0x10/0x10 [ 1793.169774][ T4967] arch_do_signal_or_restart+0x91/0x770 [ 1793.169792][ T4967] ? __pfx___file_ref_put+0x10/0x10 [ 1793.169815][ T4967] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1793.169837][ T4967] ? do_readv+0x234/0x340 [ 1793.169862][ T4967] exit_to_user_mode_loop+0x86/0x4a0 [ 1793.169883][ T4967] do_syscall_64+0x668/0xf80 [ 1793.169900][ T4967] ? clear_bhb_loop+0x40/0x90 [ 1793.169919][ T4967] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1793.169933][ T4967] RIP: 0033:0x7fceb9f9c799 [ 1793.169946][ T4967] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1793.169961][ T4967] RSP: 002b:00007fcebae2f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 1793.169976][ T4967] RAX: fffffffffffffe00 RBX: 00007fceba216090 RCX: 00007fceb9f9c799 [ 1793.169986][ T4967] RDX: 0000000000000003 RSI: 0000200000000040 RDI: 0000000000000003 [ 1793.169995][ T4967] RBP: 00007fcebae2f090 R08: 0000000000000000 R09: 0000000000000000 [ 1793.170004][ T4967] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1793.170012][ T4967] R13: 00007fceba216128 R14: 00007fceba216090 R15: 00007ffe5b4f3488 [ 1793.170030][ T4967] [ 1794.224484][ T4910] team0: Port device team_slave_0 added [ 1794.273445][ T4910] team0: Port device team_slave_1 added [ 1794.377400][ T4910] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1794.468835][ T4910] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1794.662103][ T4910] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1794.999990][ T4910] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1795.041738][ T4910] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1795.265854][ T4910] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1795.564363][ T4910] hsr_slave_0: entered promiscuous mode [ 1795.613594][ T4910] hsr_slave_1: entered promiscuous mode [ 1795.663865][ T4910] debugfs: 'hsr0' already exists in 'hsr' [ 1795.669622][ T4910] Cannot create hsr debugfs directory [ 1795.910619][ T4788] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1796.395733][ T4788] 8021q: adding VLAN 0 to HW filter on device team0 [ 1796.588769][ T1661] bridge0: port 1(bridge_slave_0) entered blocking state [ 1796.595879][ T1661] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1796.763787][ T1661] bridge0: port 2(bridge_slave_1) entered blocking state [ 1796.770986][ T1661] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1797.545917][ T5017] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6894'. [ 1797.798316][ T4910] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1798.050749][ T5026] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input107 [ 1798.126446][ T4910] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1798.492644][ T4788] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1798.549031][ T4910] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1798.747993][ T4910] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1799.544883][T32262] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1800.104717][T32262] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1800.401624][T32262] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1800.601238][ T4788] veth0_vlan: entered promiscuous mode [ 1800.778112][T32262] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1800.927086][ T4788] veth1_vlan: entered promiscuous mode [ 1801.083363][ T4788] veth0_macvtap: entered promiscuous mode [ 1801.163172][ T5064] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1801.202478][ T4910] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1801.538548][ T4788] veth1_macvtap: entered promiscuous mode [ 1801.585577][ T4910] 8021q: adding VLAN 0 to HW filter on device team0 [ 1801.958234][ T4788] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1802.178287][T32255] bridge0: port 1(bridge_slave_0) entered blocking state [ 1802.185473][T32255] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1802.283001][T32255] bridge0: port 2(bridge_slave_1) entered blocking state [ 1802.290239][T32255] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1802.352883][ T5067] usb usb3: usbfs: process 5067 (syz.2.6899) did not claim interface 0 before use [ 1802.398118][ T4788] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1802.517697][ T5069] EXT4-fs error (device sda1): trigger_test_error:130: comm syz.2.6899: 7 [ 1802.566983][ T2881] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1802.862583][ T2881] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1802.945371][ T2881] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1802.954108][ T2881] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1803.132181][T32262] bridge_slave_1: left allmulticast mode [ 1803.163021][T32262] bridge_slave_1: left promiscuous mode [ 1803.223574][T32262] bridge0: port 2(bridge_slave_1) entered disabled state [ 1803.359172][T32262] bridge_slave_0: left allmulticast mode [ 1803.385694][T32262] bridge_slave_0: left promiscuous mode [ 1803.391438][T32262] bridge0: port 1(bridge_slave_0) entered disabled state [ 1804.618140][T32262] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1804.699069][T32262] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1804.826155][T32262] bond0 (unregistering): Released all slaves [ 1805.009753][T32262] tipc: Left network mode [ 1805.283856][ T1661] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1805.291701][ T1661] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1805.503606][ T2881] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1805.503657][ T2881] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1805.508807][ T4910] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1805.834279][ T4788] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 1806.782411][ T5144] netlink: 354 bytes leftover after parsing attributes in process `syz.6.6906'. [ 1807.440302][ T4910] veth0_vlan: entered promiscuous mode [ 1807.798659][ T4910] veth1_vlan: entered promiscuous mode [ 1808.064445][T32262] hsr_slave_0: left promiscuous mode [ 1808.159012][T32262] hsr_slave_1: left promiscuous mode [ 1808.229028][T32262] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1808.236469][T32262] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1808.362401][T32262] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1808.437729][T32262] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1808.526952][T32262] veth1_macvtap: left promiscuous mode [ 1808.585629][T32262] veth0_macvtap: left promiscuous mode [ 1808.591524][T32262] veth1_vlan: left promiscuous mode [ 1808.662437][T32262] veth0_vlan: left promiscuous mode [ 1810.187979][T29579] Bluetooth: hci1: unexpected event 0x3e length: 508 > 260 [ 1810.188007][T29579] Bluetooth: hci1: unexpected subevent 0x02 length: 507 > 260 [ 1810.207640][T29579] Bluetooth: hci1: Dropping invalid advertising data [ 1810.216590][T29579] Bluetooth: hci1: unknown advertising packet type: 0xe9 [ 1810.216619][T29579] Bluetooth: hci1: Dropping invalid advertising data [ 1810.232375][T29579] Bluetooth: hci1: Malformed LE Event: 0x02 [ 1810.803455][ T4910] veth0_macvtap: entered promiscuous mode [ 1811.094112][ T4910] veth1_macvtap: entered promiscuous mode [ 1811.230903][ T4910] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1811.554703][ T5209] FAULT_INJECTION: forcing a failure. [ 1811.554703][ T5209] name failslab, interval 1, probability 0, space 0, times 0 [ 1812.007698][ T5209] CPU: 0 UID: 0 PID: 5209 Comm: syz.3.6918 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1812.007729][ T5209] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1812.007736][ T5209] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1812.007746][ T5209] Call Trace: [ 1812.007752][ T5209] [ 1812.007759][ T5209] dump_stack_lvl+0x100/0x190 [ 1812.007790][ T5209] should_fail_ex.cold+0x5/0xa [ 1812.007812][ T5209] should_failslab+0xc2/0x120 [ 1812.007830][ T5209] __kmalloc_cache_noprof+0x7a/0x6f0 [ 1812.007850][ T5209] ? drm_atomic_state_alloc+0xb8/0x120 [ 1812.007975][ T5209] drm_atomic_state_alloc+0xb8/0x120 [ 1812.007993][ T5209] drm_client_modeset_commit_atomic+0xcc/0x7e0 [ 1812.008060][ T5209] ? trace_contention_end+0x140/0x180 [ 1812.008084][ T5209] ? __mutex_lock+0x26a/0x1b90 [ 1812.008108][ T5209] ? __mutex_lock+0x26a/0x1b90 [ 1812.008126][ T5209] ? __pfx_drm_client_modeset_commit_atomic+0x10/0x10 [ 1812.008146][ T5209] ? drm_master_internal_acquire+0x21/0x80 [ 1812.008184][ T5209] drm_client_modeset_commit_locked+0x14d/0x580 [ 1812.008207][ T5209] drm_client_modeset_commit+0x4f/0x80 [ 1812.008226][ T5209] __drm_fb_helper_restore_fbdev_mode_unlocked.part.0+0x137/0x160 [ 1812.008280][ T5209] drm_fb_helper_restore_fbdev_mode_unlocked+0x93/0xc0 [ 1812.008301][ T5209] drm_fbdev_client_restore+0x1b/0x30 [ 1812.008347][ T5209] ? __pfx_drm_fbdev_client_restore+0x10/0x10 [ 1812.008372][ T5209] drm_client_dev_restore+0x205/0x2a0 [ 1812.008395][ T5209] drm_release+0x2c6/0x360 [ 1812.008439][ T5209] ? __pfx_drm_release+0x10/0x10 [ 1812.008456][ T5209] __fput+0x3ff/0xb40 [ 1812.008481][ T5209] task_work_run+0x150/0x240 [ 1812.008504][ T5209] ? __pfx_task_work_run+0x10/0x10 [ 1812.008531][ T5209] exit_to_user_mode_loop+0x100/0x4a0 [ 1812.008555][ T5209] do_syscall_64+0x668/0xf80 [ 1812.008572][ T5209] ? clear_bhb_loop+0x40/0x90 [ 1812.008593][ T5209] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1812.008609][ T5209] RIP: 0033:0x7f9b7979c799 [ 1812.008623][ T5209] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1812.008639][ T5209] RSP: 002b:00007f9b7a668028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 1812.008656][ T5209] RAX: 0000000000000000 RBX: 00007f9b79a16270 