last executing test programs: 5m34.008089983s ago: executing program 1 (id=2713): openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) r0 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) write$auto_console_fops_tty_io(r0, &(0x7f0000000000)="c80d1b5d399b39", 0xfdef) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r1 = socket(0x2, 0x2, 0x1) connect$auto(r1, &(0x7f00000000c0)=@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x41}}, 0x55) r2 = io_uring_setup$auto(0x6, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x1000082, 0x1, 0x15) ioctl$auto_SNDCTL_SEQ_RESETSAMPLES(r2, 0x40045109, &(0x7f0000000100)="151b691dccd09210e3400a5208dbb5d9d84744b9e569b1da93f0794800215561f654e0f170edae8f5495e53bcd2ee5596a22239e8c82783126efcaf23c7f175084a2260bd0697a8fd23e69e8edeebcc3190d427879e2192c40fd289fb2e10ef68af8521b77d657c2c13ccf9035e632adee484f724f06c87bedb7d5c4bb10a31decd921661f0bef69d6706473a20413134837644ded7c41bb712b380769090ccdfc96a4743f20d2831a61c5bc2ab5bc") write$auto(0x3, 0x0, 0xfdef) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/net/rt6_stats\x00', 0x20000, 0x0) r3 = openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f0000003b80)='/dev/snd/pcmC1D0c\x00', 0x8300, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) ioctl$auto_SNDRV_PCM_IOCTL_HW_REFINE2(r3, 0xc2604110, 0x0) mmap$auto(0x0, 0x2020005, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) ioctl$auto_FS_IOC_UNRESVSP(r2, 0x40305829, 0x5) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0x200, 0x4) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) 5m31.880815936s ago: executing program 1 (id=2719): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram5\x00', 0x14fa02, 0x0) (async) mmap$auto(0x0, 0x4020009, 0xdf, 0x400000000e31, 0xffffffffffffffff, 0x0) utimes$auto(0x0, &(0x7f0000000380)={0x0, 0xffffffffffffffff}) getrandom$auto(0x0, 0x6000000, 0x3) mmap$auto(0x0, 0x810004, 0xffb, 0x208000000008011, r0, 0x8000) (async) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) (async) timer_create$auto(0x7, 0x0, &(0x7f0000000140)=0x6) timer_settime$auto(0x0, 0xffff8000, &(0x7f00000000c0)={{0xf, 0x10007}, {0x0, 0x800}}, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/system/memory/memory12/power/control\x00', 0x100, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000040), 0xffffffffffffffff) (async, rerun: 64) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000280), 0x8000, 0x0) (async) fcntl$auto(0x3, 0x4, 0xa553) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000740), r1) (async) sendmsg$auto_L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x80) (async, rerun: 32) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) (async, rerun: 32) migrate_pages$auto(0x0, 0xa, &(0x7f0000000100)=0x5, &(0x7f0000000140)=0x2) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) move_pages$auto(0x0, 0x1002, 0x0, &(0x7f0000001140), 0x0, 0x2) (async, rerun: 64) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x0, 0x0) (rerun: 64) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) ioperm$auto(0x7, 0x6, 0x2) (async) syz_clone3(&(0x7f00000000c0)={0x2000000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) (async, rerun: 64) io_uring_setup$auto(0x6, 0x0) (async) close_range$auto(0x2, 0xffffffffffffffff, 0x0) (async) open(0x0, 0x22240, 0x55) 5m29.880432544s ago: executing program 1 (id=2726): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) timer_create$auto(0x8, 0x0, 0x0) timer_settime$auto(0x0, 0xffff7ffc, &(0x7f0000000380)={{}, {0x800002000009, 0x4b}}, 0x0) timer_gettime$auto(0x0, 0x0) r0 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0xffffffffffffffff, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) select$auto(0x8, 0x0, 0x0, 0x0, 0x0) shmdt$auto(0x0) r1 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000080), r0) fstat$auto(r0, &(0x7f0000000340)={0x7, 0xffffffffffffd27b, 0x1000000007, 0x4, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x1, 0x3, 0x2, 0x5, 0x2, 0x5, 0x240000000000000, 0x91}) socket(0x10, 0x2, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) write$auto(0xffffffffffffffff, &(0x7f0000000000)='3\xc7\xff\xff\xff\xdd\x10\b(Ks\x0f\x87|P\x11\xd1li0\x89\x85\x90QM\xd6wfF\xf1x\xb3;c\tP\x03\x84\x97\x99\x83\x97\x81:\xf3\xa3o5\xc5\x86\xed\xa4\x18]\xa3\xc9\x0f\xff\xdak\xb0m\xe1U\xb3\xa2\xee\xdcTJQO\x98\xc8w\x8c\xe7\x00\x00\x00\x1dj\x1e\xebQT\xdd\x9b\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00', 0x9) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a00"], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x20000800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) sendmsg$auto_NL802154_CMD_NEW_SEC_DEVKEY(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="ec020000", @ANYRES16=r1, @ANYBLOB="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", @ANYRES32=r0, @ANYBLOB="080032d8", @ANYRES32=r2, @ANYBLOB="0c0050000200000000000000ea399291e804caa4744cbb97efadcc1d9db072ebe7092b17b1c1bf753c4f66a4f0a4c8119c03bf3380a2a8822b987a1dc6b610c52b9ea5033fdbf3e9b49ab577c94d1025573e6f0748cf4d3bb53a540bfd0d8b42cb53694c65e13012c87d8754da9d21aa190d8371e0417e4a609ab4ad74be8ead5cb76aa9d79dc0955907225cd906cfb7a7b9dda25d591db030797bc58ab7d56cf49f4c6b6a19ee2b64fcbcf350b37b89989bbb9e7f744aaf4b90e98e664e4a666faff4e8749ad014a876cf00"], 0x2ec}, 0x1, 0x0, 0x0, 0x81}, 0x8100) getsockopt$auto(0xffffffffffffffff, 0x0, 0x43, 0x0, 0x0) fsconfig$auto_FSCONFIG_CMD_RECONFIGURE(r0, 0x7, &(0x7f00000000c0)='/dev/nullb0\x00', &(0x7f0000000100)="f9f3dc7ec2be97ba405c3dc5e55441563198f68f36d6fb16b3f206d146da315d025af04b412f6e0aed8e0358382d3a5bde6c79d1f3253a52c3acf20788239c2e60542aabf86849b5f4c6a8ddf354405e28c9b4f0785c0f52009a583a1681ec4e5a66d08395160d681f0e8fcca75b79c0d820f4bbde85b2d611d8bd6cd2a8765a21e6a67a38dcfe0aa0e0f350dd31c5116b7cee49256ba7d9ef4f256a62e48fc305f23eb34056ee2d354662d757c57fc9db03f6f11752d17f111b84db2958a85504f31f1ea3f58ab1d473237359a360a59a3e551f34481bc8ea97ff558ed2af084ca415270a765367b644", 0xfffffffb) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) 5m28.528685791s ago: executing program 1 (id=2730): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) socket(0x2b, 0x1, 0x0) listen$auto(0x3, 0x81) ioctl$auto(0x3, 0x8905, 0x38) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) madvise$auto(0x0, 0x240007, 0x19) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={0x0}}, 0x24048084) socket(0x1d, 0x2, 0x6) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) madvise$auto(0x0, 0x200007, 0x19) userfaultfd$auto(0x1) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video1\x00', 0xc0400, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) madvise$auto(0x7, 0x338d, 0x6) openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000340), 0x189400, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/cgroup.threads\x00', 0x80302, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000040), 0x7f242, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r2) 5m26.402032113s ago: executing program 1 (id=2739): openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/usbmon0\x00', 0x400, 0x0) socket(0xa, 0x1, 0x0) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) r0 = inotify_init1$auto(0x0) socket(0x1, 0x1, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0xffffffffffff0c31) r1 = socket(0x11, 0x2, 0x21) r2 = bpf$auto(0xfffffffe, &(0x7f0000000140)=@prog_bind_map={r0, r1, 0x66e0}, 0x10) bpf$auto(0x1, &(0x7f0000000080)=@test={r2, 0x1a, 0x7ff, 0x6, 0x1, 0x9, 0x7f, 0x200, 0xff, 0x9, 0xb0c0, 0xe3, 0x1, 0x6, 0x3}, 0x5) fsetxattr$auto(r0, &(0x7f0000002ac0)='/$\x00', 0x0, 0x4, 0x0) read$auto_dev_fops_plock(r0, &(0x7f0000000000)=""/137, 0x89) r3 = openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000003740)='/proc/cmdline\x00', 0x500, 0x0) finit_module$auto(r3, 0x0, 0x7) r4 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/bus/usb/022/001\x00', 0x20882, 0x0) ioctl$auto_USBDEVFS_CONTROL(r4, 0xc0185500, &(0x7f0000000240)={0x23, 0x1, 0x11, 0x5, 0x7ff, 0x7fb, &(0x7f0000000100)}) 5m25.35361098s ago: executing program 1 (id=2743): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) listen$auto(0x3, 0x81) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) madvise$auto(0x0, 0x2003f2, 0x15) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff) r3 = openat$auto_proc_uid_map_operations_base(0xffffffffffffff9c, &(0x7f00000013c0)='/proc/self/uid_map\x00', 0x8006, 0x0) write$auto_proc_uid_map_operations_base(r3, 0x0, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0xa8, r2, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NFSD_A_SERVER_SCOPE={0x81, 0x4, 'nfsf\x00\xd8\xef\xe4-\x13+r\xf3\fT1Z\xa7J[\x81\a\xcf-\xdf\x90\x1f\x8f\xc8\x13e\xe2R7D\x832j\xce}\xa3V\xb7\xa1o\\\xe6\x13\xbc\f\xe3\xae\xb8~\xd3\xd2+J\'\xc3\xec\xc9\fp\xc8a\xbe\xfe`\xa7\xa9AKDd\'\xa0\x01\xf6\x13y\xe8\xca\xf4Q\x9e\x03*]\xda\x1e\x11t\xe2\xd5uw+\x93\xfc\x04l\xd3\xa6t\x86k\x80\xd9\x14s\xec\xe2H\xc0=(\xf99\x8ac\xa7\x85\x99\x87'}, @NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0x85}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x2}]}, 0xa8}}, 0x4000) madvise$auto(0x0, 0x200007, 0x19) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/thread-self/pagemap\x00', 0x404001, 0x0) mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0xb74, 0x66a) madvise$auto(0x0, 0xffffffffffff0001, 0x15) socket(0x2, 0x3, 0xa) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000300)='/sys/devices/virtual/block/zram0/mm_stat\x00', 0x8900, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r4, &(0x7f0000000400)=""/217, 0xd9) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x54) mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) bpf$auto(0xfffffffe, &(0x7f00000001c0)=@query={@target_fd, 0x8, 0x3, 0x5, 0xff, @count=0xe35c, 0x0, 0x5, 0x80000000000006, 0xd9, 0xffffffff}, 0x6f2) sendmsg$auto_ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="d4000000", @ANYRES16=0x0, @ANYBLOB="100027bd7000fbdbdf2518000000200001800247eea41fac000014000200766574683100000000000000000000000800070063fbffff0500060001000000840002803d00488013b37090badc49d6dc93876646d25a4d297d01cd3b7da38d12889cc50d505f353dc42d0a3c0a14c7b46428910708003600", @ANYRES32=0x0, @ANYBLOB="0400b3800000003d003b800400a4800c009a00008000000000000004008680c16ab1b1b39dcaa14b6af7dcc011b43cf706e562811c62b28a702b72e0a87126700294f2350000000c000180080003"], 0xd4}, 0x1, 0x0, 0x0, 0x20000880}, 0x20008000) 5m10.159137531s ago: executing program 32 (id=2743): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) listen$auto(0x3, 0x81) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) madvise$auto(0x0, 0x2003f2, 0x15) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff) r3 = openat$auto_proc_uid_map_operations_base(0xffffffffffffff9c, &(0x7f00000013c0)='/proc/self/uid_map\x00', 0x8006, 0x0) write$auto_proc_uid_map_operations_base(r3, 0x0, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0xa8, r2, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NFSD_A_SERVER_SCOPE={0x81, 0x4, 'nfsf\x00\xd8\xef\xe4-\x13+r\xf3\fT1Z\xa7J[\x81\a\xcf-\xdf\x90\x1f\x8f\xc8\x13e\xe2R7D\x832j\xce}\xa3V\xb7\xa1o\\\xe6\x13\xbc\f\xe3\xae\xb8~\xd3\xd2+J\'\xc3\xec\xc9\fp\xc8a\xbe\xfe`\xa7\xa9AKDd\'\xa0\x01\xf6\x13y\xe8\xca\xf4Q\x9e\x03*]\xda\x1e\x11t\xe2\xd5uw+\x93\xfc\x04l\xd3\xa6t\x86k\x80\xd9\x14s\xec\xe2H\xc0=(\xf99\x8ac\xa7\x85\x99\x87'}, @NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0x85}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x2}]}, 0xa8}}, 0x4000) madvise$auto(0x0, 0x200007, 0x19) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/thread-self/pagemap\x00', 0x404001, 0x0) mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0xb74, 0x66a) madvise$auto(0x0, 0xffffffffffff0001, 0x15) socket(0x2, 0x3, 0xa) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000300)='/sys/devices/virtual/block/zram0/mm_stat\x00', 0x8900, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r4, &(0x7f0000000400)=""/217, 0xd9) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x54) mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) bpf$auto(0xfffffffe, &(0x7f00000001c0)=@query={@target_fd, 0x8, 0x3, 0x5, 0xff, @count=0xe35c, 0x0, 0x5, 0x80000000000006, 0xd9, 0xffffffff}, 0x6f2) sendmsg$auto_ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="d4000000", @ANYRES16=0x0, @ANYBLOB="100027bd7000fbdbdf2518000000200001800247eea41fac000014000200766574683100000000000000000000000800070063fbffff0500060001000000840002803d00488013b37090badc49d6dc93876646d25a4d297d01cd3b7da38d12889cc50d505f353dc42d0a3c0a14c7b46428910708003600", @ANYRES32=0x0, @ANYBLOB="0400b3800000003d003b800400a4800c009a00008000000000000004008680c16ab1b1b39dcaa14b6af7dcc011b43cf706e562811c62b28a702b72e0a87126700294f2350000000c000180080003"], 0xd4}, 0x1, 0x0, 0x0, 0x20000880}, 0x20008000) 2m43.230365233s ago: executing program 0 (id=3221): openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x34d802, 0x0) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(r0, r0, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r1 = io_uring_setup$auto(0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_ETHTOOL_MSG_STRSET_GET(r2, 0x0, 0x10) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x80000, 0x0) read$auto(r3, 0x0, 0x20) close_range$auto(0x2, 0x8, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x20b42, 0x0) r4 = socket(0x1d, 0x3, 0x1) setsockopt$auto(r4, 0x65, 0x1, 0x0, 0x800) bind$auto(0x3, 0x0, 0x6a) r5 = socket(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'vxcan1\x00'}) bind$auto(r1, &(0x7f0000000040)=@l2={0x1f, 0x7a9, @any, 0xc, 0x1}, 0x10) close_range$auto(0x2, 0x8, 0x0) r6 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000000c0), 0x40002, 0x0) close_range$auto(0x2, 0xa, 0x0) fanotify_init$auto(0x5, 0x2000000000002) socket(0x2, 0x801, 0x100) connect$auto(0x3, &(0x7f00000000c0), 0x55) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x200) ioctl$auto_KVM_CREATE_VM(r6, 0xae01, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) 2m42.739941346s ago: executing program 0 (id=3223): fcntl$auto(0xffffffffffffffff, 0x1ffffffe, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) openat$auto_vhci_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket(0x11, 0x3, 0x9) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty0\x00', 0x201, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/mnt\x00') listmount$auto(&(0x7f0000000100)={0x1c, @inferred=r0, 0x8000000000, 0xfffffffffffffff7}, 0x0, 0x0, 0x1) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000240)='/dev/admmidi2\x00', 0x101000, 0x0) ioctl$auto_SNDRV_RAWMIDI_IOCTL_STATUS32(r1, 0xc0245720, 0x0) fcntl$auto(0xffffffffffffffff, 0x1ffffffe, 0x0) (async) close_range$auto(0x0, 0xfffffffffffff000, 0x2) (async) openat$auto_vhci_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) socket(0x11, 0x3, 0x9) (async) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty0\x00', 0x201, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) close_range$auto(0x2, 0x8, 0x0) (async) socket(0x10, 0x2, 0x0) (async) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/mnt\x00') (async) listmount$auto(&(0x7f0000000100)={0x1c, @inferred=r0, 0x8000000000, 0xfffffffffffffff7}, 0x0, 0x0, 0x1) (async) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000240)='/dev/admmidi2\x00', 0x101000, 0x0) (async) ioctl$auto_SNDRV_RAWMIDI_IOCTL_STATUS32(r1, 0xc0245720, 0x0) (async) 2m42.372854455s ago: executing program 0 (id=3224): r0 = socket(0x2, 0x1, 0x106) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) setsockopt$auto(r0, 0x1, 0x12, &(0x7f0000000400)='\'\ak\xb6\xc8\vFx\xed\xd6\xf8\x00\x10\xa4#\x92`\xdb\xafL\x0f\xfbUV\xa6KH]Cv\xbf\xf2a\v', 0xeb66) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) openat$auto_cachefiles_daemon_fops_internal(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) unshare$auto(0x40000080) ioctl$auto_NS_GET_TGID_IN_PIDNS(0xffffffffffffffff, 0x8004b709, &(0x7f0000000280)=0x5) unshare$auto(0x40000080) r1 = socket(0x18, 0x800, 0x2) getpeername$auto(r1, &(0x7f0000000040)=@llc={0x1a, 0x338, 0x7, 0xc, 0x9, 0x8, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, &(0x7f0000000080)=0xa98) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r3 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$auto_IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, 0x0) ustat$auto(0x1, &(0x7f0000000240)={0x1, 0x7, "2ddae92bbeed", "ec25ec6c6002"}) write$auto(r2, &(0x7f0000000400)='/dev/\x98@dio1\x00', 0x100000a3d9) getsockopt$auto_SO_RCVLOWAT(r3, 0x0, 0x12, &(0x7f0000000180)='\x00', &(0x7f00000001c0)=0x19a) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) sendmmsg$auto(0x15, &(0x7f0000000100)={{0x0, 0x6, &(0x7f00000000c0)={&(0x7f00000008c0), 0x9}, 0x7f, 0x0, 0x8000, 0x2}, 0x7}, 0x3, 0x0) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, 0x0, 0x106, 0x0, 0x1, 0x3}, 0xed7138c}, 0x7, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80802, 0x0) r4 = socket(0x2b, 0x1, 0x0) ioctl$auto_BTRFS_IOC_ENCODED_WRITE_32(r3, 0x40789440, &(0x7f00000000c0)={0x6754, 0x5, 0xaf7, 0x8, 0x2, 0x4, 0x5800000000000000, 0xeea, 0x8, "57ef0f1414cd3c1c67b49c20aa95bbbfd2b68fae19263df84167c68a423e889e2cbcb6b41dc07aa2dfffe24c19d2b2c3a50f4133f72a36f28bbcf4c8ec369de0"}) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x11}}, 0x6a) sendmmsg$auto(r4, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x3, 0x20000000) sendfile$auto(0x1, 0x3, 0x0, 0x7ff) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000200)='/dev/sg1\x00', 0x800, 0x0) sendto$auto(0x3, 0x0, 0x2000f, 0x101, 0x0, 0x1c) 2m38.923452145s ago: executing program 0 (id=3230): r0 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) socket(0x18, 0xa, 0x1) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) socket(0x29, 0x2, 0x0) io_uring_setup$auto(0x6, 0x0) setsockopt$auto(0x3, 0x1, 0x2e, 0x0, 0x9) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x801, 0x106) r1 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_FRAME(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000e00)={0x320, r1, 0x403, 0x9, 0x25dfdbf8, {}, [@HWSIM_ATTR_ADDR_RECEIVER={0xa, 0x1, "196f88149b0c"}, @HWSIM_ATTR_PMSR_RESULT={0x300, 0x1c, 0x0, 0x1, [@NL80211_PMSR_ATTR_PEERS={0x15c, 0x5, 0x0, 0x1, [{0x158, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_RESP={0x1c, 0x4, 0x0, 0x1, [@NL80211_PMSR_RESP_ATTR_AP_TSF={0xc, 0x4, 0x2}, @NL80211_PMSR_RESP_ATTR_AP_TSF={0xc, 0x4, 0x400}]}, @NL80211_PMSR_PEER_ATTR_RESP={0x8, 0x4, 0x0, 0x1, [@NL80211_PMSR_RESP_ATTR_FINAL={0x4}]}, @NL80211_PMSR_PEER_ATTR_RESP={0x24, 0x4, 0x0, 0x1, [@NL80211_PMSR_RESP_ATTR_HOST_TIME={0xc, 0x3, 0x6}, @NL80211_PMSR_RESP_ATTR_HOST_TIME={0xc, 0x3, 0x4}, @NL80211_PMSR_RESP_ATTR_STATUS={0x8, 0x2, 0xfffffffe}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xb9, 0x1, "e63994046b8b47b704c35c537bbecfb53f849b9779fdd1fd4f1f9e11619f20f57a1515e08ecd2ab46115feda673b960e6cc9ff7a23209b57822c059916f2355661d38b19100f8a3358df914be85190c04e8477aba26957f3405980a0509f4707baf90990b0578b2e79bb2c7845284fc67f2a8b55b327102880e9f389c790fc2e74c149c47ca4a3d3c7476fd73f45c047bbe53a3513604a2b6531ae547ab5498fd9abe3eb65cd0f37470930506979a6bea61d699571"}, @NL80211_PMSR_PEER_ATTR_RESP={0x50, 0x4, 0x0, 0x1, [@NL80211_PMSR_RESP_ATTR_DATA={0x4c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_RESP_ATTR_RTT_AVG={0xc, 