last executing test programs: 6m11.06021417s ago: executing program 3 (id=358): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) write$auto(0xca, &(0x7f0000000180)='\x04\x02\x00\r\xfb\xff\xf6\xdd\x90\x806\xc8\xbe\x94\xf2\xa2', 0x4) r0 = open(&(0x7f0000000100)='.\x00', 0x0, 0x110) getdents64$auto(r0, 0x0, 0x400) mmap$auto(0x0, 0x2020008, 0x1000000000000007, 0xeb1, 0x0, 0x1008000) close_range$auto(0x2, 0x8, 0x0) socket(0x2c, 0x800, 0x84) io_uring_setup$auto(0x4, 0x0) mmap$auto(0x0, 0x9, 0xffb, 0x8000000008011, 0x3, 0x0) move_pages$auto(0x0, 0x1002, 0x0, 0x0, 0x0, 0x2) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) io_uring_enter$auto(0x3, 0x0, 0x1, 0x3, 0x0, 0x2) io_uring_enter$auto(0x3, 0x1, 0x2688, 0x5, 0x0, 0x7) 6m10.770194713s ago: executing program 3 (id=360): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000000140), 0x1c3c01, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/seq/clients\x00', 0x280, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/zswap/parameters/compressor\x00', 0xc0002, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/nfs/parameters/nfs_idmap_cache_timeout\x00', 0xc2902, 0x0) mmap$auto(0x0, 0x400008, 0x36, 0x1009b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) ioctl$auto_VHOST_SET_OWNER(r1, 0xaf01, 0x0) socket(0x1e, 0x805, 0x0) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/security/tomoyo/version\x00', 0x40, 0x0) readv$auto(0x3, 0x0, 0x3) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/snd/controlC1\x00', 0x802, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000001080), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$auto_NL80211_CMD_GET_WIPHY(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="810b25bd7000ffdbdf251100000008000300", @ANYRES32=r5], 0x1c}, 0x1, 0x0, 0x0, 0x20000084}, 0x0) setfsgid$auto(0xee01) read$auto(r0, 0x0, 0x20) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) ioctl$auto_XFS_IOC_FSGEOMETRY(0xffffffffffffffff, 0x8100587e, &(0x7f0000000180)={0x7, 0xc, 0x4, 0x10001, 0x8, 0xcc, 0x1, 0x5, 0x6, 0x6, 0x4, 0x6, "e135c3d2309777fb1a3c05391b27f862", 0xb, 0x4, 0x8, 0x6, 0x7, 0x4, 0x0, 0x5a, 0x8, 0xfffffffa, 0x5, 0xff, 0x8, 0xcb, [0x40, 0x3ff, 0x3f, 0x43, 0x2e87, 0x80000000, 0xe365, 0x200, 0xffff, 0x4, 0x2, 0x9, 0xa3ec, 0x9]}) read$auto(0xffffffffffffffff, &(0x7f00000008c0)='/dev/rfkill\x00', 0x6) mseal$auto(0x0, 0x7dda, 0x0) 6m10.423229992s ago: executing program 3 (id=362): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/zram0/disksize\x00', 0x2202, 0x0) mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000) write$auto(r0, 0x0, 0x41000008004) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000000c0), r1) iopl$auto(0x3) clone$auto(0x21002, 0xfffffffffffffffb, 0xfffffffffffffffe, 0xfffffffffffffffd, 0xff) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000380)='/sys/devices/system/cpu/cpu1/hotplug/target\x00', 0x800, 0x0) read$auto(r2, 0x0, 0x7) r3 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000002500)='/dev/input/event1\x00', 0x2080, 0x0) ioctl$auto_EVIOCGKEYCODE_V2(r3, 0x80284504, 0x0) r4 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) futex$auto(&(0x7f0000001300)=0x3, 0x9, 0x59c, 0x0, 0x0, 0x2) writev$auto(r4, &(0x7f0000000200)={0x0, 0x3ff}, 0x3) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_ioam6(&(0x7f0000000000), r5) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram5\x00', 0x14fa02, 0x0) getsockopt$auto_SO_NOFCS(r3, 0x2, 0x2b, &(0x7f0000000080)='&\x00', &(0x7f0000000100)=0xf0) r7 = openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cuse\x00', 0x746240, 0x0) madvise$auto(0x7, 0x1000, 0x4) sendfile$auto(r7, 0x3, 0x0, 0x7ffff000) sendmsg$auto_IOAM6_CMD_ADD_SCHEMA(r5, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000480)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01002abd7000fbdbdf2504000009040005000800040009000000"], 0x20}, 0x1, 0x3000700, 0x0, 0x20000080}, 0x8010) write$auto(0x3, 0x0, 0xffffffef) r8 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_TREAD64(r8, 0x400454a4, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) read$auto(0xffffffffffffffff, 0x0, 0x1) 6m9.453309307s ago: executing program 3 (id=367): mmap$auto(0x0, 0x2020009, 0x3, 0x9000000eb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) write$auto(r0, &(0x7f0000001380)='\b\x00\xa5\x96\x03\x13\"Q\xd5\xe5\xfb\xb8\x1b\x18 \xe8\xea\x14\x18c3\xeb\xaad\xcfE\x05\xdf\xf1\x82h)\x9e1b\xado\x9c\xde\x18\x8e7A\f\x85\xa2\xdd\x13*\x82\x10m\xe1\xf8Za\x8a5\b\b\xce\xb8[x\x99\x1f\xcd\x10\nN\xa8\x93q\xb82\xf3\xc8 \xc7\x9e\xd7\xe4\x9f\x98\xf4\x997G\xf9\xc0\x94\xc9\xd5\f\x89\xae\xf8\xd4\x9f\x05\xad\xd4T\x9a{\x00M\xc3i\xa3\xf2\xd0Q\xbb\xfc\x99\xde\xdf5),\xf7\x88\xafhr\x9e*g\x88]\xa8\xb0\xf0\x92_\xab\\\xc2K\x96${\x1c\x15\xdcj\xdb\xe7\xc3:\x9coG:\xff$\x03\xea\xbf\xda\xfcF7\x17\xea\xfc\xcaj\xd8\x05\xdf\xc4\xf3{\xc1\x86\xa2Z\xea\xf7\xc0\xaa\a\x94L\xab\xd0\xbe\xdbn\xa7\xdb\xe5\xcczA\xfe\xd5zzu@\x02Ba\xfbF\a\xe5f\xe2\xa1\x04\x12c\x02\x1f\xf7\x92\xfd\x9d\x1ew\x8d\xec\xbb\x80\xcf1[\xbd1\xb1\xf5\xb2 \x88\xadV\xe2\xc6I\xd5(U\xb4\x8cR\x0f\xd7\xa1\xd0\x8bx\xefX\\bM=\xac\xf1\x12\xd5HV\xc9\x8a\v\x7f\xc9\xa0\xb6hc\xb0Z\xf3\xc3\xa7\xba\x9bWgR\xec\xac\xac\xfd\x12\x8a\xc1t[\x13\x9c\\s\t\xf2\xeb{\xb0\xc2\\~7I\xc2/LDT{+\xe1L6\xb3\xbe\x8b\x18', 0x80000000) r1 = openat$auto_ipsec_dbg_fops_ipsec(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/netdevsim/netdevsim5/ports/2/ipsec\x00', 0x50000, 0x0) read$auto_ipsec_dbg_fops_ipsec(r1, &(0x7f0000000380)=""/4096, 0x1000) write$auto(r0, 0x0, 0x2) getrlimit$auto(0x3, 0x0) fdatasync$auto(r0) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) ioctl$auto_BLKZEROOUT(r2, 0x127f, 0x0) r3 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/035/001\x00', 0x1102, 0x0) write$auto(r3, &(0x7f00000001c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xc8d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\xc6\x00\x89\te\x8d\a\xfb\\n\x89C:\x84D\x10u\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k', 0x100000a3d9) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) io_uring_setup$auto(0x4, 0x0) socket(0x2, 0x1, 0x0) epoll_create$auto(0x7) r4 = openat$auto_dmaengine_summary_fops_(0xffffffffffffff9c, &(0x7f0000000000), 0x8800, 0x0) epoll_ctl$auto(0x5, 0x1, r4, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x8ea182, 0x0) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x1000, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) init_module$auto(0x0, 0xffff9, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x8000000000000000, 0x15) madvise$auto(0x0, 0x2000000080000001, 0x3) close_range$auto(0x2, 0x8, 0x0) r5 = openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$auto_dma_heap_fops_dma_heap(r5, 0xffffffffffdffe00, &(0x7f0000000140)=';') 6m6.224258965s ago: executing program 3 (id=379): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xfffffffffffffffe, 0x8000) lsm_list_modules$auto(0x0, 0x0, 0x0) r0 = socket(0xf, 0x3, 0x2) syz_genetlink_get_family_id$auto_mac802154_hwsim(&(0x7f0000000040), r0) lsm_list_modules$auto(&(0x7f0000000000), &(0x7f0000000040)=0xffffffff, 0x7) r1 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x80480, 0x0) ioctl$auto_PPPIOCSMRU(r1, 0xc004743e, 0x0) ioctl$auto_PPPIOCSMAXCID(r1, 0x40047451, 0x0) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/tty12\x00', 0x101840, 0x0) r3 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) ioctl$auto(r2, 0x541c, r3) r4 = syz_genetlink_get_family_id$auto_net_dm(&(0x7f0000000100), r0) sendmsg$auto_NET_DM_CMD_START(r3, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="29092abd7000fbfbdf2503000000040015000500010006000000"], 0x20}, 0x1, 0x0, 0x0, 0x44800}, 0x800) close_range$auto(0x2, 0x8, 0x0) 6m5.742646698s ago: executing program 3 (id=381): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0xa, 0x3, 0x3b) connect$auto(0x3, 0x0, 0x58) r0 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) ioctl$auto(0x3, 0x400454ca, 0x38) r1 = pidfd_open$auto(0x1, 0x0) setns(r1, 0x60020000) ioctl$auto_BTRFS_IOC_SUBVOL_SETFLAGS(r1, 0x4008941a, &(0x7f00000000c0)=0x38) r2 = gettid() kcmp$auto(0x1, r2, 0x1, 0x4, 0x24000) r3 = openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/snd/pcmC0D0p\x00', 0x80000, 0x0) ioctl$auto_FICLONERANGE(r3, 0x4020940d, 0x401) ioctl$auto_SNDRV_PCM_IOCTL_PVERSION(r3, 0x80044100, 0x0) r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/asound/card0/dummy_pcm\x00', 0x8f3b7a51b804b702, 0x0) write$auto_proc_reg_file_ops_compat_inode(r4, &(0x7f0000000040)=' \\ ', 0x3) close_range$auto(0x2, 0x8, 0x0) write$auto(r0, 0x0, 0x400000000005) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, 0x0, 0x8002, 0x0) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/net/dummy0/queues/tx-0/traffic_class\x00', 0x0, 0x0) read$auto(r5, 0x0, 0xe8) getsockopt$auto(0xffffffffffffffff, 0x84, 0x70, 0x0, &(0x7f0000000280)=0x1000c0) mmap$auto(0x0, 0x2020009, 0x7, 0xeb1, 0xfffffffffffffffa, 0x8000) r6 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f000000c340)='/proc/thread-self/pagemap\x00', 0x8000, 0x0) ioctl$auto_PAGEMAP_SCAN(r6, 0xc0606610, &(0x7f000000c380)={0x60, 0x0, 0x100000, 0x7fffffffefff, 0xfffffffffffffffe, 0x1, 0x6, 0x50b301a, 0x2c, 0x2c, 0x0, 0x2}) 5m50.425587675s ago: executing program 32 (id=381): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0xa, 0x3, 0x3b) connect$auto(0x3, 0x0, 0x58) r0 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) ioctl$auto(0x3, 0x400454ca, 0x38) r1 = pidfd_open$auto(0x1, 0x0) setns(r1, 0x60020000) ioctl$auto_BTRFS_IOC_SUBVOL_SETFLAGS(r1, 0x4008941a, &(0x7f00000000c0)=0x38) r2 = gettid() kcmp$auto(0x1, r2, 0x1, 0x4, 0x24000) r3 = openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/snd/pcmC0D0p\x00', 0x80000, 0x0) ioctl$auto_FICLONERANGE(r3, 0x4020940d, 0x401) ioctl$auto_SNDRV_PCM_IOCTL_PVERSION(r3, 0x80044100, 0x0) r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/asound/card0/dummy_pcm\x00', 0x8f3b7a51b804b702, 0x0) write$auto_proc_reg_file_ops_compat_inode(r4, &(0x7f0000000040)=' \\ ', 0x3) close_range$auto(0x2, 0x8, 0x0) write$auto(r0, 0x0, 0x400000000005) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, 0x0, 0x8002, 0x0) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/net/dummy0/queues/tx-0/traffic_class\x00', 0x0, 0x0) read$auto(r5, 0x0, 0xe8) getsockopt$auto(0xffffffffffffffff, 0x84, 0x70, 0x0, &(0x7f0000000280)=0x1000c0) mmap$auto(0x0, 0x2020009, 0x7, 0xeb1, 0xfffffffffffffffa, 0x8000) r6 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f000000c340)='/proc/thread-self/pagemap\x00', 0x8000, 0x0) ioctl$auto_PAGEMAP_SCAN(r6, 0xc0606610, &(0x7f000000c380)={0x60, 0x0, 0x100000, 0x7fffffffefff, 0xfffffffffffffffe, 0x1, 0x6, 0x50b301a, 0x2c, 0x2c, 0x0, 0x2}) 1m48.444532083s ago: executing program 4 (id=1773): r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) ioctl$auto_KVM_GET_EMULATED_CPUID(r1, 0xc008ae09, &(0x7f0000000140)={0x3}) ioctl$auto_KVM_GET_MSRS(r0, 0xc008ae88, &(0x7f0000000040)={0x2, 0x0, [{0x485, 0x7, 0xe08}]}) mmap$auto(0x0, 0x400008, 0x10df, 0x9b72, 0x2, 0x8000) sysfs$auto(0x2, 0xd, 0x0) r2 = fsopen$auto(0x0, 0x1) r3 = openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/io\x00', 0x800, 0x0) read$auto_proc_single_file_operations_base(r3, &(0x7f00000000c0)=""/14, 0xe) fsconfig$auto(r2, 0x8, 0x0, 0x0, 0x0) read$auto_usbfs_devices_fops_usb(r2, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x6, 0x800000000000eb1, 0xffffffffffffffff, 0x8000) socket(0xa, 0x1, 0x84) setsockopt$auto(0x400000000000003, 0x29, 0x6, 0x0, 0x0) ioctl$auto(0x4000000000000c8, 0x800454cf, 0x3) r4 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000080), 0x1e1500, 0x0) ioctl$auto_IOCTL_VMCI_VERSION2(r4, 0x7a7, 0x0) ioctl$auto_IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, 0x6) mmap$auto(0x0, 0xda, 0x1, 0xeb1, 0x40000000000a5, 0x8000) ioctl$auto_IOCTL_VMCI_NOTIFICATIONS_RECEIVE(r4, 0x7a6, 0x0) read$auto_regulator_summary_fops_(r2, 0x0, 0x0) ioctl$auto(0x3, 0x541b, 0xfffffffffffff4e0) 1m48.231501467s ago: executing program 4 (id=1775): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) memfd_create$auto(&(0x7f0000000000)='\x00', 0x8cf) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) openat$auto_sco_debugfs_fops_(0xffffffffffffff9c, 0x0, 0x242, 0x0) r0 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_TREAD64(r0, 0x400454a4, 0x0) futex$auto(0xfffffffffffffffe, 0xb, 0x47, 0x0, 0x0, 0x2) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) close_range$auto(0x2, 0x8, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000300)='/sys/devices/platform/vhci_hcd.5/usb20/20-0:1.0/usb20-port6/uevent\x00', 0x0, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0xa0801, 0x0) close_range$auto(0x2, 0x8, 0x0) r3 = socketcall$auto(0x8000, 0x0) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r3) ioctl$auto_KVM_GET_MSRS(r2, 0x4008ae89, &(0x7f00000000c0)={0xdd, 0x0, [{0x1d9, 0x400, 0xfffffffffffffffe}]}) r5 = socket$nl_generic(0x10, 0x3, 0x10) openat$auto_percpu_stats_fops_(0xffffffffffffff9c, &(0x7f0000000080), 0x80000, 0x0) sendmsg$auto_NLBL_CIPSOV4_C_ADD(r5, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c0000007176058ab67ea1097ebe57758d2eb8ca55d3d764c6ad9d59e80d6ad94848200e9865716d2277744396f004dbdc9f390cf5", @ANYRES16=0x0, @ANYBLOB="b05427bd7000fddbdf25010000000800010001000000"], 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r6 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/015/001\x00', 0xec43, 0x0) r7 = syz_genetlink_get_family_id$auto_nlbl_cipsov4(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$auto_NLBL_CIPSOV4_C_LISTALL(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f0000000a80)={0x3d4, r7, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@NLBL_CIPSOV4_A_TAG={0x5, 0x3, 0x4}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4}, @NLBL_CIPSOV4_A_MLSLVL={0x8, 0x7, 0x0, 0x1, [@nested={0x4, 0xa4}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_MLSCAT={0x39d, 0xb, 0x0, 0x1, [@nested={0xed, 0x54, 0x0, 0x1, [@generic="c59492b8140338fc96668b8962b60a2c1b2c3915f2819ae1f209e0d34d8087b768d08f3d70681b62f2b182932ee7471b82054d707b2c2e78adb1e1e8b68a4a355bfab256fcda4490437a208de344641d0ae1b8cea697aae2c4093d6645bfd09d3e2ce25452e57ca1e747006b83cddc0d9b8e1d2a899728d870bdecd9d3bb5d1d264687d661550ff383f6481975c28fc1848447cf55d4338c68ece658dcd306d6cb5f4c6caaaf7430fd6ad8e42ec49424417dee25b7cc4b55f94addfa69c3af0e243409d5d44a6eb01c8fce0ff2872a26be0abc61f5cd6647c49ef761617d62c8d1b57234bef0658a7c"]}, @nested={0xc, 0x11f, 0x0, 0x1, [@typed={0x6, 0x81, 0x0, 0x0, @str='%\x00'}]}, @generic="de11a9d8ca9a5b677adeedc536e97b8ff8815c51b22adaf5d838c7d11f1228ac0f203c0aab5130d702e94bef9f5b83f4acf778ba12a143100d1c5bc28178bd349e606afbf84b30a87c0ad677c3c7a8abc0ab982727338195450a68d4cd118500ec1459eb65be3893", @generic="9e43c1f484e62390f6ab6ab5b8515ae566c7", @typed={0x8, 0xeb, 0x0, 0x0, @pid}, @generic="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", @typed={0x4, 0x65}, @generic="8e012c3b96c294191240ee404528f9ad6961c7531ed3a365faa74691aca2fa9c4d75183645805db774b0adeb03ceef7db83f28c16a3f83788f4753632db53e3893e16326a9fbf9c3805dd9afe77afb0922d1cd527329e3bd376333f4025ca34fe9dce7c3240c0bd4219b776dff11d93bec33dfa36c2a3292c0ed7c67454fd1246b1c7ceb5ba4cc63e4febd7ad25c57cbabc2ca991bf9b7d2bc96457b8fe3dd5c0e9bd9e7da7b2e14cda6f07b161f43b7f37db5045f302bd25824f9c00dbe", @typed={0x8, 0x32, 0x0, 0x0, @fd}]}]}, 0x3d4}, 0x1, 0x0, 0x0, 0x4004000}, 0x20000081) sendmsg$auto_NLBL_CIPSOV4_C_REMOVE(r1, &(0x7f0000000680)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000640)={&(0x7f00000006c0)=ANY=[@ANYBLOB="44030000", @ANYRES16=r7, @ANYBLOB="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"/930], 0x344}, 0x1, 0x0, 0x0, 0x20000054}, 0x20050015) openat$auto_ima_measurements_ops_ima_fs(0xffffffffffffff9c, &(0x7f00000000c0), 0x8c02, 0x0) ioctl$auto(r6, 0x5523, r6) mbind$auto(0xfffffffffffff000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) 1m47.196665249s ago: executing program 4 (id=1779): close_range$auto(0x2, 0xa, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x801, 0x106) bind$auto(0x3, &(0x7f0000000040)=@can={0x1d, 0x0, 0xfd}, 0x6a) mmap$auto(0x3f000000, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) setsockopt$auto(0x3, 0x1, 0x41, 0x0, 0x8) 1m47.045774746s ago: executing program 4 (id=1782): r0 = socket(0x18, 0x3, 0x2) r1 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$auto_VHOST_SET_OWNER(r1, 0xaf01, 0x5) ioctl$auto_VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000080)={0x6}) mmap$auto(0x1, 0xd6, 0x2, 0x10, r1, 0x8001) bind$auto(0x3, &(0x7f0000000180)=@l2={0x1f, 0xe, @none, 0x7fff, 0x2}, 0x6a) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), r0) r3 = getpid() process_vm_readv$auto(r3, &(0x7f0000000080)={0x0, 0xfff}, 0x40000000001, &(0x7f0000000180)={&(0x7f0000000140), 0x40000000001243}, 0xa, 0x0) sendmsg$auto_NL80211_CMD_NEW_INTERFACE(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f00000001c0)={0x328, r2, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@NL80211_ATTR_BEACON_TAIL={0x1e1, 0xf, "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"}, @NL80211_ATTR_CONTROL_PORT_NO_PREAUTH={0x4}, @NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@typed={0x8, 0x135, 0x0, 0x0, @pid=r3}]}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x42}, @NL80211_ATTR_FILS_CACHE_ID={0x91, 0xfd, "0595649411861d7759f0e6826cd25ceedb8eaab14593ce1da44c89694dc1e47ac9147fb39ec53f816d95c0b0d90ef752e679ae735f7e1577460e701d492170d306b6fc547c8f5745df781f31200dec271b88ef08d9e4fdb56eee7fc0d3aa7e96eb040d1efb21dbf6e3be52f35977991ae7660ef288d03dbdaaa5dcf46a3c001e347e4d19f89068f54f25443be1"}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_FILS_NONCES={0x78, 0xf3, "e70885baf7113b356efbc5ae5502eed679401ec3e5e903593150cc9a928ca8442b83f4d72a07e4f4a46428165ee32b9451c4047a2781bc21bc36231ca9245966f2cdfbf87a2464b6218635e98f5b28384a363fef4428db189b285299a298de6f3d729fb977c33ca6ef10c34ca88d992ecd937991"}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x1}]}, 0x328}, 0x1, 0x0, 0x0, 0x8000800}, 0x8000) 1m46.822252117s ago: executing program 4 (id=1785): r0 = ioctl$auto_NS_GET_USERNS(0xffffffffffffffff, 0xb701, 0x0) getsockname$auto(r0, &(0x7f0000000000)=@qipcrtr={0x2a, 0xffffffffffffffff, 0x3fff}, &(0x7f0000000040)=0x5) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_ovs_ct_limit(&(0x7f00000000c0), r0) sendmsg$auto_OVS_CT_LIMIT_CMD_DEL(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0xa8, r2, 0xcee9c975e6c208c2, 0x70bd29, 0x25dfdbfd, {}, [@OVS_CT_LIMIT_ATTR_ZONE_LIMIT={0x91, 0x1, 0x0, 0x1, [@generic="d4ee7b3b555f40b9904a931f28c8470498cf857448ee61e28ab998035afdeb13e7d149e21de3bad7f5012a2613a9778c11080a71f9920ff6659b7dc3c0fedab2739d27017b340ae068106eacae6cb73c349e4e9716352862bca8619268ff3ffa254281628be26e31cc7c6ba20c8282a45bac80fa5959f1c72db977b12ee9874eac1738bc0d92e4ff78b22d43a2"]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x4004000}, 0x20040010) r3 = ioctl$auto_NS_GET_MNTNS_ID(r0, 0x8008b705, &(0x7f0000000240)=0x8) r4 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f00000002c0), r0) sendmsg$auto_TIPC_NL_NET_GET(r3, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x48, r4, 0x4, 0x70bd28, 0x25dfdbff, {}, [@TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@nested={0x30, 0x99, 0x0, 0x1, [@typed={0x24, 0x134, 0x0, 0x0, @binary="fa2c9cd0e0780af35e2dc9174ffccc024f370c8435870109f8d386c4b5347d5e"}, @nested={0x4, 0x9f}, @nested={0x4, 0x14d}]}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x24001800}, 0x4) r5 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000440), r0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000480)={'hsr0\x00', 0x0}) sendmsg$auto_BATADV_CMD_TP_METER(r1, &(0x7f0000000580)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x4c, r5, 0x4, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r6}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_DAT_CACHE_HWADDRESS={0xa, 0x24, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x5a}}, @BATADV_ATTR_ROUTER={0xa, 0x1d, @remote}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0xc0400d0) r7 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000600), r1) sendmsg$auto_BATADV_CMD_TP_METER(r0, &(0x7f0000000700)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x4c, r7, 0x0, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_HARD_IFNAME={0x14, 0x7, 'bond_slave_0\x00'}, @BATADV_ATTR_TQ={0x5, 0x19, 0x2d}, @BATADV_ATTR_NEIGH_ADDRESS={0xa, 0x18, @random="7a30c0e3317d"}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}, @BATADV_ATTR_TPMETER_RESULT={0x5, 0xa, 0xfb}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4008880}, 0x4000) msgctl$auto_IPC_RMID(0x8, 0x0, &(0x7f0000000800)={{0x100, 0xffffffffffffffff, 0xffffffffffffffff, 0x9491, 0x2, 0x101, 0xf0a}, &(0x7f0000000780)=0x5, &(0x7f00000007c0)=0x1, 0xf4, 0x7, 0x3, 0x0, 0x6, 0x4, 0x3, 0xfffa, @raw=0x7}) msgctl$auto_IPC_SET(0x4, 0x1, &(0x7f0000000900)={{0x7, 0xffffffffffffffff, 0x0, 0x10000, 0x2, 0x1, 0x5}, &(0x7f0000000880)=0x7, &(0x7f00000008c0)=0x80, 0x1cb, 0x0, 0x3, 0x7fff, 0xffffffffffffffff, 0x2, 0x2, 0xa, @inferred=0xffffffffffffffff, @raw=0x4}) sendmsg$auto_OVS_CT_LIMIT_CMD_DEL(r3, &(0x7f0000003480)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000003440)={&(0x7f0000000980)={0x2a98, r2, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@OVS_CT_LIMIT_ATTR_ZONE_LIMIT={0x3e, 0x1, 0x0, 0x1, [@typed={0x8, 0xc2, 0x0, 0x0, @fd=r1}, @generic="d2d4c571535d05ffc718bbe26e394dfd480523bb34c9e93c00c572cc1364a61d44a441654b916659c10d4a73bf3fc2c09fe4"]}, @OVS_CT_LIMIT_ATTR_ZONE_LIMIT={0x14c, 0x1, 0x0, 0x1, [@typed={0x8, 0x8c, 0x0, 0x0, @u32=0x401}, @nested={0x98, 0xb5, 0x0, 0x1, [@generic="03047c8941cd1a979e8dcf7ad8965a7172cf2da6c625bce43fe43ac967579e058665e0ddee3475adbf498fe3eb23d8d11f18d487ee181600a15b3b7162cda97c563b4ed342dfeed6f97f0dc4dc9d84e2913d90077828ee46d9c73921a1a67ebce3259e6740edc4e941911a11240d33f5d9606efc649d7b13d5db3d7179f192613368d3b1b89f14a4f4553cd9", @typed={0x4, 0x94}, @typed={0x4, 0x111}]}, @nested={0x18, 0x17, 0x0, 0x1, [@typed={0x14, 0x25, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xb}}}]}, @typed={0x8, 0x100, 0x0, 0x0, @uid=r8}, @typed={0x8, 0xe5, 0x0, 0x0, @u32=0x13fd}, @typed={0x77, 0x82, 0x0, 0x0, @binary="837081ffa41efffa51a6bc3b964ad0418c1d40545a76955e5e4453dfdd50ddf8d2e3035b7b930a640cb0b03907d76b2f20a7051ea785b3ea5ee13089adb1fb489dac37ced2b2ddfe29b004e8224567a97b84113dbf28ff3fe109b4d83bf38f9d379c7db42302dee64d1cc66c574cd2c3ae9de8"}, @typed={0x8, 0x150, 0x0, 0x0, @ipv4=@private=0xa010100}]}, @OVS_CT_LIMIT_ATTR_ZONE_LIMIT={0x1091, 0x1, 0x0, 0x1, [@generic="40c54e95a07400d2adeb538a6ff34142ce1a2b0f3d388de739299d4f40b7587729655c0281d3ae252401cc1b4595bff58c09c45de65c09ed9be2cfb49d660769b692b1d6f8941a4e151f3c0ed73e9f677c846af5336eed763398b39330928e2c78d5bfa6323d9dec29c4b20fe42cfb8e86452b4794732964bed5ccfae9505feed894acb99a359f27b923a161a5f1c842738d96ffb97fc442aafa594e0d32d69d5b81e15e8cbd7515a55b4ec05e380c97cf73fac4261a522b542fb82bc34b9f0ec077c63fbacb150c2f785c83dcf20ea25da31215bc4726512d86f1d09f702f6cc31683daa259a0b8aa64661f3629c67524e407897641247b7daa280e08aa04948ee731e3f28be55f81e7fc70b4f8552def263e48657b719e815736758a00efdc448912ca2f429e396c2468d2cd2b5207f61846506ca189d2e769ac34ad38ed0f774d5935241973befff7f5969e83d92aa090b6f404f67c944f428930880051d7235274a43b16845bdfb9ef2eebe349277416b17510b320396db3a2ee0ccc6d9193a569c6b19d26563188990c1fa707da5e88e7b3282ff9d9cbb93c07b06577baa73f299b88cd0e67693b266f53f8dc91c562264f81a050df5641714d15279995ddd8233223228189f2c7b328adc3f0bd0dbac96dfcf66160dc71057ac4304d8438bb0156689c24762f2558d4d4faebc2762723338bdc607724d9850e2454d04b290f43e9ba00eed677c648d545d67cb7728d10e2e8daad2ac62b628081f2b87e2c2f0748fd3db6652e1e8fd3f33e23f1ba2bd62e909c9aeb0b2fd205ba73b57467a9b94605434a4582761e56f57257918784baaeba3067401aa5c7a71cabba19efee25566804c92980a3ccf924c94320f24e62b1dcc8fdbe857c082fe5435a728cd0193349bfd8443a39cfe884cbc2f99b58024f23bb8ac138003d36722710bd6c105ee047427e0ef808c8134650ccf33e11345d0a764341001cce5602e22554668509588d1e8c7aa30850567911b520db0820b8a54d863f5fbec29c790cb1c952b97463a29c1d1a837ed2aa6b8c72c012cebbbbd52ddfcf7189746607aa9847445885b0f100f205d3729ae44631eb9fbf23d369030c2b430530f10b21e4e43c2f39cccaadfde7dda323ae3f728f9415213e44c48f238fe3ec1fef2e4323aae6083d0679873055454f724f092e80e8d9596e332f872abfc8f0ab852701fa07e678b968ac399f8fe92816157b9f72d8aa402e378bd1daa24a81b71857f913a587a9041992f47b016ae2ee4fd55b384b508bd32185d4d291c0ade76d7c2071db3946f58d2768967989b92e97dbba4b51b04e230462d6c3d7cd51813850149728f046b3b66f738fd122fbef4bb93a4c0a996b17fb190bae58f92d46f65d23e6a349c544cfd155cba3b7c8f8cae14380e70f513a6d9c939b75e9d4c085830fe3471aff3b694389e394480b97f8c85ee33c5eaa6ba8065041df484645bfb00be0c7c978e355f68c84961d0bb9599fce11a2f2f7f8a6c9c10f5ec44ea89d736fc014ccd02394ac61b49abf0944f4c3292fe6210e2b719156e8a8791fd480735effcc11e99d58ed2f7600368e3881cbfe7eb27973899b5086e6ca55148b96976d57f005d9477635c9883fd069108a0c951d0560b38033a92e8e660d9ab5f4094810adb2fa441926c91f181436cc3d62ef770363be00a34757cfd6932f80d6b3877565419f747a6c67a0ed57711d7a5d1a57b71a3fa8659338704d579f031e30fd94be976a854b45d8e4f29232fc2e7a29e5e03fa2c893f28de08ddcb8052f3d08533e5420af1ab4df11aa6df19cd3cbd4dcd7862c349873b9cd259565d9eefaaa8338a3e4b3c43525ddbb8350979c39c2c100a2d2989bfb4412c4f5dccd55d2ab7fdaf5ac6c5c4865de29e142215209ffe181269b8bdf6ad940830c487eabfb6dc2762a7993db629148ed7cebb9b9c7a44a9e8c35bc075bfa5ab906678043a2afe3bae1b24054494d6ec36e78c3ca0926026c11431d0c0559586c2cef583fce2f3f040d9db9fabbda83d3b67fe9bf238a31ea07212e73a15088e708c0bcf43e5df65d7c1c26addce7e7b8ffaa45fb7525601fa56fd7ff4b4609eb6e0e8a747471c0df611f583b590e3ada3045eed9796948e54a6a8b0b1f176aa4a079a0794eec051f27342ff0fc88076a470b4fe1ea895a048c772412f177b6dffbef2aede863fccc1d39e2a40b028bf02084b0932847b51da4bbdfcccfe37dd6e9c947f4bf20650bc6e6a16af0c7e8ca8ceea6ae9853928f2b2f1909efe4dac8fea2c8a462ec47fc806204cf694e6e898ea341460adfaa202096219a2ca4709133c2ab69c4a76b13166f8bb393e09178c4bfc01f12b452d5b2da58091558ab321216153639c93bcf3d35d8ca6db9f4187571e41b69fd156012390e4a50a383fdf28b005c1d225743d3a5791ca31751bf76404287f2bd0f6fd105b87634c3b23ccd8a40dd69cd1665f8ede60cc8d486da547e98960a91762092e2530269e8754774e63af8228a16fbdf8e83b2d43e2f7fdb6db70368c6ef68dd28d87748cb5f9b99c8e103685fee9ba400f1917a91640d50196a87073f1b170bc69e75dd7c50e38f23a3e190bc054c872a0624a5b4d61009e6f7c21ea500a5ad8f7994f7d155c482911ee3b7ec91e6afdb49cee8008e48b99b7594783ec4cd28b5fa7888367303ef68913cf18e184d05d35a57c0095ff4e2cb5ee42b85a80ee5af0a86f7a6a48754911493cb928e48821e36a16ef4828d7533691e361b4a616ac81543a4ae3d0060f31cdf892b7440daa61470dc999000e8ac44c70167c0e37890acd516fed15726f784e537d677f122115901c4a28720b4905449036b3a28a916f9ec662140b3caadbe66c64a9584be4cdc0eddedbb2bc65ea65d8253741e1d0d0224025d2638409761f6605e246b8404d5b55f2f845f45dfc35728c87e940b7bff3dd8847cd31bda8edef8c71e7c366401f884175781297efd1d4bd9a250b61236253c1058778aa95f46af23c427d9dc80761dff3b9cd0d273086d11f01e5ed4ed3b459ee08938e3885df7750ae1060b5a067b14269388a0fbb983a6abbc08e5a02a3a3edf49bd29c01e0591906ff48719fb4edf713176fb40ade65d21b9779b27268649bc802f3dd8cb0b7d17cbc36f977e911237cca3a13a26be334c95d6fb4041154d2ac4c29416096e6d7bd752044340b5a7769616e61796998aac2acb7b1a6f5a70d59a37cac78e133f3a775d82e067a55a39b624aec82764dcaaa8bdcc962db260eaaeb6c6bbc37fd99748c39729a53c541c9d78821f54b370cef5713c7a0978126b52e985bc2d243f2e7782f187c8125f5ed151b471986f6fe8b15f89666be0f95ecc6763761fa762d581de39c40b646c9033e442acc70d9f8ba250b254c8417c9ad464b1d5db685bad941f4f6568ccaaac31a3a26a909d138c15a8a5803783cbf7b6b72b828b7689f233e70e0946de114ee92fb5ecdec305363efe6e1b10cca3a4f4c394dff8997844d194c16910271492751ba5d25109cf4a4081bee820b40416273535dd2bb4d68051693052014a74410c8f2079428e177b61865c8b3be75a2fcb282b79e22927d22e49021c8963dcfd4acda0e9feaa5ea0a44072c58415e35b99aa408d5152d91d854ed23d72c64360d35afb8dbc2b40bd10d8706c40a30eab4294fd68562a2b61f107cb3e3fac003220e33ecfc0985f67d78d7cddede95212297e101b38e205f4a6fd3c9843589b24252a0ec0f8731c80f28fe05ec7688aa4d1ca46390c26320b10a62567b4f8c6dcdfb42809fea4e6f0b80f1e8d3eec497ec80b31806358bc8fc279a99d054edb4c2134b549cd6518d9a8451d3446573689d9928efc9b01872d101b7ee43810073f74c6369d4c0a8a96a2a582fcafae079eca59a403cac613b1514bdbc56334db989fc730ef60d25f938836095a8d3f2abefe364f3f7ed31f8670e8a057d91a588ca5c669d8603f4ae149ca7028a2d31f5c2d88a66bf47bc1296414d7f156974db0ff3be4674c859f6ef4808f1352bff00723677004fc2aa6180f141cb022e81aa4c229ab9301e0d6562d6c213a98af819a69eaaacce3ffd2d6c4596ee38348220836d7473780148dadb17394694ba4434adbebe6d13fd20a65438ab9869a1c84271d54e99aec7cf5287c4c202fe0c66318c56570552d3dd25d72a997e79f9d4a1acf7c7dc9f0d3406def4ce0157dfeada7b484abd4f02f3a9ab7e20a2898b2e7696d1b3f560a3a8d297dc26f4726b5aadca4269b1205a8b81fb5f20beac95a5b38416cc334a0dd522959f6cc12492e2c9250ca49bc65e9c4937a974050399f8d13edb4222d02840a5d85de03b0247cbf4c4f39a66172d8831c750b33804fb7659578d35af774c4c602aa23fcf7a65bae74e53418101b2205f0d725d3905ec701fd9743e1b39313a6089f6c9f58977d17e6cceea38dbc29b2059f2f89aa9d74adcc6809d3a87641a07717371ef3f967a3bbb27765988a593212fb83b107308e0516a5d679a3fd7f8f1a3eb3f7fa2aa8c7c7bc1abc40c518dee62f478a5fdbe0f884fb033530ed8da4a9ebee8785d0f2af7399e097b5abf6c7e76a2be4246e1923d2d2c244a4470daf2d2a9840d2902357b834b4544c7d3c469dd0a32a233fed918a90cc2f99b6eb98702fd47f49d612d8234472ed278c5c6d15a30393d161247b4dc7051316227ec36dd998cb87a76f2867a67cb0be2f8ab21b7804c33cc12bbc341286d6f26cfd6f26c1f807e32f575630ee1cd624bd8775174d86e95f2c81f34d3b162379e27bb58e27e08061cf88860033e7836086b29a16f03fc47872f009bcac35c703cd070afccf0f582b7ebdd0db540e74c824386b058bee28758b4617a2f797deb11e29c726938a9704c72096287e16db76cda4979f2f5a6419e2444d8af067adbd219b6e0b535081220f5d7b626ea6d0182fc06468035ad20bcdf2fae64be01718ca39a4795afe9430c9b164ffbdb89484765172f3b7e31fdbee154b740c1e4e41c97265c2eaf1d20aeaa30557f000225dd688490b1ac7bb1fe7212da89fc23cdefbcdca5c61831811cf0ecc30d272d904465c197a4fe3c064398fd99683e6d2baf9bdb430dee84be9f26b07605bad98dc9a241c2418cde2d03d8a8f989db250770210b0ce0d1999328e5914431884d38963a70e30256831b9015d9c73b4551485e591101ff5f4f0e8f5323c58f6529739dc51237f070290a7e3e45348aeaf05e98cea3a162988e6ced039bbfdd60fa8fad4231a9e4b671bf5cbc81d2e6c60c96e8974ac360bceb2fc97fa2a1a7894f56ae6d4a10d3bdcfb1f96bc29e36c424e465ad0387ba0214dcb7270aead5eb079a171fc4ba0fc0b06c4becec809d6375b9104066cb1a7aede4984b6dc078ec95f1359a75994097450adebe327015a263110ea7a3135faa24c8c119695c6883777e8d4c2b4348746a8862bf3e09ff317162112f589431390b6518890480e4ad83250f73f5a84d3080c8bd683f6972d8b474ec833954cf99717b9e316add40a8bdaddd36f2553d2a1eafa5709a7db492c9bf5082615e7c8f1efd82829c443f06513441098ac8923b831b113b2664fdfcd4504364b77e5770fe6c0fe3914416484d4c3700201889c12e81350c387f613fa898a768ab1427fcbc8ea7e52c85015efc05021248a9c75cf4725eca0b7d74f3f97c272f0d0701d93087adc67977df2e10a737fc5d5c469c996d8128a12a5453d6297cb3823df2a9410cde555f7471fb1ad29359ba69b0b0c", @typed={0xc, 0x1a, 0x0, 0x0, @u64=0xffffffffffffffff}, @typed={0x4, 0x104}, @nested={0x12, 0x106, 0x0, 0x1, [@generic="331c76713890f29e58879b8d7284"]}, @nested={0x18, 0x3c, 0x0, 0x1, [@typed={0x8, 0x139, 0x0, 0x0, @fd=r1}, @nested={0x4, 0x47}, @typed={0x8, 0xe7, 0x0, 0x0, @u32=0x10000000}]}, @generic="21a165cb8956296701c0472ac3200c01c5c88a726ea2231d1b13c1fd77a9df2953708fb35ae0244b8ed1b2f4b5fcd6d421d00fa13545766d6407a07be684ed3285bad7aab084c9471bc57ca62a75a6e131"]}, @OVS_CT_LIMIT_ATTR_ZONE_LIMIT={0x1c4, 0x1, 0x0, 0x1, [@nested={0x1bf, 0x11d, 0x0, 0x1, [@generic="3beb5e30b0452df8ca975db9dbfe4c50986612cd87e9b5ed3736bae6d76e46468adc95038364a7e91f379de1d2b16abe085fbbb8ebb96164a76d5450d5ef88e1aa2e1c344ab2d9f671993108ca8456dc9820892db9db912042c03e6c18381a39e135400099c8d6b4199f94df3691ef057bf05c43db931e8bac73a41bf10bb9c654fed956de350dc95fd398084739515f41c89470d747850e2f3e985ed253cd7f71dfadeac32d91644443d7db64b5", @typed={0x61, 0xe0, 0x0, 0x0, @binary="13174c5c4a9c937ef979a613b2404c44c57113bea06926ca13c33af963dc3dce92d045f975a3b18c309d80144050cd17db8d14486d83c99a89adf30c5fb6e1ba6e863e8ebb6639c217cbefbe77d87b6fecb0bf8a7ce8e8596f3a257271"}, @generic="5f4177113463e92a99c39be43f78aec06c28563a0f30082e5d5498546839405b287e4881b2e4f4ff728f3bf8f826195e25c1f383905b8795b4b23c93e369f05e07cd334dedb5aaaa9cd3ff18f3b80df9614b43cd2b06c78b3747b97984dd4e3b3a7b429db8c609c19c104acfa50c5c3b57c8d69750275f641fed855f4c2a30227c3dd605ff79c0d412517ee7d45150b7d46d066f44f0a96f9f", @nested={0x4, 0xb0}, @typed={0x9, 0xe7, 0x0, 0x0, @str='hsr0\x00'}]}]}, @OVS_CT_LIMIT_ATTR_ZONE_LIMIT={0x169f, 0x1, 0x0, 0x1, [@nested={0x178, 0x31, 0x0, 0x1, [@generic="1fddc8eed3f846fa23a6a43c6d11804c8d654639c1ba8e8d73fef82daeb5ad390c20c3f1afb454897901c6704b06192dd5dbe534e60280754f254f15032f192f43c87dbac9f72466cac6d78f5c6a6fe3ad56aad04d313a3f82682dab337b44d307bfd97824f4dafbc3ca0e1a729fa810ae39f03c1df920ba23716d39b0cffe34a2bf7cb9b745fadf345e7ac7aa39051984e554c777328589ec502a73f3d0d0928957079ccb0e9ceea299bc7b300eece500a617", @generic="5571ae771360ad114750b8417f4393aed1c67cd1e55c39ec0094b39d1f02ed8eede29e299590bdcf0d8840507a30a909675fcfcdcc8596fe530c91635184868d5323c851adfdf165595a8697a44e7f33b60814f009faa4cb8bbf1360a55d5eaa40cb0953e43d9b40644ecbfe44f42384e81ff1b742d008136aa3bbe8ff7ea1bfbf74e68c1913cc95a3acabcf548c489943cdb9159763d3a39940fa578bb7b32dd361355d961d89d10d216fdef4", @nested={0x4, 