last executing test programs: 13m38.471892408s ago: executing program 32 (id=519): r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x2, 0x0) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) sendto$auto(0x3, 0x0, 0x2000f, 0x101, &(0x7f0000000000)=@in={0x2, 0x4e22, @rand_addr=0x64010100}, 0x1c) listen$auto(0x3, 0x81) r1 = accept$auto(0x3, 0x0, 0x0) setsockopt$auto(r1, 0x10000000084, 0x7d, 0x0, 0xd) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) setuid$auto(0xe) ioctl$auto(0x3, 0x400454ca, 0x38) write$auto_seq_oss_f_ops_seq_oss(r0, &(0x7f0000000040)="f6e6812018deadf7e88f819e30236ce79200d01532f2ed0d", 0x18) 12m14.517878313s ago: executing program 2 (id=935): mmap$auto(0x0, 0x101, 0x4000000000df, 0xeb1, 0x200000401, 0x8000) r0 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0) read$auto(r0, 0x0, 0x9a28) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) r2 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)) fchdir$auto(r2) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/power/resume\x00', 0x189002, 0x0) sendfile$auto(r3, r3, 0x0, 0x6) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3) flock$auto(r1, 0xa) syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000040), 0xffffffffffffffff) write$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, 0x0, 0x0) clock_getres$auto(0x8f3, 0x0) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000000000), 0x1e3800, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mprotect$auto(0x200000000000, 0x1f, 0x5) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r4 = socket(0x10, 0x2, 0xc) r5 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$auto_CTRL_CMD_GETPOLICY(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="ed03667ddcd6d026df250a00000a00000200252f00e2a85c41e75a02715b2d0000001000df"], 0x51}, 0x1, 0x0, 0x0, 0x24050803}, 0x10004010) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) r6 = syz_genetlink_get_family_id$auto_802_15_4_mac(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$auto_IEEE802154_LLSEC_LIST_DEVKEY(r4, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f0000000340)={0x1c, r6, 0x2, 0x70bd28, 0x25dfdbfc, {}, [@IEEE802154_ATTR_REASON={0x5, 0x12, 0x40}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24004017}, 0x24) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) creat$auto(&(0x7f0000000000)='./file0\x00', 0x8001) 12m13.63013212s ago: executing program 2 (id=941): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2b, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @remote}, 0x6a) madvise$auto(0x4, 0x7, 0x2) mprotect$auto(0x200000000000, 0x806124, 0x8) syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000000480), r0) mmap$auto(0x6, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8000, 0x0) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x19, &(0x7f0000000000), 0x0) r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/kernel/watchdog_cpumask\x00', 0x141241, 0x0) write$auto(r1, &(0x7f0000000000)='.%{\x00', 0x8000) recvfrom$auto(0x3, 0x0, 0x8000000008, 0x0, 0x0, 0xfffffffffffffffd) setsockopt$auto(0x3, 0x1, 0x21, 0x0, 0x9) write$auto(0x3, 0x0, 0xfffffdef) madvise$auto(0x0, 0xff7fffffffff0001, 0x15) mmap$auto(0x0, 0x5db, 0xdf, 0x9b72, 0x2, 0x8000) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) r2 = socket(0x22, 0x2, 0x24) r3 = getsockopt$auto(r2, 0x3, 0x1, 0x0, 0x0) io_uring_register$auto_IORING_REGISTER_PERSONALITY(r2, 0x9, &(0x7f0000000280)="b68315d9a8d97027844b6cf964a73f8a5e95a4c1bca8577b2e1c31c7da20d53b0552ceac6b5d2fafd15414f2d7a19244cc4079a3b250da32287fe53c4a891eda909f446cc10fd01017aa", 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYBLOB="5e0027b4839f3015398d3b", @ANYRES32, @ANYRES32, @ANYRES64], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'veth0\x00'}) r4 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000000c0), r0) sendmsg$auto_ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="08002abd5000fbdbdf251400000008000500000800001218d3079ffbcfa07744a6858ef506b2fb6204dcb2627e44d963"], 0x1c}, 0x1, 0x0, 0x0, 0x20000800}, 0x2040080) close_range$auto(r0, r3, 0x0) socket(0xa, 0x2, 0x0) r5 = socket(0x18, 0xa, 0x1) sendmsg$auto_ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x44, r4, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@ETHTOOL_A_PAUSE_TX={0x5, 0x4, 0x8}, @ETHTOOL_A_PAUSE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}]}, @ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x2, 0x1}, @ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0x7}]}, 0x44}, 0x1, 0x0, 0x0, 0x48840}, 0x4000044) connect$auto(r5, &(0x7f0000000100)=@nl=@proc={0x10, 0x0, 0x25dfdbfc, 0x2000000}, 0x2e) 12m13.218594958s ago: executing program 2 (id=949): mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) (async) r0 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/smaps_rollup\x00', 0x105002, 0x0) ioctl$auto_FS_IOC_GETFLAGS(r0, 0x80086601, 0x0) (async) timerfd_create$auto(0x9, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000200)={[0x8, 0xffffffffffffff49, 0x5, 0x1823, 0x800000000004, 0x1, 0x5, 0x19, 0x10, 0x5, 0x2dde, 0x8, 0xfffffffffffffffa, 0xab, 0x0, 0x1]}, &(0x7f0000000040)={0x0, 0x7}) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) io_uring_setup$auto(0x7, 0x0) (async) socketpair$auto(0x1e, 0x5, 0x3, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0xa0c0, 0x155) (async) socket(0xa, 0x1, 0x84) (async) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) (async) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x20000000008000) sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x4f64a1d5) (async) socket(0x29, 0x1, 0x0) (async) mmap$auto(0x0, 0x2020009, 0x3, 0x9000000eb1, 0xfffffffffffffffa, 0x8000) r1 = eventfd$auto(0x80) readv$auto(r1, &(0x7f0000000380)={0x0, 0x8}, 0x100) (async) read$auto(r1, 0x0, 0xcc9c) write$auto(r1, &(0x7f0000000040)='\xa5\x99\x94\xf7\x87~\x1c\x00\x00\x00\x86', 0x8) (async) r2 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x901801, 0x0) ioctl$auto_SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000000000)) (async) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) (async) write$auto(0x3, 0x0, 0xffd8) r3 = socket(0x11, 0x3, 0x9) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0xe187) write$auto(r3, &(0x7f0000000100)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\x0f\x97\xa1\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd3lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\xfa\v?\\#\xfc\x15-\xbc\xcd$\x83\xcf\xc5D\xcc', 0xc8) (async) socket(0x1f, 0x1, 0x8) keyctl$auto(0x23, 0x1, 0x6, 0x3, 0x9) 12m13.019135749s ago: executing program 2 (id=951): r0 = signalfd4$auto(0xffffffffffffffff, 0x0, 0x465c, 0x1) (async) close_range$auto(0x0, 0xfffffffffffff000, 0x2) (async) r1 = socket(0x15, 0x2, 0x1) bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_4={0x1f, r1, 0x10000}, 0x10) bpf$auto(0x4, &(0x7f0000000240)=@link_detach={r2}, 0x5) (async) signalfd$auto(r0, 0x0, 0x8) (async) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), r1) (async) openat$auto_proc_page_owner_threshold_(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) socket(0x22, 0x2, 0x1) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000180), 0x129001, 0x0) (async) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x20342, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) (async) socket(0xa, 0x3, 0x3b) capget$auto(0x0, 0xfffffffffffffffe) capset$auto(0x0, &(0x7f0000000000)={0x1, 0x4007, 0xb}) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card1/cable#1\x00', 0x100, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) pipe2$auto(0x0, 0x80) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000040), 0xe0180, 0x0) (async) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) socket(0x15, 0x5, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) pipe2$auto(0x0, 0x0) (async) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/tty26\x00', 0x62902, 0x0) ioctl$auto_TIOCSETD2(r3, 0x5423, 0x0) 12m12.805461161s ago: executing program 2 (id=953): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/security/tomoyo/profile\x00', 0x101400, 0x0) ioctl$auto_XFS_IOC_ATTRMULTI_BY_HANDLE(r1, 0x4048587b, &(0x7f0000000340)={{r1, &(0x7f0000000000)="5963a72e0fb3c20ad7e273ed", 0x4, &(0x7f0000000040)="1e230efc6df6d124e0b31d31637a205eaf4e89e71148de42425d45225fccf8a89e46255b1b8a65838fc4089a4cfc42177df67acf90318c4e95fe5df8f6636e99f1eb872e446a3786da6f8d5169c5e38d34e145b56f4abc27675264a319ab61de6d73f1f16741b284a68a1827c418d447ee3a56b291d8d3", 0x2, &(0x7f0000000140)="d0507ce69fcd1afb0741a14185a8f73dd4675eff4ab883c8f980910ebeb49589d4047d206b", 0x0}, 0x2, &(0x7f0000000300)={0x6, 0x7fff, &(0x7f00000001c0)="6811c59cddb917fd127970567b4ec6412b0a5cd26381a1c6239527f23c4ac289f64d4f509b80d03a20cb83111d41fe80c66a4015eba0c626f9c7a9fb22622f9cf29e1e341a53bdeaea4ae49ae531e23d52e36c89933d9cd7c9ccf76047b9652530dfc5a68a7db7f9bea64d78aeb670f3bc07a6ab937cee7bc141e094b86bd54db005e61ecbff562379ba564982c1a4d0f3267f4b15cdd47338d18855e0142d751da75d19645d116fdec716f5e68daaaa13a9344ce72cb22bdcfb5b3a828bab6c9d7d613eef5c021ba7618b490b6cfd70b23bcd55f71c38d2753854660e319134", &(0x7f0000000100)="3fe90cafe87c27db66de6e568623cc7e1ffffbf70f7a00", 0xce, 0x8}}) open(0x0, 0x261c2, 0x85) socket(0x2, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) r3 = socket(0x8, 0x80000, 0x3f9) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80802, 0x0) socket(0x1d, 0x2, 0x7) setsockopt$auto(0x3, 0x6b, 0x3, 0x0, 0x16e) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda\x00', 0x14f602, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) madvise$auto(0x0, 0x400053, 0x9) socket(0x10, 0x2, 0x0) socket(0x18, 0x1, 0x951) close_range$auto(0x0, 0xffffffffffffffff, 0x2) socket$nl_generic(0x10, 0x3, 0x10) ioctl$auto(0xffffffffffffffff, 0x4, r3) connect$auto(0xffffffffffffffff, &(0x7f0000000000)=@in={0x2, 0x100}, 0x3a) kill$auto(0x80000000, 0x100) socket(0xa, 0x2, 0x73) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r4 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card0\x00', 0x500, 0x0) ioctl$auto(r4, 0x9010642e, 0xffffffffffffffff) write$auto_tomoyo_operations_securityfs_if(r2, &(0x7f00000003c0)="0a1b9a3c3e3e006e163bb154d7886d8ea5c2574c58e9867ecec3371cadb848770dc8f745d1c76eedba12b9f694dabdbcf3401900bb713aca465c9bbc23b5d40a", 0x40) readv$auto(r4, &(0x7f0000000180)={&(0x7f0000000400)="304cb62c1e14fe03ab8a93cff9e2ac9a6bbf4732de10af2cb9dbbf36467fa22085fb0c31364d64e9151a7e4b5c933361298a5589495164a12f8dca49587f4a5a4bf7a098e78c346d7ca3b8a1765d64d8e9de553f1956ef79e0a32f9e02c9a652233a637aacdcf7705064ba96c454b794a9e829a7bb4f84e248c60169e74f", 0x7}, 0x3) syz_genetlink_get_family_id$auto_net_shaper(&(0x7f0000001500), r0) mmap$auto(0x58460432, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) 12m11.861648823s ago: executing program 2 (id=961): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/net/afs/rootcell\x00', 0x1cb842, 0x0) r1 = fcntl$auto_F_WRLCK(r0, 0x2, 0x1) sendmsg$auto_NL80211_CMD_SET_TID_CONFIG(r1, 0x0, 0x0) (async) ioctl$auto_MON_IOCG_STATS(r1, 0x80089203, &(0x7f0000000240)={0x3, 0x8f}) (async, rerun: 64) r2 = io_uring_setup$auto(0x6, 0x0) (async, rerun: 64) r3 = io_uring_setup$auto(0x40, &(0x7f00000001c0)={0x1200, 0x8, 0x10000, 0x40, 0x5b77b906, 0x0, 0xffffffffffffffff, [0xcfa, 0xe5d, 0x5], {0x2, 0x38, 0x9, 0x4, 0x4, 0x3, 0x3ff, 0x3, 0xffff}, {0x20000000, 0x9, 0x7, 0x2, 0x2, 0xffff13a7, 0x0, 0x449e, 0x3}}) close_range$auto(r3, r1, 0x0) (async) madvise$auto(0x100, 0x5, 0x400) r4 = gettid() get_robust_list$auto(r4, &(0x7f0000000340)=&(0x7f0000000300)={{}, 0x2, &(0x7f00000002c0)={&(0x7f0000000280)}}, &(0x7f0000000380)=0x8) (async) r5 = socket(0x11, 0x80003, 0x300) setsockopt$auto(r5, 0x107, 0xf, 0x0, 0x6) r6 = socketcall$auto_SYS_ACCEPT(0x5, &(0x7f0000000080)=0x2) getsockopt$auto_SO_NOFCS(r6, 0x6, 0x2b, &(0x7f00000000c0)=',\x00', &(0x7f0000000180)) (async) poll$auto(&(0x7f0000000040)={r2, 0x5, 0x7}, 0x80, 0x5) (async, rerun: 32) capset$auto(0x0, &(0x7f0000000000)={0x2, 0xc, 0x5a}) (rerun: 32) r7 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/adsp1\x00', 0x20342, 0x0) write$auto(r7, &(0x7f0000000100)='/dev/audio1\x00\xf6\x89\t\xb6t\xae\x12Q\x15E O\xd8\x8d/\xd9\x13\v_\xbcTd\xe0DS\xef?f\xf1ou\xa4W&^\x80\xb2}\x96K\x16*\xa0\x10[8\xa3\x86\x9a3\xc1\xf7\x89x; 4\x8d,U\xa2\xd8\xd5\xfd\xf8\xd8\xb0\xe0W\xad\xe7\x05l*\xc5Z\x8d\xc88}n\x81\tK\x00\x12\xae\xff\xe5\xf1\xb5w\x81$\xd4\xca\xbe&\x195\xc1\xda>\x8c\x89P\xa1\xdb\xb4g9E\xc8\x92\xf6m\x1c\x9b\xebAzeI\xcb\x16f\xc0@\x978x\xbe\x15\'\xc6d}\xc2\xd3\x9f\xc5F8\x15f\x90\xa2\x84', 0x6051) (async, rerun: 32) sendmmsg$auto(r5, &(0x7f0000000140)={{&(0x7f0000000000), 0x205ac, &(0x7f0000000100)={&(0x7f0000000200), 0xe}, 0x5, 0x0, 0x5, 0x4}, 0x20000005}, 0x5, 0xcae) (rerun: 32) 11m56.661423688s ago: executing program 33 (id=961): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/net/afs/rootcell\x00', 0x1cb842, 0x0) r1 = fcntl$auto_F_WRLCK(r0, 0x2, 0x1) sendmsg$auto_NL80211_CMD_SET_TID_CONFIG(r1, 0x0, 0x0) (async) ioctl$auto_MON_IOCG_STATS(r1, 0x80089203, &(0x7f0000000240)={0x3, 0x8f}) (async, rerun: 64) r2 = io_uring_setup$auto(0x6, 0x0) (async, rerun: 64) r3 = io_uring_setup$auto(0x40, &(0x7f00000001c0)={0x1200, 0x8, 0x10000, 0x40, 0x5b77b906, 0x0, 0xffffffffffffffff, [0xcfa, 0xe5d, 0x5], {0x2, 0x38, 0x9, 0x4, 0x4, 0x3, 0x3ff, 0x3, 0xffff}, {0x20000000, 0x9, 0x7, 0x2, 0x2, 0xffff13a7, 0x0, 0x449e, 0x3}}) close_range$auto(r3, r1, 0x0) (async) madvise$auto(0x100, 0x5, 0x400) r4 = gettid() get_robust_list$auto(r4, &(0x7f0000000340)=&(0x7f0000000300)={{}, 0x2, &(0x7f00000002c0)={&(0x7f0000000280)}}, &(0x7f0000000380)=0x8) (async) r5 = socket(0x11, 0x80003, 0x300) setsockopt$auto(r5, 0x107, 0xf, 0x0, 0x6) r6 = socketcall$auto_SYS_ACCEPT(0x5, &(0x7f0000000080)=0x2) getsockopt$auto_SO_NOFCS(r6, 0x6, 0x2b, &(0x7f00000000c0)=',\x00', &(0x7f0000000180)) (async) poll$auto(&(0x7f0000000040)={r2, 0x5, 0x7}, 0x80, 0x5) (async, rerun: 32) capset$auto(0x0, &(0x7f0000000000)={0x2, 0xc, 0x5a}) (rerun: 32) r7 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/adsp1\x00', 0x20342, 0x0) write$auto(r7, &(0x7f0000000100)='/dev/audio1\x00\xf6\x89\t\xb6t\xae\x12Q\x15E O\xd8\x8d/\xd9\x13\v_\xbcTd\xe0DS\xef?f\xf1ou\xa4W&^\x80\xb2}\x96K\x16*\xa0\x10[8\xa3\x86\x9a3\xc1\xf7\x89x; 4\x8d,U\xa2\xd8\xd5\xfd\xf8\xd8\xb0\xe0W\xad\xe7\x05l*\xc5Z\x8d\xc88}n\x81\tK\x00\x12\xae\xff\xe5\xf1\xb5w\x81$\xd4\xca\xbe&\x195\xc1\xda>\x8c\x89P\xa1\xdb\xb4g9E\xc8\x92\xf6m\x1c\x9b\xebAzeI\xcb\x16f\xc0@\x978x\xbe\x15\'\xc6d}\xc2\xd3\x9f\xc5F8\x15f\x90\xa2\x84', 0x6051) (async, rerun: 32) sendmmsg$auto(r5, &(0x7f0000000140)={{&(0x7f0000000000), 0x205ac, &(0x7f0000000100)={&(0x7f0000000200), 0xe}, 0x5, 0x0, 0x5, 0x4}, 0x20000005}, 0x5, 0xcae) (rerun: 32) 10m56.493669388s ago: executing program 4 (id=1346): r0 = prctl$auto_PR_TIMER_CREATE_RESTORE_IDS_ON(0x1, 0x1, 0x0, 0x5, 0x8) (async) r1 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_NL802154_CMD_GET_SEC_DEVKEY(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@NL802154_ATTR_MAX_ASSOCIATIONS={0x8, 0x27, 0x3}]}, 0x1c}}, 0x10) (async) r2 = signalfd$auto(r0, &(0x7f0000000140)={0xd4}, 0x1800000000) close_range$auto(r0, r2, 0x61c3) (async) syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000180), r2) (async) r3 = clone3$auto(&(0x7f00000001c0)={0x9, 0x0, 0x4e5, 0xf5, 0x8, 0x2f, 0x7, 0x3, 0x7, 0xfd, 0x3}, 0x12000) (async) ioctl$auto(r0, 0x200, r2) shmctl$auto_SHM_STAT(0xe, 0xd, &(0x7f00000002c0)={{0x2d, 0xee00, 0xffffffffffffffff, 0x9, 0x7, 0x6, 0x6}, 0x1, 0x9, 0x5, 0x6a6, @raw=0x27a6, @inferred=r3, 0x0, 0x0, &(0x7f0000000240)="f6056d15bd4071c67688555d04c1428b89ae8b73d4631b7f02faecac5dccb81c475da888cc969173d5395b5765748c23c2a438f2643c749d", &(0x7f0000000280)="94c8ffd8d73b722d24efd43cf9ab9044e9ea9611bc6cd4b32fc8fea454a17347b26cab3ea34b1a025f19a5ed6fbd5ab6bb25a8f791eed90cbc66e3"}) shmctl$auto_IPC_RMID(0x6, 0x0, &(0x7f0000000480)={{0x5, 0xee01, 0xee00, 0xfffffffc, 0x184a67cf, 0x7, 0x9609}, 0x1, 0x94, 0x1f, 0x0, @raw=0x3, @raw=0x1, 0xb6, 0x0, &(0x7f0000000340)="04f3d1eca759766414e2fd0b5c289bbbce59bc5bd7d951d4b48a720bec53458b961e2becd72f3777934a9aa2413048b9ccd1dc0aa229435d6bd481120de0434df6a61ae93c413f9f09ba6038ca8b721e2515e8755c29a79e999377e76e08dd4fc3584392f073e86a8d0581c35d96d9535c5486e9150ed5e9695fc8dd001f60a6a4f4059c68d40a7f59f92a4ed9deb8fd9f8cd9ff42129a36fa46d9ebceec", &(0x7f0000000400)="8a87d14ffe1030529d804b2cd8c1244a425ef32e7397e0671ba20c93936a5da35d6cc455a91733630e6562f32a2adc21c6b0d23d8ba796d2c451c36328a2c5bea42b3faaf079e71e41"}) msgctl$auto_IPC_SET(0xf, 0x1, &(0x7f0000000580)={{0xe5a503ab, 0xee01, 0xee00, 0xda, 0xa1fc, 0x3, 0x3}, &(0x7f0000000500)=0xc, &(0x7f0000000540)=0x7f, 0xf9ac, 0xbb, 0xffffffffffffffff, 0xffffffffffffffff, 0x5, 0x9, 0x200, 0x9, @inferred=r3, @inferred=r3}) keyctl$auto(0x1, r4, r5, r8, 0x6) (async) sendmsg$auto_NCSI_CMD_PKG_INFO(r2, &(0x7f0000000d80)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000640)={0x6dc, 0x0, 0x202, 0x70bd2d, 0x25dfdbff, {}, [@NCSI_ATTR_PACKAGE_ID={0x8, 0x3, 0x7378c2df}, @NCSI_ATTR_DATA={0x6b6, 0x5, "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"}, @NCSI_ATTR_CHANNEL_MASK={0x8, 0x8, 0x9}]}, 0x6dc}, 0x1, 0x0, 0x0, 0x1}, 0x0) (async) shmctl$auto_SHM_LOCK(0xffff, 0xb, &(0x7f0000000ec0)={{0x4f9, r5, r8, 0x8, 0x5, 0xfffffffb, 0x5}, 0xe, 0x6, 0x0, 0x3, @raw=0x2, @inferred=r9, 0x7f, 0x0, &(0x7f0000000dc0)="b64be661f55998739114c3e982b69217c0a48d1e74c55f3cc6d829eb2cac1dec6b3afc3150909a8d6c8e19dd9e0c3d84f3468fe18d8c8b52f74f1ea6fcd3d801babc65bfa1502b34b7cd1498591a7124b1ee6b64792e29e372afe14be29fc9a66d337091e395c7991e830951c7c8", &(0x7f0000000e40)="7df88a1dce89c6977f3cb9e49ba2679154ce81572310225ad9358099f6ba4a6825b78efca310570e85dae2388022a5b12a2d89a59dae0c44bfa5b3a84ab59fe323c78038a457abd9c33e8398a3fa7d4054e87ebd662ec350c05b6a39fc256c8f58"}) (async) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000f40)='/proc/thread-self/pagemap\x00', 0x88c02, 0x0) (async) r11 = eventfd2$auto(0x5, 0x8) ioctl$auto_SNDRV_CTL_IOCTL_TLV_READ(r11, 0xc008551a, &(0x7f0000000f80)={0x63, 0x2, [0x9, 0x3, 0x9, 0x9, 0x8, 0x4]}) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000fc0)='/sys/devices/virtual/mac80211_hwsim/hwsim5/uevent\x00', 0x101000, 0x0) adjtimex$auto(&(0x7f0000001000)={0xe, 0x0, 0x9, 0xfcb5, 0x10001, 0x8, 0x4, 0x0, 0x100000001, 0x7, 0x7e, {0x0, 0x2}, 0x2, 0xf9da, 0x5, 0x592534ac, 0x0, 0x9, 0x7, 0x5, 0xffffffffffffffff, 0x1, 0xfff}) (async) r12 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000001100)='/dev/loop0\x00', 0x202182, 0x0) ioctl$auto_BLKRRPART(r12, 0x125f, 0x0) rt_sigprocmask$auto(0x400, &(0x7f0000001140)={0x8253}, &(0x7f0000001180)={0x7}, 0x8) (async) setresgid$auto(r6, r8, r8) (async) r13 = openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f00000011c0)='/sys/kernel/config/target/dbroot\x00', 0x6c040, 0x0) write$auto_configfs_file_operations_configfs_internal(r13, &(0x7f0000001200)="8cb84d9548a1474396ce82d77318df6e472767ed52", 0x15) (async) r14 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000001280), r0) r15 = openat$auto_tracing_mark_fops_trace(0xffffffffffffff9c, &(0x7f00000012c0)='/sys/kernel/debug/tracing/trace_marker\x00', 0x4a000, 0x0) sendmsg$auto_NL80211_CMD_NEW_STATION(r0, &(0x7f00000014c0)={&(0x7f0000001240), 0xc, &(0x7f0000001480)={&(0x7f0000001300)={0x148, r14, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@NL80211_ATTR_VHT_CAPABILITY_MASK={0x10, 0xb0, "e768da8ad403093163d735c8"}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xfa}, @NL80211_ATTR_SPLIT_WIPHY_DUMP={0x4}, @NL80211_ATTR_WIPHY_SELF_MANAGED_REG={0x4}, @NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0x9}, @NL80211_ATTR_WOWLAN_TRIGGERS={0xe0, 0x75, 0x0, 0x1, [@nested={0xc, 0xc, 0x0, 0x1, [@typed={0x8, 0x8d, 0x0, 0x0, @fd=r15}]}, @generic="b570b6dafb63237d267899538d427b17178d7e1bd58cbc6234133c3e3cbc819cfd2ba6e7a10abf14a709e57f60ebea567aa7cac7b8dcb7da625258a4e673a0e7fa3fb3ba3239e94f20842c251458d641f08ee288292e4a985dfbd6adff097fe262bae2115e2964183b3942271d9e444cbd982ec466054ab86680cd4bf90df951b42a376eb8cd7ffdb76cb515daa170ea2bbff76303133da28487e51a953b357c24f0081b20c68710369e966dffc9b85b6f4a081be0725d94456080216fd6ab66be0f0cb05c4c7b4635dcc35c187426fc"]}, @NL80211_ATTR_HE_BSS_COLOR={0x2c, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x39}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x7f}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x5}]}]}, 0x148}, 0x1, 0x0, 0x0, 0x10}, 0x10) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000001500), r0) (async) shmctl$auto_SHM_LOCK(0x5, 0xb, &(0x7f0000001680)={{0x23, r7, r10, 0x8, 0x3, 0x6, 0x1}, 0x401, 0x7e, 0x3, 0x5, @raw=0x100, @inferred, 0x1, 0x0, &(0x7f0000001540)="2402aa2242b72ec28e793a762b1d10ccae4c07e7decc05666c1d0195740873c533e487eebf32737b23f0427864bb542fa74e7e57dd453f5c15d002ed099f55ee6dda72d8", &(0x7f00000015c0)="4f3019afd200313121ea83a85f26c6fcd44253cdbe9adbca69e678361336f4c93a95121eb3b0fe5d75bf8b6ea16678528903ba27a39dfa591656fbbd91cfa8ed4a9e2f8f2e334999dc6051c3e8d9f0e4bd639f842d1a28bc0a69736f478612572e80a1ac5aab7d1fcfbe4e9ed71181b31368478ec859431f053b4c50f22c054bd31541bfb6c66022f3cafba0c53502165bf0b8d85c3c6c448834d7a1a3f344327c88b341f1a4"}) 10m56.24756334s ago: executing program 4 (id=1348): unshare$auto(0x40000080) setresuid$auto(0xffffffffffffffff, 0x0, 0x0) msgctl$auto_MSG_STAT_ANY(0x0, 0xd, &(0x7f0000000280)={{0x5, 0xffffffffffffffff, 0x0, 0x5b, 0x100, 0x6d13, 0x14fc}, &(0x7f0000000200)=0x40, &(0x7f0000000240)=0x2, 0x5, 0x22, 0x401, 0x27, 0x5, 0xe, 0x4, 0xb4cb, @inferred=0xffffffffffffffff, @inferred=0xffffffffffffffff}) io_uring_setup$auto(0x8, &(0x7f0000000140)={0x0, 0x1, 0x9, 0x210001, 0xc, 0xc05, 0xffffffffffffffff, [0x7fd, 0x1001, 0x3], {0x9, 0x3, 0x6, 0x0, 0x4, 0x895, 0x3fdc, 0x6, 0x5}, {0x2, 0x1d11, 0x54ed, 0x0, 0x101, 0xff, 0x7, 0xa, 0xb}}) sendmsg$auto_NL802154_CMD_SET_CHANNEL(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x20008801) msgctl$auto_IPC_STAT(0x9, 0x2, &(0x7f0000000600)={{0xe91f, 0xee01, 0xffffffffffffffff, 0x40000005, 0x0, 0x7, 0x3}, &(0x7f0000000000)=0x10, &(0x7f0000000040)=0x6, 0x401, 0xdfdf, 0x2f, 0x8, 0xd1, 0xca8, 0x8, 0x7, @raw=0x10, @inferred=0xffffffffffffffff}) r3 = getegid() setfsgid$auto(0xee00) ioctl$auto_XFS_IOC_SWAPEXT(r1, 0xc0c0586d, &(0x7f0000000680)={0xc01, @raw, @raw=0x4, 0x3, 0xfffffffffffffff7, '\x00', {0x40, 0x6, 0x8, r2, r3, 0x7, 0x8, 0xc0, {0x400, 0x6}, {0xc, 0xc}, {0x8, 0x570}, 0xffe, 0x3, 0x4, 0x9, 0x8, 0x0, 0x2bbe, 0x7, 0xffff, 0xe, '\x00', 0x1, 0x9, 0x0, 0x8}}) lstat$auto(&(0x7f0000000000)='./file0\x00', &(0x7f0000000300)={0x100000000, 0x4, 0x7c, 0x6, r0, r3, 0x0, 0x8000000000000000, 0x6, 0x8b03, 0x4, 0x4, 0x7, 0x9, 0xb061, 0x2, 0x7fffffff}) open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x40) execve$auto(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mount$auto(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)='nfsd\x00\xee\x1a\x8f\xa2~?\xe2\x82fg\xb3G\xbe\xc8\x12\xae\xc3\xc0@[\x99\xec\xbf(\xec\xc3\xb2\xf2\x15Zi\xc4S6\'\x14\x05\t\x8c\xd5?\xa0\x00\xd8\xe4\xafW\xcc\xa3\xce\tI\x95\xe12\xaclJ\xba\xeb\xe4\x83Z\xaev\xd7\xd9\xdd_\x14O\x84\xaa\x13W\xb7\x06\'fvQ\x95\xc5\xd1\x98\xe3T\xcdfk\xc7\xe9\x96\r\x91\xb0\xc46\xf2\xfc\xef\xfe\xa0\xc9d\xb3h$\xeb\xad\xa4P\x8f\xc3bM{4RQ\x00\x9d)_\xd81(\x03\xfd\rw\xca1\x88|\xe5\x1e\x10\x89X\x01\xe9\xf6g\x95xx\xaf\xa9~m\x05\xe1\xa8\xda\x80\xc5\x8f\xb41\x81\xf0\xa3\xa2\xe4\x81\xb9\x92\xda\x13\xfe5\xfb\xc6\xd8>\x01\xd4\x14', 0x7, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) select$auto(0x7, 0x0, 0x0, &(0x7f0000000200)={[0xfffffffffffffff9, 0x10, 0x4, 0x7fff, 0x5, 0x9, 0x6000000000, 0xffffffff, 0xfffffffffffff300, 0x80000000, 0x5, 0x8000000000000000, 0x3, 0xac, 0x7ff, 0x6]}, 0x0) r4 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000000240), 0x343441, 0x0) getsockopt$auto_SO_KEEPALIVE(r4, 0x5, 0x9, &(0x7f0000000180)='DU)s\x92/}\xd1\\\x18\x81\xdfu\xf1\xef\x88\x94\x8a$\xd8\xa6\"\xfe\f\xc3\x05h\x94A\b\x14\xda&%C\x05\xc8rIg\xf5l3\xadj\xc3_v\xdd~?\xe3\x94\xd9\xb4!\xfdmJ\x1e\x98\x13\xb2\xfd\x9f\xa7\f\x04P\xda\xa2}\x0f!\\\'61\xda\xcfH\x93Qw\xae\\8t\r\xa0\x9a\xc8\xa5{\xee\xe7\x02\xd6o#\xf3\x96\xad\xf1\x04\xe1\x19\x8f\xa24\xbe-z\xbd\xc6', 0x0) userfaultfd$auto(0x1) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video1\x00', 0xc0400, 0x0) r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r6 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r6) ioctl$auto_KVM_GET_MSRS(r5, 0x4138ae84, &(0x7f0000000140)={0x7}) socket(0x15, 0x5, 0x0) setsockopt$auto(0x3, 0x114, 0x6, 0x0, 0xa0) mount$auto(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000180)='nfsd\x00', 0x8, 0x0) ioctl$auto_SNDCTL_DSP_GETBLKSIZE(0xffffffffffffffff, 0xc0045004, &(0x7f0000000000)) 10m55.768440094s ago: executing program 4 (id=1353): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) listen$auto(0x3, 0x81) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$auto_nfsd(0x0, 0xffffffffffffffff) r2 = openat$auto_proc_uid_map_operations_base(0xffffffffffffff9c, &(0x7f00000013c0)='/proc/self/uid_map\x00', 0x8006, 0x0) r3 = socket(0xa, 0x2, 0x3a) r4 = syz_genetlink_get_family_id$auto_ncsi(&(0x7f0000000080), r3) sendmsg$auto_NCSI_CMD_PKG_INFO(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="18000000", @ANYRES16=r4, @ANYBLOB="00fedbcf254b90246b1a2f877f8bdd479c01"], 0x18}}, 0x10) write$auto_proc_uid_map_operations_base(r2, 0x0, 0x0) madvise$auto(0x8000000000000000, 0x200007, 0x17) r5 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/thread-self/pagemap\x00', 0x404001, 0x0) mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) r6 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="530026bd703f029a5f326402360008000300", @ANYRES32=r8], 0x28}, 0x1, 0x0, 0x0, 0x4004080}, 0x0) r9 = openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) pread64$auto(r9, 0x0, 0x5, 0x8000400) r10 = setfsuid$auto(0xee01) setresuid$auto(0x0, r10, 0x0) fstat$auto(r2, &(0x7f0000000340)={0x4, 0x2, 0x9, 0x200, 0xffffffffffffffff, 0x0, 0x0, 0x64, 0x167, 0x8001, 0x4000000000000000, 0x273a7404, 0xfff, 0x26, 0x2, 0x0, 0x9}) sendmsg$auto_NL80211_CMD_PROBE_MESH_LINK(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000280)={&(0x7f0000002940)=ANY=[@ANYBLOB="3c150000", @ANYRES16=r6, @ANYBLOB="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", @ANYRES32=r5, @ANYBLOB='\x00\x00\x00\b\x00&\x00', @ANYRES32=r9, @ANYBLOB="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", @ANYRES32=r10, @ANYBLOB="04008a8004002c8008003f00ffffffff08005000", @ANYRES32=r11, @ANYBLOB="c9001c800accf1dd5f00f344298a62dda2da19f462eecb2dfbf121aa871b31121785d0be1d41e1bea24dd24136ceb767ab5e1075702928754d3058523cb60e2d936f7a139599762ec259b364361251b707c50df8f264ad6aafa1f98ee1346dfa73ae7255478f197f530800ff00", @ANYRES32=r5, @ANYBLOB="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"], 0x153c}, 0x1, 0x0, 0x0, 0x20000044}, 0x240008c0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0xb74, 0x66a) 10m53.84572119s ago: executing program 4 (id=1365): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x13ff, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x200000000008000) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) chroot$auto(&(0x7f0000000080)='}[,&*}\x00') mount$auto(0x0, &(0x7f0000000040)='}[,&*}\x00\x0e\x15F\xf7\x1a\xd1K+\xedy\xc6\x9bb\x94\xb4^\xc2\x83%\xfbw}\xfb_P\"\x19\xdfi\xe9hA|Q\x8a_F\x04:Q\x90\'\x06', &(0x7f0000000140)='nfsd\x00', 0x10000, 0x0) chdir$auto(&(0x7f0000000000)='}[,&*}\x00') getcwd$auto(0x0, 0xffffffffffffffff) syz_clone3(&(0x7f0000000100)={0x2000000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) mmap$auto(0x0, 0x100000000, 0x100000000000000a, 0xeb1, 0x0, 0x1008000) futex_waitv$auto(&(0x7f0000000000)={0x0, 0x7e4, 0x2}, 0x1, 0x0, 0x0, 0x623d) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2a, 0x80000, 0x0) inotify_init1$auto(0x3000000000000) inotify_add_watch$auto(0x4, 0x0, 0xe6e) mknod$auto(&(0x7f0000000040)='./file0\x00', 0x1001, 0x9) open(&(0x7f0000000000)='./file0\x00', 0x101800, 0x181) pipe2$auto(0x0, 0x0) openat$auto_tracing_entries_fops_trace(0xffffffffffffff9c, 0x0, 0x121940, 0x0) r0 = fanotify_init$auto(0x5, 0x0) creat$auto(&(0x7f0000000000)='./file0\x00', 0x3ff) fanotify_mark$auto(r0, 0x205, 0xa, 0x4, 0x0) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) open(0x0, 0xcd1e23e41b02d660, 0x154) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtdblock0\x00', 0x40, 0x0) sendmsg$auto_KSMBD_EVENT_LOGOUT_REQUEST(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0x200, 0x70bd29, 0x25dfdc01, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8d2d545fb1e31bac}, 0x20000054) ioctl$auto_HDIO_GETGEO(r1, 0x301, &(0x7f0000000040)) 10m53.423574936s ago: executing program 4 (id=1369): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) socket(0x2c, 0x1, 0x0) r1 = openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000040), 0x180b03, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/power/resume\x00', 0x189002, 0x0) sendfile$auto(r2, r2, 0x0, 0x3) ioctl$auto_SNAPSHOT_PREF_IMAGE_SIZE(r1, 0x3312, 0x0) listen$auto(0x3, 0x81) r3 = socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000140), 0x8f00, 0x0) ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) mremap$auto(0xfffff000, 0x4, 0x4, 0x7, 0x1001ff000) r5 = fsopen$auto(0x0, 0x1) r6 = prctl$auto(0x1000000003b, 0x1, 0x4, 0xd73, 0x7) bind$auto(r3, &(0x7f0000000180)=@hci={0x1f, 0x4, 0x1}, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) shutdown$auto(0x200000003, 0x2) recvfrom$auto(0x4, 0x0, 0x101d0, 0x3ffffd, 0x0, 0x0) madvise$auto(0x0, 0x2003f2, 0x15) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(r6, 0xffffffffffffffff, 0x3) socket(0x80000000000000a, 0x2, 0x0) socket(0x2d, 0x2, 0x0) ioctl$auto(0x3, 0x89e0, 0x91) ioctl$auto(0x3, 0x89e1, 0x91) ioctl$auto_BTRFS_IOC_GET_SUPPORTED_FEATURES(r5, 0x80489439, &(0x7f0000000040)=[{0x5, 0xc, 0x800}, {0x6, 0x1, 0xf9fe}, {0x8, 0x8, 0xc39}]) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) 10m52.608541579s ago: executing program 4 (id=1371): sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = io_uring_setup$auto(0x6, 0x0) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) ioctl$auto_I2C_SLAVE(r0, 0x703, &(0x7f0000000300)="6c764affc72318133c8c46403a4591e11e04b0c69ec5e25f5b47b8500d85fc724ef9c0a1cb66810a31b5a153d683122e6ec998d7c5df9e922f59607278f00f3216fa2c01bf396333aced050462fe1663585d13ce30f75d16dcafc613b05c3a99f188fe6737c037c1eaec5ed3e50fa2377f2523aa25c23abbee4f485500250ec9d44ac02793a61cf3df21af8e1f2b5af625165597ba890bdefe94421a4252fa8388986844b4") poll$auto(&(0x7f0000000180)={0xffffffffffffffff, 0xfff7, 0x9816}, 0x7f, 0x9) openat$auto_ftrace_system_enable_fops_trace_events(0xffffffffffffff9c, 0x0, 0xa0900, 0x0) unshare$auto(0x40000080) setsockopt$auto(0x3, 0x10000000084, 0x7b, 0x0, 0xd) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x4, &(0x7f00000002c0)={0x0, 0xffeb}, 0x1, 0x0, 0x5, 0x7}, 0x8}, 0xffffffff, 0xb00) 10m52.105472299s ago: executing program 34 (id=1371): sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = io_uring_setup$auto(0x6, 0x0) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) ioctl$auto_I2C_SLAVE(r0, 0x703, &(0x7f0000000300)="6c764affc72318133c8c46403a4591e11e04b0c69ec5e25f5b47b8500d85fc724ef9c0a1cb66810a31b5a153d683122e6ec998d7c5df9e922f59607278f00f3216fa2c01bf396333aced050462fe1663585d13ce30f75d16dcafc613b05c3a99f188fe6737c037c1eaec5ed3e50fa2377f2523aa25c23abbee4f485500250ec9d44ac02793a61cf3df21af8e1f2b5af625165597ba890bdefe94421a4252fa8388986844b4") poll$auto(&(0x7f0000000180)={0xffffffffffffffff, 0xfff7, 0x9816}, 0x7f, 0x9) openat$auto_ftrace_system_enable_fops_trace_events(0xffffffffffffff9c, 0x0, 0xa0900, 0x0) unshare$auto(0x40000080) setsockopt$auto(0x3, 0x10000000084, 0x7b, 0x0, 0xd) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x4, &(0x7f00000002c0)={0x0, 0xffeb}, 0x1, 0x0, 0x5, 0x7}, 0x8}, 0xffffffff, 0xb00) 8m20.947333261s ago: executing program 6 (id=2134): unshare$auto(0x40000080) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) setresuid$auto(0x0, 0x0, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x100000a3d9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x0, 0x5, 0xffffffffffff8001) madvise$auto(0x0, 0xffffffffffff0005, 0x19) openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, 0x0, 0x80, 0x0) madvise$auto(0x0, 0x8000000000000000, 