0xd, 0x4a}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_RESP_ATTR_BURST_INDEX={0x6, 0x2, 0x7}, @NL80211_PMSR_FTM_RESP_ATTR_BURST_DURATION={0x5, 0x7, 0xb2}, @NL80211_PMSR_FTM_RESP_ATTR_RTT_SPREAD={0xc, 0xf, 0x9a3}, @NL80211_PMSR_FTM_RESP_ATTR_RTT_AVG={0xc, 0xd, 0xfa}, @NL80211_PMSR_FTM_RESP_ATTR_DIST_AVG={0xc, 0x10, 0x90}]}]}]}]}]}, @NL80211_PMSR_ATTR_PEERS={0x19c, 0x5, 0x0, 0x1, [{0x198, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xc7, 0x1, "9990b702f23f24ba6ff120a0fcb58e8e4cdb357701b42c5a189f95624636da21f7c1977d387eecf746455dbe5c50c6d3c0f7a219f8dfbeeb4d624c326beb3dc306a2beb4bcf55f2b899d35e399164630481c5a7f6bcbc3175a64f63fc77e4add69a13bfabc84bce647bb920a7c5b8c40f5e4317479cc6e550db4d37cddd1204e2d66b3193e55f81d81c0c36299ad10ce265c3bb072f888352f3bbf7ddece5860b14a10b21b2a2d19bcadb441f71dc27ca6a3a7409d6111c9251a9584f551bc5b199270"}, @NL80211_PMSR_PEER_ATTR_ADDR={0xb0, 0x1, "3f54ceec65115c5e9e6c60506343bd933a129395500551f52d9dfab26cb7f0526ce7ef240750960efbb0c51dd5fbb9b03cdd83cf85cff74ba26668afc65bd98bf9aac7fc85e259f3cac4a5bd46c2b70a405e0b42dc62484b790bedba04d4b2975c9bc2980affe2133967cca09e878505e2b64cb1c6cacae08e5a689df91b8b076c0e77070a178227fdf597e8258bf5191c0e9c156fcd856d8277da5ce06f45b79b216c4740eeedee6037df4e"}, @NL80211_PMSR_PEER_ATTR_ADDR={0x1c, 0x1, "315eb081c7a24bfd0484115721f36a73d903689a7b2c3023"}]}]}, @NL80211_PMSR_ATTR_PEERS={0x4}]}]}, 0x320}, 0x1, 0x0, 0x0, 0x80}, 0x20048880) 2m38.563080226s ago: executing program 0 (id=3233): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = signalfd4$auto(0xffffffff, 0x0, 0x8, 0x0) r2 = io_uring_setup$auto(0x86, 0x0) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), r2) sendmsg$auto_NL80211_CMD_SET_POWER_SAVE(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000841}, 0x4004004) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_802_15_4_mac(&(0x7f0000000200), r2) sendmsg$auto_IEEE802154_LLSEC_GETPARAMS(r3, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r4, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@IEEE802154_ATTR_BCN_ORD={0x5, 0x17, 0x7}, @IEEE802154_ATTR_FRAME_RETRIES={0x5, 0x28, 0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0xaaaba978e63e307e}, 0x40000) sendmsg$auto_IEEE802154_DISASSOCIATE_REQ(r1, &(0x7f0000000480)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x5c, r4, 0x800, 0x70bd27, 0x25dfdbfd, {}, [@IEEE802154_ATTR_SRC_PAN_ID={0x6, 0xd, 0x8}, @IEEE802154_ATTR_LLSEC_KEY_USAGE_FRAME_TYPES={0x5}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x6}, @IEEE802154_ATTR_LLSEC_KEY_USAGE_FRAME_TYPES={0x5, 0x31, 0x2b}, @IEEE802154_ATTR_DURATION={0x5, 0x15, 0x4}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x2}, @IEEE802154_ATTR_SF_ORD={0x5, 0x18, 0x7}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x4}, @IEEE802154_ATTR_STATUS={0x5, 0x3, 0xc}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000001}, 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'macvlan0\x00', 0x0}) sendmsg$auto_IEEE802154_DEL_IFACE(r0, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x68, r4, 0x100, 0x70bd29, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEST_HW_ADDR={0xc, 0xf, 0x2}, @IEEE802154_ATTR_CSMA_MIN_BE={0x5, 0x26, 0x40}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r5}, @IEEE802154_ATTR_LLSEC_KEY_BYTES={0x14, 0x30, "0f71b051debd3fc8bdb7d620ce69537f"}, @IEEE802154_ATTR_BCN_ORD={0x5, 0x17, 0x5}, @IEEE802154_ATTR_LLSEC_KEY_BYTES={0x14, 0x30, "172923260e40aa6f2540b622b67aac8f"}, @IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5, 0x37, 0x7}]}, 0x68}, 0x1, 0x0, 0x0, 0x800}, 0x0) r6 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x1000, 0x0) mmap$auto_tracing_buffers_fops_trace(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x8e051, r6, 0x0) getsockopt$auto_SO_RCVTIMEO_OLD(r0, 0xfffffffe, 0x14, &(0x7f0000000000)='^,#\x00', &(0x7f0000000040)=0x2) r7 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x5c, r7, 0x1, 0x70bd2d, 0x25dfdbf9, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @mcast2}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @rand_addr=' \x01\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x400c004) 2m38.150929554s ago: executing program 0 (id=3234): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) listen$auto(0x3, 0x81) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) madvise$auto(0x0, 0x2003f2, 0x15) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)=ANY=[@ANYRES8, @ANYRES16, @ANYBLOB="df250c0000000000000000"], 0x14}}, 0x24048004) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff) r3 = openat$auto_proc_uid_map_operations_base(0xffffffffffffff9c, &(0x7f00000013c0)='/proc/self/uid_map\x00', 0x8006, 0x0) write$auto_proc_uid_map_operations_base(r3, 0x0, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0xa8, r2, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NFSD_A_SERVER_SCOPE={0x81, 0x4, 'nfsf\x00\xd8\xef\xe4-\x13+r\xf3\fT1Z\xa7J[\x81\a\xcf-\xdf\x90\x1f\x8f\xc8\x13e\xe2R7D\x832j\xce}\xa3V\xb7\xa1o\\\xe6\x13\xbc\f\xe3\xae\xb8~\xd3\xd2+J\'\xc3\xec\xc9\fp\xc8a\xbe\xfe`\xa7\xa9AKDd\'\xa0\x01\xf6\x13y\xe8\xca\xf4Q\x9e\x03*]\xda\x1e\x11t\xe2\xd5uw+\x93\xfc\x04l\xd3\xa6t\x86k\x80\xd9\x14s\xec\xe2H\xc0=(\xf99\x8ac\xa7\x85\x99\x87'}, @NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0x85}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x2}]}, 0xa8}}, 0x4000) madvise$auto(0x0, 0x200007, 0x19) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/self/pagemap\x00', 0x12001, 0x0) mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0xb74, 0x66a) madvise$auto(0x0, 0xffffffffffff0001, 0x15) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x54) mmap$auto(0x1, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) bpf$auto(0xfffffffe, &(0x7f00000001c0)=@query={@target_fd, 0x8, 0x3, 0x5, 0xff, @count=0xe35c, 0x0, 0x5, 0x80000000000006, 0xd9, 0xffffffff}, 0x6f2) sendmsg$auto_ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="d4000000", @ANYRES16=0x0, @ANYBLOB="100027bd7000fbdbdf2518000000200001800247eea41fac000014000200766574683100000000000000000000000800070063fbffff0500060001000000840002803d00488013b37090badc49d6dc93876646d25a4d297d01cd3b7da38d12889cc50d505f353dc42d0a3c0a14c7b46428910708003600", @ANYRES32=0x0, @ANYBLOB="0400b3800000003d003b800400a4800c009a00008000000000000004008680c16ab1b1b39dcaa14b6af7dcc011b43cf706e562811c62b28a702b72e0a87126700294f2350000000c000180080003"], 0xd4}, 0x1, 0x0, 0x0, 0x20000880}, 0x20008000) 2m22.282634205s ago: executing program 33 (id=3234): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) listen$auto(0x3, 0x81) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) madvise$auto(0x0, 0x2003f2, 0x15) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)=ANY=[@ANYRES8, @ANYRES16, @ANYBLOB="df250c0000000000000000"], 0x14}}, 0x24048004) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff) r3 = openat$auto_proc_uid_map_operations_base(0xffffffffffffff9c, &(0x7f00000013c0)='/proc/self/uid_map\x00', 0x8006, 0x0) write$auto_proc_uid_map_operations_base(r3, 0x0, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0xa8, r2, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NFSD_A_SERVER_SCOPE={0x81, 0x4, 'nfsf\x00\xd8\xef\xe4-\x13+r\xf3\fT1Z\xa7J[\x81\a\xcf-\xdf\x90\x1f\x8f\xc8\x13e\xe2R7D\x832j\xce}\xa3V\xb7\xa1o\\\xe6\x13\xbc\f\xe3\xae\xb8~\xd3\xd2+J\'\xc3\xec\xc9\fp\xc8a\xbe\xfe`\xa7\xa9AKDd\'\xa0\x01\xf6\x13y\xe8\xca\xf4Q\x9e\x03*]\xda\x1e\x11t\xe2\xd5uw+\x93\xfc\x04l\xd3\xa6t\x86k\x80\xd9\x14s\xec\xe2H\xc0=(\xf99\x8ac\xa7\x85\x99\x87'}, @NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0x85}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x2}]}, 0xa8}}, 0x4000) madvise$auto(0x0, 0x200007, 0x19) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/self/pagemap\x00', 0x12001, 0x0) mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0xb74, 0x66a) madvise$auto(0x0, 0xffffffffffff0001, 0x15) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x54) mmap$auto(0x1, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) bpf$auto(0xfffffffe, &(0x7f00000001c0)=@query={@target_fd, 0x8, 0x3, 0x5, 0xff, @count=0xe35c, 0x0, 0x5, 0x80000000000006, 0xd9, 0xffffffff}, 0x6f2) sendmsg$auto_ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="d4000000", @ANYRES16=0x0, @ANYBLOB="100027bd7000fbdbdf2518000000200001800247eea41fac000014000200766574683100000000000000000000000800070063fbffff0500060001000000840002803d00488013b37090badc49d6dc93876646d25a4d297d01cd3b7da38d12889cc50d505f353dc42d0a3c0a14c7b46428910708003600", @ANYRES32=0x0, @ANYBLOB="0400b3800000003d003b800400a4800c009a00008000000000000004008680c16ab1b1b39dcaa14b6af7dcc011b43cf706e562811c62b28a702b72e0a87126700294f2350000000c000180080003"], 0xd4}, 0x1, 0x0, 0x0, 0x20000880}, 0x20008000) 1m55.207814144s ago: executing program 2 (id=3329): sendmsg$auto_GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01002d0008000700"/18, @ANYRES32], 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16, @ANYBLOB="000126bd7000fbdbdf2502000000080001"], 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x8080) r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="06000000", @ANYRES16=0x0, @ANYBLOB="01"], 0x14}, 0x1, 0x0, 0x0, 0x30000881}, 0xc040804) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB='R'], 0x1ac}}, 0x40000) sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0x96bc}, 0x2, &(0x7f0000000380), 0x7, 0xa505}, 0x9}, 0x7, 0x4008) 1m54.877638771s ago: executing program 2 (id=3330): r0 = socket(0x23, 0x805, 0x0) r1 = accept$auto(r0, 0x0, 0x0) r2 = bpf$auto_BPF_ENABLE_STATS(0x20, &(0x7f0000000000)=@raw_tracepoint={0x867d, r1, 0x0, 0x7f}, 0x0) getdents64$auto(r2, &(0x7f00000000c0)={0x8, 0xffffffffffffffff, 0x6, 0x8, "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"}, 0x9cab) 1m54.495782672s ago: executing program 2 (id=3331): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = open(0x0, 0x22240, 0x55) statx$auto(r1, 0x0, 0x1003, 0x4005, 0x0) socket(0x1, 0x5, 0x0) ioctl$auto_IOCTL_VMCI_VERSION2(r1, 0x7a7, 0x0) setsockopt$auto(r0, 0xa, 0x5, 0x0, 0x8e) r2 = getpid() process_vm_readv$auto(r2, &(0x7f0000000000)={0x0, 0xffe}, 0x1, 0x0, 0x6, 0x0) setsockopt$auto(0x3, 0x1, 0x41, 0x0, 0x88) 1m54.155219355s ago: executing program 2 (id=3332): timer_settime$auto(0x0, 0x9, &(0x7f0000000080)={{0x7, 0x1}, {0xb}}, 0x0) (async) timer_settime$auto(0x0, 0x9, &(0x7f0000000080)={{0x7, 0x1}, {0xb}}, 0x0) mkdir$auto(&(0x7f0000000040)='./file0\x00', 0x2) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/security/tomoyo/query\x00', 0x62402, 0x0) unshare$auto(0x8000000) shmget$auto(0x0, 0xfffffffffeffffff, 0x69c2) (async) shmget$auto(0x0, 0xfffffffffeffffff, 0x69c2) r0 = socket(0xb, 0x2, 0x100) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nbd8\x00', 0x20000, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/tty12\x00', 0x101840, 0x0) (async) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/tty12\x00', 0x101840, 0x0) r3 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) ioctl$auto(r2, 0x541c, r3) ioctl$auto_SNDCTL_DSP_SYNC(r3, 0x5001, &(0x7f0000000300)="2b7956fa8a2881e7e40a2bbd5923d08ecba68e0cc973513066e1f12c849d8a5a8d98e05b2da6ff33e182e61373f62e5249730c597c1d30b390d27ef401c297923ffcafde40c1a6904abe8e66e74ee1918062b00defc2ad9aea0d59e9c0d4f866b1fb125deada7cd6268074e08359d171cb1954b6b53012445e70ce9f3fc1c0c96b526b517b6cd909e6b825a5fac48603b066673d4d90fd7bd7ae9de4cb25623ce2967f94cd415dd4c70566068c848546359dd205c010dfe0ca8751bc3924195105ab5d9f6b86232b1e7cf5da7e9d6db9468ea21cddfe80e645d3ba55ac5ab1173a99b77c75edd30795c2b5") r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000000c0), r0) sendmsg$auto_NL80211_CMD_CONNECT(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="18000000", @ANYRES16=r4, @ANYRES64=r2], 0x18}, 0x1, 0x0, 0x0, 0x854}, 0x4) (async) sendmsg$auto_NL80211_CMD_CONNECT(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="18000000", @ANYRES16=r4, @ANYRES64=r2], 0x18}, 0x1, 0x0, 0x0, 0x854}, 0x4) sendmsg$auto_NL80211_CMD_SET_STATION(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x90}, 0x20000001) ioctl$auto(r1, 0xab00, r0) unshare$auto(0x40000080) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (async) r5 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r5, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) listen$auto(0x3, 0x81) (async) listen$auto(0x3, 0x81) mmap$auto(0x9, 0x2020009, 0x3, 0x7fffffff, 0xfffffffffffffffa, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) madvise$auto(0x0, 0x2003f2, 0x15) (async) madvise$auto(0x0, 0x2003f2, 0x15) madvise$auto(0x0, 0x200007, 0x19) mq_unlink$auto(&(0x7f0000000040)='/dev/rtc0\x00') (async) mq_unlink$auto(&(0x7f0000000040)='/dev/rtc0\x00') r6 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f00000001c0), 0x641, 0x0) msgrcv$auto(0x4, &(0x7f0000000240)={0x7, 0xf}, 0x9, 0x9, 0x3) (async) msgrcv$auto(0x4, &(0x7f0000000240)={0x7, 0xf}, 0x9, 0x9, 0x3) setsockopt$auto(0xffffffffffffffff, 0x11, 0xa, 0x0, 0x8) setsockopt$auto_SO_SNDTIMEO_NEW(r6, 0xa4, 0x43, &(0x7f0000000200)='nl80211\x00', 0x8000) 1m52.035913982s ago: executing program 2 (id=3335): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$auto_SO_DETACH_FILTER(r2, 0x1, 0x19, &(0x7f00000061c0)='ethtool\x00', 0x5) r3 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) close_range$auto(r3, r3, 0x0) sendmsg$auto_NFC_CMD_DISABLE_SE(r2, &(0x7f0000001100)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000010c0)={&(0x7f0000002440)=ANY=[@ANYBLOB="3010000045f5fecde829154dacad58e4b1e937ef513cafcb50c123724aa4ddb2f1d681a8023cbbb120dc5868d71bae7758315343fcf8814d537ad4105203b06101000000933c8bdd985b9a", @ANYRES16=0x0, @ANYBLOB="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"], 0x1030}, 0x1, 0x0, 0x0, 0x4}, 0x8004) r4 = socket(0x10, 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f00000000c0), r5) io_uring_register$auto_IORING_REGISTER_PBUF_RING(r4, 0x16, &(0x7f0000000f40)="875fe8c5ccaf1ef0741855970c5bd32dd107e22279877efbe4327eaf29c2a981f0ea6ba614a8b8b37655bd2d01a1b463ed6466bc27b9ded9939f59758e868a9b5ba1b66d6168f7eb966beb84be75c6a269c91b984c84974fc426eeb90f1eda631d77c459b0038036d692142f796a08d0ba7835f19fecefa59bef1938e8f49b98e1564834739b4b67a2bb2d0a92bb54504fe586c1b93c9654048fd0e702d0bb6519f0f723c3826bd7961d8dbca11769089ac6ffc506f4c8a10ee613a96c2f9cab94562ba8c767e649e14f60b20be56b8c85d575fc7e", 0x4) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001140)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01002dbd7000f9dbdf250100000006000200010000000500070058000000080009000800000008000a000800000008001700", @ANYRES32=r3, @ANYBLOB="f8fa3140fc17a7aa56ff0b7445907ad8a78ae748aafb0da4572f7b012b6c3b690ca2948c8bbd372023e314611d0704de16a53071ee583e16f6f53f7819aac68154711cc06759d7e3b36550647b02"], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$auto_NL80211_CMD_NEW_STATION(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='`\r+\x00', @ANYRES16=r1, @ANYBLOB="010026bd7000fcdbdf25130000001000b000eeec8dca457842a9cb2ebfaad2067f004416261c4285639dcb869a93de52e562f569f51489c43bb67ae82d136d76f0802f0b03804af1e5da8037f28ca1e4a998d12d93aab8d1e17553eca8faf0102667622c1fab044c18fc3fff5d6974b5eb141213a115d7fa91eed110e88fb53eb317172a37cb93810fbcb8c312e498e4032292302eb7fd474d46be91da28c29107f7466434f7de787a9fe0909a05103b9c55f583d0efd0cae565978632a275959660634c5eab73c3ed2e094064e825a88160a465ff10f30bcd81f75364e574d0db17b9e37646f99672c1a665cf2a8e06acc85bc9dad949ff6b30529fafbecf196982b4d71304fe6f14d2cf7e9f7eae478e1cc9b3487582e220a61419d9c348ad11e55ddded76eb73da71a8cfc002a46bd4e8f58771a35189e0e7c9252ea68de88d9b096d84ceee3a14a3b7d8a30a8134c6cddec4109abe8b637591767548d2cd8523520388868dd726092c4cf66c3fba452a593e5f341d94150f367e53e4aa0fc85c0b843898dc8f81b37be7673aaf8c078287f8ec49edcf396f888b67bd115fea240106a818f3a9614e5f45460f3ccbd9d26e4adc69a4ee70dab7a11cef33ebb325a552f8aee63aca72f5b4acf849bac8d2daa6bdf34e408c5f856e716832d1eb20ff74644022c09328b77bef1acc212bc6cbbcaa7ea04f061c66c4bf9553ffdc75124dbd362b3717556e86d5670fb08c420d7bc9be9403cd220076956a0c5610cb7dbb4ece55db6f392889be02ca1793a30cdee4905c39225b1107d1767e2093be0d057345a8dfa13bfc7187ae20868bcb33c1845cc660dc9f99505c349000478a8c2d1ce8e14febaa479719bd37bf5b4f68ca453151bc97d0af2f35197d78a18940805aa2ba8031e195d01132369072bec60099c25d1745fb9ba8fbd5b0a00c378d8a79373bd2aab9a77b1808a1baf7bb5295b161e9d41fb43a083f362062323bfe8df5e0b6bdebb0d9150b91a41f00c6384768d0a977299b83de436136fdd2dffd127151755dfc44229753094c35f37e512e2c62876f0651b991a3b1acd319722a00b488f61beee6ad01c9d0d1f054d2f9e33c8d00109cafdba0284bfda510f08e6b273c818231d762645fbb138eb6b4307dcb41da225d668c8d6e32d2a62f4d868225dd26cffbc8c1e0325f7d2be8ef88e7dfbd45130ff4daab2f57c78a083fa246c582cbda33ab1e38cf0b7b1f1d113ed4a39ecb01f600c4205b616a48a4b82d564131a52c2d3fa07032d98451619710b223ac2b9b68fb06c4779f1bc32b7b2c4bcf87fd72bafcd43fb37d09776eebfc9e2538c39e473b2f1cc3ebd527de4abfda1b3e390fde4b0131747ff1658d8b795dc21375cbcc222e2df9b6a06d7b0c4a71df455f2b2aa583ea18f3ed3d7f59d8ea5b5e20aecd85d089556469375af584f9471f0ce8bd669700a1df7c85a687bc076a597767f5a688c9f1fcbc8415fa25f29223c8ca83926387997205c577eb964c5f757d0ee1b645d3cc918cffafb62995bdee016d4b14e17ca73b54fe6cfa0a3101c52d2ceb618d8076855f5aa1fa3c451e0af55d687d7ab0133f0754cd15ba6c055a8699fc3322b3a3db618cea9acc8ca3f87a3a3a1e8982232679feecb09711e69d6bc8873e4771e6b1f918106e9c84f8cb8ccdd6646c8e729825a68f5f3cb0a795e7d911534d3173447d5101fa1918870688ae488ed348dafbaa30764714050c6dfad0e08d7b364af1f893eecd0bd4ff7c94a7ac62f33f5f3046132c410de3333c5ca427c64d7ebfc993fa750de451219631cb677400e892f71f60f2ad8a365a30f42b9df86ed637c142aec0a415b2e820176317cfbb945a961bbd4b4e418ec23b9af1660670a6e9cf6fd8a475fd089ed4d37952044e98dd19c7807d00e455f8445d08bf05a6852d530f6d7097fbbfb9f7e11b13986357514775b42c9ade79d21e1a920c441ea2fb10e418445c81e2a887dcb8705e98816fb66a18411b1798ce7d1bd7a1c7acf8b4f6cca84c7233bcef0d6d6691481f79d164dce20798567b413edf9bc1b10f9ce53a222de532a50233726f1b84308c1c3cef639a623fcfbdb652077eae0daf2eaa44444fe9a49d5536b299280f81fdae0fce43592afe802f812b18fca2b3276adf7af3728f588ddc6b30ae16a1fb0501fcc94101e571ab098ae43478079791c4d3681efdaab188a6749340d2779e29e2562826cf393a02d7c55dece48546fcb54afb0397c995bf20d32267c596e9f08899d60dee317c5f5867bf83a0ff238ea3fd4650217502f92b74042d1b6e56054765a9d8b5f52d9e6618315fd7c29b6154540dcc8bae528d709c9ae89e246fcbb71501d65c03dba8e1572595bd6fb6326512fbb519ce6ab1d487d0ea67eb8343533309f439a356a334821c3a58c71ec996fe31be7ddd44dd7485369b47193b6123dbed8fef43a09eab5cba0c6b4fa6e42ff89e7b4e342fcc72b6308d429d3890d2542343300000e6050e00216657f2e45f09e753c8c68378fa0df8ee600f429902042182d1cc0834715209c06aef2c7945791a42fcfe89320f12937d07dae06bc07e999544bfb794136f64215ff3d474d44ebc149d450f02545905994778855ce5910e2fd9d679f25d2fc78e8be468b0522dd082fc16ce80ee988aeb15000b209b1da743cf0038545c682fcb14dd2d3c08a75899590adf86862f9476a67e2fbcea70ca17d9efe04fab378c4ea49416b58784d97bd100e346b62b9fe7c1bd4f107ed97c3319b3bfa919e5d9a96c920971a7437665d09f155d2c63384df12b751bdd74e5eb18bbbdb092a0c8a88c38de5c34c005d34bc582473238727ccae72853e562b7bd694bc79bf0d2072f0a493144c921cc8fa3333da59160070b6a86d0c4493cebefeb1e42c4b7daa9baa070ac27d3243206b577ce3ca7e16e8ef0f60b6968a9137c82cbbc40851790428bb6098ab004cd8239e215ed47ad9774a25da2e44317a8e6131d74902d6c55a74c6ee264d7d9039d8866b2e4220c46688991e56479932fb6f4a71f596523119182a6c4df89b91a52f557a6ade89d3aa7693dbf83652f7691d45be2a4e472131abda3347ab7ee0893ad9810b37212fc2238951cb08b94730bf830594a0639cc9e0b4f614c56cffbf13513df34ad4700470072d96e1a7ff86c936e052e8f8b3afae9537fca28aaff933da52b594b7b3eec1858f0f35e0a1c09aff4a6da6cc7f6e232fd4c3a4f9b7b85271b204e6bdb39f3b24e9c654ebe5a6fe54768c0c1ccb9cf2a341ccff507b9c833c993c7fb5321c2f601938715621475a653232bf6b34dbd34d4250307e4f747ab4f3d7270125a2d7b1b895eaef334cd03ef66088fc1cefecb954201ee2a6a70ac96966e9d265bb6b78f07e569f85cd569919b24372cccb057b60a2bde93d62bb57eda2f6bf9a1186c6212845e224f5f12acecba1c4cbe9a9a3eb293d2214413d7e35d37fee90b5b924200190bc51ee16a278b6de339a18806a1456edd5c176f22c6b148e39024e19f1770fd69fe12caf16e683b9ddd1214242dafe2157319517772f58b5e2402e179190f693af3c1d9821ef5d790d7cae3802e0d77783885ee0a923b5c050cafb79f810dcb13cbce9539e7c439344484a585bbbf43a8c4232b0ffba49423f919abfaa04ffa43daf2d283f07a2568c4fbaefbd45ec8481b36603a289a5564692f17a55d280b66bea1619373ea2d4478416476ad60527f7b82d7014195f86997cd39859b598b3ed919558eef5b4d4846e0fb2663b7db0a9bff114d38cd4205a5babda7631f73d4f11059f671be5f47fb3b2ccf75edc2892ba58942279a3367b4c161f83c23f5aa7a0857314b738ba3539058c975a7d7f30f63a6481c0bae7929a22a19ec06bf020d120c174120176bf422a78863f6f9b784510721981b50d9d8847b52e4b015118c05edad5a17d9fe723ebf84ad93c65842876f7293d167ea8dfa02789dde990ceb447d1e63dd4196d2aaba0701ce649a0fbc04a9181c7280348c85185f2adac3a031b799142a34205ef403fe7a6a78a4436e3077af4ac5a1a6b11306ebc8bcd26424e554e103071d5a4b6214f29777a6e244c97cb4c256087d6cf4b21312ae10daea681f690156c42266f76da16a4f93f8a24c1f21b657a06a09d6fcbaebcc3e1e11a5657064c4f55263ef92cd672657cc39bba834e32f72a129b74759d39bb6bdf9a979a93029f436b28df63a3e111f15eab5eec7b911b1ff0a47e8d05b11d04fe4cc37e34043da46daf9e02418e452d838c88af2718b100c0d8e099ae8541b06e463b40d53389d97731fba04788337559fdcd10b9115c20acdd10284c79f8c7624f196fd00b5a08b1500a4be0cbcf5245b6644d0abc1d2bbb449d177ff3862add9ae721154ba4f9249b1b2c742404dddf2a8298f9f8858233f6d1c0ee4a46c661cf14e6c86da9d6b893241136341f558522e78903e0913cc12ebe421bdab4275787db140eef69b8d23f2b07257ba723405f964c4fe254fdece6197bd9bae2a86ca263d99471f1b9c1804ab5b8233e8757f4cceffc5c82d256a094cbad8cde5f92dcd2e936228a8b305a064a7ac52163995faeb0ea199c1c270372850c57ceb396b79a44915025891fa30ab00005100fa0005042646e99504825dff97edd563312f394852b8874c39dc03f65d7280c18f278a4e40bbec5ff86b5cddfa23fd3fadd1274596356953639647aa5cbaaeef1c6c0ea1ac7ade42b52fecaa7e0ec900000008004b00030000002400f0800c003a0000000000010000001400110000000000000000000000ffff7f000001"], 