RCX: 00007f9b7979c799 [ 1812.008667][ T5209] RDX: 0000000000000000 RSI: 000000000000000a RDI: 0000000000000002 [ 1812.008676][ T5209] RBP: 00007f9b79832bd9 R08: 0000000000000000 R09: 0000000000000000 [ 1812.008686][ T5209] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1812.008696][ T5209] R13: 00007f9b79a16308 R14: 00007f9b79a16270 R15: 00007fff962c34b8 [ 1812.008718][ T5209] [ 1814.416196][ T4910] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1814.851004][T32255] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1814.872859][T32255] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1815.290219][T32255] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1815.360826][T32255] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1816.386878][ T2881] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1816.394713][ T2881] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1816.693731][T17458] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1816.701589][T17458] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1820.214325][ T5290] FAULT_INJECTION: forcing a failure. [ 1820.214325][ T5290] name failslab, interval 1, probability 0, space 0, times 0 [ 1820.393811][ T5290] CPU: 0 UID: 0 PID: 5290 Comm: syz.8.6926 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1820.393841][ T5290] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1820.393848][ T5290] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1820.393857][ T5290] Call Trace: [ 1820.393864][ T5290] [ 1820.393871][ T5290] dump_stack_lvl+0x100/0x190 [ 1820.393900][ T5290] should_fail_ex.cold+0x5/0xa [ 1820.393922][ T5290] should_failslab+0xc2/0x120 [ 1820.393939][ T5290] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1820.393962][ T5290] ? alloc_empty_file+0x55/0x1c0 [ 1820.393984][ T5290] alloc_empty_file+0x55/0x1c0 [ 1820.394012][ T5290] alloc_file_pseudo+0x13a/0x230 [ 1820.394032][ T5290] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 1820.394050][ T5290] ? alloc_fd+0x476/0x790 [ 1820.394067][ T5290] ? do_raw_spin_unlock+0x145/0x1e0 [ 1820.394092][ T5290] __anon_inode_getfile+0xe8/0x280 [ 1820.394112][ T5290] anon_inode_getfile_fmode+0x37/0xa0 [ 1820.394131][ T5290] __do_sys_fanotify_init+0xa79/0xe50 [ 1820.394155][ T5290] do_syscall_64+0x106/0xf80 [ 1820.394173][ T5290] ? clear_bhb_loop+0x40/0x90 [ 1820.394191][ T5290] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1820.394207][ T5290] RIP: 0033:0x7f8bb8d9c799 [ 1820.394220][ T5290] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1820.394236][ T5290] RSP: 002b:00007f8bb9b83028 EFLAGS: 00000246 ORIG_RAX: 000000000000012c [ 1820.394252][ T5290] RAX: ffffffffffffffda RBX: 00007f8bb9016090 RCX: 00007f8bb8d9c799 [ 1820.394262][ T5290] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 1820.394271][ T5290] RBP: 00007f8bb8e32bd9 R08: 0000000000000000 R09: 0000000000000000 [ 1820.394281][ T5290] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1820.394290][ T5290] R13: 00007f8bb9016128 R14: 00007f8bb9016090 R15: 00007ffcbaf673d8 [ 1820.394311][ T5290] [ 1822.843311][ T5315] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1823.770606][ T5320] FAULT_INJECTION: forcing a failure. [ 1823.770606][ T5320] name failslab, interval 1, probability 0, space 0, times 0 [ 1824.047273][ T5320] CPU: 0 UID: 0 PID: 5320 Comm: syz.3.6933 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1824.047303][ T5320] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1824.047310][ T5320] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1824.047319][ T5320] Call Trace: [ 1824.047326][ T5320] [ 1824.047333][ T5320] dump_stack_lvl+0x100/0x190 [ 1824.047362][ T5320] should_fail_ex.cold+0x5/0xa [ 1824.047380][ T5320] ? drm_atomic_state_init+0xf4/0x490 [ 1824.047396][ T5320] should_failslab+0xc2/0x120 [ 1824.047412][ T5320] __kmalloc_noprof+0xe0/0x850 [ 1824.047440][ T5320] drm_atomic_state_init+0xf4/0x490 [ 1824.047455][ T5320] ? kasan_save_track+0x14/0x30 [ 1824.047479][ T5320] drm_atomic_state_alloc+0xd3/0x120 [ 1824.047495][ T5320] drm_client_modeset_commit_atomic+0xcc/0x7e0 [ 1824.047515][ T5320] ? trace_contention_end+0x140/0x180 [ 1824.047537][ T5320] ? __mutex_lock+0x26a/0x1b90 [ 1824.047556][ T5320] ? __mutex_lock+0x26a/0x1b90 [ 1824.047574][ T5320] ? __pfx_drm_client_modeset_commit_atomic+0x10/0x10 [ 1824.047593][ T5320] ? drm_master_internal_acquire+0x21/0x80 [ 1824.047628][ T5320] drm_client_modeset_commit_locked+0x14d/0x580 [ 1824.047650][ T5320] drm_client_modeset_commit+0x4f/0x80 [ 1824.047678][ T5320] __drm_fb_helper_restore_fbdev_mode_unlocked.part.0+0x137/0x160 [ 1824.047701][ T5320] drm_fb_helper_restore_fbdev_mode_unlocked+0x93/0xc0 [ 1824.047721][ T5320] drm_fbdev_client_restore+0x1b/0x30 [ 1824.047745][ T5320] ? __pfx_drm_fbdev_client_restore+0x10/0x10 [ 1824.047768][ T5320] drm_client_dev_restore+0x205/0x2a0 [ 1824.047790][ T5320] drm_release+0x2c6/0x360 [ 1824.047806][ T5320] ? __pfx_drm_release+0x10/0x10 [ 1824.047821][ T5320] __fput+0x3ff/0xb40 [ 1824.047844][ T5320] task_work_run+0x150/0x240 [ 1824.047866][ T5320] ? __pfx_task_work_run+0x10/0x10 [ 1824.047893][ T5320] exit_to_user_mode_loop+0x100/0x4a0 [ 1824.047915][ T5320] do_syscall_64+0x668/0xf80 [ 1824.047932][ T5320] ? clear_bhb_loop+0x40/0x90 [ 1824.047952][ T5320] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1824.047967][ T5320] RIP: 0033:0x7f9b7979c799 [ 1824.047982][ T5320] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1824.047997][ T5320] RSP: 002b:00007f9b7a6cb028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 1824.048012][ T5320] RAX: 0000000000000000 RBX: 00007f9b79a15fa0 RCX: 00007f9b7979c799 [ 1824.048022][ T5320] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000002 [ 1824.048032][ T5320] RBP: 00007f9b79832bd9 R08: 0000000000000000 R09: 0000000000000000 [ 1824.048041][ T5320] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1824.048051][ T5320] R13: 00007f9b79a16038 R14: 00007f9b79a15fa0 R15: 00007fff962c34b8 [ 1824.048073][ T5320] [ 1825.338053][T29579] Bluetooth: hci4: unexpected event 0x1d length: 6 > 5 [ 1825.467468][ T5351] netlink: 334 bytes leftover after parsing attributes in process `syz.3.6940'. [ 1826.318008][ T5373] FAULT_INJECTION: forcing a failure. [ 1826.318008][ T5373] name failslab, interval 1, probability 0, space 0, times 0 [ 1826.391628][ T5373] CPU: 0 UID: 0 PID: 5373 Comm: syz.6.6943 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1826.391657][ T5373] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1826.391664][ T5373] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1826.391673][ T5373] Call Trace: [ 1826.391679][ T5373] [ 1826.391687][ T5373] dump_stack_lvl+0x100/0x190 [ 1826.391717][ T5373] should_fail_ex.cold+0x5/0xa [ 1826.391735][ T5373] should_failslab+0xc2/0x120 [ 1826.391751][ T5373] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1826.391774][ T5373] ? alloc_empty_file+0x55/0x1c0 [ 1826.391796][ T5373] alloc_empty_file+0x55/0x1c0 [ 1826.391815][ T5373] alloc_file_pseudo+0x13a/0x230 [ 1826.391834][ T5373] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 1826.391851][ T5373] ? alloc_fd+0x476/0x790 [ 1826.391867][ T5373] ? do_raw_spin_unlock+0x145/0x1e0 [ 1826.391890][ T5373] __anon_inode_getfile+0xe8/0x280 [ 1826.391910][ T5373] anon_inode_getfile_fmode+0x37/0xa0 [ 1826.391929][ T5373] __do_sys_fanotify_init+0xa79/0xe50 [ 1826.391954][ T5373] do_syscall_64+0x106/0xf80 [ 1826.391972][ T5373] ? clear_bhb_loop+0x40/0x90 [ 1826.391991][ T5373] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1826.392007][ T5373] RIP: 0033:0x7fceb9f9c799 [ 1826.392021][ T5373] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1826.392035][ T5373] RSP: 002b:00007fcebae2f028 EFLAGS: 00000246 ORIG_RAX: 000000000000012c [ 1826.392051][ T5373] RAX: ffffffffffffffda RBX: 00007fceba216090 RCX: 00007fceb9f9c799 [ 1826.392061][ T5373] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 1826.392070][ T5373] RBP: 00007fceba032bd9 R08: 0000000000000000 R09: 0000000000000000 [ 1826.392079][ T5373] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1826.392088][ T5373] R13: 00007fceba216128 R14: 00007fceba216090 R15: 00007ffe5b4f3488 [ 1826.392108][ T5373] [ 1827.814227][ T5385] : Can't lookup blockdev [ 1827.908351][ T5387] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 1828.024408][T29579] Bluetooth: hci1: unexpected event 0x1d length: 6 > 5 [ 1828.068545][ T5391] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 1829.768531][ T5434] netlink: 28 bytes leftover after parsing attributes in process `syz.6.6957'. [ 1829.799444][ T5435] netlink: 'syz.3.6956': attribute type 2 has an invalid length. [ 1829.838287][ T5435] netlink: 'syz.3.6956': attribute type 4 has an invalid length. [ 1830.727347][ T5451] FAULT_INJECTION: forcing a failure. [ 1830.727347][ T5451] name failslab, interval 1, probability 0, space 0, times 0 [ 1830.783220][ T5453] FAULT_INJECTION: forcing a failure. [ 1830.783220][ T5453] name failslab, interval 1, probability 0, space 0, times 0 [ 1830.854667][ T5451] CPU: 0 UID: 0 PID: 5451 Comm: syz.2.6959 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1830.854698][ T5451] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1830.854704][ T5451] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1830.854714][ T5451] Call Trace: [ 1830.854720][ T5451] [ 1830.854727][ T5451] dump_stack_lvl+0x100/0x190 [ 1830.854756][ T5451] should_fail_ex.cold+0x5/0xa [ 1830.854775][ T5451] should_failslab+0xc2/0x120 [ 1830.854792][ T5451] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1830.854813][ T5451] ? alloc_empty_file+0x55/0x1c0 [ 