0x15) mmap$auto(0x0, 0xc8, 0x3, 0xeb4, 0x8, 0x8000) unshare$auto(0x40000080) setregid$auto(0x81, 0x0) r0 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$auto_VHOST_SET_OWNER(r0, 0xaf01, 0x5) mmap$auto(0x6, 0x4, 0x4000000000dd, 0x40eb1, 0xffffffffffffffff, 0x300000000000) mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/037/001\x00', 0x802, 0x0) ioctl$auto_USBDEVFS_CONTROL(r1, 0xc0185500, 0x0) mmap$auto(0x0, 0x2020409, 0xa, 0xeb1, 0xffffffffffffffff, 0x8000) r2 = socket(0x22, 0x2, 0x2) ioctl$sock_SIOCGIFINDEX(r2, 0x80044944, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x17) socket$nl_generic(0x10, 0x3, 0x10) unshare$auto(0x40000080) r3 = openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) close_range$auto(r3, 0x8, 0x0) clone$auto(0x3fff, 0xad3, 0x0, 0x0, 0x8000002) mmap$auto(0xfffffffffffffffb, 0x400008, 0x400df, 0x19, r3, 0x2a7d) close_range$auto(0x2, 0x8, 0x0) 8m15.908878521s ago: executing program 6 (id=2145): unshare$auto(0x40000080) mmap$auto(0x3dbcb68f, 0x7ff, 0xffb, 0x8000000008011, 0x3, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = prctl$auto(0x1, 0x4, 0x0, 0x402, 0x10000dd16) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xa142, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000380)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:07/wakeup/wakeup6/uevent\x00', 0xb0862, 0x0) write$auto(r1, &(0x7f00000001c0)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x82802, 0x0) r2 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/snd/controlC1\x00', 0x802, 0x0) ioctl$auto_USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f00000000c0)=0x1) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r2, 0xc1105517, &(0x7f0000000140)={{@inferred, 0x0, 0x4, 0x8, "3112d585005a614d19e22af9ffb683dbede3d0bf828bbfba40f035f4be6b7fe5e2f94bd90484b0755015e48d"}, 0x3, 0x5, 0x4, @inferred, @enumerated={0x3, 0x800, "c832bcbae48ab01ec23457b7fd2dd3547c4e2eeba79edd0d1599ded9cbfaf517162fbe6a6f50f1aaa18fb20cabb4f176263bb0e781e3d0a2f992e8fcdcec86d9", 0x400, 0xc278}, "7a9fc199a16a2311eacf2fc7ae1da978dc3e8090334fdd73340238d212b6debe0ada55bdd70925450e24e87212f0bcab84a16f7ce8cbce0bb32777702b8d7c2d"}) r3 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/cec10\x00', 0x101901, 0x0) ioctl$auto_CEC_ADAP_S_LOG_ADDRS(r3, 0xc05c6104, &(0x7f0000000100)={'\x00', 0x0, 0x6, 0x2, 0x9b3, 0x9, "0200000002000000997e763f222ce1", '\x00', "0001410c", '\x00', ["f5404de9641f0000000060c1", "70d9a9a3af9f39d000000001", "ef5ac4927ad89c5c00"]}) ioctl$auto_CEC_TRANSMIT(r3, 0xc0386105, &(0x7f0000000000)={0x6, 0x3, 0x7, 0x2, 0x2, 0x7fffffff, "9b2189084142725dff0d933475a77466", 0xb, 0x5, 0x9, 0x5, 0x2, 0x4, 0x2}) madvise$auto(0x0, 0xffffffffffff0005, 0x17) prctl$auto(0x29, 0x17000000, 0x0, 0x0, 0x3) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r4 = socket(0x2b, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@nfc={0x27, 0x0, 0x0, 0x3}, 0x6a) sendmmsg$auto(r4, &(0x7f0000000000)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x9, 0xfffffffd}, 0x1}, 0x5, 0x20000000) setsockopt$auto(0x3, 0x6, 0x17, 0x0, 0xd) migrate_pages$auto(0x0, 0xa, 0x0, 0x0) r5 = socket(0xa, 0x3, 0x3a) r6 = wait4$auto(0x0, &(0x7f0000000080)=0xb8e00000, 0x1, &(0x7f0000000700)={{0x100, 0x800}, {0x4ddbdf6d, 0x4}, 0x961f, 0x100000000000b0f7, 0x4040, 0x8, 0x100000ffff, 0x9, 0x400000000005, 0x240000000000000, 0x8000000000000001, 0x1000000000000004, 0x9, 0x0, 0xffffffffffffffff, 0x6}) shmctl$auto(0x80, 0x8001, &(0x7f0000000880)={{0x54, 0x0, 0x0, 0x4, 0x4, 0x1, 0x101}, 0x9, 0x9, 0xd0, 0x7, @inferred=r6, @raw=0x7, 0x3, 0x0, &(0x7f00000007c0), 0x0}) clock_getres$auto(0xfffffffd, 0x0) getsockopt$auto(r5, 0x29, 0x38, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x3, 0xbf) 8m14.09587614s ago: executing program 6 (id=2154): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/power/resume\x00', 0x189002, 0x0) mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) fanotify_init$auto(0x200, 0x1) r0 = open(&(0x7f00000000c0)='}[,&*}\x00', 0x12ba7c, 0x5) fanotify_mark$auto(0x0, 0x55, 0x9, r0, 0x0) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) chdir$auto(&(0x7f0000000040)='}[,&*}\x00') getcwd$auto(0x0, 0xffffffffffffffff) unlinkat$auto(0xffffffffffffffff, 0x0, 0x200) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x511000, 0x0) mmap$auto(0x4, 0x20409, 0x7fffffff, 0xeb1, r1, 0x7ffe) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x2000d, 0x3, 0x800eb1, 0x404, 0x100010008000) unshare$auto(0x40000080) close_range$auto(0x2, 0x8, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0xffffffffffffffc0, 0x800000000006, 0x9b72, 0x2, 0x8006) sendmmsg$auto(r2, 0x0, 0x9, 0x90) socketpair$auto(0xfffffffe, 0x1, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/tty/ttyr3/dev\x00', 0x40200, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptye9\x00', 0x101e81, 0x0) bpf$auto(0x0, 0x0, 0x6f4) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) mincore$auto(0x1000, 0x8000, 0x0) io_uring_setup$auto(0x6, 0x0) r3 = openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x501, 0x0) ioctl$auto_FUSE_DEV_IOC_CLONE(r3, 0x8004e500, 0x0) pipe2$auto(&(0x7f0000000180), 0xec7) 8m13.757489066s ago: executing program 6 (id=2155): openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card1\x00', 0x129800, 0x0) openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000000)='/dev/usbmon33\x00', 0x121200, 0x0) mmap$auto(0x0, 0x4000002, 0xfffffffffffffe01, 0x8051, 0x3, 0x0) syz_clone(0x5004000, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, 0x0, 0x100000a3d9) socket(0xa, 0x1, 0x0) recvfrom$auto(0x3, 0x0, 0x800000000e, 0xfffff4a4, 0x0, 0xfffffffffffffffd) sendmsg$auto_HWSIM_CMD_NEW_RADIO(0xffffffffffffffff, 0x0, 0x40800) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/zswap/parameters/compressor\x00', 0xc0002, 0x0) write$auto_ocfs2_control_fops_stack_user(r1, &(0x7f0000003900)='\t', 0x1) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/acpi/parameters/ec_event_clearing\x00', 0x129882, 0x0) sendfile$auto(r2, r2, 0x0, 0x8) 8m13.341723887s ago: executing program 6 (id=2156): socket$nl_generic(0x10, 0x3, 0x10) (async) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) (async, rerun: 64) move_pages$auto(0x1, 0x2000000000003, 0xffffffffffffffff, 0x0, 0x0, 0x8000000000000000) (async, rerun: 64) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$auto(0x5, 0x1, 0x4b, 0x0, 0x9) (async) sendmsg$auto_NETDEV_CMD_QUEUE_GET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000003980)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000", @ANYRES16=0x0, @ANYBLOB="010343"], 0x14}, 0x1, 0x0, 0x0, 0x2004c005}, 0xc4) (async) close_range$auto(0x0, 0xfffffffffffff000, 0x2) (async) r0 = openat$auto_vhci_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async, rerun: 32) r1 = socket(0x11, 0x3, 0x9) (rerun: 32) r2 = socket(0x10, 0x2, 0x4) (async) close_range$auto(0x2, 0x8, 0x0) (async, rerun: 64) r3 = socket(0x10, 0x2, 0xc) (rerun: 64) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)=ANY=[@ANYRES32=r0, @ANYRES8=r1, @ANYRES8=r3, @ANYRES16=r2], 0x18}}, 0x20008000) (async, rerun: 32) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000100), 0x101000, 0x0) (rerun: 32) ioctl$auto_KVM_GET_MSRS(r4, 0xc008ae88, &(0x7f00000005c0)={0x2, 0x0, [{0x490, 0x400, 0x9}]}) write$auto(r2, &(0x7f0000000000)='-\x00', 0xfdef) 8m13.266168453s ago: executing program 6 (id=2157): ioctl$auto_UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000040)={{0x0, 0xf2cf, 0x1ff, 0x4}, "6a034a07c7b82d90b69a39e32576f893fba86c9dd051a0094a3836d61c9100fefbbabea6ef9368c7996e841f3f1561d4992f726b0a6c36b0b2fd1678e816201cf562367fe6596824588a2e3d84ba165f", 0x8}) r0 = openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f00000017c0)='/sys/kernel/debug/lru_gen\x00', 0x1, 0x0) writev$auto(r0, &(0x7f0000000100)={0x0, 0x407114}, 0x8) open(&(0x7f0000000180)='./bus\x00', 0x14507e, 0x0) writev$auto(0x3, &(0x7f00000000c0)={&(0x7f0000000100), 0xfffffdf3}, 0x7) sched_setaffinity$auto(0x0, 0x7e4, &(0x7f0000000180)=0x40001) writev$auto(0x3, 0x0, 0x7) r1 = socket(0x11, 0x3, 0x9) capset$auto(0x0, &(0x7f0000000000)={0x1, 0x6, 0x48}) sendmmsg$auto(r1, &(0x7f00000006c0)={{&(0x7f0000000000), 0x5ac, &(0x7f00000000c0)={&(0x7f0000000080)="4c0300006bba861b000004000000a32457895897441b", 0x49}, 0x2, &(0x7f0000000700), 0x5, 0x1}, 0x5}, 0x2, 0x100) 7m58.107272877s ago: executing program 35 (id=2157): ioctl$auto_UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000040)={{0x0, 0xf2cf, 0x1ff, 0x4}, "6a034a07c7b82d90b69a39e32576f893fba86c9dd051a0094a3836d61c9100fefbbabea6ef9368c7996e841f3f1561d4992f726b0a6c36b0b2fd1678e816201cf562367fe6596824588a2e3d84ba165f", 0x8}) r0 = openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f00000017c0)='/sys/kernel/debug/lru_gen\x00', 0x1, 0x0) writev$auto(r0, &(0x7f0000000100)={0x0, 0x407114}, 0x8) open(&(0x7f0000000180)='./bus\x00', 0x14507e, 0x0) writev$auto(0x3, &(0x7f00000000c0)={&(0x7f0000000100), 0xfffffdf3}, 0x7) sched_setaffinity$auto(0x0, 0x7e4, &(0x7f0000000180)=0x40001) writev$auto(0x3, 0x0, 0x7) r1 = socket(0x11, 0x3, 0x9) capset$auto(0x0, &(0x7f0000000000)={0x1, 0x6, 0x48}) sendmmsg$auto(r1, &(0x7f00000006c0)={{&(0x7f0000000000), 0x5ac, &(0x7f00000000c0)={&(0x7f0000000080)="4c0300006bba861b000004000000a32457895897441b", 0x49}, 0x2, &(0x7f0000000700), 0x5, 0x1}, 0x5}, 0x2, 0x100) 6m13.39576118s ago: executing program 0 (id=2623): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000380)='/sys/devices/msr/events/tsc\x00', 0x129000, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) fanotify_init$auto(0x65, 0x2) pipe$auto(0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$auto(0x6, &(0x7f0000000280)=@enable_stats={0xaae}, 0x7ff) r1 = socket(0xa, 0x3, 0x100) sendmsg$auto_HWSIM_CMD_DEL_RADIO(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x4) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x0, 0x5, 0x0) pidfd_open$auto(0x1, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) socket(0x2, 0x5, 0x0) setsockopt$auto(0x3, 0x10000000084, 0x76, 0x0, 0x8) r2 = open(0x0, 0x261c2, 0x84) mbind$auto(0x9, 0x4, 0x7, &(0x7f0000000000)=0x8000000000000000, 0x2, 0x9) close_range$auto(0x2, 0x8000, 0x0) r3 = socket(0xa, 0x2, 0x88) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) modify_ldt$auto(0x1, 0x0, 0x10) bpf$auto(0x0, &(0x7f00000000c0)=@link_update={r0, @new_map_fd=r1, 0xa, @old_map_fd=r3}, 0x10) bpf$auto(0x2, &(0x7f00000001c0)=@raw_tracepoint={0x5, r2, 0x0, 0x8}, 0xc) bpf$auto(0x2, &(0x7f00000001c0)=@raw_tracepoint={0x5, r4, 0x0, 0x4}, 0x103) 6m13.33184335s ago: executing program 0 (id=2624): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r1 = socket(0x10, 0x2, 0x0) sendmsg$auto_ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x2000000}, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB="5de1"], 0x1ac}}, 0x40000) recvmmsg$auto(r1, &(0x7f0000000140)={{0x0, 0xfffffffe, 0x0, 0x5, 0x0, 0x200002, 0x8}, 0x801}, 0xfffffff9, 0x10, 0x0) r2 = socket(0xa, 0x1, 0x84) getsockopt$auto(r2, 0x0, 0x53, 0x0, 0x0) madvise$auto(0x0, 0x2003f2, 0x15) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff) r3 = openat$auto_proc_uid_map_operations_base(0xffffffffffffff9c, &(0x7f00000013c0)='/proc/self/uid_map\x00', 0x8006, 0x0) r4 = socket(0xa, 0x2, 0x3a) setsockopt$auto(r4, 0x29, 0x0, 0x0, 0x110) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) move_pages$auto(0x0, 0x1002, 0x0, 0x0, 0x0, 0x2) write$auto_proc_uid_map_operations_base(r3, 0x0, 0x0) 6m12.200718667s ago: executing program 0 (id=2630): sendmsg$auto_HWSIM_CMD_NEW_RADIO(0xffffffffffffffff, 0x0, 0x40800) socket$nl_generic(0x10, 0x3, 0x10) keyctl$auto(0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0) socket(0x11, 0x80003, 0x300) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) setsockopt$auto(0x3, 0x1, 0x28, 0x0, 0x808) pwrite64$auto(0xc8, &(0x7f0000000000)='\vX\xc9\xb3\xbc\x8c\x1dga08\x90\x86\xdde\x1cJ\x99\x00\x11\x11\x14\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xfe\x80\x12\x00\x00\x00\x00\x00\x0fo\x84\xfc\x89\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#\x1c\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd8\xbdn\x1d\x00\xeb]B\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xaf\n1\x80\x1a\xbc_\xef\x8b\t\xcc\xa6\xf2\xc1\"\xact\xee\xc9\x00'/232, 0xfdef, 0x3) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) mmap$auto(0x0, 0x40009, 0xe2, 0x9b72, 0x7, 0x28000) close_range$auto(0x2, 0xa, 0x0) socket(0x18, 0xa, 0x1) socket(0xa, 0x2, 0x0) socket(0x10, 0x2, 0x0) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="1b0026bd7000fddbdf2503000000040008000400038012000100898771f1c19f1779048590828847009a00"], 0x30}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) sendmsg$auto_NETDEV_CMD_QUEUE_GET(0xffffffffffffffff, &(0x7f0000003040)={0x0, 0x0, &(0x7f0000003000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="db002cbd7000fbdbdf250af4"], 0x1c}, 0x1, 0x0, 0x0, 0x20040004}, 0x20008810) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="7201", @ANYBLOB="18"], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55) sendmmsg$auto(0x3, 0x0, 0x9a9, 0x7) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) statmount$auto(0x0, &(0x7f0000000380)={0x5, 0x1, 0x9, 0x7, 0xb, 0x940, 0x1ffde, 0x3, 0x1, 0x8000001, 0x9, 0x5, 0x2, 0x85b5, 0xb0, 0x7, 0x200, 0x3, 0x205, 0x8001, 0x0, 0x3ffff, 0x0, 0x3, 0x7069, 0x0, 0xfffffbfffffffffc, 0x0, 0x100001ad, 0x0, 0x3, [0x0, 0x0, 0x3, 0x52, 0x4, 0x8000004, 0x0, 0x100000000000000, 0xfffffffffffffffb, 0x0, 0xfffffffffffffffe, 0xfc, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1, 0x2, 0x4, 0x8, 0x20000001, 0xfffffffffffffffa, 0x0, 0x7, 0x0, 0x0, 0x80800, 0x0, 0x8003, 0x0, 0x5, 0x0, 0x1, 0x0, 0x0, 0xfff, 0x4, 0x0, 0x0, 0x2000000000000001], "80ab49717f6257d864d9f977"}, 0xffff, 0x7d) r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1e00df45"], 0x1ac}}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000005c0)=ANY=[@ANYBLOB="b37210843e1c99b4651c19dae8a78374bf83b930cf2d32826634fca360c8dfbce172fdf1745ee406b0222accae949908432b91de1f5dc9f2ad799a39fd7871dc5cb6daf74a8b99bdbae485652183baf521cbd19ff88bd05e755a76becbab5642023c8bd96a9b771245fe97e434e5d443e2f8f37cfecb3181894f163d287d82ad53d067cd37319247699e2d7b09c83214275f478ee5e43dad47971a83302d7d74cd9b8e5a97ad709f06c835d9a70511de90cf6b24aa66d02c1a7375ee277a4e3b49ef5b2029406a0a9b8a0489ad0287e6a2d433f345d76ac81f1536825972abe4dac61a69ead44f9448bc126fb4686c5437d75e1635a86ab6c1ed433f2fdf5ff521951e42e9228501df070e448694d41fc3afbca440f9100b1f6d030994b8ebcefebde11a1030fb7678098e03d0a713fa8fb89afb6af5ab28dd1decdc1b677b38a442a29bd7e60485e839add849f9b64011895434e3c9651d781aa52221770518ca41dbcdc7eb30a604e4f18fb980c9177720e942861283d3ea7c16d7a0248555446fccab6c2c0ffd2d3b9fd72b342d6abf25351cc80fe3808dbaf768616a6159e15251d9ac38fb99c312c18f2525524fd502fd9573fe3cf46b166a72e315350a9cb982965678e1e8c42cb4684c3cc207dc1556c1a0d33bdef0db3b6fb17f3efc92dee4d5efe92b74739aad494f8e19376188954056fc3cee4ec3c95f9b3b83e113a341537e114899adfd4598a014c46bf98f9a9b676acdcf735e69651deb6dce9636c780ae9a200fd24d6cc7ee1d409f609e34ccc2c22b431cfbfd107024ad4d79f98c8c401fe395bcf18e63a6e21c633e378e62b93ccbfbd94a0b58d90ea46ab2220d93507d7dcb3a91f48dc9a4ecc49b8472aafafa6e97da01885258993cab8a75115da16b1934f51549c46c392cc881d64dec08351fbc76c7749d509d118a209a1c7fa761cc9d64122019eb1c608325b3f14a657c9670f43ad18c3a7c67558b61db6731ea1082f203fb9f58b75917038f36816188fa6a38db69dce5cfea16d844e38df2321aa57c1e574538e394665bda6ccaba2c97720c8e1ede77cc02e7d2efe32ceec69b42b6849d7165ac1914b07fc8ecb94f3d630c22ec6d12ee500e5b54afc3dcd275695978e81668a4d110a2ca290c581863402509cfc53a9a021a667b071fa1115773002f6ab279dc78e524d80fc135abd5a482ff30bd4306d73ef95c7978843f3eab02e88e92edad2d67196fc64e8d61889c383e9a8845b473ea827d9e83dbf670e6a0680458fa6c93cc6325707c534d93f651e2f1642ce771d10b237124d30cbb07f523a0be9707dd231375ce00480d7f45b709354190f1342bc50081b93595229a55e5c98a0c0493df7575a3627ab4bdfbfe08db9bc4dd0c9d87d03aa3ad708527a6d8b39510123aa93b0d60ab9dd5b2a8607386b8af993c76b8adb31802b5c65b85cd1d4403ca1cd8e9cf84562a2aba075921f680869ab7b6ce33151f649a37028fc08a39aad5f52d24b1154f9718b1654495e79996a7a064ee879f18f6838cd6dad2531f5454d263a3fbbb5d1bde00a537c98f05edfdbe8c88662b8ed37e4483a2c897d0d20771d1ce93f8e1e3520eb20a6b4eab7d5a7cc49de1f074e8ad715be9a50589a68554d388b64a6145073a8de19d79747ca8b90cc5f0b1b19b37e24fe7df469846494bb0089a862b619f089551017c79cc3b71904520091f7dc5d9b9d6ab96ffe67cb6cfaf37ab7cb4a32cfc9bdd38222449af1e5487d245ce93e9b21047cd47d5f1a68d73d4bc43d9cd2cfbef1b750332229c5a43588d080d6a7217bb818c72d4101d6129aaf718959925bb95565a57c06b1fa739c537b5403bacad0b54c14f38dfb2ba4505b577a75f056fdef99d6f0894ebce71073f0882b1bd2d839bda1f7c2a0dfc3e5a5159458ef69964f9b1caec563ba4528628a924b720b72ad43af4b207116f0c5052e4dd10e151a58f35aabf2316cc257d57d4b458bb672af282b6504f6b1e8fc7ee488d4ced9665b96b4024a89fbb4e90d5eb729d7a3abc4c50f251f48ddee4d5b1e75d71dc654f189c899e1e87440d82120b6aa04a0a7ee0936927faa38a000b6f9680066212f77134dcb35967384d4eba8772248acc65a035328eb7151343c504269262893a9401acf92f47c2b2b1e5f98f5094d4221f8fd90c0b0f45b0d01158d6168caf2a21f0c21d63083be262ab632daeb7347ba15fe1665c544a951cdd27b16afe36abb6e6f0862d447d3a8a80a863e72c87ab47918eae82423d27dbd2b2dcdd35591ea10a548ab9b9a0c5a9f273540e0ce97b67823db595082f2573d7dc52d4dfbf7ad92055c18f69bddfa3226fb77f1413711230c8df7fb5503a7e3bcdeeec66be00fc128c195df0b359a52ee0e4cc1a23c869b8d8bf95f60c42b70aedf1c97242b2044b513def1080164410638465a1f47e2de7e86f900fef56d70564f65d79525476cc8c10c4a3bf416cf0805844f2624cb7fdfbda61082df0ef97af008eacb16c6ade15b1da48c4db03f576a05d74b27119da99f3427af7ca4c37105b2e582a25239b09a6487ca08ad1da31d59cef4686d6b7efa99a1ad8ea1a0e2717d1dab4cf58d98105af0c729e1cef22f64553b046f3832ec577d3d2f10e47c38130132876c6bd95c0d01f9d807f68dac047504c149f2e7c289ad71bca6fa10a08ee34c77fd2c1dafd20b4b069eaab8d1d8d818ccace9a708da1422403e5589917168484f16aafa0d1736b83c241bd4450a0aa93429bd73208436becf2b4f7872573c2b388c21a83c416d19a5fc9dfb311a8ea2a6c873f400444007f8c6797f4419546f39a0e6391a892a7dc15d42fd9184e19e17d47f982dc602fc24e085a390da43188c705233d1f8301c37c80c483219d09e76eb8bad067a56726a8b1b5dcd31139da0189b6643812cabe044c5f437bfb7863a806b60531a1ec07a0964070b2dcfe023df80a94a30301522639d4959a3c5ba71a708d0b10bcc51fb6632116b558cf8e4548a07c5d0c398584d608d6141604364706a0caa0d015cf6e92d83ff14cf67a6d05624ce031d6ba7d75d3cfb8c022af69deb32736516a49cc46125cf81bc42d42b1bf209dd21e7caf838dbb80439e30cc83f95d2314b1925e94f49a2285fac9354cef61ecc2e33096e4274c96325d3d1a0affcf18cc45f60e36a53288f06764038ddc01cf6d02e022afd74e7456a9b805cbd743115de2e15a51a21dc67e0c19de8fd312e0cd1389687de93f0527c7faf180dde2d31690447a866db64c94e0bbebb909f8c077267d6bb9153a417506b808e97226f5470120960ab155a0f44ecdda7492c7c9d5612d73911798b4a43e4aba3af3e5f6ab30f241bde8d42447eec711f8853fe55880a123abdac1732a0a40a820e293bfd70404d2bce663046c412a59e31047131d70a0a048c3aedbe1927d5025f50be6fb0ac1d48c9ceba09374f1084260b9d742c40966bc6908a24ccc0b20c6df849870a50f8bf6470fec946b14f78a19ba2d43b23112c76fb4e172d20f6864c918fcc3ddada038ef303acafadc0fdbe4fdf0cd7caee0bac4c3bf097d32339efd6aa2129205c57b48ee65f9da9b23b56ca8b77ce0a4231796f2bd70124eb5b5c2dc564bba053d5f050eb2c7db4fbc0c03a2f8a4b1ef0d593a7f5e36be4d422bf90d3dc0f7b3e402ae56d08868a1c66b7a1ab89c2417f4c5e3c9a3b9d5cc14d3f76f27f897af36ceca243ce62c054fdd781369f76fac72064009722d2e5c7fccc9ede44d7f2952d887aed2ac040bca5f851aa58996085131ff615e7dcfe93010e841e8ff241136e1b9758ad9e3d0755bb9980ee84e30faa8223728fc3a8e62954d71769d627a6d87d21e6071da1254c0423c91d2f629e593cd5b26f0cab31b9854ba8a431320c3eb076001d8ed3f14cbb0aa49d37d5b237408a8f05c7a63bbc3031a4f5b1649f5f217bcde8436c0e3f2bf9a3dc18e41895337c832042aa71f1c1290bd680f3f3918b2b878b83a489ba416ae9e397c51ea65ab9b410f05f55abcdc1c6f3e9ac025b38bc26fc69bc2da1f2cc97b3fa11a62bb5122ac79416e6c9dae8b789b7e7e6996e3aa48b0d3b35be8e6d83c3b82ff2c1f0dcf4c04e01e852dc04b29f93ce933dfbd8d9e52e91a1689c489650bcbebe36713c923d9640cf53d857a62a7aa2d120286a055ad4baa5ec3d8b1164a2d98a24e796e19c8249d0a6940b0443fda90ede37d467e16c34c87e8d433caf73e8525474846486ab283333654021495d6c8e6ccf6d1c8671b24962be068d7fbe3b4698699e24293553e650ad796a5539451e8c060a83b644e82a51b7ddb5d13647d065efbb908aa8f5786c377570be2d01a38d062235c9e18213138d640d36f992207a9cc942b4ac7a2ac65bd12727ce71d89d995e6663bec15d13ebacce9ecec7a7aea764bcbedf9ce60d88acedc0e456795aaaab71c87146423d94665085940a196ff89a11b5bff88691ec43d23f641bf5f322ec09727549c2a89d0b8f0dbe94a436d5f1cc45d9f2c451097014a5dbfb0ed91bde3528c7a2a786f573d1687be9ef2f6cc2a592b79607e5532ffaaadf963666c72b55546ce737b837caaa7b3eb4c972eecef74ac73431851d5b9814921905eadf51bf24d767ce2b851f98bab9e28fae52d554f98514b347f6dc967fc0c1a9523fc23bb2563cb991fa2e67ff3838ffa0af788a476f3b018f38df478bf8ed105d97d5b2ae3bce317c9000929020cb6ad052c8913275134ba86f26084e7905d0d0e09cd6c1889dc6e5c0f07e5efd80a9292818542e19fa7d8d55909270036e16d91a655d002adddc11f73c78f6a50cebacc73dcbb462f3380366903cd179879b949b7015955a49a2d80cc6276a0472b250bcd70d09c1dae5906a53ff68a9b0ffecf2fcfe25f1f7a4b71d91341ec77216c3fb46a5d93fae7c827fbd0d994052835d6a115db2ddfd548642e6f3b2cad2683743cbeb9356453a13bcfa6a4e49d1f2c54bb8b425dc789cddddb3bc54d3504f8717719f5575a6bb96732b4a035d8b12b808583029b42af0f0c3183139494ae680e9116ece0c36e34dacfe725598371727750759e68c27b98ed2757ebb744b3194e20c6c6dc66ef1a6bcb159e00caf283a4d7f4f02e4be85f9aeeca5c689bf9e4a6f14b61c256efe646f3b55a7a41c0caf23abdea906345c356b0b71d8c7d3d40684aaf005f5934a038777ea96085889e1df0d07ad468616c56773c73673aa02286dde24b21f850ffeb933edf5ebed104bbf134acbcb1eeed13d38e2ce30515f9751bfbbcdc2e8053d540b62286540dcc16f7d0f271f71ec00e8d042919369c27bf77bc71dab649f30da152657cec0c58b235d4e50dd28fdd71f4bf818d2fe08c8c707fe8e2890c9964df259884fe2296b654c9a56f82d2db11a5483b5fd4cba8f7abdfaf7bfbc005420cdb310cf8fb1bdbc4e65cba533ef2b184779a11a61ba05f67c42211acdbcc6ea6a9a10d47a3610e6a12133d5949a76c6557c03d29c4d8b1f9278c427a8067cc6356c66882301ce0caad71c58df00e892c72a9de0a3bcac27adf33de417c39504a2976ab5d8317bec47592bd4370fda141a181b617328ecba703f7cc0822e75fb7fb2303c547af2c5449fbd5fd66ad0ff2792eb7695063864133154b648ac4471cfa8f62c573a69fcaebfd6ab9ef9fc69dd02072540fda3ff3b21621a5785429125b1cc293efe5dfc0d0111575e3c9c07018f2ada712172622057102bc2b9682b1eb4a1c9c2db0bb5b53df085dd57e7378201210a56a62"], 0x1ac}, 0x1, 0x0, 0x0, 0x50}, 0x40000) recvmmsg$auto(r0, &(0x7f0000000100)={{0x0, 0x3, 0x0, 0x3, 0x0, 0x80000002, 0x6}, 0x9}, 0x7, 0x6, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1c001b"], 0x1ac}}, 0x40000) syz_genetlink_get_family_id$auto_nl802154(&(0x7f00000000c0), r0) 6m11.101769356s ago: executing program 0 (id=2636): bpf$auto(0x0, &(0x7f0000000040)=@bpf_attr_0={0x1e, 0xb5, 0x4, 0x48d0, 0x4, 0xffffffffffffffff, 0x74b, "2af051a940806ec05be276cfc83ce63f", 0x0, 0xffffffffffffffff, 0x5, 0x4, 0xe5, 0x3}, 0x10) (async) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyprintk\x00', 0x109401, 0x0) (async) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket(0xa, 0x3, 0x3b) (async) mmap$auto(0x0, 0x200009, 0x2, 0x48eb1, 0xffffffffffffffff, 0x300000000000) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) (async) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async, rerun: 64) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) (async, rerun: 64) close_range$auto(0x2, 0x8, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x402000a, 0xffffffffffffffff, 0x400eb1, 0x401, 0x8000) (async) socket(0xa, 0x5, 0x84) (async) io_uring_setup$auto(0xa, 0x0) (async) socket(0x2, 0x80002, 0x73) (async, rerun: 32) mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000) (async, rerun: 32) setsockopt$auto(0x3, 0x10000000084, 0x18, 0x0, 0x8) (async) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x10b402, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020007, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async, rerun: 64) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) (rerun: 64) r0 = io_uring_setup$auto(0x9, 0x0) close_range$auto(0x2, r0, 0x0) (async) futex$auto(&(0x7f0000000080)=0x2948, 0x0, 0x2948, &(0x7f00000000c0)={0x225c17d03}, 0x0, 0x5) futex$auto(0x0, 0x5, 0x4, 0x0, &(0x7f0000000080)=0x9, 0x4000000) (async) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x2, 0x3, 0xeb1, 0xfffffffffffffffa, 0x7ffd) (async) io_uring_setup$auto(0x1, 0x0) (async) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) ioctl$auto_TIOCSETD2(r1, 0x5423, 0x0) close_range$auto(0x2, 0x8, 0x0) 6m10.471381533s ago: executing program 0 (id=2638): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = open(&(0x7f0000000100)='.\x00', 0x595002, 0x408) write$auto(r0, 0x0, 0xfffffdf1) mmap$auto(0x0, 0x1, 0x18e, 0x8000000000000011, 0xffffffffffffffff, 0x9) r1 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) syz_genetlink_get_family_id$auto_tipcv2(0x0, r1) prctl$auto(0x1, 0x6, 0x0, 0xb117, 0x9) sendmsg$auto_TIPC_NL_BEARER_ADD(r1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4048804}, 0x4000) ioctl$auto_PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x25, 0x5, 0x2) r2 = socket(0x848000000015, 0x5, 0x0) bind$auto(0x3, &(0x7f0000000240)=@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x23}}, 0x6b) connect$auto(0x3, &(0x7f00000002c0)=@generic={0xa, "5457c29004e0b991da88f70ef61b"}, 0x55) sendmsg$auto_NL80211_CMD_GET_MPATH(r2, &(0x7f0000000d80)={0x0, 0x0, &(0x7f00000003c0)={0x0}, 0x1, 0x0, 0x0, 0x20004000}, 0x100000) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, 0x0, 0x103880, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x7) close_range$auto(0x2, 0x8, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) ioctl$auto_TIOCSTI2(r3, 0x545c, 0x0) ioctl$auto_TIOCVHANGUP2(r3, 0x5437, 0x0) linkat$auto(r0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080)='&&\x00', 0x1000) sysfs$auto(0x2, 0x23, 0x0) open(0x0, 0x22040, 0x75) utimes$auto(0x0, 0x0) clone$auto(0xfffffffffffffff8, 0x7, 0x0, 0x0, 0xa) mmap$auto(0x0, 0xc6, 0x400000000ffb, 0x8000000008011, r3, 0x5) open(0x0, 0x22240, 0x154) 6m8.527209745s ago: executing program 0 (id=2645): sendmsg$auto_HWSIM_CMD_NEW_RADIO(0xffffffffffffffff, 0x0, 0x40800) syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000180), 0xffffffffffffffff) msync$auto(0x0, 0x6cd, 0xd38d) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/zswap/parameters/compressor\x00', 0xc0002, 0x0) r1 = getpid() process_vm_readv$auto(r1, &(0x7f0000000140)={&(0x7f0000000040)="c65ec2413791c5731cca46bd31769ed1af0aaa8f2d430fb3a4debf75c9bb5db6f0baa870b3c5f1c17392649339bcdc20a5868c440702441b4d0dcec3567c7a5cf5b68441d8e5897e23c4578fd351bfae1de1191cbbbc4c67b0908e54b03c6f335ba6d7e348adca99f2dc45bada00a37f652b84692f794bc1254441b6315e85c84e4f98625a0e5ebe13d3b88618e6ed4a751927a13e80d26aff1ef406d2904b395fc963ce905228e7a3306aabf0282741c36e6254e1df71436edccd720912d6dd28", 0x101}, 0x1, &(0x7f0000000280)={&(0x7f0000000180)="74bebc7a495ec1834e1f104dcbffd8857f0488e79ca4e8de5eb57b87c52ae6420afb483bea09bea544d058acd6c03df2815ae764d33f7aa96c72a1e2047b20fe4db43f549c765c10a424f02a8e595946f835a15c2f19203f1c653bd111f36553c145adb067a9c4688b35c3130baf7d4ff812ceb678f5b6e6dedfcac28ee1cdcc388a05e53399d35501a5fba0485f8018fbcaf81acde6be34e37c40a60c33b20d16fde5a3bdd029937ad79b1c4c8550e82d76d44675194a8098341983e6782a500274c954f4fba2c85c02f8a4267756eaf2df12e483a90e2947a45eebb3616383276b2364ad9102ac1d1aad", 0x9}, 0x1, 0xfffffffffffffffb) close_range$auto(0x2, 0x8, 0x0) userfaultfd$auto(0x1) openat$auto_bm_entry_operations_binfmt_misc(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/fs/binfmt_misc/syz1\x00', 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0x10, 0x3, 0x6) r4 = fanotify_init$auto(0x5, 0x0) fanotify_mark$auto(r4, 0x205, 0xa, 0x4, 0x0) sendfile$auto(r0, r3, 0x0, 0x7ffff000) sendmsg$auto_ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[], 0x14}}, 0x2404c800) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) write$auto_ocfs2_control_fops_stack_user(r0, &(0x7f0000003900)='\t', 0x1) mmap$auto(0x0, 0x2020009, 0x2, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x10, 0x2, 0x14) openat$auto_tracing_entries_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/buffer_size_kb\x00', 0x8082, 0x0) socket(0x1d, 0x80000, 0x207) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4083}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4000840}, 0x20008041) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/module/workqueue/parameters/default_affinity_scope\x00', 0x1a9242, 0x0) sendfile$auto(r5, r5, 0x0, 0x400000080000000) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x10400, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x16, 0x401, 0x6) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) ioctl$auto(0x3, 0x400454ca, 0x38) ioctl$auto_SNDRV_PCM_IOCTL_TTSTAMP2(0xffffffffffffffff, 0x40044103, &(0x7f0000000340)=0x8771) 5m53.240228215s ago: executing program 36 (id=2645): sendmsg$auto_HWSIM_CMD_NEW_RADIO(0xffffffffffffffff, 0x0, 0x40800) syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000180), 0xffffffffffffffff) msync$auto(0x0, 0x6cd, 0xd38d) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/zswap/parameters/compressor\x00', 0xc0002, 0x0) r1 = getpid() process_vm_readv$auto(r1, &(0x7f0000000140)={&(0x7f0000000040)="c65ec2413791c5731cca46bd31769ed1af0aaa8f2d430fb3a4debf75c9bb5db6f0baa870b3c5f1c17392649339bcdc20a5868c440702441b4d0dcec3567c7a5cf5b68441d8e5897e23c4578fd351bfae1de1191cbbbc4c67b0908e54b03c6f335ba6d7e348adca99f2dc45bada00a37f652b84692f794bc1254441b6315e85c84e4f98625a0e5ebe13d3b88618e6ed4a751927a13e80d26aff1ef406d2904b395fc963ce905228e7a3306aabf0282741c36e6254e1df71436edccd720912d6dd28", 0x101}, 0x1, &(0x7f0000000280)={&(0x7f0000000180)="74bebc7a495ec1834e1f104dcbffd8857f0488e79ca4e8de5eb57b87c52ae6420afb483bea09bea544d058acd6c03df2815ae764d33f7aa96c72a1e2047b20fe4db43f549c765c10a424f02a8e595946f835a15c2f19203f1c653bd111f36553c145adb067a9c4688b35c3130baf7d4ff812ceb678f5b6e6dedfcac28ee1cdcc388a05e53399d35501a5fba0485f8018fbcaf81acde6be34e37c40a60c33b20d16fde5a3bdd029937ad79b1c4c8550e82d76d44675194a8098341983e6782a500274c954f4fba2c85c02f8a4267756eaf2df12e483a90e2947a45eebb3616383276b2364ad9102ac1d1aad", 0x9}, 0x1, 0xfffffffffffffffb) close_range$auto(0x2, 0x8, 0x0) userfaultfd$auto(0x1) openat$auto_bm_entry_operations_binfmt_misc(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/fs/binfmt_misc/syz1\x00', 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0x10, 0x3, 0x6) r4 = fanotify_init$auto(0x5, 0x0) fanotify_mark$auto(r4, 0x205, 0xa, 0x4, 0x0) sendfile$auto(r0, r3, 0x0, 0x7ffff000) sendmsg$auto_ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[], 0x14}}, 0x2404c800) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) write$auto_ocfs2_control_fops_stack_user(r0, &(0x7f0000003900)='\t', 0x1) mmap$auto(0x0, 0x2020009, 0x2, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x10, 0x2, 0x14) openat$auto_tracing_entries_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/buffer_size_kb\x00', 0x8082, 0x0) socket(0x1d, 0x80000, 0x207) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4083}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4000840}, 0x20008041) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/module/workqueue/parameters/default_affinity_scope\x00', 0x1a9242, 0x0) sendfile$auto(r5, r5, 0x0, 0x400000080000000) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x10400, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x16, 0x401, 0x6) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) ioctl$auto(0x3, 0x400454ca, 0x38) ioctl$auto_SNDRV_PCM_IOCTL_TTSTAMP2(0xffffffffffffffff, 0x40044103, &(0x7f0000000340)=0x8771) 2m0.05146871s ago: executing program 7 (id=3377): r0 = openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) r1 = socket(0x28, 0x5, 0x0) bind$auto(r1, &(0x7f0000000080)=@in={0x28}, 0x68) mmap$auto(0x0, 0xe983, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000) kexec_load$auto(0x200000000007, 0x1, &(0x7f0000000040)={@kbuf=0x0, 0x2aaa, 0x6c0000c000, 0xc000}, 0x4) mmap$auto(0xffffffffffffffff, 0x4020009, 0x200000000000df, 0xeb1, r0, 0x8002) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) socket(0xa, 0x2, 0x3a) syz_genetlink_get_family_id$auto_nbd(&(0x7f0000001d00), 0xffffffffffffffff) sendmsg$auto_NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x20000000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_smc_pnetid(&(0x7f0000002b80), 0xffffffffffffffff) sendmsg$auto_SMC_PNETID_GET(r2, &(0x7f0000002c40)={0x0, 