0xd60}, 0x1, 0x0, 0x0, 0x24000}, 0x20) mmap$auto(0x0, 0x9, 0x800000000df, 0x9b72, 0xea8a, 0x8000) r7 = openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/psaux\x00', 0x40000, 0x0) poll$auto(&(0x7f0000000000)={r7, 0x3, 0x4}, 0xb, 0x7) r8 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000001280)='/sys/kernel/security/tomoyo/profile\x00', 0x20002, 0x0) write$auto_tomoyo_operations_securityfs_if(r8, &(0x7f00000012c0)="0a1b9a3c3e20fd2da3d31791840bd7886d8ea582574c58e9865c33d76e1cadd6a7b7b426b7fcdc8e357080d70b5ab848770dc8f745d1c76eedaa12b9db053c00000000000030aeb5dfce3531f694dabdbc08f62cb37e5bc82e660cfd70f603b20416c7bf0e95345b899b4466bf6a70b1274b19782b41ac172a1fe65be53e69c6369b67a4cbd6383a0d767d84516183587530a17dbfd83a7678c6dad9918291c7c9de3d61af452f90cf22400c4bcbb841f7d7641b3bccd058f9f2bad31f2ce81e389e210b34f43b4a5af377a6d4353989b4e9d49b25230d1296ef8b30c6bcdf7a6edf5c3258be46ae9d15fc0417e6070000007b9a8b05b4ad586c7b72db5ae55e9d149330720a", 0x106) timer_create$auto(0x1, &(0x7f0000000100)={@sival_ptr=0x0, @inferred, 0x1, @_tid=0xffffffffffffffff}, 0x0) timer_gettime$auto(0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb2, 0xfffffffffffffffb, 0x8000) set_mempolicy$auto(0x3, &(0x7f0000000000)=0x7, 0x9) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000180)='/dev/bus/usb/036/001\x00', 0xa901, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x5d3, 0x810004, 0x400000000ffb, 0x8000000008011, 0xffffffffffffffff, 0xc) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) getrandom$auto(0x0, 0x6000000, 0x3) r9 = socket(0x15, 0x5, 0x0) getsockopt$auto(r9, 0x114, 0x271f, 0xfffffffffffffffc, 0x0) 1m50.333005186s ago: executing program 2 (id=3340): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x24, r1, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@NFSD_A_SERVER_THREADS={0x8, 0x1, 0xfffffffc}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0xffff}]}, 0x24}, 0x1, 0x0, 0x0, 0x4002000}, 0x40010) sendmsg$auto_SMC_NETLINK_DISABLE_SEID(r0, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x10c, 0x0, 0x20, 0x70bd29, 0x25dfdbfb, {}, "91136d69ad98b9f7b70c928df7a301ccac55d88f05ee237ea875497645714e6601841d226df36781632b0bbb995c60c428b2cc76a0f06b3f3e83c4b9e7b4f740de8fe86a99ae1afca02e595f9200f24c468a09fbda0a514f07f678f421c689a5b7bce0290d5be0743df92ede517e7ff69e76a24679992f5bd8ba4b828442c202734a4363ccee0dec1c033579a2797091d17c7a6e744d74244e290143043775115394fca63b9048f341d843a4064a019a23516dff1e58452f1ceb606ef123e2b284aabad3d733605626c3056da481298bd93dbf2602d4eb72347cdc4494eb5e58423bd2b63a78371618fc2255e12bff18eefd12ec92d5a0"}, 0x10c}, 0x1, 0x0, 0x0, 0x4000}, 0x8090) 1m35.06902563s ago: executing program 34 (id=3340): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x24, r1, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@NFSD_A_SERVER_THREADS={0x8, 0x1, 0xfffffffc}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0xffff}]}, 0x24}, 0x1, 0x0, 0x0, 0x4002000}, 0x40010) sendmsg$auto_SMC_NETLINK_DISABLE_SEID(r0, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x10c, 0x0, 0x20, 0x70bd29, 0x25dfdbfb, {}, "91136d69ad98b9f7b70c928df7a301ccac55d88f05ee237ea875497645714e6601841d226df36781632b0bbb995c60c428b2cc76a0f06b3f3e83c4b9e7b4f740de8fe86a99ae1afca02e595f9200f24c468a09fbda0a514f07f678f421c689a5b7bce0290d5be0743df92ede517e7ff69e76a24679992f5bd8ba4b828442c202734a4363ccee0dec1c033579a2797091d17c7a6e744d74244e290143043775115394fca63b9048f341d843a4064a019a23516dff1e58452f1ceb606ef123e2b284aabad3d733605626c3056da481298bd93dbf2602d4eb72347cdc4494eb5e58423bd2b63a78371618fc2255e12bff18eefd12ec92d5a0"}, 0x10c}, 0x1, 0x0, 0x0, 0x4000}, 0x8090) 1m33.078940635s ago: executing program 5 (id=3379): socket(0xa, 0x5, 0x0) mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_NL80211_CMD_LEAVE_OCB(0xffffffffffffffff, 0x0, 0x40000) r0 = openat$auto_adf_ctl_ops_adf_ctl_drv(0xffffffffffffff9c, &(0x7f0000000040), 0x400, 0x0) ioctl$auto_IOCTL_START_ACCEL_DEV(r0, 0x40096102, &(0x7f0000000500)={@config_section=&(0x7f0000000480)={"e4f467b42dfe49413bbe507e67a321eb08e3d8b5a8467097117ec78be8ad3b92a0081099dfe66464b181585d35d08146a176d8ce0bdad9d30b7f6d4ce0657a76", @params=&(0x7f0000000200)={"19b5f05b42c4a8aaad4296fc1735519599dae3581e5b8fb57214ea3768b1128808b5b59271b43dcfcecf8f21486a694a964dada42a819ca7012d240f3ef85143", "6f8e48f5871c3c37e00da898d221445cdfe2cd750afe3d9259c479e0a9df5e37fb4607a1df3a78741721fd2e0004ae959995be25e4c30e5782bff0abbe09a134", @next=&(0x7f0000000140)={"179e479f05e1d3c64da763d0f8e4bb089588fb41ae2ca9f84faa9a8977411cc131abbcdd592c6989cd5e9ca698545e71d866af891c6caac00a36e3212eab52a7", "442b543736dfda3dfe3e322efe50928dc3f469ac76d8431190fe61012b5182197df44a80bc038d38338350ef846bc377cdd854009bab29dce66671c2e95c2609", @next=&(0x7f0000000080)={"e39823054f2d684a3e783689ccea63d00dec49914761166b7e122fad6fcc04477241bb67b98cd87d6b4bdb76e20d78f4d25eeec81f3b73f1edb0855f35c4341f", "8841f82d2e49cff53d03a6d98d4bd08e21caf95bcf41da037e992372a8a4d30feb892d0405155876cb846ac0300b3dec6b1ce242403468a90a3e5047b3ab8813"}, 0x1}, 0x2}, @next=&(0x7f0000000400)={"4aa70523b5a87e827da2b375a4502cf85efe1973b7d959f357c5fe4a404881f5cfc7e68a37710df4f1da3535da9d9f9e7bedf8b5abf99e0fcd91d1172f469936", @params=&(0x7f00000002c0)={"e9f33a4adbb87e85d0ea93b7255e7fe382cdb2f56a34c975c20d836b04e989f164b3776cfd8c06b086a83c6b411a718c008ce8846ca1e8a26df24f53522251eb", "fae18cb4d479f59ca80b8723c98c553168f9f499189d8a0d1e1ee124a981bce74cff52cc3aa885b5ea6ac10bbfc94e79257a23810d33ee3bc42a600547d29c80", @padding3, 0x2}, @next=&(0x7f0000000380)={"8c1606a2d8283b16884cbb58fc93275ec3e0151ab86ed535be89121e1067507360fb4e1326d6233ad00907c4e5d68d267478505455e4b63e7f1e58f39876a46b", @padding1, @padding3}}}, 0x6}) madvise$auto(0x0, 0xffffffffffff0005, 0x17) set_mempolicy_home_node$auto(0x0, 0x200fffd, 0x5, 0x0) io_setup$auto(0x1, 0x0) getsockopt$auto(0xffffffffffffffff, 0x11b, 0x8, 0x0, 0x0) read$auto_proc_sessionid_operations_base(0xffffffffffffffff, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0xfffffffffffffffd, 0xe273, 0x15) sendmmsg$auto(0xffffffffffffffff, &(0x7f00000006c0)={{0x0, 0x5ac, &(0x7f0000000100)={&(0x7f0000000200), 0x49}, 0x5, 0x0, 0x5, 0x1}, 0x5}, 0x2, 0x100) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) get_robust_list$auto(0x0, 0x0, 0x0) setsockopt$auto(r1, 0x10f, 0x87, 0x0, 0x14) setsockopt$auto(0x3, 0x10f, 0x87, 0x0, 0x14) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) prctl$auto(0x37, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0xa, 0x3, 0xeb1, 0x7, 0x8000) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/raw\x00', 0x0, 0x0) read$auto(r2, 0x0, 0x5) madvise$auto(0x0, 0xffffffffffff0005, 0x19) 1m31.06541157s ago: executing program 5 (id=3383): mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket(0xa, 0x3, 0x3b) (async) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) (async, rerun: 64) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (rerun: 64) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) (async, rerun: 64) madvise$auto(0x0, 0x6, 0x66) (rerun: 64) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_wireguard(&(0x7f0000000080), r1) sendmsg$auto_WG_CMD_SET_DEVICE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="009f7c"], 0x14}, 0x1, 0x0, 0x0, 0x20000811}, 0x810) (async, rerun: 32) madvise$auto(0x0, 0xffffffffffff0005, 0x19) (async, rerun: 32) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) lseek$auto(0x3, 0x7fffffffffffffff, 0x0) (async) mmap$auto(0x0, 0xa00006, 0x400002, 0x40ebe, 0xffffffffffffffff, 0x300000000000) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x3, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket$nl_generic(0x10, 0x3, 0x10) (async) close_range$auto(0x2, 0xa, 0x0) mmap$auto(0xe779, 0x400000000007, 0xdf, 0x13, 0xffffffffffffffff, 0x0) socket(0xa, 0x1, 0x84) (async) socket(0x28, 0x5, 0x0) (async) clock_nanosleep$auto(0x86, 0x0, 0x0, 0x0) (async) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x82202, 0x0) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, r0, 0x8000) (async, rerun: 64) r3 = openat$auto_iommufd_fops_main(0xffffffffffffff9c, &(0x7f0000000400), 0x80001, 0x0) (rerun: 64) ioctl$auto_VFIO_IOMMU_UNMAP_DMA(r3, 0x3b72, 0x0) io_uring_setup$auto(0x1, 0x0) (async) r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) ioctl$auto_TIOCSETD2(r4, 0x5423, 0x0) (async) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) 1m29.991485774s ago: executing program 5 (id=3386): r0 = openat$auto_drm_crtc_crc_data_fops_drm_debugfs_crc(0xffffffffffffff9c, &(0x7f0000000000), 0x8080, 0x0) read$auto_drm_crtc_crc_data_fops_drm_debugfs_crc(r0, 0x0, 0x17) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card1\x00', 0x80802, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb2, 0x401, 0x8000) mincore$auto(0x1000, 0x8001, 0x0) socket(0x18, 0x80004, 0x1) socket(0x2, 0x3, 0xa) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/system/memory/memory15/online\x00', 0xa001, 0x0) write$auto(r1, &(0x7f0000000140)='0[.[\x00', 0xcd04) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/mm/lru_gen/enabled\x00', 0xb02, 0x0) sendfile$auto(r2, r2, 0x0, 0x1) openat$auto_drm_crtc_crc_data_fops_drm_debugfs_crc(0xffffffffffffff9c, &(0x7f00000000c0), 0x1000000, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x34d802, 0x0) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, r3, 0x80) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000080), 0x88000, 0x0) ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$auto_KVM_GET_MSRS(r3, 0xc008ae88, &(0x7f0000000100)={0x3, 0x0, [{0x4b564d05, 0x10, 0x1}]}) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x1008000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x100) setsockopt$auto(0x400000000000003, 0x29, 0x1b, 0x0, 0x56b) setsockopt$auto(0x400000000000003, 0x29, 0x1c, 0x0, 0x56b) close_range$auto(0x2, 0xa, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/event0\x00', 0x212040, 0x0) ioctl$auto(r5, 0x80004535, 0xffffffffffffffff) 1m27.81561059s ago: executing program 5 (id=3392): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) timer_create$auto(0x8, 0x0, 0x0) timer_settime$auto(0x0, 0xffff7ffc, 0x0, 0x0) timer_gettime$auto(0x0, 0x0) r0 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0xffffffffffffffff, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) select$auto(0x8, 0x0, 0x0, 0x0, 0x0) shmdt$auto(0x0) r1 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000080), r0) fstat$auto(r0, 0x0) socket(0x10, 0x2, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) write$auto(0xffffffffffffffff, &(0x7f0000000000)='3\xc7\xff\xff\xff\xdd\x10\b(Ks\x0f\x87|P\x11\xd1li0\x89\x85\x90QM\xd6wfF\xf1x\xb3;c\tP\x03\x84\x97\x99\x83\x97\x81:\xf3\xa3o5\xc5\x86\xed\xa4\x18]\xa3\xc9\x0f\xff\xdak\xb0m\xe1U\xb3\xa2\xee\xdcTJQO\x98\xc8w\x8c\xe7\x00\x00\x00\x1dj\x1e\xebQT\xdd\x9b\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00', 0x9) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a00"], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x20000800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) sendmsg$auto_NL802154_CMD_NEW_SEC_DEVKEY(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="ec020000", @ANYRES16=r1, @ANYBLOB="020027bd7000fddbdf251d00000005002400800000000500250001000000100002002f6465762f6e756c6c623000050010001d000000b0021e801ed3b5c45da0080d7f94f898bee3ec3670f397fea93e14c5fc6e2abcb62a10c56921b1d22fe73b71d7adcbfc3db8b53a596119d291ab97da39d7d0d0ad8ef1c70d136c729da025e53389822a96ef18cb3ec76877d7910fd542ab2088e369f2e03fc9b405964899f3cb86ddfd9c08ccec08ad5afc10cd773520a45677d69a0b501109eca8c1dba7276214d7e09771a75e8e5bb8d6c90cbd7dc5429380e9ec7a4e4b87b846416497980696de43cc2fce5566cf5ffda2f370eac9678086d723853e431538a2b0ba9a4d6489d8291e6cab516f3ace73c8d48c8a03784f95ffa2ff66f54bcd85de00048008006200080000000c008d00060000000000002004008b80978af232052a21e673d6aad58ed146f747d6963e487016910bc098f6bc68968fc515e92ed50c8dbb37ca4da473da4a79d4c67aa2abb2cd3bbbdd04ae9b4b3d8cde057d3f6c4dc38b8d8fccf7486b10fa5a0b522f8cdaf43a0fbd92d273daea0669ead670db626e118af06f229385d76de78f72d281b8528f4cd5ed736b7e71fa23764bec9d10fdde127348efde8cab6d840e1200a7cdba2b48f23857019783397f4a82b7581f990cf062ef252a0d444ca13304e2d38799f98f015a27b77c77fbbd2b000008000c00e0000001df009e8008000100", @ANYRES32=r0, @ANYBLOB="080032d8", @ANYRES32, @ANYBLOB="0c0050000200000000000000ea399291e804caa4744cbb97efadcc1d9db072ebe7092b17b1c1bf753c4f66a4f0a4c8119c03bf3380a2a8822b987a1dc6b610c52b9ea5033fdbf3e9b49ab577c94d1025573e6f0748cf4d3bb53a540bfd0d8b42cb53694c65e13012c87d8754da9d21aa190d8371e0417e4a609ab4ad74be8ead5cb76aa9d79dc0955907225cd906cfb7a7b9dda25d591db030797bc58ab7d56cf49f4c6b6a19ee2b64fcbcf350b37b89989bbb9e7f744aaf4b90e98e664e4a666faff4e8749ad014a876cf00"], 0x2ec}, 0x1, 0x0, 0x0, 0x81}, 0x8100) getsockopt$auto(0xffffffffffffffff, 0x0, 0x43, 0x0, 0x0) fsconfig$auto_FSCONFIG_CMD_RECONFIGURE(r0, 0x7, &(0x7f00000000c0)='/dev/nullb0\x00', &(0x7f0000000100)="f9f3dc7ec2be97ba405c3dc5e55441563198f68f36d6fb16b3f206d146da315d025af04b412f6e0aed8e0358382d3a5bde6c79d1f3253a52c3acf20788239c2e60542aabf86849b5f4c6a8ddf354405e28c9b4f0785c0f52009a583a1681ec4e5a66d08395160d681f0e8fcca75b79c0d820f4bbde85b2d611d8bd6cd2a8765a21e6a67a38dcfe0aa0e0f350dd31c5116b7cee49256ba7d9ef4f256a62e48fc305f23eb34056ee2d354662d757c57fc9db03f6f11752d17f111b84db2958a85504f31f1ea3f58ab1d473237359a360a59a3e551f34481bc8ea97ff558ed2af084ca415270a765367b644", 0xfffffffb) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) 1m26.25470664s ago: executing program 5 (id=3396): mount$auto(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180)='nfsd\x00', 0x8, 0x0) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8003) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/mm/transparent_hugepage/khugepaged/defrag\x00', 0x2, 0x0) sendfile$auto(r0, 0x3, 0x0, 0xc01) r1 = open(0x0, 0x222c0, 0x0) socket(0x21, 0x2, 0x2) r2 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, 0x0, 0x20301, 0x0) fcntl$auto_F_GETLEASE(r1, 0x401, 0x5) ioctl$auto_UI_END_FF_UPLOAD(r2, 0x406855c9, 0x0) openat$auto_nvram_misc_fops_nvram(0xffffffffffffff9c, 0x0, 0x22641, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vcan0\x00'}) r3 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/fb0\x00', 0x20401, 0x0) ioctl$auto_TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, 0x0) ioctl$auto_FBIOPUT_VSCREENINFO(r3, 0x4601, 0x0) close_range$auto(0x2, 0x8, 0x0) syz_clone3(0x0, 0x0) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000001c0), r4) sendmsg$auto_CTRL_CMD_GETPOLICY(r4, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x20, r5, 0x301, 0x4070bd25, 0x25dfdbff, {}, [@CTRL_ATTR_FAMILY_NAME={0xc, 0x2, 'nl80211\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x30000881}, 0xc040810) mmap$auto(0x0, 0x810004, 0x400000000ffb, 0x8000000008011, 0x3, 0x8000) preadv2$auto(0xffffffffffffffff, 0x0, 0x6, 0xffffffffffffffff, 0x4, 0x2e) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x0) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/v4l-subdev5\x00', 0x280, 0x0) r6 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_FLOW_CMD_GET(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x20, r6, 0x1, 0x70bd25, 0x25dfdbfd, {}, [@OVS_FLOW_ATTR_PROBE={0x4}, @OVS_FLOW_ATTR_UFID_FLAGS={0x8, 0xa, 0x200}]}, 0x20}, 0x1, 0x0, 0x0, 0x200400f0}, 0x800) 1m25.749825372s ago: executing program 5 (id=3398): r0 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f000000c340)='/proc/thread-self/pagemap\x00', 0x8000, 0x0) ioctl$auto_PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f0000000100)={0x60, 0x0, 0x100000, 0x7fffffffefff, 0x40, 0x5, 0xe4, 0xe8, 0x0, 0x2, 0x0, 0x6}) (async) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000680)='/sys/devices/virtual/net/nr14/proto_down\x00', 0x82902, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x189401, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) (async) r2 = socketcall$auto(0xa, 0x0) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) (async) ioctl$auto(0x3, 0xae60, 0x10000000000402) sendmmsg$auto(0xffffffffffffffff, &(0x7f00000002c0)={{0x0, 0x9, &(0x7f0000000080)={&(0x7f0000000180)="cb7978ababe605edf078e6f2726ae03e663c080c0d6c169eec931ca2ea579299bf44495b1fe078f2e9c5586ae69caa813549", 0x1}, 0xfffffffffffffff7, 0x0, 0x5, 0x24b}, 0x800}, 0x8, 0xff) (async) statmount$auto(0x0, &(0x7f0000000300)={0x7, 0x6, 0x1, 0x0, 0x2, 0x0, 0xff, 0xbad, 0xd0, 0xae0000000000, 0x8001, 0xe2b, 0x8, 0x7fff, 0x8, 0x46c8ace, 0x80000001, 0x400000, 0x3ff, 0x66, 0xc2a, 0x2, 0xbf64, 0x4, 0x7, 0x4, 0x9, 0x8, 0x8001, 0xa, 0x9, [0x101, 0xe4, 0x5, 0x1, 0x7, 0xe, 0x3, 0x8, 0xe, 0xffffffffffffa7e2, 0x0, 0x1, 0x4e, 0x5, 0x9, 0x3, 0xffffffffffffff96, 0x7fffffff, 0xa1a4, 0xcf, 0x7fffffffffffffff, 0xffffffffffffff40, 0x6, 0x1a, 0x4, 0x2c4, 0x9, 0xe, 0x3c, 0x9, 0x4, 0xff7ffffffffffffa, 0x6, 0x3, 0x9, 0x9, 0x7fffffff, 0xc, 0x0, 0xe29, 0x2, 0x7, 0x7]}, 0x2, 0xef) (async) ioctl$auto(0x3, 0xae41, r2) ioctl$auto_KVM_GET_MSRS(r1, 0x4400ae8f, &(0x7f00000000c0)={0xdd}) (async) ioctl$auto_KVM_CREATE_VM(r1, 0xae80, 0x0) 1m11.903443629s ago: executing program 4 (id=3432): mmap$auto(0x0, 0x40000b, 0xde, 0x200009b72, 0xffffffffffffffff, 0x8000) sendmsg$auto_THERMAL_GENL_CMD_TZ_GET_TEMP(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="770e0000", @ANYRES16=0x0, @ANYBLOB="080028bd7000fddbdf250300000008000600"], 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x405b) mmap$auto(0x0, 0x4020009, 0xdc, 0xeb1, 0xffffffffffffffff, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) unshare$auto(0x40000080) timer_settime$auto(0xfffffffe, 0x9, 0x0, 0x0) sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000336bd7000fedbdf2502"], 0x24}, 0x1, 0x0, 0x0, 0xc045}, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) bpf$auto(0x5, &(0x7f0000000000)=@bpf_attr_0={0x8000, 0x1, 0x8, 0x20007, 0x5, 0xffffffffffffffff, 0x80000001, "787d66da4a620eab7f7382854ef61529", 0x0, 0xffffffffffffffff, 0x7, 0xffff4e8b, 0x2002, 0x1}, 0x7) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x22, 0x800, 0x400) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB='!