0x15}, @typed={0x8, 0xd6, 0x0, 0x0, @uid=r9}, @nested={0x4, 0xb0}, @nested={0x4, 0x10f}]}, @generic="55b93cf0abadf7086e6cb916553f202c76e2a290be8c20796fb02927a05aa39c110847d493bca7b393aca09c4ce36e0b91259f5205e32ab13ea6fb63ad3f628e606d55e65220f8aa0d43e4d3031bb11ab54157b81dc3455fb0fa27f708da9a042f0a1d9a86b617b5e6731bf5054f8ca4f7a1da0b2f31821b81d80c24bd7ca29c53c15bdbbdb8f9eae27c0920c17925265cdd5cfbae0bcbc3985090258bb87ff57e96cf5e6ef9b81caf9b7a51d3f610326624ef2fca7a328429d31b6abb65f64cb74cbf05a78822b710140b0cc0d80f414284a2a7895dcc815af2251fc325ae6b7d6920a533d530bffc", @nested={0x11a6, 0x15c, 0x0, 0x1, [@generic="e3e31405e0647b9f284d16acf74197dcd82ec07608879adc355bfb9c0af4322af18ab73f3336e73a9b5a187676552edd8f0e085d93c75135ea606b1f9187250ded51bcfb0c706a1869050ae53230b55667b13f91c9c4b45b3d54f3bac8dc7ef66f77dec44bf9c30c1656e540016a19c320a40af1c6314aed1735459458e999caaa3b39ce930dad482095b8624596f32eb023da404df3b0d78f6f31f66e07aa11444183254ac33658dcf8caf61e57523ac37ff06cb2c58322d609", @generic="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", @generic="344357e51b94aec8779a87317f01dee73ac5000ade839a7e5598038ccfde8261a1cf7bc179e2f7097791068b03377487c0d5061ca75c5e13cfd1d2e1e46eb65b6a27b155859b05851cd236f7ee38bd73c2dfe3", @typed={0x8, 0x1a, 0x0, 0x0, @u32}, @nested={0x4}, @generic="b62487db307b9f6e610be53f1dfb2c77b54991c1ffe288f0d581206de3a3b04e68d0a7923efd2e5d23f69c28e6671ee1869dcc39d2d198eab90d4516273044c2453b97bae891650a40ac5d9579fefd53c893ad47141fe46a8a9fa2f9f9895ed4bff3a941984aa255eb94471de6e2e78be49e170896a0b28e8f", @nested={0x4, 0xf5}, @nested={0x4, 0x6c}, @nested={0x4, 0x3e}, @nested={0x4, 0x7b}]}, @nested={0x8, 0x8a, 0x0, 0x1, [@nested={0x4, 0x129}]}, @generic="5a2508ff9d26c5eca7d266854a16917c6434b267eceea80c553a640bb779d70cb7226a8e5b7c08f1a1cb131bf5a1b251c59a5b635ea54007260934276ac210bec0f477dc2ef74a20f59552bebf0ccdaa6fa7b91d3c46ebf8417f7b946e64c3a9a9dc714bcecdbc804eb7047dc1763840e07b537a27fb39cc6763827d61888ec16a91b3b5f90e50683bea41756f1e03558ef4c3c2836c7230af9b8ba256d80b86ce6756db926882831ee0", @nested={0x1de, 0x137, 0x0, 0x1, [@typed={0xc, 0xf3, 0x0, 0x0, @u64=0x1ff8000000000000}, @generic="1cd720aa3164765e66a10bc04f3267a203463fba875efb736e0d48f0115002c8156a2026df616a04268f31157bc33dda9a37ac46a63c4ff67236b2a41e2a30a2ce7d85808e67405aaf0b7cc80fee10a1d6280a7d1cbd7894525341dd50ac207f9f66414ea63f53ea90396443b7a2d6f29f8f1f08eac9262a42e106e1d7a2cbad0a62cc8850c6807b13a27f0bf6fbb1fa1b1d1f9d7b41889d8bf2a1561ff3d4003073e9df7bdfd35f838c407f6031cd76dff6a0324d7cfc39255c9dde094ff69e790d79fbbdb9f57faaa715960ab5a066fc4a4f7ef5fd55cfa8c3896d5d2751d533", @generic="0fbf3cd7fc004c25336d496dd30831907be127044030c9f8fa3bdf5737b6467ba4e8a0f4d72eda43dfaf965d79d7c0b20f3ca522bbfc1b09bda2fafb4f4a5b5f9ff1e99a166807d24ee50ff57256036ac9344cff4c447513fc07a7dcf1a3ce4cf835cc5ebe537de4e6461de8ed6b8e173f5a278e3aab057923b282d7535ea6c2091ea41ab9f6d026301b5108ba10151a0737f6d851c2fc3ff1963cd3802c66696a074f2c64859f59a936ebe2b5060c26ae59c51da1d98f27dd5d80fc10ac9a83d12ea9748b34fff69183fe8c7a0780a102e66e2edc8c7ee24a744dc217914865cda8e05bde6564c4e83d776060"]}]}]}, 0x2a98}, 0x1, 0x0, 0x0, 0x1}, 0x20000090) r10 = bpf$auto(0x39b8, &(0x7f00000034c0)=@prog_bind_map={r0, r3, 0x9}, 0xc) faccessat2$auto(r11, &(0x7f0000003580)='./file0\x00', 0x7fff, 0x9) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000003600), r10) sendmsg$auto_NL80211_CMD_GET_REG(r12, &(0x7f0000003840)={&(0x7f00000035c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000003800)={&(0x7f0000003640)={0x18c, r13, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@NL80211_ATTR_WPA_VERSIONS={0x8, 0x4b, 0xc}, @NL80211_ATTR_FILS_CACHE_ID={0x7a, 0xfd, "33e46672db36f57b723c1d6882d778022f70d60b2c730ca6b9fec163172abd83dad9ba5f3b879a8eeeb375291ea19f15edfe57241b2ab6414ac2fcc8cd124fa3b1039df2bb5627e055d0fe6740cf35842066ed52379a322ef3d3233ce5473b66b3eb81c32d121cff6fb0aac6f7ffbf06dd578f7e9267"}, @NL80211_ATTR_MLO_LINK_DISABLED={0x4}, @NL80211_ATTR_WIPHY_COVERAGE_CLASS={0x5, 0x59, 0x58}, @NL80211_ATTR_QOS_MAP={0xe5, 0xc7, "cbaaafcb01843e968e080881ac9d580680521b314e58c0356a02d8484118bea0cace872150ccfa214bfba3a7eb189b89f1f61e7869ac48e0e903cdc97c4fbe1f93fc59e48e19961f6897db1885acd71b0a4c0da9da981754b5d4d59f11ec14ce1acc66a1117fbf25fd21d8748a4b4f29f7a686a4d079f3b71f099fa87b2fd435c7862857bd75450029c8718962dd96d37faa0b627ada796c417218bc14e0fb1003a0c3c625ee52c7f5b67ded202f97c45197c552b6cadd33d4e5647cf298f4436af4b9beae08d65d5fd72e21c06480c0ccc0f4e619b9a1043a7d2038a8db3ef072"}]}, 0x18c}, 0x1, 0x0, 0x0, 0x4}, 0x1) ioctl$auto_TCFLSH2(r3, 0x540b, &(0x7f0000003880)="bc4e53f4b4c4d823cecbbc1b16c78255196dc65d49ea0b3f6e63e7e711614044f7b37cbb1a92b06a00264f3d0923e9fd3e2ffaeb468a20d0668db93ba6e38861adb6576f2b2d1161f40f7282fde99a587e073ef0d72ba2eec5e7dc9283dd") fcntl$auto_F_GETLK(r0, 0x5, 0x3) setsockopt$auto_SO_RESERVE_MEM(r10, 0x0, 0x49, &(0x7f0000003900)='\xaa\xaa\xaa\xaa\xaa', 0x2) ioctl$auto_TIOCSTI2(r10, 0x5412, &(0x7f0000003940)="021d546783ac0389f2ce5dfd29a6ad4c09562a8d034c31192cda83d43cafcf7cae44ad338c84434fa61de3e6cef7fe3866f88c7ed97a6a764f5b2c99e5fd51cf9bf596a498dc83ef3d9700138cc547be383f834fd398c1cb4b0cf5dc106ae2af293ab77024f434ca1bdefe8366cf588262a5eaa5edd3512d625a400e4bdba52ef4cd33fcea4c4ca3bb06bffef77c18ff12929fcd2e4dc8f32f7977a9ce3791201baaec463cc829c754cead8c52b78ace1b0c12702681a14a3b9aea7a46688eae4183a757badfb545074908c22f6eb9aaf6469479ea895d") r14 = syz_genetlink_get_family_id$auto_802_15_4_mac(&(0x7f0000003a80), r3) sendmsg$auto_IEEE802154_LLSEC_DEL_SECLEVEL(r11, &(0x7f0000003b40)={&(0x7f0000003a40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000003b00)={&(0x7f0000003ac0)={0x24, r14, 0x100, 0x70bd26, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x7}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x4005001) fcntl$getown(r10, 0x9) r15 = syz_genetlink_get_family_id$auto_smc_gen_netlink(&(0x7f0000003bc0), 0xffffffffffffffff) sendmsg$auto_SMC_NETLINK_GET_DEV_SMCD(r1, &(0x7f0000003d00)={&(0x7f0000003b80)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000003cc0)={&(0x7f0000003c00)={0xac, r15, 0x400, 0x70bd25, 0x25dfdbfc, {}, "c9619aa33ee7df988299303e46e7200848e4a83b7d5c168e977dab190c98a220799ffbb696204a3a7b0b1fbf1a89cf0247fd8eac57ae6d2e416519e5b0a1bc0ac6a38b5734f0f3e8971ea3df5d988e8e9e3f1e8c5d7afd9ebe1f3d34cfb2cda652ad3bad280edd2ea5db2acd553a31b0f7d8e0f2b54dd4dab91570470b40724c6839393080ef55dedc63c6a2b5a2e9258c3459e480"}, 0xac}}, 0x20000010) 1m46.601347806s ago: executing program 4 (id=1786): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) listen$auto(0x3, 0x81) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) madvise$auto(0x0, 0x2003f2, 0x15) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)=ANY=[@ANYRES8, @ANYRES16, @ANYBLOB="df250c0000000000000000"], 0x14}}, 0x24048004) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff) r3 = openat$auto_proc_uid_map_operations_base(0xffffffffffffff9c, &(0x7f00000013c0)='/proc/self/uid_map\x00', 0x8006, 0x0) write$auto_proc_uid_map_operations_base(r3, 0x0, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(r1, &(0x7f0000000480)={0x0, 0xa00, &(0x7f0000000440)={&(0x7f0000000200)={0xa8, r2, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NFSD_A_SERVER_SCOPE={0x81, 0x4, 'nfsf\x00\xd8\xef\xe4-\x13+r\xf3\fT1Z\xa7J[\x81\a\xcf-\xdf\x90\x1f\x8f\xc8\x13e\xe2R7D\x832j\xce}\xa3V\xb7\xa1o\\\xe6\x13\xbc\f\xe3\xae\xb8~\xd3\xd2+J\'\xc3\xec\xc9\fp\xc8a\xbe\xfe`\xa7\xa9AKDd\'\xa0\x01\xf6\x13y\xe8\xca\xf4Q\x9e\x03*]\xda\x1e\x11t\xe2\xd5uw+\x93\xfc\x04l\xd3\xa6t\x86k\x80\xd9\x14s\xec\xe2H\xc0=(\xf99\x8ac\xa7\x85\x99\x87'}, @NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0x85}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x2}]}, 0xa8}}, 0x4000) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/thread-self/pagemap\x00', 0x404001, 0x0) mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0xb74, 0x66a) madvise$auto(0x0, 0xffffffffffff0001, 0x15) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x54) mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) bpf$auto(0xfffffffe, &(0x7f00000001c0)=@query={@target_fd, 0x8, 0x3, 0x5, 0xff, @count=0xe35c, 0x0, 0x5, 0x80000000000006, 0xd9, 0xffffffff}, 0x6f2) sendmsg$auto_ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="d4000000", @ANYRES16=0x0, @ANYBLOB="100027bd7000fbdbdf2518000000200001800247eea41fac000014000200766574683100000000000000000000000800070063fbffff0500060001000000840002803d00488013b37090badc49d6dc93876646d25a4d297d01cd3b7da38d12889cc50d505f353dc42d0a3c0a14c7b46428910708003600", @ANYRES32=0x0, @ANYBLOB="0400b3800000003d003b800400a4800c009a00008000000000000004008680c16ab1b1b39dcaa14b6af7dcc011b43cf706e562811c62b28a702b72e0a87126700294f2350000000c000180080003"], 0xd4}, 0x1, 0x0, 0x0, 0x20000880}, 0x20008000) 1m31.342349066s ago: executing program 33 (id=1786): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) listen$auto(0x3, 0x81) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) madvise$auto(0x0, 0x2003f2, 0x15) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)=ANY=[@ANYRES8, @ANYRES16, @ANYBLOB="df250c0000000000000000"], 0x14}}, 0x24048004) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff) r3 = openat$auto_proc_uid_map_operations_base(0xffffffffffffff9c, &(0x7f00000013c0)='/proc/self/uid_map\x00', 0x8006, 0x0) write$auto_proc_uid_map_operations_base(r3, 0x0, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(r1, &(0x7f0000000480)={0x0, 0xa00, &(0x7f0000000440)={&(0x7f0000000200)={0xa8, r2, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NFSD_A_SERVER_SCOPE={0x81, 0x4, 'nfsf\x00\xd8\xef\xe4-\x13+r\xf3\fT1Z\xa7J[\x81\a\xcf-\xdf\x90\x1f\x8f\xc8\x13e\xe2R7D\x832j\xce}\xa3V\xb7\xa1o\\\xe6\x13\xbc\f\xe3\xae\xb8~\xd3\xd2+J\'\xc3\xec\xc9\fp\xc8a\xbe\xfe`\xa7\xa9AKDd\'\xa0\x01\xf6\x13y\xe8\xca\xf4Q\x9e\x03*]\xda\x1e\x11t\xe2\xd5uw+\x93\xfc\x04l\xd3\xa6t\x86k\x80\xd9\x14s\xec\xe2H\xc0=(\xf99\x8ac\xa7\x85\x99\x87'}, @NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0x85}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x2}]}, 0xa8}}, 0x4000) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/thread-self/pagemap\x00', 0x404001, 0x0) mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0xb74, 0x66a) madvise$auto(0x0, 0xffffffffffff0001, 0x15) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x54) mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) bpf$auto(0xfffffffe, &(0x7f00000001c0)=@query={@target_fd, 0x8, 0x3, 0x5, 0xff, @count=0xe35c, 0x0, 0x5, 0x80000000000006, 0xd9, 0xffffffff}, 0x6f2) sendmsg$auto_ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="d4000000", @ANYRES16=0x0, @ANYBLOB="100027bd7000fbdbdf2518000000200001800247eea41fac000014000200766574683100000000000000000000000800070063fbffff0500060001000000840002803d00488013b37090badc49d6dc93876646d25a4d297d01cd3b7da38d12889cc50d505f353dc42d0a3c0a14c7b46428910708003600", @ANYRES32=0x0, @ANYBLOB="0400b3800000003d003b800400a4800c009a00008000000000000004008680c16ab1b1b39dcaa14b6af7dcc011b43cf706e562811c62b28a702b72e0a87126700294f2350000000c000180080003"], 0xd4}, 0x1, 0x0, 0x0, 0x20000880}, 0x20008000) 1m19.226635938s ago: executing program 2 (id=1941): socket(0x2, 0x3, 0xa) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x9, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001b80), r0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/module/zswap/parameters/enabled\x00', 0x62, 0x0) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r0, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2051df00d6740db125daf7ee4fb3d009058b0757812e9006e2b66728a8ee5e63d5b854ea3d90e1712bc969f9db6c7e2edf031ab499f14582b78af0d18fd05f72e256c35b3857fa2df5d43189b678bdef52fa2633f47836a76655d929f8cb08d28f76b27c2d9c63ade16c74cd694f117f0fd2e5fa2bf9a476e97a339cb14069d36c7f150c10981323516739d3d619a95d7ec42c0a1fe593d40d13a8b0d8", @ANYRES16=r1, @ANYBLOB="010027bd7000fbdbdf2504000000080017000800000004000e00"], 0x20}, 0x1, 0x0, 0x0, 0x220000c1}, 0xc0) (async) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r0, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2051df00d6740db125daf7ee4fb3d009058b0757812e9006e2b66728a8ee5e63d5b854ea3d90e1712bc969f9db6c7e2edf031ab499f14582b78af0d18fd05f72e256c35b3857fa2df5d43189b678bdef52fa2633f47836a76655d929f8cb08d28f76b27c2d9c63ade16c74cd694f117f0fd2e5fa2bf9a476e97a339cb14069d36c7f150c10981323516739d3d619a95d7ec42c0a1fe593d40d13a8b0d8", @ANYRES16=r1, @ANYBLOB="010027bd7000fbdbdf2504000000080017000800000004000e00"], 0x20}, 0x1, 0x0, 0x0, 0x220000c1}, 0xc0) mmap$auto(0x0, 0xe983, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) (async) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) r2 = memfd_create$auto(&(0x7f0000000300)='/sys/kernel/debug/x86/boot_params/data\x00\"F\xb6\xcd\x06\xd6\x97\\L\xe1\xb2\xee\xb8\x8e\xd6O\xa1j\x90w\xc7\x94\xb7yi\x01&\x04b/\xaa\xfb#s\xc4\xa3\xa7\xacj\xc6\x8e\xf4L\x9a\xf8\xcc\xdcy\x9f\x93\xbc\xf6\xc8\xdb\x05w,|B\xfc\x04\x97\xd3\x0f\x8b\x81\xe8\xbc\x81\x0e\xd7o\xd2\xcd\x18z\xc2\xb7|\xe1\xa6\x9a~\x96\x10rnLnt\xdb\xdb-\x1b\x99\xd4\xed;\xf8\x13a\r\xf2\a\x85%\xef\xa7\x7f#\x96\xf2S\xb0\xf1Hq\x0f;\x83\xb7\x0fz\x9dN\xc9\x1e\x15r\x97|\xbfE\xce\"', 0x4) fallocate$auto(r2, 0x0, 0x9, 0x4cbd5d) fallocate$auto(0x8000000000000003, 0x3, 0xf, 0x200000004) mmap$auto(0x0, 0x10000000400008, 0xdf, 0x9b72, 0x2, 0x40000008000) write$auto_fuse_dev_operations_fuse_i(0xffffffffffffffff, &(0x7f0000000440)="1100", 0x2) (async) write$auto_fuse_dev_operations_fuse_i(0xffffffffffffffff, &(0x7f0000000440)="1100", 0x2) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D2\x00', 0x20401, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) io_uring_setup$auto(0x1, 0x0) (async) io_uring_setup$auto(0x1, 0x0) futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0x80000001) (async) futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0x80000001) r3 = gettid() kill$auto(r3, 0x11) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv6/conf/all/forwarding\x00', 0x42a81, 0x0) (async) r4 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv6/conf/all/forwarding\x00', 0x42a81, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/bdi/43:288/max_ratio_fine\x00', 0x10b142, 0x0) (async) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/bdi/43:288/max_ratio_fine\x00', 0x10b142, 0x0) mmap$auto(0x0, 0x40006, 0xe3, 0x9b72, 0xffffffffffffffff, 0x7fff800000100000) socket(0x2, 0x3, 0xa) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/controlC1\x00', 0x40, 0x0) sendfile$auto(r4, r5, 0x0, 0x1000200) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/controlC2\x00', 0x8600, 0x0) 1m16.278467945s ago: executing program 2 (id=1958): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) listen$auto(0x3, 0x81) r2 = socket(0x29, 0xa, 0xb) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000140), 0x8f80, 0x0) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) mremap$auto(0x1ff000, 0x100005, 0x843, 0x3, 0x2) mremap$auto(0xfffff000, 0x4, 0x4, 0x7, 0x1001ff000) fsopen$auto(0x0, 0x1) prctl$auto(0x1000000003b, 0x1, 0x4, 0xd73, 0x7) madvise$auto(0x0, 0x2003f2, 0x15) syz_genetlink_get_family_id$auto_ethtool(0x0, r1) mmap$auto(0x0, 0x4, 0x4000000000df, 0x78, 0x4, 0x300000000000) fgetxattr$auto(r0, &(0x7f0000000280)='\\@--*\x86\\#]:+]\xc5\x00', &(0x7f00000002c0)="00040ab13436735bdfdd177fdb547254ec001fc6ed98b08be3209651636844de98fe5c37b3880828a6646f14f419a04f9de48cc60007", 0x0) r4 = socket(0x1d, 0x3, 0x1) r5 = getsockopt$auto(r4, 0x65, 0x6, 0xffffffffffffffff, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x182b02, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) r6 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000000080), r5) sendmsg$auto_CTRL_CMD_GETPOLICY(r1, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r6, 0x4, 0x70bd26, 0x25dfdbfc, {}, [@CTRL_ATTR_FAMILY_ID={0x6}, @CTRL_ATTR_OP={0x8, 0xa, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x10) openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, 0x0, 0x40000, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'veth1_to_bridge\x00'}) r7 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000300)='/dev/sequencer\x00', 0x440000, 0x0) ioctl$auto_SNDCTL_FM_4OP_ENABLE(r7, 0x4004510f, &(0x7f0000000340)="8eca7f8c4866a176e6ae9e6e174729793b7f75862b8682dbeb0568b3bc24a91c") 1m14.773604268s ago: executing program 2 (id=1967): r0 = socket(0xa, 0x2, 0x0) setsockopt$auto(r0, 0x0, 0x30, 0x0, 0x568) (fail_nth: 1) 1m14.561474627s ago: executing program 2 (id=1969): r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0x802, 0x0) flock$auto(r0, 0x5) getsockopt$auto_SO_TXREHASH(r0, 0x8, 0x4a, &(0x7f0000000000)='/sys/devices/platform/i8042/serio1/resolution\x00', &(0x7f0000000040)=0x5) fsetxattr$auto(0xffffffffffffffff, 0x0, 0x0, 0x1, 0x0) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ram11\x00', 0x28041, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) ioctl$auto_TCSBRKP2(0xffffffffffffffff, 0x5425, 0x0) mmap$auto(0x0, 0x20009, 0x20004000000000df, 0xeb1, 0xffffffffffffffff, 0x8000) syz_clone(0x4190e00, &(0x7f0000000080)="8a8719330f6027d508140dd2f5979ddfeee5ba188ce2f968498e29c1a44a94874cc487f0e8b13832d220cadd75bc3fdb25fd7a31df9d7f9c2fd20b", 0x3b, &(0x7f00000001c0), &(0x7f0000000240), &(0x7f0000000280)) uname$auto(0x0) recvmmsg$auto(r1, &(0x7f0000000400)={{&(0x7f00000002c0)="0730273585fa2f14c429ca0466ddd2ec23bf4f65b007c04eff3f7e63d10d077a6dccbf87dc8c6e916373af2b8ebf47", 0x9, &(0x7f0000000380)={&(0x7f0000000340)="62206eb257898cf5855a234cca5fd7e28c26e17d", 0x80000000}, 0x6, &(0x7f00000003c0)="edcd46e9a4fc4cb8872a9cbb8f992b94bf1f2bc7afa499696cd675c6ebbd04177a816df4e9ad4dafb34b2f6cebc865021abce8a1a9440c3b7b97da", 0x800, 0x2}, 0x5252}, 0xf7e2, 0x1196000, &(0x7f0000000440)={0x8, 0x2}) sysfs$auto(0x2, 0xbfffffffffd, 0xffffffff) r3 = socket(0xa, 0x3, 0x3a) ioctl$auto(r3, 0x890b, 0x1) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, 0x0, 0x1000, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000180), r3) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x8000000000000003, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) r4 = open_tree$auto(0xffffffffffffffff, &(0x7f0000000480)='./file0\x00', 0x73) ioctl$auto_SNDRV_TIMER_IOCTL_TREAD64(r4, 0x400454a4, &(0x7f00000004c0)=0xfffffff9) mmap$auto(0x2, 0xaa06, 0xdf, 0xeb1, 0xffffffffffffffff, 0x2) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$auto_IOCTL_VMCI_QUEUEPAIR_SETVA(r0, 0x7a4, 0x0) r6 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000300), r3) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'netdevsim0\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_ACT(r5, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000280)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010026bd7000fbdbdf251a0000000c00018008000100", @ANYRES32=r7, @ANYBLOB="0b5a5d3a60e05b935f82b7a08e0c6edc4d"], 0x20}, 0x1, 0x0, 0x0, 0x40801}, 0x80) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) 1m14.115407799s ago: executing program 2 (id=1972): mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x2) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/conf/lo/arp_notify\x00', 0x8000, 0x0) write$auto_proc_sys_file_operations_proc_sysctl(r0, 0x0, 0x0) mount$auto(0x0, &(0x7f0000000540)='}[,&*}\x00', &(0x7f0000000040)='nfsd\x00', 0x3, &(0x7f00000003c0)="3dd1fa31") mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x2) (async) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/conf/lo/arp_notify\x00', 0x8000, 0x0) (async) write$auto_proc_sys_file_operations_proc_sysctl(r0, 0x0, 0x0) (async) mount$auto(0x0, &(0x7f0000000540)='}[,&*}\x00', &(0x7f0000000040)='nfsd\x00', 0x3, &(0x7f00000003c0)="3dd1fa31") (async) 1m13.846713645s ago: executing program 2 (id=1974): socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x7, 0xdf, 0xeb1, 0x401, 0x8000) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) clone$auto(0x21002, 0xfffffffffffffffb, 0xfffffffffffffffe, 0xfffffffffffffffd, 0xff) socket(0x23, 0x1, 0x400007ff) sendmsg$auto_NFSD_CMD_VERSION_SET(0xffffffffffffffff, 0x0, 0x24000001) setsockopt$auto(0x3, 0x0, 0x4, 0x0, 0x23) rt_sigprocmask$auto_SIG_SETMASK(0x2, &(0x7f00000002c0)={0x2}, &(0x7f0000000080)={0x9}, 0x8) getpid() r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000380)='/sys/devices/system/cpu/cpu1/hotplug/target\x00', 0x800, 0x0) read$auto(r0, 0x0, 0x7) writev$auto(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xffffffffffffffff}, 0x100000000001) r1 = socket$nl_generic(0x10, 0x3, 0x10) rseq$auto(0x0, 0x8000, 0x0, 0x6) mmap$auto(0x0, 0x400008, 0xdf, 0x100000009b72, 0x2, 0x8000) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$auto_NET_SHAPER_CMD_GROUP(0xffffffffffffffff, 0x0, 0x14) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x2a742, 0x0) mmap$auto(0x0, 0x10000, 0xde, 0x11, r2, 0x28000) madvise$auto(0x0, 0x8, 0x8001) madvise$auto(0x0, 0xffffffffffff0005, 0x17) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(r1, 0x8, 0x0) r3 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv6/conf/virt_wifi0/router_solicitations\x00', 0x101202, 0x0) r4 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv6/conf/all/disable_policy\x00', 0x202, 0x0) sendfile$auto(r4, r3, 0x0, 0x48) 58.517455262s ago: executing program 34 (id=1974): socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x7, 0xdf, 0xeb1, 0x401, 0x8000) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) clone$auto(0x21002, 0xfffffffffffffffb, 0xfffffffffffffffe, 0xfffffffffffffffd, 0xff) socket(0x23, 0x1, 0x400007ff) sendmsg$auto_NFSD_CMD_VERSION_SET(0xffffffffffffffff, 0x0, 0x24000001) setsockopt$auto(0x3, 0x0, 0x4, 0x0, 0x23) rt_sigprocmask$auto_SIG_SETMASK(0x2, &(0x7f00000002c0)={0x2}, &(0x7f0000000080)={0x9}, 0x8) getpid() r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000380)='/sys/devices/system/cpu/cpu1/hotplug/target\x00', 0x800, 0x0) read$auto(r0, 0x0, 0x7) writev$auto(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xffffffffffffffff}, 0x100000000001) r1 = socket$nl_generic(0x10, 0x3, 0x10) rseq$auto(0x0, 0x8000, 0x0, 0x6) mmap$auto(0x0, 0x400008, 0xdf, 0x100000009b72, 0x2, 0x8000) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$auto_NET_SHAPER_CMD_GROUP(0xffffffffffffffff, 0x0, 0x14) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x2a742, 0x0) mmap$auto(0x0, 0x10000, 0xde, 0x11, r2, 0x28000) madvise$auto(0x0, 0x8, 0x8001) madvise$auto(0x0, 0xffffffffffff0005, 0x17) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(r1, 0x8, 0x0) r3 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv6/conf/virt_wifi0/router_solicitations\x00', 0x101202, 0x0) r4 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv6/conf/all/disable_policy\x00', 0x202, 0x0) sendfile$auto(r4, r3, 0x0, 0x48) 54.214869071s ago: executing program 0 (id=2097): r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000001c0)='ns/time\x00') lseek$auto(r0, 0x8000000000000000, 0x2) ioperm$auto(0x6, 0x3, 0x148) r1 = socket(0x18, 0x5, 0x2) connect$auto(r1, &(0x7f00000000c0)=@can, 0x3) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xa80, 0x0) ioctl$auto_SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, &(0x7f00000001c0)) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) remap_file_pages$auto(0x5, 0x1000, 0x0, 0x8, 0x10007) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0xc) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000ac0)='/proc/irq/default_smp_affinity\x00', 0x2, 0x0) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) socket(0x11, 0x3, 0x4007) mmap$auto(0x2, 0x6, 0xe0, 0xffffffff, 0x405, 0x3) sysfs$auto(0x2, 0x100000000000030, 0x0) r3 = fsopen$auto(0x0, 0x1) fsconfig$auto(r3, 0x8, 0x0, 0x0, 0x0) mmap$auto(0xfffffffffffffffd, 0x9, 0xdf, 0x1c, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x80000000000000a, 0x2, 0x0) socket(0xa, 0x801, 0x84) bind$auto(0x3, &(0x7f0000000040)=@qipcrtr={0x2a, 0x1}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x14}}, 0x58) mmap$auto(0x35a9, 0xffffffffffffff1b, 0x7, 0x13, 0xffffffffffffffff, 0x7fffffff) close_range$auto(0x2, 0x8, 0xfffffffc) io_uring_setup$auto(0x3ff, 0x0) 54.018870338s ago: executing program 0 (id=2099): setresuid$auto(0x8, 0x8, 0x0) r0 = setfsuid$auto(0xee00) setreuid$auto(r0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_net_shaper(&(0x7f0000000540), r1) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'netdevsim0\x00'}) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/net/rt_acct\x00', 0x840, 0x0) lseek$auto(0x3, 0x7fffffffffffffff, 0x1) fsconfig$auto(r1, 0x2, &(0x7f0000000180)='\x00', &(0x7f0000000580)="10ab6b39a25e5d9c4947936e05c1ebf9895356b0a5fc915241b26bebe1bf3648ecb6260c4d40bcaaf9620450e0f236d9cf2e9bfa15663032904f14a0bfebeb6f41d8f77bd0bca982", 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) syz_genetlink_get_family_id$auto_tipcv2(&(0x7f000000c180), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) pipe2$auto(&(0x7f0000000140)=0x2, 0x800) read$auto(0x4, 0x0, 0x80) syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000080), r1) sendmsg$auto_TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, 0x0, 0x4) msync$auto(0x1ffff000, 0x18000000000f4ff, 0x400000004) fsconfig$auto(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0x802, 0x0) waitid$auto_P_PGID(0x2, 0x0, 0x0, 0x3, &(0x7f0000000440)={{0x8, 0x6}, {0x8, 0xc5e}, 0x100000011, 0x3, 0x5, 0xf9, 0xfffffffffffffffc, 0x5, 0x6274, 0x9, 0x0, 0xb, 0x360, 0x439c, 0x9, 0x7}) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) close_range$auto(0x0, 0xfffffffffffff000, 0x0) bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0xa, 0xb8, 0x10, 0x4, 0x4, 0xffffffffffffffff, 0xa, "2af051b26b658a20d8dc6b36c83ce63f", 0x0, 0xffffffffffffffff, 0x5, 0x7, 0x7, 0x6}, 0xf) bpf$auto(0x1a, &(0x7f0000000380)=@link_create={@prog_fd, @target_ifindex=r3, 0x3, 0x81, @uprobe_multi={0x3, 0x1ff, 0x3d7e, 0x0, 0x1, 0x4}}, 0x96) 53.229636376s ago: executing program 0 (id=2105): mmap$auto(0x6000, 0x7d, 0x4000000000df, 0xeb1, 0xffffffffffffffff, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r0, 0x0, 0x20) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3) rt_sigpending$auto(0x0, 0x7ffffffff000) r2 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/015/001\x00', 0xa901, 0x0) ioctl$auto(0x4000000000000c8, 0x400454c8, 0x6f) ioctl$auto(r2, 0x5522, 0xf15) socket(0xa, 0x2, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) socket(0xa, 0x5, 0x0) openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000400)='/dev/mtd0\x00', 0x20002, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) close_range$auto(0x2, 0xffffffffffffffff, 0x0) open(0x0, 0x22240, 0x1d7) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$auto(0x3, 0x80106f53, r3) 53.065850229s ago: executing program 0 (id=2107): openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/fb0\x00', 0x20401, 0x0) prctl$auto_SECCOMP_MODE_STRICT(0xf, 0x1, 0x0, 0x9, 0x2) statmount$auto(0x0, &(0x7f0000000180)={0x9, 0x1, 0x6, 0x1, 0x89, 0x7181, 0x3ffde, 0x4, 0x10, 0x9, 0x6, 0x80003, 0x4, 0x11ffffffffffd, 0x85, 0xfffffffffffffffb, 0x9, 0x50007, 0x2, 0xffffffffffffffff, 0x0, 0x80000001, 0x1, 0x202, 0x9, 0x8000, 0x0, 0x0, 0x2, 0x0, 0x0, [0x1, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x3, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x400000004, 0x9, 0x2000000800000000, 0x3, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x3, 0x4, 0x6, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x800000009, 0x0, 0x0, 0x0, 0x6, 0x0, 0x1, 0x0, 0xfffffffffffffffd, 0xfffffffffffffffc, 0x2000000]}, 0x1fe, 0xd) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) r0 = openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/ieee80211/phy1/aql_txq_limit\x00', 0x822, 0x0) bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x2, 0x4, 0x3, 0x2, 0x8, 0x3, 0xe3, 0x400000000a, 0x200000003}, 0x6f1) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram5\x00', 0x14fa02, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0x400000000e31, 0xffffffffffffffff, 0x0) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x0, 0x0) pread64$auto(r2, 0x0, 0xd, 0x6e9) getrandom$auto(0x0, 0x6000000, 0x3) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84L\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xff\a\x00\x00\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x19, 0x4, 0x4, 0x880b, 0x8, 0xd, 0x66b, 0x4, 0x7ff}, 0x6f4) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXPWRBN:00/input/input0/id/vendor\x00', 0x2000, 0x0) read$auto(r3, 0x0, 0x20) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000180), r5) sendmsg$auto_TIPC_NL_MEDIA_GET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000200)={&(0x7f0000001cc0)=ANY=[@ANYBLOB="000000d6b8978ca5297b656caf16b9e4e213c527a000fcf1f6ad36438f532148f7e5", @ANYRES16=r6, @ANYBLOB="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"], 0x270}, 0x1, 0x0, 0x0, 0x20000090}, 0x8810) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) close_range$auto(0x2, 0x8, 0x0) write$auto(r4, &(0x7f0000000100)='TIPCv2\x00', 0x5) socket$nl_generic(0x10, 0x3, 0x10) ioctl$auto_SOUND_MIXER_INFO2(r0, 0x805c4d65, &(0x7f0000001a40)="3c5957edefa6bf7830064a0c4c94742c4c6a58e8116762c2bf4c6f4898071ac723c9e6485a88cadd7027e1dc9ab9f6963bc8cf30f3a64c7f6e4d133c56b8ad4deebbbe5e36b563dff54c3b96badeb4ffdf32f68d6c518a22ab7cda406313141f4fb195a4282e03e4b4cd8a30df4f4672799f47e13787129c4fca8a1a56ec044926b1105b52ea6f48a72f4c0990bd0007c4fb31c2d3760617fcfe5f45ab50f7e9ee3b1b3d1ff4d6e6ae6bdccadc768cda5f664695f3accccab2f3c54591c1e7f9e8fe54807634b16120f60b8ab1b3b6") socket(0x2, 0x3, 0xbf) futex$auto(0x0, 0x6, 0x47, 0x0, 0x0, 0x0) setsockopt$auto(0x3, 0x0, 0x12, 0x0, 0x82d7) read$auto(0x3, 0x0, 0x80) connect$auto(0x3, &(0x7f00000000c0), 0x55) 51.953003507s ago: executing program 0 (id=2113): r0 = socket(0xa, 0x5, 0x0) (async, rerun: 32) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) (async, rerun: 32) r1 = socket(0xa, 0x801, 0x84) (async) write$auto(0x3, 0x0, 0xfffffdef) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) (async) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) getsockopt$auto(r1, 0x84, 0x7b, 0x0, &(0x7f0000000000)=0x9000c) (async) madvise$auto(0x0, 0xffffffffffff0001, 0x15) (async) pwrite64$auto(0xffffffffffffffff, 0x0, 0x52, 0x5231) (async) setsockopt$auto(r0, 0x0, 0x24, 0x0, 0x9) (async, rerun: 32) mmap$auto(0xffff7ffffffffffe, 0x400006, 0x2baa, 0x9b7b, r0, 0x1) (async, rerun: 32) r2 = socket(0xa, 0x3, 0x3c) (async) ioctl$auto_USBDEVFS_SUBMITURB32(0xffffffffffffffff, 0x802c550a, &(0x7f0000000180)={0x3, 0x8, 0x1, 0x40, 0x581, 0x0, 0x56ff, 0x1000, 0xffffffff, 0x4, 0x1, 0x2, [{0x0, 0x4, 0x9}, {0x5, 0x8000, 0x4}]}) (async) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55) write$auto(r2, &(0x7f0000000080)='+&\xc9I\xaar\x1c\xbb\xde\ah\x15,\xeb|\x85\xe8\x97Z\xc30\xae}\xa1\x17K(\x80]]\x8d\xb5\xeb-\x9d\xc1\xceU\xbb_\xcf\xe8#U\xd0_|\x15f\x92\xaa\x9f\xa0l}7z#u\xf6\xd1\xe1\x8d\x05=w\xf1\xb9K\xf4\\\a\xdf\x87\xbb\x03d6\xe1\x14\xb1|\x98\x82$\xf3\xb2\xcf\xb7\x7f\xf8f*/\xc2\x82\x8c2\x8d^\x10\xc6\x1cs', 0x857) msync$auto(0x74c0, 0x6, 0x6) (async, rerun: 64) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) (async, rerun: 64) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) r3 = socket(0xa, 0x2, 0x88) setsockopt$auto(r3, 0x11, 0xa, 0x0, 0x8) (async) ioctl$auto(r0, 0xc9, 0x9) (async) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) (async) unshare$auto(0x40000080) (async, rerun: 32) openat$auto_kmsg_fops_printk(0xffffffffffffff9c, &(0x7f0000000000), 0x40001, 0x0) (async, rerun: 32) openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/usb/usbmon/9t\x00', 0x0, 0x0) newfstatat$auto(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x9, 0x88, 0xfffffffffffffffd, 0x1, 0xee01, 0xffffffffffffffff, 0x0, 0x470, 0x8, 0x36, 0xfffffffffffffff1, 0x4, 0x8, 0x6, 0xe3b, 0x3928, 0x80000000}, 0xbbb3) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_macsec(&(0x7f0000001840), r4) r5 = socket(0x2, 0x2, 0x1) sendto$auto(r5, 0x0, 0xb, 0x800c, &(0x7f0000000000)=@isdn={0x22, 0x4, 0x3, 0x0, 0x2}, 0x1) 50.583128636s ago: executing program 0 (id=2123): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_METER_CMD_SET(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4080}, 0x24040044) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x100000a3d9) openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f00000003c0), 0x1541, 0x0) r1 = socket(0x2, 0x1, 0x106) setsockopt$auto(r1, 0x6, 0x17, &(0x7f0000000280)='lp\x00h\x85M\xdf\xdc\x83\x8a\xa7\xe4]U(\x01\t=\x1e\x00\x00', 0x4) close_range$auto(0x2, 0x8, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0x400005, 0xe2, 0x9b72, 0x2, 0x8000) r2 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x89b0, &(0x7f0000000080)={'bond0\x00'}) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @loopback}, 