0x0, &(0x7f0000002c00)={&(0x7f0000002bc0)={0x14, r3, 0x1, 0x70bd27, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20044000}, 0x8040) sendmsg$auto_SMC_PNETID_DEL(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x58, r3, 0x4, 0x70bd2d, 0x25dfdbfe, {}, [@SMC_PNETID_ETHNAME={0xa, 0x2, '^:{,\\\x00'}, @SMC_PNETID_NAME={0x5, 0x1, '\x00'}, @SMC_PNETID_NAME={0x17, 0x1, '/proc/self/oom_adj\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x9}, @SMC_PNETID_IBPORT={0x5, 0x4, 0xf}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x7}]}, 0x58}, 0x1, 0x0, 0x0, 0x31}, 0x4000810) socket(0x23, 0x80805, 0x0) mmap$auto(0x0, 0x2020009, 0x126, 0xf8, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x5, 0x0) ioctl$auto(0x3, 0x89e0, 0x38) ioctl$auto_SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, 0x0) r4 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/oom_adj\x00', 0x0, 0x0) read$auto(r4, 0x0, 0x1f40) r5 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r5, &(0x7f00000000c0)={0x0, 0xffffffff}, 0x6) syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/pid_for_children\x00') 1m58.000244053s ago: executing program 7 (id=3380): mmap$auto(0x0, 0xfb1, 0xffffffff, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) memfd_create$auto(0x0, 0xe) socket(0x2, 0x1, 0x106) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) select$auto(0x4, 0x0, &(0x7f0000000080)={[0x3, 0x5, 0x4, 0xd, 0xfffffffffffffffc, 0x100000000, 0x2c2, 0x800002017d, 0x2, 0x40, 0xd, 0xd59, 0xfb, 0xff, 0x1d, 0x2]}, 0x0, 0x0) connect$auto(0xffffffffffffffff, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0xdf) r0 = getpid() process_vm_readv$auto(r0, &(0x7f0000000000)={0x0, 0xfff}, 0x800000001, &(0x7f0000000280)={&(0x7f0000000080), 0x1ffffffff}, 0x6, 0x0) r1 = socket(0x11, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r1, 0x8955, 0x0) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xff}}, 0x54) mmap$auto(0x0, 0xfb1, 0xffffffff, 0x9b72, 0x2, 0x8000) (async) close_range$auto(0x2, 0x8, 0x0) (async) memfd_create$auto(0x0, 0xe) (async) socket(0x2, 0x1, 0x106) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) select$auto(0x4, 0x0, &(0x7f0000000080)={[0x3, 0x5, 0x4, 0xd, 0xfffffffffffffffc, 0x100000000, 0x2c2, 0x800002017d, 0x2, 0x40, 0xd, 0xd59, 0xfb, 0xff, 0x1d, 0x2]}, 0x0, 0x0) (async) connect$auto(0xffffffffffffffff, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0xdf) (async) getpid() (async) process_vm_readv$auto(r0, &(0x7f0000000000)={0x0, 0xfff}, 0x800000001, &(0x7f0000000280)={&(0x7f0000000080), 0x1ffffffff}, 0x6, 0x0) (async) socket(0x11, 0x3, 0x2) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8955, 0x0) (async) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xff}}, 0x54) (async) 1m56.679529904s ago: executing program 7 (id=3381): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(0x0, r0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80802, 0x0) r1 = socket(0x2b, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @loopback}, 0x6a) sendmmsg$auto(r1, &(0x7f0000000140)={{0x0, 0x10, 0x0, 0x9, 0x0, 0x1f, 0x9}, 0x800009}, 0x7, 0x20000000) io_uring_setup$auto(0x6, 0x0) setsockopt$auto(0x3, 0x1, 0x2f, 0x0, 0x9) setsockopt$auto(0x3, 0x1, 0x21, 0x0, 0x9) write$auto(0x3, 0x0, 0xfffffdef) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) mmap$auto(0xffffffffffffffff, 0x20005, 0x1ff, 0xeb1, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x2020008, 0xffffffffffffffff, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) unshare$auto(0x40000080) syz_genetlink_get_family_id$auto_l2tp(0x0, 0xffffffffffffffff) madvise$auto(0x0, 0x2049a0, 0x9) connect$auto(0x3, 0x0, 0x54) 1m54.89531514s ago: executing program 1 (id=3384): openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async, rerun: 32) select$auto(0x7, 0x0, &(0x7f0000000080)={[0x8, 0xc0b, 0x3, 0x16, 0x1000, 0xff7fffffffffffff, 0xf, 0x9, 0xb, 0x1, 0xfffffffffffffffd, 0x2e3, 0x5, 0x0, 0x1, 0x7fffffff]}, 0x0, 0x0) (rerun: 32) r0 = timerfd_create$auto(0x8, 0x800) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00211459a600fbdbdf250200000008000300000000001b0004"], 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0xc0) (async) futex_requeue$auto(&(0x7f0000000340)={0x20000b, 0x6, 0xffffffff, 0x2000000}, 0x401, 0xf, 0xe0b4) (async) mmap$auto(0x0, 0x20006, 0x4000000000df, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) (async) r1 = socket(0x2, 0x2, 0x0) (async) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) (async, rerun: 64) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x50) (async, rerun: 64) r2 = io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0xe, 0x2, 0x6, 0x5, 0x8, 0xffffffffffffffff, [], {0xd74c, 0x6, 0x2, 0x29f, 0x100, 0x7f, 0x101, 0x6, 0x2}, {0xff, 0x1, 0x10001, 0x7, 0x1, 0x40, 0x76c5, 0x400005, 0x100000005}}) ioctl$auto_EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0x0, r1, 0x2, 0x2, 0x1, 0x2}) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) (async) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) (async) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x801, 0x0) select$auto(0x2000000e, 0x0, 0x0, &(0x7f00000002c0)={[0xe8, 0x9, 0x2, 0x1, 0x5, 0x4, 0x15f4da0e, 0x8, 0x9, 0x100000000000000c, 0x8, 0x1, 0xfca, 0x9, 0x2, 0x4000000000000d]}, 0x0) sendmsg$auto_NL80211_CMD_SET_STATION(r1, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x110000}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="100026bd"], 0x5c}, 0x1, 0x0, 0x0, 0x8000}, 0x40080c0) (async, rerun: 32) pwrite64$auto(0xc8, &(0x7f0000000140)='\vX\xb5n\x91p\xe6\x1eRNM\x99\x86\xdde\x1cJ\x99\x00\x00\x00\x00,\x00\xfd\xfd\xd3\xd3\x1d\xf8\xbe\x01\x00\x00\x00\'\x03\x00\x00\x9f\x1e\xf9\xa4*\x01\x00\x00\x00^B\xb8\xe4j\t,\xe4\x90\xcc\x9d\xc5\x0fo\x84\xf4\x89\v\xea\x1b\x95\xafQ;CL\"\x01@\x00\x00\x00\x00\f\x00\xc0\x13\xc8\xe2\xae\xf5\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8d\x81\x81O*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,8\x93\xba\x88\x93\x9d\xb6\x1a\x7f\xc0%\xb0\x83ROJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd6eWj\xdc\xac\x88\xf0\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00\x00\xff\xff\x00'/242, 0xfdf0, 0x39) (rerun: 32) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) r3 = open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x112) statx$auto(r3, 0x0, 0xfffffffb, 0x2, 0x0) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB, @ANYBLOB=' \x00'], 0x1ac}}, 0x40000) (async) r4 = socket(0x10, 0x2, 0x0) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x44814}, 0x2004c0c4) sendmmsg$auto(r4, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa507}, 0x800}, 0x7, 0x8) r5 = openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000140), 0x8040, 0x0) io_uring_setup$auto(0x9, 0x0) (async) ioctl$auto_dvb_demux_fops_dmxdev(r5, 0x403c6f2b, 0x0) (async) read$auto_ppp_device_fops_ppp_generic(r0, 0x0, 0x0) 1m54.228906878s ago: executing program 1 (id=3386): mmap$auto(0x0, 0x6, 0x2, 0x40eb2, 0xffffffffffffffff, 0x308000000000) r0 = socket(0x22, 0x2, 0x24) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189002, 0x0) (async) r1 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189002, 0x0) ioctl$auto_PPPIOCSMRU(r1, 0xc004743e, 0x0) (async) ioctl$auto_PPPIOCSMRU(r1, 0xc004743e, 0x0) ioctl$auto_PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000040)={0x6, 0x0}) ioctl$auto_PPPIOCSPASS(r1, 0x40107447, &(0x7f00000002c0)={0x9, &(0x7f0000000000)={0x9c, 0xf2, 0x9}}) r2 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cec2\x00', 0x101000, 0x0) ioctl$auto_CEC_ADAP_S_LOG_ADDRS(r2, 0xc05c6104, &(0x7f00000000c0)={"58f99464", 0x8, 0x6, 0x1, 0x3, 0x5, "4bb69ec4b3f4c14539898e4c5682f5", "347f00", "a630df9d", "a0ed9959", ["cd9196b8fe1a8a7eb90401a9", "2f9c30017721de33c560b95a", "d3fe6c55a78d6932211c9b69", "ea334f1f1e5e27a1320d6edb"]}) (async) ioctl$auto_CEC_ADAP_S_LOG_ADDRS(r2, 0xc05c6104, &(0x7f00000000c0)={"58f99464", 0x8, 0x6, 0x1, 0x3, 0x5, "4bb69ec4b3f4c14539898e4c5682f5", "347f00", "a630df9d", "a0ed9959", ["cd9196b8fe1a8a7eb90401a9", "2f9c30017721de33c560b95a", "d3fe6c55a78d6932211c9b69", "ea334f1f1e5e27a1320d6edb"]}) r3 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000048c0)='/dev/dsp1\x00', 0x20000, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) ioctl$auto_SNDCTL_DSP_SETFMT(r3, 0xc0045005, &(0x7f0000000180)="6da6b940dfe114cacac8b7cca871a393aaf922f69708e077a3ff54d760f973198c7f36202c9afdaf7bc2eb57e0") (async) ioctl$auto_SNDCTL_DSP_SETFMT(r3, 0xc0045005, &(0x7f0000000180)="6da6b940dfe114cacac8b7cca871a393aaf922f69708e077a3ff54d760f973198c7f36202c9afdaf7bc2eb57e0") close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB='(\x00\x00\b', @ANYRES16=0x0, @ANYBLOB="1b0026bd7000fddbdf250300000004000800100003800c000a000700000000000000"], 0x28}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) (async) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB='(\x00\x00\b', @ANYRES16=0x0, @ANYBLOB="1b0026bd7000fddbdf250300000004000800100003800c000a000700000000000000"], 0x28}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="14900000", @ANYRES16=0x0, @ANYBLOB="000326bd7000fedbdf2502000000"], 0x14}, 0x1, 0x0, 0x0, 0x4c894}, 0x4) (async) sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="14900000", @ANYRES16=0x0, @ANYBLOB="000326bd7000fedbdf2502000000"], 0x14}, 0x1, 0x0, 0x0, 0x4c894}, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB=' \x00\''], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x8002, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x9}, 0x3, 0x0) r4 = openat$auto_tracing_entries_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/buffer_size_kb\x00', 0x40, 0x0) readv$auto(r4, &(0x7f0000000100)={0x0, 0x3}, 0x1) select$auto(0x4, 0x0, &(0x7f0000000100)={[0x9, 0x7, 0xfffffffffffffff9, 0x9, 0x7ff, 0x3, 0x6, 0x2, 0x9, 0xffff, 0x1ff, 0xd, 0x3, 0x200000201, 0x7, 0x6]}, 0x0, 0x0) (async) select$auto(0x4, 0x0, &(0x7f0000000100)={[0x9, 0x7, 0xfffffffffffffff9, 0x9, 0x7ff, 0x3, 0x6, 0x2, 0x9, 0xffff, 0x1ff, 0xd, 0x3, 0x200000201, 0x7, 0x6]}, 0x0, 0x0) getsockopt$auto(r0, 0x3, 0x1, 0x0, &(0x7f00000000c0)=0x1) (async) getsockopt$auto(r0, 0x3, 0x1, 0x0, &(0x7f00000000c0)=0x1) 1m51.179571401s ago: executing program 1 (id=3388): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) read$auto_proc_reg_file_ops_compat_inode(0xffffffffffffffff, 0x0, 0x0) socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0x20004, 0x1ff, 0xeb1, 0x8000000000000024, 0x8000) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop15\x00', 0x6600, 0x0) openat$auto_tomoyo_self_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000000)='/dev/binderfs/binder0\x00', 0x0, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) openat$auto_ocfs2_control_fops_stack_user(0xffffffffffffff9c, 0x0, 0x669400, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x8a180, 0x0) close_range$auto(0x2, 0xffffffffffffffff, 0x0) open(0x0, 0x22240, 0x55) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0xc8e03, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = socket(0xa, 0x801, 0x84) getsockopt$auto(r1, 0x84, 0x82, 0x0, 0x0) ioctl$auto(0x3, 0x40106f52, r0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r2 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) r3 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/vm/overcommit_kbytes\x00', 0x202, 0x0) writev$auto(r3, &(0x7f0000000100)={&(0x7f0000000040), 0x2}, 0x1) prctl$auto_PR_SET_MM(0x23, 0x8000000000000000, r2, 0x9, 0x4) ioctl$auto_BLKFINISHZONE(r2, 0x40101288, &(0x7f0000000040)={0x8, 0x7}) setns$auto(0xffffffffffffffff, 0x8) 1m49.234023377s ago: executing program 1 (id=3390): r0 = socket(0xf, 0x3, 0x2) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r0) sendmsg$auto_NL80211_CMD_GET_PROTOCOL_FEATURES(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x58, r1, 0x0, 0x70bd2c, 0x25dfdbff, {}, [@NL80211_ATTR_WIPHY_DYN_ACK={0x4}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x25, 0xcd, "ed2e5dbe6e92c072ee77fa14c16e5dfab78a587410afecc5e32e3092ce1f918981"}, @NL80211_ATTR_CONTROL_PORT_NO_PREAUTH={0x4}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}, @NL80211_ATTR_CONTROL_PORT={0x4}, @NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5, 0x1d, 0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x809}, 0x10000000) recvfrom$auto(r0, 0x0, 0xde, 0x8, 0x0, 0x0) msgctl$auto_IPC_RMID(0xfffe000, 0x0, &(0x7f0000000080)={{0xffff, 0xffffffffffffffff, 0x0, 0x100000, 0x6, 0x4, 0x8}, &(0x7f0000000000)=0x7, &(0x7f0000000040)=0x7, 0x1, 0x8000, 0x7, 0x5, 0x758db38e, 0x0, 0x0, 0x4, @raw=0x7ff, @raw=0x547f4a49}) mmap$auto(0x0, 0x20004, 0x1ff, 0xeb1, 0x8000000000000024, 0x8000) sendmsg$auto_NL80211_CMD_DEL_PMK(r0, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x30, r1, 0x320, 0x70bd28, 0x25dfdbfc, {}, [@NL80211_ATTR_MBSSID_CONFIG={0x1c, 0x132, 0x0, 0x1, [@NL80211_MBSSID_CONFIG_ATTR_EMA={0x4}, @NL80211_MBSSID_CONFIG_ATTR_MAX_EMA_PROFILE_PERIODICITY={0x5, 0x2, 0x1}, @NL80211_MBSSID_CONFIG_ATTR_MAX_EMA_PROFILE_PERIODICITY={0x5, 0x2, 0xf}, @NL80211_MBSSID_CONFIG_ATTR_EMA={0x4}]}]}, 0x30}}, 0x8080) eventfd$auto(0x4) sendmsg$auto_NFC_CMD_DEACTIVATE_TARGET(r0, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)={0xdc, 0x0, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@NFC_ATTR_VENDOR_DATA={0x86, 0x1f, "a4a326e99a4586100019869cfee2faf1e1e8fde669599fc50d0812e4387f01cac736559fa14475f6554088cf5118cbcd7f7494b48fe5e39a57474b486628d3eac28436433b52ab6206eb9c613c51677e943ec9888c3fffd7418c3e0331dae9a6193478c812b84f670f02cd7b1fb7917cc7429bacd9d456d71af755b51d6623aa9ee2"}, @NFC_ATTR_COMM_MODE={0x5, 0xa, 0x7a}, @NFC_ATTR_DEVICE_POWERED={0x5, 0xc, 0x81}, @NFC_ATTR_VENDOR_SUBCMD={0x8, 0x1e, 0x1}, @NFC_ATTR_TM_PROTOCOLS={0x8, 0xe, 0x3}, @NFC_ATTR_DEVICE_POWERED={0x5, 0xc, 0x5}, @NFC_ATTR_DEVICE_NAME={0xe, 0x2, '/dev/ptp0\x00'}, @NFC_ATTR_VENDOR_ID={0x8, 0x1d, 0x4}]}, 0xdc}, 0x1, 0x0, 0x0, 0x40000}, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram5\x00', 0x1eba02, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) socket(0x10, 0x2, 0x14) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/platform/dummy_hcd.7/usb8/remove\x00', 0xa001, 0x0) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) close_range$auto(0x0, 0xffffffffffffffff, 0x2) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f00000000c0), 0x141401, 0x0) clock_adjtime$auto(0xfffffffffffffffb, 0x0) setgid$auto(r2) connect$auto(r0, &(0x7f0000000100)=@qipcrtr={0x2a, 0x1, 0xfffffffe}, 0x5b) 1m48.755841631s ago: executing program 1 (id=3392): set_mempolicy$auto(0x2, 0x0, 0x4) (async) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000580)={{@raw=0x7fdfffff, 0xf0ee, 0x40020009, 0x3, "790eaa833e6fc65b6b3cf705001900ffff8eac2cdafc1f64010043eeb0b0530300000000000e00"}, 0x4, 0x966, 0x3, @inferred=0x0, @integer={0x100000000, 0x2000000b752, 0x1}, "6cc1294d63a4f1b4285854c5368de438f8cc142ef6df12bf3373a1183bedbd31b642b4051b078fa1c1c61c329794e5311121c760cb9611c78e6947a99807bcc1"}) (async) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) (async) r1 = socket(0xa, 0x3, 0x3b) connect$auto(r1, &(0x7f0000000000)=@rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x2}, 0x400) set_mempolicy$auto(0x9, &(0x7f0000000040)=0x2, 0x100000001) (async) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/cgroup.threads\x00', 0x80302, 0x0) (async) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) (async) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) prctl$auto(0x8, 0x1, r0, 0x5, 0x97a) madvise$auto(0x0, 0xffffffffffff0005, 0x17) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) socket(0x2, 0x1, 0x0) (async) openat$auto_vga_arb_device_fops_vgaarb(0xffffffffffffff9c, &(0x7f00000000c0), 0x8081, 0x0) mmap$auto(0x0, 0x40009, 0xe2, 0x9b72, 0x7, 0x28000) (async) select$auto(0x1000000d, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0x7, 0x1, 0x948f, 0x3, 0x15f4da0a, 0x3, 0x1, 0x800000000062, 0x6, 0xfffffffffffffffd, 0x6d3f, 0x8003, 0x1, 0xfffffffffffffffe]}, 0x0) (async) mlockall$auto(0x5) (async) readv$auto(0x3, &(0x7f00000002c0)={0x0, 0x1}, 0x7) (async) prctl$auto(0x29, 0x0, 0x0, 0x0, 0x0) (async) sched_setaffinity$auto(0x0, 0x100, &(0x7f0000000200)=0x2) openat$auto_rfkill_fops_core(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0) (async) mmap$auto(0x0, 0x2020009, 0x3, 0x16, 0xfffffffffffffffa, 0x7ffc) (async) io_uring_setup$auto(0x6, 0x0) (async) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/per_cpu/cpu1/trace_pipe_raw\x00', 0x1000, 0x0) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) socket(0x29, 0x2, 0x0) 1m47.339080656s ago: executing program 1 (id=3394): r0 = open(&(0x7f00000000c0)='./file0\x00', 0x22240, 0x0) r1 = openat$auto_uprobe_events_ops_trace_uprobe(0xffffffffffffff9c, &(0x7f00000009c0)='/sys/kernel/tracing/uprobe_events\x00', 0x302, 0x0) write$auto_uprobe_events_ops_trace_uprobe(r1, &(0x7f0000000000)="0a23b9", 0x3) r2 = socket(0x2, 0x1, 0x0) mmap$auto(0x0, 0x128009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x202000a, 0x5, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x15, 0x5, 0x0) openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, &(0x7f0000000140)='/dev/input/mice\x00', 0x22002, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) write$auto(0x3, 0x0, 0x100000000) r3 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x2, 0x4) bpf$auto(0xfffffffe, &(0x7f00000001c0)=@query={@target_ifindex, 0x200, 0x7, 0x0, 0x3ff, @prog_cnt=0x5, 0x0, 0x9, 0x7, 0xffffffffffffffff, 0x4}, 0x6f2) sendmsg$auto_ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="d4000000", @ANYRES16, @ANYBLOB="100027bd7000fbdbdf2518000000200001800247eea41fac000014000200766575683100000000000000000000000800f7ff62fbffff0500060001000000840002800000488013b37090badc49d6dc93876646d25a4d297d01cd3b7da38d12889cc50d505f353dc42d0a3c0a14c7b4642891070800360025d1cbce02df39e4dbbe5793d8cf1f978c7f08fa38bddecde4b3054ce3fec7c16047164dd4d018b1d02952631cabeee83e78d29c7dfc9c1c9b44de8a7d84fdb5841ace7660917bb90b30cec4264e7eba5dbac27510ea6b00b49e91be4c1e2c01792e97822d47bde056b748912ed562f7c258fa9dff1fb51b59cb752fe03e4b62c2229a5b7888a848e02adfc17cc67cf6e3579b8800458e9c8584d79d6ba42ced5a25815617c7f824a744717b57a4453ac25af63231ecc7e6fcdffa69ec4aad8afc49aa5637b396ebb4237a8f28f866b4d69b59ca9c26339f7019f4e0cfe7d950d3e569ab72a65767b4f8efb0dea51c50f702b00de5c12119a6491f9aa912a5707bab3fcfa140f1", @ANYRES32=0x0, @ANYBLOB="0400b3800000003d003b800400a4800c009a00008000000000000004008680c16ab1b1b39dcaa14b6af7dcc011b43cf706e562811c62b28a702b72e0a87126700294f2350000000c000180080003"], 0xd4}, 0x1, 0x0, 0x0, 0x20000010}, 0x20008000) sendmsg$auto_NL80211_CMD_GET_REG(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) r4 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_WOL_SET(r0, &(0x7f0000002cc0)={0x0, 0x0, &(0x7f0000002c80)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01"], 0x2c}, 0x1, 0x0, 0x0, 0x4801}, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) lseek$auto(0x3, 0x8fffd, 0x2) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="12"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) getsockopt$auto_SO_BUSY_POLL(r2, 0x6, 0x2e, 0x0, &(0x7f0000000280)) r5 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop6\x00', 0x40203, 0x0) ioctl$auto_SG_GET_RESERVED_SIZE(r5, 0x4c05, 0xfffffffffffffffd) syz_genetlink_get_family_id$auto_nl802154(&(0x7f00000001c0), 0xffffffffffffffff) mount$auto(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='nfs\x00', 0x1, &(0x7f00000001c0)) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ovs_ct_limit(&(0x7f0000000300), r6) 1m45.827265166s ago: executing program 7 (id=3398): r0 = openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mouse0\x00', 0x181502, 0x0) mmap$auto(0x0, 0x4000b, 0x7, 0x9b72, 0x7, 0x28000) socket(0x1e, 0xa, 0x8000000) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0xfffffffffffffffd, 0xb, 0xa, 0x40007fff, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x5e, 0x80000001, 0x7, 0x2, 0x93, 0x400000001, 0x2]}, 0x0) writev$auto(0x3, &(0x7f0000000080)={0x0, 0x1}, 0x3) unshare$auto(0x8000000) acct$auto(&(0x7f00000000c0)='/dev/input/mouse0\x00') open(&(0x7f0000000180)='./file0\x00', 0x161c00, 0x4) mmap$auto(0x0, 0x3, 0xdf, 0xeb1, 0x401, 0x8000) r1 = fcntl$auto_F_UNLCK(r0, 0x7, 0x2) syz_clone3(&(0x7f0000000100)={0x101045100, 0x0, 0x0, 0x0, {0x11}, 0x0, 0x0, 0x0, 0x0, 0x0, {r1}}, 0x58) 1m43.915636697s ago: executing program 7 (id=3402): syslog$auto_SYSLOG_ACTION_READ_CLEAR(0x4, 0x0, 0x100) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x80000000000000a, 0x2, 0x0) r0 = socket(0x2, 0x801, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @local}, 0x6a) getsockopt$auto(r0, 0x84, 0x6d, 0x0, &(0x7f0000000280)=0x1000c0) mknod$auto(0x0, 0x1001, 0x4) openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f0000000180)={0x80040, 0x40, 0xe}, 0x18) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8040) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) fanotify_init$auto(0x5, 0x2000000000002) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0x23, 0x80805, 0x2) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) bpf$auto(0x0, &(0x7f0000000040)=@bpf_attr_5={@target_ifindex=r2, 0x7f, 0x99, 0x8, 0x1, @relative_id=0x8, 0x5}, 0x92) bpf$auto(0x2, &(0x7f00000001c0)=@raw_tracepoint={0x5, 0xffff, 0x0, 0x3}, 0xc) bpf$auto(0x4, &(0x7f00000001c0)=@raw_tracepoint={0x5, r3, 0x0, 0x8000000000007}, 0x2) ioctl$auto(0xffffffffffffffff, 0x4008af03, 0x0) mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r4 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/pagemap\x00', 0x0, 0x0) readv$auto(r4, &(0x7f0000000400)={&(0x7f00000003c0), 0x40}, 0x6) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x2, 0xfdd0, 0x4, 0x2, 0x5) madvise$auto(0x0, 0xffefffffffff0005, 0x19) landlock_restrict_self$auto(0xffffffffffffffff, 0x4) 1m39.636895254s ago: executing program 7 (id=3405): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000140), 0x8f80, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) r3 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/fs/netfs/volumes\x00', 0x40080, 0x0) pread64$auto(r3, 0x0, 0x8100000041, 0x413e) mmap$auto(0x0, 0x20009, 0xe, 0xeb1, 0x403, 0x8000) setresuid$auto(0x0, 0x7, 0x8080) capset$auto(0x0, 0x0) capset$auto(0x0, 0x0) clock_nanosleep$auto(0xfffffff2, 0x5, 0x0, 0x0) mremap$auto(0x1ff000, 0x100005, 0x843, 0x3, 0x2) mremap$auto(0xfffff000, 0x4, 0x4, 0x7, 0x1001ff000) fsopen$auto(0x0, 0x1) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) waitid$auto_P_PIDFD(0x3, r1, &(0x7f0000000040)={@_si_pad}, 0x20f5, &(0x7f0000000440)={{0x0, 0x80}, {0x8, 0x3}, 0xc2, 0xfffffffffffffff1, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x101, 0x101, 0xfff, 0x3, 0x0, 0x7, 0xf0, 0xfffffffffffffffa}) madvise$auto(0x0, 0x2003f2, 0x15) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x4, 0x4000000000df, 0x78, 0x4, 0x300000000000) ptrace$auto(0x4206, 0x1, 0x100000000, 0xe855) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x182b02, 0x0) sendfile$auto(r4, r4, 0x0, 0x3) madvise$auto(0x0, 0xffffffffffff0005, 0x3) mmap$auto(0x0, 0x400009, 0xdf, 0x9b72, 0x8000000000000003, 0x8000) syslog$auto(0x3, &(0x7f0000000080)='..\x00k\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\x00\x80\x00\x00\x00\x00\x00\x00j<\v\xf47\n\xa7\xd2\x8b\x11e1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\xa1q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa2', 0x5) set_tid_address$auto(0x0) 1m31.663729876s ago: executing program 37 (id=3394): r0 = open(&(0x7f00000000c0)='./file0\x00', 0x22240, 0x0) r1 = openat$auto_uprobe_events_ops_trace_uprobe(0xffffffffffffff9c, &(0x7f00000009c0)='/sys/kernel/tracing/uprobe_events\x00', 0x302, 0x0) write$auto_uprobe_events_ops_trace_uprobe(r1, &(0x7f0000000000)="0a23b9", 0x3) r2 = socket(0x2, 0x1, 0x0) mmap$auto(0x0, 0x128009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x202000a, 0x5, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x15, 0x5, 0x0) openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, &(0x7f0000000140)='/dev/input/mice\x00', 0x22002, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) write$auto(0x3, 0x0, 0x100000000) r3 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x2, 0x4) bpf$auto(0xfffffffe, &(0x7f00000001c0)=@query={@target_ifindex, 0x200, 0x7, 0x0, 0x3ff, @prog_cnt=0x5, 0x0, 0x9, 0x7, 0xffffffffffffffff, 0x4}, 0x6f2) sendmsg$auto_ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="d4000000", @ANYRES16, @ANYBLOB="100027bd7000fbdbdf2518000000200001800247eea41fac000014000200766575683100000000000000000000000800f7ff62fbffff0500060001000000840002800000488013b37090badc49d6dc93876646d25a4d297d01cd3b7da38d12889cc50d505f353dc42d0a3c0a14c7b4642891070800360025d1cbce02df39e4dbbe5793d8cf1f978c7f08fa38bddecde4b3054ce3fec7c16047164dd4d018b1d02952631cabeee83e78d29c7dfc9c1c9b44de8a7d84fdb5841ace7660917bb90b30cec4264e7eba5dbac27510ea6b00b49e91be4c1e2c01792e97822d47bde056b748912ed562f7c258fa9dff1fb51b59cb752fe03e4b62c2229a5b7888a848e02adfc17cc67cf6e3579b8800458e9c8584d79d6ba42ced5a25815617c7f824a744717b57a4453ac25af63231ecc7e6fcdffa69ec4aad8afc49aa5637b396ebb4237a8f28f866b4d69b59ca9c26339f7019f4e0cfe7d950d3e569ab72a65767b4f8efb0dea51c50f702b00de5c12119a6491f9aa912a5707bab3fcfa140f1", @ANYRES32=0x0, @ANYBLOB="0400b3800000003d003b800400a4800c009a00008000000000000004008680c16ab1b1b39dcaa14b6af7dcc011b43cf706e562811c62b28a702b72e0a87126700294f2350000000c000180080003"], 0xd4}, 0x1, 0x0, 0x0, 0x20000010}, 0x20008000) sendmsg$auto_NL80211_CMD_GET_REG(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) r4 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_WOL_SET(r0, &(0x7f0000002cc0)={0x0, 0x0, &(0x7f0000002c80)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01"], 0x2c}, 0x1, 0x0, 0x0, 0x4801}, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) lseek$auto(0x3, 0x8fffd, 0x2) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="12"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) getsockopt$auto_SO_BUSY_POLL(r2, 0x6, 0x2e, 0x0, &(0x7f0000000280)) r5 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop6\x00', 0x40203, 0x0) ioctl$auto_SG_GET_RESERVED_SIZE(r5, 0x4c05, 0xfffffffffffffffd) syz_genetlink_get_family_id$auto_nl802154(&(0x7f00000001c0), 0xffffffffffffffff) mount$auto(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='nfs\x00', 0x1, &(0x7f00000001c0)) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ovs_ct_limit(&(0x7f0000000300), r6) 1m24.209005047s ago: executing program 38 (id=3405): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000140), 0x8f80, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) r3 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/fs/netfs/volumes\x00', 0x40080, 0x0) pread64$auto(r3, 0x0, 0x8100000041, 0x413e) mmap$auto(0x0, 0x20009, 0xe, 0xeb1, 0x403, 0x8000) setresuid$auto(0x0, 0x7, 0x8080) capset$auto(0x0, 0x0) capset$auto(0x0, 0x0) clock_nanosleep$auto(0xfffffff2, 0x5, 0x0, 0x0) mremap$auto(0x1ff000, 0x100005, 0x843, 0x3, 0x2) mremap$auto(0xfffff000, 0x4, 0x4, 0x7, 0x1001ff000) fsopen$auto(0x0, 0x1) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) waitid$auto_P_PIDFD(0x3, r1, &(0x7f0000000040)={@_si_pad}, 0x20f5, &(0x7f0000000440)={{0x0, 0x80}, {0x8, 0x3}, 0xc2, 0xfffffffffffffff1, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x101, 0x101, 0xfff, 0x3, 0x0, 0x7, 0xf0, 0xfffffffffffffffa}) madvise$auto(0x0, 0x2003f2, 0x15) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x4, 0x4000000000df, 0x78, 0x4, 0x300000000000) ptrace$auto(0x4206, 0x1, 0x100000000, 0xe855) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x182b02, 0x0) sendfile$auto(r4, r4, 0x0, 0x3) madvise$auto(0x0, 0xffffffffffff0005, 0x3) mmap$auto(0x0, 0x400009, 0xdf, 0x9b72, 0x8000000000000003, 0x8000) syslog$auto(0x3, &(0x7f0000000080)='..\x00k\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\x00\x80\x00\x00\x00\x00\x00\x00j<\v\xf47\n\xa7\xd2\x8b\x11e1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\xa1q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa2', 0x5) set_tid_address$auto(0x0) 25.022486638s ago: executing program 8 (id=3476): r0 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/keys\x00', 0x8340, 0x0) pread64$auto(r0, 0x0, 0x8, 0xfffd) mmap$auto(0x3, 0x20009, 0x10000, 0xeb1, r0, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) setsockopt$auto(0x3, 0x1, 0x23, 0x0, 0x9) setsockopt$auto(0x3, 0x1, 0x41, 0x0, 0x88) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) futex_wait$auto(0x0, 0x0, 0x83, 0x6, 0x0, 0x1c4c) futex_wake$auto(0x0, 0x7, 0xfffffffb, 0x2) r1 = openat$auto_proc_pid_numa_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000001200)='/proc/self/numa_maps\x00', 0x600082, 0x0) io_uring_register$auto_IORING_UNREGISTER_PBUF_RING(r1, 0x17, &(0x7f0000001240)="238a86faa39089dfe361f5c63d6b3948e9e347d2e1847e32172fa8e017e3f8b0a2c90a2a1818085e2fcaf878d68e93bd67e931fcc0840945cc7e7fb3038ee236b7f5570284aae254f3933fbb10315fc14b1998e360e79209269dcdfade3e14614c6aae96b67bfe895912849b495d80c2da231e9ddf083c44b8f04a62de23e55229cb744d74d1857f32a174f2ed005ec479602a760c84fb65ba640987bfac01a325aaddc58f77b2f3713df14707b9af0a152f7269a72f1af19a880498f16a02e5", 0xb9c) pselect6$auto(0x4, &(0x7f0000001300)={[0x52ef, 0x1000, 0x10, 0x9, 0x7, 0x8000, 0x6, 0x3, 0x2, 0x9, 0x3052f6a4, 0x0, 0x1, 0x9, 0x5, 0x7]}, &(0x7f0000000080)={[0x5, 0x6, 0x7f, 0x1c9b, 0x5, 0x7, 0x8, 0x6, 0x83f, 0x4, 0x1, 0x10001, 0x66, 0x2, 0x3, 0x9534]}, &(0x7f0000000100)={[0xfffffffffffffffc, 0x0, 0xe, 0x5, 0x8ad, 0x611, 0x2, 0x8, 0x2, 0x10000, 0x7, 0x77, 0x42, 0x7, 0x9, 0x9]}, &(0x7f0000000180)={0x8, 0x1ff}, &(0x7f00000001c0)="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") r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/system/clockevents/clockevent0/unbind_device\x00', 0x20001, 0x0) openat$auto_tracing_mark_raw_fops_trace(0xffffffffffffff9c, &(0x7f00000011c0)='/sys/kernel/tracing/trace_marker_raw\x00', 0x0, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f00000000c0)="78d8fa29bbc302028724d85da77481152a120012bd9d526eedd40d5b4f8a1389", 0x20) close_range$auto(0x2, 0x8, 0x0) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x10b402, 0x0) 23.557983197s ago: executing program 8 (id=3478): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sda\x00', 0x8001, 0x0) ioctl$auto(r0, 0x40081271, 0xffffffffffffffff) socket(0xa, 0x801, 0x106) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card1/pcm1p/sub4/sw_params\x00', 0x8c240, 0x0) write$auto_proc_reg_file_ops_compat_inode(r1, &(0x7f0000000040)="2b938be3988888974c1ea7926507efa4e3a08756f8c548157eca5081f8253f4bbb41c9da", 0x24) mmap$auto(0x0, 0xd, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_memtype_fops_memtype(0xffffffffffffff9c, &(0x7f0000000080), 0x90482, 0x0) setsockopt$auto(0x3, 0x0, 0x18, 0x0, 0x9) 22.621747788s ago: executing program 8 (id=3480): futimesat$auto(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$auto_ila(0x0, 0xffffffffffffffff) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) lsm_set_self_attr$auto(0x40004, &(0x7f00000004c0)={0x64, 0x8, 0x101}, 0x80, 0x0) r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x902, 0x0) r1 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000001940), 0x101000, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket(0xa, 0x801, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@l2={0x1f, 0x8, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x8}, 0x54) setsockopt$auto(0x3, 0x10000000084, 0xa, 0x0, 0x20) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/rpc/auth.unix.gid/flush\x00', 0x121000, 0x0) preadv$auto(r1, &(0x7f0000001a40)={0x0, 0x7d323aed}, 0x5, 0x4, 0x7) write$auto(r0, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x85) clone$auto(0x8, 0xb, 0x0, 0x0, 0x2) 19.165113965s ago: executing program 8 (id=3486): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) futex_wait$auto(0x0, 0x3f00, 0x83, 0x6, 0x0, 0x1c4c) futex_wake$auto(0x0, 0x7, 0xfffffffb, 0x2) close_range$auto(0x2, 0x8, 0x0) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x10b402, 0x0) 18.224676169s ago: executing program 8 (id=3487): r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) r1 = ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) mmap$auto(0x0, 0x2020009, 0x2, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r2 = open(&(0x7f0000000100)='.