\x00\''], 0x1ac}, 0x1, 0x0, 0x0, 0x44}, 0x40090) r1 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r1, &(0x7f0000000080)={{0x0, 0x8002, &(0x7f00000002c0)={0x0, 0xc4}, 0x2, 0x0, 0x0, 0x1}, 0x5}, 0x3, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer2\x00', 0x2, 0x0) 1m10.833171576s ago: executing program 4 (id=3436): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$auto_SO_DETACH_FILTER(r2, 0x1, 0x19, &(0x7f00000061c0)='ethtool\x00', 0x5) r3 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) close_range$auto(r3, r3, 0x0) sendmsg$auto_NFC_CMD_DISABLE_SE(r2, &(0x7f0000001100)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000010c0)={&(0x7f0000002440)=ANY=[@ANYBLOB="3010000045f5fecde829154dacad58e4b1e937ef513cafcb50c123724aa4ddb2f1d681a8023cbbb120dc5868d71bae7758315343fcf8814d537ad4105203b06101000000933c8bdd985b9a", @ANYRES16=0x0, @ANYBLOB="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"], 0x1030}, 0x1, 0x0, 0x0, 0x4}, 0x8004) r4 = socket(0x10, 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f00000000c0), r5) io_uring_register$auto_IORING_REGISTER_PBUF_RING(r4, 0x16, &(0x7f0000000f40)="875fe8c5ccaf1ef0741855970c5bd32dd107e22279877efbe4327eaf29c2a981f0ea6ba614a8b8b37655bd2d01a1b463ed6466bc27b9ded9939f59758e868a9b5ba1b66d6168f7eb966beb84be75c6a269c91b984c84974fc426eeb90f1eda631d77c459b0038036d692142f796a08d0ba7835f19fecefa59bef1938e8f49b98e1564834739b4b67a2bb2d0a92bb54504fe586c1b93c9654048fd0e702d0bb6519f0f723c3826bd7961d8dbca11769089ac6ffc506f4c8a10ee613a96c2f9cab94562ba8c767e649e14f60b20be56b8c85d575fc7e", 0x4) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001140)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01002dbd7000f9dbdf250100000006000200010000000500070058000000080009000800000008000a000800000008001700", @ANYRES32=r3, @ANYBLOB="f8fa3140fc17a7aa56ff0b7445907ad8a78ae748aafb0da4572f7b012b6c3b690ca2948c8bbd372023e314611d0704de16a53071ee583e16f6f53f7819aac68154711cc06759d7e3b36550647b02"], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$auto_NL80211_CMD_NEW_STATION(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='`\r+\x00', @ANYRES16=r1, @ANYBLOB="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"], 0xd60}, 0x1, 0x0, 0x0, 0x24000}, 0x20) mmap$auto(0x0, 0x9, 0x800000000df, 0x9b72, 0xea8a, 0x8000) r7 = openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/psaux\x00', 0x40000, 0x0) poll$auto(&(0x7f0000000000)={r7, 0x3, 0x4}, 0xb, 0x7) r8 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000001280)='/sys/kernel/security/tomoyo/profile\x00', 0x20002, 0x0) write$auto_tomoyo_operations_securityfs_if(r8, &(0x7f00000012c0)="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", 0x106) timer_create$auto(0x1, &(0x7f0000000100)={@sival_ptr=0x0, @inferred, 0x1, @_tid=0xffffffffffffffff}, 0x0) timer_gettime$auto(0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb2, 0xfffffffffffffffb, 0x8000) set_mempolicy$auto(0x3, &(0x7f0000000000)=0x7, 0x9) r9 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000180)='/dev/bus/usb/036/001\x00', 0xa901, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) getrandom$auto(0x0, 0x6000000, 0x3) r10 = socket(0x15, 0x5, 0x0) getsockopt$auto(r10, 0x114, 0x271f, 0xfffffffffffffffc, 0x0) ioctl$auto_USBDEVFS_SUBMITURB(r9, 0x8038550a, &(0x7f0000000100)={0x2, 0x0, 0x5f, 0x4, &(0x7f00000001c0), 0x9, 0xeb8e, 0x0, @number_of_packets=0xfffffff7, 0x7, 0x800476, 0x0}) 1m10.394032454s ago: executing program 35 (id=3398): r0 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f000000c340)='/proc/thread-self/pagemap\x00', 0x8000, 0x0) ioctl$auto_PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f0000000100)={0x60, 0x0, 0x100000, 0x7fffffffefff, 0x40, 0x5, 0xe4, 0xe8, 0x0, 0x2, 0x0, 0x6}) (async) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000680)='/sys/devices/virtual/net/nr14/proto_down\x00', 0x82902, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x189401, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) (async) r2 = socketcall$auto(0xa, 0x0) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) (async) ioctl$auto(0x3, 0xae60, 0x10000000000402) sendmmsg$auto(0xffffffffffffffff, &(0x7f00000002c0)={{0x0, 0x9, &(0x7f0000000080)={&(0x7f0000000180)="cb7978ababe605edf078e6f2726ae03e663c080c0d6c169eec931ca2ea579299bf44495b1fe078f2e9c5586ae69caa813549", 0x1}, 0xfffffffffffffff7, 0x0, 0x5, 0x24b}, 0x800}, 0x8, 0xff) (async) statmount$auto(0x0, &(0x7f0000000300)={0x7, 0x6, 0x1, 0x0, 0x2, 0x0, 0xff, 0xbad, 0xd0, 0xae0000000000, 0x8001, 0xe2b, 0x8, 0x7fff, 0x8, 0x46c8ace, 0x80000001, 0x400000, 0x3ff, 0x66, 0xc2a, 0x2, 0xbf64, 0x4, 0x7, 0x4, 0x9, 0x8, 0x8001, 0xa, 0x9, [0x101, 0xe4, 0x5, 0x1, 0x7, 0xe, 0x3, 0x8, 0xe, 0xffffffffffffa7e2, 0x0, 0x1, 0x4e, 0x5, 0x9, 0x3, 0xffffffffffffff96, 0x7fffffff, 0xa1a4, 0xcf, 0x7fffffffffffffff, 0xffffffffffffff40, 0x6, 0x1a, 0x4, 0x2c4, 0x9, 0xe, 0x3c, 0x9, 0x4, 0xff7ffffffffffffa, 0x6, 0x3, 0x9, 0x9, 0x7fffffff, 0xc, 0x0, 0xe29, 0x2, 0x7, 0x7]}, 0x2, 0xef) (async) ioctl$auto(0x3, 0xae41, r2) ioctl$auto_KVM_GET_MSRS(r1, 0x4400ae8f, &(0x7f00000000c0)={0xdd}) (async) ioctl$auto_KVM_CREATE_VM(r1, 0xae80, 0x0) 1m9.235784615s ago: executing program 4 (id=3439): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000440), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_FEATURES_GET(r0, &(0x7f0000003080)={0x0, 0xfffffffffffffdb2, &(0x7f0000003040)={&(0x7f0000002fc0)={0x20, r1, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@ETHTOOL_A_FEATURES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x20004800}, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r3 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) getxattrat$auto(r3, 0x0, 0xf, 0x0, 0x0, 0x9) 1m6.597221731s ago: executing program 4 (id=3444): r0 = bpf$auto_BPF_LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000140)=@bpf_attr_4={0x669, 0xffffffffffffffff, 0x4}, 0x6) mmap$auto(0x0, 0x40008a, 0xdf, 0x9b72, r0, 0x8000) r1 = socket(0x2, 0x1, 0x106) bind$auto(r1, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) write$auto(0x3, 0x0, 0x1) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0xe) r2 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0xa402, 0x0) mmap$auto(0x0, 0x4005, 0x2, 0x40eb2, 0x401, 0x300000000000) close_range$auto(0x2, 0x8, 0x0) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xc0180, 0x0) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) ioctl$auto(0x3, 0x4010ae42, 0x38) ioctl$auto_SG_SET_FORCE_PACK_ID(r2, 0x227b, &(0x7f0000000080)="ec") mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) read$auto(r2, 0x0, 0x1001) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x11f, 0x0, 0xfffffffffffffffd) connect$auto(0x3, 0x0, 0x55) bpf$auto_BPF_LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000140)=@bpf_attr_4={0x669, 0xffffffffffffffff, 0x4}, 0x6) (async) mmap$auto(0x0, 0x40008a, 0xdf, 0x9b72, r0, 0x8000) (async) socket(0x2, 0x1, 0x106) (async) bind$auto(r1, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) (async) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) (async) write$auto(0x3, 0x0, 0x1) (async) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0xe) (async) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0xa402, 0x0) (async) mmap$auto(0x0, 0x4005, 0x2, 0x40eb2, 0x401, 0x300000000000) (async) close_range$auto(0x2, 0x8, 0x0) (async) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xc0180, 0x0) (async) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) (async) move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) (async) ioctl$auto(0x3, 0x4010ae42, 0x38) (async) ioctl$auto_SG_SET_FORCE_PACK_ID(r2, 0x227b, &(0x7f0000000080)="ec") (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) (async) move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) (async) read$auto(r2, 0x0, 0x1001) (async) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x11f, 0x0, 0xfffffffffffffffd) (async) connect$auto(0x3, 0x0, 0x55) (async) 1m5.456120793s ago: executing program 4 (id=3447): mmap$auto(0x0, 0x2020009, 0x7, 0xeb1, 0xfffffffffffffffa, 0x8000) memfd_secret$auto(0x10001) (async) r0 = memfd_secret$auto(0x10001) write$auto(r0, &(0x7f00000001c0)='/dev/input/event0\x00', 0x3) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/devices/platform/vhci_hcd.11/usb32/32-0:1.0/usb32-port1/power/runtime_active_time\x00', 0x117d80, 0x0) r1 = open(0x0, 0x151082, 0x8b) open_by_handle_at$auto(r1, &(0x7f0000000200)={0x9, 0x30001, "91d8bfb47e85904b53"}, 0x42) openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f0000000100)={0x20041, 0x9, 0x2}, 0xfdb1) socket(0x25, 0x5, 0x200000fd) (async) socket(0x25, 0x5, 0x200000fd) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x36, 0x1, 0x0, 0x3, 0x2) (async) prctl$auto(0x36, 0x1, 0x0, 0x3, 0x2) write$auto(r2, &(0x7f0000000400)='/dev/a\x87dio1\x00', 0x100000a3d9) pread64$auto(0xffffffffffffffff, &(0x7f0000004380)='^{\x00', 0x3ff, 0x4c0) mmap$auto(0x0, 0x9437, 0x4d95, 0x16, 0x2, 0x8003) set_mempolicy$auto(0x4006, &(0x7f0000000080)=0x5, 0x21) (async) set_mempolicy$auto(0x4006, &(0x7f0000000080)=0x5, 0x21) mmap$auto(0x13, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/neigh/gre0/proxy_delay\x00', 0x141241, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/ram12/queue/io_poll_delay\x00', 0x210000, 0x0) read$auto(r3, 0x0, 0x45b9) (async) read$auto(r3, 0x0, 0x45b9) unshare$auto(0x40000080) (async) unshare$auto(0x40000080) socket(0x25, 0x1, 0x0) r4 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000180)='/dev/input/event0\x00', 0x42000, 0x0) openat$auto_drm_debugfs_entry_fops_drm_debugfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/dri/vgem/clients\x00', 0x60440, 0x0) (async) r5 = openat$auto_drm_debugfs_entry_fops_drm_debugfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/dri/vgem/clients\x00', 0x60440, 0x0) read$auto_drm_debugfs_entry_fops_drm_debugfs(r5, &(0x7f00000001c0)=""/155, 0x9b) ioctl$auto_EVIOCGMASK(r4, 0x80104592, &(0x7f0000000000)={0x2008, 0x800000, 0xffffffffffffff95}) (async) ioctl$auto_EVIOCGMASK(r4, 0x80104592, &(0x7f0000000000)={0x2008, 0x800000, 0xffffffffffffff95}) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x3) (async) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x3) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop9\x00', 0x565200, 0x0) (async) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop9\x00', 0x565200, 0x0) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x100000009b72, 0x2, 0x8000) 1m3.69202617s ago: executing program 4 (id=3451): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000080)={0x104, r1, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NFSD_A_SERVER_SCOPE={0xe5, 0x4, 'nfs\x81\x9b\xb6$\x10\x16\xfb:\xb3\x15Y\x90\xf9\xc0\xc0\x88.!s\x1f\xe9\x1d\'&Hvn\xb1\x88\xbf\x15<\xa6e\xbc\xa1\xfa\xbeG\t*_kW_m\x1b:,\xc6\xa6\xfd\xba\xcd\xbe\xbe=\xc3\xbf\xd3f2!\xc4\x05EA\xac\x04\x83\xf1\x99\xa05\xfb\xf3\xf4?(\x9c\x8b\x9d\xdcV\xc5\x00\tm\xdez\xc9\xdbn\xb1\t\n\xe7\x8cd\xca\xd89\r\x1a@\xe1_\xb1_\xf8\xf3\xb1]\xad\xaf\xd9\xd0\xa8:\xd4<\x8d\xbc\rg[\x1d\x98\xb2r\xac\x83\xf8s\xafh@\x8c\xa7\xcd\xb3+Qy\"\xe8\x8ah,\xca|\xd9\xb3?Ha\xdb\xa3F\nGU&7\x15\x19\xeb\x9b\x9eU\xab\x86\x10\x9d\xaf>\xda(R\xcb\xe6\xf7\x8c\xf8\xb1\xdf\xe4t\xe6\x9f\x81\xb3\xbb\xc3\xbf\x8e\xd9VC\xa7\x03rJ.\xf6L\x94b\xc5\x03\xea\x84u\x92\xc0\xcd\x16\xfb<\x03\x00\x00'}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x2}]}, 0x104}}, 0x4000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) getcwd$auto(0x0, 0xffffffffffffffff) r2 = inotify_init1$auto(0x3000000000000) inotify_add_watch$auto(r2, 0x0, 0x8000) openat$dir(0xffffffffffffff9c, &(0x7f00000004c0)='v#\xd5\xaf>=\x14\xe6%\xf7\x8a\x8d\x9a\xae\x1a\xd6\xa8\xb8\x1d\xf5(\xb0\x1f\xbd\xcbV\n\"\xe3V\xfeP\xceN\xb2\xc32\xaf\xcc\x80\xfa\xf0\xd4\xd9|\xfe\x03y\xd16\x17\x99R\xca\xe5\xf4\xb4T\xfcv\xfc\xe6\x9cv\a\x00\xc2a\x16\xd1\x8a\x80\x90\x87\xa5s\x10\xed\x93\xd4\x15=\xc0\x1f\x0e\xb0\x18v}\x03!\xf0I\xe3}\x90\x9b\x92[\xfe2<7\xd3\x81\x9a~\xcd\r\x19\x9e\x10(5\xfd\x8b\x82\xd4\xc85\xc3\x93t\t\xd0\x9d\xca^n\xf3\xcb>\x1bO\xcej\xe0\xef\xf2\xd7\xc2}\x18\xd9`AO\x95<\x9aH\vu\xae\xd4\xea\x12\xb8\xd1\n\x01\x83r\x85\xbf*\x18\xa7 S:R\x14\x89Z3\x94\x8bP)\x00', 0x40140, 0x12d) rename$auto(&(0x7f00000003c0)='v#\xd5\xaf>=\x14\xe6%\xf7\x8a\x8d\x9a\xae\x1a\xd6\xa8\xb8\x1d\xf5(\xb0\x1f\xbd\xcbV\n\"\xe3V\xfeP\xceN\xb2\xc32\xaf\xcc\x80\xfa\xf0\xd4\xd9|\xfe\x03y\xd16\x17\x99R\xca\xe5\xf4\xb4T\xfcv\xfc\xe6\x9cv\a\x00\xc2a\x16\xd1\x8a\x80\x90\x87\xa5s\x10\xed\x93\xd4\x15=\xc0\x1f\x0e\xb0\x18v}\x03!\xf0I\xe3}\x90\x9b\x92[\xfe2<7\xd3\x81\x9a~\xcd\r\x19\x9e\x10(5\xfd\x8b\x82\xd4\xc85\xc3\x93t\t\xd0\x9d\xca^n\xf3\xcb>\x1bO\xcej\xe0\xef\xf2\xd7\xc2}\x18\xd9`AO\x95<\x9aH\vu\xae\xd4\xea\x12\xb8\xd1\n\x01\x83r\x85\xbf*\x18\xa7 S:R\x14\x89Z3\x94\x8bP)', &(0x7f0000000000)=':-.\x00') madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) socketcall$auto(0x8000, 0x0) 48.404757055s ago: executing program 36 (id=3451): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000080)={0x104, r1, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NFSD_A_SERVER_SCOPE={0xe5, 0x4, 'nfs\x81\x9b\xb6$\x10\x16\xfb:\xb3\x15Y\x90\xf9\xc0\xc0\x88.!s\x1f\xe9\x1d\'&Hvn\xb1\x88\xbf\x15<\xa6e\xbc\xa1\xfa\xbeG\t*_kW_m\x1b:,\xc6\xa6\xfd\xba\xcd\xbe\xbe=\xc3\xbf\xd3f2!\xc4\x05EA\xac\x04\x83\xf1\x99\xa05\xfb\xf3\xf4?(\x9c\x8b\x9d\xdcV\xc5\x00\tm\xdez\xc9\xdbn\xb1\t\n\xe7\x8cd\xca\xd89\r\x1a@\xe1_\xb1_\xf8\xf3\xb1]\xad\xaf\xd9\xd0\xa8:\xd4<\x8d\xbc\rg[\x1d\x98\xb2r\xac\x83\xf8s\xafh@\x8c\xa7\xcd\xb3+Qy\"\xe8\x8ah,\xca|\xd9\xb3?Ha\xdb\xa3F\nGU&7\x15\x19\xeb\x9b\x9eU\xab\x86\x10\x9d\xaf>\xda(R\xcb\xe6\xf7\x8c\xf8\xb1\xdf\xe4t\xe6\x9f\x81\xb3\xbb\xc3\xbf\x8e\xd9VC\xa7\x03rJ.\xf6L\x94b\xc5\x03\xea\x84u\x92\xc0\xcd\x16\xfb<\x03\x00\x00'}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x2}]}, 0x104}}, 0x4000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) getcwd$auto(0x0, 0xffffffffffffffff) r2 = inotify_init1$auto(0x3000000000000) inotify_add_watch$auto(r2, 0x0, 0x8000) openat$dir(0xffffffffffffff9c, &(0x7f00000004c0)='v#\xd5\xaf>=\x14\xe6%\xf7\x8a\x8d\x9a\xae\x1a\xd6\xa8\xb8\x1d\xf5(\xb0\x1f\xbd\xcbV\n\"\xe3V\xfeP\xceN\xb2\xc32\xaf\xcc\x80\xfa\xf0\xd4\xd9|\xfe\x03y\xd16\x17\x99R\xca\xe5\xf4\xb4T\xfcv\xfc\xe6\x9cv\a\x00\xc2a\x16\xd1\x8a\x80\x90\x87\xa5s\x10\xed\x93\xd4\x15=\xc0\x1f\x0e\xb0\x18v}\x03!\xf0I\xe3}\x90\x9b\x92[\xfe2<7\xd3\x81\x9a~\xcd\r\x19\x9e\x10(5\xfd\x8b\x82\xd4\xc85\xc3\x93t\t\xd0\x9d\xca^n\xf3\xcb>\x1bO\xcej\xe0\xef\xf2\xd7\xc2}\x18\xd9`AO\x95<\x9aH\vu\xae\xd4\xea\x12\xb8\xd1\n\x01\x83r\x85\xbf*\x18\xa7 S:R\x14\x89Z3\x94\x8bP)\x00', 0x40140, 0x12d) rename$auto(&(0x7f00000003c0)='v#\xd5\xaf>=\x14\xe6%\xf7\x8a\x8d\x9a\xae\x1a\xd6\xa8\xb8\x1d\xf5(\xb0\x1f\xbd\xcbV\n\"\xe3V\xfeP\xceN\xb2\xc32\xaf\xcc\x80\xfa\xf0\xd4\xd9|\xfe\x03y\xd16\x17\x99R\xca\xe5\xf4\xb4T\xfcv\xfc\xe6\x9cv\a\x00\xc2a\x16\xd1\x8a\x80\x90\x87\xa5s\x10\xed\x93\xd4\x15=\xc0\x1f\x0e\xb0\x18v}\x03!\xf0I\xe3}\x90\x9b\x92[\xfe2<7\xd3\x81\x9a~\xcd\r\x19\x9e\x10(5\xfd\x8b\x82\xd4\xc85\xc3\x93t\t\xd0\x9d\xca^n\xf3\xcb>\x1bO\xcej\xe0\xef\xf2\xd7\xc2}\x18\xd9`AO\x95<\x9aH\vu\xae\xd4\xea\x12\xb8\xd1\n\x01\x83r\x85\xbf*\x18\xa7 S:R\x14\x89Z3\x94\x8bP)', &(0x7f0000000000)=':-.