1830.854835][ T5451] alloc_empty_file+0x55/0x1c0 [ 1830.854854][ T5451] alloc_file_pseudo+0x13a/0x230 [ 1830.854873][ T5451] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 1830.854890][ T5451] ? alloc_fd+0x476/0x790 [ 1830.854905][ T5451] ? do_raw_spin_unlock+0x145/0x1e0 [ 1830.854930][ T5451] __anon_inode_getfile+0xe8/0x280 [ 1830.854950][ T5451] anon_inode_getfile_fmode+0x37/0xa0 [ 1830.854969][ T5451] __do_sys_fanotify_init+0xa79/0xe50 [ 1830.854994][ T5451] do_syscall_64+0x106/0xf80 [ 1830.855012][ T5451] ? clear_bhb_loop+0x40/0x90 [ 1830.855031][ T5451] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1830.855047][ T5451] RIP: 0033:0x7fecf739c799 [ 1830.855061][ T5451] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1830.855076][ T5451] RSP: 002b:00007fecf55d5028 EFLAGS: 00000246 ORIG_RAX: 000000000000012c [ 1830.855091][ T5451] RAX: ffffffffffffffda RBX: 00007fecf7616090 RCX: 00007fecf739c799 [ 1830.855101][ T5451] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 1830.855110][ T5451] RBP: 00007fecf7432bd9 R08: 0000000000000000 R09: 0000000000000000 [ 1830.855119][ T5451] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1830.855128][ T5451] R13: 00007fecf7616128 R14: 00007fecf7616090 R15: 00007ffe92140a48 [ 1830.855147][ T5451] [ 1831.248746][ T5453] CPU: 0 UID: 0 PID: 5453 Comm: syz.3.6961 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1831.248775][ T5453] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1831.248781][ T5453] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1831.248791][ T5453] Call Trace: [ 1831.248796][ T5453] [ 1831.248802][ T5453] dump_stack_lvl+0x100/0x190 [ 1831.248829][ T5453] should_fail_ex.cold+0x5/0xa [ 1831.248846][ T5453] ? security_inode_init_security+0x113/0x370 [ 1831.248866][ T5453] should_failslab+0xc2/0x120 [ 1831.248881][ T5453] __kmalloc_noprof+0xe0/0x850 [ 1831.248907][ T5453] security_inode_init_security+0x113/0x370 [ 1831.248926][ T5453] ? __pfx_shmem_initxattrs+0x10/0x10 [ 1831.248944][ T5453] ? __pfx_security_inode_init_security+0x10/0x10 [ 1831.248963][ T5453] ? __pfx_make_vfsuid+0x10/0x10 [ 1831.248986][ T5453] shmem_symlink+0x15f/0xa00 [ 1831.249008][ T5453] ? generic_permission+0xae/0x800 [ 1831.249027][ T5453] ? __pfx_shmem_symlink+0x10/0x10 [ 1831.249048][ T5453] ? security_inode_permission+0xbf/0x250 [ 1831.249070][ T5453] ? inode_permission+0x374/0x620 [ 1831.249088][ T5453] ? tomoyo_path_symlink+0x97/0xe0 [ 1831.249111][ T5453] vfs_symlink+0x178/0x4d0 [ 1831.249132][ T5453] filename_symlinkat+0x2a6/0x560 [ 1831.249151][ T5453] ? __pfx_filename_symlinkat+0x10/0x10 [ 1831.249168][ T5453] ? strncpy_from_user+0x19d/0x2d0 [ 1831.249217][ T5453] ? do_getname+0x191/0x390 [ 1831.249236][ T5453] __x64_sys_symlink+0x79/0xb0 [ 1831.249254][ T5453] do_syscall_64+0x106/0xf80 [ 1831.249271][ T5453] ? clear_bhb_loop+0x40/0x90 [ 1831.249289][ T5453] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1831.249305][ T5453] RIP: 0033:0x7f9b7979c799 [ 1831.249318][ T5453] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1831.249332][ T5453] RSP: 002b:00007f9b7a6cb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000058 [ 1831.249347][ T5453] RAX: ffffffffffffffda RBX: 00007f9b79a15fa0 RCX: 00007f9b7979c799 [ 1831.249356][ T5453] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1831.249365][ T5453] RBP: 00007f9b79832bd9 R08: 0000000000000000 R09: 0000000000000000 [ 1831.249374][ T5453] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1831.249382][ T5453] R13: 00007f9b79a16038 R14: 00007f9b79a15fa0 R15: 00007fff962c34b8 [ 1831.249402][ T5453] [ 1832.099986][ T5474] FAULT_INJECTION: forcing a failure. [ 1832.099986][ T5474] name failslab, interval 1, probability 0, space 0, times 0 [ 1832.176905][ T5474] CPU: 0 UID: 0 PID: 5474 Comm: syz.2.6963 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1832.176935][ T5474] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1832.176942][ T5474] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1832.176952][ T5474] Call Trace: [ 1832.176958][ T5474] [ 1832.176964][ T5474] dump_stack_lvl+0x100/0x190 [ 1832.176994][ T5474] should_fail_ex.cold+0x5/0xa [ 1832.177013][ T5474] ? drm_atomic_state_init+0xf4/0x490 [ 1832.177029][ T5474] should_failslab+0xc2/0x120 [ 1832.177046][ T5474] __kmalloc_noprof+0xe0/0x850 [ 1832.177077][ T5474] drm_atomic_state_init+0xf4/0x490 [ 1832.177092][ T5474] ? kasan_save_track+0x14/0x30 [ 1832.177117][ T5474] drm_atomic_state_alloc+0xd3/0x120 [ 1832.177133][ T5474] drm_client_modeset_commit_atomic+0xcc/0x7e0 [ 1832.177153][ T5474] ? trace_contention_end+0x140/0x180 [ 1832.177174][ T5474] ? __mutex_lock+0x26a/0x1b90 [ 1832.177194][ T5474] ? __mutex_lock+0x26a/0x1b90 [ 1832.177212][ T5474] ? __pfx_drm_client_modeset_commit_atomic+0x10/0x10 [ 1832.177231][ T5474] ? drm_master_internal_acquire+0x21/0x80 [ 1832.177267][ T5474] drm_client_modeset_commit_locked+0x14d/0x580 [ 1832.177288][ T5474] drm_client_modeset_commit+0x4f/0x80 [ 1832.177306][ T5474] __drm_fb_helper_restore_fbdev_mode_unlocked.part.0+0x137/0x160 [ 1832.177328][ T5474] drm_fb_helper_restore_fbdev_mode_unlocked+0x93/0xc0 [ 1832.177348][ T5474] drm_fbdev_client_restore+0x1b/0x30 [ 1832.177371][ T5474] ? __pfx_drm_fbdev_client_restore+0x10/0x10 [ 1832.177403][ T5474] drm_client_dev_restore+0x205/0x2a0 [ 1832.177426][ T5474] drm_release+0x2c6/0x360 [ 1832.177444][ T5474] ? __pfx_drm_release+0x10/0x10 [ 1832.177460][ T5474] __fput+0x3ff/0xb40 [ 1832.177482][ T5474] task_work_run+0x150/0x240 [ 1832.177505][ T5474] ? __pfx_task_work_run+0x10/0x10 [ 1832.177532][ T5474] exit_to_user_mode_loop+0x100/0x4a0 [ 1832.177554][ T5474] do_syscall_64+0x668/0xf80 [ 1832.177571][ T5474] ? clear_bhb_loop+0x40/0x90 [ 1832.177590][ T5474] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1832.177606][ T5474] RIP: 0033:0x7fecf739c799 [ 1832.177621][ T5474] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1832.177635][ T5474] RSP: 002b:00007fecf55f6028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 1832.177651][ T5474] RAX: 0000000000000000 RBX: 00007fecf7615fa0 RCX: 00007fecf739c799 [ 1832.177660][ T5474] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000002 [ 1832.177669][ T5474] RBP: 00007fecf7432bd9 R08: 0000000000000000 R09: 0000000000000000 [ 1832.177678][ T5474] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1832.177687][ T5474] R13: 00007fecf7616038 R14: 00007fecf7615fa0 R15: 00007ffe92140a48 [ 1832.177709][ T5474] [ 1833.288853][ T5491] netlink: 334 bytes leftover after parsing attributes in process `syz.6.6966'. [ 1837.185081][ T5563] FAULT_INJECTION: forcing a failure. [ 1837.185081][ T5563] name failslab, interval 1, probability 0, space 0, times 0 [ 1837.317175][ T5563] CPU: 0 UID: 0 PID: 5563 Comm: syz.8.6978 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1837.317205][ T5563] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1837.317211][ T5563] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1837.317222][ T5563] Call Trace: [ 1837.317228][ T5563] [ 1837.317236][ T5563] dump_stack_lvl+0x100/0x190 [ 1837.317265][ T5563] should_fail_ex.cold+0x5/0xa [ 1837.317284][ T5563] ? memcg_list_lru_alloc+0x4ec/0x740 [ 1837.317305][ T5563] should_failslab+0xc2/0x120 [ 1837.317321][ T5563] __kmalloc_noprof+0xe0/0x850 [ 1837.317344][ T5563] ? mqueue_get_tree+0xf1/0x130 [ 1837.317367][ T5563] memcg_list_lru_alloc+0x4ec/0x740 [ 1837.317393][ T5563] ? __pfx_memcg_list_lru_alloc+0x10/0x10 [ 1837.317415][ T5563] ? rcu_read_unlock+0x17/0x60 [ 1837.317437][ T5563] ? get_mem_cgroup_from_objcg+0xd3/0x330 [ 1837.317461][ T5563] __memcg_slab_post_alloc_hook+0x12f/0x9a0 [ 1837.317482][ T5563] ? kasan_save_track+0x14/0x30 [ 1837.317510][ T5563] kmem_cache_alloc_lru_noprof+0x592/0x6e0 [ 1837.317531][ T5563] ? mqueue_alloc_inode+0x25/0x50 [ 1837.317552][ T5563] ? __pfx_mqueue_alloc_inode+0x10/0x10 [ 1837.317572][ T5563] mqueue_alloc_inode+0x25/0x50 [ 1837.317592][ T5563] alloc_inode+0x68/0x250 [ 1837.317611][ T5563] new_inode+0x22/0x1c0 [ 1837.317632][ T5563] mqueue_get_inode+0x2e/0xe00 [ 1837.317650][ T5563] ? sget_fc+0x801/0xc70 [ 1837.317673][ T5563] ? __pfx_mqueue_fill_super+0x10/0x10 [ 1837.317691][ T5563] mqueue_fill_super+0x14d/0x260 [ 1837.317710][ T5563] get_tree_nodev+0xdd/0x190 [ 1837.317733][ T5563] mqueue_get_tree+0xf1/0x130 [ 1837.317751][ T5563] vfs_get_tree+0x92/0x320 [ 1837.317771][ T5563] fc_mount_longterm+0x1a/0x270 [ 1837.317793][ T5563] mq_init_ns+0x482/0x820 [ 1837.317815][ T5563] copy_ipcs+0x3dd/0x7e0 [ 1837.317846][ T5563] create_new_namespaces+0x20a/0xac0 [ 1837.317864][ T5563] ? security_capable+0x80/0x260 [ 1837.317887][ T5563] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 1837.317905][ T5563] ksys_unshare+0x473/0xad0 [ 1837.317927][ T5563] ? __pfx_ksys_unshare+0x10/0x10 [ 1837.317953][ T5563] __x64_sys_unshare+0x31/0x40 [ 1837.317971][ T5563] do_syscall_64+0x106/0xf80 [ 1837.317989][ T5563] ? clear_bhb_loop+0x40/0x90 [ 1837.318008][ T5563] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1837.318024][ T5563] RIP: 0033:0x7f8bb8d9c799 [ 1837.318038][ T5563] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1837.318054][ T5563] RSP: 002b:00007f8bb9ba4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1837.318069][ T5563] RAX: ffffffffffffffda RBX: 00007f8bb9015fa0 RCX: 00007f8bb8d9c799 [ 1837.318080][ T5563] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000006c000000 [ 1837.318089][ T5563] RBP: 00007f8bb8e32bd9 R08: 0000000000000000 R09: 0000000000000000 [ 1837.318098][ T5563] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1837.318109][ T5563] R13: 00007f8bb9016038 R14: 00007f8bb9015fa0 R15: 