\x00', 0x595082, 0x0) write$auto(r2, 0x0, 0xfffffdf1) linkat$auto(r2, 0x0, 0xffffffffffffff9c, &(0x7f0000000080)='&&\x00', 0x1000) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0xc) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000005bc0), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_ABORT_SCAN(r3, &(0x7f0000005c80)={0x0, 0x0, &(0x7f0000005c40)={&(0x7f0000005c00)={0x20, r4, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x20000080) sendmsg$auto_NL80211_CMD_ABORT_SCAN(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000040)={&(0x7f0000000200)={0x68, r4, 0x8, 0x70bd2d, 0x25dfdbfc, {}, [@NL80211_ATTR_BSS_SELECT={0x3e, 0xe3, 0x0, 0x1, [@generic="e325320a5748e91044eeb1137ae7be5dd978cea6c6ba9462143eb3bddbf2cc6da14868bf841f00c4772751338bbc19fb581ce3cc3e0a148744d3"]}, @NL80211_ATTR_COLOR_CHANGE_ELEMS={0x10, 0x131, 0x0, 0x1, [@NL80211_ATTR_BSS_SELECT={0x4}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x6}]}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}]}, 0x68}}, 0x2400c088) socket(0x28, 0x1, 0x0) getpeername$auto(0x3, 0x0, 0x0) fsetxattr$auto(r2, &(0x7f0000000180)=':\xbf+<\x8a}\x00\xeb\xfa\xe6\x8d\x02\\VD\x04\x00\x00\x00*\x80\xa4\xf4vql\xa9\x05o\xf7\x9e\xfd\xf7\x00\x00\x00\x00H_/Z>n\xf5F\xbf\xd3\xefi\x91\x88\x1daIu7\xef!\xd0\x04\xdes\xfe`\xf5e;4\xbek\xf9\xec%\xbc\xd4\xfc`\xb9\n\xb5\xa5V\x98\x14]\x8a\x03\xd9', 0x0, 0x7bd, 0x1) mprotect$auto(0x0, 0x8000000000000001, 0x8) r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x7aa02, 0x0) ioctl$auto_KVM_CREATE_VM(r5, 0xae01, 0x0) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x182b02, 0x0) sendfile$auto(r6, r6, 0x0, 0x3) r7 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0C0F:00/status\x00', 0xa140, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r7, &(0x7f0000000140)=""/122, 0x7a) 15.389120835s ago: executing program 8 (id=3489): r0 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000140), 0xffffffffffffffff) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x3ff, 0x100000003, 0xd77, 0x7, 0x7181, 0x81, 0x7, 0x3, 0x9a89, 0x5, 0x80005, 0x800, 0x1fffffffffff, 0xb4, 0x3, 0x2, 0x10007, 0x80, 0xfffffffffffffffc, 0xe, 0xa, 0x22004, 0x200, 0x4, 0x84, 0x0, 0xffffffff, 0x0, 0x0, 0x1, [0x0, 0x0, 0xea4, 0x9cf, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x5, 0x0, 0x0, 0x100000000, 0x40000000000, 0x3, 0x4, 0x5, 0x80800, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0xcc, 0x4000000002, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3, 0x100000000]}, 0x1fe, 0xe) sendmsg$auto_NETDEV_CMD_QUEUE_GET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r0, @ANYBLOB="010025bd7000fbdbdf0002"], 0x1c}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x40814}, 0x2004c0c4) unshare$auto(0x40000080) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) read$auto(0xffffffffffffffff, 0x0, 0x1f40) unshare$auto(0x97) close_range$auto(0x2, 0x8, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop2\x00', 0x24040, 0x0) openat$auto_tracing_pipe_fops_trace(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe\x00', 0x20100, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) socket(0x2, 0x801, 0x6) memfd_secret$auto(0x0) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) 11.735517822s ago: executing program 9 (id=3492): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r0 = open(&(0x7f0000000100)='.\x00', 0x595082, 0x0) write$auto(r0, 0x0, 0xfffffdf1) linkat$auto(r0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080)='&&\x00', 0x1000) mmap$auto(0x0, 0x20009, 0xe3, 0x100000eb1, 0x40000000000a1, 0x8000) bpf$auto(0x0, &(0x7f0000000000)=@link_create={@map_fd, @target_fd, 0x4, 0x7, @bpf_attr_link_create_4_1={0x3, 0x3}}, 0x2) close_range$auto(0x2, 0x8000, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) ioctl$auto_KVM_GET_EMULATED_CPUID(r1, 0xc008ae09, &(0x7f0000000140)={0x3}) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x18, &(0x7f0000000000), 0x1) fsetxattr$auto(r0, &(0x7f0000000180)=':\xbf+<\x8a}\x00\xeb\xfa\xe6\x8d\x02\\VD\x04\x00\x00\x00*\x80\xa4\xf4vql\xa9\x05o\xf7\x9e\xbf\xd3\xefi\x91\x88\x1daIu7\xef!\xd0\x04\xdes\xfe`\xf5e;4\xbek\xf9\xec%\xbc\xd4\xfc`\xb9\n\xb5\xa5V\x98\x14]\x8a\x03\xd9', 0x0, 0xf710, 0x801) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/fs/cifs/SecurityFlags\x00', 0x101000, 0x0) read$auto_proc_reg_file_ops_compat_inode(r2, &(0x7f0000000080)=""/4096, 0x1000) mprotect$auto(0x0, 0x8000000000000001, 0x8) openat$auto_proc_mem_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/mem\x00', 0x40000, 0x0) 9.703038283s ago: executing program 9 (id=3495): socket$nl_generic(0x10, 0x3, 0x10) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/midiC2D3\x00', 0x20c00, 0x0) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x82040, 0x0) socket(0xa, 0x1, 0x100) modify_ldt$auto(0x1, 0x0, 0x10) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, 0x0, 0xc0000, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) wait4$auto(0x80000000, 0x0, 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) r0 = socket(0x2, 0x5, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0x2, 0x1, 0x84) setsockopt$auto(0x3, 0x10000000084, 0x81, 0x0, 0x8) setsockopt$auto(0x3, 0x84, 0x17, 0x0, 0x27) setsockopt$auto(0x3, 0x10000000084, 0x18, 0x0, 0x8) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x1a000}, 0x7, 0x0, 0x2, 0xb}, 0xfff}, 0x5, 0x311) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x2, 0x3) keyctl$auto(0x9, 0xfffffffffffffffd, 0x7ffffffffffffffb, 0x80000000000000b, 0x8000000000000000) sendmsg$auto_OVS_FLOW_CMD_GET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x200400f0}, 0x800) unshare$auto(0x8000000) semget$auto(0x0, 0x2e4a, 0x8000) semtimedop$auto(0x0, &(0x7f0000000000)={0x7, 0x9, 0x36ec}, 0x1f4, 0x0) unshare$auto(0x8000400) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/virtual/block/loop10/queue/add_random\x00', 0x80302, 0x0) 8.243115595s ago: executing program 3 (id=3497): mmap$auto(0x0, 0x3, 0x0, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/sound/ctl-led/speaker/mode\x00', 0x2a001, 0x0) write$auto(r0, &(0x7f0000000040)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) socket(0x10, 0x2, 0x14) (async) r1 = socket(0x11, 0x80003, 0x300) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_ovs_ct_limit(&(0x7f0000000fc0), r2) sendmsg$auto_OVS_CT_LIMIT_CMD_GET(r2, &(0x7f00000028c0)={0x0, 0x0, &(0x7f0000002880)={&(0x7f0000001100)={0x31c, r3, 0x41d, 0x70bd28, 0x25dfdbff, {}, [@OVS_CT_LIMIT_ATTR_ZONE_LIMIT={0x28, 0x1, 0x0, 0x1, [@nested={0x18, 0x1a, 0x0, 0x1, [@generic, @typed={0xd, 0x2f, 0x0, 0x0, @binary="eeeabdac6767fd8292"}, @nested={0x4, 0x26}]}, @typed={0xc, 0x3e, 0x0, 0x0, @u64=0xab2}]}, @OVS_CT_LIMIT_ATTR_ZONE_LIMIT={0x16d, 0x1, 0x0, 0x1, [@generic="5b819d2e3eff693a9678cb419da58f871687cc365554f44a8f55501516273e17b8117643195217d552d844af8e573b83a482f2c5f55d3413e0064c584df0da96a1c41a5590997f4d232226639b37f3129401a6a41feed7fd7529456dbe7e58026bfd22dc9a0d97179de85f9f21007d4153dd3b166113c8c966ab635755deefaa8d624eec6430596add4317c249b22afa592d647cb8b78027a46353871d4def902fabcd012146ebf0fc3beb7b061b5ebb0ade0afbc7e4409094c9d94c91e40c5a3ecd25484c", @typed={0x3d, 0x39, 0x0, 0x0, @binary="3e50e8f53746711c59a2de76aaca74159d80e0cad22953225490dd3d8bd9412356b66ca56fb046926f0aab27799275c6794490cc836b650638"}, @generic, @nested={0x4, 0x1c}, @generic="e3304c74c435f9f36c3d1617fed8b63d73835472591776d0d6d5b8b3dd0e2468ea6d75dcc7a7aadd32199eef6ee91668a4dc262815659c0308281772fe200747c973e38b223571845432dfe63b3cb4d0dad7e87efca3da87b80d9f99a9c15af2"]}, @OVS_CT_LIMIT_ATTR_ZONE_LIMIT={0x16f, 0x1, 0x0, 0x1, [@nested={0x84, 0x118, 0x0, 0x1, [@typed={0x8, 0xfb, 0x0, 0x0, @u32=0x6}, @nested={0x4, 0xb6}, @typed={0xc, 0x40, 0x0, 0x0, @u64=0x4e5b}, @generic="0db572f44408272cd2a306dd0f4f27d9cb1a25e50ca26f8391f49ef9b8c8b35e4290bdc4215273925f8344cbb412f61a8b8e7ed2a69bc01186ef75f15b093540bbdb2cd8866a15bc3239fddd1b4e98fb525cf9e636827008ec575079415b5dfd8e9492f2", @nested={0x4, 0xf2}]}, @nested={0xb5, 0x14e, 0x0, 0x1, [@typed={0x8, 0x126, 0x0, 0x0, @uid=0xee01}, @typed={0x8, 0xa2, 0x0, 0x0, @fd=r2}, @typed={0x4, 0x136}, @typed={0x8, 0x9, 0x0, 0x0, @fd=r2}, @typed={0x4, 0xe8}, @generic="4486c4c5f894c2d7a45d4d9c2c71911b9d8deab694b890df0804291512cc3f49c484d0603f23303472aafff7abda06a3f06556117ea12ec5d67d1a2ee00d53574dfc1ceaaa9549b46bc502c63afff562788b3a0f6820", @generic="5b38e3f04f5a903e41e92af6e39638d6e7fb87380795ddf6fc5914ba22c8759717c4893e94b85f1f811e7d286d5a5a957c457ed0342ce04b58a206"]}, @typed={0x8, 0xbf, 0x0, 0x0, @pid}, @generic="bffb563d466f9a86698d52475aa00bb0208ad50b511861", @typed={0x8, 0xdc, 0x0, 0x0, @pid}, @typed={0x8, 0x132, 0x0, 0x0, @u32=0xff}]}]}, 0x31c}, 0x1, 0x0, 0x0, 0x40400c1}, 0x4014) (async) r4 = socket(0x1d, 0x2, 0x7) sendmsg$auto_ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f0000001d80)={&(0x7f0000000040)=ANY=[@ANYBLOB="010027bd7000ffdb"], 0x28}, 0x1, 0x0, 0x0, 0x90}, 0x0) (async) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000003000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYRES8=r1, @ANYRES32=r1], 0x14}}, 0x4004850) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYRES8=r4], 0x1ac}}, 0x20008041) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4c084}, 0x51) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x2}, 0x3, 0x0) 7.590710489s ago: executing program 9 (id=3499): mkdir$auto(&(0x7f0000000080)='./file0\x00', 0x1) rmdir$auto(&(0x7f0000000280)='./file0\x00') mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/mm/transparent_hugepage/khugepaged/scan_sleep_millisecs\x00', 0xa0582, 0x0) write$auto(r0, 0x0, 0x8000002b3) 6.827370479s ago: executing program 3 (id=3500): mmap$auto(0x0, 0x20006, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) (async) bind$auto(0xffffffffffffffff, &(0x7f0000000040)=@llc={0x1a, 0x337, 0xc9, 0x1d, 0xff, 0x8, @local}, 0xbed) (async, rerun: 32) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0], 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x200000c4) (rerun: 32) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB='v'], 0x1ac}}, 0x40000) (async, rerun: 32) r0 = socket(0x200000000000011, 0x2, 0x0) (rerun: 32) ioctl$sock_SIOCGIFINDEX(r0, 0x89b0, &(0x7f0000000080)={'bond0\x00'}) r1 = syz_genetlink_get_family_id$auto_smc_pnetid(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$auto_SMC_PNETID_GET(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000300)={0x74, r1, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, '\xaa\xaa\xaa\xaa\xaa'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBNAME={0x5, 0x3, '\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, '\xaa\xaa\xaa\xaa\xaa'}, @SMC_PNETID_IBNAME={0x9, 0x3, '\xaa\xaa\xaa\xaa\xaa'}, @SMC_PNETID_NAME={0x9, 0x1, '\xaa\xaa\xaa\xaa\xaa'}, @SMC_PNETID_ETHNAME={0x6, 0x2, '$\x00'}, @SMC_PNETID_ETHNAME={0x9, 0x2, '\xaa\xaa\xaa\xaa\xaa'}, @SMC_PNETID_IBNAME={0xa, 0x3, '$\xa7--^\x00'}]}, 0x74}, 0x1, 0x0, 0x0, 0x10}, 0x8000) r2 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r2, &(0x7f0000000080)={{0x0, 0x8002, &(0x7f00000002c0)={0x0, 0xc4}, 0x2, 0x0, 0x6, 0x1}, 0x5}, 0x3, 0x8) 6.753782839s ago: executing program 9 (id=3501): mmap$auto(0x0, 0x1, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) r0 = socket(0x10, 0x2, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/pid_for_children\x00') sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4010}, 0x51) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a00"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) recvmmsg$auto(r0, &(0x7f0000000100)={{0x0, 0x4, &(0x7f0000000080)={&(0x7f0000000040), 0xcb}, 0x3, 0x0, 0x80000000, 0x6}, 0x9}, 0x7, 0x6, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty12\x00', 0x800, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4004810}, 0x804) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="180027"], 0x1ac}}, 0x40000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000000c0), r2) sendmsg$auto_NL80211_CMD_SET_SAR_SPECS(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000280)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002bbd7000fbdbdf258c00000008000100000000000c0099000100000002"], 0x28}, 0x1, 0x0, 0x0, 0x400c080}, 0x44) sendmsg$auto_NL80211_CMD_UPDATE_OWE_INFO(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x2c, r3, 0x400, 0x70bd26, 0x25dfdbff, {}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x3}, @NL80211_ATTR_PUNCT_BITMAP={0x8, 0x142, 0x5}, @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x4000000) read$auto_blk_mq_debugfs_fops_blk_mq_debugfs(r1, &(0x7f0000000140)=""/61, 0x3d) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc8}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x1f1e) 5.920251809s ago: executing program 3 (id=3502): r0 = socket(0x10, 0x2, 0x0) r1 = syz_genetlink_get_family_id$auto_nlbl_unlbl(&(0x7f0000000080), r0) sendmsg$auto_NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000340)={0x118, r1, 0x8, 0x70bd26, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @remote}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @NLBL_UNLABEL_A_SECCTX={0xd5, 0x7, "016775d55eb093189d5640ca675c86eb9ed90bebdce3943d9e27dc750f4f441658afa2a9708757b34a459a3b15e32426ace955a9d0db8231a67176e376e39db0683ef44db96b9ef9f6a306aab1f10d0bdd7bdb9d630c9ab2529a22914ee25bdac5e0a710bee525baeb19cb9da87a4bdf2b620253bc3515c49469064d97fd140ff8b0863fff8dc79f93caa891b427f5dbcc3db7fb6ea2edf189dc1787cb74cce6f988f238420b6fa361633bb671461c7224f0f0f02de315f352016f3b9d443bbb58ce5fcdd2c99e104af8e63b5419435fee"}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast2}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @rand_addr=0x64010100}]}, 0x118}, 0x1, 0x0, 0x0, 0x20080050}, 0x80) r2 = signalfd4$auto(0xffffffff, 0x0, 0x8, 0x0) read$auto(r2, 0x0, 0x80000000006) signalfd$auto(r2, 0x0, 0x8) ioctl$auto_XFS_IOC_PATH_TO_HANDLE(r2, 0xc0385869, &(0x7f0000000280)={r0, &(0x7f0000000180)="6c73f7374b3d22d208671f63a1260225181412f43d2e89bdad141d71d6ab6c3e32b6cc6a015b2c3cbbe2c4b4d96149e6d5f0399d298f471a0427088f9c71", 0x0, &(0x7f0000000480)="2a0e02ab69acfef636618517c7ca3cae13959afcef549018b6748f35977d45967c4a3fc8a029a655c7276b35874657d79d3a3d23a871044e73740f70088ace8f7737cec6a39565207fd3678ecd1d23b40d1294ecb0542689dbf9ea5a74ef38836db4225fc3c7faf3ab9ec5c9f8ef1f42b177d305a6c1426103981a0485e5a9e02cad70369234ad0b7d52291a059905befe03b814e8a833b89230f09a4ac9daf7a48ef773530540086db4bf0c4ebf85957d5dcc46a0358f49e084666be0f51b382dfe1174d81ed7740bd218907c697f43ba6b804694494e641c9472", 0x9, &(0x7f0000000580)="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", &(0x7f00000001c0)=0x81}) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB="13000000", @ANYBLOB='N\x00\''], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40000) sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x4008) 5.468273787s ago: executing program 9 (id=3504): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/bus/usb/013/001\x00', 0xa901, 0x0) ioctl$auto_USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f00000002c0)={0x2, 0x80, 0xffff, 0x5, &(0x7f0000000380)="d17ff256258d1c", 0xc694, 0x3, 0x80005, @stream_id=0x10000, 0x2004b, 0x471, 0x0}) close_range$auto(0x2, 0x8, 0x0) syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000080), r0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) readv$auto(0x3, 0x0, 0x1da) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) ioctl$auto_SCSI_IOCTL_SEND_COMMAND2(0xffffffffffffffff, 0x1, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/virtual/block/ram9/diskseq\x00', 0x0, 0x0) read$auto(r3, 0x0, 0x20) writev$auto(r2, &(0x7f0000000200)={0x0, 0x7}, 0x3) read$auto_fops_x64_ro_(0xffffffffffffffff, 0x0, 0x0) signalfd$auto(r2, 0x0, 0xb071) process_vm_readv$auto(0x0, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000040), 0xffffffff}, 0x6, 0x0) process_vm_readv$auto(0x0, &(0x7f0000000140)={&(0x7f00000003c0)="20a09865132e212d9574443f8f996779ae14241e5051f82823abe46636e90f84f6d6c24dcd66ff35ef1b49ee2cad0085c51a5ea38fe9b6c5e0e2caf9fa0129bd32f5d40dca5373c7140e19b84d2a93b3ae90bd567524e8cd174b29675202373d5e51331dc30521bf7cf2c3d4b0e90c8c8ba02f7a8f5b125b43514356bff2846efeb2622709635924f59be63020a471de905238a580a408db76f0b06d956e2ba609f23621554d0ba0378090a86a80b62cd2aead388ce812ef3be9439ed797f6cf0498891ba6e647a0aade533a98ada016a49ca23727bf14581aab0060308815d7811d7aa5", 0x1}, 0x2, &(0x7f0000000180)={&(0x7f00000004c0)="3587c817da58fc153b4f11b1cf80ae5f98c4112c7493c392c219828b5a9ef692c6ce5029544dc8c69354b3a7a64a1b087f57b170c9c6fb32b58355c26512c4af46d783d22753de08b940ed63d5d1566631deb284cbbebddc0f40ce2633d312cef8", 0x200}, 0x8, 0x0) setresuid$auto(0x2, 0x7, 0x8080) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r4 = socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) close_range$auto(r4, r4, 0x0) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) r5 = open(&(0x7f0000000100)='.\x00', 0x0, 0x57e) fcntl$auto_F_ADD_SEALS(r5, 0x410, 0x0) r6 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/scsi/sg/device_strs\x00', 0x80, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x50, r8, 0x1b, 0x70bd26, 0x25dfdbfd, {}, [@OVS_PACKET_ATTR_PROBE={0x4}, @OVS_PACKET_ATTR_ACTIONS={0x20, 0x3, 0x0, 0x1, [@nested={0x1c, 0xb, 0x0, 0x1, [@nested={0x4, 0x3}, @typed={0x14, 0xa1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @loopback}}]}]}, @OVS_PACKET_ATTR_PACKET={0x12, 0x1, "898771f1c19f17790485908286dd"}, @OVS_PACKET_ATTR_KEY={0x4}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000050}, 0xc800) clone$auto(0x6, 0x78, &(0x7f0000000000)=0x4000000f, &(0x7f00000000c0)=0x800, 0x7) read$auto_proc_iter_file_ops_compat_inode(r6, &(0x7f0000000280)=""/238, 0xee) 5.397577099s ago: executing program 3 (id=3505): mmap$auto(0x0, 0x10005, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) socket(0x5, 0x2, 0x0) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x50) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, 0x0, 0x801, 0x0) r1 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0xc, 0x9, 0x4fe, 0x1, 0x5, 0x40004, 0x2, 0xc000, 0x9, 0x100000000000000c, 0x8, 0x1, 0xfca, 0x5, 0x2, 0x4000000000000d]}, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) getsockopt$auto_SO_RCVMARK(r0, 0x0, 0x4b, 0x0, 0x0) sendto$auto(r1, &(0x7f0000000140)="c99b97a4a18833a72aff5c6edec12838e6c36aa3b8efa7e23eab4f993ce66256c3ee1fa1470cc34d0844ef66ea5db21196afca7b6062c22e25bd38ff3a8ffce75c51cd146c42cece3a3c2eb0447313f733c79892b36978f22e11d89e044a5b7bc7cdd5b31fdb70dc8e1742fcffaaf5320703e7538d2d3b504ec3a67c52bf6efbf9e534702706e6a69a3fede118ad99154fc7e5e32bfbee8042e6352c285efc95675ed362f8255371c3422c3232332f10f51ccf72cabaf2fe303f88bf7d5b99b4c4139c4450af0df371", 0x0, 0x1e71, &(0x7f0000000000)=@can, 0x2) mmap$auto(0x0, 0x40009, 0x36, 0x9b72, 0x7, 0x28000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x6, 0x0) mlockall$auto(0x7) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000000), r2) sendmsg$auto_ETHTOOL_MSG_PLCA_GET_CFG(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000008c995e2a716091ecc2b57dc523dee8b49f85ce46c69fb4d9776ab0e638616830f762c9729cad476d05f57a7f87f77b9aa056b88ad1d95874f6cac95ad3ee81065a8041910034a9e2da00439c6967d7416c5e533bcccd75457e425ef8a9a1ed84c29fcd0000000000000000", @ANYRES16=r3, @ANYBLOB="01030500000000e3da2d27002522"], 0x14}, 0x1, 0x0, 0x0, 0x885}, 0x8008040) ioctl$auto_TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, &(0x7f0000000000)=0x2) mmap$auto(0x200000029, 0x100000000006, 0x8, 0xfe, r0, 0x4) open(&(0x7f0000000040)='./file0\x00', 0x149443, 0x0) bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x2, 0x4, 0x3, 0x2, 0x8, 0xc, 0xe3, 0x400000000a, 0x3}, 0x6f6) mount$auto(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='nfs\x00\x00', 0x200, &(0x7f00000001c0)) r4 = ioctl$auto_NS_GET_PID_FROM_PIDNS(0xffffffffffffffff, 0x8004b706, &(0x7f0000000040)=0x9f0) ioctl$auto_CEC_ADAP_S_PHYS_ADDR(r4, 0x40026102, &(0x7f0000000100)) sendmmsg$auto(0xffffffffffffffff, 0x0, 0x1, 0x9) mmap$auto(0x0, 0x6, 0xdf, 0x10, 0x405, 0x8000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) 4.536437097s ago: executing program 5 (id=3506): mmap$auto(0x0, 0x3, 0xdf, 0x9b72, 0x2, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mknod$auto(&(0x7f0000000040)='\xfd\x90\x8f2\x14\x92\x00\xbf\xdf\xcf\x9a\xae}\xd9\xf95\xc5gV\x82\f\xe5h\xfe\x83\xe4\xbe\x8c\x1f\xa5\xf1_T\xde\xf7\xd4\x83D\x9eXS\xd6\x90T\xc1v\xad#\xc4q\x8b\xed2\xadW:0\xef\x9c.=\xba\x0fy\x8f\xcd\xd6\xde\xa9i\xec\xe8\xca\x9f\xf3\x82b\xa2y\xa87J\xfc \xc5\xd8\x80\xba\xaaV\x8f{\x1f\x1b\xb0\n\x97\\\xa7\xe3\xdf\xc29-*;#r\xc8\xd1\x14RcF\x87\xe4\x1c\x1fGL\xa5\x19\x90\xd6\x8d*\xe6\b(\x1a\xea\x95\xdc\xa6)5\xae&yAl\x1e\xe3j Lp\x91\r\xed%\xafZ\xf8w\xf2}\xcdGS\xce\xb9\xdck\x86\x00.6\xe6{\xc1\x00\x1bW5\x81\xda!\xcb.O\xa9\xf3\xa7\x88+\xb9\xf3\x9a7\xa4\xe6)<\xa79\xa4\x87\\\xb4\xbf\v\x03\x87\xac\x87r\x02\x05\xdb\xe4\xde,V\xb6G\xba.WR\xe2<~\xdd\xb2\xe53hj_;\xa5qm\x92\xc7P\xc9.\x82w8\x1f\xfcX\xe4\x14\xc72cC\xd3\x00'/263, 0x1, 0x4) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x300, 0x0) link$auto(&(0x7f0000000940)='\xfd\x90\x8f2\x14\x92\x00\xbf\xdf\xcf\x9a\xae}\xd9\xf95\xc5gV\x82\f\xe5h\xfe\x83\xe4\xbe\x8c\x1f\xa5\xf1_T\xde\xf7\xd4\x83D\x9eXS\xd6\x90T\xc1v\xad#\xc4q\x8b\xed2DW:0\xef\x9c.=\xba\x0fy\x8f\xcd\xea\xa5\xff \xec\xe8\xca\xbf\xf3\x82b\xa2y\xa87J\xfc \xc5\xd8\x80\xba\xaaV\x8f{\x1f\v\xb0\n\x97\\\xa7\xe3\xdf\xc29-*;#r\xc8\xd1\x14RcF\x87\xe4\x1c\x1fGL\xa5\x19\x90\xd6\x8d*\xe6\b(\x1a\xea\x95\xdc\xa6)5\xae&yAl\x1e\xe3j Lp\x91\r\xed%\xafZ\xf8w\xf2}\xcdGS\xce\xb9\xdck\x86\x00.6\xe6{\xc1\x00\x1bW5\x81\xda!\xcb.O\xa9\xf3\xa7\x88+\xb9\xf3\x9a7\xa4\xe6)<\xa79\xa4N\xbb\xc2\xf8\x9c\xd0+t\x87r\x02\x05\xdb\xe4\xde\xed\x02\x00\x00\xba.WR\xe2<~\xdd\xb2\xe53hj_;\xa5qm\x92\xc7P\xc9.\x82w8\x1f\xfcX\xe4\x14\xc72cC\xd3\x00M\x83\xdb\xaf\xc4\xf23l\xae\xc5\x1d\xc4\xb0\x06\xd06\x1dX\x03\xe3\x9e\xd3\xd96\xcf\xd9\xa3\xcb\xd6B\xc3\x0f#\xd2\x1a\xf9L\xf5\x87My\xce\x19*\xde\x8d+#\x13\x15\xd3Y\x98\xe1\xc3@\x0e\x9c\xc2\xf8\b\xaf\x89\xe5\x00\x89-pWD\xb5&\xc9\x8e\x8d,\xb7}1\x84U\x18y\xa90\xf5\x80\x981U\x17\x14]\xc56j\xe7\x0e\xecBr\xa9]\"\xd36^m\x12\xb6\xbc\x80\xa4h{\xde\xcf\xf7d\x87rl\x11\xf7\x15\xcb~\xb9\x01\x0e\xd7O_\x91\xe1\xead\xee\xed]/p\xd6\xff\x17\xe4\aV\"I\xca\x90\xc7i\'\xa3R\x81\xf1}4\xbeU\x00\xa4\x1d\xea!Z\xd4|\xbe\x987\n!\x9b?\xb9l_\xd8$av\xfe%\xa2\xda\x82\x14\xc311;\xa4ob\x87\xdbY\xe2\x00', &(0x7f0000000b40)='./file0\x00') rename$auto(&(0x7f0000000180)='\xfd\x90\x8f2\x14\x92\x00\xbf\xdf\xcf\x9a\xae}\xd9\xf95\xc5gV\x82\f\xe5h\xfe\x83\xe4\xbe\x8c\x1f\xa5\xf1_T\xde\xf7\xd4\x83D\x9eXS\xd6\x90T\xc1v\xad#\xc4q\x8b\xed2\xadW:0\xef\x9c.=\xba\x0fy\x8f\xcd\xd6\xde\xa9i\xec\xe8\xca\x9f\xf3\x82b\xa2y\xa87J\xfc \xc5\xd8\x80\xba\xaaV\x8f{\x1f\x1b\xb0\n\x97\\\xa7\xe3\xdf\xc29-*;#r\xc8\xd1\x14RcF\x87\xe4\x1c\x1fGL\xa5\x19\x90\xd6\x8d*\xe6\b(\x1a\xea\x95\xdc\xa6)5\xae&yAl\x1e\xe3j Lp\x91\r\xed%\xafZ\xf8w\xf2}\xcdGS\xce\xb9\xdck\x86\x00.6\xe6{\xc1\x00\x1bW5\x81\xda!\xcb.O\xa9\xf3\xa7\x88+\xb9\xf3\x9a7\xa4\xe6)<\xa79\xa4\x87\\\xb4\xbf\v\x03\x87\xac\x87r\x02\x05\xdb\xe4\xde,V\xb6G\xba.WR\xe2<~\xdd\xb2\xe53hj_;\xa5qm\x92\xc7P\xc9.\x82w8\x1f\xfcX\xe4\x14\xc72cC\xd3/file0\x00', &(0x7f00000002c0)='\xfd\x90\x8f2\x14\x92\x00\xbf\xdf\xcf\x9a\xae}\xd9\xf95\xc5gV\x82\f\xe5h\xfe\x83\xe4\xbe\x8c\x1f\xa5\xf1_T\xde\xf7\xd4\x83D\x9eXS\xd6\x90T\xc1v\xad#\xc4q\x8b\xed2\xadW:0\xef\x9c.=\xba\x0fy\x8f\xcd\xd6\xde\xa9i\xec\xe8\xca\x9f\xf3\x82b\xa2y\xa87J\xfc \xc5\xd8\x80\xba\xaaV\x8f{\x1f\x1b\xb0\n\x97\\\xa7\xe3\xdf\xc29-*;#r\xc8\xd1\x14RcF\x87\xe4\x1c\x1fGL\xa5\x19\x90\xd6\x8d*\xe6\b(\x1a\xea\x95\xdc\xa6)5\xae&yAl\x1e\xe3j Lp\x91\r\xed%\xafZ\xf8w\xf2}\xcdGS\xce\xb9\xdck\x86\x00.6\xe6{\xc1\x00\x1bW5\x81\xda!\xcb.O\xa9\xf3\xa7\x88+\xb9\xf3\x9a7\xa4\xe6)<\xa79\xa4\x87\\\xb4\xbf\v\x03\x87\xac\x87r\x02\x05\xdb\xe4\xde,V\xb6G\xba.WR\xe2<~\xdd\xb2\xe53hj_;\xa5qm\x92\xc7P\xc9.\x82w8\x1f\xfcX\xe4\x14\xc72cC\xd3\x00') 4.352101576s ago: executing program 5 (id=3507): close_range$auto(0x2, 0x8, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x204880, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000280), 0x101200, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) ioctl$auto(0x4000000000000c8, 0x400454d9, 0x3) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r1) ioctl$auto_KVM_GET_MSRS(r0, 0x4008ae90, &(0x7f0000000000)={0x0, 0x0, [{0x0, 0x7ff, 0x786}, {0x0, 0xfffffffd, 0x7}, {0xeb61, 0x8e, 0x8000000000000001}, {0x7, 0xa0e8, 0x8}, {0x9, 0x0, 0x7fff}]}) 3.539131061s ago: executing program 3 (id=3508): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000006c0)='/sys/devices/platform/i8042/serio0/softraw\x00', 0x141042, 0x0) (async) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/event2\x00', 0x4000, 0x0) (async) r1 = socket(0x10, 0x2, 0x0) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="1c000000", @ANYBLOB='*\x00%'], 0x1ac}, 0x1, 0x0, 0x0, 0x40814}, 0x2004c0c4) (async) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/vivid/parameters/vid_cap_nr\x00', 0x2a380, 0x0) r3 = open(&(0x7f0000000140)='./file0\x00', 0x2ca580, 0x14) (async) read$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f00000022c0)=""/37, 0x25) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) wait4$auto(0x0, &(0x7f0000000040)=0x8, 0x6, &(0x7f0000000080)={{0x9, 0x6}, {0x7f, 0x5}, 0x100000000, 0xcef4, 0x2, 0x2, 0x5, 0x9, 0x3, 0xffffffff, 0x10, 0x7fff, 0x4, 0x65, 0x8000000000000001, 0x3}) (async) madvise$auto(0x0, 0xffffffffffff0005, 0x19) openat$auto_ftrace_set_event_pid_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/set_event_pid\x00', 0xa0241, 0x0) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) (async) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000200)={{@inferred, 0x1, 0x1, 0x81, "3112d585005a614d19e22af9ffb683dbede3d0bf828bbfba40f035f4be6b7fe5e2f94bd90484b0755015e48d"}, 0x401, 0x5, 0x4, @inferred, @integer={0xdbe, 0x255, 0x8}, "7a9fc199a16a2311eacf2fc7ae1d8778dc618090334fdd73340238d21000debe0eda71bdd709254592b67f9cb5adb17884a16f7ce8cbce0bb32791702b8d7c2d"}) close_range$auto(0x2, 0x8, 0x0) (async) io_uring_setup$auto(0x80000059, &(0x7f0000000640)={0x0, 0x1d, 0x3800, 0x2, 0x7, 0x400a, r0, [0x0, 0x0, 0x736], {0x8, 0x6, 0x8c48, 0x29b, 0xc6be, 0xfb, 0x0, 0x5, 0x400}, {0x100, 0x20001, 0x52, 0x85, 0x5, 0x0, 0x2072c2, 0xa, 0x100000000}}) (async) io_uring_register$auto(0x2, 0x20, &(0x7f0000000240), 0x1) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) (async) madvise$auto(0x0, 0xffffffffffff0001, 0x15) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) mseal$auto(0x0, 0x7dda, 0x0) (async) madvise$auto(0x0, 0x3, 0x3) (async) writev$auto(0xffffffffffffffff, 0x0, 0x6) (async) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) (async) r4 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000000180), 0x1541, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0xf, 0xfffffffd, 0x44b, 0x3, 0x5, 0x1007181, 0xd1, 0x400007, 0x3, 0x2, 0x800c, 0x80000001, 0x4, 0x80200000000001, 0x200000004, 0xde3, 0x9809588, 0xfffffffd, 0x2, 0x1, 0x864, 0x6, 0x22000, 0x201, 0x4, 0xc3f, 0x2000000, 0x0, 0x0, 0x0, 0x39, [0x0, 0x0, 0x0, 0x7fdf, 0x47, 0x4000000000000, 0x100, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x7cd, 0x7, 0x2, 0x8000000000000, 0x0, 0xa, 0x0, 0x0, 0x0, 0x80000000, 0x4, 0x4, 0x4, 0x0, 0x0, 0x0, 0x4000000000000000, 0x0, 0x0, 0x6, 0x7fe, 0x0, 0x0, 0x1, 0x0, 0xfff]}, 0xa, 0xd) (async) openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, 0x0, 0x1441, 0x0) (async) ioctl$auto__ctl_fops_dm_ioctl(r4, 0x3, &(0x7f0000000400)) sendmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0x2, &(0x7f0000000100)={&(0x7f0000000380)="af155d63a0996d8db279d2dac307e20086469c10c5f144bbd02b5132f538dab85065851a746f3824d1a13f58990974f0534b383bcde59c1ff8816a6812aaeefd8cd80c19210755168caca2e25deb303c068cfca3968fbbba42ed6251017e202d", 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x400b) ioctl$auto_VHOST_SET_VRING_ERR(r3, 0x4008af22, &(0x7f0000000180)={0x5, r2}) 2.710289704s ago: executing program 5 (id=3509): r0 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/scsi/sg/devices\x00', 0xa502, 0x0) read$auto_proc_iter_file_ops_compat_inode(r0, &(0x7f00000001c0)=""/213, 0xd5) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) setsockopt$auto(0x3, 0x10000000084, 0x72, 0x0, 0xc) 2.320364469s ago: executing program 9 (id=3510): sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$', @ANYRES16=0x0, @ANYBLOB="00211459a600fbdbdf250200000008000300000000001b00"], 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0xc0) futex_requeue$auto(0x0, 0x0, 0xf, 0x9) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) r0 = socket(0x10, 0x2, 0x4) mmap$auto(0x0, 0xe883, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_HWSIM_CMD_DEL_RADIO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="01eb"], 0x14}}, 0x24004000) bpf$auto(0x3, &(0x7f00000001c0)=@task_fd_query={0x0, 0xffffffffffffffff, 0x8, 0x10035, 0x80208000008, 0x2, r0, 0x20000000000803}, 0x6f0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1200"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) r1 = socket(0x2, 0x2, 0x0) socket(0x2, 0x5, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop1\x00', 0x200, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x2000000008000) r2 = socket(0xa, 0x2, 0x0) socket(0x1d, 0x2, 0x6) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/fs/netfs/cookies\x00', 0xd00, 0x0) socketpair$auto(0x10000005, 0x2, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8000, 0x0) socket(0x18, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000280), 0x101000, 0x0) ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r2) ioctl$auto_KVM_CREATE_VM(r3, 0x4048aecb, 0x0) getsockopt$auto_SO_LOCK_FILTER(r1, 0xd, 0x2c, 0x0, &(0x7f0000000000)=0x5) bind$auto(0x3, 0x0, 0x6a) 2.271450479s ago: executing program 3 (id=3511): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(0x0, r0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80802, 0x0) r1 = socket(0x2b, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @loopback}, 0x6a) sendmmsg$auto(r1, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, 0x0, 0x9, 0x0, 0x1f, 0x9}, 0x800009}, 0x7, 0x20000000) io_uring_setup$auto(0x6, 0x0) setsockopt$auto(0x3, 0x1, 0x2f, 0x0, 0x9) setsockopt$auto(0x3, 0x1, 0x21, 0x0, 0x9) write$auto(0x3, 0x0, 0xfffffdef) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x1c2, 0x0, 0xfffffffffffffffd) mmap$auto(0xffffffffffffffff, 0x20005, 0x1ff, 0xeb1, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x2020008, 0xffffffffffffffff, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) unshare$auto(0x40000080) syz_genetlink_get_family_id$auto_l2tp(0x0, 0xffffffffffffffff) madvise$auto(0x0, 0x2049a0, 0x9) connect$auto(0x3, 0x0, 0x54) 2.245251109s ago: executing program 5 (id=3512): r0 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x100) fcntl$auto(r1, 0x400, 0x0) write$auto_msft_opcode_fops_(r1, &(0x7f0000000080)="424171dab84523850defb75c74ced6f9c00b420e0371af0f3b92016724b2af04e7c7b0470c3263664ca7f88cfc90ed53a328e62a5d2f605dcfeff59f2a3eb868b652a07ea825b57e66092e00564aeef2f9708f598c95042f32acdf2462", 0x5d) ioctl$auto_VHOST_SET_OWNER(r0, 0xaf01, 0x5) ioctl$auto(r0, 0x4001af84, 0xffffffffffffffff) 1.680929893s ago: executing program 5 (id=3513): r0 = ioctl$auto_NS_GET_MNTNS_ID(0xffffffffffffffff, 0x8008b705, &(0x7f0000000100)=0x5) sendmsg$auto_NL80211_CMD_GET_MPP(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="b0000000", @ANYRES16=0x0, @ANYBLOB="00012bbd7000ffdbdf256b00000004008e000400bf0008007e00040000000500a300080000000500f6001500000072004e018759af563b8acdcb33f867ae876c1dd44817b197abd69708b5fe2911a130b9f39b24345d8980d7e36b9301f12bd5c9602396b1476d2090e8a5d0721563d928a6b3cd266524640ef708a8b3c79fb2154da6928f2862a423def05587a017a008aa04f1311bfd7229cda0cd88c8bc0600"/170], 0xb0}, 0x1, 0x0, 0x0, 0x20000010}, 0x4004004) (async) r1 = openat$auto_mISDN_fops_timerdev(0xffffffffffffff9c, &(0x7f00000004c0), 0x113440, 0x0) writev$auto(r1, &(0x7f0000000440)={&(0x7f00000003c0)="7c481a561d48b3a7fc33821ae951b170ce1a88f0109ff0e91f6c9aaabf6df3a7c61b6ac7a8cdca7bb9077e63b094b7248003009e30135afeb5cd8c0e40f11b18f4516474d9522437de04860bb5ca307ec743a286019edb7d9b3f4bf0", 0xfffffffffffff800}, 0x75293ba0) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) socket(0x10, 0x2, 0x0) (async) r2 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="1b0026bd7000fddbdf2503000000040008001400038010000c800c00038008000600", @ANYRES32=r2, @ANYBLOB="1200010089"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0xc800) (async) sendmsg$auto_TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="01002dbd7000fded6a7a28"], 0x14}, 0x1, 0x0, 0x0, 0x4000010}, 0xc050) (async) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c00000014"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000) (async) r4 = socket(0x10, 0x2, 0x4) write$auto(r4, &(0x7f0000000000)='\x16\x00', 0x2fb) (async) r5 = open(&(0x7f0000000080)='.