\x00') madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) socketcall$auto(0x8000, 0x0) 22.154757881s ago: executing program 6 (id=3539): socket(0x1, 0x8080e, 0x88) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x2, 0x0) r0 = socket(0x10, 0x2, 0x14) write$auto(r0, &(0x7f0000000200)='\x00', 0x9) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/platform/vivid.0/media9/power/autosuspend_delay_ms\x00', 0xa001, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) mbind$auto(0x2000, 0x100000008, 0x2100000000, 0x0, 0x6, 0x2) memfd_secret$auto(0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sysfs$auto(0x2, 0x17, 0x0) r1 = fsopen$auto(0x0, 0x1) fsconfig$auto_SHMEM_HUGE_NEVER(r1, 0x1, &(0x7f0000000000)='-\x00', &(0x7f0000000040), 0x0) setrlimit$auto(0x7ffb, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) syz_genetlink_get_family_id$auto_nl802154(&(0x7f00000001c0), 0xffffffffffffffff) write$auto_force_suspend_fops_hci_vhci(0xffffffffffffffff, &(0x7f0000000240)="5affddf58b53f578ef89ffbe1c1112eb326ec9caac7bbaffd52b93ab2492ce3206f54b02befe995ecfbff3e8301463566015decd0a6e741cdbeb06f60fadc089a318acdee2e6bed5196b47a1345a4dab405a0d496f364fe9a21043d035916be7a70d2dabc79394fc21a305cc132587f6b6f809f7a839ec408b2f029aa6bb9d0745da216e39dc413cde33caa2b78296d0e98c017c7dc456dc5907509677d6a27161b7244c742d5fb17ab15cdc27293278aca3a9071629143566cd6aa8d52b059139df78e454b0a27edcbab8a777a6d7a832fc13a8f6deddf8b60ef03bdf85a12c0808a3e97712549b724ccd486a", 0xed) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x40004) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) syz_clone3(&(0x7f0000000140)={0x30502f180, 0x0, 0x0, 0x0, {0x2e}, 0x0, 0x0, 0x0, 0x0}, 0x58) r2 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000980)='/proc/self/pagemap\x00', 0x2, 0x0) read$auto(r2, 0x0, 0x39b8) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/block/nbd15/queue/scheduler\x00', 0x103a42, 0x0) syz_genetlink_get_family_id$auto_mac802154_hwsim(&(0x7f0000000100), 0xffffffffffffffff) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/devices/virtual/net/bond0/bonding/arp_ip_target\x00', 0xa0002, 0x0) socket(0x11, 0x80003, 0x304) mmap$auto(0x0, 0x1fffffffffff, 0x3, 0xdd59, 0xffffffffffffffff, 0x8002) 18.753112418s ago: executing program 6 (id=3549): openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) mmap$auto(0x0, 0x2a, 0xdf, 0x9b72, 0x1000, 0x28000) io_uring_setup$auto(0x401, 0x0) mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket(0xa, 0x3, 0x3b) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) getsockopt$auto(r0, 0x29, 0x18, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) lseek$auto(0x3, 0x9, 0x7) write$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffffff, 0x0, 0x0) syz_clone3(&(0x7f000000dd80)={0xa00400, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) clock_nanosleep$auto(0xfffffff9, 0x200000, &(0x7f0000000040)={0x100000000, 0x9}, &(0x7f0000000000)={0xffffffffffffffff, 0xc}) fallocate$auto(r1, 0xa30, 0x820, 0xffffffffffffd914) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000040), 0x180b03, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/power/resume\x00', 0x189002, 0x0) sendfile$auto(r2, r2, 0x0, 0x3) close_range$auto(0x2, 0x8, 0x0) bpf$auto(0xef3, 0x0, 0xffff) unshare$auto(0x40000080) 16.928029597s ago: executing program 6 (id=3552): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), r0) sendmsg$auto_ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010027bd0100fddbdf251900000018000180140002006d6163766c616e3000000000000000003c0007800800010005000000080001000600004008000100ff0100000800010005000000080002000000000008000100ff00000008000100", @ANYRES64], 0x68}, 0x1, 0x0, 0x0, 0x20040840}, 0x40000) r2 = openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000080), 0x2a002, 0x0) ioctl$auto_TUNGETVNETHDRSZ(r2, 0x800454d7, &(0x7f0000000100)=0xbbcb) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000080), r3) sendmsg$auto_NETDEV_CMD_QUEUE_GET(r3, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000015c0)={0x24, r4, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@NETDEV_A_QUEUE_TYPE={0x8}, @NETDEV_A_QUEUE_ID={0x8, 0x1, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x810) 16.397057394s ago: executing program 6 (id=3554): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/virtual/net/nr15/queues/tx-0/tx_maxrate\x00', 0x10b942, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000005c0)='/sys/devices/virtual/mac80211_hwsim/hwsim1/ieee80211/phy1/rfkill3/state\x00', 0x102, 0x0) exit$auto(0xffffff9f) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_taskstats(0x0, r2) getpgrp(0x0) sendmsg$auto_TASKSTATS_CMD_GET(r2, 0x0, 0x20000000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/vtconsole/vtcon1/bind\x00', 0x182b02, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) fcntl$auto_F_SETSIG(0xffffffffffffffff, 0xa, 0x400000000000) writev$auto(0x3, 0x0, 0x1b) unshare$auto(0x40000080) openat$auto_cpuid_fops_cpuid(0xffffffffffffff9c, 0x0, 0x143d82, 0x0) lsm_set_self_attr$auto(0x5, 0x0, 0x7fff, 0x1783) pwrite64$auto(0xc8, &(0x7f0000000000)='\vX\xc9\xb3\xbc\x8c\x1dga08\x90\x86\xdde\x1cJ\x99\x00\x11:\x14\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xfe\x80\x12\x00\x00\x00\x00\x00\x0fo\x84\xfc\x89\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\rg\x81K*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#\x1c\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd8\xbdn\x1d\x00\xeb]B\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xaf\n1\x80\x1a\xbc_\xef\x8b\t\xcc\xa6\xf2\xc1\"\xact\xee\xc9\x00\x04\x00'/232, 0xfdef, 0x9) openat$auto_random_fops_random(0xffffffffffffff9c, 0x0, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x10001, 0x16, 0x52ac1259, 0x40eb1, 0x401, 0x300000000000) r3 = open(&(0x7f0000000200)='}[,&*}\x00\x0e\x15F\xf7\x1a\xd1K+\xedy\xc6\x9bb\x94\xb4^\xc2\x83%\xfbw}\xfb_P\"\x19\xdfi\xe9hA|Q\x8a_F\x04:Q\x90\'\x06\x00', 0x0, 0x6f) getdents64$auto(r3, 0x0, 0x18) ioctl$auto_PPPIOCSMRRU(r3, 0x4004743b, 0x0) write$auto_dfs_global_fops_debug(0xffffffffffffffff, 0x0, 0x0) msgget$auto(0x0, 0x5) msgsnd$auto(0x0, &(0x7f0000000000)={0x1, 0x5}, 0x8, 0x7) msgsnd$auto(0x0, &(0x7f0000000040)={0x40000007fc, 0x7}, 0x400, 0x2) msgrcv$auto(0x0, 0x0, 0x4bd, 0x1, 0xf1) sendfile$auto(r1, r0, 0x0, 0x7) 15.1349151s ago: executing program 6 (id=3560): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sg1\x00', 0x508829cd3ba34faf, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) connect$auto(0xffffffffffffffff, 0x0, 0x4c85) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) set_mempolicy$auto(0x3, &(0x7f0000000380)=0x7e, 0x6) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) mmap$auto(0x0, 0xd561, 0x10000000000df, 0xeb2, 0xffffffffffffffff, 0x8000) timer_create$auto(0x2, 0x0, 0x0) timer_settime$auto(0x0, 0x3, &(0x7f00000000c0)={{0x26b, 0x4}, {0x0, 0x83}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) kexec_load$auto(0x200000000007, 0x1, &(0x7f0000000040)={@kbuf=0x0, 0x2aaa, 0x6c0000c000, 0xc000}, 0x4) setsockopt$auto(0x400000000000003, 0x28, 0x6, 0x0, 0x56d) mmap$auto(0x0, 0x20000a00006, 0x100, 0x91, 0xffffffffffffffff, 0x2ffffffffffe) mmap$auto(0x0, 0x400008, 0x0, 0x9b72, 0x2, 0x8000) r1 = socket(0x2, 0x1, 0x106) bind$auto(r1, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) mknod$auto(&(0x7f0000000040)='./file0\x00', 0x1001, 0x4) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0xb, 0x734f, 0x36, 0x67f, 0x1ffde, 0x7, 0x3, 0x20000002, 0xd, 0x3, 0x1, 0x2091, 0xb4, 0x9, 0x6, 0x6, 0x80, 0x4, 0x1cd7, 0x1000, 0x2000, 0x203, 0x0, 0x84, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, [0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4]}, 0x1fe, 0x2) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="f91c5acc2195a6f094ff08ba6d02e4ec504acd62e103e5fd6f7244bf2e9918a0327ba444e173af560aa2670921addde8898c95a405f377b62e74091b15b18845a838c74a7977f468e20b2259bedb931b2f635995c57742df7936f0869b7632bf38b60754b308fe6edb977eb731219f922d02dfde4c4acca3e0f6893ff30f4d5fd8", @ANYRESDEC], 0x1ac}, 0x1, 0x0, 0x0, 0x4}, 0x40000) ppoll$auto(&(0x7f0000000080)={0xffffffffffffffff, 0x7980, 0x6}, 0x2, 0x0, 0x0, 0x8) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x2) mount$auto(0x0, &(0x7f0000000540)='}[,&*}\x00', &(0x7f0000000040)='nfsd\x00', 0x3, &(0x7f00000003c0)="3dd1fa31") fcntl$auto(0x0, 0x407, 0x100000) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x13, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8040) socket(0x10, 0x2, 0x0) 13.751934469s ago: executing program 6 (id=3561): syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) openat$auto_drm_crtc_crc_data_fops_drm_debugfs_crc(0xffffffffffffff9c, &(0x7f0000000000), 0x8080, 0x0) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card1\x00', 0x80802, 0x0) mmap$auto(0x0, 0x2000d, 0x7, 0xeb1, 0x404, 0x10008000) close_range$auto(0x2, 0x8, 0x0) timer_settime$auto(0x0, 0x5, &(0x7f00000000c0)={{0x8, 0x10007}, {0x9, 0x10}}, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, r0, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r1) ioctl$auto_KVM_GET_MSRS(r0, 0x4008ae89, &(0x7f00000000c0)={0x3, 0x0, [{0x277, 0x3}]}) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r2, 0x0, 0x20) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r3, &(0x7f0000000200)={0x0, 0x7}, 0x3) close_range$auto(0x0, 0xfffffffffffff000, 0x2) mq_open$auto(&(0x7f0000000280)='\\*)A\x00', 0x7e, 0x9, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2c, 0x1, 0x100) unshare$auto(0x40000080) openat$auto_drm_crtc_crc_data_fops_drm_debugfs_crc(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) select$auto(0x7, &(0x7f0000000100)={[0x100000000, 0x7, 0x1ff, 0x6, 0x1, 0x5, 0x3, 0x800, 0x10000, 0x7f, 0x8304, 0x7fff, 0x81, 0x10, 0x2, 0x6]}, &(0x7f0000000180)={[0x6, 0x10001, 0x5, 0xffffffffffffffff, 0x5, 0x3ff, 0x68f1af40, 0x6, 0x7, 0x7, 0x5, 0x4, 0xd7, 0x5, 0x57, 0x6]}, &(0x7f0000000200)={[0x0, 0x7, 0xfff, 0x4, 0x6, 0x3, 0x5, 0xb, 0x1, 0x5, 0xfffffffffffffffe, 0xfffffffffffffff8, 0x2, 0x87f, 0x0, 0xca]}, &(0x7f0000000080)={0x6, 0xa}) 9.021324419s ago: executing program 7 (id=3577): openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x206600, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/fs/xfs/xqmstat\x00', 0x20000, 0x0) (async) set_mempolicy$auto(0x3, &(0x7f0000000000)=0x7, 0x9) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x14fa02, 0x0) (async) mmap$auto(0x0, 0x810004, 0x400000000ffb, 0x8000000008011, 0x3, 0x8000) (async) socket(0xa, 0x2, 0x0) (async) setsockopt$auto(0x3, 0x0, 0x12, 0xffffffffffffffff, 0x0) (async) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x8c00, 0x0) mmap$auto(0x0, 0x5, 0x2, 0x9b72, 0x2, 0x8000) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r1 = socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) (async) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sda\x00', 0x8001, 0x0) ioctl$auto(r2, 0x2272, r1) (async) r3 = openat$auto_stats_seq_fops_netdebug(0xffffffffffffff9c, &(0x7f00000000c0), 0x8100, 0x0) setsockopt$auto_SO_OOBINLINE(r3, 0x9, 0xa, &(0x7f0000000100)='-#\x00', 0x7fffffff) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) ioctl$auto_KVM_GET_DEVICE_ATTR(r4, 0x4018aee2, &(0x7f0000000380)={0x1, 0x0, 0x0, 0x7}) r5 = openat$auto_iommufd_fops_main(0xffffffffffffff9c, &(0x7f0000000400), 0x80001, 0x0) ioctl$auto(r5, 0x3b91, r0) 8.608031027s ago: executing program 7 (id=3579): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x3, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) mmap$auto(0x0, 0x2000009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$auto(r1, 0xae41, r0) ioctl$auto_KVM_GET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)={0x9, 0x0, [{0x48, 0x400, 0x1f}]}) sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1) unshare$auto(0x40000080) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x14}}, 0x24048004) futex$auto(0x0, 0x9, 0x3e, 0x0, 0x0, 0x0) r4 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x101001, 0x0) ioctl$auto_UI_DEV_SETUP(r4, 0x405c5503, &(0x7f00000000c0)={{0x9, 0xf2cf, 0x8, 0x80}, "6a034a07c7b82d90b69a39e32576f893fb4a3836d61c9100fefbbabea6ef9368c7996e841f3f1561d4992f726b0a6c36b0b2fd1678e816201cf562367fe6596824588a2e3d84ba165f00", 0xa}) ioctl$auto_UI_DEV_CREATE(r4, 0x5501, 0x0) writev$auto(r4, &(0x7f0000000340)={0x0, 0x500000}, 0x9) socket(0xa, 0x1, 0x84) 7.018534157s ago: executing program 8 (id=3582): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = memfd_create$auto(0x0, 0x4) r1 = socket(0x2a, 0x2, 0x0) r2 = open(&(0x7f0000000800)='./file0\x00', 0x62240, 0x154) unlink$auto(&(0x7f0000000040)='./file0\x00') execveat$auto(r2, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x11000) ioctl$auto(r1, 0x8912, 0x38) r3 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000040), r0) sendmsg$auto_NL802154_CMD_GET_SEC_DEVKEY(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r3, 0x2, 0x70bd29, 0x25dfdbfc, {}, [@NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x2400c850) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) r4 = socket(0xa, 0x3, 0x3a) statx$auto(r0, 0x0, 0x1000, 0xbdfc, 0x0) setsockopt$auto(r4, 0x29, 0x14, 0x0, 0x56b) setsockopt$auto(r4, 0x29, 0x15, 0x0, 0x52b) 6.620753774s ago: executing program 3 (id=3583): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) timer_create$auto(0x8, 0x0, 0x0) timer_settime$auto(0x0, 0xffff7ffc, 0x0, 0x0) timer_gettime$auto(0x0, 0x0) r0 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0xffffffffffffffff, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) select$auto(0x8, 0x0, 0x0, 0x0, 0x0) shmdt$auto(0x0) r1 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000080), r0) fstat$auto(r0, 0x0) socket(0x10, 0x2, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) write$auto(0xffffffffffffffff, &(0x7f0000000000)='3\xc7\xff\xff\xff\xdd\x10\b(Ks\x0f\x87|P\x11\xd1li0\x89\x85\x90QM\xd6wfF\xf1x\xb3;c\tP\x03\x84\x97\x99\x83\x97\x81:\xf3\xa3o5\xc5\x86\xed\xa4\x18]\xa3\xc9\x0f\xff\xdak\xb0m\xe1U\xb3\xa2\xee\xdcTJQO\x98\xc8w\x8c\xe7\x00\x00\x00\x1dj\x1e\xebQT\xdd\x9b\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00', 0x9) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a00"], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x20000800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) sendmsg$auto_NL802154_CMD_NEW_SEC_DEVKEY(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="ec020000", @ANYRES16=r1, @ANYBLOB="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", @ANYRES32=r0, @ANYBLOB="080032d8", @ANYRES32, @ANYBLOB="0c0050000200000000000000ea399291e804caa4744cbb97efadcc1d9db072ebe7092b17b1c1bf753c4f66a4f0a4c8119c03bf3380a2a8822b987a1dc6b610c52b9ea5033fdbf3e9b49ab577c94d1025573e6f0748cf4d3bb53a540bfd0d8b42cb53694c65e1"], 0x2ec}, 0x1, 0x0, 0x0, 0x81}, 0x8100) getsockopt$auto(0xffffffffffffffff, 0x0, 0x43, 0x0, 0x0) fsconfig$auto_FSCONFIG_CMD_RECONFIGURE(r0, 0x7, &(0x7f00000000c0)='/dev/nullb0\x00', &(0x7f0000000100)="f9f3dc7ec2be97ba405c3dc5e55441563198f68f36d6fb16b3f206d146da315d025af04b412f6e0aed8e0358382d3a5bde6c79d1f3253a52c3acf20788239c2e60542aabf86849b5f4c6a8ddf354405e28c9b4f0785c0f52009a583a1681ec4e5a66d08395160d681f0e8fcca75b79c0d820f4bbde85b2d611d8bd6cd2a8765a21e6a67a38dcfe0aa0e0f350dd31c5116b7cee49256ba7d9ef4f256a62e48fc305f23eb34056ee2d354662d757c57fc9db03f6f11752d17f111b84db2958a85504f31f1ea3f58ab1d473237359a360a59a3e551f34481bc8ea97ff558ed2af084ca415270a765367b644", 0xfffffffb) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) 6.618936946s ago: executing program 8 (id=3584): rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x0, 0x6, 0xffffffff, 0x2}, 0x8000, 0x0, 0x6) (async) close_range$auto(0x2, 0x8, 0x0) (async) arch_prctl$auto_ARCH_SET_GS(0x1001, 0x1000) socket(0x2, 0x80002, 0x73) (async, rerun: 64) r0 = socket(0xa, 0x2, 0x3a) (rerun: 64) r1 = getsockopt$auto(r0, 0x29, 0xcf, 0x0, 0x0) socket(0xa, 0x1, 0x84) (async) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) (async) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) openat$auto_dvb_dvr_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000080), 0x2003, 0x0) r2 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) ioctl$auto_TIOCMBIC2(r1, 0x5417, &(0x7f0000000180)="9957c0747dc3b5307251ae41ae9c2d3c91f21131af838a57774efad56253decf44b77bf9638199439036212867aa6821c87d1de7fd38ce3859c7d8cf67939210f240fbf9bb323f855cce62d82788dc") (async) ioctl$auto_UI_SET_ABSBIT(r1, 0x40045567, &(0x7f0000000100)=0x9) (async, rerun: 32) r3 = getpid() (rerun: 32) process_vm_readv$auto(r3, &(0x7f0000000000)={0x0, 0xffe}, 0x40000000001, &(0x7f0000000140)={&(0x7f0000000040), 0xdb8}, 0x4, 0x0) (async) ioctl$auto(r2, 0x400454ca, 0x38) mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) pipe$auto(0x0) (async) mremap$auto(0x0, 0x4, 0x4, 0x7, 0x100000000) (async) madvise$auto(0x0, 0x200007, 0x19) (async) io_uring_setup$auto(0x2, &(0x7f0000000080)={0x80000003, 0x9, 0x4002, 0x6, 0x4, 0x8, 0xffffffffffffffff, [], {0x9, 0x6, 0xf, 0x29f, 0x100, 0x7f, 0x101, 0x4000006, 0x2000}, {0x100, 0x1, 0x52, 0x5, 0x1, 0x40, 0x104, 0x8, 0x100000000}}) madvise$auto(0x0, 0x454, 0x9) unshare$auto(0x40000080) 5.207977159s ago: executing program 3 (id=3585): sendmsg$auto_GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01002d0008000700"/18, @ANYRES32], 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16, @ANYBLOB="000126bd7000fbdbdf2502000000080001"], 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x8080) r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="06000000", @ANYRES16=0x0, @ANYBLOB="0100"], 0x14}, 0x1, 0x0, 0x0, 0x30000881}, 0xc040804) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB], 0x1ac}}, 0x40000) sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0x96bc}, 0x2, &(0x7f0000000380), 0x7, 0xa505}, 0x9}, 0x7, 0x4008) 5.164560505s ago: executing program 8 (id=3586): mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) socket(0x2, 0x2, 0x0) (async) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x67) (async) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x50) (async) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) (async) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) r0 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) (async, rerun: 64) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) (async, rerun: 64) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r2 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) r3 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000002680), 0xffffffffffffffff) sendmsg$auto_IPVS_CMD_FLUSH(r2, &(0x7f00000024c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000026c0)={0x14, r3, 0x1, 0x70bd2b, 0x25dfdbff}, 0x14}}, 0x4000000) (async) r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) (async, rerun: 64) r5 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_CQM(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x1c, r4, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x40800) (async) mmap$auto(0x0, 0x40009, 0x36, 0x9b72, 0x7, 0x28000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) (async, rerun: 32) socket(0x2, 0x3, 0xa) (async, rerun: 32) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) (async, rerun: 32) sendto$auto(0x3, 0x0, 0xf, 0xe, &(0x7f0000000180)=@in={0x2, 0x4e20, @broadcast}, 0x1a) (async, rerun: 32) mlockall$auto(0x7) (async) write$auto_ocfs2_control_fops_stack_user(r0, &(0x7f0000000000)="11fac598fd55155661037b61efd9839121e60b8fdd7bb985f5bedc99", 0x1c) (async) r7 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/dummy0/addr_gen_mode\x00', 0x1, 0x0) pwrite64$auto(r7, 0x0, 0x0, 0x2000000000040007) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) (async, rerun: 64) move_pages$auto(0x0, 0x1002, 0x0, 0x0, 0x0, 0x2) (async, rerun: 64) tgkill$auto(0x0, 0x0, 0x11) (async, rerun: 64) readv$auto(0x3, 0x0, 0x7) (rerun: 64) 5.016183271s ago: executing program 3 (id=3587): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) socket(0x2, 0x1, 0x106) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) unshare$auto(0x40000080) io_uring_setup$auto(0x6, 0x0) socket(0x2, 0x1, 0x0) shutdown$auto(0x200000003, 0x2) select$auto(0xe, 0x0, 0x0, &(0x7f0000000080)={[0x8, 0xffffffffffffff49, 0x5, 0x5, 0x800000000004, 0x1, 0x5, 0x19, 0x10, 0x8, 0x3, 0x4000000000008, 0xfffffffffffffffc, 0xab, 0x1, 0x9]}, &(0x7f0000000040)={0x0, 0x7}) mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) mmap$auto(0x0, 0xd561, 0x10000000000df, 0xeb2, 0xffffffffffffffff, 0x8000) timer_create$auto(0x2, 0x0, 0x0) timer_settime$auto(0x0, 0x3, &(0x7f00000000c0)={{0x6, 0x4}, {0x0, 0x83}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x400008, 0x0, 0x9b72, 0x2, 0x8000) r2 = socket(0x2, 0x1, 0x106) bind$auto(r2, 0x0, 0x6a) mknod$auto(&(0x7f0000000040)='./file0\x00', 0x1001, 0x4) ppoll$auto(&(0x7f0000000080)={0xffffffffffffffff, 0x7980, 0x6}, 0x2, 0x0, 0x0, 0x8) mount$auto(0x0, &(0x7f0000000540)='}[,&*}\x00', &(0x7f0000000040)='nfsd\x00', 0x3, &(0x7f00000003c0)="3dd1fa31") fcntl$auto(0x0, 0x407, 0x100000) write$auto(0xffffffffffffffff, &(0x7f0000000100)='\x17\x14\xe5\x00l\xf1\x1e\xf5 c\xac\xafq\x86\x89d\x98', 0x5) read$auto(r0, 0x0, 0x20) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r3, &(0x7f0000000200)={0x0, 0x7}, 0x400000003) socket$nl_generic(0x10, 0x3, 0x10) 4.827318059s ago: executing program 7 (id=3588): select$auto(0x4, 0x0, 0x0, &(0x7f0000000480)={[0x1ff, 0x7, 0x2, 0x1, 0x5, 0x1000000000000004, 0x15f4da0a, 0x39, 0x3, 0x2fffffffffffffe, 0x80000002, 0x7a142c64, 0x6d3c, 0x5, 0x80, 0xfb]}, 0x0) openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/pcmC1D1p\x00', 0x2480, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/fs/ocfs2/loaded_cluster_plugins\x00', 0x800, 0x0) syz_clone(0x4000, &(0x7f00000002c0)="f03f0b0be4f2597d8b11ed14dfa636bad65cae9c0d21", 0x16, 0x0, 0x0, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/platform/i8042/serio1/rate\x00', 