0x54) write$auto(0xca, &(0x7f00000001c0)='\x04\x13\xac\x04\x00\x00\x00\x00\x00\x00\x00\x01\n\xdc\x10\x00\x00\xef\xab\xe1ME:\xab \x87|\xe0Z\x1b\x9eZ\xa8\xff\x92+\xc9\x9fs\xbf\xd8\f\x00\x00\x00\xa5V\b\xf1Ne\xc6l\xd0\xdd7\x96gf\xb2\xa0\xf2cN\x8b\x95\xeb\xf3(\x9eM-\xdc\x84N\xc3\tts%\xe9\xbf<\xf1\xdav\xe0n\x04\xb33\x97\xd5\xb4\x02\x94B\xbb\x995\x1e\xf7@\xd8\xca\x8d\a0 \xfa\x87V\xeb1\xe4M%\xdd\xfd\xf6\x8d\xb4\xc7\x9b\x9d\xf5\xd9^\xcdL@\x0f\xd4\x15F,\xc1\xd1i\xa4f/{\xfa\xd5\n\xe1\x95l[\x91\xbfX\xea2\x1b\x8a\x85\t\x00\x05m\x1e\x9b\xca\xfb\x81\x9d{\x19S\xff\xe4\xd2k\x1b/wJ&\x03+{\x84R\xa8\x92\xad\xec\x1b\xb1\xe9\xa7XUo\x93\xd5\xfb\x94\xc4\xdf\x8e\xdd\x97\xfc\x00\x13\xd6\x80g\x7fR;\x88\xf7bm\x8f\xb5\x89\x1a\xb63\x98\xaa\xcc\xbf\x94\xbf#u\xb9', 0x2b) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video41\x00', 0xe0a80, 0x0) ioctl$auto(r4, 0x8008563f, r4) r5 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000000), r3) sendmsg$auto_NFSD_CMD_THREADS_GET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r5, 0x1, 0x70bd31, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x400c801}, 0x4000094) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/module/8250/parameters/share_irqs\x00', 0x2062, 0x0) write$auto(r6, &(0x7f00000001c0)='1\x00\\\xa0\x04|\x03\xfa\b\x1c\xc7k\x00\x00', 0x81) bind$auto(0x3, &(0x7f0000000000)=@generic={0x10, "a500acb75c9cedd1b5e9a0d76293"}, 0x68) write$auto(0x3, 0x0, 0xfdef) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ioam6(&(0x7f0000000040), 0xffffffffffffffff) 50.562755236s ago: executing program 6 (id=2124): r0 = openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000000000), 0x101400, 0x0) ioctl$auto_USB_RAW_IOCTL_INIT(r0, 0x41015500, &(0x7f0000000080)={"44cb9bf73ee4f7d17375d0a2c121fc097204973ce5c568f45cf3a37f00073e797cd85f52c60300259f0f496b584d7480859a383753a492b262cd2e665fea378855d02010d0b1cf7092368788828277decc11b6176237f43ce7d5384aba1e1eee4dd675ba496344c135ba3c9b8cd74d91b5821876925052d05ddd50973f5a648a", "78a1fee6276146f257fe93c9fa89fecfac240fa640931102b4c630bc5601fb47fa67124586bd24165be85c89ed2955a83b4f394d6e6c57281715d54967ac33b5071d2eac8ab7e6921314c5452670cf4223d14a933119c64d9d923ef32ce561acad10f49938168f40e3b68dcaf3e5f074ce961d6a33c481d540e5282df56757d5", 0x5}) 50.426520131s ago: executing program 6 (id=2125): mmap$auto(0x6000, 0x7d, 0x4000000000df, 0xeb1, 0xffffffffffffffff, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r0, 0x0, 0x20) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3) rt_sigpending$auto(0x0, 0x7ffffffff000) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/015/001\x00', 0xa901, 0x0) socket(0xa, 0x2, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) socket(0xa, 0x5, 0x0) openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000400)='/dev/mtd0\x00', 0x20002, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) close_range$auto(0x2, 0xffffffffffffffff, 0x0) open(0x0, 0x22240, 0x1d7) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$auto(0x3, 0x80106f53, r2) 50.203056363s ago: executing program 6 (id=2128): r0 = openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000000000), 0x101400, 0x0) socket(0x25, 0x1, 0xb86) r1 = openat$auto_snapshot_fops_user(0xffffffffffffff9c, 0x0, 0x94fd6037e77e475, 0x0) ioctl$auto_SNAPSHOT_ALLOC_SWAP_PAGE(r1, 0x80083314, 0x0) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, 0x0, 0xc0000, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x6, 0x8000) prctl$auto(0x43, 0x17, 0x0, 0x0, 0x0) prctl$auto(0x43, 0x0, 0x0, 0x0, 0x0) ioctl$auto_USB_RAW_IOCTL_INIT(r0, 0x41015500, &(0x7f0000000080)={"44cb9bf73ee4f6d17375d0a2c121fc097204973ce5c568f45c3e797cd85f52c60300259f0f496b584d7480859a383753a40000000000000000378855d02010d0b1cf7092368788828277decc11b6176237f43ce7d5384aba1e1eee4dd675ba496344c135ba3c9b8cd74d91b5821876925052d05ddd50973f5a648a00", "78a1fee6276146f257fe93c9fa89fecfac240fa640931102b4c630bc5601fb47fa67124586bd24165be85c89ed2955a83b4f394d6e6c57281715d54967ac33b5071d2eac8ab7e6921314c5452670cf4223d14a933119c64d9d923ef32ce561acad10f49938168f40e3b68dcaf3e5f074ce961d6a33c481d540e5282df56757d5", 0x5}) 50.068356763s ago: executing program 6 (id=2129): r0 = openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000000000), 0x101400, 0x0) ioctl$auto_USB_RAW_IOCTL_INIT(r0, 0x41015500, &(0x7f0000000080)={"44cb9bf73ee4f7d17375d0a2c121fc097204973ce5c568f45cf3a37f00073e797cd85f52c60300259f0f496b584d7480859a383753a492b262cd2e665fea378855d02010d0b1cf7092368788828277decc11b6176237f43ce7d5384aba1e1eee4dd675ba496344c135ba3c9b8cd74d91b5821876925052d05ddd50973f5a648a", "78a1fee6276146f257fe93c9fa89fecfac240fa640931102b4c630bc5601fb47fa67124586bd24165be85c89ed2955a83b4f394d6e6c57281715d54967ac33b5071d2eac8ab7e6921314c5452670cf4223d14a933119c64d9d923ef32ce561acad10f49938168f40e3b68dcaf3e5f074ce961d6a33c481d540e5282df56757d5", 0x5}) (fail_nth: 3) 49.618429306s ago: executing program 6 (id=2131): get_robust_list$auto(0x0, &(0x7f0000000200)=&(0x7f00000001c0)={{}, 0x8, &(0x7f0000000180)={&(0x7f0000000140)}}, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/midiC2D1\x00', 0x1, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup/pids.peak\x00', 0x8000, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000e3d9) mmap$auto(0x0, 0x9644, 0xdf, 0x9b72, 0x2, 0x2d4a29c0) pivot_root$auto(0x0, 0x0) kexec_load$auto(0x9, 0x0, 0x0, 0x1003e0000) mmap$auto(0x4, 0x2020007, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0x2000040080000000, 0xe) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/system/cpu/cpu1/online\x00', 0x62, 0x0) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x5, 0x8000) close_range$auto(0x2, 0xa, 0x0) socket(0x2, 0x1, 0x106) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/module/kvm/parameters/nx_huge_pages\x00', 0x80302, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/nbd7/queue/max_discard_segments\x00', 0x80000, 0x0) read$auto(r2, 0x0, 0x9) write$auto(0x3, 0x0, 0xfdef) write$auto(r1, &(0x7f00000002c0)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef`\xd8\x9c\xf7?:\x1a\xc62\x911e\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\b};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xff\x7f\xd0UV\x11\xcb\xdd\x81\xbe\xde\f/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7\x00\x85Z\x06?\x12\x98\x0f)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1;\xe4pd$\xd7\x1b\v\x82\r\f\xd0Hq\xd9\r\x88#\x89\x8d\xcd\x1e\x87N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8HR+\a\xb7R\t\n+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb\xc8^\xa4\xe2\x05\x91|\x123\xc3:\xfd\xee\x04a\xc8\x12\xce\xa2\x12\xcb\x8c\x87f\xebGQ\xe9\x96\xd5E\x13a\xb7\x057<&\xe0\x94\xa7\xfb\x9d;\xfa\xb1\x1b4a,\'\xb2Ym\xe1:\xbf\x8cs\x06\xa3u\x8d!\n\x80-\x9a\xbb;\xf4\xf3\xe1\x97\xfc8\xff\xa7\\\x8b\xf9\x95\x10$\xef\x1a #b\xfb\xfe\xe9\x06fK0\xdd\x84T,\xfa\xb5\x00\x83d\xbba\xd7\n\x92l\xdfAN\x9d\xcb\x96\xc7\xe8\xe6\x8bC\xeb\xc7EZ\xc8\x1a\x81nf\tZ-sZ\x13n\xec\xa9\xbf\xd0$\xb9\xd8\x00\x00\x00\x00\x00\x00\x00', 0xb) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) mmap$auto(0x7f, 0x82020009, 0x3, 0xeb1, 0xffffffffffffffff, 0xfff) connect$auto(0x3, 0x0, 0x10) unshare$auto(0x40000080) r3 = openat$auto_kmsg_fops_printk(0xffffffffffffff9c, &(0x7f0000000100), 0x80840, 0x0) lseek$auto(r1, 0x0, 0x2) readv$auto(r3, &(0x7f0000000a80)={0x0, 0x5b54}, 0x1) getsockopt$auto(0xffffffffffffffff, 0x1, 0x3, 0x0, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x180b01, 0x0) msgctl$auto_MSG_STAT_ANY(0x3, 0xd, &(0x7f00000003c0)={{0x7fff, 0xee00, 0xffffffffffffffff, 0xffdf, 0xa8, 0x80, 0x9}, 0x0, &(0x7f0000000380)=0x2, 0x5, 0x1, 0x3, 0x0, 0x8, 0x5, 0xfffc, 0x8c2, @inferred=0xffffffffffffffff, @raw=0x1}) 48.8572248s ago: executing program 5 (id=2135): unshare$auto(0x40000080) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(0xffffffffffffffff, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x182b02, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) madvise$auto(0x0, 0x240007, 0x19) ioctl$auto_TCFLSH2(r0, 0x540b, &(0x7f0000000280)="e66f1612ed9e5f18851108e312066b1a162c3c2ed83616414fafb47fcb8ac1eb1cd47838eb088ca2b9e392811d1219c7d31dc73f36be66856d8db0f8da2da66a4c2b88f66257e3cd093a49aa7052526e26494f177d232ae741ff32b642c8ac04916db84a14b8a1da71193c89e72271975b936edd740f301cf21bb730b28605201b32f1885d8258bd214b52e01f466ffb4391a7d3") madvise$auto(0x0, 0x2003f2, 0x15) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={0x0}}, 0x24048084) mmap$auto(0x0, 0x3, 0xdf, 0xeb1, 0x403, 0x8000) capset$auto(&(0x7f0000000180)={0x19980330}, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) ioctl$auto(r1, 0x4b44, 0x7) socket(0x2, 0x5, 0x0) socket(0xa, 0x5, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) mincore$auto(0x76, 0x8004, 0x0) setsockopt$auto(0x3, 0x10000000084, 0x72, 0x0, 0xc) socket(0x1e, 0x80000, 0x9) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r2 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000240)='/dev/usbmon32\x00', 0x80440, 0x0) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) r4 = socket(0x2, 0x1, 0x0) bpf$auto_BPF_OBJ_GET_INFO_BY_FD(0xf, &(0x7f00000002c0)=@test={r4, 0x0, 0x856, 0x189, 0x8, 0x7fff, 0x7fff, 0x10000, 0xc91a, 0x7, 0x5, 0x3, 0x3, 0x3, 0x6}, 0x1) preadv2$auto(r3, &(0x7f0000000080)={0x0, 0x80000000}, 0x6, 0xffffffffffffffff, 0x4, 0x2e) ioctl$auto_MON_IOCQ_RING_SIZE(r2, 0x9205, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000140)='/dev/bus/usb/032/001\x00', 0x8202, 0x0) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f0000001080)=""/98, 0x62) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) 48.489064948s ago: executing program 6 (id=2136): socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x8000000000002, 0x2000c, 0xdf, 0xe31, 0x40000000000a5, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) setsockopt$auto(0x3, 0x1, 0x4c, 0x0, 0x9) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) close_range$auto(0x2, 0x8, 0x0) rseq$auto(&(0x7f00000001c0)={0xe, 0xfffffff7, 0x1, 0x9, 0xffffffff, 0x9}, 0x8000, 0x0, 0x6) r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r0, &(0x7f0000000200)={0x0, 0x7}, 0x3) r1 = landlock_create_ruleset$auto(&(0x7f0000000000)={0x6, 0x3, 0x3}, 0x18, 0x0) bpf$auto(0x0, &(0x7f00000003c0)=@task_fd_query={0x5, r1, 0x454f, 0xfff, 0x0, 0x0, r0, 0x80000000}, 0x6d4) flock$auto(r0, 0xc6) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x80000002, 0x1d, 0x3000, 0xfffffff8, 0x7, 0x400a, 0xffffffffffffffff, [], {0x6, 0x6, 0x6, 0x29c, 0x1, 0x7f, 0x0, 0x6, 0x1}, {0x10100, 0x1, 0x52, 0x85, 0x2, 0x1a7b870a, 0x76c5, 0x8, 0x100000000}}) socket(0xa, 0x1, 0x7) poll$auto(&(0x7f0000000040)={0x3, 0x1, 0x5}, 0x5, 0x80000000) close_range$auto(0x2, 0x8, 0x0) openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) openat$auto_vga_arb_device_fops_vgaarb(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r2 = open(0x0, 0x4242, 0x59) flock$auto(r2, 0x6) r3 = open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x84) bpf$auto(0x2, &(0x7f00000001c0)=@raw_tracepoint={0x5, r3, 0x0, 0x3}, 0xc) ioctl$auto_RTC_UIE_ON(r3, 0x7003, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x8, 0x1ff, 0x7c9, 0x25, 0x4909b6f5, 0x1ffe0, 0x7, 0x3, 0x20000009, 0x9, 0x3, 0x4, 0x1, 0x68d, 0x9, 0x8, 0x10003, 0x80, 0x3, 0x0, 0xa, 0x22000, 0x200, 0xffffff28, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, [0x8000000000000000, 0x101, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffeffffffffe, 0xffffffffffffffff, 0x6, 0xfffffffffffffffc, 0x0, 0x0, 0x80000, 0x0, 0xffff, 0x10, 0x0, 0x8, 0x10000, 0x0, 0x0, 0x90, 0x6, 0xbdcc, 0x0, 0xfffffffffffffffe]}, 0x1fe, 0x9) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x20000008}, 0x40000) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r4 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r4, &(0x7f0000000200)={{0x0, 0x1892, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f0000000140), 0xb, 0xa505}, 0x800}, 0x7, 0x4008) 47.888514909s ago: executing program 5 (id=2140): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) write$auto(0xffffffffffffffff, &(0x7f0000000180)='7k\x00\x00\x00\x00X\xb9\x0e\x11\xfb\x00\x00\x00\x00&!\x8f-\xfb\xea=\xc0\\\xec\xe7D\xe5V\xf1b\xa0\x9a\xa1\x88\xb4\x96\xf5\\\xad4\t\xca\x03\xe4\x15\v]\x00'/58, 0x82) close_range$auto(0x2, 0x8, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x2, 0x0) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYRESOCT, @ANYRES32=r1, @ANYRES16=r0, @ANYRES32=r1, @ANYBLOB="0a00050000000000000000000a00010000f10e114cf4ba000000000000000a00010000000000000000000600070001000000060007000600"], 0x68}, 0x1, 0x0, 0x0, 0x44014}, 0x40090) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x2, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) mmap$auto(0x3, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r2 = socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x1e, 0x4, 0x0) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/udplite6\x00', 0x101000, 0x0) read$auto_proc_reg_file_ops_compat_inode(r3, &(0x7f0000000180)=""/132, 0x84) ioctl$auto_TIOCSETD2(r2, 0x5423, &(0x7f00000004c0)="94610220f69dafc6c37f895c11577eb71bea7eb518e62af073ed9ce6337af476435782cef0d27e50805816327c4878f8ab69023bab506e15e05bdc70985d55e650dabf860fb4108662280322b0603a05d8b550f3bbbd5a7efe182ab5c2c46f6620654fbd6798d8b88603429158980474105247495799810017878bf5eca5ae8b448e95374d654e81a0dae2a3520dbb2213c2354acffb6fd1c6f2c00f0e5f4c0653351c3441336f47a4017a898aa7d29d471345d5d2441e6c21483f44d9e726e7e5bed122412127f1ddb27bebeed72e66accfdff8c00d5c5b8e3e55ffc6bee5e3ecd4d982421300c646733de5b82227cfac88c2ce15514462d2d3a25fce59029bbfef95eaaffbbca3afe953f652d6adcd81eeb2815085b1748ffd4882705a92967a99534039d47b16345ab209288363974f7afeea07feddd14a7f0e9c46b7b5787babb6d25623649506713a2726ca7818f77f9726262829a822266ee1b2f88472315bbdb06d58c824bb76219e1520fbb27a3af4903ea9d364de25fc5439c056bbf404f2a16e81fed49879cb181e662d31b46d9142418783ab9389db0e89ab6564bf5203c45b7eaa2ee77305b460b1fab954ca479f4cb901d46a29c3fe61681a391aaa6c9caac3eeabfa17af8fdb07721fd6a00c65796e26fcbdfbc8f01b8ecd227cf7888dbef13469ce8785599172cc77940e678e19ec79ba1ef7d2c4cdd24f41b67da7cf8bca45ffa7b5c6182f8e8b1da63a3e64b3080f2ad80423e6382c0c3093bd6f0e00cc0959b32fe28f9b3bf0a9344de17d674972e522bb00b4f0b39b61e79b4b33a742c4fdd247a03f1891729462c1250abb1387cb8eb084d29c3aad0c7afa9f8ec3d5eeed27ab837f3831afa05daf10d69797483c11585d55180a963f0afc08e462bcf953bcf558789cb2b80125f6409ef2dc97df3074ea6376734d7d0b73f3a0f6510de5d396ab8c6fc4b13d190f46bf81b5fca8461129c878cf181a1ea387ae37257187d7acba1c9766dd2a8b61f3c3362bc40632860d9c348992b6ad6cd859cac7f0c6d79f9e1afdd7b0e1e5b14158882dc3fb5c8f9794b8dd781fadb042a8c189331dbc99805d6b9f6f9755fb537913a9376748e7fa9f00567570db785d7f85daf9ecdd54f012bd6692b9ff73b52f1c5d289797082fa84e801edd7e0dd02391680fb85960a0b9d7188248eaa9696184eca597d075a66e991a2d3183f7acd50678b736b4e1a7d6a94a082ffb2c7bf013754a7dea702ef4dacbc7293ab0f04aab13ae7c96c46185d97ca1e6ba09e70fe33f8e43d3ca919e30522a34addbc897c256729e506a9b102eee8c45fda39a1ac820f92f0c42785e84f336e298d7c0b3184ad9b81f68af3ee8748293551233c5570b894fadd401f4dced21d12f7d03624535ff5c7ffd9e2b0262bb47233eae19e14d728350b2ae28c6633b7033e9759cd6335caa6f6243f846b296cceaf4508f62c25d9e467f98e2c686d98a41c198fe3d0254327ff777d6a672754c11e8ddd6eeabd7b7e7a6440ca18b890fb08800742151c7f71f1d61c01a1af8b2ebe59be90f0a222eaf2c246d8b265938c69179f42bcaeb4d4c978dd6fd2538d46cc25b5fde16a28f3bd8c8df03b67a9bec6a3b7cbc1ccefdadcc00c92fcb75fc771b2d58931df8d0379678513975dd8982053c8f52a73c608a730aaa30a2e78cf5d2e684aa4921004ed53d384bdcfb063f9c325defb70d21db8fc1b19034949392a9ae584b6086eb107cbdc8487fb38d905df69582505e4645054d9ea795ef47c86f1cf53fdd142fd06a61149f4fe0c6bb17dfa56bee33461afb3f1ded77a0558079a9f752d2dba2bc982abcc85fcdb57071a287b5d349344a019c2f49a3b064eb3585ce29010886b88c93ac5f392823b8e941a89edf72ae5786c142e3526c6ec1f2e089a2e44c2387b6b21a9e9339a6632e8e5c734328dfc830898f0dfbbdae331a0a8d9e6231333547368d2c7395144cc942e03ad80280e32cea8546966f7a0ea29a57d9e5b46606dc754e4a4da8f309473fbfc0a3d65230d8505069bbbdc833eb66c17bf73e0dd531e1a4c55ed46b83a1a8edfc6180d5e2f6abe682540bf633bb8c46d33a35f89209839b7c585ece4482f4596bf9dd1daf71029644ea666d97776cdad510943211d6a47df0d1c99c229107de4bb17b659a6c7b8f022b95dd695532a7c5641e3f88935ac311235a392d402dc1422c8afb0a6cd713304bf222c7a337fa923e23f7094cf6781d6a75dfe2ee97cb04295d888457b7960e1b804c61670322f61162c26105af87a51fc2a058378fb7bcfe8fbb85caaff8cd3560239ab3bef01fd0e26f5f60135016e686ff70cb18488ff295b02bac1ddd00a2bfa7fc29a0308c118fea2727388b10cfa520030f17bca8a0dcd384679c9068430094d9a5314fc9e3d2867e5446dc77c2f48459ace0928c67458ba46307dfc9fd32412dde0186039ff1bbadaad5af9cfdeff8616e384962a238e2c592d2b267f154d6ea72da887764ca15b428c23b0b2273e873d307be8112711fa51b81d520d85ebf6f0916b1286cb1ca3ad7a4c66cfd31d57a9cb3215fd385face4a44eaf8a5b7ece2db987921c8189b77c8351f93e4d88280be39ba4bf18468fc56ea9d0e0cb13e4ffee4d6a918592ef2e56b56e6efe13b64400c6e1129587dbda0239cff4574421a012fe18998a04c54b08777579aead0953d3b73c468042c70fb905cf3c64b7134f59a424998794d3cbe587d1629c578903dd23e0ffec0e671e86a1cdd7d3e6712e398b9a0f5c4638a36813b24a2e964c36702a493f1c29ab608e453d83570289e64397ff5bd9a7ad2dbf133525f117e0b6fbf3b5e0520d4e798301b450c77fe9afcc6112e17083ebe3ae01d0010e55e1e29319a2b4db6fbee04792cf7c9eaa7d4da9582b6bf1f475087c04633f443e16017f61213a84294c0e6bd271a77f4649006e2865c94cc170452e6c1425774fb6fd6350472ffe6c80c795f7a0af95270faec980ecbdf23963fa1d3db6fd8a8d4cf56dd2f87247df39b6d756e817bcc4b9196e8d2d33069e110186434c0597ea18247c2710e1493abb82bc4b7c24abdb174cc37cdb2e8600d786774adc769a62d60ccc19e6ca720fda4f4556798977527df9460c85072c022ec206f0f3ba01d969ea19a54b730b14a2e392f4f7084c6831781582175756021faca58fb3a5e34e1f4b6adc9728a6ec626efb8f1d611060da8aba04b4deef047fc202341ebeb2c7b0db1b86fb20bea8da55bca496000a4be035078fa7efdd3345034e0f0efec4d4454b56c21e9fb4bc4aa57668943663670c0619df9b10464ef3f96955a240a7056d2c9504528947691aad7044db3962d5e6d495fac683d159af1cfb56b9c7ee1c54301ab1a203cfec9b1c076f3b3cd9718dde508069c39efb7cb4034e26cb35046e744b847a6592a382b55025dda7745617d1bc1e43a26af0a74ed4a579b9bcc3d70ad8782bf37515c64630482ba78a7f62c45a26ab7c5d613e3104b3b567ad3da68ec0371f2a8f07ec20fbd6e54afe23897cd8324ed587c05fbb5b186e95a555cc153f51c8a7aa2d11c8b274cc185cf69d78ff9f661ebd8ab847f6dcf1a9c89974b7aeab0490ed4612f663c01be29523e5ea56b5864776f75c42796efec4965682506f50ceb40988a3d3587b8256015eca88d3461df84751d9f9b8bb8e855e441e0809dfcffd2d84c8770b1db679c080b5299db7e5c31d235cb8bf4055d98f44c879ee48bf91f38039f6afbac348725b69fd98461da40844e507107aae8f6aff82fd4f81bafdeceaf9d89674f5a6117e14dc9ca14db72712e8a111744b44e72b438b21f33e320eebc84d3675551ed0bc62a09bb5262e3cd91fd373e735a634d774c0a742a8f35b97180597ecdb623c5647051bed6a25b89019627447dc8d351657f593e913980043530bf6d74d1a70cc929f821a705ea871b389038eeb568b33035982e659e81e97da0d9e7056790c3692bab433a230930c1829f7577a1dcc0f0e0f9fa228915c19eaef3760673b3cd7dea7e276a814c6193559530c116594109a25556a6ec4e4a9c0d588d61caee628dec81cbeaeaef19d46cabb19dc6931716bd0a088d8a47bf789096d454060257f89c00996289cd5488377f5aeb9982cb796b0cfb6e5d25052ea6b7fb4a101e676f59cdcdaa2013ce0e4533e38c5acab7eaaa9d0ef3a952031b058f5ecadbe2ace0fe975e8871f8bbdf8c393e04d333b34fc8d523dc8e60ac7e52742bf240f27b2b5d551010647eed84b1b53beb800669ada829986530cc93b55698841ef40e35ce81413d79b8e98a78227a17090f9de57c76b07be0de5647ec7e3c13f3675d5edf75d803e62b7494cd8deb153e7f3a6a2b552e1d35e31388f3d13f0dca27841458be631ee77b051abc545f7a6060c90f8ed0df9bb2e4241d7e1e7ce1f147e6c318999c4cb892c4f9cf1c7a28a7fd5386ae07d63115f8bf51483ba9ad70c718d276bb28636c04f9bc83a02685c19e6b6a7dfe910d85a3215891bdbe387f4bae6e7407a06edbf2d243a4ca3170e49ff55f47f0f7cacc7cf960557ef70e4a2862d50983851c6b257c87cfa6fa94bc63d02e347fe32258a7a9fb5a4a87e6728bf8e953294c37fe1d12affdf0591e13e8f0eaabff5671bfef322e8b0e1905964c98e8b776733e74d7a1fb1ec66ddd396c67c36d80a1742199a7a50f4b8acf69f71b640f863202ddc4abe84523bdb06e56b4d5abeaea03921be4e615270cb8cb61459fdb7d1405bf916c141e1a15bcd69d78e994b1fcf457677f3a4a7cc2d34b086c923887f187a09c6c3f550f576a9759fa17f9b1c701eb3a7c419aa904808f37c1bdb15a4b11551e2980d3e7b0214f4d8709b270b64bec82c6986b76172df9746be855fb26fb8fd104b4ad26ed804fd98cb711ca5e465a293d6f50fd57933ad302824cc8bbe1b4bc95cecd013095d4de407992138c13a6b2e4f418657b4e9abebac8ca351846ab26fc3133daa4737ff45772556024ba9423224155b4eba32f3250604478cc0091d3bd4073bef1a55f60038392548567e7c7dbbd01ad2538b81b1947c105df29e61954873149898fa39cab6b2ce5aa0f913d702a3ab94eaff161d1df3200fafb6711086998cb63f739d2cbf247041579368c25216bb79f34b1e4d3476bd5ef75ad40f2f75dc594cbe3e8ede909e802d265f7e358be92224ad2f5b8da8dd1b4ad2c5fce4acf85be4200c9a2ed12e07781f468a71c5213f57a48d461dfc7158e9ec6f29c82eccbf0788ec283fab83496d8e0b3ee82d22a08dec8369ca451ad1716d91e230d8ccb25ff918e59b08a22fad0da740ede0976afa05cedb0b734bb77f817a06f67953feb3ded062837c75c429de9cd7e8deef21223be2e63cb79f5ce00ad6766c70c8724d043249197503b42997d8a3313bf6bcc3ccec2360d061870f08c634faa64fb42e19b884a4ec6a52837d18f15aed1b930fc1a9b86fe95791da82ca3ed6e1b93d86298e14b7dde8872baea993f9377b1d0f944d1ba8268bb428a51d88743e8d894d8a119a740c80c4a110f54e60243e895fdc2ff4dfd703ceadf9611df297c7b4291a186ca63c478d547c91146e471db3e89a445687d6a26e63712617dc53667d0cc18c1bdf691c40ae506462de7ffae9f3c80fb55bb81aabc37754cf244912a95a038c24e955518af02505560bdb6904bb437524b0a0ad5344fef04f4e1c6b998feede3f66327eb06637bdd38dadeac6ce5b159ee7d32ee58d16eee812cb4dc7262fd4ae67496") r4 = socket(0x1d, 0x2, 0x7) setsockopt$auto(0x3, 0x6b, 0x4, 0x0, 0x4) mmap$auto(0x0, 0x20006, 0x4000000000df, 0xeb1, 0x401, 0x80000008000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) bind$auto(0xffffffffffffffff, &(0x7f0000000040)=@llc={0x1a, 0x337, 0xc9, 0x1d, 0xff, 0x8, @local}, 0xbed) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0], 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x200000c4) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_GET_REG(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=ANY=[], 0x1ac}}, 0x40000) r5 = socket(0x2c, 0x1, 0x0) bind$auto(r5, &(0x7f0000000040)=@tipc=@name={0x1e, 0x2, 0x2, {{0x41}, 0xffffffff}}, 0x66) r6 = socket(0x10, 0x2, 0x0) r7 = openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000140), 0x8040, 0x0) ioctl$auto_dvb_demux_fops_dmxdev(r7, 0x7fffffffffffffff, 0x0) sendmmsg$auto(r6, &(0x7f0000000080)={{0x0, 0x8002, &(0x7f00000002c0)={0x0, 0xc4}, 0x2, 0x0, 0x6, 0x1}, 0x5}, 0x3, 0x8) 47.709342123s ago: executing program 5 (id=2142): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) listen$auto(0x3, 0x81) r2 = socket(0x29, 0xa, 0xb) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000140), 0x8f80, 0x0) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) mremap$auto(0x1ff000, 0x100005, 0x843, 0x3, 0x2) mremap$auto(0xfffff000, 0x4, 0x4, 0x7, 0x1001ff000) fsopen$auto(0x0, 0x1) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) prctl$auto(0x1000000003b, 0x1, 0x4, 0xd73, 0x7) madvise$auto(0x0, 0x2003f2, 0x15) syz_genetlink_get_family_id$auto_ethtool(0x0, r1) mmap$auto(0x0, 0x4, 0x4000000000df, 0x78, 0x4, 0x300000000000) fgetxattr$auto(r0, &(0x7f0000000280)='\\@--*\x86\\#]:+]\xc5\x00', &(0x7f00000002c0)="00040ab13436735bdfdd177fdb547254ec001fc6ed98b08be3209651636844de98fe5c37b3880828a6646f14f419a04f9de48cc60007", 0x0) r4 = socket(0x1d, 0x3, 0x1) r5 = getsockopt$auto(r4, 0x65, 0x6, 0xffffffffffffffff, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x182b02, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mknod$auto(&(0x7f00000003c0)='./file0\x00', 0x9, 0x9) mount$auto(&(0x7f0000000000)='ipvlan1\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='nfs\x00', 0x1, 0x0) r6 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000000080), r5) sendmsg$auto_CTRL_CMD_GETPOLICY(r1, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="040026bd7000fcdbdf250a000000060001000400000008000a00080000007e86960b48be3c195cd8a0761e072e5fe51bdd73829b6093ccf25312e339d826aae6e4d31dfc23d455456937aa26c517c6ebddfefd5aeb0ea85ae4d182e76a15bb7e45382f49002ed1a0a67f825542125d3e4a93160307a8b568b825995b685d97a30f87fcd2abd13bcdc79295b4e04857bf54232b058a0835a17a8a6d06604cc715189891ea07b2254787c815881276d23521"], 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x10) openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, 0x0, 0x40000, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'veth1_to_bridge\x00'}) 46.850879625s ago: executing program 5 (id=2146): mmap$auto(0x6000, 0x7d, 0x4000000000df, 0xeb1, 0xffffffffffffffff, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r0, 0x0, 0x20) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3) rt_sigpending$auto(0x0, 0x7ffffffff000) socket(0xa, 0x2, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) socket(0xa, 0x5, 0x0) openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000400)='/dev/mtd0\x00', 0x20002, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) close_range$auto(0x2, 0xffffffffffffffff, 0x0) open(0x0, 0x22240, 0x1d7) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$auto(0x3, 0x80106f53, r2) 46.794983915s ago: executing program 5 (id=2147): r0 = socket(0x10, 0x2, 0x0) socket(0x25, 0x1, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x0, 0xffffffffffffffff, 0x2) r1 = open(&(0x7f0000000000)='./file1\x00', 0x1652c2, 0xe1d2b27bdc14aa98) fanotify_mark$auto(0x400000000000, 0x105, 0xf2b, r1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nfc(&(0x7f0000000300), r0) sendmsg$auto_NFC_CMD_FW_DOWNLOAD(r2, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40404}, 0xc, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000c3ba62159d064f49d1cf4a92fb21ae8223188bcb1782ef490100debe801946e9b6262d44554c141ad7deab38eff943e6252861e137b618a98c4ffaa0a16d192c046563ec4c32a219ec1d6313092d6ca277ed27d2796a", @ANYRES16=r3, @ANYBLOB="000128bd7000ffdbdf251500000008000e0001000000"], 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdir$auto(&(0x7f0000000140)='./file0\x00', 0xfffd) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/rxrpc/stats\x00', 0xaa102, 0x0) write$auto(r4, 0x0, 0x1) setreuid$auto(0x0, 0x0) rename$auto(&(0x7f0000000180)='./file0\x00', &(0x7f0000000040)='./file0/file0\x00') r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/kernel/mm/transparent_hugepage/hugepages-32kB/stats/nr_anon_partially_mapped\x00', 0x1c9440, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r5, &(0x7f0000003480)=""/247, 0xf7) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f00000001c0)=""/8, 0x8) mmap$auto(0x0, 0x40, 0x40000e2, 0xeb1, 0x401, 0x8000) write$auto(0x1, 0x0, 0x80000000) mmap$auto(0x0, 0xe983, 0x3, 0xcb1, 0xffffffffffffffff, 0x8000) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYRES8, @ANYRES16=r0, @ANYRES8], 0x20}, 0x1, 0x0, 0x0, 0x4004044}, 0x4000000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NETDEV_CMD_QUEUE_GET(0xffffffffffffffff, &(0x7f0000003040)={0x0, 0x0, &(0x7f0000003000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="010600bd7000fbdbdf250a"], 0x1c}, 0x1, 0x0, 0x0, 0x20040004}, 0x20008810) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="18"], 0x1ac}}, 0x40000) 46.712673337s ago: executing program 5 (id=2148): openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/set_event\x00', 0x121000, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000640)='/dev/snd/midiC2D2\x00', 0x88102, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/midi2\x00', 0x201, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001340), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r1, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002bbd7000fcdbdf2504000000040010"], 0x20}, 0x1, 0x0, 0x0, 0x24040000}, 0x18800) mmap$auto(0x0, 0x400008, 0x1000, 0x10011, 0x2, 0x574) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000000c0), r1) sendmsg$auto_NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x40810}, 0x24000000) madvise$auto(0x0, 0xff7fffffffff0009, 0x4) close_range$auto(r0, 0x8, 0x6) brk$auto(0x40008000) open(&(0x7f00000005c0)='.\x00', 0xc00, 0x419) r4 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000200)='/proc/kcore\x00', 0x28000, 0x0) pread64$auto(r4, 0x0, 0x800003, 0x270) mlockall$auto(0x7) mprotect$auto(0x110c230000, 0xa588, 0x6) r5 = socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) statx$auto(r5, 0x0, 0x401006, 0x4015, 0x0) capset$auto(&(0x7f0000000100)={0x6, 0x0}, &(0x7f00000002c0)={0x1, 0x0, 0x80000000}) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_REPLACE(0xffffffffffffffff, 0xc1105518, &(0x7f0000000440)={{@inferred=r6, 0x8, 0x6, 0x2, "7f17a1886f726caf2195bc4db7f4a579f5b1a9f053edfcb5c8d9d44b4c90932e4300e00fd0dcf15b52572a8e", @raw=0x902}, 0xfffffff9, 0x4007ff, 0xb1, @raw=0x5, @reserved="a008b70583197895059c6b6f2927e718a6745a712de4566998a9cc48a9ea5bc2cf4d6c1ee25ad602a18d9ce83a1b33075d5cf05dd5858aaa1ec4daf5e5ba56e23f45e71782ca775704643ab8d62694e3c669e993e1807326d99726e88e59f2510e2fa2bff72b8c2bbfdc518fd16519269f5690ca7d13537b7c7e3457b0bf3c8b", "1077ee460dba5c1b999fdb057d26844354be6cc6f837fc7b29f9b65b31a4b7c8c3af0c468388e7c52897a29f4e7ed8d27836efc4e86cb6bde331ef77d0ffe5f7"}) mremap$auto(0x7fffffff, 0x4, 0x101, 0x3, 0x8) move_pages$auto(0x0, 0x9, 0x0, 0x0, 0x0, 0x0) msgctl$auto_IPC_RMID(0x1, 0x0, 0x0) sendmsg$auto_NL80211_CMD_JOIN_OCB(r1, &(0x7f0000000580)={&(0x7f0000000280), 0xc, &(0x7f0000000400)={&(0x7f0000000300)=ANY=[@ANYBLOB="ec000000", @ANYRES16=r3, @ANYBLOB="090125bd7000ffdbdf256c0000000500200172000000050059000d0000009a004901f453285b0c9d658258f7b4a845831a97c9c4a5586aade7a756226b56a503ef5ae0ebbf048a7e2bf497b1b4e39ae58bccc54ccc6c810699d3ad40733a61080bf69d7fc1431bc6edf437117351d1d7c089583c0c6e46fb3013cbd8436c40d4a1784810a68128cc1841afe72927baf61c9899dacdbe49014365712b5a9a95b89eec62d8ffbeee9d13eb239a398f1161c6252642757ad11a000004003b010400a68005001900b90000000c0002006e6c3830323131000800a400090000000500f60011000000"], 0xec}, 0x1, 0x0, 0x0, 0x24004081}, 0x5) syz_open_procfs$namespace(r7, &(0x7f0000000600)='ns/net\x00') connect$auto(0x3, 0x0, 0x58) io_uring_setup$auto(0x401, 0x0) openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, 0x0, 0x124a43, 0x0) close_range$auto(0x2, 0x8, 0x0) 35.065528976s ago: executing program 35 (id=2123): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_METER_CMD_SET(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4080}, 0x24040044) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x100000a3d9) openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f00000003c0), 0x1541, 0x0) r1 = socket(0x2, 0x1, 0x106) setsockopt$auto(r1, 0x6, 0x17, &(0x7f0000000280)='lp\x00h\x85M\xdf\xdc\x83\x8a\xa7\xe4]U(\x01\t=\x1e\x00\x00', 0x4) close_range$auto(0x2, 0x8, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0x400005, 0xe2, 0x9b72, 0x2, 0x8000) r2 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x89b0, &(0x7f0000000080)={'bond0\x00'}) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @loopback}, 0x54) write$auto(0xca, &(0x7f00000001c0)='\x04\x13\xac\x04\x00\x00\x00\x00\x00\x00\x00\x01\n\xdc\x10\x00\x00\xef\xab\xe1ME:\xab \x87|\xe0Z\x1b\x9eZ\xa8\xff\x92+\xc9\x9fs\xbf\xd8\f\x00\x00\x00\xa5V\b\xf1Ne\xc6l\xd0\xdd7\x96gf\xb2\xa0\xf2cN\x8b\x95\xeb\xf3(\x9eM-\xdc\x84N\xc3\tts%\xe9\xbf<\xf1\xdav\xe0n\x04\xb33\x97\xd5\xb4\x02\x94B\xbb\x995\x1e\xf7@\xd8\xca\x8d\a0 \xfa\x87V\xeb1\xe4M%\xdd\xfd\xf6\x8d\xb4\xc7\x9b\x9d\xf5\xd9^\xcdL@\x0f\xd4\x15F,\xc1\xd1i\xa4f/{\xfa\xd5\n\xe1\x95l[\x91\xbfX\xea2\x1b\x8a\x85\t\x00\x05m\x1e\x9b\xca\xfb\x81\x9d{\x19S\xff\xe4\xd2k\x1b/wJ&\x03+{\x84R\xa8\x92\xad\xec\x1b\xb1\xe9\xa7XUo\x93\xd5\xfb\x94\xc4\xdf\x8e\xdd\x97\xfc\x00\x13\xd6\x80g\x7fR;\x88\xf7bm\x8f\xb5\x89\x1a\xb63\x98\xaa\xcc\xbf\x94\xbf#u\xb9', 0x2b) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video41\x00', 0xe0a80, 0x0) ioctl$auto(r4, 0x8008563f, r4) r5 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000000), r3) sendmsg$auto_NFSD_CMD_THREADS_GET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r5, 0x1, 0x70bd31, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x400c801}, 0x4000094) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/module/8250/parameters/share_irqs\x00', 0x2062, 0x0) write$auto(r6, &(0x7f00000001c0)='1\x00\\\xa0\x04|\x03\xfa\b\x1c\xc7k\x00\x00', 0x81) bind$auto(0x3, &(0x7f0000000000)=@generic={0x10, "a500acb75c9cedd1b5e9a0d76293"}, 0x68) write$auto(0x3, 0x0, 0xfdef) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ioam6(&(0x7f0000000040), 0xffffffffffffffff) 33.377473s ago: executing program 36 (id=2136): socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x8000000000002, 0x2000c, 0xdf, 0xe31, 0x40000000000a5, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) setsockopt$auto(0x3, 0x1, 0x4c, 0x0, 0x9) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) close_range$auto(0x2, 0x8, 0x0) rseq$auto(&(0x7f00000001c0)={0xe, 0xfffffff7, 0x1, 0x9, 0xffffffff, 0x9}, 0x8000, 0x0, 0x6) r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r0, &(0x7f0000000200)={0x0, 0x7}, 0x3) r1 = landlock_create_ruleset$auto(&(0x7f0000000000)={0x6, 0x3, 0x3}, 0x18, 0x0) bpf$auto(0x0, &(0x7f00000003c0)=@task_fd_query={0x5, r1, 0x454f, 0xfff, 0x0, 0x0, r0, 0x80000000}, 0x6d4) flock$auto(r0, 0xc6) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x80000002, 0x1d, 0x3000, 0xfffffff8, 0x7, 0x400a, 0xffffffffffffffff, [], {0x6, 0x6, 0x6, 0x29c, 0x1, 0x7f, 0x0, 0x6, 0x1}, {0x10100, 0x1, 0x52, 0x85, 0x2, 0x1a7b870a, 0x76c5, 0x8, 0x100000000}}) socket(0xa, 0x1, 0x7) poll$auto(&(0x7f0000000040)={0x3, 0x1, 0x5}, 0x5, 0x80000000) close_range$auto(0x2, 0x8, 0x0) openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) openat$auto_vga_arb_device_fops_vgaarb(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r2 = open(0x0, 0x4242, 0x59) flock$auto(r2, 0x6) r3 = open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x84) bpf$auto(0x2, &(0x7f00000001c0)=@raw_tracepoint={0x5, r3, 0x0, 0x3}, 0xc) ioctl$auto_RTC_UIE_ON(r3, 0x7003, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x8, 0x1ff, 0x7c9, 0x25, 0x4909b6f5, 0x1ffe0, 0x7, 0x3, 0x20000009, 0x9, 0x3, 0x4, 0x1, 0x68d, 0x9, 0x8, 0x10003, 0x80, 0x3, 0x0, 0xa, 0x22000, 0x200, 0xffffff28, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, [0x8000000000000000, 0x101, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffeffffffffe, 0xffffffffffffffff, 0x6, 0xfffffffffffffffc, 0x0, 0x0, 0x80000, 0x0, 0xffff, 0x10, 0x0, 0x8, 0x10000, 0x0, 0x0, 0x90, 0x6, 0xbdcc, 0x0, 0xfffffffffffffffe]}, 0x1fe, 0x9) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x20000008}, 0x40000) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r4 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r4, &(0x7f0000000200)={{0x0, 0x1892, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f0000000140), 0xb, 0xa505}, 0x800}, 0x7, 0x4008) 33.027068188s ago: executing program 1 (id=2207): mlockall$auto(0x7) (async) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) (async, rerun: 32) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async, rerun: 32) rseq$auto(&(0x7f0000000000)={0x8, 0x8, 0xded, 0x80806, 0x4, 0x2}, 0x8005, 0x0, 0x8000006) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) prctl$auto(0xef, 0x402, 0x0, 0x801, 0x7) ioctl$auto(0xffffffffffffffff, 0x40104d01, 0xffffffffffffffff) (async) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) (async) openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000340), 0x189400, 0x0) pwrite64$auto(0xffffffffffffffff, &(0x7f0000000000)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x88\xa8s\x1c\b\x06\x8a>)\x14\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02l@\x18*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2', 0x4e, 0x3) (async, rerun: 32) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/cgroup.threads\x00', 0x80302, 0x0) (async, rerun: 32) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) (async, rerun: 64) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (rerun: 64) r0 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/usbmon0\x00', 0x0, 0x0) ioctl$auto_MON_IOCX_MFETCH(r0, 0xc0109207, 0x0) ioctl$auto_MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000100)={0x0, 0x2000004, 0x7}) (async, rerun: 32) pread64$auto(r0, 0x0, 0x7ff, 0xd) (async, rerun: 32) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/037/001\x00', 0x20882, 0x0) close_range$auto(0x2, 0x8, 0x0) (async) mmap$auto(0x0, 0x6, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) (async) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) (async) close_range$auto(0x0, 0xfffffffffffff000, 0x2) (async, rerun: 32) mq_open$auto(&(0x7f0000000280)='\\*)A\x00', 0x7e, 0x9, 0x0) (async, rerun: 32) ppoll$auto(&(0x7f0000000080)={0xffffffffffffffff, 0xf7f, 0x7d}, 0xfd, 0x0, 0x0, 0x8) socket(0xa, 0x1, 0x84) (async) openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/oom_adj\x00', 0x300, 0x0) exit$auto(0x4) mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb2, 0x401, 0x8000) 30.965637033s ago: executing program 37 (id=2148): openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/set_event\x00', 0x121000, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000640)='/dev/snd/midiC2D2\x00', 0x88102, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/midi2\x00', 0x201, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001340), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r1, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002bbd7000fcdbdf2504000000040010"], 0x20}, 0x1, 0x0, 0x0, 0x24040000}, 0x18800) mmap$auto(0x0, 0x400008, 0x1000, 0x10011, 0x2, 0x574) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000000c0), r1) sendmsg$auto_NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x40810}, 0x24000000) madvise$auto(0x0, 0xff7fffffffff0009, 0x4) close_range$auto(r0, 0x8, 0x6) brk$auto(0x40008000) open(&(0x7f00000005c0)='.