\x00', 0x518282, 0x78e22799f4a46e8e) fchown$auto(r5, 0xff, 0x5) (async) fcntl$auto(r5, 0x4, 0xfffffffffffffff9) (async) sendmsg$auto_NETDEV_CMD_QUEUE_GET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000003000)={&(0x7f0000000040)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01002cbd7000fbdbdf250a00000808000300000000000800010000000000080002"], 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x20008810) (async) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c51d50e", @ANYRES16=0x0, @ANYRESOCT=r3], 0x24}, 0x1, 0x0, 0x0, 0x20008010}, 0x0) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a0027"], 0x1ac}}, 0x40000) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r6 = openat$auto_proc_environ_operations_base(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/environ\x00', 0x88f80, 0x0) readv$auto(r6, &(0x7f0000001780)={0x0, 0x400}, 0x7f) (async) socket(0x2, 0x80002, 0x73) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x7}, 0xa}, 0x3, 0x0) 791.530333ms ago: executing program 5 (id=3514): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x20342, 0x0) r1 = socket(0x21, 0x4, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x80044943, 0x0) ioctl$auto_SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, 0x0) write$auto(0x3, 0x0, 0xffd8) ioctl$auto_SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) 0s ago: executing program 39 (id=3489): r0 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000140), 0xffffffffffffffff) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x3ff, 0x100000003, 0xd77, 0x7, 0x7181, 0x81, 0x7, 0x3, 0x9a89, 0x5, 0x80005, 0x800, 0x1fffffffffff, 0xb4, 0x3, 0x2, 0x10007, 0x80, 0xfffffffffffffffc, 0xe, 0xa, 0x22004, 0x200, 0x4, 0x84, 0x0, 0xffffffff, 0x0, 0x0, 0x1, [0x0, 0x0, 0xea4, 0x9cf, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x5, 0x0, 0x0, 0x100000000, 0x40000000000, 0x3, 0x4, 0x5, 0x80800, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0xcc, 0x4000000002, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3, 0x100000000]}, 0x1fe, 0xe) sendmsg$auto_NETDEV_CMD_QUEUE_GET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r0, @ANYBLOB="010025bd7000fbdbdf0002"], 0x1c}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x40814}, 0x2004c0c4) unshare$auto(0x40000080) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) read$auto(0xffffffffffffffff, 0x0, 0x1f40) unshare$auto(0x97) close_range$auto(0x2, 0x8, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop2\x00', 0x24040, 0x0) openat$auto_tracing_pipe_fops_trace(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe\x00', 0x20100, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) socket(0x2, 0x801, 0x6) memfd_secret$auto(0x0) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) kernel console output (not intermixed with test programs): call_usermodehelper_setup+0xaf/0x360 [ 640.978552][T19186] ? __pfx_free_modprobe_argv+0x10/0x10 [ 640.978571][T19186] call_usermodehelper_setup+0xaf/0x360 [ 640.978594][T19186] __request_module+0x3c7/0x6c0 [ 640.978613][T19186] ? __pfx___request_module+0x10/0x10 [ 640.978636][T19186] ? __get_fs_type+0x12c/0x170 [ 640.978652][T19186] ? __get_fs_type+0x12c/0x170 [ 640.978673][T19186] get_fs_type+0xd7/0x190 [ 640.978690][T19186] __x64_sys_fsopen+0xca/0x220 [ 640.978708][T19186] do_syscall_64+0x106/0xf80 [ 640.978727][T19186] ? clear_bhb_loop+0x40/0x90 [ 640.978743][T19186] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 640.978758][T19186] RIP: 0033:0x7f929819c799 [ 640.978770][T19186] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 640.978784][T19186] RSP: 002b:00007f92990ba028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 640.978798][T19186] RAX: ffffffffffffffda RBX: 00007f9298415fa0 RCX: 00007f929819c799 [ 640.978807][T19186] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 640.978815][T19186] RBP: 00007f9298232c99 R08: 0000000000000000 R09: 0000000000000000 [ 640.978829][T19186] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 640.978837][T19186] R13: 00007f9298416038 R14: 00007f9298415fa0 R15: 00007fff5454a3d8 [ 640.978856][T19186] [ 640.985707][T19186] FAULT_INJECTION: forcing a failure. [ 640.985707][T19186] name failslab, interval 1, probability 0, space 0, times 0 [ 641.318899][T19186] CPU: 0 UID: 0 PID: 19186 Comm: syz.5.2610 Tainted: G U L syzkaller #0 PREEMPT(full) [ 641.318926][T19186] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 641.318931][T19186] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 641.318939][T19186] Call Trace: [ 641.318944][T19186] [ 641.318949][T19186] dump_stack_lvl+0x100/0x190 [ 641.318975][T19186] should_fail_ex.cold+0x5/0xa [ 641.318992][T19186] should_failslab+0xc2/0x120 [ 641.319007][T19186] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 641.319027][T19186] ? security_file_alloc+0x34/0x2c0 [ 641.319044][T19186] ? trace_kmem_cache_alloc+0xf3/0x120 [ 641.319062][T19186] security_file_alloc+0x34/0x2c0 [ 641.319078][T19186] init_file+0x95/0x480 [ 641.319094][T19186] alloc_empty_file+0x73/0x1c0 [ 641.319111][T19186] alloc_file_pseudo+0x13a/0x230 [ 641.319129][T19186] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 641.319151][T19186] __shmem_file_setup+0x221/0x490 [ 641.319170][T19186] ? __pfx___shmem_file_setup+0x10/0x10 [ 641.319192][T19186] ? vm_area_alloc+0x1f/0x160 [ 641.319212][T19186] shmem_zero_setup+0x96/0x1b0 [ 641.319234][T19186] __mmap_region+0x2198/0x29e0 [ 641.319257][T19186] ? __pfx___mmap_region+0x10/0x10 [ 641.319280][T19186] ? set_next_entity+0x11e/0x9c0 [ 641.319303][T19186] ? __lock_acquire+0x4a5/0x2630 [ 641.319320][T19186] ? find_held_lock+0x2b/0x80 [ 641.319346][T19186] ? find_held_lock+0x2b/0x80 [ 641.319358][T19186] ? finish_task_switch.isra.0+0x200/0xb80 [ 641.319373][T19186] ? finish_task_switch.isra.0+0x200/0xb80 [ 641.319395][T19186] ? trace_sched_exit_tp+0x13a/0x180 [ 641.319412][T19186] ? __schedule+0x1000/0x6120 [ 641.319455][T19186] ? rcu_is_watching+0x12/0xc0 [ 641.319476][T19186] ? cap_capable+0x107/0x460 [ 641.319499][T19186] mmap_region+0x180/0x3e0 [ 641.319522][T19186] do_mmap+0xc63/0x12f0 [ 641.319541][T19186] ? __pfx_do_mmap+0x10/0x10 [ 641.319556][T19186] ? __pfx_down_write_killable+0x10/0x10 [ 641.319581][T19186] vm_mmap_pgoff+0x29e/0x470 [ 641.319599][T19186] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 641.319615][T19186] ? do_futex+0x192/0x350 [ 641.319633][T19186] ? __pfx_do_futex+0x10/0x10 [ 641.319653][T19186] ksys_mmap_pgoff+0xe1/0x650 [ 641.319667][T19186] ? __x64_sys_futex+0x34f/0x4d0 [ 641.319683][T19186] ? __x64_sys_futex+0x358/0x4d0 [ 641.319700][T19186] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 641.319715][T19186] ? xfd_validate_state+0x129/0x190 [ 641.319737][T19186] __x64_sys_mmap+0x125/0x190 [ 641.319759][T19186] do_syscall_64+0x106/0xf80 [ 641.319777][T19186] ? clear_bhb_loop+0x40/0x90 [ 641.319795][T19186] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 641.319809][T19186] RIP: 0033:0x7f929819c799 [ 641.319821][T19186] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 641.319835][T19186] RSP: 002b:00007f92990ba028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 641.319849][T19186] RAX: ffffffffffffffda RBX: 00007f9298415fa0 RCX: 00007f929819c799 [ 641.319858][T19186] RDX: 0000000000000006 RSI: 0000000004020009 RDI: 0000000000000000 [ 641.319867][T19186] RBP: 00007f9298232c99 R08: 0000000000000401 R09: 0000000000008000 [ 641.319875][T19186] R10: 0000000000000eb1 R11: 0000000000000246 R12: 0000000000000000 [ 641.319883][T19186] R13: 00007f9298416038 R14: 00007f9298415fa0 R15: 00007fff5454a3d8 [ 641.319902][T19186] [ 641.716107][T19203] netlink: 354 bytes leftover after parsing attributes in process `syz.5.2612'. [ 642.915002][T19230] ACPI: EC: Assuming SCI_EVT clearing on QR_EC writes [ 643.994700][ T9521] Bluetooth: hci0: unexpected event 0x36 length: 123 > 7 [ 644.499128][T19274] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 644.555134][T19274] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 644.602501][T19274] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 644.639085][T19274] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 644.670661][T19274] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 644.742278][T19274] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 645.348358][T19304] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2630'. [ 646.585285][ T9521] Bluetooth: hci4: command 0x0c1a tx timeout [ 646.591411][ T6556] Bluetooth: hci3: command 0x0c1a tx timeout [ 646.663881][ T9521] Bluetooth: hci2: command 0x0c1a tx timeout [ 646.669946][ T6556] Bluetooth: hci0: command 0x0c1a tx timeout [ 646.893836][T19336] FAULT_INJECTION: forcing a failure. [ 646.893836][T19336] name failslab, interval 1, probability 0, space 0, times 0 [ 647.032090][T19336] CPU: 0 UID: 0 PID: 19336 Comm: syz.1.2640 Tainted: G U L syzkaller #0 PREEMPT(full) [ 647.032120][T19336] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 647.032126][T19336] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 647.032135][T19336] Call Trace: [ 647.032141][T19336] [ 647.032147][T19336] dump_stack_lvl+0x100/0x190 [ 647.032174][T19336] should_fail_ex.cold+0x5/0xa [ 647.032192][T19336] should_failslab+0xc2/0x120 [ 647.032208][T19336] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 647.032229][T19336] ? __proc_create+0x2cb/0x8c0 [ 647.032257][T19336] __proc_create+0x2cb/0x8c0 [ 647.032279][T19336] ? __pfx___proc_create+0x10/0x10 [ 647.032311][T19336] ? _raw_write_unlock+0x28/0x50 [ 647.032391][T19336] ? proc_register+0x559/0x8a0 [ 647.032408][T19336] proc_create_reg+0x75/0x170 [ 647.032423][T19336] ? __pfx_can_rcvlist_eff_proc_show+0x10/0x10 [ 647.032501][T19336] proc_create_net_single+0x86/0x180 [ 647.032516][T19336] ? __pfx_proc_create_net_single+0x10/0x10 [ 647.032533][T19336] ? round_jiffies+0x10a/0x160 [ 647.032552][T19336] can_init_proc+0x319/0x4b0 [ 647.032572][T19336] can_pernet_init+0x1e4/0x370 [ 647.032591][T19336] ? __pfx_can_pernet_init+0x10/0x10 [ 647.032608][T19336] ops_init+0x1e2/0x5f0 [ 647.032633][T19336] setup_net+0x118/0x3a0 [ 647.032653][T19336] ? __pfx_setup_net+0x10/0x10 [ 647.032673][T19336] ? lockdep_init_map_type+0x5c/0x250 [ 647.032693][T19336] ? mutex_init_lockep+0x110/0x150 [ 647.032715][T19336] copy_net_ns+0x46f/0x7c0 [ 647.032738][T19336] create_new_namespaces+0x3ea/0xac0 [ 647.032758][T19336] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 647.032776][T19336] ksys_unshare+0x473/0xad0 [ 647.032795][T19336] ? __pfx_ksys_unshare+0x10/0x10 [ 647.032820][T19336] __x64_sys_unshare+0x31/0x40 [ 647.032837][T19336] do_syscall_64+0x106/0xf80 [ 647.032856][T19336] ? clear_bhb_loop+0x40/0x90 [ 647.032874][T19336] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 647.032889][T19336] RIP: 0033:0x7f45cd19c799 [ 647.032902][T19336] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 647.032916][T19336] RSP: 002b:00007f45ce0a9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 647.032932][T19336] RAX: ffffffffffffffda RBX: 00007f45cd415fa0 RCX: 00007f45cd19c799 [ 647.032941][T19336] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 647.032950][T19336] RBP: 00007f45cd232c99 R08: 0000000000000000 R09: 0000000000000000 [ 647.032959][T19336] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 647.032967][T19336] R13: 00007f45cd416038 R14: 00007f45cd415fa0 R15: 00007ffc71348028 [ 647.032988][T19336] [ 648.563420][T19363] ERROR: Out of memory at tomoyo_memory_ok. [ 648.740627][ T9521] Bluetooth: hci2: command 0x0c1a tx timeout [ 649.820934][T19375] netlink: 'syz.1.2646': attribute type 1 has an invalid length. [ 650.082896][T19382] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2646'. [ 650.822182][ T9521] Bluetooth: hci2: command 0x0c1a tx timeout [ 651.193054][T19396] Per memcg swappiness does not exist in cgroup v2. See memory.reclaim or memory.swap.max there [ 651.193054][T19396] [ 654.411751][T19446] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2661'. [ 659.096904][T19496] netlink: 'syz.5.2671': attribute type 11 has an invalid length. [ 660.093995][ T29] audit: type=1804 audit(1773596552.543:107): pid=19515 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.2674" name="/newroot/sys/kernel/tracing/trace_marker" dev="tracefs" ino=3550 res=1 errno=0 [ 661.250896][T19524] ima: Unable to open file: /surit‹¯Ròy/integrity?iqa/policy (-2) [ 661.262936][T19523] ima: policy update failed [ 661.327666][ T29] audit: type=1802 audit(1773596553.772:108): pid=19523 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.5.2676" res=0 errno=0 [ 661.742686][T19526] vhci_hcd vhci_hcd.2: SetHubDepth req not supported for USB 2.0 roothub [ 661.803186][T19528] capability: warning: `syz.5.2677' uses deprecated v2 capabilities in a way that may be insecure [ 663.999698][T19562] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 664.453445][ T6556] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 664.473367][ T6556] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 664.483899][ T6556] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 664.495340][ T6556] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 664.502897][ T6556] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 665.363152][T19565] chnl_net:caif_netlink_parms(): no params data found [ 665.841188][T19565] bridge0: port 1(bridge_slave_0) entered blocking state [ 665.915110][T19565] bridge0: port 1(bridge_slave_0) entered disabled state [ 665.960715][T19565] bridge_slave_0: entered allmulticast mode [ 666.050519][T19565] bridge_slave_0: entered promiscuous mode [ 666.112565][T19565] bridge0: port 2(bridge_slave_1) entered blocking state [ 666.179522][T19565] bridge0: port 2(bridge_slave_1) entered disabled state [ 666.227888][T19565] bridge_slave_1: entered allmulticast mode [ 666.285561][T19565] bridge_slave_1: entered promiscuous mode [ 666.417263][T19588] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 666.490429][T19588] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 666.496449][T19588] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 666.508268][T19565] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 666.574457][T19588] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 666.586690][T19565] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 666.600987][ T9521] Bluetooth: hci1: command tx timeout [ 666.637577][T19588] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 666.685333][T19588] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 666.799220][T19565] team0: Port device team_slave_0 added [ 666.815655][T19588] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 666.861933][T19565] team0: Port device team_slave_1 added [ 667.060749][T19565] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 667.067719][T19565] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 667.319994][T19565] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 667.356072][T19600] Invalid ELF header magic: != ELF [ 667.396603][T19565] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 667.455906][T19565] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 667.622995][T19565] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 667.790577][ T9521] Bluetooth: hci3: command 0x0c1a tx timeout [ 668.045929][T19565] hsr_slave_0: entered promiscuous mode [ 668.100448][T19565] hsr_slave_1: entered promiscuous mode [ 668.106448][T19565] debugfs: 'hsr0' already exists in 'hsr' [ 668.192244][T19565] Cannot create hsr debugfs directory [ 668.510538][ T9521] Bluetooth: hci0: command 0x0c1a tx timeout [ 668.516619][ T6556] Bluetooth: hci4: command 0x0c1a tx timeout [ 668.591442][ T6556] Bluetooth: hci2: command 0x0c1a tx timeout [ 668.674256][ T6556] Bluetooth: hci1: command 0x040f tx timeout [ 670.530267][T19627] vivid-007: ================= START STATUS ================= [ 670.579039][T19627] vivid-007: Generate PTS: true [ 670.621512][T19627] vivid-007: Generate SCR: true [ 670.650448][T19627] tpg source WxH: 320x240 (Y'CbCr) [ 670.692765][T19627] tpg field: 1 [ 670.696157][T19627] tpg crop: (0,0)/320x240 [ 670.700471][T19627] tpg compose: (0,0)/320x240 [ 670.755484][ T6556] Bluetooth: hci1: command 0x040f tx timeout [ 670.771644][T19627] tpg colorspace: 8 [ 670.775466][T19627] tpg transfer function: 0/0 [ 670.780033][T19627] tpg Y'CbCr encoding: 0/0 [ 670.874132][T19627] tpg quantization: 0/0 [ 670.878303][T19627] tpg RGB range: 0/2 [ 670.951877][T19627] vivid-007: ================== END STATUS ================== [ 671.003701][T19565] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 671.196914][T19565] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 671.306629][T19565] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 671.593615][T19565] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 671.852642][ T29] audit: type=1800 audit(1773596564.297:109): pid=19634 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.2698" name="members" dev="configfs" ino=97670 res=0 errno=0 [ 672.094925][T19565] 8021q: adding VLAN 0 to HW filter on device bond0 [ 672.209386][T19565] 8021q: adding VLAN 0 to HW filter on device team0 [ 672.294472][T10974] bridge0: port 1(bridge_slave_0) entered blocking state [ 672.301586][T10974] bridge0: port 1(bridge_slave_0) entered forwarding state [ 672.410626][T19641] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 672.425316][T19641] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 672.494427][T19641] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 672.500434][T19641] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 672.521112][ T7363] bridge0: port 2(bridge_slave_1) entered blocking state [ 672.528236][ T7363] bridge0: port 2(bridge_slave_1) entered forwarding state [ 672.602907][T19641] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 672.693220][T19565] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 672.802751][T19565] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 673.072525][T19657] FAULT_INJECTION: forcing a failure. [ 673.072525][T19657] name failslab, interval 1, probability 0, space 0, times 0 [ 673.304486][T19657] CPU: 0 UID: 0 PID: 19657 Comm: syz.7.2703 Tainted: G U L syzkaller #0 PREEMPT(full) [ 673.304514][T19657] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 673.304521][T19657] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 673.304530][T19657] Call Trace: [ 673.304536][T19657] [ 673.304542][T19657] dump_stack_lvl+0x100/0x190 [ 673.304586][T19657] should_fail_ex.cold+0x5/0xa [ 673.304606][T19657] should_failslab+0xc2/0x120 [ 673.304623][T19657] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 673.304645][T19657] ? copy_net_ns+0xe8/0x7c0 [ 673.304672][T19657] copy_net_ns+0xe8/0x7c0 [ 673.304714][T19657] ? copy_cgroup_ns+0x71/0x970 [ 673.304733][T19657] create_new_namespaces+0x3ea/0xac0 [ 673.304754][T19657] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 673.304773][T19657] ksys_unshare+0x473/0xad0 [ 673.304793][T19657] ? __pfx_ksys_unshare+0x10/0x10 [ 673.304819][T19657] __x64_sys_unshare+0x31/0x40 [ 673.304837][T19657] do_syscall_64+0x106/0xf80 [ 673.304857][T19657] ? clear_bhb_loop+0x40/0x90 [ 673.304875][T19657] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 673.304891][T19657] RIP: 0033:0x7fa478d9c799 [ 673.304905][T19657] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 673.304920][T19657] RSP: 002b:00007fa479c34028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 673.304935][T19657] RAX: ffffffffffffffda RBX: 00007fa479016090 RCX: 00007fa478d9c799 [ 673.304945][T19657] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 673.304954][T19657] RBP: 00007fa478e32c99 R08: 0000000000000000 R09: 0000000000000000 [ 673.304963][T19657] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 673.304972][T19657] R13: 00007fa479016128 R14: 00007fa479016090 R15: 00007ffe278e6b48 [ 673.304991][T19657] [ 673.850131][ T9521] Bluetooth: hci3: command 0x0c1a tx timeout [ 674.012904][T19565] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 674.433653][ T9521] Bluetooth: hci4: command 0x0c1a tx timeout [ 674.525446][ T9521] Bluetooth: hci2: command 0x0c1a tx timeout [ 674.531464][ T9521] Bluetooth: hci0: command 0x0c1a tx timeout [ 674.674122][ T9521] Bluetooth: hci1: command 0x040f tx timeout [ 675.104580][T19565] veth0_vlan: entered promiscuous mode [ 675.334755][T19565] veth1_vlan: entered promiscuous mode [ 675.526441][T19565] veth0_macvtap: entered promiscuous mode [ 675.605896][T19565] veth1_macvtap: entered promiscuous mode [ 675.749196][T19565] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 675.996631][T19565] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 676.093190][T10976] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 676.146060][T19702] netlink: 'syz.1.2709': attribute type 11 has an invalid length. [ 676.174923][T10976] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 676.240307][T19699] : renamed from bond0 (while UP) [ 676.311293][T10976] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 676.402848][T10976] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 676.722034][T19696] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 676.754930][ T9521] Bluetooth: hci1: command 0x040f tx timeout [ 676.762921][T19696] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 676.804824][T19696] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 676.835334][T19696] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 677.378987][T13218] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 677.434694][T13218] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 677.483170][T10976] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 677.545257][T10976] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 678.270249][T19733] futex_wake_op: syz.8.2684 tries to shift op by -2048; fix this program [ 678.286173][ T9521] Bluetooth: hci3: command 0x0c1a tx timeout [ 678.358515][T19733] futex_wake_op: syz.8.2684 tries to shift op by -2048; fix this program [ 678.374859][T19724] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(1) [ 678.597875][ T7359] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 678.838531][ T9521] Bluetooth: hci2: command 0x0c1a tx timeout [ 678.844578][ T9521] Bluetooth: hci0: command 0x0c1a tx timeout [ 678.888379][ T7359] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 678.918733][ T9521] Bluetooth: hci1: command 0x040f tx timeout [ 679.170855][ T7359] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 679.353614][ T7359] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 679.962319][ T7359] bridge_slave_1: left allmulticast mode [ 680.002589][ T7359] bridge_slave_1: left promiscuous mode [ 680.034510][ T7359] bridge0: port 2(bridge_slave_1) entered disabled state [ 680.159242][ T7359] bridge_slave_0: left allmulticast mode [ 680.164900][ T7359] bridge_slave_0: left promiscuous mode [ 680.248992][ T7359] bridge0: port 1(bridge_slave_0) entered disabled state [ 681.736301][ T7359] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 681.816104][ T7359] bond0 (unregistering): Released all slaves [ 682.057105][ T7359] tipc: Left network mode [ 682.674772][ T7359] hsr_slave_0: left promiscuous mode [ 682.721592][ T7359] hsr_slave_1: left promiscuous mode [ 682.753144][ T7359] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 682.803530][ T7359] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 682.897807][ T7359] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 682.937680][ T7359] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 683.038836][ T7359] veth1_macvtap: left promiscuous mode [ 683.071809][ T7359] veth0_macvtap: left promiscuous mode [ 683.125087][ T7359] veth1_vlan: left promiscuous mode [ 683.170819][ T7359] veth0_vlan: left promiscuous mode [ 684.435949][ T7359] team0 (unregistering): Port device team_slave_1 removed [ 684.530059][ T7359] team0 (unregistering): Port device team_slave_0 removed [ 685.886669][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.897770][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 687.094834][T19918] FAULT_INJECTION: forcing a failure. [ 687.094834][T19918] name failslab, interval 1, probability 0, space 0, times 0 [ 687.188786][T19918] CPU: 0 UID: 0 PID: 19918 Comm: syz.7.2745 Tainted: G U L syzkaller #0 PREEMPT(full) [ 687.188816][T19918] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 687.188822][T19918] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 687.188832][T19918] Call Trace: [ 687.188839][T19918] [ 687.188846][T19918] dump_stack_lvl+0x100/0x190 [ 687.188873][T19918] should_fail_ex.cold+0x5/0xa [ 687.188893][T19918] should_failslab+0xc2/0x120 [ 687.188909][T19918] __kmalloc_cache_noprof+0x7a/0x6f0 [ 687.188931][T19918] ? ptp_open+0xe4/0x550 [ 687.189045][T19918] ptp_open+0xe4/0x550 [ 687.189070][T19918] ? __pfx_ptp_open+0x10/0x10 [ 687.189097][T19918] ? __pfx_ptp_open+0x10/0x10 [ 687.189118][T19918] posix_clock_open+0x17b/0x290 [ 687.189136][T19918] ? __pfx_posix_clock_open+0x10/0x10 [ 687.189158][T19918] chrdev_open+0x234/0x6a0 [ 687.189174][T19918] ? __pfx_apparmor_file_open+0x10/0x10 [ 687.189198][T19918] ? __pfx_chrdev_open+0x10/0x10 [ 687.189221][T19918] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 687.189242][T19918] do_dentry_open+0x6d8/0x1660 [ 687.189258][T19918] ? __pfx_chrdev_open+0x10/0x10 [ 687.189278][T19918] vfs_open+0x82/0x3f0 [ 687.189298][T19918] path_openat+0x208c/0x31a0 [ 687.189320][T19918] ? __pfx_path_openat+0x10/0x10 [ 687.189342][T19918] do_file_open+0x20e/0x430 [ 687.189358][T19918] ? __pfx_do_file_open+0x10/0x10 [ 687.189387][T19918] ? alloc_fd+0x476/0x790 [ 687.189403][T19918] ? do_getname+0x191/0x390 [ 687.189423][T19918] do_sys_openat2+0x10d/0x1e0 [ 687.189442][T19918] ? __pfx_do_sys_openat2+0x10/0x10 [ 687.189462][T19918] ? __fget_files+0x21f/0x3d0 [ 687.189480][T19918] __x64_sys_openat+0x12d/0x210 [ 687.189500][T19918] ? __pfx___x64_sys_openat+0x10/0x10 [ 687.189526][T19918] do_syscall_64+0x106/0xf80 [ 687.189546][T19918] ? clear_bhb_loop+0x40/0x90 [ 687.189564][T19918] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 687.189580][T19918] RIP: 0033:0x7fa478d9c799 [ 687.189595][T19918] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 687.189610][T19918] RSP: 002b:00007fa479c55028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 687.189625][T19918] RAX: ffffffffffffffda RBX: 00007fa479015fa0 RCX: 00007fa478d9c799 [ 687.189636][T19918] RDX: 0000000000008000 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 687.189646][T19918] RBP: 00007fa478e32c99 R08: 0000000000000000 R09: 0000000000000000 [ 687.189655][T19918] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 687.189665][T19918] R13: 00007fa479016038 R14: 00007fa479015fa0 R15: 00007ffe278e6b48 [ 687.189685][T19918] [ 688.032280][T19937] FAULT_INJECTION: forcing a failure. [ 688.032280][T19937] name failslab, interval 1, probability 0, space 0, times 0 [ 688.080470][T19937] CPU: 0 UID: 0 PID: 19937 Comm: syz.1.2750 Tainted: G U L syzkaller #0 PREEMPT(full) [ 688.080500][T19937] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 688.080507][T19937] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 688.080516][T19937] Call Trace: [ 688.080522][T19937] [ 688.080528][T19937] dump_stack_lvl+0x100/0x190 [ 688.080555][T19937] should_fail_ex.cold+0x5/0xa [ 688.080574][T19937] should_failslab+0xc2/0x120 [ 688.080590][T19937] __kmalloc_node_track_caller_noprof+0xe3/0x850 [ 688.080615][T19937] ? kstrdup_const+0x63/0x80 [ 688.080638][T19937] ? __pfx_scnprintf+0x10/0x10 [ 688.080660][T19937] kstrdup+0x51/0xe0 [ 688.080683][T19937] kstrdup_const+0x63/0x80 [ 688.080705][T19937] __kmem_cache_create_args+0x118/0x420 [ 688.080728][T19937] mon_text_open+0x333/0x510 [ 688.080820][T19937] ? __pfx_mon_text_open+0x10/0x10 [ 688.080837][T19937] ? __pfx_mon_text_ctor+0x10/0x10 [ 688.080883][T19937] ? __pfx_apparmor_file_open+0x10/0x10 [ 688.080907][T19937] ? lockdown_is_locked_down+0x3d/0x140 [ 688.080956][T19937] ? bpf_lsm_locked_down+0x9/0x10 [ 688.080976][T19937] ? __pfx_mon_text_open+0x10/0x10 [ 688.080990][T19937] full_proxy_open_regular+0x1b6/0x370 [ 688.081068][T19937] do_dentry_open+0x6d8/0x1660 [ 688.081083][T19937] ? __pfx_full_proxy_open_regular+0x10/0x10 [ 688.081111][T19937] vfs_open+0x82/0x3f0 [ 688.081139][T19937] path_openat+0x208c/0x31a0 [ 688.081163][T19937] ? __pfx_path_openat+0x10/0x10 [ 688.081187][T19937] do_file_open+0x20e/0x430 [ 688.081204][T19937] ? __pfx_do_file_open+0x10/0x10 [ 688.081234][T19937] ? alloc_fd+0x476/0x790 [ 688.081252][T19937] ? do_getname+0x191/0x390 [ 688.081272][T19937] do_sys_openat2+0x10d/0x1e0 [ 688.081291][T19937] ? __pfx_do_sys_openat2+0x10/0x10 [ 688.081311][T19937] ? __fget_files+0x21f/0x3d0 [ 688.081329][T19937] __x64_sys_openat+0x12d/0x210 [ 688.081348][T19937] ? __pfx___x64_sys_openat+0x10/0x10 [ 688.081374][T19937] do_syscall_64+0x106/0xf80 [ 688.081394][T19937] ? clear_bhb_loop+0x40/0x90 [ 688.081413][T19937] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 688.081428][T19937] RIP: 0033:0x7f45cd19c799 [ 688.081443][T19937] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 688.081457][T19937] RSP: 002b:00007f45ce0a9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 688.081473][T19937] RAX: ffffffffffffffda RBX: 00007f45cd415fa0 RCX: 00007f45cd19c799 [ 688.081483][T19937] RDX: 0000000000080080 RSI: 0000200000000280 RDI: ffffffffffffff9c [ 688.081493][T19937] RBP: 00007f45cd232c99 R08: 0000000000000000 R09: 0000000000000000 [ 688.081502][T19937] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 688.081511][T19937] R13: 00007f45cd416038 R14: 00007f45cd415fa0 R15: 00007ffc71348028 [ 688.081532][T19937] [ 688.081540][T19937] __kmem_cache_create_args(mon_text_ffff88807940e800) failed with error -12 [ 689.227372][T19937] CPU: 0 UID: 0 PID: 19937 Comm: syz.1.2750 Tainted: G U L syzkaller #0 PREEMPT(full) [ 689.227402][T19937] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 689.227408][T19937] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 689.227417][T19937] Call Trace: [ 689.227423][T19937] [ 689.227429][T19937] dump_stack_lvl+0x100/0x190 [ 689.227458][T19937] __kmem_cache_create_args.cold+0x33/0x6e [ 689.227481][T19937] mon_text_open+0x333/0x510 [ 689.227497][T19937] ? __pfx_mon_text_open+0x10/0x10 [ 689.227513][T19937] ? __pfx_mon_text_ctor+0x10/0x10 [ 689.227537][T19937] ? __pfx_apparmor_file_open+0x10/0x10 [ 689.227560][T19937] ? lockdown_is_locked_down+0x3d/0x140 [ 689.227582][T19937] ? bpf_lsm_locked_down+0x9/0x10 [ 689.227600][T19937] ? __pfx_mon_text_open+0x10/0x10 [ 689.227613][T19937] full_proxy_open_regular+0x1b6/0x370 [ 689.227638][T19937] do_dentry_open+0x6d8/0x1660 [ 689.227653][T19937] ? __pfx_full_proxy_open_regular+0x10/0x10 [ 689.227679][T19937] vfs_open+0x82/0x3f0 [ 689.227700][T19937] path_openat+0x208c/0x31a0 [ 689.227722][T19937] ? __pfx_path_openat+0x10/0x10 [ 689.227744][T19937] do_file_open+0x20e/0x430 [ 689.227760][T19937] ? __pfx_do_file_open+0x10/0x10 [ 689.227792][T19937] ? alloc_fd+0x476/0x790 [ 689.227812][T19937] ? do_getname+0x191/0x390 [ 689.227832][T19937] do_sys_openat2+0x10d/0x1e0 [ 689.227854][T19937] ? __pfx_do_sys_openat2+0x10/0x10 [ 689.227874][T19937] ? __fget_files+0x21f/0x3d0 [ 689.227892][T19937] __x64_sys_openat+0x12d/0x210 [ 689.227911][T19937] ? __pfx___x64_sys_openat+0x10/0x10 [ 689.227938][T19937] do_syscall_64+0x106/0xf80 [ 689.227958][T19937] ? clear_bhb_loop+0x40/0x90 [ 689.227976][T19937] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 689.227992][T19937] RIP: 0033:0x7f45cd19c799 [ 689.228004][T19937] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 689.228019][T19937] RSP: 