0x2, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cpu.max\x00', 0x2a02c0, 0x0) sendfile$auto(r0, r0, &(0x7f0000000000)=0x3, 0xad6) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/vtconsole/vtcon1/bind\x00', 0x182b02, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda1\x00', 0xe6e43, 0x0) ioctl$auto_BLKFLSBUF(r2, 0x1261, 0x0) ioctl$auto_BLKFLSBUF(r2, 0x1261, 0x0) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, 0x0, 0x20800, 0x0) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x9}, 0x8) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) landlock_create_ruleset$auto(&(0x7f0000000000)={0x6, 0x3, 0x3}, 0x18, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) getrandom$auto(0x0, 0x6000000, 0x3) bpf$auto(0x5, &(0x7f0000000300)=@bpf_attr_7={@map_id=0x100, 0x92f1, 0x4}, 0xa) bpf$auto(0x0, &(0x7f00000003c0)=@bpf_attr_7={@start_id=0x1, 0x4, 0x81, r1}, 0x6f4) read$auto(r3, 0x0, 0x20) r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000200)='/proc/fs/cifs/LinuxExtensionsEnabled\x00', 0x48043, 0x0) write$auto(r4, 0x0, 0x6) unshare$auto(0x40000080) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001180)='/sys/devices/virtual/block/zram0/compact\x00', 0x608600, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r5, &(0x7f0000000000)="b2", 0x1) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv6/neigh/bond_slave_1/ucast_solicit\x00', 0x101202, 0x0) openat$auto_proc_timers_operations_base(0xffffffffffffff9c, &(0x7f00000000c0), 0x42240, 0x0) 3.955924919s ago: executing program 3 (id=3589): openat$auto_qrtr_tun_ops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) r0 = openat$auto_dfs_global_fops_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/ubifs/chk_general\x00', 0x40aa2, 0x0) write$auto_dfs_global_fops_debug(r0, &(0x7f0000000d80)='0', 0x1) r1 = openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) r2 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_FLOW_CMD_GET(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010025bd700002dcdf2503000000040008000400080014000180100010800c000b00080001"], 0x30}, 0x1, 0x0, 0x0, 0x200400f0}, 0x800) ioctl$auto_TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)=0x7ff) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r4 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x80080, 0x0) ioctl$auto_PPPIOCSMRU(r4, 0xc004743e, 0x0) ioctl$auto_PPPIOCSCOMPRESS(r4, 0x4010744d, 0x0) 3.62809846s ago: executing program 8 (id=3590): r0 = prctl$auto_PR_SCHED_CORE_SHARE_TO(0x7, 0x2, 0xffffffffffffffff, 0x6, 0x3) r1 = socket(0x3, 0x1, 0x1) close_range$auto(0x2, 0x8, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0x2, 0x1, 0x106) setsockopt$auto(r3, 0x6, 0xd, &(0x7f0000000280)='lp\x00h\x85M\xdf\xdc\x83\x8a\xa7\xe4]U(\x01\t=\x1e\x00\x00', 0x4) bind$auto(0x3, &(0x7f0000000180)=@in={0x2, 0x3, @multicast1}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) write$auto(0x3, 0x0, 0xfffffdef) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/amidi2\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r4, &(0x7f0000000400)='?deW\x9c\xd9]\xbb5\x10\xc4\x00', 0x100000a3db) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(0xffffffffffffffff, 0x0, 0x8000) bind$auto(0x3, 0x0, 0x6a) sendmmsg$auto(r1, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xff}, 0x8}, 0x7, 0x20020000) syz_genetlink_get_family_id$auto_nl80211(0x0, r1) sendmsg$auto_NL80211_CMD_PROBE_MESH_LINK(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000090}, 0xc050) write$auto(0x3, 0x0, 0xfffffdef) r5 = socket(0x2, 0x1, 0x106) bind$auto(r5, &(0x7f0000000040)=@in={0x2, 0x3, @broadcast}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x11f, 0x0, 0xfffffffffffffffd) bind$auto(0xffffffffffffffff, 0x0, 0x6a) r6 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram5\x00', 0x147a02, 0x0) sendfile$auto(0x3, r6, 0x0, 0x400000000006) connect$auto(0x3, 0x0, 0x55) ioctl$auto_PPPIOCSMRU(r0, 0x40047452, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) 3.456878383s ago: executing program 3 (id=3591): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) init_module$auto(0x0, 0xffff9, 0x0) r0 = epoll_create$auto(0x4) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x2200, 0x0) socket(0x2, 0x1, 0x106) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x64842, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f00000011c0)='/dev/ptyq3\x00', 0x40001, 0x0) io_uring_setup$auto(0x1, 0x0) fcntl$auto(0x3, 0x4, 0xa553) write$auto(0x3, 0x0, 0xfdef) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdc, 0xeb5, 0x401, 0x41) mkdir$auto(&(0x7f0000000040)='./file0\x00', 0x2) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x8000, 0x70) renameat2$auto(r2, 0x0, r2, 0x0, 0x5) ioctl$auto_USB_RAW_IOCTL_EP_SET_HALT(r0, 0x4004550d, &(0x7f0000000180)=0x798) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000080)={{0x0, 0x8002, &(0x7f00000002c0)={0x0, 0xc4}, 0x2, 0x0, 0x0, 0x1}, 0xf}, 0x3, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f0000000440)={[0x10000000001ff, 0x4, 0xd, 0xffffffffffffffff, 0x3, 0x10, 0x2, 0x2, 0x5, 0x62, 0x80000026, 0x7, 0x6d3e, 0x8, 0xd, 0x40000000001]}, 0x0) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x6a2a82, 0x0) mmap$auto(0x0, 0x2020005, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) syz_clone(0x4001000, 0x0, 0x0, 0x0, 0x0, 0x0) 2.469772606s ago: executing program 8 (id=3592): syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000d80), 0xffffffffffffffff) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram5\x00', 0x1eba02, 0x0) setresuid$auto(0x0, 0x0, 0x0) ioctl$auto_BLKALIGNOFF(r0, 0x127a, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x40000008000) sendmsg$auto_NL80211_CMD_GET_MPATH(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x41811}, 0x20000000) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x0, 0x100000000008000) socket(0x2b, 0x1, 0x1) getsockopt$auto(0x3, 0x200000000001, 0x1c, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000000180), 0x80a040, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r2 = socket(0x2, 0x1, 0x0) bind$auto(r2, &(0x7f0000000040)=@in={0x2, 0x4e25, @remote}, 0x6d) sendmmsg$auto(r2, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) sendmsg$auto_NFSD_CMD_THREADS_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x51}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) setsockopt$auto(0x3, 0x1, 0x2e, 0x0, 0x9) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) kexec_load$auto(0x5, 0x2, &(0x7f0000000040)={@kbuf=0x0, 0x800c000, 0x4800c000, 0x800c000}, 0x4) 2.293447795s ago: executing program 3 (id=3593): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/pcrypt/pencrypt/parallel_cpumask\x00', 0x80302, 0x0) sendfile$auto(r0, r0, 0x0, 0x7ffff000) socket(0x2, 0x2, 0x1) mmap$auto(0x0, 0xc739, 0x0, 0x10, 0x2, 0x9) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r1 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x2, 0x7) mmap$auto(0x0, 0x8, 0x4000000000e2, 0xeb1, 0x401, 0x8000) unshare$auto(0x40000080) arch_prctl$auto_ARCH_SET_GS(0x1001, 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x30, r3, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@ETHTOOL_A_COALESCE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @ETHTOOL_A_COALESCE_PKT_RATE_HIGH={0x8, 0x12, 0x2}, @ETHTOOL_A_COALESCE_TX_AGGR_MAX_BYTES={0x8, 0x1a, 0x1ff}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x800) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'wg2\x00', 0x0}) r6 = socket(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth0_to_team\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0100cda4429629bd7100f9db5f2502"], 0x24}, 0x1, 0x0, 0x0, 0x404c0c0}, 0x80) sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x6c, r3, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@ETHTOOL_A_CABLE_TEST_TDR_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_PHY_INDEX={0x8, 0x4, 0x7df}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @ETHTOOL_A_CABLE_TEST_TDR_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_PHY_INDEX={0x8, 0x4, 0xffff}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7fffffff}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20000004}, 0x8080) 2.219942936s ago: executing program 7 (id=3594): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) timer_create$auto(0x8, 0x0, 0x0) timer_settime$auto(0x0, 0xffff7ffc, 0x0, 0x0) timer_gettime$auto(0x0, 0x0) r0 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0xffffffffffffffff, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) select$auto(0x8, 0x0, 0x0, 0x0, 0x0) shmdt$auto(0x0) r1 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000080), r0) fstat$auto(r0, 0x0) socket(0x10, 0x2, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) write$auto(0xffffffffffffffff, &(0x7f0000000000)='3\xc7\xff\xff\xff\xdd\x10\b(Ks\x0f\x87|P\x11\xd1li0\x89\x85\x90QM\xd6wfF\xf1x\xb3;c\tP\x03\x84\x97\x99\x83\x97\x81:\xf3\xa3o5\xc5\x86\xed\xa4\x18]\xa3\xc9\x0f\xff\xdak\xb0m\xe1U\xb3\xa2\xee\xdcTJQO\x98\xc8w\x8c\xe7\x00\x00\x00\x1dj\x1e\xebQT\xdd\x9b\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00', 0x9) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a00"], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x20000800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) sendmsg$auto_NL802154_CMD_NEW_SEC_DEVKEY(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="ec020000", @ANYRES16=r1, @ANYBLOB="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", @ANYRES32=r0, @ANYBLOB="080032d8", @ANYRES32, @ANYBLOB="0c0050000200000000000000ea399291e804caa4744cbb97efadcc1d9db072ebe7092b17b1c1bf753c4f66a4f0a4c8119c03bf3380a2a8822b987a1dc6b610c52b9ea5033fdbf3e9b49ab577c94d1025573e6f0748cf4d3bb53a540bfd0d8b42cb53694c65e1"], 0x2ec}, 0x1, 0x0, 0x0, 0x81}, 0x8100) getsockopt$auto(0xffffffffffffffff, 0x0, 0x43, 0x0, 0x0) fsconfig$auto_FSCONFIG_CMD_RECONFIGURE(r0, 0x7, &(0x7f00000000c0)='/dev/nullb0\x00', &(0x7f0000000100)="f9f3dc7ec2be97ba405c3dc5e55441563198f68f36d6fb16b3f206d146da315d025af04b412f6e0aed8e0358382d3a5bde6c79d1f3253a52c3acf20788239c2e60542aabf86849b5f4c6a8ddf354405e28c9b4f0785c0f52009a583a1681ec4e5a66d08395160d681f0e8fcca75b79c0d820f4bbde85b2d611d8bd6cd2a8765a21e6a67a38dcfe0aa0e0f350dd31c5116b7cee49256ba7d9ef4f256a62e48fc305f23eb34056ee2d354662d757c57fc9db03f6f11752d17f111b84db2958a85504f31f1ea3f58ab1d473237359a360a59a3e551f34481bc8ea97ff558ed2af084ca415270a765367b644", 0xfffffffb) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) 601.857413ms ago: executing program 7 (id=3595): sendmsg$auto_GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01002d0008000700"/18, @ANYRES32], 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16, @ANYBLOB="000126bd7000fbdbdf2502000000080001"], 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x8080) r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="06000000", @ANYRES16=0x0, @ANYBLOB="0100"], 0x14}, 0x1, 0x0, 0x0, 0x30000881}, 0xc040804) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB], 0x1ac}}, 0x40000) sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0x96bc}, 0x2, &(0x7f0000000380), 0x7, 0xa505}, 0x9}, 0x7, 0x4008) 286.995481ms ago: executing program 7 (id=3596): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x14fa02, 0x0) mmap$auto(0x0, 0x810004, 0x400000000ffb, 0x8000000008011, 0x3, 0x8000) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) r1 = socket(0xa, 0x3, 0x3a) close$auto(r1) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(r1, 0x8, 0x0, 0x0) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) open(0x0, 0x0, 0x408) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) preadv2$auto(r0, &(0x7f0000000080)={0x0, 0x80000000}, 0x6, 0xffffffffffffffff, 0x4, 0x2e) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x29, 0x2, 0x0) io_uring_setup$auto(0xa, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) mmap$auto(0x0, 0x400008, 0xdf, 0x9372, 0x2, 0x8000) r2 = socket(0x2b, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @remote}, 0x6a) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0x8, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x1c, 0x0, 0x300, 0x70bd29, 0x25dfdbfb, {0x2, 0x0, 0x14}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x1c}, 0x1, 0x1400, 0x0, 0x40884}, 0x1) r5 = socket(0xa, 0x5, 0x84) sendto$auto(r5, 0x0, 0x401, 0x101, &(0x7f0000000000)=@generic={0xa, "000000000000fe8000"}, 0x1f) sendmmsg$auto(r2, &(0x7f0000000000)={{0x0, 0x12, 0x0, 0x9, 0x0, 0x1f, 0xfffffffd}, 0x10001}, 0x5, 0x20000000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) setsockopt$auto(0x3, 0x6, 0x19, 0x0, 0xfb3) close_range$auto(0x2, 0xa, 0x0) 0s ago: executing program 8 (id=3597): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000640), r0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'ip6_vti0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'vlan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'netpci0\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r5) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001600)={0x20, r6, 0xd0d58b333228212f, 0x70bd2c, 0x25dfdbfc, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r7}, @NL80211_ATTR_SCAN_FREQUENCIES={0x4}]}, 0x20}}, 0x4000000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'ipvlan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'pimreg0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'gre0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'pimreg0\x00', 0x0}) r12 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r13 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000000)={'virt_wifi0\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(r13, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000880)={0x24, r12, 0x13, 0x70bd26, 0x25dfdbfd, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r14}, @NL80211_ATTR_WIPHY_ANTENNA_TX={0x8, 0x69, 0x3ff}]}, 0x24}, 0x1, 0x0, 0x0, 0x4004080}, 0x0) r15 = socket$nl_generic(0x10, 0x3, 0x10) r16 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r15, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_COALESCE_SET(r15, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x28, r16, 0x1, 0x70b527, 0x25dfdbfb, {}, [@ETHTOOL_A_COALESCE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r17}]}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES={0x8, 0x3, 0x7}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x800) r18 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r19 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r19, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(r19, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r18, @ANYBLOB="01002dbd7000fddbdf250800030008000300", @ANYRES32=r20], 0x24}, 0x1, 0x0, 0x0, 0x5c5fd097d751f33e}, 0x80) sendmsg$auto_ETHTOOL_MSG_WOL_GET(r0, &(0x7f0000000540)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000500)={&(0x7f0000000340)={0x1a4, 0x0, 0x8, 0x70bd29, 0x25dfdbfd, {}, [@ETHTOOL_A_WOL_HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x101}]}, @ETHTOOL_A_WOL_HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}]}, @ETHTOOL_A_WOL_HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3ff}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xfb1}]}, @ETHTOOL_A_WOL_HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xfffffc5f}]}, @ETHTOOL_A_WOL_HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xff}]}, @ETHTOOL_A_WOL_HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xb5be}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r17}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r20}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}]}]}, 0x1a4}, 0x1, 0x0, 0x0, 0x4008084}, 0x40) r21 = openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(r21, 0xc0285700, 0x0) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r1, 0x805, 0x70bd2d, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4004044}, 0x8000) mknod$auto(&(0x7f0000000040)='./file0\x00', 0x8, 0xffffffff) kernel console output (not intermixed with test programs): lure. [ 1112.099851][T20596] name failslab, interval 1, probability 0, space 0, times 0 [ 1112.167144][T20596] CPU: 0 UID: 0 PID: 20596 Comm: syz.0.2978 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 1112.167188][T20596] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 1112.167200][T20596] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1112.167215][T20596] Call Trace: [ 1112.167223][T20596] [ 1112.167233][T20596] dump_stack_lvl+0x100/0x190 [ 1112.167274][T20596] should_fail_ex.cold+0x5/0xa [ 1112.167302][T20596] should_failslab+0xc2/0x120 [ 1112.167342][T20596] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1112.167376][T20596] ? mm_alloc+0x1c/0xd0 [ 1112.167405][T20596] mm_alloc+0x1c/0xd0 [ 1112.167427][T20596] alloc_bprm+0x2af/0x710 [ 1112.167464][T20596] do_execveat_common.isra.0+0x19c/0x580 [ 1112.167500][T20596] ? do_getname+0x191/0x390 [ 1112.167529][T20596] __x64_sys_execve+0x93/0xd0 [ 1112.167571][T20596] do_syscall_64+0x106/0xf80 [ 1112.167597][T20596] ? clear_bhb_loop+0x40/0x90 [ 1112.167627][T20596] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1112.167652][T20596] RIP: 0033:0x7f55fb79c629 [ 1112.167672][T20596] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1112.167696][T20596] RSP: 002b:00007f55fc5e2028 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 1112.167719][T20596] RAX: ffffffffffffffda RBX: 00007f55fba15fa0 RCX: 00007f55fb79c629 [ 1112.167735][T20596] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00002000000001c0 [ 1112.167750][T20596] RBP: 00007f55fb832b39 R08: 0000000000000000 R09: 0000000000000000 [ 1112.167765][T20596] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1112.167780][T20596] R13: 00007f55fba16038 R14: 00007f55fba15fa0 R15: 00007ffc779105e8 [ 1112.167810][T20596] [ 1114.471550][T20627] tipc: Started in network mode [ 1114.492816][T20627] tipc: Node identity ffffffff, cluster identity 4711 [ 1114.539654][T20627] tipc: Node number set to 4294967295 [ 1114.818287][T15815] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 1115.202040][T20654] FAULT_INJECTION: forcing a failure. [ 1115.202040][T20654] name failslab, interval 1, probability 0, space 0, times 0 [ 1115.252982][T20654] CPU: 0 UID: 0 PID: 20654 Comm: syz.2.2992 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 1115.253025][T20654] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 1115.253037][T20654] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1115.253051][T20654] Call Trace: [ 1115.253059][T20654] [ 1115.253069][T20654] dump_stack_lvl+0x100/0x190 [ 1115.253107][T20654] should_fail_ex.cold+0x5/0xa [ 1115.253133][T20654] should_failslab+0xc2/0x120 [ 1115.253172][T20654] __kvmalloc_node_noprof+0xfa/0xa00 [ 1115.253206][T20654] ? io_alloc_cache_init+0x38/0x170 [ 1115.253238][T20654] ? lockdep_set_lock_cmp_fn+0xe0/0xe0 [ 1115.253273][T20654] io_alloc_cache_init+0x38/0x170 [ 1115.253305][T20654] io_uring_setup.cold+0x3eb/0x1d09 [ 1115.253344][T20654] ? __pfx_io_uring_setup+0x10/0x10 [ 1115.253370][T20654] ? do_futex+0x192/0x350 [ 1115.253400][T20654] ? __pfx_do_futex+0x10/0x10 [ 1115.253443][T20654] ? xfd_validate_state+0x129/0x190 [ 1115.253483][T20654] __x64_sys_io_uring_setup+0xc2/0x170 [ 