\x00', 0xc00, 0x419) r4 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000200)='/proc/kcore\x00', 0x28000, 0x0) pread64$auto(r4, 0x0, 0x800003, 0x270) mlockall$auto(0x7) mprotect$auto(0x110c230000, 0xa588, 0x6) r5 = socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) statx$auto(r5, 0x0, 0x401006, 0x4015, 0x0) capset$auto(&(0x7f0000000100)={0x6, 0x0}, &(0x7f00000002c0)={0x1, 0x0, 0x80000000}) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_REPLACE(0xffffffffffffffff, 0xc1105518, &(0x7f0000000440)={{@inferred=r6, 0x8, 0x6, 0x2, "7f17a1886f726caf2195bc4db7f4a579f5b1a9f053edfcb5c8d9d44b4c90932e4300e00fd0dcf15b52572a8e", @raw=0x902}, 0xfffffff9, 0x4007ff, 0xb1, @raw=0x5, @reserved="a008b70583197895059c6b6f2927e718a6745a712de4566998a9cc48a9ea5bc2cf4d6c1ee25ad602a18d9ce83a1b33075d5cf05dd5858aaa1ec4daf5e5ba56e23f45e71782ca775704643ab8d62694e3c669e993e1807326d99726e88e59f2510e2fa2bff72b8c2bbfdc518fd16519269f5690ca7d13537b7c7e3457b0bf3c8b", "1077ee460dba5c1b999fdb057d26844354be6cc6f837fc7b29f9b65b31a4b7c8c3af0c468388e7c52897a29f4e7ed8d27836efc4e86cb6bde331ef77d0ffe5f7"}) mremap$auto(0x7fffffff, 0x4, 0x101, 0x3, 0x8) move_pages$auto(0x0, 0x9, 0x0, 0x0, 0x0, 0x0) msgctl$auto_IPC_RMID(0x1, 0x0, 0x0) sendmsg$auto_NL80211_CMD_JOIN_OCB(r1, &(0x7f0000000580)={&(0x7f0000000280), 0xc, &(0x7f0000000400)={&(0x7f0000000300)=ANY=[@ANYBLOB="ec000000", @ANYRES16=r3, @ANYBLOB="090125bd7000ffdbdf256c0000000500200172000000050059000d0000009a004901f453285b0c9d658258f7b4a845831a97c9c4a5586aade7a756226b56a503ef5ae0ebbf048a7e2bf497b1b4e39ae58bccc54ccc6c810699d3ad40733a61080bf69d7fc1431bc6edf437117351d1d7c089583c0c6e46fb3013cbd8436c40d4a1784810a68128cc1841afe72927baf61c9899dacdbe49014365712b5a9a95b89eec62d8ffbeee9d13eb239a398f1161c6252642757ad11a000004003b010400a68005001900b90000000c0002006e6c3830323131000800a400090000000500f60011000000"], 0xec}, 0x1, 0x0, 0x0, 0x24004081}, 0x5) syz_open_procfs$namespace(r7, &(0x7f0000000600)='ns/net\x00') connect$auto(0x3, 0x0, 0x58) io_uring_setup$auto(0x401, 0x0) openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, 0x0, 0x124a43, 0x0) close_range$auto(0x2, 0x8, 0x0) 28.202532835s ago: executing program 1 (id=2210): mmap$auto(0x0, 0x2020009, 0x100003, 0x9000000eb1, 0xfffffffffffffffa, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x3, 0xa) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x30b140, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe2180, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$auto(0x3, 0xae41, r1) ioctl$auto_KVM_CREATE_VM(r0, 0x4188aea7, 0x0) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x2200, 0x0) mmap$auto(0x0, 0x9, 0x3, 0x800019b72, 0x9, 0x8000000000008000) capget$auto(0x0, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x141, 0x0) r3 = open(0x0, 0x161342, 0x130) fallocate$auto(0x8000000000000003, 0x0, 0x9, 0x4cbd5d) fchmod$auto(r3, 0xa) ioctl$auto_TCFLSH2(r2, 0x540b, 0xfffffffffffffffd) r4 = setfsuid$auto(0xee00) setreuid$auto(r4, 0x0) ioctl$auto_XFS_IOC_SWAPEXT(0xffffffffffffffff, 0xc0c0586d, &(0x7f0000000040)={0x1, @raw=0x3, @inferred=r2, 0x9, 0x2400000000000000, '\x00', {0x2, 0x8, 0x2, 0xffffffffffffffff, 0xee01, 0x7, 0x6, 0x100000001, {0x1, 0x6}, {0x0, 0x7fff}, {0x101, 0x4}, 0x8, 0xf, 0x9, 0x3, 0x80000000, 0x3, 0x7, 0xccd, 0x7cb, 0x2, '\x00', 0xfffffffb, 0xe, 0x4, 0x87e1}}) shmctl$auto_IPC_RMID(0x100, 0x0, &(0x7f00000002c0)={{0x8, 0xee01, 0xffffffffffffffff, 0x5, 0x9, 0x7f, 0x667}, 0x3, 0x3, 0x4b87105a, 0x4, @raw=0x9f, @inferred=0xffffffffffffffff, 0x6ab5, 0x0, &(0x7f0000000100)="966fabe16beb2d03fa54a422ee643bc935318431830b17da3d47f0650b67201c196e259a5f67682342c96c97d206fda232d16a0c04ecfd46d41f3fd80646529155f1ffb09fa31503cf299cb1b7a9a55aa44f0658f7524404ce809d197be8bf782374eb6f914ad4bea5e490c02de68a61d46ab8564dbe6302518948e129ebbc0dedfc0b294e51a41d5d71a071db06db03bae5966700f8e1ce84110a6aa1112e3c9ef71d8d3723f15e126fba46951e0008e3e983b63ff6b9f3876497186677cde3a8d26b9a5fcf056f0ef5b7f3d657e9ff227cfbb5ce", &(0x7f0000000200)="6f8ce43bf24da588e8b2c536ef5ed25703e4dd96b088cd59871889a9837b6708d4f1973e59c1c9ad47567e8cafaa8d5eeb34287cb75ace1c3273df37678d0807011b47daffdedf8e76e4139423c07da79a939f042b309180ec22ba2773ec26c7d39f0e7e0d57b87859d8375edb393c9141570ef8268a4f0d8a7c9014b0eb19404e987a7831361281f33015344f3fc7c9be291fb864443df3b5aaf5df89f935ede2631b89752b04af6719054c9f5731ff"}) read$auto(r2, &(0x7f0000000340)='\x00', 0x3) keyctl$auto(0x8, r4, r5, r6, 0x6) 26.42219479s ago: executing program 1 (id=2215): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) mlock$auto(0xfbe8, 0xe2f) mlock$auto(0x7c88, 0x7fff) socket(0xa, 0x3, 0x3b) connect$auto(0x3, 0x0, 0x58) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/asound/card0/dummy_pcm\x00', 0x8f3b7a51b804b702, 0x0) r1 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x181506, 0x0) ioctl$auto_PPPIOCSMRU(0xffffffffffffffff, 0xc004743e, 0x0) write$auto(r1, 0x0, 0x208) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_netdev(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$auto_NETDEV_CMD_PAGE_POOL_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="2b00e2ffb78dc58964d9f9122d93ff2a4d0735d934b9e7a61678523bfb617934a9630a9ce1d04b02dc1fd97cdac315f645c449aefd807efcf12918c680ea0ce5d6a6b3a49dd9db4c1996f8590958a3e636466cf3468e223391c511f07bb9d7251e5fc4f632adf5c5d0f2e69d6f8d30280464dbdf880c4dcc070b377e4195fb3c21ab30f6e79790d7846a4d324705d45a88a8f2f91a9e9cae931d27366c0cd4d108fbec756f0630083e568722384853d0dec1355922cdfd64f6c6e45786e6b85e7bc38297df91a307a96f8ee8be498140da95cf975b6856e4b92e24eafd420c7555809143d6cc3607e98f014494", @ANYRES16=r3, @ANYRES8=r0], 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) getrandom$auto(&(0x7f0000000440)='\x00', 0x5, 0x2) r5 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/apparmor/parameters/mode\x00', 0x121102, 0x0) setreuid$auto(0x15, 0x5) pwrite64$auto(r6, &(0x7f0000000400)=']\x00', 0x3, 0xd) ioctl$auto_SNDCTL_DSP_SETDUPLEX(r5, 0x5016, &(0x7f00000000c0)="62d420b114a7acba8258b2be063ec5f0c93cf1bc3df15a0e8da03c6e742e6ffba8c29188bb07cf") ioctl$auto_SNDCTL_DSP_SUBDIVIDE(r5, 0xc0045009, &(0x7f0000000040)) write$auto(r4, &(0x7f0000000180)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8\xa6\xb6\xaa\x96/OX\xba\x02\xc5\xc6B\x1d}Y\xbc@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf\xd6f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8', 0x100000a3d6) fallocate$auto(0xffffffffffffffff, 0x1, 0x9, 0x7fff) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg1\x00', 0x405c3, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x10000000000001ff, 0x7, 0xd3e, 0x20, 0x9687, 0x100000000000003, 0x3c2a19d5, 0x6, 0x5, 0x62, 0x100000001, 0x7, 0x6d3f, 0x6, 0xa, 0xfffffffffffffffe]}, 0x0) ioctl$auto_VHOST_SET_VRING_BASE(0xffffffffffffffff, 0x4008af12, &(0x7f0000000340)={0x80000001, 0x8}) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r7 = socket(0x2, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0xffff, @remote}, 0x6a) sendmmsg$auto(r7, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) 25.371445624s ago: executing program 1 (id=2222): pipe$auto(0x0) pipe$auto(0x0) vmsplice$auto(0x2, 0x0, 0x8000000000000001, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0xa, 0x2, 0x73) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000001d00), 0xffffffffffffffff) sendmsg$auto_NBD_CMD_CONNECT(r0, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f00000001c0)={0x30, r1, 0x1, 0x703d25, 0x25dfdbfd, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [@nested={0xc, 0x1, 0x0, 0x1, [@nested={0x8, 0x1, 0x0, 0x1, [@generic='\x00\x00\x00\x00']}]}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x6}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x8880) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x80801, 0x0) write$auto_proc_sys_file_operations_proc_sysctl(r4, 0x0, 0x0) r5 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0xc000) read$auto(0xffffffffffffffff, 0x0, 0x4) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) mmap$auto(0x7ffffffb, 0x100000000000008, 0x8000000000d9, 0x51fd, r3, 0xc) close_range$auto(r4, r2, 0x7) setresuid$auto(0x0, 0x0, 0x0) keyctl$auto_KEYCTL_GET_PERSISTENT(0x16, 0x0, 0x7fffffffffffffff, 0xffffffffffffe6d6, 0x2) getpid() sendmsg$auto_NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYRESOCT=r5, @ANYRES32, @ANYRES16=0x0], 0x59c}, 0x1, 0x0, 0x0, 0x20040084}, 0x20000000) waitid$auto_P_ALL(0x0, 0x2, 0x0, 0x81, &(0x7f0000000580)={{0x8, 0x20000000000005}, {0x10000000000a, 0xffe}, 0x10101, 0x100000001, 0x4, 0x3, 0x7, 0x5, 0x7, 0x2, 0xe6, 0x4, 0x7, 0x4000000000200006, 0x9, 0x5}) r6 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000240)='/proc/self/net/rpc/nfsd.fh/flush\x00', 0x0, 0x0) pread64$auto(r6, 0x0, 0x7, 0x1000000000007fff) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x14be02, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x770, 0xfffffffe, 0x8, 0x4, 0x4005, 0x0, 0x5, 0x400, 0x3, 0x9, 0x8, 0x6, 0x4, 0x11ffffffffffb, 0xb2, 0x2, 0x6, 0x10, 0x80, 0x7ff, 0x8000, 0x1, 0x1, 0x202, 0x9, 0xbca7, 0x4, 0x0, 0x0, 0x0, 0x694, [0x2, 0x8fac, 0x0, 0x5, 0x0, 0x0, 0x20000000000, 0x0, 0x4, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffc01, 0x7fffffff, 0xfffffffffffffffb, 0x0, 0x9, 0x2000000, 0xfffffffffffffffe, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8000000000000000, 0x0, 0x1, 0x0, 0x7fffffff, 0x0, 0x0, 0x20000000000000, 0x0, 0x1000000000000200, 0x0, 0x400, 0x96, 0x4000000000009, 0x4, 0xe17, 0x0, 0x6]}, 0x1fe, 0x1) 24.200665784s ago: executing program 8 (id=2227): close_range$auto(0x2, 0xffffffffffffffff, 0x0) (async) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000280), 0x101000, 0x0) ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r1 = socket(0x15, 0x5, 0x0) connect$auto(r1, &(0x7f0000000000)=@in={0x2, 0x4e21, @local}, 0x2) (async) ioctl$auto(0x3, 0x8010aebc, 0x10000000000402) 24.198285487s ago: executing program 1 (id=2228): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) r0 = open(0x0, 0x261c2, 0x84) close_range$auto(0x2, 0x8, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0xa, 0x2, 0x88) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) bpf$auto(0x0, &(0x7f0000000280)=@bpf_attr_5={@target_ifindex=r4, r3, 0x8, 0x1, 0xffffffffffffffff, @relative_fd=r1, 0xe600}, 0xf) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sendmsg$auto_NL80211_CMD_START_NAN(0xffffffffffffffff, 0x0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, 0x0, 0x0) r5 = memfd_create$auto(0x0, 0x4) statx$auto(r5, 0x0, 0x1000, 0xbdf9, 0x0) r6 = socket(0xa, 0x801, 0x84) getsockopt$auto(r6, 0x84, 0x6f, 0x0, 0x0) bpf$auto(0x2, &(0x7f0000000340)=@raw_tracepoint={0x5, r0, 0x18, 0x2}, 0xc) 24.040868826s ago: executing program 1 (id=2229): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = clone3$auto(&(0x7f0000000180)={0x9, 0x7, 0xa5e7, 0x10000, 0x3, 0x8000000000000000, 0x10, 0x5, 0x10000, 0x1ff, 0x5185}, 0x3ff) r2 = prctl$auto(0x3e, 0x1, r1, 0x1, 0x0) setresuid$auto(0xffffffffffffffff, 0x0, 0x0) write$auto(r0, 0x0, 0x100000a3d9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r3 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x123002, 0x0) ioctl$auto_SNDCTL_DSP_GETBLKSIZE(r3, 0xc0045004, &(0x7f0000000000)) mmap$auto(0x0, 0x2020009, 0x3, 0xebf, 0xfffffffffffffffa, 0x80000001) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) madvise$auto(0xfffffffffffffffe, 0x240007, 0x17) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x8) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) unshare$auto(0x40000080) close_range$auto(0xffffffffffffffff, r2, 0x3) r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x0, 0x6, 0xffffffff, 0x2}, 0x8000, 0x0, 0x6) mmap$auto(0x0, 0x88b, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) close_range$auto(0x0, 0x5, 0x0) pipe$auto(0x0) pipe$auto(0x0) tee$auto(0x2000000000000, 0x3, 0x402, 0xd) ioctl$auto(r4, 0x4b72, 0xffffffffffffffff) madvise$auto(0x0, 0x2003f2, 0x15) madvise$auto(0x10200000000000, 0x200007, 0x19) signalfd4$auto(0xffffffff, 0x0, 0x8, 0x0) 23.850776782s ago: executing program 8 (id=2230): r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/seq/clients\x00', 0x280, 0x0) timerfd_settime$auto(r0, 0x3, &(0x7f0000000000)={{0x7f, 0x3}, {0x4, 0x9897}}, &(0x7f0000000080)={{0x1b}, {0x0, 0x3}}) 23.781127055s ago: executing program 8 (id=2231): sendmsg$auto_ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x14, 0x0, 0x1, 0x70bd2a, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_userio_fops_userio(0xffffffffffffff9c, &(0x7f0000000980), 0x102001, 0x0) socket(0x10, 0x2, 0xc) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r1) ioctl$auto_KVM_GET_MSRS(r0, 0x4018aee1, &(0x7f00000000c0)={0x2, 0x1000000}) 23.60236997s ago: executing program 8 (id=2232): socket$nl_generic(0x10, 0x3, 0x10) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) socket(0xa, 0x2, 0x0) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x163340, 0x6a) socket(0xa, 0x2, 0x88) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) connect$auto(0x3, &(0x7f0000000140)=@in={0x2, 0x4, @multicast2}, 0x55) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x4000804) syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000180), 0xffffffffffffffff) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, 0x0, 0x106, 0x0, 0x1, 0x697b}, 0xed7138c}, 0x9a6, 0xe000) 23.481440751s ago: executing program 8 (id=2233): openat$auto_rfkill_fops_core(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'veth0_to_bond\x00'}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'pimreg1\x00', 0x0}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'wlan1\x00', 0x0}) sendmsg$auto_NL80211_CMD_GET_INTERFACE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)={0x1c, r3, 0xb01, 0x70bd27, 0x25dfdbfc, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000050}, 0x240088e4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'pimreg1\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000980)={&(0x7f00000003c0)=ANY=[@ANYBLOB="80010000", @ANYRES16=0x0, @ANYBLOB="00022cbd7000fcdbdf2502000000040001807800018008000100", @ANYRES32=0x0, @ANYBLOB="1400020069703665727370616e30000000000000140002006d616376746170300000000000000000140002006970766c616e31000000000000000000140002006361696630000000000000000000000008000100", @ANYRES32=r0, @ANYBLOB="1600020074756e6c3000000000000000000000006f0c04ab140002006272696467655f736c6176655f310000140002006272696467655f736c6176655f31000008000100576a18cb1a7ee68c170d6b9f7dc80ca0bc487582813cb3bbcd8515f42f80537cb6f2ab8c32c1deb2f356c9fed85978a25c9b76e6c1d29281064f182f7dd7093930b507867348e31072194953ac54b121705b2c29", @ANYRES32=r4, @ANYBLOB="0800030001000000080003000008000008000300f9ffffff08000300080000001400020076657468315f746f5f687372000000001400020076657468305f766972745f776966690008000300000400006c0001801400020076657468315f746f5f626f6e6400000008000300b000000014000200776c616e30000000000000000000000008000100", @ANYRES32=r5, @ANYBLOB="140002006e69637666300000000000000000000008000300a46e0000140002006e723000"/48], 0x180}, 0x1, 0x0, 0x0, 0x48c44}, 0x40) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x208840, 0x0) close_range$auto(r2, r2, 0x800000) r6 = socket(0x2, 0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sendmmsg$auto(0x3, 0x0, 0x3, 0x0) close_range$auto(0x2, 0xa, 0x0) r7 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0xa402, 0x0) ioctl$auto_SG_SET_FORCE_PACK_ID(r7, 0x227b, &(0x7f0000000080)="ec") read$auto(r7, 0x0, 0x1001) write$auto(0x3, 0x0, 0x5c8) r8 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r9 = ioctl$auto_KVM_CREATE_VM(r8, 0xae01, 0x0) close_range$auto(0x2, 0x8, 0x0) socketcall$auto(0x8000, 0x0) ioctl$auto_SNDRV_RAWMIDI_IOCTL_PVERSION(r6, 0x80045700, &(0x7f0000000040)=0x3a77) r10 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x60980, 0x0) ioctl$auto_KVM_CREATE_VM(r10, 0xae01, 0x0) ioctl$auto(0x3, 0xae60, 0x10000000000402) ioctl$auto(r8, 0xae41, r9) 22.47726195s ago: executing program 8 (id=2237): r0 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/set_event\x00', 0x121000, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/midi2\x00', 0x80102, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/midi2\x00', 0x201, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001340), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r1, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002bbd7000fcdbdf2504000000040010"], 0x20}, 0x1, 0x0, 0x0, 0x24040000}, 0x18800) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000000c0), r1) sendmsg$auto_NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x24000000) madvise$auto(0x0, 0xff7fffffffff0001, 0x15) close_range$auto(r0, 0x8, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r3 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004c18}, 0x810) sendmsg$auto_NETDEV_CMD_QUEUE_GET(0xffffffffffffffff, &(0x7f0000003040)={0x0, 0x0, &(0x7f0000003000)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="01002c00"/14], 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x20008810) sendmsg$auto_NL80211_CMD_GET_REG(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="db86f083fd5ab677881fc5ec289b33b355d1c9647abaef72561cc1ae57cbeba34edf632c035fc6646749d50cca8d37634899a328a19380f7831b77e2a909ae58b13ddf5b922c63498d487b35d2cde45f39d78198c20a77679bbbbba5201047c3d91395fcc3d829d2c026c15a7c620ebba0ef4d470bf92c41eac7542edb92f5e15f9d1de1c093bb0f6994259fe87a8390fe64f2ea91e72cff2fb8c1ed27", @ANYBLOB='H'], 0x1ac}, 0x1, 0x0, 0x0, 0x4}, 0xc040004) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) brk$auto(0x40008000) r4 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000200)='/proc/kcore\x00', 0x28000, 0x0) pread64$auto(r4, 0x0, 0x800003, 0x270) mlockall$auto(0x7) mprotect$auto(0x110c230000, 0xa588, 0x200000006) mremap$auto(0x110c231000, 0x0, 0x101, 0x3, 0x0) move_pages$auto(0x0, 0x9, 0x0, 0x0, 0x0, 0x0) msgctl$auto_IPC_RMID(0x1, 0x0, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000300)='/proc/mtrr\x00', 0x183100, 0x0) ioctl$auto(0x3, 0x40085400, 0x5) r5 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)) ioctl$auto_X86_IOC_RDMSR_REGS(0xffffffffffffffff, 0xc02063a0, &(0x7f0000000280)=[0x9, 0x7, 0x200, 0x6, 0x9474, 0x3, 0x7fff, 0x4]) fcntl$auto(r5, 0x402, 0x0) 22.425082766s ago: executing program 7 (id=2238): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$auto_FS_IOC_SETFLAGS(r0, 0x40086602, 0x9) ioctl$auto(0x4000000000000c8, 0x800454cf, 0x3) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) read$auto(0x3, 0x0, 0x7ffffffff000) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/pid_for_children\x00') r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dsp\x00', 0x121346, 0x0) r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/neigh/vlan1/base_reachable_time\x00', 0x40400, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_FLOW_CMD_GET(r3, 0x0, 0x800) read$auto(r2, 0x0, 0x1ff) r4 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x8002, 0x0) writev$auto(r4, &(0x7f0000000200)={0x0, 0x7}, 0x3) sendmsg$auto_NL80211_CMD_NOTIFY_RADAR(0xffffffffffffffff, 0x0, 0x4) openat$auto_page_owner_stack_operations_page_owner(0xffffffffffffff9c, 0x0, 0x509080, 0x0) ioctl$auto_SNDCTL_DSP_SPEED(r1, 0xc0045002, 0x0) 21.45862617s ago: executing program 7 (id=2242): r0 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x80080, 0x0) mmap$auto(0x2000000, 0x40000c, 0xdf, 0x9b72, 0x2, 0x8000) r1 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/pagemap\x00', 0x0, 0x0) readv$auto(r1, &(0x7f0000000400)={0x0, 0x40}, 0x6) ioctl$auto_PPPIOCSMRU(r0, 0xc004743e, 0x0) ioctl$auto_PPPIOCSCOMPRESS(r0, 0x4010744d, &(0x7f00000001c0)={0x0, 0x8, 0x80}) 21.334854805s ago: executing program 7 (id=2243): mmap$auto(0x6000, 0x7d, 0x4000000000df, 0xeb1, 0xffffffffffffffff, 0x8000) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/015/001\x00', 0xa901, 0x0) socket(0xa, 0x2, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) socket(0xa, 0x5, 0x0) openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000400)='/dev/mtd0\x00', 0x20002, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) close_range$auto(0x2, 0xffffffffffffffff, 0x0) open(0x0, 0x22240, 0x1d7) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$auto(0x3, 0x80106f53, r0) 21.22069279s ago: executing program 7 (id=2245): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0xa, 0x3, 0x3b) connect$auto(0x3, 0x0, 0x58) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, 0x0, 0x8002, 0x0) getsockopt$auto(0xffffffffffffffff, 0x84, 0x70, 0x0, &(0x7f0000000280)=0x1000c0) mmap$auto(0x0, 0x2020009, 0x7, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f000000c340)='/proc/thread-self/pagemap\x00', 0x8000, 0x0) ioctl$auto_PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f000000c380)={0x60, 0xff01, 0x100000, 0x7fffffffefff, 0xfffffffffffffffe, 0x1, 0x6, 0x50b301a, 0x2c, 0x2c, 0x0, 0x2}) 21.130086149s ago: executing program 7 (id=2246): ppoll$auto(&(0x7f0000000000)={0xffffffffffffffff, 0x6, 0x6}, 0x3, &(0x7f0000000040)={0x2, 0xc50}, &(0x7f0000000080)={0x10000000}, 0x8) read$auto_proc_reg_file_ops_compat_inode(r0, &(0x7f00000000c0), 0x0) r1 = socket(0x2, 0x1, 0x0) kill$auto(0x0, 0xb3) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_loop_ctl_fops_loop(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) socket(0x2, 0x3, 0x6) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/bdi/43:288/max_bytes\x00', 0x82942, 0x0) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f0000000200)='}[,&*}\x00', &(0x7f0000000240)='nfsd\x00', 0x3, 0x0) access$auto(&(0x7f0000000000)='}[,&*}\x00', 0x7) r4 = socket(0x23, 0x80805, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) poll$auto(&(0x7f0000000000)={r4, 0x1, 0x8}, 0x5, 0x400) r6 = openat$auto_lockdown_ops_lockdown(0xffffffffffffff9c, &(0x7f0000000180), 0x2940, 0x0) sendfile$auto(r2, r6, &(0x7f00000001c0)=0x800, 0x1) setsockopt$auto(r5, 0x113, 0x3, 0x0, 0x79ad226b) unshare$auto(0x40000080) sendfile$auto(r1, r3, 0x0, 0x442) r7 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001140)='/sys/devices/virtual/block/zram0/comp_algorithm\x00', 0x20b42, 0x0) sendfile$auto(r7, r7, 0x0, 0x3) getsockopt$auto_SO_REUSEPORT(r0, 0xda, 0xf, &(0x7f0000000100)='/sys/devices/virtual/block/zram0/comp_algorithm\x00', &(0x7f0000000140)=0x1) 20.191108777s ago: executing program 7 (id=2251): mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x25, 0x801, 0x0) r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000080), 0x88000, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/platform/usbip-vudc.0/usbip_sockfd\x00', 0x103841, 0x0) openat$auto_buffer_percent_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/tracing/buffer_percent\x00', 0x1, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/mm/transparent_hugepage/khugepaged/max_ptes_none\x00', 0x183042, 0x0) read$auto(r1, 0x0, 0x9) writev$auto(r0, &(0x7f0000000200)={0x0, 0x3}, 0x3) (fail_nth: 1) 15.734856603s ago: executing program 9 (id=2268): mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) io_uring_setup$auto(0x6, 0x0) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptyr5\x00', 0x0, 0x0) ioctl$auto_TIOCSWINSZ2(r0, 0x5414, 0x0) 15.716783199s ago: executing program 9 (id=2269): r0 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000900)='/dev/bus/usb/015/001\x00', 0x0, 0x0) acct$auto(&(0x7f0000000000)='!\'\x00') r1 = socket(0xa, 0x1, 0x84) socket(0x15, 0x5, 0x0) bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x9, 0x21eb, 0x7ff, 0x6, 0xa, 0x1000009, 0x5f, 0x0, 0x3}, 0x6f3) openat$auto_ima_measure_policy_ops_ima_fs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000000000), 0x123000, 0x0) ioctl$auto(0x3, 0x541b, 0xfffffffffffff4e0) r2 = socket(0xa, 0x2, 0x88) bpf$auto(0x0, &(0x7f00000002c0)=@link_update={r2, @new_prog_fd=0x4, 0xfffffffd, @old_prog_fd=r1}, 0xa3) ioctl$auto_USBDEVFS_IOCTL32(r0, 0xc00c5512, 0x0) 15.657797332s ago: executing program 9 (id=2270): socket(0x2, 0x801, 0x106) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) r0 = openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, &(0x7f0000000440), 0x20201, 0x0) ioctl$auto_I2C_RDWR(r0, 0x707, &(0x7f0000000180)) openat$auto_vsock_device_ops_af_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x4c00, 0x0) poll$auto(&(0x7f0000000040)={0x3, 0x1, 0xa}, 0x5, 0x108) 15.599674843s ago: executing program 9 (id=2271): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) r0 = socket(0x11, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) sendmmsg$auto(r0, &(0x7f00000001c0)={{&(0x7f0000000000), 0x5aa, &(0x7f0000000100)={&(0x7f0000000040), 0x10}, 0x2, &(0x7f0000000140), 0x8, 0x1}, 0x5}, 0x2, 0x101) capget$auto(0x0, 0xfffffffffffffffe) capset$auto(0x0, &(0x7f0000000000)={0x3, 0x7, 0x8}) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x40400, 0x48) fchmod$auto(r1, 0x7439) fchown$auto(r1, 0x0, 0x400) creat$auto(0x0, 0xcc38) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r2 = openat$auto_nsim_pp_hold_fops_netdev(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim0/ports/1/pp_hold\x00', 0x115003, 0x0) r3 = openat$auto_iommufd_fops_main(0xffffffffffffff9c, &(0x7f0000000400), 0x80001, 0x0) ioctl$auto(r3, 0x3b8e, r2) socket(0x2b, 0x1, 0x0) setsockopt$auto(0x3, 0x6, 0x3, 0x0, 0xd) 15.529122826s ago: executing program 9 (id=2272): socket$nl_generic(0x10, 0x3, 0x10) openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) r1 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000002940)='/dev/fb0\x00', 0x841, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x2242, 0x0) r2 = openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, 0x0, 0x191000, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_tracing_pipe_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/trace_pipe\x00', 0x20c01, 0x0) select$auto(0x9, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0xffffffffffffffff, 0x15f4da07, 0x6, 0x10, 0x64, 0x80000020, 0x1000, 0xb, 0x9, 0x2, 0x8]}, 0x0) select$auto(0x11, 0x0, 0x0, &(0x7f0000000140)={[0x8000000000001fb, 0x4020000000007, 0x1, 0xbc1, 0x7fffffffffffffff, 0x3, 0x8, 0x10001, 0x400000000003, 0x3, 0xffffffffffffffef, 0xfffffffffffffffd, 0x7, 0x9, 0xfffffffffffdff81, 0x4]}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(r3, r2, 0x0) r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttyS0\x00', 0x1, 0x0) ioctl$auto(r4, 0x540a, r4) sysfs$auto(0x2, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000010c0), 0xffffffffffffffff) close_range$auto(0x2, 0x8, 0x0) fsconfig$auto_JFFS2_COMPR_MODE_FORCELZO(r3, 0x5, &(0x7f0000001880)='/proc/self/cmdline\x00', 0x0, 0x4) pwrite64$auto(r1, 0x0, 0x8, 0x400000000000000) r5 = socket(0xa, 0x2, 0x3a) setsockopt$auto(r5, 0x29, 0x32, &(0x7f0000000180)='\x15!\xa8^J/\xddCx4!\x00\xd3\x8f\x1e\x1b\xc3 \xe2\xa8\xd6\xd9\xc0\xa2\x0f\x88\xb1e\x8a\xd8?