002b:00007f45ce0a9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 689.228034][T19937] RAX: ffffffffffffffda RBX: 00007f45cd415fa0 RCX: 00007f45cd19c799 [ 689.228044][T19937] RDX: 0000000000080080 RSI: 0000200000000280 RDI: ffffffffffffff9c [ 689.228054][T19937] RBP: 00007f45cd232c99 R08: 0000000000000000 R09: 0000000000000000 [ 689.228062][T19937] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 689.228071][T19937] R13: 00007f45cd416038 R14: 00007f45cd415fa0 R15: 00007ffc71348028 [ 689.228096][T19937] [ 690.920262][T19988] FAULT_INJECTION: forcing a failure. [ 690.920262][T19988] name failslab, interval 1, probability 0, space 0, times 0 [ 691.070465][T19988] CPU: 0 UID: 0 PID: 19988 Comm: syz.1.2759 Tainted: G U L syzkaller #0 PREEMPT(full) [ 691.070492][T19988] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 691.070498][T19988] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 691.070508][T19988] Call Trace: [ 691.070513][T19988] [ 691.070519][T19988] dump_stack_lvl+0x100/0x190 [ 691.070545][T19988] should_fail_ex.cold+0x5/0xa [ 691.070563][T19988] should_failslab+0xc2/0x120 [ 691.070578][T19988] __kmalloc_node_track_caller_noprof+0xe3/0x850 [ 691.070601][T19988] ? kasprintf+0xc7/0x100 [ 691.070683][T19988] ? __lock_acquire+0x4a5/0x2630 [ 691.070703][T19988] kvasprintf+0xbc/0x150 [ 691.070719][T19988] ? __pfx_kvasprintf+0x10/0x10 [ 691.070743][T19988] kasprintf+0xc7/0x100 [ 691.070759][T19988] ? __pfx_kasprintf+0x10/0x10 [ 691.070776][T19988] ? __is_module_percpu_address+0x1c2/0x430 [ 691.070799][T19988] alloc_workqueue_noprof+0x114/0x200 [ 691.070820][T19988] ? __pfx_alloc_workqueue_noprof+0x10/0x10 [ 691.070841][T19988] ? kobject_init+0x159/0x1b0 [ 691.070864][T19988] ? __alloc_disk_node+0x4d8/0x6b0 [ 691.070919][T19988] nbd_dev_add+0x51a/0xb10 [ 691.070974][T19988] ? find_held_lock+0x2b/0x80 [ 691.070987][T19988] ? __pfx_nbd_dev_add+0x10/0x10 [ 691.070999][T19988] ? nbd_genl_connect+0x131a/0x1a40 [ 691.071025][T19988] ? bpf_lsm_capable+0x9/0x10 [ 691.071040][T19988] ? __radix_tree_lookup+0x217/0x2b0 [ 691.071061][T19988] nbd_genl_connect+0xb8d/0x1a40 [ 691.071075][T19988] ? rcu_is_watching+0x12/0xc0 [ 691.071098][T19988] ? __pfx_nbd_genl_connect+0x10/0x10 [ 691.071113][T19988] ? __nla_parse+0x40/0x60 [ 691.071135][T19988] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1a0/0x280 [ 691.071153][T19988] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1aa/0x280 [ 691.071172][T19988] genl_family_rcv_msg_doit+0x214/0x300 [ 691.071189][T19988] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 691.071204][T19988] ? genl_get_cmd+0x3ef/0x720 [ 691.071231][T19988] ? __dev_queue_xmit+0x5af/0x4800 [ 691.071247][T19988] ? __radix_tree_lookup+0x217/0x2b0 [ 691.071269][T19988] genl_rcv_msg+0x560/0x800 [ 691.071286][T19988] ? __pfx_genl_rcv_msg+0x10/0x10 [ 691.071301][T19988] ? __pfx_nbd_genl_connect+0x10/0x10 [ 691.071323][T19988] netlink_rcv_skb+0x159/0x420 [ 691.071343][T19988] ? __pfx_genl_rcv_msg+0x10/0x10 [ 691.071359][T19988] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 691.071387][T19988] ? netlink_deliver_tap+0x1ae/0xcc0 [ 691.071409][T19988] genl_rcv+0x28/0x40 [ 691.071421][T19988] netlink_unicast+0x5aa/0x870 [ 691.071444][T19988] ? __pfx_netlink_unicast+0x10/0x10 [ 691.071472][T19988] netlink_sendmsg+0x8b0/0xda0 [ 691.071496][T19988] ? __pfx_netlink_sendmsg+0x10/0x10 [ 691.071515][T19988] ? __import_iovec+0x1d2/0x640 [ 691.071533][T19988] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 691.071557][T19988] ____sys_sendmsg+0x9e1/0xb70 [ 691.071571][T19988] ? __pfx_netlink_sendmsg+0x10/0x10 [ 691.071594][T19988] ? __pfx_____sys_sendmsg+0x10/0x10 [ 691.071611][T19988] ? try_to_wake_up+0x644/0x1a80 [ 691.071629][T19988] ___sys_sendmsg+0x190/0x1e0 [ 691.071645][T19988] ? __pfx____sys_sendmsg+0x10/0x10 [ 691.071661][T19988] ? futex_private_hash_put+0x107/0x1c0 [ 691.071699][T19988] __sys_sendmsg+0x170/0x220 [ 691.071719][T19988] ? __pfx___sys_sendmsg+0x10/0x10 [ 691.071738][T19988] ? __x64_sys_futex+0x34f/0x4d0 [ 691.071766][T19988] do_syscall_64+0x106/0xf80 [ 691.071785][T19988] ? clear_bhb_loop+0x40/0x90 [ 691.071802][T19988] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 691.071817][T19988] RIP: 0033:0x7f45cd19c799 [ 691.071830][T19988] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 691.071844][T19988] RSP: 002b:00007f45ce0a9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 691.071858][T19988] RAX: ffffffffffffffda RBX: 00007f45cd415fa0 RCX: 00007f45cd19c799 [ 691.071868][T19988] RDX: 0000000020040000 RSI: 0000200000000500 RDI: 0000000000000008 [ 691.071877][T19988] RBP: 00007f45cd232c99 R08: 0000000000000000 R09: 0000000000000000 [ 691.071886][T19988] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 691.071894][T19988] R13: 00007f45cd416038 R14: 00007f45cd415fa0 R15: 00007ffc71348028 [ 691.071913][T19988] [ 692.480954][T20030] nbd: nbd1024 already in use [ 692.955287][T20052] netlink: 'syz.8.2770': attribute type 11 has an invalid length. [ 692.992748][T20052] netlink: 'syz.8.2770': attribute type 11 has an invalid length. [ 693.067569][T20052] netlink: 'syz.8.2770': attribute type 11 has an invalid length. [ 693.067586][T20052] netlink: 'syz.8.2770': attribute type 11 has an invalid length. [ 694.672069][T20099] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 695.112650][T20111] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2781'. [ 695.159164][T20111] netlink: 'syz.1.2781': attribute type 1 has an invalid length. [ 695.193222][T20111] netlink: 51505 bytes leftover after parsing attributes in process `syz.1.2781'. [ 695.332308][T20101] futex_wake_op: syz.5.2779 tries to shift op by -2048; fix this program [ 695.378964][T20107] 0x000000000001-0x000000020000 : "" [ 695.507714][T20107] ftl_cs: FTL header corrupt! [ 695.654231][T20123] ERROR: Out of memory at tomoyo_memory_ok. [ 695.925901][T20113] NFSD: Failed to start, no listeners configured. [ 700.173382][T20195] FAULT_INJECTION: forcing a failure. [ 700.173382][T20195] name failslab, interval 1, probability 0, space 0, times 0 [ 700.201602][T20195] CPU: 0 UID: 0 PID: 20195 Comm: syz.5.2798 Tainted: G U L syzkaller #0 PREEMPT(full) [ 700.201632][T20195] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 700.201639][T20195] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 700.201650][T20195] Call Trace: [ 700.201656][T20195] [ 700.201663][T20195] dump_stack_lvl+0x100/0x190 [ 700.201691][T20195] should_fail_ex.cold+0x5/0xa [ 700.201709][T20195] should_failslab+0xc2/0x120 [ 700.201725][T20195] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 700.201747][T20195] ? do_getname+0x35/0x390 [ 700.201769][T20195] do_getname+0x35/0x390 [ 700.201789][T20195] do_sys_openat2+0xc5/0x1e0 [ 700.201808][T20195] ? __pfx_do_sys_openat2+0x10/0x10 [ 700.201836][T20195] __x64_sys_openat+0x12d/0x210 [ 700.201855][T20195] ? __pfx___x64_sys_openat+0x10/0x10 [ 700.201881][T20195] do_syscall_64+0x106/0xf80 [ 700.201914][T20195] ? clear_bhb_loop+0x40/0x90 [ 700.201933][T20195] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 700.201949][T20195] RIP: 0033:0x7f929819c799 [ 700.201963][T20195] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 700.201978][T20195] RSP: 002b:00007f92990ba028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 700.201994][T20195] RAX: ffffffffffffffda RBX: 00007f9298415fa0 RCX: 00007f929819c799 [ 700.202004][T20195] RDX: 0000000000000080 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 700.202014][T20195] RBP: 00007f9298232c99 R08: 0000000000000000 R09: 0000000000000000 [ 700.202024][T20195] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 700.202033][T20195] R13: 00007f9298416038 R14: 00007f9298415fa0 R15: 00007fff5454a3d8 [ 700.202052][T20195] [ 700.469321][T20198] MTRR 0 not used [ 700.534578][T20200] FAULT_INJECTION: forcing a failure. [ 700.534578][T20200] name fail_futex, interval 1, probability 0, space 0, times 0 [ 700.547982][T20200] CPU: 0 UID: 0 PID: 20200 Comm: syz.5.2799 Tainted: G U L syzkaller #0 PREEMPT(full) [ 700.548008][T20200] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 700.548013][T20200] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 700.548022][T20200] Call Trace: [ 700.548027][T20200] [ 700.548032][T20200] dump_stack_lvl+0x100/0x190 [ 700.548058][T20200] should_fail_ex.cold+0x5/0xa [ 700.548083][T20200] get_futex_key+0x1d2/0x1620 [ 700.548103][T20200] ? __pfx_get_futex_key+0x10/0x10 [ 700.548121][T20200] ? __lock_acquire+0x4a5/0x2630 [ 700.548142][T20200] futex_wake+0xea/0x530 [ 700.548164][T20200] ? __pfx_futex_wake+0x10/0x10 [ 700.548185][T20200] ? find_held_lock+0x2b/0x80 [ 700.548198][T20200] ? do_sys_openat2+0x1b4/0x1e0 [ 700.548215][T20200] ? do_sys_openat2+0x1b4/0x1e0 [ 700.548235][T20200] do_futex+0x32b/0x350 [ 700.548253][T20200] ? __pfx_do_futex+0x10/0x10 [ 700.548269][T20200] ? __pfx_do_sys_openat2+0x10/0x10 [ 700.548287][T20200] ? fput+0x79/0x100 [ 700.548305][T20200] __x64_sys_futex+0x34f/0x4d0 [ 700.548324][T20200] ? __x64_sys_openat+0x12d/0x210 [ 700.548341][T20200] ? __pfx___x64_sys_futex+0x10/0x10 [ 700.548366][T20200] do_syscall_64+0x106/0xf80 [ 700.548385][T20200] ? clear_bhb_loop+0x40/0x90 [ 700.548402][T20200] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 700.548416][T20200] RIP: 0033:0x7f929819c799 [ 700.548429][T20200] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 700.548443][T20200] RSP: 002b:00007f92990ba0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 700.548457][T20200] RAX: ffffffffffffffda RBX: 00007f9298415fa8 RCX: 00007f929819c799 [ 700.548467][T20200] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f9298415fac [ 700.548476][T20200] RBP: 00007f9298415fa0 R08: 0000000000000000 R09: 0000000000000000 [ 700.548484][T20200] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 700.548493][T20200] R13: 00007f9298416038 R14: 00007fff5454a2f0 R15: 00007fff5454a3d8 [ 700.548512][T20200] [ 704.597692][T20302] FAULT_INJECTION: forcing a failure. [ 704.597692][T20302] name failslab, interval 1, probability 0, space 0, times 0 [ 704.662310][T20286] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 704.668860][T20286] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 704.674862][T20286] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 704.742457][T20286] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 704.818666][T20302] CPU: 0 UID: 0 PID: 20302 Comm: syz.1.2817 Tainted: G U L syzkaller #0 PREEMPT(full) [ 704.818699][T20302] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 704.818705][T20302] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 704.818716][T20302] Call Trace: [ 704.818722][T20302] [ 704.818728][T20302] dump_stack_lvl+0x100/0x190 [ 704.818756][T20302] should_fail_ex.cold+0x5/0xa [ 704.818776][T20302] should_failslab+0xc2/0x120 [ 704.818792][T20302] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 704.818815][T20302] ? __d_alloc+0x34/0xa80 [ 704.818831][T20302] ? __pfx_stack_trace_save+0x10/0x10 [ 704.818849][T20302] __d_alloc+0x34/0xa80 [ 704.818867][T20302] d_alloc_parallel+0x111/0x14e0 [ 704.818893][T20302] ? find_held_lock+0x2b/0x80 [ 704.818907][T20302] ? __d_lookup+0x25c/0x4a0 [ 704.818926][T20302] ? __pfx_d_alloc_parallel+0x10/0x10 [ 704.818949][T20302] ? __d_lookup+0x266/0x4a0 [ 704.818974][T20302] lookup_open.isra.0+0x57c/0x11b0 [ 704.818999][T20302] ? __pfx_lookup_open.isra.0+0x10/0x10 [ 704.819024][T20302] ? __pfx___might_resched+0x10/0x10 [ 704.819045][T20302] ? mnt_get_write_access+0x52/0x2f0 [ 704.819068][T20302] ? __pfx_down_write+0x10/0x10 [ 704.819089][T20302] ? mnt_get_write_access+0x1e9/0x2f0 [ 704.819112][T20302] path_openat+0x2291/0x31a0 [ 704.819130][T20302] ? entry_SYSCALL_64_after_hwframe+0x48/0x7f [ 704.819148][T20302] ? __pfx_path_openat+0x10/0x10 [ 704.819171][T20302] do_file_open+0x20e/0x430 [ 704.819188][T20302] ? __pfx_do_file_open+0x10/0x10 [ 704.819217][T20302] ? _raw_spin_unlock+0x28/0x50 [ 704.819234][T20302] ? alloc_fd+0x476/0x790 [ 704.819254][T20302] do_sys_openat2+0x10d/0x1e0 [ 704.819273][T20302] ? __pfx_do_sys_openat2+0x10/0x10 [ 704.819299][T20302] __x64_sys_open+0xfe/0x1d0 [ 704.819317][T20302] ? __pfx___x64_sys_open+0x10/0x10 [ 704.819343][T20302] do_syscall_64+0x106/0xf80 [ 704.819362][T20302] ? clear_bhb_loop+0x40/0x90 [ 704.819380][T20302] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 704.819396][T20302] RIP: 0033:0x7f45cd19c799 [ 704.819409][T20302] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 704.819423][T20302] RSP: 002b:00007f45ce0a9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 704.819438][T20302] RAX: ffffffffffffffda RBX: 00007f45cd415fa0 RCX: 00007f45cd19c799 [ 704.819449][T20302] RDX: 00000000000000eb RSI: 0000000000161342 RDI: 0000200000000000 [ 704.819458][T20302] RBP: 00007f45cd232c99 R08: 0000000000000000 R09: 0000000000000000 [ 704.819467][T20302] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 704.819476][T20302] R13: 00007f45cd416038 R14: 00007f45cd415fa0 R15: 00007ffc71348028 [ 704.819497][T20302] [ 705.126295][T20307] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2819'. [ 706.060762][ T6556] Bluetooth: hci3: command 0x0c1a tx timeout [ 706.690296][ T9521] Bluetooth: hci0: command 0x0c1a tx timeout [ 706.696741][ T6556] Bluetooth: hci2: command 0x0c1a tx timeout [ 706.770262][ T6556] Bluetooth: hci1: command 0x040f tx timeout [ 708.359338][T20414] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2838'. [ 709.005889][T20421] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2837'. [ 709.184045][T20421] ipvlan0: entered promiscuous mode [ 709.189270][T20421] ipvlan0: entered allmulticast mode [ 709.315322][T20421] veth0_vlan: entered allmulticast mode [ 711.004691][T20486] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2851'. [ 711.063057][T20484] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2851'. [ 711.729464][T20506] NFSD: Failed to start, no listeners configured. [ 714.213198][T20572] openvswitch: netlink: Key type 206 is out of range max 32 [ 715.049976][ T6556] Bluetooth: hci1: ACL packet for unknown connection handle 0 [ 715.931718][T20615] netlink: 'syz.7.2880': attribute type 4 has an invalid length. [ 715.984234][T20615] netlink: 'syz.7.2880': attribute type 5 has an invalid length. [ 715.991989][T20615] netlink: 10 bytes leftover after parsing attributes in process `syz.7.2880'. [ 716.072890][T20620] random: crng reseeded on system resumption [ 716.386539][T20625] netlink: 354 bytes leftover after parsing attributes in process `syz.7.2882'. [ 716.821014][T20635] block2mtd: error: cannot open device çinX‘©¼Ëò¨±ÂÚjFBçB>U»;߸³Ilk¬ [ 717.422746][T20652] FAULT_INJECTION: forcing a failure. [ 717.422746][T20652] name failslab, interval 1, probability 0, space 0, times 0 [ 717.644491][T20652] CPU: 0 UID: 0 PID: 20652 Comm: syz.1.2887 Tainted: G U L syzkaller #0 PREEMPT(full) [ 717.644521][T20652] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 717.644527][T20652] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 717.644537][T20652] Call Trace: [ 717.644543][T20652] [ 717.644550][T20652] dump_stack_lvl+0x100/0x190 [ 717.644579][T20652] should_fail_ex.cold+0x5/0xa [ 717.644598][T20652] should_failslab+0xc2/0x120 [ 717.644614][T20652] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 717.644637][T20652] ? alloc_inode+0x183/0x250 [ 717.644660][T20652] alloc_inode+0x183/0x250 [ 717.644679][T20652] new_inode+0x22/0x1c0 [ 717.644696][T20652] ? dput.part.0+0xdd/0x570 [ 717.644717][T20652] simple_fill_super+0x2d9/0x680 [ 717.644734][T20652] ? __pfx_nfsd_fill_super+0x10/0x10 [ 717.644782][T20652] nfsd_fill_super+0x98/0x560 [ 717.644798][T20652] ? __pfx_set_anon_super_fc+0x10/0x10 [ 717.644820][T20652] ? __pfx_nfsd_fill_super+0x10/0x10 [ 717.644837][T20652] get_tree_keyed+0x10e/0x1d0 [ 717.644860][T20652] vfs_get_tree+0x92/0x320 [ 717.644880][T20652] path_mount+0x7d0/0x23d0 [ 717.644900][T20652] ? __pfx_path_mount+0x10/0x10 [ 717.644915][T20652] ? lockdep_hardirqs_on+0x78/0x100 [ 717.644941][T20652] ? putname+0xb1/0x110 [ 717.644955][T20652] ? kmem_cache_free+0x124/0x6a0 [ 717.644981][T20652] ? __x64_sys_mount+0x293/0x310 [ 717.644997][T20652] __x64_sys_mount+0x293/0x310 [ 717.645015][T20652] ? __pfx___x64_sys_mount+0x10/0x10 [ 717.645037][T20652] do_syscall_64+0x106/0xf80 [ 717.645056][T20652] ? clear_bhb_loop+0x40/0x90 [ 717.645074][T20652] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 717.645090][T20652] RIP: 0033:0x7f45cd19c799 [ 717.645103][T20652] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 717.645118][T20652] RSP: 002b:00007f45ce088028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 717.645132][T20652] RAX: ffffffffffffffda RBX: 00007f45cd416090 RCX: 00007f45cd19c799 [ 717.645142][T20652] RDX: 00002000000001c0 RSI: 00002000000000c0 RDI: 0000000000000000 [ 717.645152][T20652] RBP: 00007f45cd232c99 R08: 0000000000000000 R09: 0000000000000000 [ 717.645161][T20652] R10: 0000000000000005 R11: 0000000000000246 R12: 0000000000000000 [ 717.645171][T20652] R13: 00007f45cd416128 R14: 00007f45cd416090 R15: 00007ffc71348028 [ 717.645191][T20652] [ 718.170502][T20653] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2891'. [ 718.407097][T20653] HfR: entered promiscuous mode [ 718.840419][T20675] Invalid ELF header magic: != ELF [ 718.875628][T20680] netlink: 186 bytes leftover after parsing attributes in process `syz.5.2897'. [ 727.931705][T20797] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 728.040248][T20797] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 728.104394][T20797] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 728.199849][T20797] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 729.104785][ T6556] Bluetooth: hci3: command 0x0c1a tx timeout [ 729.984996][ T6556] Bluetooth: hci0: command 0x0c1a tx timeout [ 730.141283][ T6556] Bluetooth: hci2: command 0x0c1a tx timeout [ 730.222424][ T6556] Bluetooth: hci1: command 0x040f tx timeout [ 730.533350][T20852] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 735.310404][T20943] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2958'. [ 735.437641][T20943]  (unregistering): (slave bond_slave_0): Releasing backup interface [ 735.548137][T20943]  (unregistering): (slave bond_slave_1): Releasing backup interface [ 735.599014][T20943]  (unregistering): Released all slaves [ 736.766205][T20962] delete_channel: no stack [ 736.811913][T20965] netlink: 330 bytes leftover after parsing attributes in process `syz.5.2964'. [ 739.170955][T21007] netlink: 'syz.7.2975': attribute type 1 has an invalid length. [ 739.199190][T21008] openvswitch: HfR: Dropping previously announced user features [ 739.532603][ T6556] Bluetooth: hci0: unexpected event 0x3e length: 508 > 260 [ 739.532628][ T6556] Bluetooth: hci0: unexpected subevent 0x02 length: 507 > 260 [ 739.548738][ T6556] Bluetooth: hci0: Dropping invalid advertising data [ 739.555732][ T6556] Bluetooth: hci0: unknown advertising packet type: 0xe9 [ 739.555757][ T6556] Bluetooth: hci0: Dropping invalid advertising data [ 739.574393][ T6556] Bluetooth: hci0: Malformed LE Event: 0x02 [ 740.808231][T21043] random: crng reseeded on system resumption [ 741.056185][T21043] hub 1-0:1.0: USB hub found [ 741.092684][T21043] hub 1-0:1.0: 1 port detected [ 741.887904][T21062] ecryptfs_miscdev_write: Acceptable packet size range is [6-531], but amount of data written is [1]. [ 742.298794][T21074] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2989'. [ 742.942700][T21080] futex_wake_op: syz.7.2990 tries to shift op by -2048; fix this program [ 743.880345][T21098] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2993'. [ 746.102647][T21130] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 746.116953][T21130] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 746.160371][T21130] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 746.209315][T21130] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 746.942897][T21140] FAULT_INJECTION: forcing a failure. [ 746.942897][T21140] name failslab, interval 1, probability 0, space 0, times 0 [ 747.217954][T21140] CPU: 0 UID: 0 PID: 21140 Comm: syz.1.3001 Tainted: G U L syzkaller #0 PREEMPT(full) [ 747.218001][T21140] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 747.218011][T21140] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 747.218020][T21140] Call Trace: [ 747.218026][T21140] [ 747.218032][T21140] dump_stack_lvl+0x100/0x190 [ 747.218061][T21140] should_fail_ex.cold+0x5/0xa [ 747.218081][T21140] should_failslab+0xc2/0x120 [ 747.218099][T21140] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 747.218121][T21140] ? security_inode_alloc+0x3b/0x2c0 [ 747.218138][T21140] ? lockdep_init_map_type+0x5c/0x250 [ 747.218161][T21140] security_inode_alloc+0x3b/0x2c0 [ 747.218176][T21140] inode_init_always_gfp+0xced/0x1040 [ 747.218196][T21140] alloc_inode+0x8e/0x250 [ 747.218214][T21140] new_inode+0x22/0x1c0 [ 747.218234][T21140] hugetlbfs_get_inode+0x313/0x750 [ 747.218285][T21140] hugetlb_file_setup+0x3cc/0x5b0 [ 747.218304][T21140] newseg+0xabb/0xed0 [ 747.218334][T21140] ? __pfx_newseg+0x10/0x10 [ 747.218352][T21140] ? down_write+0x146/0x1f0 [ 747.218377][T21140] ? ksys_write+0x190/0x250 [ 747.218390][T21140] ? ksys_write+0x190/0x250 [ 747.218406][T21140] ipcget+0xee/0xf50 [ 747.218425][T21140] ? do_futex+0x192/0x350 [ 747.218445][T21140] ? __pfx_do_futex+0x10/0x10 [ 747.218467][T21140] ? __pfx_ipcget+0x10/0x10 [ 747.218485][T21140] ? __x64_sys_futex+0x34f/0x4d0 [ 747.218503][T21140] ? __x64_sys_futex+0x358/0x4d0 [ 747.218524][T21140] __x64_sys_shmget+0x13b/0x1b0 [ 747.218542][T21140] ? __pfx___x64_sys_shmget+0x10/0x10 [ 747.218566][T21140] do_syscall_64+0x106/0xf80 [ 747.218585][T21140] ? clear_bhb_loop+0x40/0x90 [ 747.218604][T21140] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 747.218619][T21140] RIP: 0033:0x7f45cd19c799 [ 747.218633][T21140] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 747.218648][T21140] RSP: 002b:00007f45ce046028 EFLAGS: 00000246 ORIG_RAX: 000000000000001d [ 747.218663][T21140] RAX: ffffffffffffffda RBX: 00007f45cd416270 RCX: 00007f45cd19c799 [ 747.218673][T21140] RDX: 0000000079e56dc9 RSI: 0000000000000003 RDI: 0000000100000000 [ 747.218683][T21140] RBP: 00007f45cd232c99 R08: 0000000000000000 R09: 0000000000000000 [ 747.218695][T21140] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 747.218704][T21140] R13: 00007f45cd416308 R14: 00007f45cd416270 R15: 00007ffc71348028 [ 747.218724][T21140] [ 747.594033][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.601811][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 748.103025][T21159] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3004'. [ 748.121790][ T6556] Bluetooth: hci3: command 0x0c1a tx timeout [ 748.153825][ T6556] Bluetooth: hci0: command 0x0c1a tx timeout [ 748.181606][T21161] netlink: 54 bytes leftover after parsing attributes in process `syz.1.3004'. [ 748.266017][T21165] netlink: 62 bytes leftover after parsing attributes in process `syz.5.3006'. [ 748.332548][ T6556] Bluetooth: hci1: command 0x040f tx timeout [ 748.338560][ T6556] Bluetooth: hci2: command 0x0c1a tx timeout [ 748.440594][T21170] netlink: 'syz.1.3008': attribute type 2 has an invalid length. [ 754.530091][T21290] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3036'. [ 754.634998][T21298] netlink: 'syz.8.3036': attribute type 1 has an invalid length. [ 754.764582][T21298] netlink: 13 bytes leftover after parsing attributes in process `syz.8.3036'. [ 755.132147][T21305] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 755.208042][T21305] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 755.310210][T21305] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 755.399402][T21305] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 757.194727][ T9521] Bluetooth: hci3: command 0x0c1a tx timeout [ 757.274849][ T9521] Bluetooth: hci0: command 0x0c1a tx timeout [ 757.355438][ T9521] Bluetooth: hci2: command 0x0c1a tx timeout [ 757.436184][ T9521] Bluetooth: hci1: command 0x040f tx timeout [ 760.260550][T21383] FAULT_INJECTION: forcing a failure. [ 760.260550][T21383] name failslab, interval 1, probability 0, space 0, times 0 [ 760.353687][T21383] CPU: 0 UID: 0 PID: 21383 Comm: syz.5.3060 Tainted: G U L syzkaller #0 PREEMPT(full) [ 760.353716][T21383] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 760.353723][T21383] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 760.353733][T21383] Call Trace: [ 760.353739][T21383] [ 760.353746][T21383] dump_stack_lvl+0x100/0x190 [ 760.353774][T21383] should_fail_ex.cold+0x5/0xa [ 760.353793][T21383] should_failslab+0xc2/0x120 [ 760.353809][T21383] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 760.353832][T21383] ? alloc_empty_file+0x55/0x1c0 [ 760.353855][T21383] alloc_empty_file+0x55/0x1c0 [ 760.353874][T21383] alloc_file_pseudo+0x13a/0x230 [ 760.353893][T21383] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 760.353912][T21383] ? alloc_fd+0x476/0x790 [ 760.353929][T21383] sock_alloc_file+0x50/0x210 [ 760.353963][T21383] __sys_socket+0x1c0/0x260 [ 760.353981][T21383] ? __pfx___sys_socket+0x10/0x10 [ 760.354003][T21383] __x64_sys_socket+0x72/0xb0 [ 760.354019][T21383] ? lockdep_hardirqs_on+0x78/0x100 [ 760.354040][T21383] do_syscall_64+0x106/0xf80 [ 760.354060][T21383] ? clear_bhb_loop+0x40/0x90 [ 760.354078][T21383] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 760.354094][T21383] RIP: 0033:0x7f929819c799 [ 760.354107][T21383] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 760.354121][T21383] RSP: 002b:00007f92990ba028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 760.354136][T21383] RAX: ffffffffffffffda RBX: 00007f9298415fa0 RCX: 00007f929819c799 [ 760.354146][T21383] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 760.354156][T21383] RBP: 00007f9298232c99 R08: 0000000000000000 R09: 0000000000000000 [ 760.354165][T21383] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 760.354173][T21383] R13: 00007f9298416038 R14: 00007f9298415fa0 R15: 00007fff5454a3d8 [ 760.354193][T21383] [ 775.747044][T21561] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3093'. [ 776.564192][ T9521] Bluetooth: hci1: unexpected event 0x3e length: 508 > 260 [ 776.564219][ T9521] Bluetooth: hci1: unexpected subevent 0x02 length: 507 > 260 [ 776.579901][ T9521] Bluetooth: hci1: Dropping invalid advertising data [ 776.587106][ T9521] Bluetooth: hci1: unknown advertising packet type: 0xe9 [ 776.587129][ T9521] Bluetooth: hci1: Dropping invalid advertising data [ 776.602242][ T9521] Bluetooth: hci1: Malformed LE Event: 0x02 [ 778.118287][ T9521] block nbd0: Receive control failed (result -32) [ 778.377883][T21596] FAULT_INJECTION: forcing a failure. [ 778.377883][T21596] name failslab, interval 1, probability 0, space 0, times 0 [ 778.526571][T21596] CPU: 0 UID: 0 PID: 21596 Comm: syz.8.3101 Tainted: G U L syzkaller #0 PREEMPT(full) [ 778.526601][T21596] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 778.526609][T21596] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 778.526618][T21596] Call Trace: [ 778.526624][T21596] [ 778.526631][T21596] dump_stack_lvl+0x100/0x190 [ 778.526658][T21596] should_fail_ex.cold+0x5/0xa [ 778.526678][T21596] should_failslab+0xc2/0x120 [ 778.526694][T21596] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 778.526717][T21596] ? __d_alloc+0x34/0xa80 [ 778.526737][T21596] __d_alloc+0x34/0xa80 [ 778.526755][T21596] d_alloc_pseudo+0x1c/0xc0 [ 778.526775][T21596] alloc_file_pseudo+0xcf/0x230 [ 778.526794][T21596] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 778.526813][T21596] ? alloc_fd+0x476/0x790 [ 778.526830][T21596] sock_alloc_file+0x50/0x210 [ 778.526854][T21596] __sys_socket+0x1c0/0x260 [ 778.526870][T21596] ? __pfx___sys_socket+0x10/0x10 [ 778.526892][T21596] __x64_sys_socket+0x72/0xb0 [ 778.526907][T21596] ? lockdep_hardirqs_on+0x78/0x100 [ 778.526929][T21596] do_syscall_64+0x106/0xf80 [ 778.526948][T21596] ? clear_bhb_loop+0x40/0x90 [ 778.526966][T21596] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 778.526982][T21596] RIP: 0033:0x7f0e38b9c799 [ 778.526996][T21596] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 778.527010][T21596] RSP: 002b:00007f0e39a2c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 778.527025][T21596] RAX: ffffffffffffffda RBX: 00007f0e38e15fa0 RCX: 00007f0e38b9c799 [ 778.527035][T21596] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000023 [ 778.527044][T21596] RBP: 00007f0e38c32c99 R08: 0000000000000000 R09: 0000000000000000 [ 778.527053][T21596] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 778.527062][T21596] R13: 00007f0e38e16038 R14: 00007f0e38e15fa0 R15: 00007ffe40108358 [ 778.527082][T21596] [ 781.544191][T21632] netlink: 186 bytes leftover after parsing attributes in process `syz.7.3109'. [ 787.709255][ T5866] Process accounting resumed [ 789.552496][T21737] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3131'. [ 789.912296][T21743] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3132'. [ 790.152090][T21749] netlink: 334 bytes leftover after parsing attributes in process `syz.7.3133'. [ 790.227169][T21749] netlink: 334 bytes leftover after parsing attributes in process `syz.7.3133'. [ 790.280463][T21734] bond0: option all_slaves_active: invalid value () [ 791.594177][T21763] program syz.8.3136 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 791.627700][T21775] can: request_module (can-proto-4) failed. [ 793.728622][T21810] netlink: 346 bytes leftover after parsing attributes in process `syz.1.3146'. [ 795.050279][T21828] ecryptfs_miscdev_write: Acceptable packet size range is [6-531], but amount of data written is [1]. [ 797.992660][T21865] zswap: compressor not available [ 800.336475][T21899] could not allocate digest TFM handle [ 804.637839][T21948] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 804.715087][T21948] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 804.790310][T21948] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 804.861038][T21948] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 805.265286][T21959] FAULT_INJECTION: forcing a failure. [ 805.265286][T21959] name failslab, interval 1, probability 0, space 0, times 0 [ 805.529328][T21959] CPU: 0 UID: 0 PID: 21959 Comm: syz.1.3175 Tainted: G U L syzkaller #0 PREEMPT(full) [ 805.529355][T21959] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 805.529361][T21959] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 805.529370][T21959] Call Trace: [ 805.529375][T21959] [ 805.529382][T21959] dump_stack_lvl+0x100/0x190 [ 805.529408][T21959] should_fail_ex.cold+0x5/0xa [ 805.529426][T21959] should_failslab+0xc2/0x120 [ 805.529441][T21959] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 805.529462][T21959] ? sk_prot_alloc+0x60/0x2a0 [ 805.529481][T21959] sk_prot_alloc+0x60/0x2a0 [ 805.529496][T21959] sk_alloc+0x36/0xe80 [ 805.529514][T21959] inet6_create+0x385/0x12b0 [ 805.529616][T21959] ? inet6_create+0x7f/0x12b0 [ 805.529637][T21959] __sock_create+0x339/0x860 [ 805.529656][T21959] inet_ctl_sock_create+0x94/0x230 [ 805.529703][T21959] ? __pfx_inet_ctl_sock_create+0x10/0x10 [ 805.529717][T21959] ? timer_init_key+0x150/0x340 [ 805.529737][T21959] ? __pfx_sctp_ctrlsock_init+0x10/0x10 [ 805.529811][T21959] sctp_ctrlsock_init+0x40/0xd0 [ 805.529829][T21959] ops_init+0x1e2/0x5f0 [ 805.529852][T21959] setup_net+0x118/0x3a0 [ 805.529872][T21959] ? __pfx_setup_net+0x10/0x10 [ 805.529890][T21959] ? lockdep_init_map_type+0x5c/0x250 [ 805.529909][T21959] ? mutex_init_lockep+0x110/0x150 [ 805.529931][T21959] copy_net_ns+0x46f/0x7c0 [ 805.529956][T21959] create_new_namespaces+0x3ea/0xac0 [ 805.529977][T21959] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 805.529993][T21959] ksys_unshare+0x473/0xad0 [ 805.530013][T21959] ? __pfx_ksys_unshare+0x10/0x10 [ 805.530036][T21959] __x64_sys_unshare+0x31/0x40 [ 805.530053][T21959] do_syscall_64+0x106/0xf80 [ 805.530073][T21959] ? clear_bhb_loop+0x40/0x90 [ 805.530090][T21959] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 805.530105][T21959] RIP: 0033:0x7f45cd19c799 [ 805.530118][T21959] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 805.530132][T21959] RSP: 002b:00007f45ce088028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 