1115.253510][T20654] do_syscall_64+0x106/0xf80 [ 1115.253535][T20654] ? clear_bhb_loop+0x40/0x90 [ 1115.253564][T20654] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1115.253588][T20654] RIP: 0033:0x7fb64a19c629 [ 1115.253608][T20654] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1115.253632][T20654] RSP: 002b:00007fb64afb6028 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 1115.253654][T20654] RAX: ffffffffffffffda RBX: 00007fb64a415fa0 RCX: 00007fb64a19c629 [ 1115.253670][T20654] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000001d48 [ 1115.253684][T20654] RBP: 00007fb64a232b39 R08: 0000000000000000 R09: 0000000000000000 [ 1115.253699][T20654] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1115.253713][T20654] R13: 00007fb64a416038 R14: 00007fb64a415fa0 R15: 00007ffe687d32a8 [ 1115.253751][T20654] [ 1115.871329][T20632] Process accounting paused [ 1116.327201][T20675] FAULT_INJECTION: forcing a failure. [ 1116.327201][T20675] name failslab, interval 1, probability 0, space 0, times 0 [ 1116.434990][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.443554][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.606736][T20675] CPU: 0 UID: 0 PID: 20675 Comm: syz.0.2997 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 1116.606779][T20675] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 1116.606790][T20675] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1116.606804][T20675] Call Trace: [ 1116.606812][T20675] [ 1116.606821][T20675] dump_stack_lvl+0x100/0x190 [ 1116.606863][T20675] should_fail_ex.cold+0x5/0xa [ 1116.606889][T20675] should_failslab+0xc2/0x120 [ 1116.606928][T20675] __kmalloc_node_track_caller_noprof+0xe3/0x850 [ 1116.606964][T20675] ? kasprintf+0xc7/0x100 [ 1116.607012][T20675] kvasprintf+0xbc/0x150 [ 1116.607048][T20675] ? __pfx_kvasprintf+0x10/0x10 [ 1116.607086][T20675] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1116.607126][T20675] ? lockdep_hardirqs_on+0x78/0x100 [ 1116.607151][T20675] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1116.607194][T20675] kasprintf+0xc7/0x100 [ 1116.607230][T20675] ? __pfx_kasprintf+0x10/0x10 [ 1116.607279][T20675] ieee80211_alloc_led_names+0x86/0x420 [ 1116.607313][T20675] ieee80211_alloc_hw_nm+0x1934/0x22a0 [ 1116.607349][T20675] mac80211_hwsim_new_radio+0x1e1/0x57d0 [ 1116.607394][T20675] ? __asan_memset+0x23/0x50 [ 1116.607426][T20675] ? __nla_validate_parse+0x1e7/0x28b0 [ 1116.607454][T20675] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 1116.607494][T20675] hwsim_new_radio_nl+0xc1f/0x1340 [ 1116.607526][T20675] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1116.607571][T20675] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1aa/0x290 [ 1116.607613][T20675] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1b4/0x290 [ 1116.607653][T20675] genl_family_rcv_msg_doit+0x214/0x300 [ 1116.607689][T20675] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1116.607727][T20675] ? genl_get_cmd+0x3ef/0x720 [ 1116.607764][T20675] ? bpf_lsm_capable+0x9/0x10 [ 1116.607786][T20675] ? security_capable+0x80/0x260 [ 1116.607818][T20675] ? ns_capable+0xd2/0xf0 [ 1116.607862][T20675] genl_rcv_msg+0x560/0x800 [ 1116.607899][T20675] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1116.607932][T20675] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1116.607973][T20675] netlink_rcv_skb+0x159/0x420 [ 1116.608002][T20675] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1116.608036][T20675] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1116.608076][T20675] ? netlink_deliver_tap+0x1ae/0xcc0 [ 1116.608108][T20675] genl_rcv+0x28/0x40 [ 1116.608136][T20675] netlink_unicast+0x5aa/0x870 [ 1116.608169][T20675] ? __pfx_netlink_unicast+0x10/0x10 [ 1116.608209][T20675] netlink_sendmsg+0x8b0/0xda0 [ 1116.608242][T20675] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1116.608269][T20675] ? __import_iovec+0x1d2/0x640 [ 1116.608309][T20675] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 1116.608344][T20675] ____sys_sendmsg+0xa54/0xc30 [ 1116.608381][T20675] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1116.608420][T20675] ? __pfx_futex_wake_mark+0x10/0x10 [ 1116.608460][T20675] ___sys_sendmsg+0x190/0x1e0 [ 1116.608496][T20675] ? __pfx____sys_sendmsg+0x10/0x10 [ 1116.608565][T20675] __sys_sendmsg+0x170/0x220 [ 1116.608598][T20675] ? __pfx___sys_sendmsg+0x10/0x10 [ 1116.608623][T20675] ? __x64_sys_futex+0x34f/0x4d0 [ 1116.608670][T20675] do_syscall_64+0x106/0xf80 [ 1116.608694][T20675] ? clear_bhb_loop+0x40/0x90 [ 1116.608724][T20675] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1116.608748][T20675] RIP: 0033:0x7f55fb79c629 [ 1116.608774][T20675] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1116.608798][T20675] RSP: 002b:00007f55fc5c1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1116.608820][T20675] RAX: ffffffffffffffda RBX: 00007f55fba16090 RCX: 00007f55fb79c629 [ 1116.608838][T20675] RDX: 0000000000008000 RSI: 0000200000000200 RDI: 0000000000000006 [ 1116.608854][T20675] RBP: 00007f55fb832b39 R08: 0000000000000000 R09: 0000000000000000 [ 1116.608868][T20675] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1116.608882][T20675] R13: 00007f55fba16128 R14: 00007f55fba16090 R15: 00007ffc779105e8 [ 1116.608912][T20675] [ 1123.304706][T20781] FAULT_INJECTION: forcing a failure. [ 1123.304706][T20781] name failslab, interval 1, probability 0, space 0, times 0 [ 1123.387921][T20781] CPU: 0 UID: 0 PID: 20781 Comm: syz.4.3018 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 1123.387967][T20781] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 1123.387979][T20781] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1123.387993][T20781] Call Trace: [ 1123.388002][T20781] [ 1123.388012][T20781] dump_stack_lvl+0x100/0x190 [ 1123.388052][T20781] should_fail_ex.cold+0x5/0xa [ 1123.388087][T20781] ? lsm_blob_alloc+0x68/0x90 [ 1123.388113][T20781] should_failslab+0xc2/0x120 [ 1123.388156][T20781] __kmalloc_noprof+0xe0/0x850 [ 1123.388190][T20781] ? down_write_nested+0x14f/0x200 [ 1123.388230][T20781] lsm_blob_alloc+0x68/0x90 [ 1123.388257][T20781] security_sb_alloc+0x25/0x240 [ 1123.388289][T20781] alloc_super+0x24c/0xd20 [ 1123.388327][T20781] ? __pfx_mqueue_fill_super+0x10/0x10 [ 1123.388355][T20781] sget_fc+0x117/0xc70 [ 1123.388388][T20781] ? __pfx_set_anon_super_fc+0x10/0x10 [ 1123.388441][T20781] ? __pfx_mqueue_fill_super+0x10/0x10 [ 1123.388469][T20781] get_tree_nodev+0x28/0x190 [ 1123.388503][T20781] mqueue_get_tree+0xf1/0x130 [ 1123.388531][T20781] vfs_get_tree+0x92/0x320 [ 1123.388561][T20781] fc_mount_longterm+0x1a/0x270 [ 1123.388594][T20781] mq_init_ns+0x482/0x820 [ 1123.388629][T20781] copy_ipcs+0x3dd/0x7e0 [ 1123.388663][T20781] create_new_namespaces+0x20a/0xac0 [ 1123.388687][T20781] ? security_capable+0x80/0x260 [ 1123.388720][T20781] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 1123.388747][T20781] ksys_unshare+0x455/0xab0 [ 1123.388777][T20781] ? __pfx_ksys_unshare+0x10/0x10 [ 1123.388816][T20781] __x64_sys_unshare+0x31/0x40 [ 1123.388844][T20781] do_syscall_64+0x106/0xf80 [ 1123.388869][T20781] ? clear_bhb_loop+0x40/0x90 [ 1123.388898][T20781] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1123.388922][T20781] RIP: 0033:0x7f366c39c629 [ 1123.388942][T20781] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1123.388965][T20781] RSP: 002b:00007f366d323028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1123.388988][T20781] RAX: ffffffffffffffda RBX: 00007f366c615fa0 RCX: 00007f366c39c629 [ 1123.389004][T20781] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000006c000000 [ 1123.389019][T20781] RBP: 00007f366c432b39 R08: 0000000000000000 R09: 0000000000000000 [ 1123.389034][T20781] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1123.389048][T20781] R13: 00007f366c616038 R14: 00007f366c615fa0 R15: 00007ffc9633a0f8 [ 1123.389084][T20781] [ 1123.928604][T20783] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.3.3020: iget: checksum invalid [ 1123.955805][T20783] faux_driver regulatory: loading /lib/firmware/updates/syzkaller/regulatory.db failed with error -74 [ 1123.999879][T20783] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.3.3020: iget: checksum invalid [ 1124.046561][T20783] faux_driver regulatory: loading /lib/firmware/updates/regulatory.db failed with error -74 [ 1124.079627][T20783] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.3.3020: iget: checksum invalid [ 1124.147983][T20783] faux_driver regulatory: loading /lib/firmware/syzkaller/regulatory.db failed with error -74 [ 1124.196557][T20789] [U] ^\ [ 1124.208740][T20783] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.3.3020: iget: checksum invalid [ 1124.250066][T20783] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -74 [ 1124.279989][T20783] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -74 [ 1124.309949][T20783] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 1125.055860][T20796] netlink: 354 bytes leftover after parsing attributes in process `syz.3.3024'. [ 1125.521521][T20805] random: crng reseeded on system resumption [ 1125.593276][T20804] random: crng reseeded on system resumption [ 1125.648047][T20804] Restarting kernel threads ... [ 1125.678302][T20804] Done restarting kernel threads. [ 1126.489682][T20823] mkiss: ax0: crc mode is auto. [ 1127.043998][T20840] futex_wake_op: syz.3.3034 tries to shift op by -2048; fix this program [ 1127.098343][T20844] Setting dangerous option i915.mitigations - tainting kernel [ 1127.158164][T20840] futex_wake_op: syz.3.3034 tries to shift op by -2048; fix this program [ 1127.212966][T20846] 0x000000000001-0x000000020000 : "" [ 1127.307368][T20846] ftl_cs: FTL header corrupt! [ 1128.048783][T20847] EXT4-fs error (device sda1): trigger_test_error:130: comm syz.0.3033: 7 [ 1130.062050][T20881] FAULT_INJECTION: forcing a failure. [ 1130.062050][T20881] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1130.117809][T20881] CPU: 0 UID: 0 PID: 20881 Comm: syz.2.3043 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 1130.117853][T20881] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 1130.117864][T20881] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1130.117879][T20881] Call Trace: [ 1130.117887][T20881] [ 1130.117896][T20881] dump_stack_lvl+0x100/0x190 [ 1130.117935][T20881] should_fail_ex.cold+0x5/0xa [ 1130.117961][T20881] get_futex_key+0x1d2/0x1620 [ 1130.117991][T20881] ? __pfx_get_futex_key+0x10/0x10 [ 1130.118017][T20881] ? futex_hash+0x2c5/0x380 [ 1130.118046][T20881] ? __pfx_snd_seq_oss_write+0x10/0x10 [ 1130.118086][T20881] futex_wake+0xea/0x530 [ 1130.118123][T20881] ? __pfx_futex_wake+0x10/0x10 [ 1130.118161][T20881] ? vfs_write+0x15d/0x1070 [ 1130.118196][T20881] ? __pfx_odev_write+0x10/0x10 [ 1130.118230][T20881] do_futex+0x32b/0x350 [ 1130.118259][T20881] ? __pfx_do_futex+0x10/0x10 [ 1130.118296][T20881] __x64_sys_futex+0x34f/0x4d0 [ 1130.118327][T20881] ? fput+0x79/0x100 [ 1130.118350][T20881] ? __pfx___x64_sys_futex+0x10/0x10 [ 1130.118378][T20881] ? ksys_write+0x1ac/0x250 [ 1130.118413][T20881] ? __pfx_ksys_write+0x10/0x10 [ 1130.118455][T20881] do_syscall_64+0x106/0xf80 [ 1130.118480][T20881] ? clear_bhb_loop+0x40/0x90 [ 1130.118508][T20881] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1130.118533][T20881] RIP: 0033:0x7fb64a19c629 [ 1130.118552][T20881] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1130.118575][T20881] RSP: 002b:00007fb64afb60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1130.118597][T20881] RAX: ffffffffffffffda RBX: 00007fb64a415fa8 RCX: 00007fb64a19c629 [ 1130.118613][T20881] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fb64a415fac [ 1130.118628][T20881] RBP: 00007fb64a415fa0 R08: 0000000000000000 R09: 0000000000000000 [ 1130.118642][T20881] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 1130.118657][T20881] R13: 00007fb64a416038 R14: 00007ffe687d31c0 R15: 00007ffe687d32a8 [ 1130.118686][T20881] [ 1130.715719][T20875] Invalid ELF header magic: != ELF [ 1133.614342][T20914] netlink: 342 bytes leftover after parsing attributes in process `syz.2.3050'. [ 1133.816421][ T30] audit: type=1326 audit(4294967361.850:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20917 comm="syz.3.3049" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f38d459c629 code=0x0 [ 1133.885992][T20923] bridge0: port 4(vlan0) entered blocking state [ 1133.900075][T20923] bridge0: port 4(vlan0) entered disabled state [ 1133.940172][T20923] vlan0: entered allmulticast mode [ 1133.966973][T20923] veth0_vlan: entered allmulticast mode [ 1134.002743][T20923] vlan0: entered promiscuous mode [ 1134.026730][T20923] bridge0: port 4(vlan0) entered blocking state [ 1134.033171][T20923] bridge0: port 4(vlan0) entered forwarding state [ 1134.791674][T20938] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3056'. [ 1135.001260][T20941] vivid-007: ================= START STATUS ================= [ 1135.057910][T20941] vivid-007: Generate PTS: true [ 1135.088837][T20941] vivid-007: Generate SCR: true [ 1135.101528][T20941] tpg source WxH: 320x240 (Y'CbCr) [ 1135.121785][T20941] tpg field: 1 [ 1135.136221][T20941] tpg crop: (0,0)/320x240 [ 1135.150552][T20941] tpg compose: (0,0)/320x240 [ 1135.165149][T20941] tpg colorspace: 8 [ 1135.237708][T20941] tpg transfer function: 0/0 [ 1135.273887][T20941] tpg Y'CbCr encoding: 0/0 [ 1135.319784][T20941] tpg quantization: 0/0 [ 1135.362145][T20941] tpg RGB range: 0/2 [ 1135.401745][T20941] vivid-007: ================== END STATUS ================== [ 1136.317471][T20958] netlink: 342 bytes leftover after parsing attributes in process `syz.2.3060'. [ 1136.591614][T20962] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input37 [ 1137.229791][T20975] crash hp: kexec_trylock() failed, kdump image may be inaccurate [ 1137.256442][T20977] random: crng reseeded on system resumption [ 1137.328079][ T30] audit: type=1800 audit(4294967365.370:21): pid=20975 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.3063" name="dbroot" dev="configfs" ino=89913 res=0 errno=0 [ 1137.363321][T20977] Restarting kernel threads ... [ 1137.398676][T20977] Done restarting kernel threads. [ 1137.493798][T20977] sp0: Synchronizing with TNC [ 1137.812207][T20978] tipc: Started in network mode [ 1137.817131][T20978] tipc: Node identity ffffffff, cluster identity 4711 [ 1138.008442][T20978] tipc: Node number set to 4294967295 [ 1138.094324][T15815] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18 [ 1138.168027][T20995] netlink: 'syz.2.3069': attribute type 27 has an invalid length. [ 1138.206120][T20972] kexec: Could not allocate control_code_buffer [ 1138.235021][T20995] netlink: 146 bytes leftover after parsing attributes in process `syz.2.3069'. [ 1138.440544][T20997] ubi0: attaching mtd1 [ 1138.446200][T20997] ubi0: scanning is finished [ 1138.531757][T20997] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 1138.618142][T20996] zswap: compressor not available [ 1139.025534][T21000] zswap: compressor not available [ 1139.057182][T20997] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd1, error -22 [ 1139.305004][T21018] phram: not enough arguments [ 1139.725640][T21028] [U] [ 1139.728478][T21028] [U] [ 1139.731186][T21028] [U] [ 1139.733932][T21028] [U] [ 1139.797214][T21028] [U] [ 1139.799979][T21028] [U] [ 1139.802691][T21028] [U] [ 1139.805410][T21028] [U] [ 1139.843855][T21028] [U] [ 1139.846603][T21028] [U] [ 1139.849320][T21028] [U] [ 1139.852030][T21028] [U] [ 1139.918232][T21028] [U] [ 1139.920953][T21028] [U] /dM4N_&wF܃s6 җ'9/x= [ 1139.928371][T21028] [U] T.bcfM'vȳF'&!t[ SWc;q).ZyD[[DN}xk$Y&tQغ-IL#&m [ 1139.939137][T21028] [U] rq<?he-t [ 1139.943132][T21028] [U] mf^y yݛ\ {0k[3bΦ0#)TU8x닋ܑ #WdJIЃA8E֬v< $ɰ&s=+Yf끟?[Uŵ [ 1139.955814][T21028] [U] X ڳX:1R0V̟6=XD.? ZLRdz i*QYΗ?r}a)cw. 䎿]P#NXZ}?3YfT<æ:cM]vH4QAT"B\! & [ 1139.973898][T21028] [U] /Fh(qFw*Ȍz@ )zm [ 1139.980579][T21028] [U] !& %%|c [ 1139.985266][T21028] [U] j/۷rlӑ[,ieyPniolgsԡW X5 :]҃ [ 1139.993338][T21028] [U] ᓬ$L(J<,䇄nt}頋= "aCofu [ 1140.000796][T21028] [U] ]Z [ 1140.003914][T21028] [U] ޏm=[}ϗ?zn k³:[F ]rb ҺG{$ht^ʡ3ڍYlJJ$9 [ 1140.014413][T21028] [U] (N͍1 [ 1140.017790][T21028] [U] L5XAjz^w2D*i>Am*DZO~_{#nJR0̯ [ 1140.026298][T21028] [U] ,Vft~ [ 1140.030452][T21028] [U] vdj_qW2,7 [ 1140.034179][T21028] [U] 3!=5g 6g&#"2PX{l$ [ 1140.040539][T21028] [U] zUT!r&RjL/iB<>Z.y|QJwh5Oas"'-OVg0 TLt5F4P4iC?l_k/!}Ccoq⌈6rrԶP+ [ 1140.056881][T21028] [U] 9԰FeVQȳx1u95i `۴KCv3i$AL{n7I?Ǜc?}d+`ʗ)Y?uYX<@t*&?