\xfe\xda\xc4\xef\xff(i\xc6@\x91_\vBj\x0eQ\xce\x16\'C\x8c\x01\x80\x92u\xd5\xb8\\\x82,\xe2=y\x9bR\xbcn\xa0c\x16~\x86\"t\x00\x00\x00\x00\xe4\xa5\xfe\xb5', 0x10000110) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55) mmap$auto(0x0, 0x401, 0x9, 0x17, 0x401, 0x8000) openat$auto_drm_debugfs_entry_fops_drm_debugfs(0xffffffffffffff9c, 0x0, 0x503083, 0x0) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000080), 0xffffffffffffffff) 15.261082011s ago: executing program 9 (id=2273): r0 = socket$nl_generic(0x10, 0x3, 0x10) setfsuid$auto(0xee00) r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002a40), r0) r2 = syz_genetlink_get_family_id$auto_ioam6(&(0x7f0000000040), r0) sendmsg$auto_IOAM6_CMD_DEL_NAMESPACE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80008880}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r2, 0x2, 0x70bd26, 0x25dfdbfb, {}, [@IOAM6_ATTR_NS_ID={0x6, 0x1, 0xe}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008080}, 0x40000c0) sendmsg$auto_NFSD_CMD_LISTENER_SET(r0, &(0x7f00000050c0)={0x0, 0x0, &(0x7f0000005080)={&(0x7f0000002a80)={0x14, r1, 0x1, 0x70bd21, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20004810}, 0x20008050) 8.981681361s ago: executing program 38 (id=2229): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = clone3$auto(&(0x7f0000000180)={0x9, 0x7, 0xa5e7, 0x10000, 0x3, 0x8000000000000000, 0x10, 0x5, 0x10000, 0x1ff, 0x5185}, 0x3ff) r2 = prctl$auto(0x3e, 0x1, r1, 0x1, 0x0) setresuid$auto(0xffffffffffffffff, 0x0, 0x0) write$auto(r0, 0x0, 0x100000a3d9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r3 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x123002, 0x0) ioctl$auto_SNDCTL_DSP_GETBLKSIZE(r3, 0xc0045004, &(0x7f0000000000)) mmap$auto(0x0, 0x2020009, 0x3, 0xebf, 0xfffffffffffffffa, 0x80000001) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) madvise$auto(0xfffffffffffffffe, 0x240007, 0x17) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x8) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) unshare$auto(0x40000080) close_range$auto(0xffffffffffffffff, r2, 0x3) r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x0, 0x6, 0xffffffff, 0x2}, 0x8000, 0x0, 0x6) mmap$auto(0x0, 0x88b, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) close_range$auto(0x0, 0x5, 0x0) pipe$auto(0x0) pipe$auto(0x0) tee$auto(0x2000000000000, 0x3, 0x402, 0xd) ioctl$auto(r4, 0x4b72, 0xffffffffffffffff) madvise$auto(0x0, 0x2003f2, 0x15) madvise$auto(0x10200000000000, 0x200007, 0x19) signalfd4$auto(0xffffffff, 0x0, 0x8, 0x0) 6.502188101s ago: executing program 39 (id=2237): r0 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/set_event\x00', 0x121000, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/midi2\x00', 0x80102, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/midi2\x00', 0x201, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001340), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r1, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002bbd7000fcdbdf2504000000040010"], 0x20}, 0x1, 0x0, 0x0, 0x24040000}, 0x18800) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000000c0), r1) sendmsg$auto_NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x24000000) madvise$auto(0x0, 0xff7fffffffff0001, 0x15) close_range$auto(r0, 0x8, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r3 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004c18}, 0x810) sendmsg$auto_NETDEV_CMD_QUEUE_GET(0xffffffffffffffff, &(0x7f0000003040)={0x0, 0x0, &(0x7f0000003000)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="01002c00"/14], 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x20008810) sendmsg$auto_NL80211_CMD_GET_REG(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="db86f083fd5ab677881fc5ec289b33b355d1c9647abaef72561cc1ae57cbeba34edf632c035fc6646749d50cca8d37634899a328a19380f7831b77e2a909ae58b13ddf5b922c63498d487b35d2cde45f39d78198c20a77679bbbbba5201047c3d91395fcc3d829d2c026c15a7c620ebba0ef4d470bf92c41eac7542edb92f5e15f9d1de1c093bb0f6994259fe87a8390fe64f2ea91e72cff2fb8c1ed27", @ANYBLOB='H'], 0x1ac}, 0x1, 0x0, 0x0, 0x4}, 0xc040004) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) brk$auto(0x40008000) r4 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000200)='/proc/kcore\x00', 0x28000, 0x0) pread64$auto(r4, 0x0, 0x800003, 0x270) mlockall$auto(0x7) mprotect$auto(0x110c230000, 0xa588, 0x200000006) mremap$auto(0x110c231000, 0x0, 0x101, 0x3, 0x0) move_pages$auto(0x0, 0x9, 0x0, 0x0, 0x0, 0x0) msgctl$auto_IPC_RMID(0x1, 0x0, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000300)='/proc/mtrr\x00', 0x183100, 0x0) ioctl$auto(0x3, 0x40085400, 0x5) r5 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)) ioctl$auto_X86_IOC_RDMSR_REGS(0xffffffffffffffff, 0xc02063a0, &(0x7f0000000280)=[0x9, 0x7, 0x200, 0x6, 0x9474, 0x3, 0x7fff, 0x4]) fcntl$auto(r5, 0x402, 0x0) 5.006967735s ago: executing program 40 (id=2251): mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x25, 0x801, 0x0) r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000080), 0x88000, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/platform/usbip-vudc.0/usbip_sockfd\x00', 0x103841, 0x0) openat$auto_buffer_percent_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/tracing/buffer_percent\x00', 0x1, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/mm/transparent_hugepage/khugepaged/max_ptes_none\x00', 0x183042, 0x0) read$auto(r1, 0x0, 0x9) writev$auto(r0, &(0x7f0000000200)={0x0, 0x3}, 0x3) (fail_nth: 1) 0s ago: executing program 41 (id=2273): r0 = socket$nl_generic(0x10, 0x3, 0x10) setfsuid$auto(0xee00) r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002a40), r0) r2 = syz_genetlink_get_family_id$auto_ioam6(&(0x7f0000000040), r0) sendmsg$auto_IOAM6_CMD_DEL_NAMESPACE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80008880}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r2, 0x2, 0x70bd26, 0x25dfdbfb, {}, [@IOAM6_ATTR_NS_ID={0x6, 0x1, 0xe}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008080}, 0x40000c0) sendmsg$auto_NFSD_CMD_LISTENER_SET(r0, &(0x7f00000050c0)={0x0, 0x0, &(0x7f0000005080)={&(0x7f0000002a80)={0x14, r1, 0x1, 0x70bd21, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20004810}, 0x20008050) kernel console output (not intermixed with test programs): ges+0x1f0/0x5f0 [ 437.985377][T13662] __alloc_frozen_pages_noprof+0x193/0x2410 [ 437.985395][T13662] ? stack_trace_save+0x8e/0xc0 [ 437.985411][T13662] ? __pfx_stack_trace_save+0x10/0x10 [ 437.985428][T13662] ? stack_depot_save_flags+0x27/0x9c0 [ 437.985457][T13662] ? kasan_save_stack+0x3f/0x50 [ 437.985474][T13662] ? kasan_save_stack+0x30/0x50 [ 437.985490][T13662] ? kasan_save_track+0x14/0x30 [ 437.985507][T13662] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 437.985524][T13662] ? copy_page_range+0x4527/0x6ba0 [ 437.985538][T13662] ? copy_process+0x7451/0x7890 [ 437.985556][T13662] ? __do_sys_clone+0xd9/0x120 [ 437.985574][T13662] ? do_syscall_64+0xc9/0xf80 [ 437.985590][T13662] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 437.985613][T13662] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 437.985631][T13662] ? policy_nodemask+0xed/0x4f0 [ 437.985654][T13662] alloc_pages_mpol+0x1fb/0x550 [ 437.985676][T13662] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 437.985701][T13662] alloc_pages_noprof+0x131/0x390 [ 437.985722][T13662] pte_alloc_one+0x1e/0x3e0 [ 437.985741][T13662] __pte_alloc+0x6d/0x3f0 [ 437.985761][T13662] ? __pfx___pte_alloc+0x10/0x10 [ 437.985780][T13662] ? _raw_spin_unlock+0x28/0x50 [ 437.985795][T13662] ? __pmd_alloc+0x6aa/0x9c0 [ 437.985818][T13662] copy_page_range+0x3f17/0x6ba0 [ 437.985836][T13662] ? __lock_acquire+0x4a5/0x2630 [ 437.985871][T13662] ? __pfx_copy_page_range+0x10/0x10 [ 437.985892][T13662] ? mas_store+0x666/0xac0 [ 437.985917][T13662] ? __pfx_mas_store+0x10/0x10 [ 437.985946][T13662] dup_mmap+0xbea/0x1e20 [ 437.985966][T13662] ? __pfx_dup_mmap+0x10/0x10 [ 437.985993][T13662] copy_process+0x7451/0x7890 [ 437.986021][T13662] ? __pfx_copy_process+0x10/0x10 [ 437.986050][T13662] kernel_clone+0xfc/0x930 [ 437.986067][T13662] ? __pfx_futex_wait+0x10/0x10 [ 437.986082][T13662] ? __pfx_kernel_clone+0x10/0x10 [ 437.986112][T13662] __do_sys_clone+0xd9/0x120 [ 437.986131][T13662] ? __pfx___do_sys_clone+0x10/0x10 [ 437.986150][T13662] ? __sys_sendmsg+0x18f/0x220 [ 437.986177][T13662] ? xfd_validate_state+0x129/0x190 [ 437.986206][T13662] do_syscall_64+0xc9/0xf80 [ 437.986226][T13662] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 437.986241][T13662] RIP: 0033:0x7f90f459aeb9 [ 437.986258][T13662] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 437.986274][T13662] RSP: 002b:00007f90f5474fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 437.986290][T13662] RAX: ffffffffffffffda RBX: 00007f90f4816090 RCX: 00007f90f459aeb9 [ 437.986300][T13662] RDX: 0000200000000040 RSI: 0000200000000180 RDI: 0000000000000400 [ 437.986310][T13662] RBP: 00007f90f4608c1f R08: 0000200000000240 R09: 0000200000000240 [ 437.986319][T13662] R10: 0000200000000080 R11: 0000000000000206 R12: 0000000000000000 [ 437.986329][T13662] R13: 00007f90f4816128 R14: 00007f90f4816090 R15: 00007ffdce291168 [ 437.986349][T13662] [ 439.288100][T13689] usbip-vudc usbip-vudc.0: gadget not bound [ 439.360908][T13691] binder: 13690:13691 ioctl c018620c 0 returned -1 [ 439.435692][T13691] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1759'. [ 439.735733][T13704] netlink: 302 bytes leftover after parsing attributes in process `syz.4.1764'. [ 440.314643][T13724] usbip-vudc usbip-vudc.0: gadget not bound [ 441.967205][T13770] usbip-vudc usbip-vudc.0: gadget not bound [ 442.297982][T13782] FAULT_INJECTION: forcing a failure. [ 442.297982][T13782] name failslab, interval 1, probability 0, space 0, times 0 [ 442.438107][T13782] CPU: 0 UID: 0 PID: 13782 Comm: syz.2.1783 Tainted: G L syzkaller #0 PREEMPT(full) [ 442.438134][T13782] Tainted: [L]=SOFTLOCKUP [ 442.438140][T13782] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 442.438149][T13782] Call Trace: [ 442.438154][T13782] [ 442.438167][T13782] dump_stack_lvl+0x100/0x190 [ 442.438190][T13782] should_fail_ex.cold+0x5/0xa [ 442.438215][T13782] should_failslab+0xc2/0x120 [ 442.438236][T13782] ? ops_init+0x77/0x5f0 [ 442.438256][T13782] __kmalloc_noprof+0xf6/0x9c0 [ 442.438271][T13782] ? lockdep_init_map_type+0x5c/0x250 [ 442.438295][T13782] ? ops_init+0x77/0x5f0 [ 442.438314][T13782] ops_init+0x77/0x5f0 [ 442.438337][T13782] setup_net+0x118/0x3a0 [ 442.438351][T13782] ? __pfx_setup_net+0x10/0x10 [ 442.438363][T13782] ? lockdep_init_map_type+0x5c/0x250 [ 442.438384][T13782] ? mutex_init_lockep+0x110/0x150 [ 442.438407][T13782] copy_net_ns+0x46f/0x7c0 [ 442.438423][T13782] create_new_namespaces+0x3ea/0xab0 [ 442.438445][T13782] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 442.438463][T13782] ksys_unshare+0x455/0xab0 [ 442.438485][T13782] ? __pfx_ksys_unshare+0x10/0x10 [ 442.438505][T13782] ? xfd_validate_state+0x129/0x190 [ 442.438532][T13782] __x64_sys_unshare+0x31/0x40 [ 442.438552][T13782] do_syscall_64+0xc9/0xf80 [ 442.438571][T13782] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 442.438586][T13782] RIP: 0033:0x7fabe0d9aeb9 [ 442.438599][T13782] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 442.438613][T13782] RSP: 002b:00007fabe1c07028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 442.438628][T13782] RAX: ffffffffffffffda RBX: 00007fabe1016090 RCX: 00007fabe0d9aeb9 [ 442.438638][T13782] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 442.438646][T13782] RBP: 00007fabe0e08c1f R08: 0000000000000000 R09: 0000000000000000 [ 442.438655][T13782] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 442.438663][T13782] R13: 00007fabe1016128 R14: 00007fabe1016090 R15: 00007ffdfe996df8 [ 442.438683][T13782] [ 443.693543][T13799] FAULT_INJECTION: forcing a failure. [ 443.693543][T13799] name failslab, interval 1, probability 0, space 0, times 0 [ 443.738166][T13799] CPU: 0 UID: 0 PID: 13799 Comm: syz.0.1788 Tainted: G L syzkaller #0 PREEMPT(full) [ 443.738195][T13799] Tainted: [L]=SOFTLOCKUP [ 443.738201][T13799] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 443.738211][T13799] Call Trace: [ 443.738217][T13799] [ 443.738222][T13799] dump_stack_lvl+0x100/0x190 [ 443.738246][T13799] should_fail_ex.cold+0x5/0xa [ 443.738272][T13799] should_failslab+0xc2/0x120 [ 443.738293][T13799] __kmalloc_cache_noprof+0x80/0x810 [ 443.738308][T13799] ? mutex_init_lockep+0x110/0x150 [ 443.738328][T13799] ? tracing_open+0x32a/0xe00 [ 443.738351][T13799] ? tracing_open+0x32a/0xe00 [ 443.738371][T13799] tracing_open+0x32a/0xe00 [ 443.738394][T13799] do_dentry_open+0x73e/0x1570 [ 443.738413][T13799] ? __pfx_tracing_open+0x10/0x10 [ 443.738433][T13799] ? security_inode_permission+0xbf/0x250 [ 443.738457][T13799] vfs_open+0x82/0x3f0 [ 443.738480][T13799] path_openat+0x21dc/0x3120 [ 443.738503][T13799] ? __pfx_path_openat+0x10/0x10 [ 443.738527][T13799] do_filp_open+0x1f7/0x420 [ 443.738547][T13799] ? __pfx_do_filp_open+0x10/0x10 [ 443.738577][T13799] ? _raw_spin_unlock+0x28/0x50 [ 443.738592][T13799] ? alloc_fd+0x476/0x790 [ 443.738614][T13799] do_sys_openat2+0x12e/0x220 [ 443.738635][T13799] ? __pfx_do_sys_openat2+0x10/0x10 [ 443.738665][T13799] __x64_sys_openat+0x12d/0x210 [ 443.738688][T13799] ? __pfx___x64_sys_openat+0x10/0x10 [ 443.738709][T13799] ? xfd_validate_state+0x129/0x190 [ 443.738738][T13799] do_syscall_64+0xc9/0xf80 [ 443.738757][T13799] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 443.738772][T13799] RIP: 0033:0x7f646d99aeb9 [ 443.738785][T13799] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 443.738799][T13799] RSP: 002b:00007f646e81b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 443.738814][T13799] RAX: ffffffffffffffda RBX: 00007f646dc15fa0 RCX: 00007f646d99aeb9 [ 443.738825][T13799] RDX: 1a6b75d638828712 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 443.738834][T13799] RBP: 00007f646da08c1f R08: 0000000000000000 R09: 0000000000000000 [ 443.738844][T13799] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 443.738853][T13799] R13: 00007f646dc16038 R14: 00007f646dc15fa0 R15: 00007ffe6598a378 [ 443.738872][T13799] [ 444.237999][T13810] usbip-vudc usbip-vudc.0: gadget not bound [ 444.873218][T13825] WARNING! power/level is deprecated; use power/control instead [ 444.914367][T13825] netlink: 'syz.0.1795': attribute type 7 has an invalid length. [ 444.948865][T13825] netlink: 17 bytes leftover after parsing attributes in process `syz.0.1795'. [ 444.978677][T13827] blkio.reset_stats is deprecated [ 445.117982][T13829] Invalid ELF header magic: != ELF [ 445.280379][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 445.286819][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 447.568106][T13892] cgroup: fork rejected by pids controller in /syz0 [ 451.057186][T14008] FAULT_INJECTION: forcing a failure. [ 451.057186][T14008] name failslab, interval 1, probability 0, space 0, times 0 [ 451.085321][T14008] CPU: 0 UID: 0 PID: 14008 Comm: syz.0.1836 Tainted: G L syzkaller #0 PREEMPT(full) [ 451.085347][T14008] Tainted: [L]=SOFTLOCKUP [ 451.085352][T14008] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 451.085361][T14008] Call Trace: [ 451.085367][T14008] [ 451.085372][T14008] dump_stack_lvl+0x100/0x190 [ 451.085396][T14008] should_fail_ex.cold+0x5/0xa [ 451.085419][T14008] should_failslab+0xc2/0x120 [ 451.085444][T14008] __kvmalloc_node_noprof+0x101/0xac0 [ 451.085463][T14008] ? seq_read_iter+0x819/0x1270 [ 451.085476][T14008] ? aa_file_perm+0x268/0x1540 [ 451.085493][T14008] ? seq_read_iter+0x819/0x1270 [ 451.085506][T14008] seq_read_iter+0x819/0x1270 [ 451.085518][T14008] ? aa_file_perm+0x277/0x1540 [ 451.085539][T14008] seq_read+0x33b/0x4c0 [ 451.085553][T14008] ? __pfx_seq_read+0x10/0x10 [ 451.085570][T14008] ? lock_acquire+0x17c/0x330 [ 451.085591][T14008] ? rcu_is_watching+0x12/0xc0 [ 451.085608][T14008] ? __pfx_seq_read+0x10/0x10 [ 451.085621][T14008] proc_reg_read+0x240/0x330 [ 451.085641][T14008] ? __pfx_proc_reg_read+0x10/0x10 [ 451.085660][T14008] vfs_read+0x1e4/0xb30 [ 451.085678][T14008] ? __pfx_vfs_read+0x10/0x10 [ 451.085692][T14008] ? find_held_lock+0x2b/0x80 [ 451.085705][T14008] ? __fget_files+0x215/0x3d0 [ 451.085723][T14008] ? __fget_files+0x21f/0x3d0 [ 451.085743][T14008] ksys_read+0x12a/0x250 [ 451.085758][T14008] ? __pfx_ksys_read+0x10/0x10 [ 451.085778][T14008] do_syscall_64+0xc9/0xf80 [ 451.085797][T14008] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 451.085811][T14008] RIP: 0033:0x7f646d99aeb9 [ 451.085825][T14008] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 451.085838][T14008] RSP: 002b:00007f646e81b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 451.085852][T14008] RAX: ffffffffffffffda RBX: 00007f646dc15fa0 RCX: 00007f646d99aeb9 [ 451.085862][T14008] RDX: 00000000000000d1 RSI: 0000200000000040 RDI: 0000000000000003 [ 451.085870][T14008] RBP: 00007f646e81b090 R08: 0000000000000000 R09: 0000000000000000 [ 451.085879][T14008] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 451.085887][T14008] R13: 00007f646dc16038 R14: 00007f646dc15fa0 R15: 00007ffe6598a378 [ 451.085905][T14008] [ 451.929512][T14021] random: crng reseeded on system resumption [ 454.656110][T14093] netlink: 472 bytes leftover after parsing attributes in process `syz.0.1852'. [ 454.950452][T14104] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 456.313589][T14143] device-mapper: ioctl: device name cannot be "control", ".", or ".." [ 457.983331][ T5829] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 457.995551][ T5829] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 458.004268][ T5829] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 458.013543][ T5829] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 458.021119][ T5829] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 458.267841][T14182] random: crng reseeded on system resumption [ 458.326160][T14184] FAULT_INJECTION: forcing a failure. [ 458.326160][T14184] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 458.405399][T14184] CPU: 0 UID: 0 PID: 14184 Comm: syz.0.1875 Tainted: G L syzkaller #0 PREEMPT(full) [ 458.405424][T14184] Tainted: [L]=SOFTLOCKUP [ 458.405429][T14184] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 458.405437][T14184] Call Trace: [ 458.405447][T14184] [ 458.405453][T14184] dump_stack_lvl+0x100/0x190 [ 458.405474][T14184] should_fail_ex.cold+0x5/0xa [ 458.405497][T14184] _copy_to_user+0x32/0xd0 [ 458.405520][T14184] simple_read_from_buffer+0xcb/0x170 [ 458.405536][T14184] proc_fail_nth_read+0x1af/0x230 [ 458.405554][T14184] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 458.405571][T14184] ? rw_verify_area+0xce/0x6d0 [ 458.405585][T14184] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 458.405601][T14184] vfs_read+0x1e4/0xb30 [ 458.405618][T14184] ? __pfx_vfs_read+0x10/0x10 [ 458.405631][T14184] ? find_held_lock+0x2b/0x80 [ 458.405645][T14184] ? __fget_files+0x215/0x3d0 [ 458.405664][T14184] ? __fget_files+0x21f/0x3d0 [ 458.405703][T14184] ksys_read+0x12a/0x250 [ 458.405718][T14184] ? __pfx_ksys_read+0x10/0x10 [ 458.405734][T14184] ? fdget+0x18b/0x210 [ 458.405751][T14184] do_syscall_64+0xc9/0xf80 [ 458.405769][T14184] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 458.405783][T14184] RIP: 0033:0x7f646d95b78e [ 458.405795][T14184] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 458.405808][T14184] RSP: 002b:00007f646e7f9fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 458.405823][T14184] RAX: ffffffffffffffda RBX: 00007f646e7fa6c0 RCX: 00007f646d95b78e [ 458.405832][T14184] RDX: 000000000000000f RSI: 00007f646e7fa0a0 RDI: 0000000000000005 [ 458.405840][T14184] RBP: 00007f646e7fa090 R08: 0000000000000000 R09: 0000000000000000 [ 458.405848][T14184] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 458.405856][T14184] R13: 00007f646dc16128 R14: 00007f646dc16090 R15: 00007ffe6598a378 [ 458.405875][T14184] [ 458.708326][T14190] random: crng reseeded on system resumption [ 458.865582][T14196] sctp: [Deprecated]: syz.0.1878 (pid 14196) Use of struct sctp_assoc_value in delayed_ack socket option. [ 458.865582][T14196] Use struct sctp_sack_info instead [ 459.050841][T14175] chnl_net:caif_netlink_parms(): no params data found [ 459.460921][T14175] bridge0: port 1(bridge_slave_0) entered blocking state [ 459.502487][T14175] bridge0: port 1(bridge_slave_0) entered disabled state [ 459.531369][T14175] bridge_slave_0: entered allmulticast mode [ 459.560046][T14175] bridge_slave_0: entered promiscuous mode [ 459.593489][T14175] bridge0: port 2(bridge_slave_1) entered blocking state [ 459.621775][T14175] bridge0: port 2(bridge_slave_1) entered disabled state [ 459.671076][T14175] bridge_slave_1: entered allmulticast mode [ 459.707413][T14175] bridge_slave_1: entered promiscuous mode [ 459.806812][T14175] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 459.849944][T14175] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 459.959479][T14175] team0: Port device team_slave_0 added [ 459.991491][T14175] team0: Port device team_slave_1 added [ 460.079811][ T5829] Bluetooth: hci3: command tx timeout [ 460.094930][T14175] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 460.128882][T14175] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 460.280796][T14175] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 460.353412][T14175] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 460.393364][T14175] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 460.445786][T14175] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 460.588591][T14175] hsr_slave_0: entered promiscuous mode [ 460.608026][T14175] hsr_slave_1: entered promiscuous mode [ 461.349054][T14175] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 461.405685][T14175] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 461.452350][T14175] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 461.502567][T14175] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 461.825077][T14175] 8021q: adding VLAN 0 to HW filter on device bond0 [ 461.896291][T14175] 8021q: adding VLAN 0 to HW filter on device team0 [ 461.931378][T14263] __vm_enough_memory: pid: 14263, comm: syz.0.1893, bytes: 4398046511104 not enough memory for the allocation [ 461.972955][T10391] bridge0: port 1(bridge_slave_0) entered blocking state [ 461.980374][T10391] bridge0: port 1(bridge_slave_0) entered forwarding state [ 462.029819][T10391] bridge0: port 2(bridge_slave_1) entered blocking state [ 462.037108][T10391] bridge0: port 2(bridge_slave_1) entered forwarding state [ 462.155364][ T5829] Bluetooth: hci3: command tx timeout [ 462.178210][T14272] __vm_enough_memory: pid: 14272, comm: syz.1.1896, bytes: 4398046511104 not enough memory for the allocation [ 462.201719][T14175] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 462.245738][T14175] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 462.917322][T14175] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 463.587573][T14307] FAULT_INJECTION: forcing a failure. [ 463.587573][T14307] name failslab, interval 1, probability 0, space 0, times 0 [ 463.668584][T14307] CPU: 0 UID: 0 PID: 14307 Comm: syz.1.1904 Tainted: G L syzkaller #0 PREEMPT(full) [ 463.668616][T14307] Tainted: [L]=SOFTLOCKUP [ 463.668621][T14307] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 463.668630][T14307] Call Trace: [ 463.668635][T14307] [ 463.668641][T14307] dump_stack_lvl+0x100/0x190 [ 463.668662][T14307] should_fail_ex.cold+0x5/0xa [ 463.668684][T14307] should_failslab+0xc2/0x120 [ 463.668704][T14307] ? tomoyo_encode2+0xfb/0x3c0 [ 463.668718][T14307] __kmalloc_noprof+0xf6/0x9c0 [ 463.668737][T14307] ? tomoyo_encode2+0xfb/0x3c0 [ 463.668749][T14307] tomoyo_encode2+0xfb/0x3c0 [ 463.668765][T14307] tomoyo_encode+0x29/0x50 [ 463.668777][T14307] tomoyo_realpath_from_path+0x18c/0x690 [ 463.668796][T14307] tomoyo_path_number_perm+0x23c/0x580 [ 463.668814][T14307] ? tomoyo_path_number_perm+0x22e/0x580 [ 463.668834][T14307] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 463.668875][T14307] ? find_held_lock+0x2b/0x80 [ 463.668889][T14307] ? hook_file_ioctl_common+0x146/0x410 [ 463.668908][T14307] ? __fget_files+0x215/0x3d0 [ 463.668927][T14307] ? __fget_files+0x21f/0x3d0 [ 463.668944][T14307] security_file_ioctl+0xd3/0x230 [ 463.668965][T14307] __x64_sys_ioctl+0xb7/0x210 [ 463.668988][T14307] do_syscall_64+0xc9/0xf80 [ 463.669006][T14307] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 463.669020][T14307] RIP: 0033:0x7f90f459aeb9 [ 463.669032][T14307] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 463.669046][T14307] RSP: 002b:00007f90f5496028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 463.669060][T14307] RAX: ffffffffffffffda RBX: 00007f90f4815fa0 RCX: 00007f90f459aeb9 [ 463.669069][T14307] RDX: 0000200000000080 RSI: 0000000041015500 RDI: 0000000000000003 [ 463.669077][T14307] RBP: 00007f90f5496090 R08: 0000000000000000 R09: 0000000000000000 [ 463.669085][T14307] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 463.669093][T14307] R13: 00007f90f4816038 R14: 00007f90f4815fa0 R15: 00007ffdce291168 [ 463.669112][T14307] [ 463.937857][T14307] ERROR: Out of memory at tomoyo_realpath_from_path. [ 464.288204][ T5829] Bluetooth: hci3: command tx timeout [ 464.676282][T14175] veth0_vlan: entered promiscuous mode [ 464.760003][T14175] veth1_vlan: entered promiscuous mode [ 464.841744][T14175] veth0_macvtap: entered promiscuous mode [ 464.879074][T14175] veth1_macvtap: entered promiscuous mode [ 464.953187][T14175] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 465.004200][T14175] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 465.124629][ T80] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 465.205795][ T80] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 465.237735][ T80] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 465.324309][ T80] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 465.433111][T14351] netlink: 472 bytes leftover after parsing attributes in process `syz.0.1915'. [ 465.582009][ T8233] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 465.616406][ T8233] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 465.666472][T14354] FAULT_INJECTION: forcing a failure. [ 465.666472][T14354] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 465.689297][T10390] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 465.708887][T10390] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 465.726500][T14354] CPU: 0 UID: 0 PID: 14354 Comm: syz.0.1916 Tainted: G L syzkaller #0 PREEMPT(full) [ 465.726524][T14354] Tainted: [L]=SOFTLOCKUP [ 465.726529][T14354] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 465.726537][T14354] Call Trace: [ 465.726542][T14354] [ 465.726548][T14354] dump_stack_lvl+0x100/0x190 [ 465.726569][T14354] should_fail_ex.cold+0x5/0xa [ 465.726591][T14354] _copy_to_iter+0x1f3/0x1720 [ 465.726611][T14354] ? __pfx_sk_busy_loop_end+0x10/0x10 [ 465.726628][T14354] ? __pfx___skb_try_recv_datagram+0x10/0x10 [ 465.726647][T14354] ? __pfx__copy_to_iter+0x10/0x10 [ 465.726665][T14354] ? __kernel_text_address+0xd/0x30 [ 465.726689][T14354] ? __skb_recv_datagram+0x1b2/0x220 [ 465.726710][T14354] simple_copy_to_iter+0x46/0x90 [ 465.726726][T14354] __skb_datagram_iter+0x129/0x900 [ 465.726742][T14354] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 465.726760][T14354] ? skb_recv_datagram+0x88/0xc0 [ 465.726779][T14354] skb_copy_datagram_iter+0x9f/0x210 [ 465.726797][T14354] netlink_recvmsg+0x27e/0xa90 [ 465.726819][T14354] ? __pfx_netlink_recvmsg+0x10/0x10 [ 465.726841][T14354] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 465.726863][T14354] sock_recvmsg+0x1f9/0x250 [ 465.726878][T14354] sock_read_iter+0x2c6/0x3c0 [ 465.726893][T14354] ? __pfx_sock_read_iter+0x10/0x10 [ 465.726914][T14354] ? bpf_lsm_file_permission+0x9/0x10 [ 465.726933][T14354] ? security_file_permission+0x76/0x210 [ 465.726955][T14354] ? rw_verify_area+0xce/0x6d0 [ 465.726969][T14354] ? __pfx_sock_read_iter+0x10/0x10 [ 465.726984][T14354] vfs_read+0x957/0xb30 [ 465.727001][T14354] ? __pfx_vfs_read+0x10/0x10 [ 465.727018][T14354] ? find_held_lock+0x2b/0x80 [ 465.727043][T14354] ksys_read+0x1f8/0x250 [ 465.727058][T14354] ? __pfx_ksys_read+0x10/0x10 [ 465.727078][T14354] do_syscall_64+0xc9/0xf80 [ 465.727097][T14354] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 465.727111][T14354] RIP: 0033:0x7f646d99aeb9 [ 465.727123][T14354] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 465.727136][T14354] RSP: 002b:00007f646e81b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 465.727150][T14354] RAX: ffffffffffffffda RBX: 00007f646dc15fa0 RCX: 00007f646d99aeb9 [ 465.727159][T14354] RDX: 0000000000000020 RSI: 0000000000000000 RDI: 0000000000000006 [ 465.727174][T14354] RBP: 00007f646e81b090 R08: 0000000000000000 R09: 0000000000000000 [ 465.727182][T14354] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 465.727191][T14354] R13: 00007f646dc16038 R14: 00007f646dc15fa0 R15: 00007ffe6598a378 [ 465.727209][T14354] [ 466.191766][T14360] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1870'. [ 466.365965][ T5829] Bluetooth: hci3: command tx timeout [ 467.434039][T14398] XFS: Clearing xfsstats [ 468.020143][T14407] bond0: invalid ARP target specified [ 468.090450][T14410] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1929'. [ 468.172369][T14410] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 468.190361][ T30] audit: type=1800 audit(4294967515.140:21): pid=14413 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1931" name="members" dev="configfs" ino=58563 res=0 errno=0 [ 468.240059][T14410] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 468.303599][T14410] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 468.328872][T14410] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 468.378619][T14423] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1933'. [ 468.434230][T14423] ipvlan0: entered promiscuous mode [ 468.441676][T14423] ipvlan0: entered allmulticast mode [ 468.535372][T14423] veth0_vlan: entered allmulticast mode [ 468.877755][T14439] vivid-007: ================= START STATUS ================= [ 468.934675][T14439] vivid-007: Generate PTS: true [ 468.964070][T14439] vivid-007: Generate SCR: true [ 468.969017][T14439] tpg source WxH: 320x240 (Y'CbCr) [ 469.039681][T14439] tpg field: 1 [ 469.063936][T14439] tpg crop: (0,0)/320x240 [ 469.098095][T14439] tpg compose: (0,0)/320x240 [ 469.123617][T14439] tpg colorspace: 8 [ 469.139186][T14439] tpg transfer function: 0/0 [ 469.181382][T14439] tpg Y'CbCr encoding: 0/0 [ 469.207409][T14439] tpg quantization: 0/0 [ 469.237982][T14439] tpg RGB range: 0/2 [ 469.267472][T14439] vivid-007: ================== END STATUS ================== [ 469.867654][T14460] random: crng reseeded on system resumption [ 470.610745][T14489] FAULT_INJECTION: forcing a failure. [ 470.610745][T14489] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 470.686958][T14489] CPU: 0 UID: 0 PID: 14489 Comm: syz.5.1947 Tainted: G L syzkaller #0 PREEMPT(full) [ 470.686989][T14489] Tainted: [L]=SOFTLOCKUP [ 470.686994][T14489] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 470.687002][T14489] Call Trace: [ 470.687007][T14489] [ 470.687013][T14489] dump_stack_lvl+0x100/0x190 [ 470.687034][T14489] should_fail_ex.cold+0x5/0xa [ 470.687054][T14489] ? prepare_alloc_pages+0x16d/0x5f0 [ 470.687076][T14489] should_fail_alloc_page+0xeb/0x140 [ 470.687097][T14489] prepare_alloc_pages+0x1f0/0x5f0 [ 470.687117][T14489] ? unwind_get_return_address+0x59/0xa0 [ 470.687144][T14489] __alloc_frozen_pages_noprof+0x193/0x2410 [ 470.687163][T14489] ? __lock_acquire+0x4a5/0x2630 [ 470.687182][T14489] ? stack_trace_save+0x8e/0xc0 [ 470.687198][T14489] ? __pfx_stack_trace_save+0x10/0x10 [ 470.687214][T14489] ? css_rstat_updated+0x1ce/0x5a0 [ 470.687230][T14489] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 470.687248][T14489] ? register_lock_class+0x40/0x560 [ 470.687266][T14489] ? find_held_lock+0x2b/0x80 [ 470.687279][T14489] ? ima_match_policy+0x8c4/0x2350 [ 470.687304][T14489] ? __lock_acquire+0x4a5/0x2630 [ 470.687322][T14489] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 470.687337][T14489] ? policy_nodemask+0xed/0x4f0 [ 470.687359][T14489] alloc_pages_mpol+0x1fb/0x550 [ 470.687378][T14489] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 470.687397][T14489] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 470.687421][T14489] folio_alloc_mpol_noprof+0x36/0x340 [ 470.687443][T14489] alloc_migration_target_by_mpol+0x2c1/0x5d0 [ 470.687466][T14489] ? __pfx_alloc_migration_target_by_mpol+0x10/0x10 [ 470.687489][T14489] ? __pfx___might_resched+0x10/0x10 [ 470.687513][T14489] migrate_pages_batch+0x4f2/0x4530 [ 470.687535][T14489] ? __pfx_alloc_migration_target_by_mpol+0x10/0x10 [ 470.687561][T14489] ? __pfx_queue_folios_pte_range+0x10/0x10 [ 470.687582][T14489] ? walk_pgd_range+0x1115/0x1eb0 [ 470.687599][T14489] ? __pfx_migrate_pages_batch+0x10/0x10 [ 470.687632][T14489] migrate_pages_sync+0x12c/0x880 [ 470.687653][T14489] ? __pfx_alloc_migration_target_by_mpol+0x10/0x10 [ 470.687680][T14489] ? __pfx_migrate_pages_sync+0x10/0x10 [ 470.687698][T14489] ? __pfx_queue_pages_test_walk+0x10/0x10 [ 470.687726][T14489] migrate_pages+0x1a5b/0x2810 [ 470.687750][T14489] ? __pfx_alloc_migration_target_by_mpol+0x10/0x10 [ 470.687776][T14489] ? __pfx_migrate_pages+0x10/0x10 [ 470.687796][T14489] ? mas_next_slot+0x1003/0x18b0 [ 470.687814][T14489] ? find_held_lock+0x2b/0x80 [ 470.687828][T14489] ? do_mbind+0x557/0xfd0 [ 470.687849][T14489] ? up_write+0x290/0x4f0 [ 470.687870][T14489] do_mbind+0x5a6/0xfd0 [ 470.687888][T14489] ? __pfx_do_mbind+0x10/0x10 [ 470.687899][T14489] ? find_held_lock+0x2b/0x80 [ 470.687912][T14489] ? ksys_write+0x190/0x250 [ 470.687926][T14489] ? ksys_write+0x190/0x250 [ 470.687949][T14489] ? __pfx_get_nodes+0x10/0x10 [ 470.687965][T14489] ? __fget_files+0x21f/0x3d0 [ 470.687984][T14489] kernel_mbind+0x1b7/0x200 [ 470.687998][T14489] ? __pfx_kernel_mbind+0x10/0x10 [ 470.688017][T14489] do_syscall_64+0xc9/0xf80 [ 470.688035][T14489] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 470.688049][T14489] RIP: 0033:0x7fbe89f9aeb9 [ 470.688060][T14489] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 470.688074][T14489] RSP: 002b:00007fbe8aeb0028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed [ 470.688088][T14489] RAX: ffffffffffffffda RBX: 00007fbe8a216090 RCX: 00007fbe89f9aeb9 [ 470.688097][T14489] RDX: 0000000100000000 RSI: 8000000000000002 RDI: 000000000000f000 [ 470.688106][T14489] RBP: 00007fbe8aeb0090 R08: 0000000000000006 R09: 0000000000000002 [ 470.688114][T14489] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 470.688122][T14489] R13: 00007fbe8a216128 R14: 00007fbe8a216090 R15: 00007ffda85feee8 [ 470.688141][T14489] [ 471.531635][T14497] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 472.728541][T14522] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !PjE r҄y*"l-y– [ 475.122785][T14591] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1973'. [ 475.568692][T14598] netlink: 'syz.5.1977': attribute type 2 has an invalid length. [ 476.020507][T14611] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(2) [ 476.457002][T14617] FAULT_INJECTION: forcing a failure. [ 476.457002][T14617] name failslab, interval 1, probability 0, space 0, times 0 [ 476.476710][T14617] CPU: 0 UID: 0 PID: 14617 Comm: syz.5.1981 Tainted: G L syzkaller #0 PREEMPT(full) [ 476.476738][T14617] Tainted: [L]=SOFTLOCKUP [ 476.476744][T14617] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 476.476754][T14617] Call Trace: [ 476.476760][T14617] [ 476.476767][T14617] dump_stack_lvl+0x100/0x190 [ 476.476791][T14617] should_fail_ex.cold+0x5/0xa [ 476.476816][T14617] should_failslab+0xc2/0x120 [ 476.476844][T14617] kmem_cache_alloc_noprof+0x83/0x780 [ 476.476864][T14617] ? __pfx_acpi_ut_track_stack_ptr+0x10/0x10 [ 476.476886][T14617] ? acpi_ut_create_generic_state+0x61/0xc0 [ 476.476909][T14617] ? acpi_ut_create_generic_state+0x61/0xc0 [ 476.476926][T14617] acpi_ut_create_generic_state+0x61/0xc0 [ 476.476945][T14617] acpi_ps_push_scope+0x42/0x280 [ 476.476967][T14617] acpi_ps_parse_loop+0x334/0x24a0 [ 476.476991][T14617] ? __pfx_acpi_ps_parse_loop+0x10/0x10 [ 476.477008][T14617] ? kmem_cache_alloc_noprof+0x2ff/0x780 [ 476.477026][T14617] ? __pfx_acpi_ut_track_stack_ptr+0x10/0x10 [ 476.477045][T14617] ? acpi_ut_create_thread_state+0x6d/0x170 [ 476.477073][T14617] acpi_ps_parse_aml+0x81e/0x1120 [ 476.477095][T14617] acpi_ps_execute_method+0x5c4/0xe90 [ 476.477120][T14617] acpi_ns_evaluate+0x640/0x1670 [ 476.477146][T14617] acpi_evaluate_object+0x420/0xe00 [ 476.477163][T14617] ? kernfs_fop_read_iter+0x46c/0x610 [ 476.477178][T14617] ? vfs_read+0x825/0xb30 [ 476.477192][T14617] ? ksys_read+0x12a/0x250 [ 476.477210][T14617] ? __pfx_acpi_evaluate_object+0x10/0x10 [ 476.477229][T14617] ? __pfx___might_resched+0x10/0x10 [ 476.477255][T14617] acpi_evaluate_integer+0xdf/0x220 [ 476.477271][T14617] ? __pfx_acpi_evaluate_integer+0x10/0x10 [ 476.477293][T14617] ? __pfx_status_show+0x10/0x10 [ 476.477309][T14617] status_show+0xa0/0x120 [ 476.477326][T14617] ? __pfx_status_show+0x10/0x10 [ 476.477348][T14617] dev_attr_show+0x52/0xa0 [ 476.477368][T14617] ? __pfx_dev_attr_show+0x10/0x10 [ 476.477387][T14617] sysfs_kf_seq_show+0x217/0x3a0 [ 476.477409][T14617] seq_read_iter+0x32f/0x1270 [ 476.477433][T14617] kernfs_fop_read_iter+0x46c/0x610 [ 476.477449][T14617] ? rw_verify_area+0xce/0x6d0 [ 476.477463][T14617] ? __pfx_kernfs_fop_read_iter+0x10/0x10 [ 476.477480][T14617] vfs_read+0x825/0xb30 [ 476.477498][T14617] ? __pfx_vfs_read+0x10/0x10 [ 476.477512][T14617] ? find_held_lock+0x2b/0x80 [ 476.477539][T14617] ksys_read+0x12a/0x250 [ 476.477554][T14617] ? __pfx_ksys_read+0x10/0x10 [ 476.477576][T14617] do_syscall_64+0xc9/0xf80 [ 476.477596][T14617] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 476.477611][T14617] RIP: 0033:0x7fbe89f9aeb9 [ 476.477624][T14617] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 476.477649][T14617] RSP: 002b:00007fbe8aed1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 476.477666][T14617] RAX: ffffffffffffffda RBX: 00007fbe8a215fa0 RCX: 00007fbe89f9aeb9 [ 476.477676][T14617] RDX: 000000000000007a RSI: 0000200000000140 RDI: 0000000000000004 [ 476.477686][T14617] RBP: 00007fbe8a008c1f R08: 0000000000000000 R09: 0000000000000000 [ 476.477695][T14617] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 476.477705][T14617] R13: 00007fbe8a216038 R14: 00007fbe8a215fa0 R15: 00007ffda85feee8 [ 476.477725][T14617] [ 476.477857][T14617] ACPI Error: [ 476.990053][T14625] netlink: set zone limit has 8 unknown bytes [ 477.028771][T14617] Aborting method \_SB.LNKA._STA due to previous error (AE_NO_MEMORY) (20250807/psparse-529) [ 477.772657][T14650] FAULT_INJECTION: forcing a failure. [ 477.772657][T14650] name failslab, interval 1, probability 0, space 0, times 0 [ 477.843936][T14650] CPU: 0 UID: 0 PID: 14650 Comm: syz.5.1991 Tainted: G L syzkaller #0 PREEMPT(full) [ 477.843964][T14650] Tainted: [L]=SOFTLOCKUP [ 477.843969][T14650] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 477.843979][T14650] Call Trace: [ 477.843985][T14650] [ 477.843991][T14650] dump_stack_lvl+0x100/0x190 [ 477.844014][T14650] should_fail_ex.cold+0x5/0xa [ 477.844039][T14650] should_failslab+0xc2/0x120 [ 477.844064][T14650] ? tomoyo_realpath_from_path+0xb6/0x690 [ 477.844080][T14650] __kmalloc_noprof+0xf6/0x9c0 [ 477.844094][T14650] ? kfree+0x2a9/0x690 [ 477.844113][T14650] ? tomoyo_realpath_from_path+0xb6/0x690 [ 477.844128][T14650] tomoyo_realpath_from_path+0xb6/0x690 [ 477.844148][T14650] tomoyo_check_open_permission+0x2af/0x3c0 [ 477.844170][T14650] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 477.844210][T14650] ? do_raw_spin_lock+0x128/0x260 [ 477.844232][T14650] ? path_get+0x61/0x80 [ 477.844252][T14650] tomoyo_file_open+0x6b/0x90 [ 477.844287][T14650] security_file_open+0xb5/0x1e0 [ 477.844307][T14650] do_dentry_open+0x58c/0x1570 [ 477.844327][T14650] ? security_inode_permission+0xbf/0x250 [ 477.844352][T14650] vfs_open+0x82/0x3f0 [ 477.844376][T14650] path_openat+0x21dc/0x3120 [ 477.844400][T14650] ? __pfx_path_openat+0x10/0x10 [ 477.844423][T14650] do_filp_open+0x1f7/0x420 [ 477.844442][T14650] ? __pfx_do_filp_open+0x10/0x10 [ 477.844472][T14650] ? _raw_spin_unlock+0x28/0x50 [ 477.844486][T14650] ? alloc_fd+0x476/0x790 [ 477.844508][T14650] do_sys_openat2+0x12e/0x220 [ 477.844529][T14650] ? __pfx_do_sys_openat2+0x10/0x10 [ 477.844558][T14650] __x64_sys_openat+0x12d/0x210 [ 477.844581][T14650] ? __pfx___x64_sys_openat+0x10/0x10 [ 477.844601][T14650] ? xfd_validate_state+0x129/0x190 [ 477.844630][T14650] do_syscall_64+0xc9/0xf80 [ 477.844649][T14650] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 477.844664][T14650] RIP: 0033:0x7fbe89f9aeb9 [ 477.844676][T14650] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 477.844691][T14650] RSP: 002b:00007fbe8aed1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 477.844706][T14650] RAX: ffffffffffffffda RBX: 00007fbe8a215fa0 RCX: 00007fbe89f9aeb9 [ 477.844716][T14650] RDX: 0000000000080800 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 477.844725][T14650] RBP: 00007fbe8a008c1f R08: 0000000000000000 R09: 0000000000000000 [ 477.844734][T14650] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 477.844743][T14650] R13: 00007fbe8a216038 R14: 00007fbe8a215fa0 R15: 00007ffda85feee8 [ 477.844763][T14650] [ 477.844791][T14650] ERROR: Out of memory at tomoyo_realpath_from_path. [ 478.344818][ T30] audit: type=1326 audit(4294967525.260:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14652 comm="syz.1.1993" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f90f459aeb9 code=0x0 [ 478.370584][T14655] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input28 [ 479.981186][T14699] FAULT_INJECTION: forcing a failure. [ 479.981186][T14699] name failslab, interval 1, probability 0, space 0, times 0 [ 480.039569][T14699] CPU: 0 UID: 0 PID: 14699 Comm: syz.1.2008 Tainted: G L syzkaller #0 PREEMPT(full) [ 480.039612][T14699] Tainted: [L]=SOFTLOCKUP [ 480.039622][T14699] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 480.039638][T14699] Call Trace: [ 480.039647][T14699] [ 480.039657][T14699] dump_stack_lvl+0x100/0x190 [ 480.039695][T14699] should_fail_ex.cold+0x5/0xa [ 480.039741][T14699] should_failslab+0xc2/0x120 [ 480.039781][T14699] __kvmalloc_node_noprof+0x101/0xac0 [ 480.039817][T14699] ? alloc_pages_bulk_noprof+0x806/0x1500 [ 480.039850][T14699] ? seq_read_iter+0x819/0x1270 [ 480.039887][T14699] ? seq_read_iter+0x819/0x1270 [ 480.039912][T14699] seq_read_iter+0x819/0x1270 [ 480.039941][T14699] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 480.039980][T14699] ? copy_splice_read+0x1a3/0xb90 [ 480.040017][T14699] kernfs_fop_read_iter+0x46c/0x610 [ 480.040057][T14699] copy_splice_read+0x4ba/0xb90 [ 480.040097][T14699] ? __pfx_copy_splice_read+0x10/0x10 [ 480.040131][T14699] ? look_up_lock_class+0x64/0x120 [ 480.040159][T14699] ? lockdep_init_map_type+0x5c/0x250 [ 480.040179][T14699] ? __pfx_pipe_lock_cmp_fn+0x10/0x10 [ 480.040196][T14699] ? __pfx_copy_splice_read+0x10/0x10 [ 480.040210][T14699] do_splice_read+0x285/0x370 [ 480.040228][T14699] splice_direct_to_actor+0x2a1/0xa30 [ 480.040244][T14699] ? __pfx_direct_splice_actor+0x10/0x10 [ 480.040263][T14699] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 480.040284][T14699] do_splice_direct+0x174/0x240 [ 480.040299][T14699] ? __pfx_do_splice_direct+0x10/0x10 [ 480.040313][T14699] ? common_file_perm+0x1ab/0x4f0 [ 480.040333][T14699] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 480.040351][T14699] ? rw_verify_area+0xce/0x6d0 [ 480.040366][T14699] do_sendfile+0xadc/0xe20 [ 480.040385][T14699] ? __pfx_do_sendfile+0x10/0x10 [ 480.040399][T14699] ? __fget_files+0x21f/0x3d0 [ 480.040420][T14699] __x64_sys_sendfile64+0x1d8/0x220 [ 480.040437][T14699] ? ksys_write+0x1ac/0x250 [ 480.040452][T14699] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 480.040475][T14699] do_syscall_64+0xc9/0xf80 [ 480.040494][T14699] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 480.040508][T14699] RIP: 0033:0x7f90f459aeb9 [ 480.040519][T14699] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 480.040532][T14699] RSP: 002b:00007f90f5496028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 480.040547][T14699] RAX: ffffffffffffffda RBX: 00007f90f4815fa0 RCX: 00007f90f459aeb9 [ 480.040556][T14699] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000003 [ 480.040564][T14699] RBP: 00007f90f5496090 R08: 0000000000000000 R09: 0000000000000000 [ 480.040572][T14699] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000001 [ 480.040581][T14699] R13: 00007f90f4816038 R14: 00007f90f4815fa0 R15: 00007ffdce291168 [ 480.040599][T14699] [ 480.433743][T14704] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 480.517415][ T5829] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 481.678074][T14732] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2017'. [ 481.980986][T14737] FAULT_INJECTION: forcing a failure. [ 481.980986][T14737] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 482.014675][T14737] CPU: 0 UID: 0 PID: 14737 Comm: syz.0.2019 Tainted: G L syzkaller #0 PREEMPT(full) [ 482.014701][T14737] Tainted: [L]=SOFTLOCKUP [ 482.014706][T14737] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 482.014714][T14737] Call Trace: [ 482.014720][T14737] [ 482.014725][T14737] dump_stack_lvl+0x100/0x190 [ 482.014747][T14737] should_fail_ex.cold+0x5/0xa [ 482.014770][T14737] _copy_from_user+0x2e/0xd0 [ 482.014792][T14737] copy_msghdr_from_user+0x9f/0x4f0 [ 482.014810][T14737] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 482.014828][T14737] ? _kstrtoull+0x13c/0x1f0 [ 482.014842][T14737] ? __pfx__kstrtoull+0x10/0x10 [ 482.014863][T14737] ___sys_sendmsg+0x106/0x1e0 [ 482.014880][T14737] ? __pfx____sys_sendmsg+0x10/0x10 [ 482.014917][T14737] __sys_sendmmsg+0x205/0x430 [ 482.014939][T14737] ? __pfx___sys_sendmmsg+0x10/0x10 [ 482.014963][T14737] ? __fget_files+0x215/0x3d0 [ 482.014978][T14737] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 482.015004][T14737] ? fput+0x79/0x100 [ 482.015022][T14737] ? ksys_write+0x1ac/0x250 [ 482.015037][T14737] ? __pfx_ksys_write+0x10/0x10 [ 482.015055][T14737] __x64_sys_sendmmsg+0x9c/0x100 [ 482.015075][T14737] ? lockdep_hardirqs_on+0x78/0x100 [ 482.015091][T14737] do_syscall_64+0xc9/0xf80 [ 482.015109][T14737] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 482.015123][T14737] RIP: 0033:0x7f646d99aeb9 [ 482.015135][T14737] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 482.015149][T14737] RSP: 002b:00007f646e81b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 482.015163][T14737] RAX: ffffffffffffffda RBX: 00007f646dc15fa0 RCX: 00007f646d99aeb9 [ 482.015172][T14737] RDX: 00000000000009a6 RSI: 0000200000000000 RDI: 0000000000000003 [ 482.015181][T14737] RBP: 00007f646e81b090 R08: 0000000000000000 R09: 0000000000000000 [ 482.015189][T14737] R10: 000000000000e000 R11: 0000000000000246 R12: 0000000000000001 [ 482.015198][T14737] R13: 00007f646dc16038 R14: 00007f646dc15fa0 R15: 00007ffe6598a378 [ 482.015216][T14737] [ 482.319911][T14753] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2021'. [ 482.377486][T14755] binder: 14754:14755 ioctl c018620c 0 returned -1 [ 482.385906][T14755] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2022'. [ 482.657999][T14762] netlink: set zone limit has 8 unknown bytes [ 483.827703][T14792] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2033'. [ 485.216979][T14827] FAULT_INJECTION: forcing a failure. [ 485.216979][T14827] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 485.276115][T14827] CPU: 0 UID: 0 PID: 14827 Comm: syz.1.2042 Tainted: G L syzkaller #0 PREEMPT(full) [ 485.276140][T14827] Tainted: [L]=SOFTLOCKUP [ 485.276145][T14827] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 485.276154][T14827] Call Trace: [ 485.276159][T14827] [ 485.276165][T14827] dump_stack_lvl+0x100/0x190 [ 485.276186][T14827] should_fail_ex.cold+0x5/0xa [ 485.276209][T14827] _copy_from_user+0x2e/0xd0 [ 485.276230][T14827] move_addr_to_kernel+0x65/0x170 [ 485.276247][T14827] __sys_bind+0x11d/0x260 [ 485.276264][T14827] ? __pfx___sys_bind+0x10/0x10 [ 485.276279][T14827] ? __fget_files+0x21f/0x3d0 [ 485.276300][T14827] ? __pfx_ksys_write+0x10/0x10 [ 485.276320][T14827] __x64_sys_bind+0x72/0xb0 [ 485.276335][T14827] ? lockdep_hardirqs_on+0x78/0x100 [ 485.276351][T14827] do_syscall_64+0xc9/0xf80 [ 485.276370][T14827] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 485.276384][T14827] RIP: 0033:0x7f90f459aeb9 [ 485.276395][T14827] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 485.276409][T14827] RSP: 002b:00007f90f5496028 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 485.276424][T14827] RAX: ffffffffffffffda RBX: 00007f90f4815fa0 RCX: 00007f90f459aeb9 [ 485.276433][T14827] RDX: 000000000000006a RSI: 0000200000000180 RDI: 0000000000000003 [ 485.276442][T14827] RBP: 00007f90f5496090 R08: 0000000000000000 R09: 0000000000000000 [ 485.276450][T14827] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 485.276458][T14827] R13: 00007f90f4816038 R14: 00007f90f4815fa0 R15: 00007ffdce291168 [ 485.276476][T14827] [ 486.347694][T14845] FAULT_INJECTION: forcing a failure. [ 486.347694][T14845] name failslab, interval 1, probability 0, space 0, times 0 [ 486.375322][T14845] CPU: 0 UID: 0 PID: 14845 Comm: syz.0.2043 Tainted: G L syzkaller #0 PREEMPT(full) [ 486.375349][T14845] Tainted: [L]=SOFTLOCKUP [ 486.375354][T14845] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 486.375363][T14845] Call Trace: [ 486.375368][T14845] [ 486.375375][T14845] dump_stack_lvl+0x100/0x190 [ 486.375397][T14845] should_fail_ex.cold+0x5/0xa [ 486.375422][T14845] should_failslab+0xc2/0x120 [ 486.375447][T14845] __kmalloc_cache_noprof+0x80/0x810 [ 486.375463][T14845] ? refill_pi_state_cache+0x91/0x260 [ 486.375490][T14845] ? refill_pi_state_cache+0x91/0x260 [ 486.375510][T14845] ? futex_unqueue+0x133/0x2c0 [ 486.375527][T14845] refill_pi_state_cache+0x91/0x260 [ 486.375550][T14845] futex_lock_pi+0x177/0x7b0 [ 486.375574][T14845] ? __pfx_futex_lock_pi+0x10/0x10 [ 486.375597][T14845] ? __pfx___futex_wait+0x10/0x10 [ 486.375627][T14845] ? __pfx_futex_wake_mark+0x10/0x10 [ 486.375655][T14845] ? do_vfs_ioctl+0x226/0x13e0 [ 486.375679][T14845] do_futex+0x18a/0x350 [ 486.375704][T14845] ? __pfx_do_futex+0x10/0x10 [ 486.375724][T14845] ? find_held_lock+0x2b/0x80 [ 486.375742][T14845] __x64_sys_futex+0x34f/0x4d0 [ 486.375764][T14845] ? __fget_files+0x21f/0x3d0 [ 486.375780][T14845] ? __pfx___x64_sys_futex+0x10/0x10 [ 486.375799][T14845] ? xfd_validate_state+0x129/0x190 [ 486.375828][T14845] do_syscall_64+0xc9/0xf80 [ 486.375847][T14845] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 486.375863][T14845] RIP: 0033:0x7f646d99aeb9 [ 486.375875][T14845] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 486.375890][T14845] RSP: 002b:00007f646e81b028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 486.375905][T14845] RAX: ffffffffffffffda RBX: 00007f646dc15fa0 RCX: 00007f646d99aeb9 [ 486.375915][T14845] RDX: 0000000000000008 RSI: 0000000000000006 RDI: 0000000000000000 [ 486.375924][T14845] RBP: 00007f646da08c1f R08: 0000000000000000 R09: 000000008000fff5 [ 486.375933][T14845] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 486.375942][T14845] R13: 00007f646dc16038 R14: 00007f646dc15fa0 R15: 00007ffe6598a378 [ 486.375962][T14845] [ 487.086153][T14859] bridge0: port 3(gretap0) entered blocking state [ 487.138076][T14859] bridge0: port 3(gretap0) entered disabled state [ 487.180930][T14859] gretap0: entered allmulticast mode [ 487.241678][T14859] gretap0: entered promiscuous mode [ 487.287688][T14859] bridge0: port 3(gretap0) entered blocking state [ 487.294251][T14859] bridge0: port 3(gretap0) entered forwarding state [ 488.080364][T14883] FAULT_INJECTION: forcing a failure. [ 488.080364][T14883] name failslab, interval 1, probability 0, space 0, times 0 [ 488.201617][T14883] CPU: 0 UID: 0 PID: 14883 Comm: syz.1.2054 Tainted: G L syzkaller #0 PREEMPT(full) [ 488.201644][T14883] Tainted: [L]=SOFTLOCKUP [ 488.201650][T14883] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 488.201660][T14883] Call Trace: [ 488.201665][T14883] [ 488.201671][T14883] dump_stack_lvl+0x100/0x190 [ 488.201695][T14883] should_fail_ex.cold+0x5/0xa [ 488.201721][T14883] should_failslab+0xc2/0x120 [ 488.201742][T14883] __kmalloc_cache_noprof+0x80/0x810 [ 488.201757][T14883] ? alloc_tty_struct+0x96/0x8c0 [ 488.201775][T14883] ? alloc_tty_struct+0x96/0x8c0 [ 488.201797][T14883] alloc_tty_struct+0x96/0x8c0 [ 488.201813][T14883] ? __pfx_alloc_tty_struct+0x10/0x10 [ 488.201836][T14883] pty_common_install+0x1c7/0xb30 [ 488.201858][T14883] ? __pfx_pty_unix98_install+0x10/0x10 [ 488.201878][T14883] tty_init_dev.part.0+0x9e/0x470 [ 488.201894][T14883] tty_init_dev+0x60/0x80 [ 488.201907][T14883] ptmx_open+0x15e/0x3c0 [ 488.201925][T14883] ? __pfx_ptmx_open+0x10/0x10 [ 488.201942][T14883] chrdev_open+0x234/0x6a0 [ 488.201960][T14883] ? __pfx_apparmor_file_open+0x10/0x10 [ 488.201979][T14883] ? __pfx_chrdev_open+0x10/0x10 [ 488.201998][T14883] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 488.202020][T14883] do_dentry_open+0x73e/0x1570 [ 488.202038][T14883] ? __pfx_chrdev_open+0x10/0x10 [ 488.202056][T14883] ? security_inode_permission+0xbf/0x250 [ 488.202081][T14883] vfs_open+0x82/0x3f0 [ 488.202103][T14883] path_openat+0x21dc/0x3120 [ 488.202127][T14883] ? __pfx_path_openat+0x10/0x10 [ 488.202151][T14883] do_filp_open+0x1f7/0x420 [ 488.202169][T14883] ? __pfx_do_filp_open+0x10/0x10 [ 488.202199][T14883] ? _raw_spin_unlock+0x28/0x50 [ 488.202214][T14883] ? alloc_fd+0x476/0x790 [ 488.202236][T14883] do_sys_openat2+0x12e/0x220 [ 488.202258][T14883] ? __pfx_do_sys_openat2+0x10/0x10 [ 488.202280][T14883] ? find_held_lock+0x2b/0x80 [ 488.202300][T14883] __x64_sys_openat+0x12d/0x210 [ 488.202321][T14883] ? __pfx___x64_sys_openat+0x10/0x10 [ 488.202342][T14883] ? xfd_validate_state+0x129/0x190 [ 488.202370][T14883] do_syscall_64+0xc9/0xf80 [ 488.202389][T14883] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 488.202404][T14883] RIP: 0033:0x7f90f459aeb9 [ 488.202417][T14883] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 488.202431][T14883] RSP: 002b:00007f90f5454028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 488.202446][T14883] RAX: ffffffffffffffda RBX: 00007f90f4816180 RCX: 00007f90f459aeb9 [ 488.202455][T14883] RDX: 0000000000000000 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 488.202465][T14883] RBP: 00007f90f4608c1f R08: 0000000000000000 R09: 0000000000000000 [ 488.202474][T14883] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 488.202483][T14883] R13: 00007f90f4816218 R14: 00007f90f4816180 R15: 00007ffdce291168 [ 488.202503][T14883] [ 488.507291][T14891] Invalid ELF header magic: != ELF [ 489.418780][T14907] synth uevent: /devices/platform/dummy_hcd.3/usb4/ep_00: unknown uevent action string [ 489.475050][T14907] ep_00: uevent: failed to send synthetic uevent: -22 [ 489.528213][T14907] misc userio: Invalid payload size [ 489.724771][T14915] Console: switching to colour VGA+ 80x25 [ 489.917646][T14925] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2068'. [ 490.519444][T14937] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2071'. [ 490.600522][T14937] team0: left allmulticast mode [ 490.647396][T14937] team_slave_0: left allmulticast mode [ 490.702012][T14937] team_slave_1: left allmulticast mode [ 490.719238][T14937] team0: left promiscuous mode [ 490.758153][T14937] team_slave_0: left promiscuous mode [ 490.793302][T14937] team_slave_1: left promiscuous mode [ 490.831639][T14937] bridge0: port 3(team0) entered disabled state [ 490.839263][ T5829] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 490.849159][ T5829] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 490.858369][ T5829] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 490.872464][ T5829] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 490.879949][ T5829] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 490.927016][T14937] bridge_slave_1: left allmulticast mode [ 490.954863][T14937] bridge_slave_1: left promiscuous mode [ 490.972376][T14937] bridge0: port 2(bridge_slave_1) entered disabled state [ 490.995086][T14937] bridge_slave_0: left allmulticast mode [ 491.005379][T14937] bridge_slave_0: left promiscuous mode [ 491.013726][T14937] bridge0: port 1(bridge_slave_0) entered disabled state [ 491.547856][ T30] audit: type=1800 audit(4294967538.499:23): pid=14964 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2077" name="lu_gp_id" dev="configfs" ino=62207 res=0 errno=0 [ 491.843996][T14949] chnl_net:caif_netlink_parms(): no params data found [ 492.199771][T14949] bridge0: port 1(bridge_slave_0) entered blocking state [ 492.237407][T14949] bridge0: port 1(bridge_slave_0) entered disabled state [ 492.281162][T14949] bridge_slave_0: entered allmulticast mode [ 492.299690][T14949] bridge_slave_0: entered promiscuous mode [ 492.308496][T14985] FAULT_INJECTION: forcing a failure. [ 492.308496][T14985] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 492.334881][T14949] bridge0: port 2(bridge_slave_1) entered blocking state [ 492.361622][T14985] CPU: 0 UID: 0 PID: 14985 Comm: syz.1.2082 Tainted: G L syzkaller #0 PREEMPT(full) [ 492.361645][T14985] Tainted: [L]=SOFTLOCKUP [ 492.361650][T14985] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 492.361659][T14985] Call Trace: [ 492.361664][T14985] [ 492.361669][T14985] dump_stack_lvl+0x100/0x190 [ 492.361690][T14985] should_fail_ex.cold+0x5/0xa [ 492.361713][T14985] _copy_to_user+0x32/0xd0 [ 492.361735][T14985] simple_read_from_buffer+0xcb/0x170 [ 492.361751][T14985] proc_fail_nth_read+0x1af/0x230 [ 492.361768][T14985] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 492.361785][T14985] ? rw_verify_area+0xce/0x6d0 [ 492.361799][T14985] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 492.361815][T14985] vfs_read+0x1e4/0xb30 [ 492.361836][T14985] ? __pfx_vfs_read+0x10/0x10 [ 492.361850][T14985] ? find_held_lock+0x2b/0x80 [ 492.361864][T14985] ? __fget_files+0x215/0x3d0 [ 492.361882][T14985] ? __fget_files+0x21f/0x3d0 [ 492.361902][T14985] ksys_read+0x12a/0x250 [ 492.361916][T14985] ? __pfx_ksys_read+0x10/0x10 [ 492.361936][T14985] do_syscall_64+0xc9/0xf80 [ 492.361955][T14985] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 492.361969][T14985] RIP: 0033:0x7f90f455b78e [ 492.361981][T14985] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 492.361994][T14985] RSP: 002b:00007f90f5495fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 492.362008][T14985] RAX: ffffffffffffffda RBX: 00007f90f54966c0 RCX: 00007f90f455b78e [ 492.362017][T14985] RDX: 000000000000000f RSI: 00007f90f54960a0 RDI: 0000000000000004 [ 492.362025][T14985] RBP: 00007f90f5496090 R08: 0000000000000000 R09: 0000000000000000 [ 492.362034][T14985] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 492.362042][T14985] R13: 00007f90f4816038 R14: 00007f90f4815fa0 R15: 00007ffdce291168 [ 492.362060][T14985] [ 492.554855][T14949] bridge0: port 2(bridge_slave_1) entered disabled state [ 492.562070][T14949] bridge_slave_1: entered allmulticast mode [ 492.569070][T14949] bridge_slave_1: entered promiscuous mode [ 492.591946][T14949] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 492.603742][T14949] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 492.630469][T14949] team0: Port device team_slave_0 added [ 492.640008][T14949] team0: Port device team_slave_1 added [ 492.662727][T14949] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 492.669771][T14949] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 492.695706][T14949] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 492.708882][T14949] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 492.716363][T14949] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 492.742387][T14949] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 492.779902][T14949] hsr_slave_0: entered promiscuous mode [ 492.786209][T14949] hsr_slave_1: entered promiscuous mode [ 492.792321][T14949] debugfs: 'hsr0' already exists in 'hsr' [ 492.798463][T14949] Cannot create hsr debugfs directory [ 492.978397][ T5829] Bluetooth: hci5: command tx timeout [ 493.090526][T14949] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 493.142992][T14949] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 493.203229][T14949] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 493.267204][T14949] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 493.282685][T14992] random: crng reseeded on system resumption [ 493.899180][T14949] 8021q: adding VLAN 0 to HW filter on device bond0 [ 493.940242][T14949] 8021q: adding VLAN 0 to HW filter on device team0 [ 493.997640][T10391] bridge0: port 1(bridge_slave_0) entered blocking state [ 493.997763][T10391] bridge0: port 1(bridge_slave_0) entered forwarding state [ 493.998932][T10391] bridge0: port 2(bridge_slave_1) entered blocking state [ 493.998992][T10391] bridge0: port 2(bridge_slave_1) entered forwarding state [ 494.479610][T15030] netlink: 436 bytes leftover after parsing attributes in process `syz.1.2095'. [ 494.644944][T14949] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 494.762607][T15036] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 495.033546][ T5829] Bluetooth: hci5: command tx timeout [ 495.462712][T14949] veth0_vlan: entered promiscuous mode [ 495.517920][T14949] veth1_vlan: entered promiscuous mode [ 495.552667][T15064] netlink: 334 bytes leftover after parsing attributes in process `syz.1.2103'. [ 495.613970][T14949] veth0_macvtap: entered promiscuous mode [ 495.652697][T14949] veth1_macvtap: entered promiscuous mode [ 495.727915][T14949] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 495.766506][T14949] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 495.818593][T15061] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 495.870570][T15061] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 495.902748][T15061] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 495.968498][T15061] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 496.107067][T15081] random: crng reseeded on system resumption [ 496.192170][T15053] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 496.236345][T15053] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 496.338098][T15061] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 496.364575][T15061] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 496.833764][T15102] random: crng reseeded on system resumption [ 497.112304][T15099] Bluetooth: hci5: command tx timeout [ 497.677240][T15125] netlink: 'syz.5.2117': attribute type 33 has an invalid length. [ 498.345569][T15144] __vm_enough_memory: pid: 15144, comm: syz.5.2122, bytes: 4398046511104 not enough memory for the allocation [ 498.826720][T15165] __vm_enough_memory: pid: 15165, comm: syz.5.2126, bytes: 4398046511104 not enough memory for the allocation [ 498.989741][T15170] FAULT_INJECTION: forcing a failure. [ 498.989741][T15170] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 499.066767][T15170] CPU: 0 UID: 0 PID: 15170 Comm: syz.6.2129 Tainted: G L syzkaller #0 PREEMPT(full) [ 499.066791][T15170] Tainted: [L]=SOFTLOCKUP [ 499.066796][T15170] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 499.066804][T15170] Call Trace: [ 499.066810][T15170] [ 499.066816][T15170] dump_stack_lvl+0x100/0x190 [ 499.066838][T15170] should_fail_ex.cold+0x5/0xa [ 499.066861][T15170] _copy_from_user+0x2e/0xd0 [ 499.066882][T15170] raw_ioctl_init+0xa8/0x850 [ 499.066904][T15170] ? __pfx_raw_ioctl_init+0x10/0x10 [ 499.066924][T15170] ? tomoyo_path_number_perm+0x188/0x580 [ 499.066957][T15170] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 499.066983][T15170] raw_ioctl+0x138a/0x2b80 [ 499.067014][T15170] ? __pfx_raw_ioctl+0x10/0x10 [ 499.067036][T15170] ? __pfx_raw_ioctl+0x10/0x10 [ 499.067057][T15170] __x64_sys_ioctl+0x18e/0x210 [ 499.067079][T15170] do_syscall_64+0xc9/0xf80 [ 499.067098][T15170] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 499.067112][T15170] RIP: 0033:0x7fc5cb79aeb9 [ 499.067124][T15170] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 499.067137][T15170] RSP: 002b:00007fc5cc677028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 499.067152][T15170] RAX: ffffffffffffffda RBX: 00007fc5cba15fa0 RCX: 00007fc5cb79aeb9 [ 499.067161][T15170] RDX: 0000200000000080 RSI: 0000000041015500 RDI: 0000000000000003 [ 499.067173][T15170] RBP: 00007fc5cc677090 R08: 0000000000000000 R09: 0000000000000000 [ 499.067182][T15170] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 499.067190][T15170] R13: 00007fc5cba16038 R14: 00007fc5cba15fa0 R15: 00007ffcee0b0528 [ 499.067208][T15170] [ 499.320652][T15099] Bluetooth: hci5: command tx timeout [ 499.625169][T15177] random: crng reseeded on system resumption [ 500.048575][T15187] FAULT_INJECTION: forcing a failure. [ 500.048575][T15187] name failslab, interval 1, probability 0, space 0, times 0 [ 500.168990][T15187] CPU: 0 UID: 0 PID: 15187 Comm: syz.1.2134 Tainted: G L syzkaller #0 PREEMPT(full) [ 500.169014][T15187] Tainted: [L]=SOFTLOCKUP [ 500.169019][T15187] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 500.169028][T15187] Call Trace: [ 500.169033][T15187] [ 500.169039][T15187] dump_stack_lvl+0x100/0x190 [ 500.169061][T15187] should_fail_ex.cold+0x5/0xa [ 500.169083][T15187] should_failslab+0xc2/0x120 [ 500.169103][T15187] ? tomoyo_realpath_from_path+0xb6/0x690 [ 500.169117][T15187] __kmalloc_noprof+0xf6/0x9c0 [ 500.169137][T15187] ? tomoyo_realpath_from_path+0xb6/0x690 [ 500.169150][T15187] tomoyo_realpath_from_path+0xb6/0x690 [ 500.169168][T15187] tomoyo_path_number_perm+0x23c/0x580 [ 500.169187][T15187] ? tomoyo_path_number_perm+0x22e/0x580 [ 500.169207][T15187] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 500.169245][T15187] ? find_held_lock+0x2b/0x80 [ 500.169259][T15187] ? hook_file_ioctl_common+0x146/0x410 [ 500.169279][T15187] ? __fget_files+0x215/0x3d0 [ 500.169297][T15187] ? __fget_files+0x21f/0x3d0 [ 500.169315][T15187] security_file_ioctl+0xd3/0x230 [ 500.169336][T15187] __x64_sys_ioctl+0xb7/0x210 [ 500.169358][T15187] do_syscall_64+0xc9/0xf80 [ 500.169377][T15187] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 500.169391][T15187] RIP: 0033:0x7f90f459aeb9 [ 500.169402][T15187] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 500.169416][T15187] RSP: 002b:00007f90f5475028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 500.169430][T15187] RAX: ffffffffffffffda RBX: 00007f90f4816090 RCX: 00007f90f459aeb9 [ 500.169439][T15187] RDX: 0000000000000000 RSI: 0000000000009205 RDI: 0000000000000006 [ 500.169447][T15187] RBP: 00007f90f5475090 R08: 0000000000000000 R09: 0000000000000000 [ 500.169455][T15187] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 500.169463][T15187] R13: 00007f90f4816128 R14: 00007f90f4816090 R15: 00007ffdce291168 [ 500.169482][T15187] [ 500.169488][T15187] ERROR: Out of memory at tomoyo_realpath_from_path. [ 500.630104][T15200] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2136'. [ 