00007ffcbaf673d8 [ 1837.318129][ T5563] [ 1838.249958][ T5574] netlink: 334 bytes leftover after parsing attributes in process `syz.8.6979'. [ 1840.037644][ T5611] FAULT_INJECTION: forcing a failure. [ 1840.037644][ T5611] name failslab, interval 1, probability 0, space 0, times 0 [ 1840.225321][ T5611] CPU: 0 UID: 0 PID: 5611 Comm: syz.2.6989 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1840.225352][ T5611] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1840.225358][ T5611] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1840.225368][ T5611] Call Trace: [ 1840.225375][ T5611] [ 1840.225383][ T5611] dump_stack_lvl+0x100/0x190 [ 1840.225411][ T5611] should_fail_ex.cold+0x5/0xa [ 1840.225431][ T5611] should_failslab+0xc2/0x120 [ 1840.225447][ T5611] __kmalloc_cache_noprof+0x7a/0x6f0 [ 1840.225466][ T5611] ? do_epoll_create+0x62/0x4b0 [ 1840.225485][ T5611] do_epoll_create+0x62/0x4b0 [ 1840.225501][ T5611] __x64_sys_epoll_create+0x45/0x70 [ 1840.225516][ T5611] do_syscall_64+0x106/0xf80 [ 1840.225534][ T5611] ? clear_bhb_loop+0x40/0x90 [ 1840.225553][ T5611] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1840.225569][ T5611] RIP: 0033:0x7fecf739c799 [ 1840.225583][ T5611] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1840.225598][ T5611] RSP: 002b:00007fecf55f6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d5 [ 1840.225613][ T5611] RAX: ffffffffffffffda RBX: 00007fecf7615fa0 RCX: 00007fecf739c799 [ 1840.225624][ T5611] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000007 [ 1840.225633][ T5611] RBP: 00007fecf7432bd9 R08: 0000000000000000 R09: 0000000000000000 [ 1840.225642][ T5611] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1840.225651][ T5611] R13: 00007fecf7616038 R14: 00007fecf7615fa0 R15: 00007ffe92140a48 [ 1840.225688][ T5611] [ 1842.348759][ T5645] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1848.515197][ T5707] FAULT_INJECTION: forcing a failure. [ 1848.515197][ T5707] name failslab, interval 1, probability 0, space 0, times 0 [ 1848.627797][ T5707] CPU: 0 UID: 0 PID: 5707 Comm: syz.6.7009 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1848.627833][ T5707] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1848.627839][ T5707] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1848.627849][ T5707] Call Trace: [ 1848.627855][ T5707] [ 1848.627863][ T5707] dump_stack_lvl+0x100/0x190 [ 1848.627891][ T5707] should_fail_ex.cold+0x5/0xa [ 1848.627911][ T5707] should_failslab+0xc2/0x120 [ 1848.627927][ T5707] __kmalloc_node_track_caller_noprof+0xe3/0x850 [ 1848.627951][ T5707] ? kasprintf+0xc7/0x100 [ 1848.627971][ T5707] kvasprintf+0xbc/0x150 [ 1848.627985][ T5707] ? __pfx_kvasprintf+0x10/0x10 [ 1848.628002][ T5707] ? __pfx_lookup_user_key+0x10/0x10 [ 1848.628025][ T5707] ? map_id_range_up+0x2ce/0x3b0 [ 1848.628043][ T5707] kasprintf+0xc7/0x100 [ 1848.628058][ T5707] ? __pfx_kasprintf+0x10/0x10 [ 1848.628074][ T5707] ? from_kuid_munged+0xaa/0x130 [ 1848.628088][ T5707] ? __pfx_from_kuid_munged+0x10/0x10 [ 1848.628102][ T5707] ? __x64_sys_futex+0x34f/0x4d0 [ 1848.628125][ T5707] keyctl_describe_key+0x250/0x530 [ 1848.628150][ T5707] __do_sys_keyctl+0x39b/0x5a0 [ 1848.628180][ T5707] do_syscall_64+0x106/0xf80 [ 1848.628199][ T5707] ? clear_bhb_loop+0x40/0x90 [ 1848.628218][ T5707] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1848.628235][ T5707] RIP: 0033:0x7fceb9f9c799 [ 1848.628249][ T5707] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1848.628264][ T5707] RSP: 002b:00007fcebae50028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 1848.628280][ T5707] RAX: ffffffffffffffda RBX: 00007fceba215fa0 RCX: 00007fceb9f9c799 [ 1848.628290][ T5707] RDX: 000000000000ee01 RSI: fffffffffffffffd RDI: 0000000000000006 [ 1848.628302][ T5707] RBP: 00007fceba032bd9 R08: 0000000000000fff R09: 0000000000000000 [ 1848.628311][ T5707] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1848.628320][ T5707] R13: 00007fceba216038 R14: 00007fceba215fa0 R15: 00007ffe5b4f3488 [ 1848.628340][ T5707] [ 1850.908065][ T5729] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 1851.144601][ T5729] audit: out of memory in audit_log_start [ 1852.779973][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 1852.786597][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 1855.213652][ T5770] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1855.585106][ T5776] netlink: set zone limit has 8 unknown bytes [ 1856.536189][ T30] audit: type=1804 audit(4294967400.716:146): pid=5796 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.7026" name="/newroot/35/file0" dev="tmpfs" ino=203 res=1 errno=0 [ 1856.758336][ T30] audit: type=1804 audit(4294967400.837:147): pid=5797 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.7026" name="/newroot/35/file0" dev="tmpfs" ino=203 res=1 errno=0 [ 1861.001759][ T30] audit: type=1800 audit(4294967405.209:148): pid=5859 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.7039" name="discovery_nqn" dev="configfs" ino=298862 res=0 errno=0 [ 1861.427213][ T9] usb usb40-port2: attempt power cycle [ 1862.068280][ T9] usb usb40-port2: unable to enumerate USB device [ 1862.529980][ T5872] zswap: compressor û not available [ 1865.291133][ T5931] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 1866.898085][ T5960] zswap: compressor Ú not available [ 1867.745793][ T5979] FAULT_INJECTION: forcing a failure. [ 1867.745793][ T5979] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1868.078400][ T5979] CPU: 0 UID: 0 PID: 5979 Comm: syz.6.7067 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1868.078428][ T5979] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1868.078434][ T5979] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1868.078443][ T5979] Call Trace: [ 1868.078448][ T5979] [ 1868.078455][ T5979] dump_stack_lvl+0x100/0x190 [ 1868.078482][ T5979] should_fail_ex.cold+0x5/0xa [ 1868.078499][ T5979] get_futex_key+0x1d2/0x1620 [ 1868.078519][ T5979] ? __pfx_get_futex_key+0x10/0x10 [ 1868.078542][ T5979] futex_wake+0xea/0x530 [ 1868.078565][ T5979] ? __pfx_futex_wake+0x10/0x10 [ 1868.078586][ T5979] ? __call_rcu_common.constprop.0+0x3f0/0x9b0 [ 1868.078612][ T5979] do_futex+0x32b/0x350 [ 1868.078638][ T5979] ? __pfx_do_futex+0x10/0x10 [ 1868.078657][ T5979] ? __pfx___might_resched+0x10/0x10 [ 1868.078678][ T5979] ? blkcg_maybe_throttle_current+0x5df/0xeb0 [ 1868.078700][ T5979] __x64_sys_futex+0x34f/0x4d0 [ 1868.078720][ T5979] ? __pfx_task_work_run+0x10/0x10 [ 1868.078740][ T5979] ? __pfx___x64_sys_futex+0x10/0x10 [ 1868.078759][ T5979] ? exit_to_user_mode_loop+0xdd/0x4a0 [ 1868.078782][ T5979] do_syscall_64+0x106/0xf80 [ 1868.078799][ T5979] ? clear_bhb_loop+0x40/0x90 [ 1868.078817][ T5979] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1868.078832][ T5979] RIP: 0033:0x7fceb9f9c799 [ 1868.078846][ T5979] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1868.078860][ T5979] RSP: 002b:00007fcebae2f0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1868.078875][ T5979] RAX: ffffffffffffffda RBX: 00007fceba216098 RCX: 00007fceb9f9c799 [ 1868.078885][ T5979] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fceba21609c [ 1868.078894][ T5979] RBP: 00007fceba216090 R08: 0000000000000000 R09: 0000000000000000 [ 1868.078903][ T5979] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1868.078911][ T5979] R13: 00007fceba216128 R14: 00007ffe5b4f33a0 R15: 00007ffe5b4f3488 [ 1868.078931][ T5979] [ 1869.061902][ T5998] netlink: 334 bytes leftover after parsing attributes in process `syz.2.7074'. [ 1869.163473][ T5999] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7074'. [ 1873.578181][ T6035] can: request_module (can-proto-4) failed. [ 1873.632962][ T6038] can: request_module (can-proto-4) failed. [ 1876.466200][ T6092] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7094'. [ 1877.081325][ T6102] FAULT_INJECTION: forcing a failure. [ 1877.081325][ T6102] name failslab, interval 1, probability 0, space 0, times 0 [ 1877.201329][ T6102] CPU: 0 UID: 0 PID: 6102 Comm: syz.8.7097 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1877.201361][ T6102] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1877.201367][ T6102] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1877.201377][ T6102] Call Trace: [ 1877.201383][ T6102] [ 1877.201390][ T6102] dump_stack_lvl+0x100/0x190 [ 1877.201419][ T6102] should_fail_ex.cold+0x5/0xa [ 1877.201439][ T6102] should_failslab+0xc2/0x120 [ 1877.201455][ T6102] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1877.201476][ T6102] ? seq_open+0x55/0x170 [ 1877.201500][ T6102] seq_open+0x55/0x170 [ 1877.201520][ T6102] __seq_open_private+0x3e/0xd0 [ 1877.201542][ T6102] tracing_open+0x2a8/0xef0 [ 1877.201564][ T6102] do_dentry_open+0x6d8/0x1660 [ 1877.201578][ T6102] ? __pfx_tracing_open+0x10/0x10 [ 1877.201600][ T6102] vfs_open+0x82/0x3f0 [ 1877.201620][ T6102] path_openat+0x208c/0x31a0 [ 1877.201642][ T6102] ? __pfx_path_openat+0x10/0x10 [ 1877.201664][ T6102] do_file_open+0x20e/0x430 [ 1877.201680][ T6102] ? __pfx_do_file_open+0x10/0x10 [ 1877.201709][ T6102] ? alloc_fd+0x476/0x790 [ 1877.201726][ T6102] ? do_getname+0x191/0x390 [ 1877.201748][ T6102] do_sys_openat2+0x10d/0x1e0 [ 1877.201767][ T6102] ? __pfx_do_sys_openat2+0x10/0x10 [ 1877.201788][ T6102] ? __fget_files+0x21f/0x3d0 [ 1877.201805][ T6102] __x64_sys_openat+0x12d/0x210 [ 1877.201825][ T6102] ? __pfx___x64_sys_openat+0x10/0x10 [ 1877.201852][ T6102] do_syscall_64+0x106/0xf80 [ 1877.201870][ T6102] ? clear_bhb_loop+0x40/0x90 [ 1877.201888][ T6102] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1877.201904][ T6102] RIP: 