805.530147][T21959] RAX: ffffffffffffffda RBX: 00007f45cd416090 RCX: 00007f45cd19c799 [ 805.530156][T21959] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 805.530165][T21959] RBP: 00007f45cd232c99 R08: 0000000000000000 R09: 0000000000000000 [ 805.530174][T21959] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 805.530182][T21959] R13: 00007f45cd416128 R14: 00007f45cd416090 R15: 00007ffc71348028 [ 805.530201][T21959] [ 806.534585][ T9521] Bluetooth: hci3: command 0x0c1a tx timeout [ 806.870485][ T9521] Bluetooth: hci0: command 0x0c1a tx timeout [ 806.876508][ T9521] Bluetooth: hci2: command 0x0c1a tx timeout [ 807.026995][ T6556] Bluetooth: hci1: command 0x040f tx timeout [ 808.828179][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.834575][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 822.748956][T22175] netlink: 'syz.1.3217': attribute type 4 has an invalid length. [ 822.922984][ T29] audit: type=1800 audit(2147483683.771:110): pid=22181 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.3219" name="discovery_nqn" dev="configfs" ino=188070 res=0 errno=0 [ 823.655457][T22189] can: request_module (can-proto-0) failed. [ 824.165145][T22204] vhci_hcd vhci_hcd.2: SetHubDepth req not supported for USB 2.0 roothub [ 824.509430][T18004] usb usb40-port2: attempt power cycle [ 824.755217][ T29] audit: type=1800 audit(2147483685.600:111): pid=22213 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.3225" name="discovery_nqn" dev="configfs" ino=189805 res=0 errno=0 [ 825.152969][T18004] usb usb40-port2: unable to enumerate USB device [ 827.481038][T22240] FAULT_INJECTION: forcing a failure. [ 827.481038][T22240] name failslab, interval 1, probability 0, space 0, times 0 [ 827.688207][T22240] CPU: 0 UID: 0 PID: 22240 Comm: syz.8.3229 Tainted: G U L syzkaller #0 PREEMPT(full) [ 827.688235][T22240] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 827.688242][T22240] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 827.688251][T22240] Call Trace: [ 827.688257][T22240] [ 827.688273][T22240] dump_stack_lvl+0x100/0x190 [ 827.688303][T22240] should_fail_ex.cold+0x5/0xa [ 827.688322][T22240] should_failslab+0xc2/0x120 [ 827.688338][T22240] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 827.688360][T22240] ? mas_alloc_nodes+0x280/0x390 [ 827.688382][T22240] mas_alloc_nodes+0x280/0x390 [ 827.688402][T22240] mas_preallocate+0x39c/0xf10 [ 827.688426][T22240] ? __pfx_mas_preallocate+0x10/0x10 [ 827.688451][T22240] ? vm_area_alloc+0x1f/0x160 [ 827.688471][T22240] ? lockdep_init_map_type+0x5c/0x250 [ 827.688493][T22240] __mmap_region+0x12b5/0x29e0 [ 827.688517][T22240] ? __pfx___mmap_region+0x10/0x10 [ 827.688541][T22240] ? ima_match_policy+0x8c4/0x2350 [ 827.688638][T22240] ? find_held_lock+0x2b/0x80 [ 827.688653][T22240] ? process_measurement+0x4c8/0x2350 [ 827.688675][T22240] ? process_measurement+0x4c8/0x2350 [ 827.688705][T22240] ? process_measurement+0x1f4/0x2350 [ 827.688751][T22240] ? rcu_is_watching+0x12/0xc0 [ 827.688773][T22240] ? cap_capable+0x107/0x460 [ 827.688798][T22240] mmap_region+0x30a/0x3e0 [ 827.688823][T22240] do_mmap+0xc63/0x12f0 [ 827.688843][T22240] ? __pfx_do_mmap+0x10/0x10 [ 827.688858][T22240] ? __pfx_down_write_killable+0x10/0x10 [ 827.688885][T22240] vm_mmap_pgoff+0x29e/0x470 [ 827.688906][T22240] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 827.688921][T22240] ? __fget_files+0x215/0x3d0 [ 827.688938][T22240] ? __fget_files+0x21f/0x3d0 [ 827.688956][T22240] ksys_mmap_pgoff+0x3c8/0x650 [ 827.688971][T22240] ? __x64_sys_futex+0x34f/0x4d0 [ 827.688989][T22240] ? __x64_sys_futex+0x358/0x4d0 [ 827.689008][T22240] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 827.689024][T22240] ? xfd_validate_state+0x129/0x190 [ 827.689048][T22240] __x64_sys_mmap+0x125/0x190 [ 827.689071][T22240] do_syscall_64+0x106/0xf80 [ 827.689091][T22240] ? clear_bhb_loop+0x40/0x90 [ 827.689109][T22240] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 827.689125][T22240] RIP: 0033:0x7f0e38b9c799 [ 827.689138][T22240] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 827.689153][T22240] RSP: 002b:00007f0e39a2c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 827.689169][T22240] RAX: ffffffffffffffda RBX: 00007f0e38e15fa0 RCX: 00007f0e38b9c799 [ 827.689180][T22240] RDX: 0000000000000007 RSI: 00000000003fffff RDI: 0000000000000000 [ 827.689189][T22240] RBP: 00007f0e38c32c99 R08: 00000000000000dd R09: 0000000000000000 [ 827.689199][T22240] R10: 0000000000000011 R11: 0000000000000246 R12: 0000000000000000 [ 827.689208][T22240] R13: 00007f0e38e16038 R14: 00007f0e38e15fa0 R15: 00007ffe40108358 [ 827.689243][T22240] [ 831.532656][T22285] FAULT_INJECTION: forcing a failure. [ 831.532656][T22285] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 831.755880][T22285] CPU: 0 UID: 0 PID: 22285 Comm: syz.5.3238 Tainted: G U L syzkaller #0 PREEMPT(full) [ 831.755915][T22285] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 831.755921][T22285] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 831.755930][T22285] Call Trace: [ 831.755935][T22285] [ 831.755941][T22285] dump_stack_lvl+0x100/0x190 [ 831.755969][T22285] should_fail_ex.cold+0x5/0xa [ 831.755983][T22285] ? prepare_alloc_pages+0x16d/0x5f0 [ 831.756002][T22285] should_fail_alloc_page+0xeb/0x140 [ 831.756018][T22285] prepare_alloc_pages+0x1f0/0x5f0 [ 831.756033][T22285] ? rcu_is_watching+0x12/0xc0 [ 831.756057][T22285] __alloc_frozen_pages_noprof+0x19a/0x2ba0 [ 831.756077][T22285] ? __alloc_frozen_pages_noprof+0x2b1/0x2ba0 [ 831.756098][T22285] ? __pfx_css_rstat_updated+0x10/0x10 [ 831.756121][T22285] ? find_held_lock+0x2b/0x80 [ 831.756134][T22285] ? rcu_read_unlock+0x17/0x60 [ 831.756150][T22285] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 831.756170][T22285] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 831.756189][T22285] ? page_counter_charge+0x1d2/0x240 [ 831.756208][T22285] ? rcu_is_watching+0x12/0xc0 [ 831.756228][T22285] ? trace_mm_page_alloc+0x17a/0x1d0 [ 831.756251][T22285] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 831.756275][T22285] ? policy_nodemask+0xed/0x4f0 [ 831.756291][T22285] alloc_pages_mpol+0x1fb/0x550 [ 831.756307][T22285] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 831.756322][T22285] ? do_raw_spin_lock+0x128/0x260 [ 831.756341][T22285] ? find_held_lock+0x2b/0x80 [ 831.756354][T22285] ? __pud_alloc+0x529/0x6e0 [ 831.756371][T22285] alloc_pages_noprof+0x131/0x390 [ 831.756387][T22285] __pmd_alloc+0x3b/0x950 [ 831.756402][T22285] ? __pud_alloc+0x52e/0x6e0 [ 831.756419][T22285] walk_to_pmd+0x3a3/0x4c0 [ 831.756436][T22285] get_locked_pte+0x25/0xc0 [ 831.756454][T22285] map_ldt_struct+0x3c1/0xa70 [ 831.756473][T22285] ? __pfx_map_ldt_struct+0x10/0x10 [ 831.756487][T22285] ? alloc_pages_noprof+0x233/0x390 [ 831.756505][T22285] write_ldt+0x6d3/0xd40 [ 831.756522][T22285] ? __pfx_write_ldt+0x10/0x10 [ 831.756537][T22285] ? xfd_validate_state+0x129/0x190 [ 831.756562][T22285] __x64_sys_modify_ldt+0xb1/0x170 [ 831.756576][T22285] do_syscall_64+0x106/0xf80 [ 831.756595][T22285] ? clear_bhb_loop+0x40/0x90 [ 831.756612][T22285] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 831.756627][T22285] RIP: 0033:0x7f929819c799 [ 831.756645][T22285] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 831.756659][T22285] RSP: 002b:00007f92990ba028 EFLAGS: 00000246 ORIG_RAX: 000000000000009a [ 831.756673][T22285] RAX: ffffffffffffffda RBX: 00007f9298415fa0 RCX: 00007f929819c799 [ 831.756682][T22285] RDX: 0000000000000010 RSI: 00002000000001c0 RDI: 0000000000000001 [ 831.756691][T22285] RBP: 00007f9298232c99 R08: 0000000000000000 R09: 0000000000000000 [ 831.756700][T22285] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 831.756708][T22285] R13: 00007f9298416038 R14: 00007f9298415fa0 R15: 00007fff5454a3d8 [ 831.756727][T22285] [ 832.092397][T22299] netlink: 29 bytes leftover after parsing attributes in process `syz.8.3240'. [ 833.434666][T22326] netlink: 342 bytes leftover after parsing attributes in process `syz.7.3244'. [ 835.752705][T22351] FAULT_INJECTION: forcing a failure. [ 835.752705][T22351] name fail_futex, interval 1, probability 0, space 0, times 0 [ 835.910218][T22351] CPU: 0 UID: 0 PID: 22351 Comm: syz.5.3248 Tainted: G U L syzkaller #0 PREEMPT(full) [ 835.910246][T22351] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 835.910252][T22351] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 835.910262][T22351] Call Trace: [ 835.910267][T22351] [ 835.910273][T22351] dump_stack_lvl+0x100/0x190 [ 835.910302][T22351] should_fail_ex.cold+0x5/0xa [ 835.910321][T22351] get_futex_key+0x1d2/0x1620 [ 835.910342][T22351] ? __pfx_get_futex_key+0x10/0x10 [ 835.910358][T22351] ? do_user_addr_fault+0x8d6/0x12f0 [ 835.910384][T22351] ? irqentry_exit+0x180/0x670 [ 835.910404][T22351] ? lockdep_hardirqs_on+0x78/0x100 [ 835.910426][T22351] futex_wake+0xea/0x530 [ 835.910448][T22351] ? __pfx_futex_wake+0x10/0x10 [ 835.910482][T22351] ? __get_user_nocheck_8+0x20/0x20 [ 835.910501][T22351] ? do_vfs_ioctl+0x226/0x13e0 [ 835.910525][T22351] do_futex+0x32b/0x350 [ 835.910544][T22351] ? __pfx_do_futex+0x10/0x10 [ 835.910564][T22351] ? find_held_lock+0x2b/0x80 [ 835.910580][T22351] __x64_sys_futex+0x34f/0x4d0 [ 835.910600][T22351] ? __fget_files+0x21f/0x3d0 [ 835.910615][T22351] ? __pfx___x64_sys_futex+0x10/0x10 [ 835.910640][T22351] do_syscall_64+0x106/0xf80 [ 835.910660][T22351] ? clear_bhb_loop+0x40/0x90 [ 835.910678][T22351] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 835.910693][T22351] RIP: 0033:0x7f929819c799 [ 835.910706][T22351] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 835.910721][T22351] RSP: 002b:00007f92990990e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 835.910736][T22351] RAX: ffffffffffffffda RBX: 00007f9298416098 RCX: 00007f929819c799 [ 835.910747][T22351] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f929841609c [ 835.910756][T22351] RBP: 00007f9298416090 R08: 0000000000000000 R09: 0000000000000000 [ 835.910765][T22351] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 835.910775][T22351] R13: 00007f9298416128 R14: 00007fff5454a2f0 R15: 00007fff5454a3d8 [ 835.910794][T22351] [ 840.354308][T22388] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3257'. [ 840.771141][T22397] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3257'. [ 841.683038][T22408] vivid-007: ================= START STATUS ================= [ 841.851404][T22408] vivid-007: Generate PTS: true [ 841.856311][T22408] vivid-007: Generate SCR: true [ 841.991102][T22408] tpg source WxH: 320x240 (Y'CbCr) [ 841.996235][T22408] tpg field: 1 [ 842.092193][T22408] tpg crop: (0,0)/320x240 [ 842.096538][T22408] tpg compose: (0,0)/320x240 [ 842.347448][T22408] tpg colorspace: 8 [ 842.532709][T22408] tpg transfer function: 0/0 [ 842.579735][T22408] tpg Y'CbCr encoding: 0/0 [ 842.678809][T22423] synth uevent: /module/au0828: unknown uevent action string [ 842.749035][T22408] tpg quantization: 0/0 [ 842.753214][T22408] tpg RGB range: 0/2 [ 842.757198][T22408] vivid-007: ================== END STATUS ================== [ 845.053733][T22446] Invalid ELF header magic: != ELF [ 854.520579][T22531] FAULT_INJECTION: forcing a failure. [ 854.520579][T22531] name failslab, interval 1, probability 0, space 0, times 0 [ 854.716115][T22531] CPU: 0 UID: 0 PID: 22531 Comm: syz.8.3289 Tainted: G U L syzkaller #0 PREEMPT(full) [ 854.716142][T22531] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 854.716148][T22531] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 854.716164][T22531] Call Trace: [ 854.716169][T22531] [ 854.716176][T22531] dump_stack_lvl+0x100/0x190 [ 854.716204][T22531] should_fail_ex.cold+0x5/0xa [ 854.716222][T22531] should_failslab+0xc2/0x120 [ 854.716239][T22531] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 854.716261][T22531] ? __d_alloc+0x34/0xa80 [ 854.716276][T22531] ? lockdep_init_map_type+0x5c/0x250 [ 854.716298][T22531] __d_alloc+0x34/0xa80 [ 854.716316][T22531] d_alloc_pseudo+0x1c/0xc0 [ 854.716335][T22531] alloc_file_pseudo+0xcf/0x230 [ 854.716353][T22531] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 854.716371][T22531] ? alloc_fd+0x476/0x790 [ 854.716388][T22531] sock_alloc_file+0x50/0x210 [ 854.716412][T22531] __sys_socket+0x1c0/0x260 [ 854.716427][T22531] ? __pfx___sys_socket+0x10/0x10 [ 854.716448][T22531] __x64_sys_socket+0x72/0xb0 [ 854.716462][T22531] ? lockdep_hardirqs_on+0x78/0x100 [ 854.716484][T22531] do_syscall_64+0x106/0xf80 [ 854.716502][T22531] ? clear_bhb_loop+0x40/0x90 [ 854.716520][T22531] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 854.716535][T22531] RIP: 0033:0x7f0e38b9c799 [ 854.716547][T22531] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 854.716560][T22531] RSP: 002b:00007f0e39a2c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 854.716575][T22531] RAX: ffffffffffffffda RBX: 00007f0e38e15fa0 RCX: 00007f0e38b9c799 [ 854.716585][T22531] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 854.716593][T22531] RBP: 00007f0e38c32c99 R08: 0000000000000000 R09: 0000000000000000 [ 854.716602][T22531] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 854.716611][T22531] R13: 00007f0e38e16038 R14: 00007f0e38e15fa0 R15: 00007ffe40108358 [ 854.716629][T22531] [ 855.546941][T22545] FAULT_INJECTION: forcing a failure. [ 855.546941][T22545] name failslab, interval 1, probability 0, space 0, times 0 [ 855.664048][T22545] CPU: 0 UID: 0 PID: 22545 Comm: syz.8.3292 Tainted: G U L syzkaller #0 PREEMPT(full) [ 855.664076][T22545] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 855.664082][T22545] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 855.664091][T22545] Call Trace: [ 855.664097][T22545] [ 855.664103][T22545] dump_stack_lvl+0x100/0x190 [ 855.664129][T22545] should_fail_ex.cold+0x5/0xa [ 855.664147][T22545] should_failslab+0xc2/0x120 [ 855.664162][T22545] __kmalloc_cache_noprof+0x7a/0x6f0 [ 855.664181][T22545] ? alloc_fs_context+0x57/0xf40 [ 855.664200][T22545] alloc_fs_context+0x57/0xf40 [ 855.664219][T22545] mq_init_ns+0x16e/0x820 [ 855.664238][T22545] copy_ipcs+0x3dd/0x7e0 [ 855.664253][T22545] create_new_namespaces+0x20a/0xac0 [ 855.664270][T22545] ? security_capable+0x80/0x260 [ 855.664294][T22545] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 855.664311][T22545] ksys_unshare+0x473/0xad0 [ 855.664330][T22545] ? __pfx_ksys_unshare+0x10/0x10 [ 855.664353][T22545] __x64_sys_unshare+0x31/0x40 [ 855.664370][T22545] do_syscall_64+0x106/0xf80 [ 855.664390][T22545] ? clear_bhb_loop+0x40/0x90 [ 855.664407][T22545] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 855.664422][T22545] RIP: 0033:0x7f0e38b9c799 [ 855.664434][T22545] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 855.664448][T22545] RSP: 002b:00007f0e39a2c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 855.664462][T22545] RAX: ffffffffffffffda RBX: 00007f0e38e15fa0 RCX: 00007f0e38b9c799 [ 855.664472][T22545] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000006c000000 [ 855.664481][T22545] RBP: 00007f0e38c32c99 R08: 0000000000000000 R09: 0000000000000000 [ 855.664490][T22545] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 855.664498][T22545] R13: 00007f0e38e16038 R14: 00007f0e38e15fa0 R15: 00007ffe40108358 [ 855.664516][T22545] [ 856.165077][T22541] zswap: compressor  not available [ 856.656108][T22563] random: crng reseeded on system resumption [ 857.481601][T22561] bond0: invalid ARP target specified [ 857.587961][T22556] bond0: invalid ARP target specified [ 857.705398][T22566] bond0: invalid ARP target specified [ 857.786940][T22561] FAULT_INJECTION: forcing a failure. [ 857.786940][T22561] name fail_futex, interval 1, probability 0, space 0, times 0 [ 858.207545][T22561] CPU: 0 UID: 0 PID: 22561 Comm: syz.5.3295 Tainted: G U L syzkaller #0 PREEMPT(full) [ 858.207574][T22561] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 858.207580][T22561] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 858.207589][T22561] Call Trace: [ 858.207594][T22561] [ 858.207600][T22561] dump_stack_lvl+0x100/0x190 [ 858.207628][T22561] should_fail_ex.cold+0x5/0xa [ 858.207646][T22561] get_futex_key+0x1d2/0x1620 [ 858.207669][T22561] ? __pfx_get_futex_key+0x10/0x10 [ 858.207685][T22561] ? rcu_is_watching+0x12/0xc0 [ 858.207706][T22561] ? vfs_writev+0x1d5/0xe10 [ 858.207727][T22561] ? kfree+0x2ec/0x6b0 [ 858.207750][T22561] futex_wake+0xea/0x530 [ 858.207772][T22561] ? __pfx_futex_wake+0x10/0x10 [ 858.207795][T22561] ? do_writev+0x214/0x340 [ 858.207820][T22561] do_futex+0x32b/0x350 [ 858.207838][T22561] ? __pfx_do_futex+0x10/0x10 [ 858.207858][T22561] ? __fget_files+0x21f/0x3d0 [ 858.207874][T22561] __x64_sys_futex+0x34f/0x4d0 [ 858.207895][T22561] ? __pfx___x64_sys_futex+0x10/0x10 [ 858.207914][T22561] ? __pfx_do_writev+0x10/0x10 [ 858.207939][T22561] do_syscall_64+0x106/0xf80 [ 858.207960][T22561] ? clear_bhb_loop+0x40/0x90 [ 858.207978][T22561] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 858.207993][T22561] RIP: 0033:0x7f929819c799 [ 858.208007][T22561] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 858.208022][T22561] RSP: 002b:00007f92990990e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 858.208037][T22561] RAX: ffffffffffffffda RBX: 00007f9298416098 RCX: 00007f929819c799 [ 858.208047][T22561] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f929841609c [ 858.208056][T22561] RBP: 00007f9298416090 R08: 0000000000000000 R09: 0000000000000000 [ 858.208066][T22561] R10: 0000000000000007 R11: 0000000000000246 R12: 0000000000000000 [ 858.208074][T22561] R13: 00007f9298416128 R14: 00007fff5454a2f0 R15: 00007fff5454a3d8 [ 858.208094][T22561] [ 863.931783][T22625] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3308'. [ 864.055628][T22623] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3308'. [ 864.177088][T22622] bond0: invalid ARP target specified [ 864.301361][T22625] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 864.378353][T22625] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 864.643102][T22625] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 864.683907][T22625] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 868.328884][T22672] HSR: entered promiscuous mode [ 870.299025][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.305813][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.715741][T22698] FAULT_INJECTION: forcing a failure. [ 870.715741][T22698] name failslab, interval 1, probability 0, space 0, times 0 [ 870.872378][T22698] CPU: 0 UID: 0 PID: 22698 Comm: syz.1.3324 Tainted: G U L syzkaller #0 PREEMPT(full) [ 870.872420][T22698] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 870.872426][T22698] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 870.872436][T22698] Call Trace: [ 870.872442][T22698] [ 870.872448][T22698] dump_stack_lvl+0x100/0x190 [ 870.872478][T22698] should_fail_ex.cold+0x5/0xa [ 870.872497][T22698] should_failslab+0xc2/0x120 [ 870.872512][T22698] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 870.872535][T22698] ? shmem_alloc_inode+0x25/0x50 [ 870.872553][T22698] ? __lock_acquire+0x4a5/0x2630 [ 870.872572][T22698] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 870.872589][T22698] shmem_alloc_inode+0x25/0x50 [ 870.872605][T22698] alloc_inode+0x68/0x250 [ 870.872624][T22698] new_inode+0x22/0x1c0 [ 870.872644][T22698] shmem_get_inode+0x212/0x1040 [ 870.872665][T22698] ? __pfx_shmem_get_inode+0x10/0x10 [ 870.872683][T22698] ? rcu_is_watching+0x12/0xc0 [ 870.872703][T22698] ? percpu_counter_add_batch+0xb9/0x230 [ 870.872727][T22698] __shmem_file_setup+0x3ac/0x490 [ 870.872748][T22698] ? __pfx___shmem_file_setup+0x10/0x10 [ 870.872770][T22698] ? vm_area_alloc+0x1f/0x160 [ 870.872791][T22698] shmem_zero_setup+0x96/0x1b0 [ 870.872815][T22698] __mmap_region+0x2198/0x29e0 [ 870.872840][T22698] ? __pfx___mmap_region+0x10/0x10 [ 870.872865][T22698] ? set_next_entity+0x11e/0x9c0 [ 870.872889][T22698] ? __lock_acquire+0x4a5/0x2630 [ 870.872907][T22698] ? find_held_lock+0x2b/0x80 [ 870.872928][T22698] ? find_held_lock+0x2b/0x80 [ 870.872941][T22698] ? finish_task_switch.isra.0+0x200/0xb80 [ 870.872957][T22698] ? finish_task_switch.isra.0+0x200/0xb80 [ 870.872991][T22698] ? trace_sched_exit_tp+0x13a/0x180 [ 870.873010][T22698] ? __schedule+0x1000/0x6120 [ 870.873053][T22698] ? rcu_is_watching+0x12/0xc0 [ 870.873074][T22698] ? cap_capable+0x107/0x460 [ 870.873100][T22698] mmap_region+0x180/0x3e0 [ 870.873132][T22698] do_mmap+0xc63/0x12f0 [ 870.873152][T22698] ? __pfx_do_mmap+0x10/0x10 [ 870.873170][T22698] ? __pfx_down_write_killable+0x10/0x10 [ 870.873196][T22698] vm_mmap_pgoff+0x29e/0x470 [ 870.873217][T22698] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 870.873236][T22698] ? do_futex+0x192/0x350 [ 870.873255][T22698] ? __pfx_do_futex+0x10/0x10 [ 870.873272][T22698] ? __pfx_do_sys_openat2+0x10/0x10 [ 870.873295][T22698] ksys_mmap_pgoff+0xe1/0x650 [ 870.873310][T22698] ? __x64_sys_futex+0x34f/0x4d0 [ 870.873328][T22698] ? __x64_sys_futex+0x358/0x4d0 [ 870.873346][T22698] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 870.873362][T22698] ? xfd_validate_state+0x129/0x190 [ 870.873388][T22698] __x64_sys_mmap+0x125/0x190 [ 870.873411][T22698] do_syscall_64+0x106/0xf80 [ 870.873430][T22698] ? clear_bhb_loop+0x40/0x90 [ 870.873449][T22698] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 870.873464][T22698] RIP: 0033:0x7f45cd19c799 [ 870.873478][T22698] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 870.873493][T22698] RSP: 002b:00007f45ce088028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 870.873509][T22698] RAX: ffffffffffffffda RBX: 00007f45cd416090 RCX: 00007f45cd19c799 [ 870.873520][T22698] RDX: 00000000000000db RSI: 000000000000e985 RDI: 0000000000000000 [ 870.873529][T22698] RBP: 00007f45cd232c99 R08: 0000000000000401 R09: 0000000000008000 [ 870.873539][T22698] R10: 0000000000000eb1 R11: 0000000000000246 R12: 0000000000000000 [ 870.873548][T22698] R13: 00007f45cd416128 R14: 00007f45cd416090 R15: 00007ffc71348028 [ 870.873568][T22698] [ 875.431785][T22715] FAULT_INJECTION: forcing a failure. [ 875.431785][T22715] name failslab, interval 1, probability 0, space 0, times 0 [ 875.585549][T22712] [U] ^\ [ 875.629456][T22715] CPU: 0 UID: 0 PID: 22715 Comm: syz.5.3327 Tainted: G U L syzkaller #0 PREEMPT(full) [ 875.629484][T22715] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 875.629489][T22715] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 875.629498][T22715] Call Trace: [ 875.629508][T22715] [ 875.629516][T22715] dump_stack_lvl+0x100/0x190 [ 875.629542][T22715] should_fail_ex.cold+0x5/0xa [ 875.629560][T22715] should_failslab+0xc2/0x120 [ 875.629575][T22715] __kvmalloc_node_noprof+0xfa/0xa00 [ 875.629596][T22715] ? seq_read_iter+0x819/0x1270 [ 875.629621][T22715] seq_read_iter+0x819/0x1270 [ 875.629649][T22715] kernfs_fop_read_iter+0x46c/0x610 [ 875.629667][T22715] ? rw_verify_area+0xce/0x6d0 [ 875.629687][T22715] ? __pfx_kernfs_fop_read_iter+0x10/0x10 [ 875.629703][T22715] vfs_read+0x825/0xb30 [ 875.629727][T22715] ? __pfx_vfs_read+0x10/0x10 [ 875.629760][T22715] ksys_read+0x12a/0x250 [ 875.629780][T22715] ? __pfx_ksys_read+0x10/0x10 [ 875.629806][T22715] do_syscall_64+0x106/0xf80 [ 875.629826][T22715] ? clear_bhb_loop+0x40/0x90 [ 875.629844][T22715] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 875.629858][T22715] RIP: 0033:0x7f929819c799 [ 875.629870][T22715] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 875.629884][T22715] RSP: 002b:00007f92990ba028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 875.629899][T22715] RAX: ffffffffffffffda RBX: 00007f9298415fa0 RCX: 00007f929819c799 [ 875.629909][T22715] RDX: 0000000000001f40 RSI: 0000000000000000 RDI: 0000000000000004 [ 875.629917][T22715] RBP: 00007f92990ba090 R08: 0000000000000000 R09: 0000000000000000 [ 875.629925][T22715] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 875.629934][T22715] R13: 00007f9298416038 R14: 00007f9298415fa0 R15: 00007fff5454a3d8 [ 875.629953][T22715] [ 878.856629][T22748] netlink: 24 bytes leftover after parsing attributes in process `syz.8.3334'. [ 880.899944][T22777] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3343'. [ 881.787682][T22786] serio: Serial port pty6 [ 882.971876][T22799] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input36 [ 889.456845][T22869] netlink: 326 bytes leftover after parsing attributes in process `syz.7.3362'. [ 889.645203][T22869] netlink: 326 bytes leftover after parsing attributes in process `syz.7.3362'. [ 889.740828][T22872] FAULT_INJECTION: forcing a failure. [ 889.740828][T22872] name failslab, interval 1, probability 0, space 0, times 0 [ 890.320949][T22872] CPU: 0 UID: 0 PID: 22872 Comm: syz.5.3361 Tainted: G U L syzkaller #0 PREEMPT(full) [ 890.320979][T22872] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 890.320986][T22872] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 890.320996][T22872] Call Trace: [ 890.321002][T22872] [ 890.321008][T22872] dump_stack_lvl+0x100/0x190 [ 890.321036][T22872] should_fail_ex.cold+0x5/0xa [ 890.321055][T22872] should_failslab+0xc2/0x120 [ 890.321071][T22872] __kmalloc_cache_noprof+0x7a/0x6f0 [ 890.321091][T22872] ? sctp_endpoint_new+0xfc/0xb20 [ 890.321138][T22872] ? __debug_object_init+0x2de/0x3d0 [ 890.321234][T22872] sctp_endpoint_new+0xfc/0xb20 [ 890.321259][T22872] ? __pfx_sctp_endpoint_new+0x10/0x10 [ 890.321281][T22872] ? lockdep_init_map_type+0x5c/0x250 [ 890.321303][T22872] ? lockdep_init_map_type+0x5c/0x250 [ 890.321324][T22872] sctp_init_sock+0xe2b/0x1300 [ 890.321400][T22872] ? __pfx_sctp_v6_init_sock+0x10/0x10 [ 890.321422][T22872] sctp_v6_init_sock+0x16/0x70 [ 890.321442][T22872] ? __pfx_sctp_v6_init_sock+0x10/0x10 [ 890.321463][T22872] inet6_create+0xb21/0x12b0 [ 890.321487][T22872] ? inet6_create+0x7f/0x12b0 [ 890.321509][T22872] __sock_create+0x339/0x860 [ 890.321530][T22872] inet_ctl_sock_create+0x94/0x230 [ 890.321547][T22872] ? __pfx_inet_ctl_sock_create+0x10/0x10 [ 890.321563][T22872] ? timer_init_key+0x150/0x340 [ 890.321589][T22872] ? __pfx_sctp_ctrlsock_init+0x10/0x10 [ 890.321610][T22872] sctp_ctrlsock_init+0x40/0xd0 [ 890.321630][T22872] ops_init+0x1e2/0x5f0 [ 890.321656][T22872] setup_net+0x118/0x3a0 [ 890.321678][T22872] ? __pfx_setup_net+0x10/0x10 [ 890.321698][T22872] ? lockdep_init_map_type+0x5c/0x250 [ 890.321717][T22872] ? mutex_init_lockep+0x110/0x150 [ 890.321740][T22872] copy_net_ns+0x46f/0x7c0 [ 890.321765][T22872] create_new_namespaces+0x3ea/0xac0 [ 890.321785][T22872] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 890.321803][T22872] ksys_unshare+0x473/0xad0 [ 890.321822][T22872] ? __pfx_ksys_unshare+0x10/0x10 [ 890.321847][T22872] __x64_sys_unshare+0x31/0x40 [ 890.321865][T22872] do_syscall_64+0x106/0xf80 [ 890.321885][T22872] ? clear_bhb_loop+0x40/0x90 [ 890.321903][T22872] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 890.321918][T22872] RIP: 0033:0x7f929819c799 [ 890.321932][T22872] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 890.321947][T22872] RSP: 002b:00007f9299099028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 890.321963][T22872] RAX: ffffffffffffffda RBX: 00007f9298416090 RCX: 00007f929819c799 [ 890.321973][T22872] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 890.321983][T22872] RBP: 00007f9298232c99 R08: 0000000000000000 R09: 0000000000000000 [ 890.321993][T22872] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 890.322003][T22872] R13: 00007f9298416128 R14: 00007f9298416090 R15: 00007fff5454a3d8 [ 890.322024][T22872] [ 891.599038][ T6556] Bluetooth: hci2: unexpected event 0x3e length: 0 < 1 [ 896.751020][T22943] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3375'. [ 898.729801][T22959] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3378'. [ 899.448645][T22969] Process accounting resumed [ 903.373700][T23012] delete_channel: no stack [ 903.479150][T23013] netlink: 'syz.1.3386': attribute type 10 has an invalid length. [ 903.486992][T23013] netlink: 330 bytes leftover after parsing attributes in process `syz.1.3386'. [ 903.995113][T23001] bridge0: port 4(gretap0) entered blocking state [ 904.319006][T23001] bridge0: port 4(gretap0) entered disabled state [ 904.585241][T23001] gretap0: entered allmulticast mode [ 904.852192][T23001] gretap0: entered promiscuous mode [ 905.069811][T23001] bridge0: port 4(gretap0) entered blocking state [ 905.076333][T23001] bridge0: port 4(gretap0) entered listening state [ 910.376152][T23059] nfs: Unknown parameter 'nl802154' [ 910.639247][T23057] netlink: 342 bytes leftover after parsing attributes in process `syz.5.3395'. [ 917.900060][T23099] vmstat_refresh: nr_hugetlb -25600 [ 920.236279][ C0] bridge0: port 4(gretap0) entered learning state [ 921.054436][T23117] FAULT_INJECTION: forcing a failure. [ 921.054436][T23117] name failslab, interval 1, probability 0, space 0, times 0 [ 921.776666][T23117] CPU: 0 UID: 0 PID: 23117 Comm: syz.5.3408 Tainted: G U L syzkaller #0 PREEMPT(full) [ 921.776694][T23117] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 921.776700][T23117] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 921.776709][T23117] Call Trace: [ 921.776715][T23117] [ 921.776721][T23117] dump_stack_lvl+0x100/0x190 [ 921.776747][T23117] should_fail_ex.cold+0x5/0xa [ 921.776765][T23117] should_failslab+0xc2/0x120 [ 921.776781][T23117] __kvmalloc_node_noprof+0xfa/0xa00 [ 921.776802][T23117] ? open_substream+0x311/0x9e0 [ 921.776821][T23117] ? lockdep_init_map_type+0x5c/0x250 [ 921.776843][T23117] open_substream+0x311/0x9e0 [ 921.776858][T23117] ? lockdep_hardirqs_on+0x78/0x100 [ 921.776884][T23117] rawmidi_open_priv+0x595/0x6f0 [ 921.776906][T23117] snd_rawmidi_open+0x4c9/0xba0 [ 921.776927][T23117] ? __pfx_snd_rawmidi_open+0x10/0x10 [ 921.776953][T23117] ? __pfx_default_wake_function+0x10/0x10 [ 921.776969][T23117] ? soundcore_open+0x231/0x5a0 [ 921.776982][T23117] ? soundcore_open+0x231/0x5a0 [ 921.776997][T23117] ? __pfx_snd_rawmidi_open+0x10/0x10 [ 921.777016][T23117] soundcore_open+0x2e3/0x5a0 [ 921.777032][T23117] ? __pfx_soundcore_open+0x10/0x10 [ 921.777045][T23117] chrdev_open+0x234/0x6a0 [ 921.777060][T23117] ? __pfx_apparmor_file_open+0x10/0x10 [ 921.777083][T23117] ? __pfx_chrdev_open+0x10/0x10 [ 921.777098][T23117] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 921.777119][T23117] do_dentry_open+0x6d8/0x1660 [ 921.777132][T23117] ? __pfx_chrdev_open+0x10/0x10 [ 921.777151][T23117] vfs_open+0x82/0x3f0 [ 921.777170][T23117] path_openat+0x208c/0x31a0 [ 921.777190][T23117] ? __pfx_path_openat+0x10/0x10 [ 921.777211][T23117] do_file_open+0x20e/0x430 [ 921.777227][T23117] ? __pfx_do_file_open+0x10/0x10 [ 921.777255][T23117] ? alloc_fd+0x476/0x790 [ 921.777271][T23117] ? do_getname+0x191/0x390 [ 921.777289][T23117] do_sys_openat2+0x10d/0x1e0 [ 921.777307][T23117] ? __pfx_do_sys_openat2+0x10/0x10 [ 921.777326][T23117] ? __fget_files+0x21f/0x3d0 [ 921.777344][T23117] __x64_sys_openat+0x12d/0x210 [ 921.777362][T23117] ? __pfx___x64_sys_openat+0x10/0x10 [ 921.777387][T23117] do_syscall_64+0x106/0xf80 [ 921.777405][T23117] ? clear_bhb_loop+0x40/0x90 [ 921.777423][T23117] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 921.777438][T23117] RIP: 0033:0x7f929819c799 [ 921.777451][T23117] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 921.777465][T23117] RSP: 002b:00007f9299099028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 921.777479][T23117] RAX: ffffffffffffffda RBX: 00007f9298416090 RCX: 00007f929819c799 [ 921.777489][T23117] RDX: 0000000000060c01 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 921.777498][T23117] RBP: 00007f9298232c99 R08: 0000000000000000 R09: 0000000000000000 [ 921.777507][T23117] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 921.777515][T23117] R13: 00007f9298416128 R14: 00007f9298416090 R15: 00007fff5454a3d8 [ 921.777534][T23117] [ 926.220916][T23142] ERROR: Out of memory at tomoyo_memory_ok. [ 927.232578][T23149] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 927.243197][T23149] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 927.251328][T23149] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 927.259370][T23149] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 