500.835853][T15200] team0: Port device team_slave_0 removed [ 501.092833][T15211] nvme_fcloop: unknown parameter or missing value '7' [ 501.264690][T15216] netlink: 472 bytes leftover after parsing attributes in process `syz.1.2141'. [ 502.278673][T15240] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2148'. [ 502.961704][T15242] FAULT_INJECTION: forcing a failure. [ 502.961704][T15242] name failslab, interval 1, probability 0, space 0, times 0 [ 502.976512][T15242] CPU: 0 UID: 0 PID: 15242 Comm: syz.1.2149 Tainted: G L syzkaller #0 PREEMPT(full) [ 502.976536][T15242] Tainted: [L]=SOFTLOCKUP [ 502.976541][T15242] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 502.976549][T15242] Call Trace: [ 502.976554][T15242] [ 502.976560][T15242] dump_stack_lvl+0x100/0x190 [ 502.976582][T15242] should_fail_ex.cold+0x5/0xa [ 502.976605][T15242] should_failslab+0xc2/0x120 [ 502.976625][T15242] kmem_cache_alloc_node_noprof+0x8c/0x880 [ 502.976644][T15242] ? __alloc_skb+0x156/0x410 [ 502.976666][T15242] ? __alloc_skb+0x156/0x410 [ 502.976681][T15242] __alloc_skb+0x156/0x410 [ 502.976698][T15242] ? __alloc_skb+0x35d/0x410 [ 502.976714][T15242] ? __pfx___alloc_skb+0x10/0x10 [ 502.976739][T15242] netlink_dump+0x19b/0xd30 [ 502.976769][T15242] ? __pfx_netlink_dump+0x10/0x10 [ 502.976788][T15242] ? kasan_quarantine_put+0x104/0x240 [ 502.976803][T15242] ? lockdep_hardirqs_on+0x78/0x100 [ 502.976828][T15242] ? kfree_skbmem+0x19a/0x210 [ 502.976842][T15242] ? kfree_skbmem+0x19f/0x210 [ 502.976858][T15242] netlink_recvmsg+0x7dc/0xa90 [ 502.976879][T15242] ? __pfx_netlink_recvmsg+0x10/0x10 [ 502.976902][T15242] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 502.976923][T15242] sock_recvmsg+0x1f9/0x250 [ 502.976939][T15242] sock_read_iter+0x2c6/0x3c0 [ 502.976954][T15242] ? __pfx_sock_read_iter+0x10/0x10 [ 502.976975][T15242] ? bpf_lsm_file_permission+0x9/0x10 [ 502.976993][T15242] ? security_file_permission+0x76/0x210 [ 502.977015][T15242] ? rw_verify_area+0xce/0x6d0 [ 502.977028][T15242] ? __pfx_sock_read_iter+0x10/0x10 [ 502.977043][T15242] vfs_read+0x957/0xb30 [ 502.977060][T15242] ? __pfx_vfs_read+0x10/0x10 [ 502.977073][T15242] ? find_held_lock+0x2b/0x80 [ 502.977099][T15242] ksys_read+0x1f8/0x250 [ 502.977113][T15242] ? __pfx_ksys_read+0x10/0x10 [ 502.977133][T15242] do_syscall_64+0xc9/0xf80 [ 502.977151][T15242] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 502.977165][T15242] RIP: 0033:0x7f90f459aeb9 [ 502.977177][T15242] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 502.977190][T15242] RSP: 002b:00007f90f5496028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 502.977204][T15242] RAX: ffffffffffffffda RBX: 00007f90f4815fa0 RCX: 00007f90f459aeb9 [ 502.977213][T15242] RDX: 0000000000000020 RSI: 0000000000000000 RDI: 0000000000000006 [ 502.977221][T15242] RBP: 00007f90f5496090 R08: 0000000000000000 R09: 0000000000000000 [ 502.977229][T15242] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 502.977238][T15242] R13: 00007f90f4816038 R14: 00007f90f4815fa0 R15: 00007ffdce291168 [ 502.977257][T15242] [ 503.370428][T15245] FAULT_INJECTION: forcing a failure. [ 503.370428][T15245] name failslab, interval 1, probability 0, space 0, times 0 [ 503.383313][T15245] CPU: 0 UID: 0 PID: 15245 Comm: syz.1.2150 Tainted: G L syzkaller #0 PREEMPT(full) [ 503.383339][T15245] Tainted: [L]=SOFTLOCKUP [ 503.383344][T15245] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 503.383354][T15245] Call Trace: [ 503.383360][T15245] [ 503.383367][T15245] dump_stack_lvl+0x100/0x190 [ 503.383390][T15245] should_fail_ex.cold+0x5/0xa [ 503.383415][T15245] should_failslab+0xc2/0x120 [ 503.383435][T15245] __kmalloc_cache_noprof+0x80/0x810 [ 503.383451][T15245] ? call_usermodehelper_setup+0xaf/0x360 [ 503.383473][T15245] ? __kmalloc_node_track_caller_noprof+0x373/0x9d0 [ 503.383494][T15245] ? __pfx_free_modprobe_argv+0x10/0x10 [ 503.383517][T15245] ? call_usermodehelper_setup+0xaf/0x360 [ 503.383532][T15245] call_usermodehelper_setup+0xaf/0x360 [ 503.383551][T15245] __request_module+0x3c7/0x650 [ 503.383572][T15245] ? __pfx___request_module+0x10/0x10 [ 503.383601][T15245] ? find_held_lock+0x2b/0x80 [ 503.383616][T15245] ? inet_create+0xa72/0x1060 [ 503.383637][T15245] inet_create+0xd45/0x1060 [ 503.383654][T15245] ? inet_create+0x94/0x1060 [ 503.383673][T15245] __sock_create+0x339/0x860 [ 503.383694][T15245] __sys_socket+0x14d/0x260 [ 503.383710][T15245] ? fput+0x79/0x100 [ 503.383729][T15245] ? __pfx___sys_socket+0x10/0x10 [ 503.383745][T15245] ? xfd_validate_state+0x129/0x190 [ 503.383771][T15245] __x64_sys_socket+0x72/0xb0 [ 503.383787][T15245] ? lockdep_hardirqs_on+0x78/0x100 [ 503.383804][T15245] do_syscall_64+0xc9/0xf80 [ 503.383823][T15245] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 503.383838][T15245] RIP: 0033:0x7f90f459aeb9 [ 503.383851][T15245] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 503.383866][T15245] RSP: 002b:00007f90f5496028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 503.383881][T15245] RAX: ffffffffffffffda RBX: 00007f90f4815fa0 RCX: 00007f90f459aeb9 [ 503.383891][T15245] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000002 [ 503.383900][T15245] RBP: 00007f90f4608c1f R08: 0000000000000000 R09: 0000000000000000 [ 503.383909][T15245] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 503.383917][T15245] R13: 00007f90f4816038 R14: 00007f90f4815fa0 R15: 00007ffdce291168 [ 503.383936][T15245] [ 504.130908][T15266] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 506.717701][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 506.724154][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 507.299192][T15304] FAULT_INJECTION: forcing a failure. [ 507.299192][T15304] name failslab, interval 1, probability 0, space 0, times 0 [ 507.350807][T15304] CPU: 0 UID: 0 PID: 15304 Comm: syz.1.2163 Tainted: G L syzkaller #0 PREEMPT(full) [ 507.350834][T15304] Tainted: [L]=SOFTLOCKUP [ 507.350839][T15304] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 507.350848][T15304] Call Trace: [ 507.350854][T15304] [ 507.350860][T15304] dump_stack_lvl+0x100/0x190 [ 507.350884][T15304] should_fail_ex.cold+0x5/0xa [ 507.350910][T15304] should_failslab+0xc2/0x120 [ 507.350931][T15304] kmem_cache_alloc_noprof+0x83/0x780 [ 507.350950][T15304] ? acpi_ut_create_generic_state+0x61/0xc0 [ 507.350973][T15304] ? acpi_ut_create_generic_state+0x61/0xc0 [ 507.350991][T15304] acpi_ut_create_generic_state+0x61/0xc0 [ 507.351010][T15304] acpi_ps_init_scope+0x3a/0x240 [ 507.351031][T15304] acpi_ds_init_aml_walk+0x1f6/0x680 [ 507.351053][T15304] acpi_ds_call_control_method+0x3a2/0xab0 [ 507.351073][T15304] acpi_ps_parse_aml+0xacd/0x1120 [ 507.351095][T15304] acpi_ps_execute_method+0x5c4/0xe90 [ 507.351120][T15304] acpi_ns_evaluate+0x640/0x1670 [ 507.351146][T15304] acpi_evaluate_object+0x420/0xe00 [ 507.351162][T15304] ? kernfs_fop_read_iter+0x46c/0x610 [ 507.351177][T15304] ? vfs_read+0x825/0xb30 [ 507.351192][T15304] ? ksys_read+0x12a/0x250 [ 507.351210][T15304] ? __pfx_acpi_evaluate_object+0x10/0x10 [ 507.351229][T15304] ? __pfx___might_resched+0x10/0x10 [ 507.351253][T15304] acpi_evaluate_integer+0xdf/0x220 [ 507.351269][T15304] ? __pfx_acpi_evaluate_integer+0x10/0x10 [ 507.351293][T15304] ? __pfx_status_show+0x10/0x10 [ 507.351309][T15304] status_show+0xa0/0x120 [ 507.351326][T15304] ? __pfx_status_show+0x10/0x10 [ 507.351347][T15304] dev_attr_show+0x52/0xa0 [ 507.351368][T15304] ? __pfx_dev_attr_show+0x10/0x10 [ 507.351387][T15304] sysfs_kf_seq_show+0x217/0x3a0 [ 507.351408][T15304] seq_read_iter+0x32f/0x1270 [ 507.351439][T15304] kernfs_fop_read_iter+0x46c/0x610 [ 507.351456][T15304] ? rw_verify_area+0xce/0x6d0 [ 507.351470][T15304] ? __pfx_kernfs_fop_read_iter+0x10/0x10 [ 507.351488][T15304] vfs_read+0x825/0xb30 [ 507.351507][T15304] ? __pfx_vfs_read+0x10/0x10 [ 507.351522][T15304] ? find_held_lock+0x2b/0x80 [ 507.351550][T15304] ksys_read+0x12a/0x250 [ 507.351566][T15304] ? __pfx_ksys_read+0x10/0x10 [ 507.351588][T15304] do_syscall_64+0xc9/0xf80 [ 507.351607][T15304] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 507.351622][T15304] RIP: 0033:0x7f90f459aeb9 [ 507.351636][T15304] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 507.351650][T15304] RSP: 002b:00007f90f5475028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 507.351665][T15304] RAX: ffffffffffffffda RBX: 00007f90f4816090 RCX: 00007f90f459aeb9 [ 507.351675][T15304] RDX: 000000000000007a RSI: 0000200000000140 RDI: 0000000000000009 [ 507.351684][T15304] RBP: 00007f90f4608c1f R08: 0000000000000000 R09: 0000000000000000 [ 507.351693][T15304] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 507.351702][T15304] R13: 00007f90f4816128 R14: 00007f90f4816090 R15: 00007ffdce291168 [ 507.351723][T15304] [ 508.185466][T15304] ACPI Error: Aborting method \_SB.LNKA._STA due to previous error (AE_NO_MEMORY) (20250807/psparse-529) [ 508.473790][T15313] random: crng reseeded on system resumption [ 511.500463][T15375] FAULT_INJECTION: forcing a failure. [ 511.500463][T15375] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 511.517658][T15375] CPU: 0 UID: 0 PID: 15375 Comm: syz.1.2186 Tainted: G L syzkaller #0 PREEMPT(full) [ 511.517683][T15375] Tainted: [L]=SOFTLOCKUP [ 511.517688][T15375] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 511.517697][T15375] Call Trace: [ 511.517701][T15375] [ 511.517708][T15375] dump_stack_lvl+0x100/0x190 [ 511.517730][T15375] should_fail_ex.cold+0x5/0xa [ 511.517753][T15375] _copy_from_user+0x2e/0xd0 [ 511.517774][T15375] do_ip_setsockopt+0x291b/0x3200 [ 511.517793][T15375] ? __pfx_do_ip_setsockopt+0x10/0x10 [ 511.517808][T15375] ? __pfx___might_resched+0x10/0x10 [ 511.517880][T15375] ? __lock_acquire+0x4a5/0x2630 [ 511.517900][T15375] ? aa_sk_perm+0x2de/0xb40 [ 511.517919][T15375] ? ksys_write+0x190/0x250 [ 511.517938][T15375] ip_setsockopt+0x5a/0xf0 [ 511.517955][T15375] ipv6_setsockopt+0x155/0x170 [ 511.517972][T15375] udpv6_setsockopt+0x7d/0xd0 [ 511.517988][T15375] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 511.518005][T15375] do_sock_setsockopt+0xf3/0x1d0 [ 511.518022][T15375] __sys_setsockopt+0x119/0x190 [ 511.518045][T15375] __x64_sys_setsockopt+0xbd/0x160 [ 511.518063][T15375] ? do_syscall_64+0x94/0xf80 [ 511.518079][T15375] ? lockdep_hardirqs_on+0x78/0x100 [ 511.518095][T15375] do_syscall_64+0xc9/0xf80 [ 511.518112][T15375] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 511.518127][T15375] RIP: 0033:0x7f90f459aeb9 [ 511.518138][T15375] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 511.518152][T15375] RSP: 002b:00007f90f5496028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 511.518167][T15375] RAX: ffffffffffffffda RBX: 00007f90f4815fa0 RCX: 00007f90f459aeb9 [ 511.518176][T15375] RDX: 0000000000000030 RSI: 0000000000000000 RDI: 0000000000000003 [ 511.518184][T15375] RBP: 00007f90f5496090 R08: 0000000000000568 R09: 0000000000000000 [ 511.518192][T15375] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 511.518200][T15375] R13: 00007f90f4816038 R14: 00007f90f4815fa0 R15: 00007ffdce291168 [ 511.518219][T15375] [ 512.070508][T15385] netlink: 504 bytes leftover after parsing attributes in process `syz.1.2191'. [ 512.084363][T15385] netlink: 350 bytes leftover after parsing attributes in process `syz.1.2191'. [ 512.099725][T15385] futex_wake_op: syz.1.2191 tries to shift op by -2048; fix this program [ 512.110707][T15385] futex_wake_op: syz.1.2191 tries to shift op by -2048; fix this program [ 512.120066][T15385] 0x000000000001-0x000000020000 : "" [ 512.138961][T15385] ftl_cs: FTL header corrupt! [ 514.172741][T15417] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 514.182298][T15417] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 514.190108][T15417] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 514.197696][T15417] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 514.205645][T15417] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 514.484907][T15416] chnl_net:caif_netlink_parms(): no params data found [ 514.647782][T15416] bridge0: port 1(bridge_slave_0) entered blocking state [ 514.669046][T15416] bridge0: port 1(bridge_slave_0) entered disabled state [ 514.682401][T15416] bridge_slave_0: entered allmulticast mode [ 514.699562][T15416] bridge_slave_0: entered promiscuous mode [ 514.718486][T15416] bridge0: port 2(bridge_slave_1) entered blocking state [ 514.737149][T15416] bridge0: port 2(bridge_slave_1) entered disabled state [ 514.752068][T15416] bridge_slave_1: entered allmulticast mode [ 514.763177][T15416] bridge_slave_1: entered promiscuous mode [ 514.821780][T15416] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 514.851392][T15416] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 514.913859][T15416] team0: Port device team_slave_0 added [ 514.921534][T15416] team0: Port device team_slave_1 added [ 514.981452][T15416] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 515.005426][T15416] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 515.068302][T15416] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 515.097913][T15416] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 515.119635][T15416] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 515.191033][T15416] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 515.304141][T15416] hsr_slave_0: entered promiscuous mode [ 515.310491][T15416] hsr_slave_1: entered promiscuous mode [ 515.322610][T15416] debugfs: 'hsr0' already exists in 'hsr' [ 515.335671][T15416] Cannot create hsr debugfs directory [ 515.488159][T15432] Process accounting resumed [ 515.737024][T15416] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 515.768665][T15416] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 515.794663][T15416] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 515.814783][T15416] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 515.850589][T15099] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 515.860990][T15099] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 515.869050][T15099] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 515.876963][T15099] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 515.884640][T15099] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 516.144187][T15416] 8021q: adding VLAN 0 to HW filter on device bond0 [ 516.211804][T15416] 8021q: adding VLAN 0 to HW filter on device team0 [ 516.233205][T15099] Bluetooth: hci6: command tx timeout [ 516.269524][T15053] bridge0: port 1(bridge_slave_0) entered blocking state [ 516.276689][T15053] bridge0: port 1(bridge_slave_0) entered forwarding state [ 516.311157][T15441] chnl_net:caif_netlink_parms(): no params data found [ 516.335713][T15053] bridge0: port 2(bridge_slave_1) entered blocking state [ 516.342876][T15053] bridge0: port 2(bridge_slave_1) entered forwarding state [ 516.537913][T15441] bridge0: port 1(bridge_slave_0) entered blocking state [ 516.562669][T15441] bridge0: port 1(bridge_slave_0) entered disabled state [ 516.595692][T15441] bridge_slave_0: entered allmulticast mode [ 516.609300][T15441] bridge_slave_0: entered promiscuous mode [ 516.634172][T15441] bridge0: port 2(bridge_slave_1) entered blocking state [ 516.641387][T15441] bridge0: port 2(bridge_slave_1) entered disabled state [ 516.667095][T15441] bridge_slave_1: entered allmulticast mode [ 516.686939][T15441] bridge_slave_1: entered promiscuous mode [ 516.775146][T15441] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 516.805499][T15441] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 516.875589][T15441] team0: Port device team_slave_0 added [ 516.894915][T15416] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 516.926512][T15441] team0: Port device team_slave_1 added [ 517.044235][T15441] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 517.051194][T15441] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 517.155769][T15441] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 517.199118][T15441] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 517.241962][T15441] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 517.370140][T15441] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 517.573894][T15441] hsr_slave_0: entered promiscuous mode [ 517.580221][T15441] hsr_slave_1: entered promiscuous mode [ 517.609147][T15441] debugfs: 'hsr0' already exists in 'hsr' [ 517.622634][T15441] Cannot create hsr debugfs directory [ 517.684268][T15416] veth0_vlan: entered promiscuous mode [ 517.736255][T15416] veth1_vlan: entered promiscuous mode [ 517.805714][T15416] veth0_macvtap: entered promiscuous mode [ 517.873568][T15416] veth1_macvtap: entered promiscuous mode [ 517.912425][T15099] Bluetooth: hci7: command tx timeout [ 517.927611][T15416] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 518.010511][T15416] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 518.089358][T15053] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 518.132375][T15053] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 518.141087][T15053] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 518.256202][T15053] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 518.313072][T15099] Bluetooth: hci6: command tx timeout [ 518.468278][T15417] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 518.480325][T15417] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 518.488548][T15417] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 518.499273][T15417] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 518.507721][T15417] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 518.557891][T15441] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 518.621934][T15053] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 518.629756][T15053] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 518.666317][T15441] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 518.719842][T15441] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 518.768606][T15441] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 518.784048][T15059] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 518.802395][T15059] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 519.048216][T15486] FAULT_INJECTION: forcing a failure. [ 519.048216][T15486] name failslab, interval 1, probability 0, space 0, times 0 [ 519.096755][T15486] CPU: 0 UID: 0 PID: 15486 Comm: syz.7.2199 Tainted: G L syzkaller #0 PREEMPT(full) [ 519.096781][T15486] Tainted: [L]=SOFTLOCKUP [ 519.096786][T15486] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 519.096796][T15486] Call Trace: [ 519.096801][T15486] [ 519.096808][T15486] dump_stack_lvl+0x100/0x190 [ 519.096831][T15486] should_fail_ex.cold+0x5/0xa [ 519.096855][T15486] should_failslab+0xc2/0x120 [ 519.096875][T15486] ? snd_pcm_plugin_build+0x434/0x650 [ 519.096895][T15486] __kmalloc_noprof+0xf6/0x9c0 [ 519.096915][T15486] ? snd_pcm_plugin_build+0x434/0x650 [ 519.096934][T15486] snd_pcm_plugin_build+0x434/0x650 [ 519.096956][T15486] snd_pcm_plugin_build_mulaw+0x280/0x760 [ 519.096977][T15486] ? __pfx_mulaw_decode+0x10/0x10 [ 519.096996][T15486] ? __pfx_snd_pcm_plugin_build_mulaw+0x10/0x10 [ 519.097019][T15486] ? snd_pcm_hw_params+0x262/0x1cb0 [ 519.097042][T15486] snd_pcm_plug_format_plugins+0x61d/0x1430 [ 519.097064][T15486] ? __pfx_snd_pcm_plug_format_plugins+0x10/0x10 [ 519.097087][T15486] ? __pfx_snd_pcm_hw_param_near.constprop.0+0x10/0x10 [ 519.097110][T15486] snd_pcm_oss_change_params_locked+0x2e3c/0x39f0 [ 519.097137][T15486] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 519.097155][T15486] ? __pfx___mutex_lock+0x10/0x10 [ 519.097172][T15486] ? snd_pcm_oss_ioctl+0x1bbb/0x3720 [ 519.097203][T15486] snd_pcm_oss_get_active_substream+0x175/0x1d0 [ 519.097225][T15486] snd_pcm_oss_ioctl+0x1c08/0x3720 [ 519.097244][T15486] ? hook_file_ioctl_common+0x146/0x410 [ 519.097267][T15486] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 519.097287][T15486] ? __fget_files+0x21f/0x3d0 [ 519.097306][T15486] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 519.097337][T15486] __x64_sys_ioctl+0x18e/0x210 [ 519.097362][T15486] do_syscall_64+0xc9/0xf80 [ 519.097383][T15486] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 519.097398][T15486] RIP: 0033:0x7f00a5b9aeb9 [ 519.097411][T15486] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 519.097428][T15486] RSP: 002b:00007f00a6a68028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 519.097444][T15486] RAX: ffffffffffffffda RBX: 00007f00a5e15fa0 RCX: 00007f00a5b9aeb9 [ 519.097455][T15486] RDX: 0000200000000200 RSI: 00000000c0045002 RDI: 0000000000000002 [ 519.097464][T15486] RBP: 00007f00a5c08c1f R08: 0000000000000000 R09: 0000000000000000 [ 519.097473][T15486] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 519.097482][T15486] R13: 00007f00a5e16038 R14: 00007f00a5e15fa0 R15: 00007fff56bfffc8 [ 519.097501][T15486] [ 519.420755][T15441] 8021q: adding VLAN 0 to HW filter on device bond0 [ 519.436846][T15441] 8021q: adding VLAN 0 to HW filter on device team0 [ 519.466168][T15441] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 519.478578][T15441] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 519.616351][T15492] Invalid ELF header magic: != ELF [ 519.646439][T15059] bridge0: port 1(bridge_slave_0) entered blocking state [ 519.653719][T15059] bridge0: port 1(bridge_slave_0) entered forwarding state [ 519.733295][T15059] bridge0: port 2(bridge_slave_1) entered blocking state [ 519.740426][T15059] bridge0: port 2(bridge_slave_1) entered forwarding state [ 519.845601][T15476] chnl_net:caif_netlink_parms(): no params data found [ 520.015813][T15417] Bluetooth: hci7: command tx timeout [ 520.120745][T15441] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 520.142314][T15476] bridge0: port 1(bridge_slave_0) entered blocking state [ 520.228061][T15476] bridge0: port 1(bridge_slave_0) entered disabled state [ 520.259927][T15476] bridge_slave_0: entered allmulticast mode [ 520.296731][T15476] bridge_slave_0: entered promiscuous mode [ 520.328633][T15476] bridge0: port 2(bridge_slave_1) entered blocking state [ 520.371968][T15476] bridge0: port 2(bridge_slave_1) entered disabled state [ 520.398341][T15417] Bluetooth: hci6: command tx timeout [ 520.407221][T15476] bridge_slave_1: entered allmulticast mode [ 520.426333][T15476] bridge_slave_1: entered promiscuous mode [ 520.552546][T15417] Bluetooth: hci8: command tx timeout [ 520.583114][T15476] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 520.633372][T15476] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 520.834063][T15476] team0: Port device team_slave_0 added [ 520.841643][T15476] team0: Port device team_slave_1 added [ 520.993542][T15476] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 521.044160][T15476] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 521.130579][T15476] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 521.163638][T15476] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 521.181312][T15476] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 521.252089][T15476] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 521.306662][T15441] veth0_vlan: entered promiscuous mode [ 521.363939][T15441] veth1_vlan: entered promiscuous mode [ 521.401518][T15476] hsr_slave_0: entered promiscuous mode [ 521.415165][T15476] hsr_slave_1: entered promiscuous mode [ 521.441575][T15476] debugfs: 'hsr0' already exists in 'hsr' [ 521.455495][T15476] Cannot create hsr debugfs directory [ 521.600140][T15441] veth0_macvtap: entered promiscuous mode [ 521.623594][T15441] veth1_macvtap: entered promiscuous mode [ 521.660606][T15441] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 521.689445][T15441] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 521.743954][T15053] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 521.753199][T15053] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 521.805867][T15053] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 521.820464][T15476] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 521.862704][T15476] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 521.879107][T15053] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 521.898383][T15476] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 521.914507][T15476] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 521.931432][T15053] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 521.962080][T15053] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 522.040079][T15061] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 522.061250][T15061] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 522.073681][T15417] Bluetooth: hci7: command tx timeout [ 522.145728][T15522] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input29 [ 522.260989][T15476] 8021q: adding VLAN 0 to HW filter on device bond0 [ 522.337862][T15524] netlink: set zone limit has 8 unknown bytes [ 522.355312][T15476] 8021q: adding VLAN 0 to HW filter on device team0 [ 522.397383][T15053] bridge0: port 1(bridge_slave_0) entered blocking state [ 522.404667][T15053] bridge0: port 1(bridge_slave_0) entered forwarding state [ 522.475891][T15417] Bluetooth: hci6: command tx timeout [ 522.536494][T15053] bridge0: port 2(bridge_slave_1) entered blocking state [ 522.543628][T15053] bridge0: port 2(bridge_slave_1) entered forwarding state [ 522.632209][T15417] Bluetooth: hci8: command tx timeout [ 523.230189][T15476] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 523.355757][T15547] netlink: set zone limit has 8 unknown bytes [ 523.706800][T15558] block nbd0: Unsupported socket: should be TCP or UNIX. [ 523.737656][T15560] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2220'. [ 523.785368][T15560] macvlan1: entered promiscuous mode [ 523.818671][T15560] macvlan1: entered allmulticast mode [ 523.837193][T15560] veth1_vlan: entered allmulticast mode [ 524.034480][T15476] veth0_vlan: entered promiscuous mode [ 524.096073][T15476] veth1_vlan: entered promiscuous mode [ 524.152013][T15417] Bluetooth: hci7: command tx timeout [ 524.228833][T15476] veth0_macvtap: entered promiscuous mode [ 524.286152][T15476] veth1_macvtap: entered promiscuous mode [ 524.303069][T15573] FAULT_INJECTION: forcing a failure. [ 524.303069][T15573] name failslab, interval 1, probability 0, space 0, times 0 [ 524.374649][T15573] CPU: 0 UID: 0 PID: 15573 Comm: syz.8.2225 Tainted: G L syzkaller #0 PREEMPT(full) [ 524.374675][T15573] Tainted: [L]=SOFTLOCKUP [ 524.374680][T15573] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 524.374688][T15573] Call Trace: [ 524.374693][T15573] [ 524.374699][T15573] dump_stack_lvl+0x100/0x190 [ 524.374721][T15573] should_fail_ex.cold+0x5/0xa [ 524.374744][T15573] should_failslab+0xc2/0x120 [ 524.374763][T15573] ? iter_file_splice_write+0x1d3/0x10a0 [ 524.374779][T15573] __kmalloc_noprof+0xf6/0x9c0 [ 524.374798][T15573] ? iter_file_splice_write+0x1d3/0x10a0 [ 524.374813][T15573] iter_file_splice_write+0x1d3/0x10a0 [ 524.374831][T15573] ? kfree+0x1c7/0x690 [ 524.374843][T15573] ? copy_splice_read+0x734/0xb90 [ 524.374863][T15573] ? __pfx_iter_file_splice_write+0x10/0x10 [ 524.374879][T15573] ? __lock_acquire+0x4a5/0x2630 [ 524.374898][T15573] ? __pfx_copy_splice_read+0x10/0x10 [ 524.374923][T15573] ? __pfx_iter_file_splice_write+0x10/0x10 [ 524.374940][T15573] direct_splice_actor+0x192/0x6c0 [ 524.374964][T15573] splice_direct_to_actor+0x345/0xa30 [ 524.374981][T15573] ? __pfx_direct_splice_actor+0x10/0x10 [ 524.375000][T15573] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 524.375021][T15573] do_splice_direct+0x174/0x240 [ 524.375036][T15573] ? __pfx_do_splice_direct+0x10/0x10 [ 524.375050][T15573] ? common_file_perm+0x1ab/0x4f0 [ 524.375070][T15573] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 524.375088][T15573] ? rw_verify_area+0xce/0x6d0 [ 524.375103][T15573] do_sendfile+0xadc/0xe20 [ 524.375122][T15573] ? __pfx_do_sendfile+0x10/0x10 [ 524.375137][T15573] ? __fget_files+0x21f/0x3d0 [ 524.375157][T15573] __x64_sys_sendfile64+0x1d8/0x220 [ 524.375175][T15573] ? ksys_write+0x1ac/0x250 [ 524.375189][T15573] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 524.375213][T15573] do_syscall_64+0xc9/0xf80 [ 524.375231][T15573] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 524.375246][T15573] RIP: 0033:0x7fe7f979aeb9 [ 524.375258][T15573] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 524.375271][T15573] RSP: 002b:00007fe7fa660028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 524.375286][T15573] RAX: ffffffffffffffda RBX: 00007fe7f9a15fa0 RCX: 00007fe7f979aeb9 [ 524.375295][T15573] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000003 [ 524.375303][T15573] RBP: 00007fe7fa660090 R08: 0000000000000000 R09: 0000000000000000 [ 524.375312][T15573] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000001 [ 524.375320][T15573] R13: 00007fe7f9a16038 R14: 00007fe7f9a15fa0 R15: 00007ffeb53a08e8 [ 524.375338][T15573] [ 524.376428][T15476] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 524.767556][T15417] Bluetooth: hci8: command tx timeout [ 525.534527][T15476] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 525.590378][T15495] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 525.602011][T15495] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 525.610764][T15495] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 525.678416][T15495] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 526.015294][T15602] FAULT_INJECTION: forcing a failure. [ 526.015294][T15602] name failslab, interval 1, probability 0, space 0, times 0 [ 526.055275][T15602] CPU: 0 UID: 0 PID: 15602 Comm: syz.7.2235 Tainted: G L syzkaller #0 PREEMPT(full) [ 526.055299][T15602] Tainted: [L]=SOFTLOCKUP [ 526.055304][T15602] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 526.055313][T15602] Call Trace: [ 526.055318][T15602] [ 526.055324][T15602] dump_stack_lvl+0x100/0x190 [ 526.055345][T15602] should_fail_ex.cold+0x5/0xa [ 526.055368][T15602] should_failslab+0xc2/0x120 [ 526.055387][T15602] ? iovec_from_user+0x108/0x140 [ 526.055406][T15602] __kmalloc_noprof+0xf6/0x9c0 [ 526.055420][T15602] ? find_held_lock+0x2b/0x80 [ 526.055433][T15602] ? is_bpf_text_address+0x8a/0x1a0 [ 526.055451][T15602] ? iovec_from_user+0x108/0x140 [ 526.055480][T15602] iovec_from_user+0x108/0x140 [ 526.055501][T15602] __import_iovec+0x81/0x640 [ 526.055521][T15602] ? __might_fault+0xc5/0x140 [ 526.055539][T15602] import_iovec+0x82/0xb0 [ 526.055561][T15602] copy_msghdr_from_user+0x2ed/0x4f0 [ 526.055578][T15602] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 526.055597][T15602] ? _kstrtoull+0x13c/0x1f0 [ 526.055611][T15602] ? __pfx__kstrtoull+0x10/0x10 [ 526.055629][T15602] ___sys_sendmsg+0x106/0x1e0 [ 526.055646][T15602] ? __pfx____sys_sendmsg+0x10/0x10 [ 526.055682][T15602] __sys_sendmmsg+0x205/0x430 [ 526.055704][T15602] ? __pfx___sys_sendmmsg+0x10/0x10 [ 526.055728][T15602] ? __fget_files+0x215/0x3d0 [ 526.055742][T15602] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 526.055768][T15602] ? fput+0x79/0x100 [ 526.055791][T15602] ? ksys_write+0x1ac/0x250 [ 526.055806][T15602] ? __pfx_ksys_write+0x10/0x10 [ 526.055824][T15602] __x64_sys_sendmmsg+0x9c/0x100 [ 526.055843][T15602] ? lockdep_hardirqs_on+0x78/0x100 [ 526.055859][T15602] do_syscall_64+0xc9/0xf80 [ 526.055877][T15602] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 526.055891][T15602] RIP: 0033:0x7f00a5b9aeb9 [ 526.055903][T15602] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 526.055916][T15602] RSP: 002b:00007f00a6a68028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 526.055930][T15602] RAX: ffffffffffffffda RBX: 00007f00a5e15fa0 RCX: 00007f00a5b9aeb9 [ 526.055939][T15602] RDX: 00000000000009a6 RSI: 0000200000000000 RDI: 0000000000000003 [ 526.055947][T15602] RBP: 00007f00a6a68090 R08: 0000000000000000 R09: 0000000000000000 [ 526.055955][T15602] R10: 000000000000e000 R11: 0000000000000246 R12: 0000000000000001 [ 526.055963][T15602] R13: 00007f00a5e16038 R14: 00007f00a5e15fa0 R15: 00007fff56bfffc8 [ 526.055981][T15602] [ 526.057211][T15495] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 526.413613][T15495] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 526.506668][T15059] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 526.515105][T15059] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 526.621316][T15607] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2237'. [ 526.793894][T15417] Bluetooth: hci8: command tx timeout [ 527.286993][T15620] binder: 15619:15620 ioctl c018620c 0 returned -1 [ 527.295820][T15620] netlink: 28 bytes leftover after parsing attributes in process `syz.9.2239'. [ 527.701616][T15631] netlink: 206 bytes leftover after parsing attributes in process `syz.9.2244'. [ 529.728185][T15652] kexec: Could not allocate control_code_buffer [ 529.794261][T15655] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 