0033:0x7f8bb8d9c799 [ 1877.201918][ T6102] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1877.201934][ T6102] RSP: 002b:00007f8bb9ba4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1877.201950][ T6102] RAX: ffffffffffffffda RBX: 00007f8bb9015fa0 RCX: 00007f8bb8d9c799 [ 1877.201960][ T6102] RDX: 1a6b75d638929210 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 1877.201970][ T6102] RBP: 00007f8bb8e32bd9 R08: 0000000000000000 R09: 0000000000000000 [ 1877.201980][ T6102] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1877.201989][ T6102] R13: 00007f8bb9016038 R14: 00007f8bb9015fa0 R15: 00007ffcbaf673d8 [ 1877.202010][ T6102] [ 1877.878693][ T6109] FAULT_INJECTION: forcing a failure. [ 1877.878693][ T6109] name failslab, interval 1, probability 0, space 0, times 0 [ 1877.971861][ T6109] CPU: 0 UID: 0 PID: 6109 Comm: syz.8.7100 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1877.971889][ T6109] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1877.971895][ T6109] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1877.971904][ T6109] Call Trace: [ 1877.971910][ T6109] [ 1877.971917][ T6109] dump_stack_lvl+0x100/0x190 [ 1877.971945][ T6109] should_fail_ex.cold+0x5/0xa [ 1877.971962][ T6109] ? tomoyo_realpath_from_path+0xb6/0x690 [ 1877.971978][ T6109] should_failslab+0xc2/0x120 [ 1877.971994][ T6109] __kmalloc_noprof+0xe0/0x850 [ 1877.972019][ T6109] tomoyo_realpath_from_path+0xb6/0x690 [ 1877.972039][ T6109] tomoyo_path_number_perm+0x23c/0x580 [ 1877.972061][ T6109] ? tomoyo_path_number_perm+0x22e/0x580 [ 1877.972084][ T6109] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1877.972125][ T6109] ? find_held_lock+0x2b/0x80 [ 1877.972138][ T6109] ? __fget_files+0x215/0x3d0 [ 1877.972150][ T6109] ? hook_file_ioctl_common+0x146/0x410 [ 1877.972178][ T6109] ? __fget_files+0x21f/0x3d0 [ 1877.972194][ T6109] security_file_ioctl+0xd3/0x230 [ 1877.972218][ T6109] __x64_sys_ioctl+0xb7/0x210 [ 1877.972240][ T6109] do_syscall_64+0x106/0xf80 [ 1877.972258][ T6109] ? clear_bhb_loop+0x40/0x90 [ 1877.972277][ T6109] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1877.972292][ T6109] RIP: 0033:0x7f8bb8d9c799 [ 1877.972305][ T6109] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1877.972319][ T6109] RSP: 002b:00007f8bb9ba4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1877.972334][ T6109] RAX: ffffffffffffffda RBX: 00007f8bb9015fa0 RCX: 00007f8bb8d9c799 [ 1877.972344][ T6109] RDX: 0000000000000000 RSI: 0000000000001261 RDI: 0000000000000003 [ 1877.972352][ T6109] RBP: 00007f8bb9ba4090 R08: 0000000000000000 R09: 0000000000000000 [ 1877.972360][ T6109] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1877.972369][ T6109] R13: 00007f8bb9016038 R14: 00007f8bb9015fa0 R15: 00007ffcbaf673d8 [ 1877.972388][ T6109] [ 1877.972395][ T6109] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1878.941779][ T6124] ptrace attach of "./syz-executor exec"[27915] was attempted by ""[6124] [ 1879.274211][ T6117] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.2.7103: iget: checksum invalid [ 1879.627008][ T6117] faux_driver regulatory: loading /lib/firmware/updates/syzkaller/regulatory.db failed with error -74 [ 1879.948273][ T6117] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.2.7103: iget: checksum invalid [ 1880.218611][ T6117] faux_driver regulatory: loading /lib/firmware/updates/regulatory.db failed with error -74 [ 1880.465654][ T6117] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.2.7103: iget: checksum invalid [ 1880.642611][T29579] Bluetooth: hci0: unexpected event 0x20 length: 123 > 7 [ 1880.712878][ T6117] faux_driver regulatory: loading /lib/firmware/syzkaller/regulatory.db failed with error -74 [ 1881.039928][ T6117] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.2.7103: iget: checksum invalid [ 1881.215810][ T6117] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -74 [ 1881.353416][ T6117] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -74 [ 1881.551209][ T6117] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 1882.825404][ T6169] FAULT_INJECTION: forcing a failure. [ 1882.825404][ T6169] name failslab, interval 1, probability 0, space 0, times 0 [ 1882.937343][ T6169] CPU: 0 UID: 0 PID: 6169 Comm: syz.6.7116 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1882.937371][ T6169] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1882.937376][ T6169] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1882.937385][ T6169] Call Trace: [ 1882.937391][ T6169] [ 1882.937398][ T6169] dump_stack_lvl+0x100/0x190 [ 1882.937427][ T6169] should_fail_ex.cold+0x5/0xa [ 1882.937445][ T6169] ? tomoyo_encode2+0xfb/0x3c0 [ 1882.937460][ T6169] should_failslab+0xc2/0x120 [ 1882.937476][ T6169] __kmalloc_noprof+0xe0/0x850 [ 1882.937496][ T6169] ? d_absolute_path+0x136/0x1b0 [ 1882.937519][ T6169] tomoyo_encode2+0xfb/0x3c0 [ 1882.937537][ T6169] tomoyo_encode+0x29/0x50 [ 1882.937552][ T6169] tomoyo_realpath_from_path+0x18c/0x690 [ 1882.937572][ T6169] tomoyo_path_number_perm+0x23c/0x580 [ 1882.937594][ T6169] ? tomoyo_path_number_perm+0x22e/0x580 [ 1882.937617][ T6169] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1882.937662][ T6169] ? find_held_lock+0x2b/0x80 [ 1882.937675][ T6169] ? __fget_files+0x215/0x3d0 [ 1882.937688][ T6169] ? hook_file_ioctl_common+0x146/0x410 [ 1882.937715][ T6169] ? __fget_files+0x21f/0x3d0 [ 1882.937731][ T6169] security_file_ioctl+0xd3/0x230 [ 1882.937755][ T6169] __x64_sys_ioctl+0xb7/0x210 [ 1882.937777][ T6169] do_syscall_64+0x106/0xf80 [ 1882.937795][ T6169] ? clear_bhb_loop+0x40/0x90 [ 1882.937813][ T6169] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1882.937828][ T6169] RIP: 0033:0x7fceb9f9c799 [ 1882.937840][ T6169] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1882.937855][ T6169] RSP: 002b:00007fcebae50028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1882.937870][ T6169] RAX: ffffffffffffffda RBX: 00007fceba215fa0 RCX: 00007fceb9f9c799 [ 1882.937880][ T6169] RDX: 0000000000000000 RSI: 0000000000001261 RDI: 0000000000000003 [ 1882.937889][ T6169] RBP: 00007fcebae50090 R08: 0000000000000000 R09: 0000000000000000 [ 1882.937897][ T6169] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1882.937906][ T6169] R13: 00007fceba216038 R14: 00007fceba215fa0 R15: 00007ffe5b4f3488 [ 1882.937926][ T6169] [ 1883.152236][ T6169] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1883.528465][ T6164] Invalid ELF header magic: != ELF [ 1884.342691][ T6180] futex_wake_op: syz.6.7118 tries to shift op by -2048; fix this program [ 1884.464995][ T6180] futex_wake_op: syz.6.7118 tries to shift op by -2048; fix this program [ 1884.622562][ T6182] netlink: 206 bytes leftover after parsing attributes in process `syz.6.7118'. [ 1884.712888][ T6180] futex_wake_op: syz.6.7118 tries to shift op by -2048; fix this program [ 1889.197267][T29579] Bluetooth: hci0: unexpected event 0x03 length: 123 > 11 [ 1889.225784][ T6216] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1890.831386][ T6226] Invalid ELF header magic: != ELF [ 1893.458077][ T6265] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.6.7134: iget: checksum invalid [ 1893.643689][ T6265] faux_driver regulatory: loading /lib/firmware/updates/syzkaller/regulatory.db failed with error -74 [ 1893.803608][ T6265] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.6.7134: iget: checksum invalid [ 1894.103330][ T6265] faux_driver regulatory: loading /lib/firmware/updates/regulatory.db failed with error -74 [ 1894.301859][ T6265] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.6.7134: iget: checksum invalid [ 1894.471567][ T6265] faux_driver regulatory: loading /lib/firmware/syzkaller/regulatory.db failed with error -74 [ 1894.663529][ T6265] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.6.7134: iget: checksum invalid [ 1894.956930][ T6265] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -74 [ 1895.131516][ T6265] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -74 [ 1895.376544][ T6265] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 1895.593394][ T6271] Bluetooth: hci4: command 0x0406 tx timeout [ 1895.918483][ T6296] netlink: zone id is out of range [ 1895.939757][ T6296] netlink: zone id is out of range [ 1895.980727][ T6296] netlink: zone id is out of range [ 1896.029836][ T6296] netlink: zone id is out of range [ 1896.091063][ T6296] netlink: zone id is out of range [ 1896.107622][ T6296] netlink: zone id is out of range [ 1896.170342][ T6296] netlink: zone id is out of range [ 1896.186499][ T6296] netlink: zone id is out of range [ 1896.255074][ T6296] netlink: zone id is out of range [ 1896.313888][ T6296] netlink: zone id is out of range [ 1896.835127][ T6301] netlink: 'syz.6.7144': attribute type 3 has an invalid length. [ 1896.920106][ T6301] netlink: 330 bytes leftover after parsing attributes in process `syz.6.7144'. [ 1899.088007][ T6328] block nbd8: shutting down sockets [ 1899.159016][ T6341] Invalid ELF header magic: != ELF [ 1899.436141][ T6348] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1900.756299][ T6360] netlink: 'syz.2.7160': attribute type 1 has an invalid length. [ 1900.829016][ T6360] netlink: 33 bytes leftover after parsing attributes in process `syz.2.7160'. [ 1902.020339][ T6378] netlink: 342 bytes leftover after parsing attributes in process `syz.8.7165'. [ 1903.513089][ T6404] FAULT_INJECTION: forcing a failure. [ 1903.513089][ T6404] name failslab, interval 1, probability 0, space 0, times 0 [ 1903.681360][ T6404] CPU: 0 UID: 0 PID: 6404 Comm: syz.2.7171 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1903.681390][ T6404] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1903.681396][ T6404] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1903.681406][ T6404] Call Trace: [ 1903.681412][ T6404] [ 1903.681419][ T6404] dump_stack_lvl+0x100/0x190 [ 1903.681447][ T6404] should_fail_ex.cold+0x5/0xa [ 1903.681466][ T6404] should_failslab+0xc2/0x120 [ 1903.681482][ T6404] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1903.681503][ T6404] ? anon_vma_clone+0x2bd/0xc70 [ 1903.681526][ T6404] anon_vma_clone+0x2bd/0xc70 [ 1903.681551][ T6404] __split_vma+0x51f/0xd90 [ 1903.681574][ T6404] ? __pfx___split_vma+0x10/0x10 [ 1903.681598][ T6404] ? finish_task_switch.isra.0+0x200/0xb80 [ 1903.681619][ T6404] vma_modify+0x1121/0x2250 [ 1903.681642][ T6404] ? __schedule+0x1000/0x60e0 [ 1903.681660][ T6404] ? __pfx_vma_modify+0x10/0x10 [ 1903.681685][ T6404] vma_modify_flags+0x257/0x3d0 [ 1903.681707][ T6404] ? __pfx_vma_modify_flags+0x10/0x10 [ 1903.681732][ T6404] ? __pfx___schedule+0x10/0x10 [ 1903.681758][ T6404] ? mtree_range_walk+0x6ce/0xcd0 [ 1903.681782][ T6404] mlock_fixup+0x302/0xf00 [ 1903.681805][ T6404] ? __pfx_mlock_fixup+0x10/0x10 [ 1903.681831][ T6404] apply_vma_lock_flags+0x256/0x370 [ 1903.681854][ T6404] ? __pfx_apply_vma_lock_flags+0x10/0x10 [ 1903.681875][ T6404] ? __pfx___might_resched+0x10/0x10 [ 1903.681895][ T6404] ? __sys_sendmmsg+0x367/0x430 [ 1903.681950][ T6404] ? __pfx_down_write_killable+0x10/0x10 [ 1903.681975][ T6404] ? do_futex+0x192/0x350 [ 1903.682005][ T6404] do_mlock+0x261/0x7f0 [ 1903.682030][ T6404] ? __pfx_do_mlock+0x10/0x10 [ 1903.682053][ T6404] ? __x64_sys_futex+0x34f/0x4d0 [ 1903.682071][ T6404] ? __x64_sys_futex+0x358/0x4d0 [ 1903.682092][ T6404] ? xfd_validate_state+0x129/0x190 [ 1903.682123][ T6404] __x64_sys_mlock+0x59/0x80 [ 1903.682148][ T6404] do_syscall_64+0x106/0xf80 [ 1903.682168][ T6404] ? clear_bhb_loop+0x40/0x90 [ 1903.682187][ T6404] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1903.682203][ T6404] RIP: 0033:0x7fecf739c799 [ 1903.682220][ T6404] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1903.682235][ T6404] RSP: 002b:00007fecf55f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 1903.682251][ T6404] RAX: ffffffffffffffda RBX: 00007fecf7615fa0 RCX: 00007fecf739c799 [ 1903.682261][ T6404] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000000 [ 1903.682270][ T6404] RBP: 00007fecf7432bd9 R08: 0000000000000000 R09: 0000000000000000 [ 1903.682279][ T6404] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1903.682289][ T6404] R13: 00007fecf7616038 R14: 00007fecf7615fa0 R15: 00007ffe92140a48 [ 1903.682310][ T6404] [ 1904.341447][ T6399] zswap: compressor not available [ 1905.188913][ T6436] netlink: 342 bytes leftover after parsing attributes in process `syz.6.7176'. [ 1908.162106][ T6485] zswap: compressor not available [ 1910.878940][T29579] Bluetooth: hci0: command 0x0406 tx timeout [ 1912.368788][ T6524] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1912.984811][ T6530] FAULT_INJECTION: forcing a failure. [ 1912.984811][ T6530] name failslab, interval 1, probability 0, space 0, times 0 [ 1913.151909][ T6530] CPU: 0 UID: 0 PID: 6530 Comm: syz.8.7192 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1913.151938][ T6530] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1913.151945][ T6530] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1913.151954][ T6530] Call Trace: [ 1913.151961][ T6530] [ 1913.151968][ T6530] dump_stack_lvl+0x100/0x190 [ 1913.151996][ T6530] should_fail_ex.cold+0x5/0xa [ 1913.152015][ T6530] should_failslab+0xc2/0x120 [ 1913.152032][ T6530] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1913.152054][ T6530] ? posix_lock_inode+0x5b2/0x2440 [ 1913.152069][ T6530] ? lockdep_init_map_type+0x5c/0x250 [ 1913.152092][ T6530] posix_lock_inode+0x5b2/0x2440 [ 1913.152115][ T6530] ? __pfx_posix_lock_inode+0x10/0x10 [ 1913.152135][ T6530] vfs_lock_file+0xfb/0x150 [ 1913.152150][ T6530] fcntl_setlk+0x782/0xe40 [ 1913.152169][ T6530] ? __pfx_fcntl_setlk+0x10/0x10 [ 1913.152188][ T6530] ? __might_fault+0xc5/0x140 [ 1913.152208][ T6530] ? __might_fault+0xc5/0x140 [ 1913.152235][ T6530] do_fcntl+0xf39/0x1670 [ 1913.152254][ T6530] ? __pfx_do_fcntl+0x10/0x10 [ 1913.152274][ T6530] ? __x64_sys_futex+0x34f/0x4d0 [ 1913.152293][ T6530] ? __x64_sys_futex+0x358/0x4d0 [ 1913.152314][ T6530] ? xfd_validate_state+0x129/0x190 [ 1913.152334][ T6530] ? tomoyo_file_fcntl+0x6c/0xc0 [ 1913.152357][ T6530] __x64_sys_fcntl+0x163/0x200 [ 1913.152378][ T6530] do_syscall_64+0x106/0xf80 [ 1913.152397][ T6530] ? clear_bhb_loop+0x40/0x90 [ 1913.152416][ T6530] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1913.152433][ T6530] RIP: 0033:0x7f8bb8d9c799 [ 1913.152447][ T6530] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1913.152462][ T6530] RSP: 002b:00007f8bb9ba4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000048 [ 1913.152478][ T6530] RAX: ffffffffffffffda RBX: 00007f8bb9015fa0 RCX: 00007f8bb8d9c799 [ 1913.152488][ T6530] RDX: 0000000000001298 RSI: 0000000000000026 RDI: 0000000000000001 [ 1913.152497][ T6530] RBP: 00007f8bb8e32bd9 R08: 0000000000000000 R09: 0000000000000000 [ 1913.152517][ T6530] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1913.152527][ T6530] R13: 00007f8bb9016038 R14: 00007f8bb9015fa0 R15: 00007ffcbaf673d8 [ 1913.152548][ T6530] [ 1913.922138][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 1913.928889][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 1914.968192][ T6563] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 1915.366264][ T6563] CIFS mount error: No usable UNC path provided in device string! [ 1915.366264][ T6563] [ 1915.579524][ T6563] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1916.089877][T29579] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1916.100319][T29579] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1916.109715][T29579] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1916.117472][T29579] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1916.124920][T29579] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1917.701169][ T6592] FAULT_INJECTION: forcing a failure. [ 1917.701169][ T6592] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1917.807598][ T6592] CPU: 0 UID: 0 PID: 6592 Comm: syz.6.7207 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1917.807625][ T6592] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1917.807631][ T6592] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1917.807640][ T6592] Call Trace: [ 1917.807647][ T6592] [ 1917.807655][ T6592] dump_stack_lvl+0x100/0x190 [ 1917.807682][ T6592] should_fail_ex.cold+0x5/0xa [ 1917.807700][ T6592] _copy_from_user+0x2e/0xd0 [ 1917.807726][ T6592] do_tcp_setsockopt+0x73e/0x2ac0 [ 1917.807821][ T6592] ? __pfx_do_tcp_setsockopt+0x10/0x10 [ 1917.807835][ T6592] ? trace_contention_end+0x140/0x180 [ 1917.807856][ T6592] ? __mutex_lock+0x26a/0x1b90 [ 1917.807876][ T6592] ? smc_setsockopt+0x100/0xa10 [ 1917.807937][ T6592] ? find_held_lock+0x2b/0x80 [ 1917.807950][ T6592] ? get_pid_task+0xfc/0x250 [ 1917.807967][ T6592] ? get_pid_task+0xfc/0x250 [ 1917.807986][ T6592] ? __pfx___mutex_lock+0x10/0x10 [ 1917.808013][ T6592] tcp_setsockopt+0xe2/0x100 [ 1917.808030][ T6592] smc_setsockopt+0x1b6/0xa10 [ 1917.808051][ T6592] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 1917.808074][ T6592] ? __pfx_smc_setsockopt+0x10/0x10 [ 1917.808097][ T6592] ? aa_sock_opt_perm+0xfe/0x1b0 [ 1917.808117][ T6592] ? __pfx_smc_setsockopt+0x10/0x10 [ 1917.808140][ T6592] do_sock_setsockopt+0xf3/0x1d0 [ 1917.808162][ T6592] __sys_setsockopt+0x119/0x190 [ 1917.808182][ T6592] __x64_sys_setsockopt+0xbd/0x160 [ 1917.808197][ T6592] ? do_syscall_64+0x95/0xf80 [ 1917.808214][ T6592] ? lockdep_hardirqs_on+0x78/0x100 [ 1917.808230][ T6592] do_syscall_64+0x106/0xf80 [ 1917.808246][ T6592] ? clear_bhb_loop+0x40/0x90 [ 1917.808273][ T6592] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1917.808289][ T6592] RIP: 0033:0x7fceb9f9c799 [ 1917.808302][ T6592] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1917.808316][ T6592] RSP: 002b:00007fcebae50028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1917.808331][ T6592] RAX: ffffffffffffffda RBX: 00007fceba215fa0 RCX: 00007fceb9f9c799 [ 1917.808341][ T6592] RDX: 0000000000000002 RSI: 0000000000000006 RDI: 0000000000000003 [ 1917.808349][ T6592] RBP: 00007fcebae50090 R08: 0000000000000fb3 R09: 0000000000000000 [ 1917.808358][ T6592] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1917.808366][ T6592] R13: 00007fceba216038 R14: 00007fceba215fa0 R15: 00007ffe5b4f3488 [ 1917.808386][ T6592] [ 1918.480798][T29579] Bluetooth: hci5: command tx timeout [ 1918.678255][ T1661] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1919.045350][ T1661] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1919.355587][ T1661] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1919.592178][ T1661] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1919.676786][ T6573] chnl_net:caif_netlink_parms(): no params data found [ 1920.464991][ T6573] bridge0: port 1(bridge_slave_0) entered blocking state [ 1920.472109][ T6573] bridge0: port 1(bridge_slave_0) entered disabled state [ 1920.506999][T29579] Bluetooth: hci5: command tx timeout [ 1920.585245][ T6573] bridge_slave_0: entered allmulticast mode [ 1920.644933][ T6573] bridge_slave_0: entered promiscuous mode [ 1920.708266][ T6573] bridge0: port 2(bridge_slave_1) entered blocking state [ 1920.773363][ T6573] bridge0: port 2(bridge_slave_1) entered disabled state [ 1920.836979][ T6573] bridge_slave_1: entered allmulticast mode [ 1920.925079][ T6573] bridge_slave_1: entered promiscuous mode [ 1922.416777][ T1661] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1922.534348][ T1661] bond0 (unregistering): Released all slaves [ 1922.574760][T29579] Bluetooth: hci5: command tx timeout [ 1922.755187][ T6573] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1922.826731][ T6573] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1922.905127][ T1661] Â: left promiscuous mode [ 1923.802274][ T6573] team0: Port device team_slave_0 added [ 1923.851550][ T6573] team0: Port device team_slave_1 added [ 1924.642126][T29579] Bluetooth: hci5: command tx timeout [ 1924.660719][ T6573] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1924.724388][ T6573] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1924.882884][ T6573] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1924.970351][ T6573] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1925.001718][ T6573] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1925.180479][ T6573] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1925.678084][ T6573] hsr_slave_0: entered promiscuous mode [ 1925.727901][ T6573] hsr_slave_1: entered promiscuous mode [ 1925.734689][ T6573] debugfs: 'hsr0' already exists in 'hsr' [ 1925.805514][ T6573] Cannot create hsr debugfs directory [ 1926.482987][ T6694] FAULT_INJECTION: forcing a failure. [ 1926.482987][ T6694] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1926.586702][ T6694] CPU: 0 UID: 0 PID: 6694 Comm: syz.8.7225 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1926.586733][ T6694] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1926.586739][ T6694] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1926.586749][ T6694] Call Trace: [ 1926.586755][ T6694] [ 1926.586762][ T6694] dump_stack_lvl+0x100/0x190 [ 1926.586795][ T6694] should_fail_ex.cold+0x5/0xa [ 1926.586811][ T6694] ? prepare_alloc_pages+0x16d/0x5f0 [ 1926.586832][ T6694] should_fail_alloc_page+0xeb/0x140 [ 1926.586850][ T6694] prepare_alloc_pages+0x1f0/0x5f0 [ 1926.586870][ T6694] __alloc_frozen_pages_noprof+0x19a/0x2ba0 [ 1926.586892][ T6694] ? buffer_subbuf_size_write+0x182/0x280 [ 1926.586918][ T6694] ? do_writev+0x13e/0x340 [ 1926.586938][ T6694] ? do_syscall_64+0x106/0xf80 [ 1926.586957][ T6694] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1926.586983][ T6694] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1926.587018][ T6694] ? rcu_is_watching+0x12/0xc0 [ 1926.587042][ T6694] ? trace_kmalloc+0x101/0x130 [ 1926.587056][ T6694] ? __kasan_kmalloc+0xaa/0xb0 [ 1926.587082][ T6694] __alloc_pages_noprof+0xb/0x1b0 [ 1926.587104][ T6694] alloc_cpu_data+0x60/0x130 [ 1926.587122][ T6694] __rb_allocate_pages+0x6a5/0xf50 [ 1926.587148][ T6694] ring_buffer_subbuf_order_set+0x3ef/0x18c0 [ 1926.587174][ T6694] ? tracing_stop_tr+0xf6/0x210 [ 1926.587197][ T6694] ? __pfx_ring_buffer_subbuf_order_set+0x10/0x10 [ 1926.587218][ T6694] ? __pfx___might_resched+0x10/0x10 [ 1926.587241][ T6694] ? iovec_from_user+0xda/0x140 [ 1926.587261][ T6694] buffer_subbuf_size_write+0x182/0x280 [ 1926.587286][ T6694] ? __pfx_buffer_subbuf_size_write+0x10/0x10 [ 1926.587312][ T6694] ? iov_iter_advance+0xac/0x6d0 [ 1926.587336][ T6694] ? __pfx_buffer_subbuf_size_write+0x10/0x10 [ 1926.587359][ T6694] vfs_writev+0x5ea/0xe10 [ 1926.587380][ T6694] ? rcu_is_watching+0x12/0xc0 [ 1926.587406][ T6694] ? __pfx_vfs_writev+0x10/0x10 [ 1926.587426][ T6694] ? fdget_pos+0x2aa/0x380 [ 1926.587455][ T6694] ? __fget_files+0x21f/0x3d0 [ 1926.587474][ T6694] ? do_writev+0x13e/0x340 [ 1926.587494][ T6694] do_writev+0x13e/0x340 [ 1926.587516][ T6694] ? __pfx_do_writev+0x10/0x10 [ 1926.587543][ T6694] do_syscall_64+0x106/0xf80 [ 1926.587560][ T6694] ? clear_bhb_loop+0x40/0x90 [ 1926.587579][ T6694] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1926.587604][ T6694] RIP: 0033:0x7f8bb8d9c799 [ 1926.587619][ T6694] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1926.587634][ T6694] RSP: 002b:00007f8bb9ba4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 1926.587650][ T6694] RAX: ffffffffffffffda RBX: 00007f8bb9015fa0 RCX: 00007f8bb8d9c799 [ 1926.587661][ T6694] RDX: 000000000000000a RSI: 0000200000000200 RDI: 0000000000000006 [ 1926.587670][ T6694] RBP: 00007f8bb8e32bd9 R08: 0000000000000000 R09: 0000000000000000 [ 1926.587680][ T6694] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1926.587691][ T6694] R13: 00007f8bb9016038 R14: 00007f8bb9015fa0 R15: 00007ffcbaf673d8 [ 1926.587713][ T6694] [ 1928.132664][ T1661] hsr_slave_1: left promiscuous mode [ 1928.142211][ T1661] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1928.171771][ T1661] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1928.241380][ T1661] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1928.322939][ T1661] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1928.451018][ T1661] veth1_macvtap: left promiscuous mode [ 1928.491090][ T1661] veth0_macvtap: left promiscuous mode [ 1928.521117][ T1661] veth1_vlan: left promiscuous mode [ 1928.554396][ T1661] veth0_vlan: left promiscuous mode [ 1929.520055][ T1661] team0 (unregistering): Port device team_slave_1 removed [ 1930.401590][ T6732] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7233'. [ 1932.496405][ T6573] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1932.614065][ T6573] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1932.731774][ T6573] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1932.834692][ T6573] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1933.003079][ T6755] nbd: couldn't find device at index 33904 [ 1933.531616][ T6573] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1933.668553][ T6573] 8021q: adding VLAN 0 to HW filter on device team0 [ 1933.723723][ T6791] sctp: [Deprecated]: syz.8.7244 (pid 6791) Use of int in maxseg socket option. [ 1933.723723][ T6791] Use struct sctp_assoc_value instead [ 1933.806858][ T1661] bridge0: port 1(bridge_slave_0) entered blocking state [ 1933.813968][ T1661] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1933.897978][ T6791] netlink: 4 bytes leftover after parsing attributes in process `syz.8.7244'. [ 1933.925971][ T1661] bridge0: port 2(bridge_slave_1) entered blocking state [ 1933.933158][ T1661] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1934.210817][ T6573] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1935.269735][ T6573] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1935.561129][ T6573] veth0_vlan: entered promiscuous mode [ 1935.638939][ T6573] veth1_vlan: entered promiscuous mode [ 1935.870979][ T6573] veth0_macvtap: entered promiscuous mode [ 1935.946700][ T6573] veth1_macvtap: entered promiscuous mode [ 1935.983383][ T6823] nbd: couldn't find device at index 33904 [ 1936.121262][ T6573] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1936.131610][ T6573] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1936.386747][T32259] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1936.386795][T32259] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1936.386824][T32259] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1936.386852][T32259] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1936.481785][ T6833] ================================================================== [ 1936.481804][ T6833] BUG: KASAN: slab-use-after-free in fbcon_prepare_logo+0x94e/0xc60 [ 1936.481915][ T6833] Read of size 8 at addr ffff888034b42380 by task syz.8.7253/6833 [ 1936.481928][ T6833] [ 1936.481939][ T6833] CPU: 0 UID: 0 PID: 6833 Comm: syz.8.7253 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1936.481962][ T6833] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1936.481968][ T6833] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1936.481978][ T6833] Call Trace: [ 1936.481984][ T6833] [ 1936.481991][ T6833] dump_stack_lvl+0x100/0x190 [ 1936.482013][ T6833] print_report+0x156/0x4c9 [ 1936.482035][ T6833] ? __virt_addr_valid+0x81/0x620 [ 1936.482064][ T6833] ? __phys_addr+0xe8/0x180 [ 1936.482084][ T6833] ? fbcon_prepare_logo+0x94e/0xc60 [ 1936.482106][ T6833] kasan_report+0xdf/0x1e0 [ 1936.482122][ T6833] ? fbcon_prepare_logo+0x94e/0xc60 [ 1936.482147][ T6833] kasan_check_range+0x10f/0x1e0 [ 1936.482164][ T6833] __asan_memcpy+0x23/0x60 [ 1936.482183][ T6833] fbcon_prepare_logo+0x94e/0xc60 [ 1936.482207][ T6833] fbcon_init+0x10a0/0x1820 [ 1936.482231][ T6833] visual_init+0x320/0x620 [ 1936.482281][ T6833] do_bind_con_driver.isra.0+0x636/0x9c0 [ 1936.482300][ T6833] store_bind+0x609/0x730 [ 1936.482319][ T6833] ? __pfx_store_bind+0x10/0x10 [ 1936.482334][ T6833] dev_attr_store+0x58/0x80 [ 1936.482359][ T6833] ? __pfx_dev_attr_store+0x10/0x10 [ 1936.482381][ T6833] sysfs_kf_write+0xf2/0x150 [ 1936.482400][ T6833] kernfs_fop_write_iter+0x3e0/0x5f0 [ 1936.482415][ T6833] ? __pfx_sysfs_kf_write+0x10/0x10 [ 1936.482433][ T6833] iter_file_splice_write+0x830/0x10a0 [ 1936.482452][ T6833] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1936.482469][ T6833] ? __pfx_copy_splice_read+0x10/0x10 [ 1936.482495][ T6833] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1936.482510][ T6833] direct_splice_actor+0x192/0x6c0 [ 1936.482534][ T6833] splice_direct_to_actor+0x345/0xa30 [ 1936.482558][ T6833] ? __pfx_direct_splice_actor+0x10/0x10 [ 1936.482582][ T6833] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1936.482608][ T6833] do_splice_direct+0x174/0x240 [ 1936.482622][ T6833] ? __pfx_do_splice_direct+0x10/0x10 [ 1936.482646][ T6833] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1936.482669][ T6833] ? rw_verify_area+0xce/0x6d0 [ 1936.482690][ T6833] do_sendfile+0xadc/0xe20 [ 