927.267422][T23149] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 929.362219][ T9521] Bluetooth: hci4: command tx timeout [ 931.075185][T23147] chnl_net:caif_netlink_parms(): no params data found [ 931.446752][ T9521] Bluetooth: hci4: command tx timeout [ 931.770695][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.777070][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.981005][T23147] bridge0: port 1(bridge_slave_0) entered blocking state [ 932.100563][T23147] bridge0: port 1(bridge_slave_0) entered disabled state [ 932.214106][T23147] bridge_slave_0: entered allmulticast mode [ 932.293378][T23147] bridge_slave_0: entered promiscuous mode [ 932.413423][T23147] bridge0: port 2(bridge_slave_1) entered blocking state [ 932.420535][T23147] bridge0: port 2(bridge_slave_1) entered disabled state [ 932.560966][T23147] bridge_slave_1: entered allmulticast mode [ 932.634712][T23147] bridge_slave_1: entered promiscuous mode [ 933.005408][T23147] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 933.133994][T23147] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 933.524031][ T9521] Bluetooth: hci4: command tx timeout [ 933.621590][T23149] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 933.633450][T23149] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 933.642469][T23149] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 933.650166][T23149] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 933.657603][T23149] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 935.604069][ C0] bridge0: port 4(gretap0) entered forwarding state [ 935.610680][ C0] bridge0: topology change detected, propagating [ 935.618091][T23149] Bluetooth: hci4: command tx timeout [ 935.774038][T23149] Bluetooth: hci5: command tx timeout [ 936.195176][T23147] team0: Port device team_slave_0 added [ 936.277457][T23147] team0: Port device team_slave_1 added [ 936.854202][T23147] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 937.024184][T23147] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 937.260075][T23147] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 937.417288][T23147] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 937.480300][T23147] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 937.770342][T23147] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 937.845243][T23149] Bluetooth: hci5: command tx timeout [ 938.544734][T23147] hsr_slave_0: entered promiscuous mode [ 938.621406][T23147] hsr_slave_1: entered promiscuous mode [ 938.702685][T23147] debugfs: 'hsr0' already exists in 'hsr' [ 938.845801][T23147] Cannot create hsr debugfs directory [ 939.926092][T23149] Bluetooth: hci5: command tx timeout [ 940.053093][T23183] chnl_net:caif_netlink_parms(): no params data found [ 941.368264][T14277] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 942.019264][T23149] Bluetooth: hci5: command tx timeout [ 942.496028][T14277] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 943.766179][T14277] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 944.334410][T23183] bridge0: port 1(bridge_slave_0) entered blocking state [ 944.438344][T23183] bridge0: port 1(bridge_slave_0) entered disabled state [ 944.446421][T23183] bridge_slave_0: entered allmulticast mode [ 944.581573][T23183] bridge_slave_0: entered promiscuous mode [ 944.620473][T23183] bridge0: port 2(bridge_slave_1) entered blocking state [ 944.627558][T23183] bridge0: port 2(bridge_slave_1) entered disabled state [ 944.828633][T23183] bridge_slave_1: entered allmulticast mode [ 944.835720][T23183] bridge_slave_1: entered promiscuous mode [ 945.157791][T14277] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 946.070892][T23183] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 946.210884][T23183] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 946.751836][T23183] team0: Port device team_slave_0 added [ 946.825390][T23183] team0: Port device team_slave_1 added [ 947.039099][T23147] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 947.182826][T23147] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 947.475832][T23147] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 947.616622][T23250] bridge0: port 5(ipvlan0) entered blocking state [ 947.651206][T23250] bridge0: port 5(ipvlan0) entered disabled state [ 947.708482][T23250] ipvlan0: entered allmulticast mode [ 947.752545][T23250] ipvlan0: left allmulticast mode [ 947.859870][T23147] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 947.996169][T23183] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 948.061573][T23183] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 948.294832][T23183] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 948.454347][T23183] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 948.533344][T23183] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 948.762665][T23183] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 948.911948][T14277] bridge_slave_1: left allmulticast mode [ 948.917601][T14277] bridge_slave_1: left promiscuous mode [ 949.021813][T14277] bridge0: port 2(bridge_slave_1) entered disabled state [ 949.149440][T14277] bridge_slave_0: left allmulticast mode [ 949.222195][T14277] bridge_slave_0: left promiscuous mode [ 949.301995][T14277] bridge0: port 1(bridge_slave_0) entered disabled state [ 950.759342][T23183] hsr_slave_0: entered promiscuous mode [ 950.845536][T23183] hsr_slave_1: entered promiscuous mode [ 950.923702][T23183] debugfs: 'hsr0' already exists in 'hsr' [ 950.929668][T23183] Cannot create hsr debugfs directory [ 953.242360][T14277] hsr_slave_0: left promiscuous mode [ 953.323066][T14277] hsr_slave_1: left promiscuous mode [ 953.340500][T14277] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 953.391636][T14277] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 953.466660][T14277] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 953.517793][T14277] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 953.588819][T14277] veth1_macvtap: left promiscuous mode [ 953.643238][T14277] veth0_macvtap: left promiscuous mode [ 953.670397][T14277] veth1_vlan: left promiscuous mode [ 953.732985][T14277] veth0_vlan: left promiscuous mode [ 954.874199][T14277] team0 (unregistering): Port device team_slave_1 removed [ 954.966653][T14277] team0 (unregistering): Port device team_slave_0 removed [ 956.533839][T23147] 8021q: adding VLAN 0 to HW filter on device bond0 [ 956.591352][T23304] FAULT_INJECTION: forcing a failure. [ 956.591352][T23304] name failslab, interval 1, probability 0, space 0, times 0 [ 956.670942][T23147] 8021q: adding VLAN 0 to HW filter on device team0 [ 956.736815][T23304] CPU: 0 UID: 0 PID: 23304 Comm: syz.8.3441 Tainted: G U L syzkaller #0 PREEMPT(full) [ 956.736843][T23304] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 956.736850][T23304] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 956.736860][T23304] Call Trace: [ 956.736866][T23304] [ 956.736873][T23304] dump_stack_lvl+0x100/0x190 [ 956.736901][T23304] should_fail_ex.cold+0x5/0xa [ 956.736920][T23304] should_failslab+0xc2/0x120 [ 956.736936][T23304] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 956.736958][T23304] ? copy_utsname+0x1a8/0x690 [ 956.736980][T23304] ? copy_mnt_ns+0x106/0xc30 [ 956.736999][T23304] copy_utsname+0x1a8/0x690 [ 956.737021][T23304] create_new_namespaces+0x16a/0xac0 [ 956.737037][T23304] ? bpf_lsm_capable+0x9/0x10 [ 956.737052][T23304] ? security_capable+0x80/0x260 [ 956.737077][T23304] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 956.737095][T23304] ksys_unshare+0x473/0xad0 [ 956.737114][T23304] ? __pfx_ksys_unshare+0x10/0x10 [ 956.737139][T23304] __x64_sys_unshare+0x31/0x40 [ 956.737156][T23304] do_syscall_64+0x106/0xf80 [ 956.737176][T23304] ? clear_bhb_loop+0x40/0x90 [ 956.737195][T23304] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 956.737210][T23304] RIP: 0033:0x7f0e38b9c799 [ 956.737224][T23304] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 956.737239][T23304] RSP: 002b:00007f0e39a2c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 956.737254][T23304] RAX: ffffffffffffffda RBX: 00007f0e38e15fa0 RCX: 00007f0e38b9c799 [ 956.737263][T23304] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000006c000000 [ 956.737272][T23304] RBP: 00007f0e38c32c99 R08: 0000000000000000 R09: 0000000000000000 [ 956.737281][T23304] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 956.737290][T23304] R13: 00007f0e38e16038 R14: 00007f0e38e15fa0 R15: 00007ffe40108358 [ 956.737309][T23304] [ 957.567800][T23309] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3443'. [ 959.263135][ T7367] bridge0: port 1(bridge_slave_0) entered blocking state [ 959.270285][ T7367] bridge0: port 1(bridge_slave_0) entered forwarding state [ 959.427341][ T7367] bridge0: port 2(bridge_slave_1) entered blocking state [ 959.434447][ T7367] bridge0: port 2(bridge_slave_1) entered forwarding state [ 960.848596][T23183] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 961.048911][T23183] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 961.167699][T23183] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 961.325991][T23183] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 961.643362][T23147] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 962.223387][T23183] 8021q: adding VLAN 0 to HW filter on device bond0 [ 962.356708][T23183] 8021q: adding VLAN 0 to HW filter on device team0 [ 962.649436][T13216] bridge0: port 1(bridge_slave_0) entered blocking state [ 962.656553][T13216] bridge0: port 1(bridge_slave_0) entered forwarding state [ 962.821397][T13216] bridge0: port 2(bridge_slave_1) entered blocking state [ 962.821495][T13216] bridge0: port 2(bridge_slave_1) entered forwarding state [ 963.024728][T23183] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 963.024749][T23183] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 963.798549][T23147] veth0_vlan: entered promiscuous mode [ 963.803178][T23147] veth1_vlan: entered promiscuous mode [ 963.957337][T23147] veth0_macvtap: entered promiscuous mode [ 964.081608][T23147] veth1_macvtap: entered promiscuous mode [ 964.195383][T23147] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 964.232946][T23183] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 964.325045][T23147] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 964.449822][ T7361] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 964.450026][ T7361] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 964.450055][ T7361] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 964.450080][ T7361] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 964.961025][T23183] veth0_vlan: entered promiscuous mode [ 965.239720][T23183] veth1_vlan: entered promiscuous mode [ 965.330744][T13216] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 965.330761][T13216] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 965.357293][T23183] veth0_macvtap: entered promiscuous mode [ 965.434977][T23183] veth1_macvtap: entered promiscuous mode [ 965.611816][T23183] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 965.614272][T23183] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 965.623655][ T7367] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 965.623769][ T7367] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 965.623873][ T7367] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 965.623975][ T7367] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 965.627243][T20582] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 965.627258][T20582] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 966.587064][T14277] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 966.587084][T14277] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 966.814261][T10967] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 966.814279][T10967] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 969.016883][T23419] Invalid ELF header magic: != ELF [ 972.003174][T23451] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 972.306985][ T9521] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 972.322566][ T9521] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 972.332299][ T9521] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 972.343012][ T9521] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 972.352521][ T9521] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 974.019750][T23458] chnl_net:caif_netlink_parms(): no params data found [ 974.423821][ T9521] Bluetooth: hci0: command tx timeout [ 975.025734][T23458] bridge0: port 1(bridge_slave_0) entered blocking state [ 975.132247][T23458] bridge0: port 1(bridge_slave_0) entered disabled state [ 975.263994][T23458] bridge_slave_0: entered allmulticast mode [ 975.347554][T23458] bridge_slave_0: entered promiscuous mode [ 975.472207][T23458] bridge0: port 2(bridge_slave_1) entered blocking state [ 975.589388][T23458] bridge0: port 2(bridge_slave_1) entered disabled state [ 975.714881][T23458] bridge_slave_1: entered allmulticast mode [ 975.722183][T23458] bridge_slave_1: entered promiscuous mode [ 976.166501][T23458] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 976.297744][T23458] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 976.504915][ T9521] Bluetooth: hci0: command tx timeout [ 977.458135][T23458] team0: Port device team_slave_0 added [ 977.565662][T23458] team0: Port device team_slave_1 added [ 978.002843][T23458] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 978.139231][T23458] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 978.427200][T23458] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 978.516903][T23458] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 978.572132][T23458] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 978.615447][ T9521] Bluetooth: hci0: command tx timeout [ 978.859414][T23458] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 980.665903][T23458] hsr_slave_0: entered promiscuous mode [ 980.676372][ T9521] Bluetooth: hci0: command tx timeout [ 980.725522][T23458] hsr_slave_1: entered promiscuous mode [ 983.259679][T23458] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 984.872592][T23535] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 984.909593][T23458] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 986.050269][T23458] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 987.461976][T23458] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 989.834155][T23458] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 989.983674][T23458] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 990.505553][T23458] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 990.669884][T23458] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 992.985161][T23458] 8021q: adding VLAN 0 to HW filter on device bond0 [ 993.111908][T23458] 8021q: adding VLAN 0 to HW filter on device team0 [ 993.240869][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.254875][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.518706][T13216] bridge0: port 1(bridge_slave_0) entered blocking state [ 993.525835][T13216] bridge0: port 1(bridge_slave_0) entered forwarding state [ 993.861030][T13216] bridge0: port 2(bridge_slave_1) entered blocking state [ 993.868153][T13216] bridge0: port 2(bridge_slave_1) entered forwarding state [ 995.112649][T23665] FAULT_INJECTION: forcing a failure. [ 995.112649][T23665] name failslab, interval 1, probability 0, space 0, times 0 [ 995.462740][T23665] CPU: 0 UID: 0 PID: 23665 Comm: syz.8.3480 Tainted: G U L syzkaller #0 PREEMPT(full) [ 995.462769][T23665] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 995.462775][T23665] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 995.462785][T23665] Call Trace: [ 995.462791][T23665] [ 995.462798][T23665] dump_stack_lvl+0x100/0x190 [ 995.462827][T23665] should_fail_ex.cold+0x5/0xa [ 995.462848][T23665] should_failslab+0xc2/0x120 [ 995.462866][T23665] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 995.462890][T23665] ? dup_fd+0x4d/0xd10 [ 995.462905][T23665] ? trace_kmalloc+0x101/0x130 [ 995.462922][T23665] dup_fd+0x4d/0xd10 [ 995.462939][T23665] ? apparmor_task_alloc+0x2c1/0x3b0 [ 995.462966][T23665] copy_process+0x2631/0x7a10 [ 995.462994][T23665] ? __pfx_copy_process+0x10/0x10 [ 995.463020][T23665] kernel_clone+0xfc/0x9a0 [ 995.463037][T23665] ? __pfx_futex_wait+0x10/0x10 [ 995.463060][T23665] ? __pfx_kernel_clone+0x10/0x10 [ 995.463087][T23665] __do_sys_clone+0xd9/0x120 [ 995.463104][T23665] ? __pfx___do_sys_clone+0x10/0x10 [ 995.463136][T23665] do_syscall_64+0x106/0xf80 [ 995.463159][T23665] ? clear_bhb_loop+0x40/0x90 [ 995.463178][T23665] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 995.463193][T23665] RIP: 0033:0x7f0e38b9c799 [ 995.463206][T23665] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 995.463220][T23665] RSP: 002b:00007f0e39a2c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 995.463236][T23665] RAX: ffffffffffffffda RBX: 00007f0e38e15fa0 RCX: 00007f0e38b9c799 [ 995.463246][T23665] RDX: 0000000000000000 RSI: 000000000000000b RDI: 0000000000000008 [ 995.463254][T23665] RBP: 00007f0e38c32c99 R08: 0000000000000002 R09: 0000000000000000 [ 995.463264][T23665] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 995.463272][T23665] R13: 00007f0e38e16038 R14: 00007f0e38e15fa0 R15: 00007ffe40108358 [ 995.463292][T23665] [ 999.116979][T23458] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1002.648267][T23458] veth0_vlan: entered promiscuous mode [ 1002.823257][T23458] veth1_vlan: entered promiscuous mode [ 1003.627424][T23458] veth0_macvtap: entered promiscuous mode [ 1003.766954][T23458] veth1_macvtap: entered promiscuous mode [ 1004.016121][T23458] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1004.204583][T23458] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1004.595264][T23757] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3490'. [ 1004.818491][ T7362] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1004.941050][ T7362] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1005.697793][ T7362] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1005.858357][ T7362] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1006.123159][T14277] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1006.245704][T14277] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1006.855089][ T7367] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1006.934643][ T7367] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1007.952903][T23794] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1009.072130][T23807] netlink: zone id is out of range [ 1009.077256][T23807] netlink: zone id is out of range [ 1009.263259][T23807] netlink: zone id is out of range [ 1009.351079][T23807] netlink: zone id is out of range [ 1009.356222][T23807] netlink: zone id is out of range [ 1009.495937][T23807] netlink: zone id is out of range [ 1009.570962][T23807] netlink: zone id is out of range [ 1009.576089][T23807] netlink: zone id is out of range [ 1009.747004][T23807] netlink: zone id is out of range [ 1009.811467][T23807] netlink: zone id is out of range [ 1010.371037][T23823] netlink: 346 bytes leftover after parsing attributes in process `syz.3.3500'. [ 1011.044075][T23826] netlink: 34 bytes leftover after parsing attributes in process `syz.9.3501'. [ 1011.343682][T23829] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3502'. [ 1011.483346][T23832] FAULT_INJECTION: forcing a failure. [ 1011.483346][T23832] name failslab, interval 1, probability 0, space 0, times 0 [ 1011.661945][T23832] CPU: 0 UID: 0 PID: 23832 Comm: syz.5.3503 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1011.661975][T23832] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1011.661988][T23832] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1011.661999][T23832] Call Trace: [ 1011.662004][T23832] [ 1011.662011][T23832] dump_stack_lvl+0x100/0x190 [ 1011.662040][T23832] should_fail_ex.cold+0x5/0xa [ 1011.662059][T23832] should_failslab+0xc2/0x120 [ 1011.662076][T23832] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1011.662099][T23832] ? do_getname+0x35/0x390 [ 1011.662121][T23832] do_getname+0x35/0x390 [ 1011.662141][T23832] do_sys_openat2+0xc5/0x1e0 [ 1011.662161][T23832] ? __pfx_do_sys_openat2+0x10/0x10 [ 1011.662180][T23832] ? blkcg_maybe_throttle_current+0x5df/0xeb0 [ 1011.662273][T23832] __x64_sys_openat+0x12d/0x210 [ 1011.662293][T23832] ? __pfx___x64_sys_openat+0x10/0x10 [ 1011.662321][T23832] do_syscall_64+0x106/0xf80 [ 1011.662341][T23832] ? clear_bhb_loop+0x40/0x90 [ 1011.662360][T23832] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1011.662376][T23832] RIP: 0033:0x7fb782b9c799 [ 1011.662389][T23832] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1011.662404][T23832] RSP: 002b:00007fb7839b6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1011.662419][T23832] RAX: ffffffffffffffda RBX: 00007fb782e15fa0 RCX: 00007fb782b9c799 [ 1011.662429][T23832] RDX: 0000000000008000 RSI: 0000000000000000 RDI: ffffffffffffff9c [ 1011.662439][T23832] RBP: 00007fb782c32c99 R08: 0000000000000000 R09: 0000000000000000 [ 1011.662448][T23832] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1011.662457][T23832] R13: 00007fb782e16038 R14: 00007fb782e15fa0 R15: 00007ffcc86a5c88 [ 1011.662477][T23832] [ 1011.899194][T23838] FAULT_INJECTION: forcing a failure. [ 1011.899194][T23838] name failslab, interval 1, probability 0, space 0, times 0 [ 1011.912646][T23838] CPU: 0 UID: 0 PID: 23838 Comm: syz.9.3504 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1011.912674][T23838] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1011.912680][T23838] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1011.912690][T23838] Call Trace: [ 1011.912696][T23838] [ 1011.912702][T23838] dump_stack_lvl+0x100/0x190 [ 1011.912729][T23838] should_fail_ex.cold+0x5/0xa [ 1011.912747][T23838] ? process_vm_rw_core.constprop.0+0x1d7/0x950 [ 1011.912771][T23838] should_failslab+0xc2/0x120 [ 1011.912787][T23838] __kmalloc_noprof+0xe0/0x850 [ 1011.912809][T23838] ? find_held_lock+0x2b/0x80 [ 1011.912826][T23838] process_vm_rw_core.constprop.0+0x1d7/0x950 [ 1011.912851][T23838] ? futex_unqueue+0x13d/0x2c0 [ 1011.912873][T23838] ? __pfx_process_vm_rw_core.constprop.0+0x10/0x10 [ 1011.912898][T23838] ? iovec_from_user+0xda/0x140 [ 1011.912925][T23838] ? iovec_from_user+0xda/0x140 [ 1011.912944][T23838] process_vm_rw+0x226/0x2d0 [ 1011.912968][T23838] ? __pfx_process_vm_rw+0x10/0x10 [ 1011.913011][T23838] ? xfd_validate_state+0x129/0x190 [ 1011.913043][T23838] __x64_sys_process_vm_readv+0xe2/0x1c0 [ 1011.913068][T23838] ? do_syscall_64+0x95/0xf80 [ 1011.913089][T23838] ? lockdep_hardirqs_on+0x78/0x100 [ 1011.913110][T23838] do_syscall_64+0x106/0xf80 [ 1011.913129][T23838] ? clear_bhb_loop+0x40/0x90 [ 1011.913147][T23838] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1011.913163][T23838] RIP: 0033:0x7ff47a39c799 [ 1011.913177][T23838] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1011.913192][T23838] RSP: 002b:00007ff47b26d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000136 [ 1011.913207][T23838] RAX: ffffffffffffffda RBX: 00007ff47a615fa0 RCX: 00007ff47a39c799 [ 1011.913217][T23838] RDX: 0000000000000002 RSI: 0000200000000140 RDI: 0000000000000000 [ 1011.913227][T23838] RBP: 00007ff47a432c99 R08: 0000000000000008 R09: 0000000000000000 [ 1011.913236][T23838] R10: 0000200000000180 R11: 0000000000000246 R12: 0000000000000000 [ 1011.913245][T23838] R13: 00007ff47a616038 R14: 00007ff47a615fa0 R15: 00007ffde6aa42a8 [ 1011.913264][T23838] [ 1051.677241][T23149] Bluetooth: hci4: command 0x0406 tx timeout [ 1054.719335][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.726007][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1056.798374][T23149] Bluetooth: hci5: command 0x0406 tx timeout [ 1097.772048][T23149] Bluetooth: hci0: command 0x0406 tx timeout [ 1116.186420][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.193198][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1140.270969][T23058] Process accounting paused [ 1141.604045][ T7361] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1142.099575][ T7361] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1142.379094][ T7361] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1142.684717][ T7361] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1143.340468][ T7361] bridge_slave_1: left allmulticast mode [ 1143.346134][ T7361] bridge_slave_1: left promiscuous mode [ 1143.430377][ T7361] bridge0: port 2(bridge_slave_1) entered disabled state [ 1143.570616][ T7361] bridge_slave_0: left allmulticast mode [ 1143.576272][ T7361] bridge_slave_0: left promiscuous mode [ 1143.656107][ T7361] bridge0: port 1(bridge_slave_0) entered disabled state [ 1145.010183][ T7361] HSR: left promiscuous mode [ 1146.540690][ T7361] hsr_slave_0: left promiscuous mode [ 1146.576246][ T7361] hsr_slave_1: left promiscuous mode [ 1146.669145][ T7361] veth1_macvtap: left promiscuous mode [ 1146.729471][ T7361] veth0_macvtap: left promiscuous mode [ 1146.735009][ T7361] veth1_vlan: left promiscuous mode [ 1146.814650][ T7361] veth0_vlan: left promiscuous mode [ 1148.152106][ T7361] team0 (unregistering): Port device team_slave_1 removed [ 1148.268523][ T7361] team0 (unregistering): Port device team_slave_0 removed [ 1153.315086][ T30] INFO: task syz.8.3489:23746 blocked for more than 143 seconds. [ 1153.332655][ T30] Tainted: G U L syzkaller #0 [ 1153.392686][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1153.401377][ T30] task:syz.8.3489 state:D stack:29000 pid:23746 tgid:23741 ppid:19565 task_flags:0x400040 flags:0x00080002 [ 1153.502916][ T30] Call Trace: [ 1153.506218][ T30] [ 1153.509139][ T30] __schedule+0xfee/0x6120 [ 1153.574899][ T30] ? __lock_acquire+0x4a5/0x2630 [ 1153.633022][ T30] ? __pfx___schedule+0x10/0x10 [ 1153.637901][ T30] ? find_held_lock+0x2b/0x80 [ 1153.642565][ T30] ? schedule+0x2bf/0x390 [ 1153.733060][ T30] schedule+0xdd/0x390 [ 1153.737157][ T30] schedule_preempt_disabled+0x13/0x30 [ 1153.742606][ T30] __mutex_lock+0xc9a/0x1b90 [ 1153.823096][ T30] ? tracing_splice_read_pipe+0x18c/0xda0 [ 1153.828856][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 1153.912883][ T30] ? finish_task_switch.isra.0+0x200/0xb80 [ 1153.918721][ T30] ? rcu_is_watching+0x12/0xc0 [ 1153.993410][ T30] ? finish_task_switch.isra.0+0x205/0xb80 [ 1154.063018][ T30] ? rcu_is_watching+0x12/0xc0 [ 1154.067826][ T30] ? trace_sched_exit_tp+0x13a/0x180 [ 1154.154624][ T30] ? tracing_splice_read_pipe+0x18c/0xda0 [ 1154.183043][ T30] tracing_splice_read_pipe+0x18c/0xda0 [ 1154.188625][ T30] ? __pfx_tracing_splice_read_pipe+0x10/0x10 [ 1154.245498][ T30] ? find_held_lock+0x2b/0x80 [ 1154.250206][ T30] ? __pfx_tracing_spd_release_pipe+0x10/0x10 [ 1154.323123][ T30] ? rcu_is_watching+0x12/0xc0 [ 1154.327935][ T30] ? __fget_files+0x215/0x3d0 [ 1154.332597][ T30] ? __pfx_tracing_splice_read_pipe+0x10/0x10 [ 1154.446494][ T30] do_splice_read+0x285/0x370 [ 1154.451212][ T30] splice_file_to_pipe+0x82/0x120 [ 1154.495263][ T30] do_sendfile+0x366/0xe20 [ 1154.533308][ T30] ? __pfx_do_sendfile+0x10/0x10 [ 1154.538285][ T30] ? __x64_sys_futex+0x34f/0x4d0 [ 1154.603773][ T30] ? __x64_sys_futex+0x358/0x4d0 [ 1154.608748][ T30] __x64_sys_sendfile64+0x1d8/0x220 [ 1154.693547][ T30] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 1154.699308][ T30] do_syscall_64+0x106/0xf80 [ 1154.766441][ T30] ? clear_bhb_loop+0x40/0x90 [ 1154.813523][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1154.863638][ T30] RIP: 0033:0x7f0e38b9c799 [ 1154.868074][ T30] RSP: 002b:00007f0e399ea028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1154.917370][ T30] RAX: ffffffffffffffda RBX: 00007f0e38e16180 RCX: 00007f0e38b9c799 [ 1154.987945][ T30] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000001 [ 1155.044811][ T30] RBP: 00007f0e38c32c99 R08: 0000000000000000 R09: 0000000000000000 [ 1155.052808][ T30] R10: 000000007ffff000 R11: 0000000000000246 R12: 0000000000000000 [ 1155.163810][ T30] R13: 00007f0e38e16218 R14: 00007f0e38e16180 R15: 00007ffe40108358 [ 1155.171823][ T30] [ 1155.253576][ T30] [ 1155.253576][ T30] Showing all locks held in the system: [ 1155.261314][ T30] 1 lock held by khungtaskd/30: [ 1155.343624][ T30] #0: ffffffff8e7e7420 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 1155.353516][ T30] 1 lock held by syz-executor/5808: [ 1155.427015][ T30] #0: ffff8880362c3068 (&pipe->mutex){+.+.}-{4:4}, at: pipe_release+0x46/0x2c0 [ 1155.503873][ T30] 6 locks held by kworker/u10:16/7361: [ 1155.509345][ T30] 6 locks held by kworker/u10:17/7362: [ 1155.633784][ T30] 2 locks held by getty/11215: [ 1155.642928][ T30] #0: ffff8880339680a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 1155.736123][ T30] #1: ffffc90004feb2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x1500 [ 1155.850683][ T30] 4 locks held by kworker/u10:40/13216: [ 1155.906924][ T30] 4 locks held by syz.8.3489/23744: [ 1155.912140][ T30] 2 locks held by syz.8.3489/23746: [ 1156.003935][ T30] #0: ffff8880362c3068 (&pipe->mutex){+.+.}-{4:4}, at: pipe_lock+0x69/0x80 [ 1156.012663][ T30] #1: ffff888036a90090 (&iter->mutex){+.+.}-{4:4}, at: tracing_splice_read_pipe+0x18c/0xda0 [ 1156.156962][ T30] [ 1156.159308][ T30] ============================================= [ 1156.159308][ T30] [ 1156.554336][ T30] NMI backtrace for cpu 0 [ 1156.554365][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Tainted: G U L syzkaller #0 PREEMPT(full) [ 1156.554388][ T30] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1156.554394][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1156.554403][ T30] Call Trace: [ 1156.554408][ T30] [ 1156.554415][ T30] dump_stack_lvl+0x100/0x190 [ 1156.554441][ T30] nmi_cpu_backtrace.cold+0x12d/0x151 [ 1156.554464][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1156.554485][ T30] nmi_trigger_cpumask_backtrace+0x1d7/0x230 [ 1156.554504][ T30] sys_info+0x141/0x190 [ 1156.554525][ T30] watchdog+0xd25/0x1050 [ 1156.554544][ T30] ? __pfx_watchdog+0x10/0x10 [ 1156.554558][ T30] ? __kthread_parkme+0x18c/0x230 [ 1156.554583][ T30] ? kthread+0x13a/0x450 [ 1156.554600][ T30] ? __pfx_watchdog+0x10/0x10 [ 1156.554612][ T30] kthread+0x370/0x450 [ 1156.554628][ T30] ? __pfx_kthread+0x10/0x10 [ 1156.554646][ T30] ret_from_fork+0x754/0xd80 [ 1156.554668][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 1156.554689][ T30] ? __switch_to+0x7b4/0x1120 [ 1156.554704][ T30] ? __pfx_kthread+0x10/0x10 [ 1156.554722][ T30] ret_from_fork_asm+0x1a/0x30 [ 1156.554745][ T30] [ 1157.494905][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 1157.501777][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Tainted: G U L syzkaller #0 PREEMPT(full) [ 1157.512464][ T30] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1157.517646][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1157.527681][ T30] Call Trace: [ 1157.530945][ T30] [ 1157.533858][ T30] dump_stack_lvl+0x100/0x190 [ 1157.538551][ T30] vpanic+0x552/0x970 [ 1157.542517][ T30] ? __pfx_vpanic+0x10/0x10 [ 1157.547004][ T30] ? nmi_trigger_cpumask_backtrace+0x182/0x230 [ 1157.553146][ T30] panic+0xd1/0xe0 [ 1157.556849][ T30] ? __pfx_panic+0x10/0x10 [ 1157.561250][ T30] ? nmi_trigger_cpumask_backtrace+0x1b5/0x230 [ 1157.567387][ T30] ? nmi_trigger_cpumask_backtrace+0x1f6/0x230 [ 1157.573526][ T30] ? nmi_trigger_cpumask_backtrace+0x200/0x230 [ 1157.579661][ T30] ? watchdog.cold+0x198/0x1ca [ 1157.584408][ T30] ? watchdog+0xd35/0x1050 [ 1157.588807][ T30] watchdog.cold+0x1a9/0x1ca [ 1157.593387][ T30] ? __pfx_watchdog+0x10/0x10 [ 1157.598047][ T30] ? __kthread_parkme+0x18c/0x230 [ 1157.603059][ T30] ? kthread+0x13a/0x450 [ 1157.607286][ T30] ? __pfx_watchdog+0x10/0x10 [ 1157.611942][ T30] kthread+0x370/0x450 [ 1157.615996][ T30] ? __pfx_kthread+0x10/0x10 [ 1157.620573][ T30] ret_from_fork+0x754/0xd80 [ 1157.625151][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 1157.630248][ T30] ? __switch_to+0x7b4/0x1120 [ 1157.634908][ T30] ? __pfx_kthread+0x10/0x10 [ 1157.639486][ T30] ret_from_fork_asm+0x1a/0x30 [ 1157.644242][ T30] [ 1157.647309][ T30] Kernel Offset: disabled [ 1157.651620][ T30] Rebooting in 86400 seconds..