531.689202][T15690] FAULT_INJECTION: forcing a failure. [ 531.689202][T15690] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 531.715708][T15690] CPU: 0 UID: 0 PID: 15690 Comm: syz.9.2262 Tainted: G L syzkaller #0 PREEMPT(full) [ 531.715733][T15690] Tainted: [L]=SOFTLOCKUP [ 531.715738][T15690] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 531.715747][T15690] Call Trace: [ 531.715752][T15690] [ 531.715758][T15690] dump_stack_lvl+0x100/0x190 [ 531.715779][T15690] should_fail_ex.cold+0x5/0xa [ 531.715802][T15690] _copy_to_user+0x32/0xd0 [ 531.715824][T15690] simple_read_from_buffer+0xcb/0x170 [ 531.715840][T15690] proc_fail_nth_read+0x1af/0x230 [ 531.715858][T15690] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 531.715875][T15690] ? rw_verify_area+0xce/0x6d0 [ 531.715889][T15690] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 531.715905][T15690] vfs_read+0x1e4/0xb30 [ 531.715922][T15690] ? __pfx_vfs_read+0x10/0x10 [ 531.715935][T15690] ? find_held_lock+0x2b/0x80 [ 531.715949][T15690] ? __fget_files+0x215/0x3d0 [ 531.715967][T15690] ? __fget_files+0x21f/0x3d0 [ 531.715987][T15690] ksys_read+0x12a/0x250 [ 531.716001][T15690] ? __pfx_ksys_read+0x10/0x10 [ 531.716021][T15690] do_syscall_64+0xc9/0xf80 [ 531.716040][T15690] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 531.716054][T15690] RIP: 0033:0x7f8797b5b78e [ 531.716066][T15690] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 531.716079][T15690] RSP: 002b:00007f8798a0cfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 531.716093][T15690] RAX: ffffffffffffffda RBX: 00007f8798a0d6c0 RCX: 00007f8797b5b78e [ 531.716103][T15690] RDX: 000000000000000f RSI: 00007f8798a0d0a0 RDI: 0000000000000005 [ 531.716111][T15690] RBP: 00007f8798a0d090 R08: 0000000000000000 R09: 0000000000000000 [ 531.716119][T15690] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 531.716127][T15690] R13: 00007f8797e16038 R14: 00007f8797e15fa0 R15: 00007fff13f96898 [ 531.716146][T15690] [ 533.385996][T15712] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 533.392658][T15712] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 540.109054][T15099] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 540.119069][T15099] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 540.128366][T15099] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 540.138946][T15099] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 540.152978][T15099] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 540.324751][T15722] chnl_net:caif_netlink_parms(): no params data found [ 540.391476][T15722] bridge0: port 1(bridge_slave_0) entered blocking state [ 540.404761][T15722] bridge0: port 1(bridge_slave_0) entered disabled state [ 540.413463][T15722] bridge_slave_0: entered allmulticast mode [ 540.420547][T15722] bridge_slave_0: entered promiscuous mode [ 540.429372][T15722] bridge0: port 2(bridge_slave_1) entered blocking state [ 540.437126][T15722] bridge0: port 2(bridge_slave_1) entered disabled state [ 540.445298][T15722] bridge_slave_1: entered allmulticast mode [ 540.453108][T15722] bridge_slave_1: entered promiscuous mode [ 540.482862][T15722] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 540.494336][T15722] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 540.527831][T15722] team0: Port device team_slave_0 added [ 540.535889][T15722] team0: Port device team_slave_1 added [ 540.561626][T15722] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 540.572726][T15722] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 540.599597][T15722] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 540.614041][T15722] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 540.621067][T15722] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 540.653558][T15722] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 540.696161][T15722] hsr_slave_0: entered promiscuous mode [ 540.702788][T15722] hsr_slave_1: entered promiscuous mode [ 540.708944][T15722] debugfs: 'hsr0' already exists in 'hsr' [ 540.715250][T15722] Cannot create hsr debugfs directory [ 542.232208][T15099] Bluetooth: hci3: command tx timeout [ 542.550724][T15417] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 542.561117][T15055] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 542.569858][T15055] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 542.579424][T15055] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 542.589722][T15055] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 542.748226][T15786] chnl_net:caif_netlink_parms(): no params data found [ 542.811455][T15786] bridge0: port 1(bridge_slave_0) entered blocking state [ 542.820812][T15786] bridge0: port 1(bridge_slave_0) entered disabled state [ 542.832371][T15786] bridge_slave_0: entered allmulticast mode [ 542.839380][T15786] bridge_slave_0: entered promiscuous mode [ 542.851363][T15786] bridge0: port 2(bridge_slave_1) entered blocking state [ 542.859009][T15786] bridge0: port 2(bridge_slave_1) entered disabled state [ 542.866536][T15786] bridge_slave_1: entered allmulticast mode [ 542.874274][T15786] bridge_slave_1: entered promiscuous mode [ 542.902647][T15786] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 542.915096][T15786] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 542.955972][T15786] team0: Port device team_slave_0 added [ 542.964057][T15786] team0: Port device team_slave_1 added [ 542.987334][T15786] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 542.994936][T15786] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 543.021584][T15786] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 543.042287][T15786] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 543.049240][T15786] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 543.078659][T15786] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 543.118105][T15786] hsr_slave_0: entered promiscuous mode [ 543.124676][T15786] hsr_slave_1: entered promiscuous mode [ 543.135269][T15786] debugfs: 'hsr0' already exists in 'hsr' [ 543.141012][T15786] Cannot create hsr debugfs directory [ 544.036150][T15055] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 544.046293][T15055] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 544.059012][T15055] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 544.070876][T15055] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 544.080632][T15055] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 544.235304][T15795] chnl_net:caif_netlink_parms(): no params data found [ 544.307618][T15795] bridge0: port 1(bridge_slave_0) entered blocking state [ 544.315684][T15055] Bluetooth: hci3: command tx timeout [ 544.321181][T15795] bridge0: port 1(bridge_slave_0) entered disabled state [ 544.329315][T15795] bridge_slave_0: entered allmulticast mode [ 544.336775][T15795] bridge_slave_0: entered promiscuous mode [ 544.345189][T15795] bridge0: port 2(bridge_slave_1) entered blocking state [ 544.355279][T15795] bridge0: port 2(bridge_slave_1) entered disabled state [ 544.366344][T15795] bridge_slave_1: entered allmulticast mode [ 544.373739][T15795] bridge_slave_1: entered promiscuous mode [ 544.407924][T15795] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 544.424251][T15795] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 544.451770][T15795] team0: Port device team_slave_0 added [ 544.459547][T15795] team0: Port device team_slave_1 added [ 544.488872][T15795] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 544.495929][T15795] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 544.526633][T15795] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 544.539549][T15795] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 544.546849][T15795] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 544.579728][T15795] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 544.617879][T15795] hsr_slave_0: entered promiscuous mode [ 544.625241][T15795] hsr_slave_1: entered promiscuous mode [ 544.635286][T15055] Bluetooth: hci9: command tx timeout [ 544.642583][T15795] debugfs: 'hsr0' already exists in 'hsr' [ 544.648332][T15795] Cannot create hsr debugfs directory [ 546.152850][T15055] Bluetooth: hci10: command tx timeout [ 546.392205][T15055] Bluetooth: hci3: command tx timeout [ 546.712226][T15055] Bluetooth: hci9: command tx timeout [ 548.232204][T15055] Bluetooth: hci10: command tx timeout [ 548.472107][T15055] Bluetooth: hci3: command tx timeout [ 548.792287][T15055] Bluetooth: hci9: command tx timeout [ 549.059998][T15099] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 549.073510][T15099] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 549.085652][T15099] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 549.093542][T15099] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 549.101451][T15099] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 549.264349][T15804] chnl_net:caif_netlink_parms(): no params data found [ 549.336573][T15804] bridge0: port 1(bridge_slave_0) entered blocking state [ 549.344304][T15804] bridge0: port 1(bridge_slave_0) entered disabled state [ 549.351557][T15804] bridge_slave_0: entered allmulticast mode [ 549.360387][T15804] bridge_slave_0: entered promiscuous mode [ 549.372890][T15804] bridge0: port 2(bridge_slave_1) entered blocking state [ 549.383765][T15804] bridge0: port 2(bridge_slave_1) entered disabled state [ 549.391273][T15804] bridge_slave_1: entered allmulticast mode [ 549.398765][T15804] bridge_slave_1: entered promiscuous mode [ 549.427693][T15804] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 549.441299][T15804] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 549.468938][T15804] team0: Port device team_slave_0 added [ 549.484304][T15804] team0: Port device team_slave_1 added [ 549.508697][T15804] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 549.516217][T15804] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 549.547386][T15804] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 549.559772][T15804] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 549.567185][T15804] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 549.604986][T15804] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 549.645205][T15804] hsr_slave_0: entered promiscuous mode [ 549.654917][T15804] hsr_slave_1: entered promiscuous mode [ 549.661162][T15804] debugfs: 'hsr0' already exists in 'hsr' [ 549.667499][T15804] Cannot create hsr debugfs directory [ 550.312268][T15099] Bluetooth: hci10: command tx timeout [ 550.872340][T15099] Bluetooth: hci9: command tx timeout [ 551.192124][T15055] Bluetooth: hci11: command tx timeout [ 552.392147][T15055] Bluetooth: hci10: command tx timeout [ 553.272157][T15055] Bluetooth: hci11: command tx timeout [ 555.352520][T15055] Bluetooth: hci11: command tx timeout [ 557.432079][T15055] Bluetooth: hci11: command tx timeout [ 568.156451][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 568.163079][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 600.722796][T15099] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 600.732841][T15099] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 600.742595][T15099] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 600.755197][T15099] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 600.762935][T15099] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 600.948043][T15819] chnl_net:caif_netlink_parms(): no params data found [ 601.025879][T15819] bridge0: port 1(bridge_slave_0) entered blocking state [ 601.035369][T15819] bridge0: port 1(bridge_slave_0) entered disabled state [ 601.044875][T15819] bridge_slave_0: entered allmulticast mode [ 601.052531][T15819] bridge_slave_0: entered promiscuous mode [ 601.060911][T15819] bridge0: port 2(bridge_slave_1) entered blocking state [ 601.068437][T15819] bridge0: port 2(bridge_slave_1) entered disabled state [ 601.076164][T15819] bridge_slave_1: entered allmulticast mode [ 601.091128][T15819] bridge_slave_1: entered promiscuous mode [ 601.120104][T15819] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 601.133073][T15819] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 601.165336][T15819] team0: Port device team_slave_0 added [ 601.173752][T15819] team0: Port device team_slave_1 added [ 601.204616][T15819] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 601.212481][T15819] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 601.239954][T15819] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 601.257188][T15819] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 601.265437][T15819] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 601.299420][T15819] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 601.342408][T15819] hsr_slave_0: entered promiscuous mode [ 601.348891][T15819] hsr_slave_1: entered promiscuous mode [ 601.357576][T15819] debugfs: 'hsr0' already exists in 'hsr' [ 601.367411][T15819] Cannot create hsr debugfs directory [ 602.611237][T15055] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 602.627664][T15055] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 602.642751][T15055] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 602.651169][T15055] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 602.658790][T15055] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 602.795600][T15099] Bluetooth: hci12: command tx timeout [ 602.825492][T15831] chnl_net:caif_netlink_parms(): no params data found [ 602.901317][T15831] bridge0: port 1(bridge_slave_0) entered blocking state [ 602.911592][T15831] bridge0: port 1(bridge_slave_0) entered disabled state [ 602.920707][T15831] bridge_slave_0: entered allmulticast mode [ 602.929233][T15831] bridge_slave_0: entered promiscuous mode [ 602.941465][T15831] bridge0: port 2(bridge_slave_1) entered blocking state [ 602.949322][T15831] bridge0: port 2(bridge_slave_1) entered disabled state [ 602.963522][T15831] bridge_slave_1: entered allmulticast mode [ 602.971632][T15831] bridge_slave_1: entered promiscuous mode [ 603.004264][T15831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 603.020812][T15831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 603.053249][T15831] team0: Port device team_slave_0 added [ 603.061642][T15831] team0: Port device team_slave_1 added [ 603.088969][T15831] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 603.096926][T15831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 603.126914][T15831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 603.144779][T15831] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 603.152155][T15831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 603.180388][T15831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 603.226244][T15831] hsr_slave_0: entered promiscuous mode [ 603.235933][T15831] hsr_slave_1: entered promiscuous mode [ 603.249802][T15831] debugfs: 'hsr0' already exists in 'hsr' [ 603.256071][T15831] Cannot create hsr debugfs directory [ 604.123531][T15055] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 604.134628][T15055] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 604.143302][T15055] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 604.151021][T15055] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 604.164688][T15055] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 604.327861][T15840] chnl_net:caif_netlink_parms(): no params data found [ 604.406656][T15840] bridge0: port 1(bridge_slave_0) entered blocking state [ 604.414063][T15840] bridge0: port 1(bridge_slave_0) entered disabled state [ 604.421530][T15840] bridge_slave_0: entered allmulticast mode [ 604.429925][T15840] bridge_slave_0: entered promiscuous mode [ 604.438851][T15840] bridge0: port 2(bridge_slave_1) entered blocking state [ 604.448890][T15840] bridge0: port 2(bridge_slave_1) entered disabled state [ 604.456443][T15840] bridge_slave_1: entered allmulticast mode [ 604.463915][T15840] bridge_slave_1: entered promiscuous mode [ 604.497139][T15840] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 604.509804][T15840] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 604.542001][T15840] team0: Port device team_slave_0 added [ 604.549681][T15840] team0: Port device team_slave_1 added [ 604.587970][T15840] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 604.595266][T15840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 604.626645][T15840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 604.640743][T15840] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 604.648240][T15840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 604.680133][T15840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 604.715955][T15099] Bluetooth: hci13: command tx timeout [ 604.736303][T15840] hsr_slave_0: entered promiscuous mode [ 604.743237][T15840] hsr_slave_1: entered promiscuous mode [ 604.749398][T15840] debugfs: 'hsr0' already exists in 'hsr' [ 604.755948][T15840] Cannot create hsr debugfs directory [ 604.872410][T15099] Bluetooth: hci12: command tx timeout [ 606.232596][T15099] Bluetooth: hci14: command tx timeout [ 606.792645][T15099] Bluetooth: hci13: command tx timeout [ 606.952085][T15099] Bluetooth: hci12: command tx timeout [ 608.312826][T15099] Bluetooth: hci14: command tx timeout [ 608.875455][T15099] Bluetooth: hci13: command tx timeout [ 609.032164][T15099] Bluetooth: hci12: command tx timeout [ 609.630851][T15055] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 609.646400][T15055] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 609.656460][T15055] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 609.666143][T15055] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 609.674862][T15055] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 609.861542][T15849] chnl_net:caif_netlink_parms(): no params data found [ 609.941675][T15849] bridge0: port 1(bridge_slave_0) entered blocking state [ 609.949022][T15849] bridge0: port 1(bridge_slave_0) entered disabled state [ 609.957774][T15849] bridge_slave_0: entered allmulticast mode [ 609.966684][T15849] bridge_slave_0: entered promiscuous mode [ 609.976606][T15849] bridge0: port 2(bridge_slave_1) entered blocking state [ 609.985447][T15849] bridge0: port 2(bridge_slave_1) entered disabled state [ 609.994214][T15849] bridge_slave_1: entered allmulticast mode [ 610.005802][T15849] bridge_slave_1: entered promiscuous mode [ 610.036139][T15849] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 610.048017][T15849] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 610.079070][T15849] team0: Port device team_slave_0 added [ 610.089925][T15849] team0: Port device team_slave_1 added [ 610.117458][T15849] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 610.127739][T15849] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 610.155570][T15849] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 610.169020][T15849] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 610.176543][T15849] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 610.209190][T15849] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 610.257093][T15849] hsr_slave_0: entered promiscuous mode [ 610.265090][T15849] hsr_slave_1: entered promiscuous mode [ 610.272452][T15849] debugfs: 'hsr0' already exists in 'hsr' [ 610.279149][T15849] Cannot create hsr debugfs directory [ 610.392840][T15099] Bluetooth: hci14: command tx timeout [ 610.952640][T15055] Bluetooth: hci13: command tx timeout [ 611.752305][T15055] Bluetooth: hci15: command tx timeout [ 612.472554][T15055] Bluetooth: hci14: command tx timeout [ 613.832403][T15055] Bluetooth: hci15: command tx timeout [ 615.912230][T15055] Bluetooth: hci15: command tx timeout [ 616.312131][T15055] Bluetooth: hci5: command 0x0406 tx timeout [ 617.992396][T15099] Bluetooth: hci15: command tx timeout [ 629.598101][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 629.612868][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 629.690287][T13795] NFSD: Failed to start, no listeners configured. [ 634.713032][ T31] INFO: task syz-executor:5826 blocked for more than 143 seconds. [ 634.720873][ T31] Tainted: G L syzkaller #0 [ 634.740313][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 634.749604][ T31] task:syz-executor state:D stack:23448 pid:5826 tgid:5826 ppid:1 task_flags:0x400140 flags:0x00080002 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 634.762177][ T31] Call Trace: [ 634.765461][ T31] [ 634.768556][ T31] ? __schedule+0xf67/0x5fa0 [ 634.773620][ T31] __schedule+0xfe6/0x5fa0 [ 634.781280][ T31] ? __lock_acquire+0x4a5/0x2630 [ 634.786611][ T31] ? __pfx___schedule+0x10/0x10 [ 634.791560][ T31] ? find_held_lock+0x2b/0x80 [ 634.803279][ T31] ? schedule+0x2bf/0x390 [ 634.807812][ T31] schedule+0xdd/0x390 [ 634.822132][ T31] schedule_preempt_disabled+0x13/0x30 [ 634.827627][ T31] __mutex_lock+0xc9a/0x1b90 [ 634.853805][ T31] ? nfsd_shutdown_threads+0x5b/0xf0 [ 634.859146][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 634.883040][ T31] ? net_generic+0xea/0x2a0 [ 634.887587][ T31] ? net_generic+0xea/0x2a0 [ 634.905478][ T31] ? nfsd_shutdown_threads+0x5b/0xf0 [ 634.910798][ T31] nfsd_shutdown_threads+0x5b/0xf0 [ 634.931875][ T31] nfsd_umount+0x3b/0x60 [ 634.936157][ T31] deactivate_locked_super+0xc1/0x1b0 [ 634.950006][ T31] deactivate_super+0xe7/0x110 [ 634.960331][ T31] cleanup_mnt+0x21f/0x450 [ 635.008610][ T31] task_work_run+0x150/0x240 [ 635.024624][ T31] ? __pfx_task_work_run+0x10/0x10 [ 635.029759][ T31] ? __x64_sys_umount+0x124/0x1a0 [ 635.050788][ T31] exit_to_user_mode_loop+0x100/0x4b0 [ 635.057408][ T31] ? rcu_is_watching+0x12/0xc0 [ 635.064624][ T31] do_syscall_64+0x4ea/0xf80 [ 635.069271][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 635.075657][ T31] RIP: 0033:0x7fabe0d9c117 [ 635.080165][ T31] RSP: 002b:00007ffdfe996068 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 635.092738][ T31] RAX: 0000000000000000 RBX: 00007fabe0e0471f RCX: 00007fabe0d9c117 [ 635.100739][ T31] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffdfe996120 [ 635.109385][ T31] RBP: 00007ffdfe996120 R08: 00007ffdfe997120 R09: 00000000ffffffff [ 635.120272][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffdfe9971b0 [ 635.130213][ T31] R13: 00007fabe0e0471f R14: 0000000000073f49 R15: 00007ffdfe9971f0 [ 635.140395][ T31] [ 635.149188][ T31] [ 635.149188][ T31] Showing all locks held in the system: [ 635.157854][ T31] 1 lock held by khungtaskd/31: [ 635.175173][ T31] #0: ffffffff8e5e3120 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 635.189390][ T31] 2 locks held by syz-executor/5826: [ 635.198418][ T31] #0: ffff8880763880e0 (&type->s_umount_key#52){+.+.}-{4:4}, at: deactivate_super+0xdf/0x110 [ 635.209013][ T31] #1: ffffffff8ea476a8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 635.219057][ T31] 2 locks held by syz.4.1786/13795: [ 635.224425][ T31] #0: ffffffff904a2bd0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 635.233907][ T31] #1: ffffffff8ea476a8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x687/0xbc0 [ 635.247507][ T31] 2 locks held by getty/14934: [ 635.253051][ T31] #0: ffff88814d70c0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 635.263701][ T31] #1: ffffc9000432c2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x1500 [ 635.276029][ T31] 3 locks held by kworker/u10:4/15075: [ 635.281499][ T31] #0: ffff88801c29f148 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x11ae/0x1840 [ 635.298151][ T31] #1: ffffc9000b26fc98 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x927/0x1840 [ 635.308349][ T31] #2: ffffffff903dd430 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xab/0x830 [ 635.318140][ T31] 3 locks held by kworker/u11:1/15099: [ 635.323991][ T31] #0: ffff8880426e1948 ((wq_completion)hci6){+.+.}-{0:0}, at: process_one_work+0x11ae/0x1840 [ 635.334620][ T31] #1: ffffc90004cafc98 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_one_work+0x927/0x1840 [ 635.348974][ T31] #2: ffff88805846cec0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x18a/0x470 [ 635.364647][ T31] 2 locks held by syz.0.2123/15153: [ 635.369858][ T31] #0: ffffffff904a2bd0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 635.378488][ T31] #1: ffffffff8ea476a8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_get_doit+0x1c6/0x7a0 [ 635.388726][ T31] 2 locks held by syz.5.2148/15240: [ 635.397248][ T31] #0: ffff8880434e1908 (&sb->s_type->i_mutex_key#13){+.+.}-{4:4}, at: __sock_release+0x86/0x260 [ 635.411043][ T31] #1: ffffffff904a0470 ((netlink_chain).rwsem){++++}-{4:4}, at: blocking_notifier_call_chain+0x53/0xa0 [ 635.423102][ T31] 2 locks held by syz-executor/15416: [ 635.428464][ T31] #0: ffff888029fb00e0 (&type->s_umount_key#52){+.+.}-{4:4}, at: deactivate_super+0xdf/0x110 [ 635.439915][ T31] #1: ffffffff8ea476a8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 635.451052][ T31] 2 locks held by syz.1.2229/15583: [ 635.457545][ T31] #0: ffffffff903dd430 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x451/0x7c0 [ 635.467527][ T31] #1: ffffffff8e5ef7c0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x48/0x6d0 [ 635.480306][ T31] 2 locks held by syz.1.2229/15585: [ 635.485873][ T31] #0: ffffffff903dd430 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x451/0x7c0 [ 635.498543][ T31] #1: ffffffff8e5ef7c0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x48/0x6d0 [ 635.508865][ T31] 3 locks held by syz.8.2237/15607: [ 635.517787][ T31] #0: ffff8880596dccc8 (&sb->s_type->i_mutex_key#13){+.+.}-{4:4}, at: __sock_release+0x86/0x260 [ 635.528687][ T31] #1: ffffffff904a0470 ((netlink_chain).rwsem){++++}-{4:4}, at: blocking_notifier_call_chain+0x53/0xa0 [ 635.540218][ T31] #2: ffffffff8e5ef7c0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x48/0x6d0 [ 635.550857][ T31] 2 locks held by syz.9.2273/15719: [ 635.557386][ T31] #0: ffffffff904a2bd0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 635.568463][ T31] #1: ffffffff8ea476a8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0xd5/0x1b20 [ 635.579216][ T31] 7 locks held by syz-executor/15722: [ 635.587369][ T31] #0: ffff888033e9a420 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 635.603324][ T31] #1: ffff888032cc5488 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 [ 635.613405][ T31] #2: ffff888027c00b48 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0 [ 635.628478][ T31] #3: ffffffff8f950288 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x480 [ 635.639301][ T31] #4: ffff8880317570e8 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xaa/0x600 [ 635.650519][ T31] #5: ffff888035158250 (&devlink->lock_key){+.+.}-{4:4}, at: nsim_drv_remove+0x4a/0x1e0 [ 635.661909][ T31] #6: ffffffff8e5ef7c0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x48/0x6d0 [ 635.676128][ T31] 4 locks held by syz-executor/15786: [ 635.681616][ T31] #0: ffff888033e9a420 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 635.691204][ T31] #1: ffff888029b58888 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 [ 635.707602][ T31] #2: ffff888027c00b48 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0 [ 635.718233][ T31] #3: ffffffff8f950288 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x480 [ 635.729043][ T31] 4 locks held by syz-executor/15795: [ 635.738494][ T31] #0: ffff888033e9a420 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 635.748079][ T31] #1: ffff88808a1f4c88 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 [ 635.759526][ T31] #2: ffff888027c00b48 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0 [ 635.770359][ T31] #3: ffffffff8f950288 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x480 [ 635.780924][ T31] 4 locks held by syz-executor/15804: [ 635.787866][ T31] #0: ffff888033e9a420 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 635.797259][ T31] #1: ffff888041fadc88 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 [ 635.810417][ T31] #2: ffff888027c00b48 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0 [ 635.823545][ T31] #3: ffffffff8f950288 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x480 [ 635.834449][ T31] 4 locks held by syz-executor/15819: [ 635.840372][ T31] #0: ffff888033e9a420 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 635.852111][ T31] #1: ffff88807afb4888 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 [ 635.863232][ T31] #2: ffff888027c00b48 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0 [ 635.874214][ T31] #3: ffffffff8f950288 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x480 [ 635.884957][ T31] 4 locks held by syz-executor/15831: [ 635.890322][ T31] #0: ffff888033e9a420 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 635.901403][ T31] #1: ffff88807ec1fc88 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 [ 635.920133][ T31] #2: ffff888027c00b48 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0 [ 635.931223][ T31] #3: ffffffff8f950288 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x480 [ 635.943325][ T31] 4 locks held by syz-executor/15840: [ 635.948713][ T31] #0: ffff888033e9a420 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 635.960228][ T31] #1: ffff8880680c7c88 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 [ 635.972109][ T31] #2: ffff888027c00b48 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0 [ 635.982664][ T31] #3: ffffffff8f950288 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x480 [ 635.994347][ T31] 4 locks held by syz-executor/15849: [ 636.000314][ T31] #0: ffff888033e9a420 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 636.014343][ T31] #1: ffff88809c666c88 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 [ 636.024362][ T31] #2: ffff888027c00b48 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0 [ 636.036997][ T31] #3: ffffffff8f950288 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x480 [ 636.047857][ T31] [ 636.050211][ T31] ============================================= [ 636.050211][ T31] [ 636.069038][ T31] NMI backtrace for cpu 0 [ 636.069059][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 636.069079][ T31] Tainted: [L]=SOFTLOCKUP [ 636.069084][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 636.069093][ T31] Call Trace: [ 636.069098][ T31] [ 636.069103][ T31] dump_stack_lvl+0x100/0x190 [ 636.069127][ T31] nmi_cpu_backtrace.cold+0x12d/0x151 [ 636.069145][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 636.069167][ T31] nmi_trigger_cpumask_backtrace+0x1d7/0x230 [ 636.069191][ T31] sys_info+0x141/0x190 [ 636.069208][ T31] watchdog+0xcc3/0xfe0 [ 636.069228][ T31] ? __pfx_watchdog+0x10/0x10 [ 636.069242][ T31] ? __kthread_parkme+0x18c/0x230 [ 636.069258][ T31] ? __pfx_watchdog+0x10/0x10 [ 636.069273][ T31] ? __pfx_watchdog+0x10/0x10 [ 636.069286][ T31] kthread+0x3b3/0x730 [ 636.069305][ T31] ? __pfx_kthread+0x10/0x10 [ 636.069322][ T31] ? ret_from_fork+0x79/0xaf0 [ 636.069335][ T31] ? ret_from_fork+0x79/0xaf0 [ 636.069348][ T31] ? rcu_is_watching+0x12/0xc0 [ 636.069362][ T31] ? __pfx_kthread+0x10/0x10 [ 636.069382][ T31] ret_from_fork+0x754/0xaf0 [ 636.069395][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 636.069410][ T31] ? __switch_to+0x7b9/0x10c0 [ 636.069427][ T31] ? __pfx_kthread+0x10/0x10 [ 636.069447][ T31] ret_from_fork_asm+0x1a/0x30 [ 636.069474][ T31] [ 636.228907][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 636.235854][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 636.246533][ T31] Tainted: [L]=SOFTLOCKUP [ 636.250863][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 636.260918][ T31] Call Trace: [ 636.264211][ T31] [ 636.267598][ T31] dump_stack_lvl+0x100/0x190 [ 636.272370][ T31] vpanic+0x20d/0x630 [ 636.276338][ T31] panic+0xd1/0xd1 [ 636.280155][ T31] ? __pfx_panic+0x10/0x10 [ 636.284580][ T31] ? nmi_trigger_cpumask_backtrace+0x1b5/0x230 [ 636.290785][ T31] ? nmi_trigger_cpumask_backtrace+0x1f6/0x230 [ 636.296952][ T31] ? nmi_trigger_cpumask_backtrace+0x200/0x230 [ 636.303106][ T31] ? watchdog.cold+0x198/0x1ca [ 636.307878][ T31] ? watchdog+0xcd3/0xfe0 [ 636.312311][ T31] watchdog.cold+0x1a9/0x1ca [ 636.316910][ T31] ? __pfx_watchdog+0x10/0x10 [ 636.321588][ T31] ? __kthread_parkme+0x18c/0x230 [ 636.326710][ T31] ? __pfx_watchdog+0x10/0x10 [ 636.331398][ T31] ? __pfx_watchdog+0x10/0x10 [ 636.336085][ T31] kthread+0x3b3/0x730 [ 636.340519][ T31] ? __pfx_kthread+0x10/0x10 [ 636.345101][ T31] ? ret_from_fork+0x79/0xaf0 [ 636.349775][ T31] ? ret_from_fork+0x79/0xaf0 [ 636.354456][ T31] ? rcu_is_watching+0x12/0xc0 [ 636.359230][ T31] ? __pfx_kthread+0x10/0x10 [ 636.363839][ T31] ret_from_fork+0x754/0xaf0 [ 636.368427][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 636.373539][ T31] ? __switch_to+0x7b9/0x10c0 [ 636.378210][ T31] ? __pfx_kthread+0x10/0x10 [ 636.383653][ T31] ret_from_fork_asm+0x1a/0x30 [ 636.388441][ T31] [ 636.391507][ T31] Kernel Offset: disabled [ 636.395897][ T31] Rebooting in 86400 seconds..