1936.482712][ T6833] ? __pfx_do_sendfile+0x10/0x10 [ 1936.482735][ T6833] ? __x64_sys_futex+0x34f/0x4d0 [ 1936.482754][ T6833] ? __x64_sys_futex+0x358/0x4d0 [ 1936.482773][ T6833] __x64_sys_sendfile64+0x1d8/0x220 [ 1936.482789][ T6833] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 1936.482808][ T6833] do_syscall_64+0x106/0xf80 [ 1936.482825][ T6833] ? clear_bhb_loop+0x40/0x90 [ 1936.482843][ T6833] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1936.482860][ T6833] RIP: 0033:0x7f8bb8d9c799 [ 1936.482874][ T6833] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1936.482890][ T6833] RSP: 002b:00007f8bb6ff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1936.482907][ T6833] RAX: ffffffffffffffda RBX: 00007f8bb9016180 RCX: 00007f8bb8d9c799 [ 1936.482918][ T6833] RDX: 0000000000000000 RSI: 000000000000000b RDI: 0000000000000006 [ 1936.482928][ T6833] RBP: 00007f8bb8e32bd9 R08: 0000000000000000 R09: 0000000000000000 [ 1936.482938][ T6833] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 1936.482947][ T6833] R13: 00007f8bb9016218 R14: 00007f8bb9016180 R15: 00007ffcbaf673d8 [ 1936.482963][ T6833] [ 1936.482970][ T6833] [ 1936.482974][ T6833] Allocated by task 6838: [ 1936.482983][ T6833] kasan_save_stack+0x30/0x50 [ 1936.483005][ T6833] kasan_save_track+0x14/0x30 [ 1936.483025][ T6833] __kasan_kmalloc+0xaa/0xb0 [ 1936.483053][ T6833] __kmalloc_noprof+0x301/0x850 [ 1936.483074][ T6833] tomoyo_encode2+0xfb/0x3c0 [ 1936.483090][ T6833] tomoyo_encode+0x29/0x50 [ 1936.483104][ T6833] tomoyo_realpath_from_path+0x18c/0x690 [ 1936.483120][ T6833] tomoyo_check_open_permission+0x2af/0x3c0 [ 1936.483142][ T6833] tomoyo_file_open+0x6b/0x90 [ 1936.483158][ T6833] security_file_open+0xb5/0x1e0 [ 1936.483173][ T6833] do_dentry_open+0x5aa/0x1660 [ 1936.483185][ T6833] vfs_open+0x82/0x3f0 [ 1936.483200][ T6833] path_openat+0x208c/0x31a0 [ 1936.483212][ T6833] do_file_open+0x20e/0x430 [ 1936.483224][ T6833] do_sys_openat2+0x10d/0x1e0 [ 1936.483241][ T6833] __x64_sys_openat+0x12d/0x210 [ 1936.483258][ T6833] do_syscall_64+0x106/0xf80 [ 1936.483273][ T6833] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1936.483287][ T6833] [ 1936.483291][ T6833] Freed by task 6838: [ 1936.483298][ T6833] kasan_save_stack+0x30/0x50 [ 1936.483318][ T6833] kasan_save_track+0x14/0x30 [ 1936.483337][ T6833] kasan_save_free_info+0x3b/0x70 [ 1936.483354][ T6833] __kasan_slab_free+0x5f/0x80 [ 1936.483374][ T6833] kfree+0x1f6/0x6b0 [ 1936.483390][ T6833] tomoyo_check_open_permission+0x1a2/0x3c0 [ 1936.483411][ T6833] tomoyo_file_open+0x6b/0x90 [ 1936.483427][ T6833] security_file_open+0xb5/0x1e0 [ 1936.483441][ T6833] do_dentry_open+0x5aa/0x1660 [ 1936.483453][ T6833] vfs_open+0x82/0x3f0 [ 1936.483467][ T6833] path_openat+0x208c/0x31a0 [ 1936.483480][ T6833] do_file_open+0x20e/0x430 [ 1936.483493][ T6833] do_sys_openat2+0x10d/0x1e0 [ 1936.483509][ T6833] __x64_sys_openat+0x12d/0x210 [ 1936.483525][ T6833] do_syscall_64+0x106/0xf80 [ 1936.483541][ T6833] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1936.483554][ T6833] [ 1936.483558][ T6833] The buggy address belongs to the object at ffff888034b42380 [ 1936.483558][ T6833] which belongs to the cache kmalloc-64 of size 64 [ 1936.483571][ T6833] The buggy address is located 0 bytes inside of [ 1936.483571][ T6833] freed 64-byte region [ffff888034b42380, ffff888034b423c0) [ 1936.483585][ T6833] [ 1936.483589][ T6833] The buggy address belongs to the physical page: [ 1936.483596][ T6833] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x34b42 [ 1936.483610][ T6833] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 1936.483623][ T6833] page_type: f5(slab) [ 1936.483637][ T6833] raw: 00fff00000000000 ffff88813fe3c8c0 dead000000000100 dead000000000122 [ 1936.483652][ T6833] raw: 0000000000000000 0000000800200020 00000000f5000000 0000000000000000 [ 1936.483662][ T6833] page dumped because: kasan: bad access detected [ 1936.483670][ T6833] page_owner tracks the page as allocated [ 1936.483676][ T6833] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd2cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 21091185269, free_ts 20994134566 [ 1936.483702][ T6833] post_alloc_hook+0x153/0x170 [ 1936.483720][ T6833] get_page_from_freelist+0x111d/0x3140 [ 1936.483741][ T6833] __alloc_frozen_pages_noprof+0x27c/0x2ba0 [ 1936.483762][ T6833] new_slab+0xa6/0x6d0 [ 1936.483781][ T6833] refill_objects+0x26b/0x400 [ 1936.483798][ T6833] __pcs_replace_empty_main+0x19f/0x600 [ 1936.483818][ T6833] __kmalloc_cache_noprof+0x493/0x6f0 [ 1936.483835][ T6833] add_sysfs_param+0x65b/0x970 [ 1936.483850][ T6833] param_sysfs_builtin_init+0x313/0x3f0 [ 1936.483951][ T6833] do_one_initcall+0x11d/0x760 [ 1936.483966][ T6833] kernel_init_freeable+0x6e5/0x7a0 [ 1936.484008][ T6833] kernel_init+0x1f/0x1e0 [ 1936.484029][ T6833] ret_from_fork+0x754/0xd80 [ 1936.484057][ T6833] ret_from_fork_asm+0x1a/0x30 [ 1936.484072][ T6833] page last free pid 10 tgid 10 stack trace: [ 1936.484081][ T6833] __free_frozen_pages+0x7e1/0x10d0 [ 1936.484098][ T6833] vfree.part.0+0x12b/0x9d0 [ 1936.484113][ T6833] delayed_vfree_work+0x8e/0xd0 [ 1936.484128][ T6833] process_one_work+0x9d7/0x1920 [ 1936.484148][ T6833] worker_thread+0x5da/0xe40 [ 1936.484167][ T6833] kthread+0x370/0x450 [ 1936.484185][ T6833] ret_from_fork+0x754/0xd80 [ 1936.484204][ T6833] ret_from_fork_asm+0x1a/0x30 [ 1936.484219][ T6833] [ 1936.484223][ T6833] Memory state around the buggy address: [ 1936.484231][ T6833] ffff888034b42280: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 1936.484242][ T6833] ffff888034b42300: 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc fc [ 1936.484253][ T6833] >ffff888034b42380: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 1936.484262][ T6833] ^ [ 1936.484270][ T6833] ffff888034b42400: 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc [ 1936.484281][ T6833] ffff888034b42480: 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc [ 1936.484289][ T6833] ================================================================== [ 1936.484327][ T6833] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1936.484341][ T6833] CPU: 0 UID: 0 PID: 6833 Comm: syz.8.7253 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1936.484367][ T6833] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1936.484373][ T6833] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1936.484384][ T6833] Call Trace: [ 1936.484390][ T6833] [ 1936.484397][ T6833] dump_stack_lvl+0x100/0x190 [ 1936.484419][ T6833] vpanic+0x552/0x970 [ 1936.484435][ T6833] ? __pfx_vpanic+0x10/0x10 [ 1936.484451][ T6833] ? mark_held_locks+0x40/0x70 [ 1936.484471][ T6833] ? fbcon_prepare_logo+0x94e/0xc60 [ 1936.484493][ T6833] panic+0xd1/0xe0 [ 1936.484507][ T6833] ? __pfx_panic+0x10/0x10 [ 1936.484526][ T6833] check_panic_on_warn.cold+0x19/0x34 [ 1936.484542][ T6833] end_report.part.0+0x3a/0x90 [ 1936.484564][ T6833] kasan_report.cold+0xe/0x18 [ 1936.484585][ T6833] ? fbcon_prepare_logo+0x94e/0xc60 [ 1936.484610][ T6833] kasan_check_range+0x10f/0x1e0 [ 1936.484629][ T6833] __asan_memcpy+0x23/0x60 [ 1936.484648][ T6833] fbcon_prepare_logo+0x94e/0xc60 [ 1936.484674][ T6833] fbcon_init+0x10a0/0x1820 [ 1936.484699][ T6833] visual_init+0x320/0x620 [ 1936.484723][ T6833] do_bind_con_driver.isra.0+0x636/0x9c0 [ 1936.484743][ T6833] store_bind+0x609/0x730 [ 1936.484761][ T6833] ? __pfx_store_bind+0x10/0x10 [ 1936.484777][ T6833] dev_attr_store+0x58/0x80 [ 1936.484800][ T6833] ? __pfx_dev_attr_store+0x10/0x10 [ 1936.484823][ T6833] sysfs_kf_write+0xf2/0x150 [ 1936.484842][ T6833] kernfs_fop_write_iter+0x3e0/0x5f0 [ 1936.484857][ T6833] ? __pfx_sysfs_kf_write+0x10/0x10 [ 1936.484876][ T6833] iter_file_splice_write+0x830/0x10a0 [ 1936.484896][ T6833] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1936.484912][ T6833] ? __pfx_copy_splice_read+0x10/0x10 [ 1936.484940][ T6833] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1936.484956][ T6833] direct_splice_actor+0x192/0x6c0 [ 1936.484980][ T6833] splice_direct_to_actor+0x345/0xa30 [ 1936.485005][ T6833] ? __pfx_direct_splice_actor+0x10/0x10 [ 1936.485030][ T6833] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1936.485065][ T6833] do_splice_direct+0x174/0x240 [ 1936.485081][ T6833] ? __pfx_do_splice_direct+0x10/0x10 [ 1936.485106][ T6833] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1936.485131][ T6833] ? rw_verify_area+0xce/0x6d0 [ 1936.485153][ T6833] do_sendfile+0xadc/0xe20 [ 1936.485177][ T6833] ? __pfx_do_sendfile+0x10/0x10 [ 1936.485200][ T6833] ? __x64_sys_futex+0x34f/0x4d0 [ 1936.485218][ T6833] ? __x64_sys_futex+0x358/0x4d0 [ 1936.485238][ T6833] __x64_sys_sendfile64+0x1d8/0x220 [ 1936.485255][ T6833] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 1936.485274][ T6833] do_syscall_64+0x106/0xf80 [ 1936.485292][ T6833] ? clear_bhb_loop+0x40/0x90 [ 1936.485310][ T6833] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1936.485326][ T6833] RIP: 0033:0x7f8bb8d9c799 [ 1936.485339][ T6833] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1936.485355][ T6833] RSP: 002b:00007f8bb6ff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1936.485370][ T6833] RAX: ffffffffffffffda RBX: 00007f8bb9016180 RCX: 00007f8bb8d9c799 [ 1936.485382][ T6833] RDX: 0000000000000000 RSI: 000000000000000b RDI: 0000000000000006 [ 1936.485393][ T6833] RBP: 00007f8bb8e32bd9 R08: 0000000000000000 R09: 0000000000000000 [ 1936.485403][ T6833] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 1936.485413][ T6833] R13: 00007f8bb9016218 R14: 00007f8bb9016180 R15: 00007ffcbaf673d8 [ 1936.485429][ T6833] [ 1936.485495][ T6833] Kernel Offset: disabled