{rɄǕfc$%$Z)&3;7ӵ]r5Lf H+\e—pEq [ 1140.976927][T21028] [U] PpNI{$귅|X!JBe(w,R -w Jz/@=ua̔L`/bq%c [ 1141.071935][T21028] nfs: Unknown parameter 'nl802154' [ 1141.358409][T21060] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3081'. [ 1141.393669][T21061] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3081'. [ 1141.899799][T21074] netlink: 142 bytes leftover after parsing attributes in process `syz.3.3083'. [ 1142.125342][T21079] FAULT_INJECTION: forcing a failure. [ 1142.125342][T21079] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1142.351381][T21079] CPU: 0 UID: 0 PID: 21079 Comm: syz.0.3085 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 1142.351424][T21079] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 1142.351435][T21079] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1142.351450][T21079] Call Trace: [ 1142.351458][T21079] [ 1142.351467][T21079] dump_stack_lvl+0x100/0x190 [ 1142.351507][T21079] should_fail_ex.cold+0x5/0xa [ 1142.351533][T21079] strncpy_from_user+0x3b/0x2d0 [ 1142.351571][T21079] do_getname+0x78/0x390 [ 1142.351601][T21079] user_path_at+0x26/0x60 [ 1142.351636][T21079] __x64_sys_mount+0x1fb/0x310 [ 1142.351662][T21079] ? __pfx___x64_sys_mount+0x10/0x10 [ 1142.351695][T21079] do_syscall_64+0x106/0xf80 [ 1142.351721][T21079] ? clear_bhb_loop+0x40/0x90 [ 1142.351750][T21079] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1142.351774][T21079] RIP: 0033:0x7f55fb79c629 [ 1142.351793][T21079] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1142.351817][T21079] RSP: 002b:00007f55fc5c1028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1142.351839][T21079] RAX: ffffffffffffffda RBX: 00007f55fba16090 RCX: 00007f55fb79c629 [ 1142.351855][T21079] RDX: 0000200000000240 RSI: 0000000000000000 RDI: 0000200000000180 [ 1142.351870][T21079] RBP: 00007f55fb832b39 R08: 0000200000000280 R09: 0000000000000000 [ 1142.351885][T21079] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000000 [ 1142.351903][T21079] R13: 00007f55fba16128 R14: 00007f55fba16090 R15: 00007ffc779105e8 [ 1142.351933][T21079] [ 1142.817252][T21077] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.4.3084: iget: checksum invalid [ 1142.863239][T21089] page: refcount:22 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7fe00 [ 1142.968778][T21089] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1142.993407][T21077] faux_driver regulatory: loading /lib/firmware/updates/syzkaller/regulatory.db failed with error -74 [ 1143.077825][T21089] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 1143.097868][T21077] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.4.3084: iget: checksum invalid [ 1143.132979][T21089] raw: 00fff00000000040 0000000000000000 dead000000000122 0000000000000000 [ 1143.227651][T21089] raw: 0000000000000000 0000000000000000 00000016ffffffff 0000000000000000 [ 1143.245376][T21077] faux_driver regulatory: loading /lib/firmware/updates/regulatory.db failed with error -74 [ 1143.275424][T21089] head: 00fff00000000040 0000000000000000 dead000000000122 0000000000000000 [ 1143.320886][T21089] head: 0000000000000000 0000000000000000 00000016ffffffff 0000000000000000 [ 1143.353371][T21089] head: 00fff00000000003 ffffea0001ff8001 00000000ffffffff 00000000ffffffff [ 1143.394357][T21089] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 1143.419050][T21077] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.4.3084: iget: checksum invalid [ 1143.457215][T21089] page dumped because: unmovable page [ 1143.539160][T21089] page_owner tracks the page as allocated [ 1143.545274][T21077] faux_driver regulatory: loading /lib/firmware/syzkaller/regulatory.db failed with error -74 [ 1143.575086][T21089] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x528c0(GFP_NOWAIT|__GFP_IO|__GFP_FS|__GFP_NORETRY|__GFP_COMP), pid 5487, tgid 5487 (dhcpcd), ts 62870407065, free_ts 31636449394 [ 1143.674088][T21089] post_alloc_hook+0x153/0x170 [ 1143.698920][T21077] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.4.3084: iget: checksum invalid [ 1143.714443][T21089] get_page_from_freelist+0x111d/0x3140 [ 1143.737837][T21089] __alloc_frozen_pages_noprof+0x27c/0x2ba0 [ 1143.743817][T21089] alloc_pages_mpol+0x1fb/0x550 [ 1143.777686][T21089] alloc_pages_noprof+0x131/0x390 [ 1143.797776][T21089] skb_page_frag_refill+0x365/0x5b0 [ 1143.827807][T21089] try_fill_recv+0x7f1/0x2950 [ 1143.842757][T21089] virtnet_open+0x5f2/0x960 [ 1143.847342][T21089] __dev_open+0x3ad/0x960 [ 1143.865171][T21077] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -74 [ 1143.878798][T21089] __dev_change_flags+0x558/0x6f0 [ 1143.892089][T21089] netif_change_flags+0x8d/0x160 [ 1143.910399][T21089] dev_change_flags+0xba/0x250 [ 1143.931242][T21089] devinet_ioctl+0x110b/0x1f10 [ 1143.936115][T21089] inet_ioctl+0x3aa/0x3f0 [ 1143.953085][T21077] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -74 [ 1143.962893][T21089] sock_do_ioctl+0x118/0x280 [ 1143.968503][T21089] sock_ioctl+0x599/0x6b0 [ 1143.972927][T21089] page last free pid 1 tgid 1 stack trace: [ 1143.987927][T21089] __free_frozen_pages+0x7e1/0x10d0 [ 1143.994114][T21077] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 1144.003274][T21089] free_contig_range+0xde/0x1d0 [ 1144.008524][T21089] destroy_args+0xa8/0x7a0 [ 1144.012990][T21089] debug_vm_pgtable+0x1b66/0x34c0 [ 1144.029809][T21089] do_one_initcall+0x11d/0x760 [ 1144.034656][T21089] kernel_init_freeable+0x6e5/0x7a0 [ 1144.058982][T21089] kernel_init+0x1f/0x1e0 [ 1144.063440][T21089] ret_from_fork+0x754/0xd80 [ 1144.078622][T21089] ret_from_fork_asm+0x1a/0x30 [ 1144.151338][T21093] page: refcount:22 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7fe00 [ 1144.213960][T21093] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1144.311808][T21093] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 1144.374646][T21093] raw: 00fff00000000040 0000000000000000 dead000000000122 0000000000000000 [ 1144.425322][T21093] raw: 0000000000000000 0000000000000000 00000016ffffffff 0000000000000000 [ 1144.491460][T21093] head: 00fff00000000040 0000000000000000 dead000000000122 0000000000000000 [ 1144.546753][T21093] head: 0000000000000000 0000000000000000 00000016ffffffff 0000000000000000 [ 1144.596977][T21093] head: 00fff00000000003 ffffea0001ff8001 00000000ffffffff 00000000ffffffff [ 1144.643857][T21093] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 1144.723000][T21093] page dumped because: unmovable page [ 1144.753534][T21093] page_owner tracks the page as allocated [ 1144.777039][T21093] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x528c0(GFP_NOWAIT|__GFP_IO|__GFP_FS|__GFP_NORETRY|__GFP_COMP), pid 5487, tgid 5487 (dhcpcd), ts 62870407065, free_ts 31636449394 [ 1144.878755][T21093] post_alloc_hook+0x153/0x170 [ 1144.914044][T21093] get_page_from_freelist+0x111d/0x3140 [ 1144.953257][T21093] __alloc_frozen_pages_noprof+0x27c/0x2ba0 [ 1144.994196][T21093] alloc_pages_mpol+0x1fb/0x550 [ 1145.025569][T21093] alloc_pages_noprof+0x131/0x390 [ 1145.055161][T21093] skb_page_frag_refill+0x365/0x5b0 [ 1145.075230][T21093] try_fill_recv+0x7f1/0x2950 [ 1145.097652][T21093] virtnet_open+0x5f2/0x960 [ 1145.117437][T21093] __dev_open+0x3ad/0x960 [ 1145.134412][T21093] __dev_change_flags+0x558/0x6f0 [ 1145.160280][T21093] netif_change_flags+0x8d/0x160 [ 1145.182914][T21093] dev_change_flags+0xba/0x250 [ 1145.204466][T21093] devinet_ioctl+0x110b/0x1f10 [ 1145.224018][T21093] inet_ioctl+0x3aa/0x3f0 [ 1145.247422][T21093] sock_do_ioctl+0x118/0x280 [ 1145.266949][T21093] sock_ioctl+0x599/0x6b0 [ 1145.288305][T21093] page last free pid 1 tgid 1 stack trace: [ 1145.314461][T21093] __free_frozen_pages+0x7e1/0x10d0 [ 1145.348534][T21093] free_contig_range+0xde/0x1d0 [ 1145.370486][T21093] destroy_args+0xa8/0x7a0 [ 1145.397672][T21093] debug_vm_pgtable+0x1b66/0x34c0 [ 1145.410298][T21093] do_one_initcall+0x11d/0x760 [ 1145.437654][T21093] kernel_init_freeable+0x6e5/0x7a0 [ 1145.457912][T21093] kernel_init+0x1f/0x1e0 [ 1145.480522][T21093] ret_from_fork+0x754/0xd80 [ 1145.507665][T21093] ret_from_fork_asm+0x1a/0x30 [ 1146.707296][T21170] netlink: 'syz.4.3101': attribute type 1 has an invalid length. [ 1146.740307][T21170] netlink: 314 bytes leftover after parsing attributes in process `syz.4.3101'. [ 1147.030937][T21146] Process accounting resumed [ 1149.579003][ T30] audit: type=1800 audit(4294967377.620:22): pid=21234 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.3115" name="SYSVffffffff" dev="tmpfs" ino=0 res=0 errno=0 [ 1149.743762][T21237] FAULT_INJECTION: forcing a failure. [ 1149.743762][T21237] name failslab, interval 1, probability 0, space 0, times 0 [ 1149.804411][T21237] CPU: 0 UID: 0 PID: 21237 Comm: syz.2.3116 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 1149.804456][T21237] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 1149.804468][T21237] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1149.804483][T21237] Call Trace: [ 1149.804491][T21237] [ 1149.804501][T21237] dump_stack_lvl+0x100/0x190 [ 1149.804542][T21237] should_fail_ex.cold+0x5/0xa [ 1149.804570][T21237] should_failslab+0xc2/0x120 [ 1149.804610][T21237] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1149.804644][T21237] ? security_inode_alloc+0x3b/0x2c0 [ 1149.804679][T21237] ? lockdep_init_map_type+0x5c/0x250 [ 1149.804714][T21237] security_inode_alloc+0x3b/0x2c0 [ 1149.804755][T21237] inode_init_always_gfp+0xced/0x1040 [ 1149.804799][T21237] alloc_inode+0x8e/0x250 [ 1149.804828][T21237] new_inode+0x22/0x1c0 [ 1149.804860][T21237] shmem_get_inode+0x212/0x1040 [ 1149.804893][T21237] ? __pfx_shmem_get_inode+0x10/0x10 [ 1149.804921][T21237] ? rcu_is_watching+0x12/0xc0 [ 1149.804968][T21237] ? percpu_counter_add_batch+0xb9/0x230 [ 1149.805013][T21237] __shmem_file_setup+0x3ac/0x490 [ 1149.805043][T21237] ? __pfx___shmem_file_setup+0x10/0x10 [ 1149.805078][T21237] ? vm_area_alloc+0x1f/0x160 [ 1149.805109][T21237] shmem_zero_setup+0x96/0x1b0 [ 1149.805146][T21237] __mmap_region+0x2198/0x29e0 [ 1149.805182][T21237] ? __pfx___mmap_region+0x10/0x10 [ 1149.805220][T21237] ? set_next_entity+0x11b/0x9c0 [ 1149.805259][T21237] ? __lock_acquire+0x4a5/0x2630 [ 1149.805286][T21237] ? update_cfs_rq_load_avg+0x51/0x550 [ 1149.805322][T21237] ? find_held_lock+0x2b/0x80 [ 1149.805359][T21237] ? finish_task_switch.isra.0+0x200/0xb80 [ 1149.805382][T21237] ? finish_task_switch.isra.0+0x200/0xb80 [ 1149.805417][T21237] ? trace_sched_exit_tp+0x13a/0x180 [ 1149.805444][T21237] ? __schedule+0x1000/0x60e0 [ 1149.805502][T21237] ? rcu_is_watching+0x12/0xc0 [ 1149.805536][T21237] ? cap_capable+0x107/0x460 [ 1149.805570][T21237] mmap_region+0x180/0x3e0 [ 1149.805608][T21237] do_mmap+0xc63/0x12f0 [ 1149.805636][T21237] ? __pfx_do_mmap+0x10/0x10 [ 1149.805659][T21237] ? __pfx_down_write_killable+0x10/0x10 [ 1149.805695][T21237] vm_mmap_pgoff+0x29e/0x470 [ 1149.805730][T21237] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 1149.805759][T21237] ? do_futex+0x192/0x350 [ 1149.805788][T21237] ? __pfx_do_futex+0x10/0x10 [ 1149.805823][T21237] ksys_mmap_pgoff+0xe1/0x650 [ 1149.805861][T21237] ? __x64_sys_futex+0x34f/0x4d0 [ 1149.805890][T21237] ? __x64_sys_futex+0x358/0x4d0 [ 1149.805919][T21237] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 1149.805958][T21237] ? xfd_validate_state+0x129/0x190 [ 1149.805996][T21237] __x64_sys_mmap+0x125/0x190 [ 1149.806033][T21237] do_syscall_64+0x106/0xf80 [ 1149.806057][T21237] ? clear_bhb_loop+0x40/0x90 [ 1149.806086][T21237] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1149.806110][T21237] RIP: 0033:0x7fb64a19c629 [ 1149.806131][T21237] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1149.806155][T21237] RSP: 002b:00007fb64afb6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1149.806178][T21237] RAX: ffffffffffffffda RBX: 00007fb64a415fa0 RCX: 00007fb64a19c629 [ 1149.806194][T21237] RDX: 00000000000000df RSI: 000000000000e983 RDI: 0000000000000000 [ 1149.806209][T21237] RBP: 00007fb64a232b39 R08: 0000000000000401 R09: 0000000000008000 [ 1149.806225][T21237] R10: 0000000000000eb1 R11: 0000000000000246 R12: 0000000000000000 [ 1149.806240][T21237] R13: 00007fb64a416038 R14: 00007fb64a415fa0 R15: 00007ffe687d32a8 [ 1149.806272][T21237] [ 1151.949836][T21256] mtrr: base(0x200000000) is not aligned on a size(0x4000000000) boundary [ 1152.055695][T21260] futex_wake_op: syz.4.3122 tries to shift op by -2048; fix this program [ 1152.101563][T21260] futex_wake_op: syz.4.3122 tries to shift op by -2048; fix this program [ 1152.119414][T21265] MTRR 3 not used [ 1152.320098][T21256] zswap: compressor not available [ 1154.014081][T21276] kexec: Could not allocate control_code_buffer [ 1157.301779][T21336] zswap: compressor not available [ 1158.188122][T21341] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input38 [ 1160.372705][T21343] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input39 [ 1162.734220][T21396] Invalid ELF header magic: != ELF [ 1167.107867][T21445] block2mtd: illegal erase size [ 1169.268244][T21473] FAULT_INJECTION: forcing a failure. [ 1169.268244][T21473] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1169.428891][T21473] CPU: 0 UID: 0 PID: 21473 Comm: syz.4.3164 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 1169.428936][T21473] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 1169.428948][T21473] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1169.428963][T21473] Call Trace: [ 1169.428971][T21473] [ 1169.428983][T21473] dump_stack_lvl+0x100/0x190 [ 1169.429031][T21473] should_fail_ex.cold+0x5/0xa [ 1169.429060][T21473] strncpy_from_user+0x3b/0x2d0 [ 1169.429099][T21473] do_getname+0x78/0x390 [ 1169.429130][T21473] user_path_at+0x26/0x60 [ 1169.429167][T21473] __x64_sys_mount+0x1fb/0x310 [ 1169.429194][T21473] ? __pfx___x64_sys_mount+0x10/0x10 [ 1169.429219][T21473] ? arch_syscall_is_vdso_sigreturn+0xb6/0x200 [ 1169.429251][T21473] ? syscall_user_dispatch+0x76/0x130 [ 1169.429288][T21473] do_syscall_64+0x106/0xf80 [ 1169.429314][T21473] ? clear_bhb_loop+0x40/0x90 [ 1169.429344][T21473] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1169.429369][T21473] RIP: 0033:0x7f366c39c629 [ 1169.429390][T21473] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1169.429414][T21473] RSP: 002b:00007f366d2e1028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1169.429437][T21473] RAX: ffffffffffffffda RBX: 00007f366c616180 RCX: 00007f366c39c629 [ 1169.429454][T21473] RDX: 0000200000000240 RSI: 0000000000000000 RDI: 0000000000000000 [ 1169.429468][T21473] RBP: 00007f366c432b39 R08: 0000000000000000 R09: 0000000000000000 [ 1169.429484][T21473] R10: 0000000000000007 R11: 0000000000000246 R12: 0000000000000000 [ 1169.429498][T21473] R13: 00007f366c616218 R14: 00007f366c616180 R15: 00007ffc9633a0f8 [ 1169.429529][T21473] [ 1169.614449][T19498] EXT4-fs (sda1): Delayed block allocation failed for inode 2028 at logical offset 9 with max blocks 4 with error 117 [ 1169.627435][T19498] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1169.627435][T19498] [ 1169.832816][T19498] EXT4-fs (sda1): Delayed block allocation failed for inode 2027 at logical offset 1373 with max blocks 11 with error 117 [ 1169.949057][T19498] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1169.949057][T19498] [ 1170.174738][T21477] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input40 [ 1174.680373][T21515] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3172'. [ 1175.815880][T21533] FAULT_INJECTION: forcing a failure. [ 1175.815880][T21533] name failslab, interval 1, probability 0, space 0, times 0 [ 1175.917878][T21509] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3170'. [ 1176.237678][T21533] CPU: 0 UID: 0 PID: 21533 Comm: syz.4.3174 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 1176.237723][T21533] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 1176.237738][T21533] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1176.237753][T21533] Call Trace: [ 1176.237761][T21533] [ 1176.237770][T21533] dump_stack_lvl+0x100/0x190 [ 1176.237810][T21533] should_fail_ex.cold+0x5/0xa [ 1176.237837][T21533] should_failslab+0xc2/0x120 [ 1176.237887][T21533] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1176.237938][T21533] ? ptlock_alloc+0x1f/0x70 [ 1176.237972][T21533] ptlock_alloc+0x1f/0x70 [ 1176.238000][T21533] pte_alloc_one+0x84/0x3e0 [ 1176.238025][T21533] do_huge_pmd_anonymous_page+0x835/0x1a60 [ 1176.238066][T21533] __handle_mm_fault+0x1e9e/0x2b60 [ 1176.238099][T21533] ? mt_find+0x45e/0x8e0 [ 1176.238129][T21533] ? __pfx___handle_mm_fault+0x10/0x10 [ 1176.238157][T21533] ? __pfx_mt_find+0x10/0x10 [ 1176.238206][T21533] handle_mm_fault+0x36d/0xa20 [ 1176.238241][T21533] __get_user_pages+0xf9c/0x34d0 [ 1176.238272][T21533] ? down_read_killable+0x30e/0x4c0 [ 1176.238302][T21533] ? __lock_acquire+0x4a5/0x2630 [ 1176.238330][T21533] ? __pfx___get_user_pages+0x10/0x10 [ 1176.238352][T21533] ? __lock_acquire+0x4a5/0x2630 [ 1176.238387][T21533] __gup_longterm_locked+0x87d/0x16f0 [ 1176.238419][T21533] ? __pfx___gup_longterm_locked+0x10/0x10 [ 1176.238453][T21533] ? try_get_folio+0x262/0x750 [ 1176.238489][T21533] ? pmd_write+0xd3/0x150 [ 1176.238525][T21533] ? sanity_check_pinned_pages+0x5f6/0x1250 [ 1176.238554][T21533] gup_fast_fallback+0x18c6/0x2460 [ 1176.238599][T21533] ? __pfx_gup_fast_fallback+0x10/0x10 [ 1176.238624][T21533] ? kasan_save_stack+0x30/0x50 [ 1176.238658][T21533] ? kasan_save_track+0x14/0x30 [ 1176.238690][T21533] ? __kasan_slab_alloc+0x89/0x90 [ 1176.238726][T21533] ? mempool_alloc_noprof+0x1b7/0x310 [ 1176.238747][T21533] ? bvec_alloc+0x197/0x210 [ 1176.238777][T21533] ? bio_alloc_bioset+0x59e/0x850 [ 1176.238808][T21533] ? blkdev_direct_IO+0xeae/0x1fb0 [ 1176.238832][T21533] ? blkdev_write_iter+0x703/0xd70 [ 1176.238856][T21533] ? vfs_write+0x6ac/0x1070 [ 1176.238889][T21533] ? ksys_write+0x12a/0x250 [ 1176.238921][T21533] ? do_syscall_64+0x106/0xf80 [ 1176.238945][T21533] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1176.238974][T21533] pin_user_pages_fast+0xa7/0xf0 [ 1176.238998][T21533] ? __pfx_pin_user_pages_fast+0x10/0x10 [ 1176.239025][T21533] ? iov_iter_advance+0xac/0x6d0 [ 1176.239063][T21533] iov_iter_extract_pages+0xa0d/0x1ef0 [ 1176.239110][T21533] ? __pfx_iov_iter_extract_pages+0x10/0x10 [ 1176.239154][T21533] ? iov_iter_revert+0x252/0x5b0 [ 1176.239187][T21533] ? bio_associate_blkg_from_css+0x394/0x13f0 [ 1176.239216][T21533] iov_iter_extract_bvecs+0x10e/0xf40 [ 1176.239264][T21533] ? __pfx_iov_iter_extract_bvecs+0x10/0x10 [ 1176.239303][T21533] ? bio_init+0x404/0x610 [ 1176.239335][T21533] bio_iov_iter_get_pages+0x26a/0x970 [ 1176.239379][T21533] blkdev_direct_IO+0x1302/0x1fb0 [ 1176.239418][T21533] ? __pfx_blkdev_direct_IO+0x10/0x10 [ 1176.239483][T21533] blkdev_write_iter+0x703/0xd70 [ 1176.239518][T21533] vfs_write+0x6ac/0x1070 [ 1176.239555][T21533] ? __pfx_blkdev_write_iter+0x10/0x10 [ 1176.239586][T21533] ? __pfx_vfs_write+0x10/0x10 [ 1176.239621][T21533] ? find_held_lock+0x2b/0x80 [ 1176.239677][T21533] ksys_write+0x12a/0x250 [ 1176.239713][T21533] ? __pfx_ksys_write+0x10/0x10 [ 1176.239758][T21533] do_syscall_64+0x106/0xf80 [ 1176.239783][T21533] ? clear_bhb_loop+0x40/0x90 [ 1176.239813][T21533] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1176.239838][T21533] RIP: 0033:0x7f366c39c629 [ 1176.239859][T21533] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1176.239882][T21533] RSP: 002b:00007f366d27e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1176.239905][T21533] RAX: ffffffffffffffda RBX: 00007f366c616450 RCX: 00007f366c39c629 [ 1176.239922][T21533] RDX: 000000100000a3d9 RSI: 00002000000000c0 RDI: 0000000000000004 [ 1176.239938][T21533] RBP: 00007f366c432b39 R08: 0000000000000000 R09: 0000000000000000 [ 1176.239953][T21533] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1176.239968][T21533] R13: 00007f366c6164e8 R14: 00007f366c616450 R15: 00007ffc9633a0f8 [ 1176.239999][T21533] [ 1177.698080][T21545] zswap: compressor not available [ 1177.878006][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.886327][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1178.191804][T21509] Process accounting paused [ 1178.657291][T21556] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3179'. [ 1182.058057][T21601] FAULT_INJECTION: forcing a failure. [ 1182.058057][T21601] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1182.189727][T21601] CPU: 0 UID: 8 PID: 21601 Comm: syz.4.3189 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 1182.189771][T21601] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 1182.189782][T21601] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1182.189797][T21601] Call Trace: [ 1182.189804][T21601] [ 1182.189813][T21601] dump_stack_lvl+0x100/0x190 [ 1182.189852][T21601] should_fail_ex.cold+0x5/0xa [ 1182.189888][T21601] get_futex_key+0x1d2/0x1620 [ 1182.189920][T21601] ? __pfx_get_futex_key+0x10/0x10 [ 1182.189946][T21601] ? kasan_save_stack+0x3f/0x50 [ 1182.189979][T21601] ? kasan_save_stack+0x30/0x50 [ 1182.190011][T21601] ? kasan_record_aux_stack+0xa7/0xc0 [ 1182.190058][T21601] ? __call_rcu_common.constprop.0+0xa5/0x9b0 [ 1182.190088][T21601] ? __put_cred+0x10c/0x180 [ 1182.190121][T21601] ? keyctl_session_to_parent+0x95a/0xae0 [ 1182.190154][T21601] ? __do_sys_keyctl+0x2b1/0x5a0 [ 1182.190185][T21601] ? do_syscall_64+0x106/0xf80 [ 1182.190211][T21601] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1182.190241][T21601] futex_wake+0xea/0x530 [ 1182.190279][T21601] ? __pfx_futex_wake+0x10/0x10 [ 1182.190326][T21601] do_futex+0x32b/0x350 [ 1182.190357][T21601] ? __pfx_do_futex+0x10/0x10 [ 1182.190395][T21601] __x64_sys_futex+0x34f/0x4d0 [ 1182.190429][T21601] ? __pfx___x64_sys_futex+0x10/0x10 [ 1182.190460][T21601] ? __put_cred+0x111/0x180 [ 1182.190495][T21601] ? keyctl_session_to_parent+0x39a/0xae0 [ 1182.190537][T21601] do_syscall_64+0x106/0xf80 [ 1182.190562][T21601] ? clear_bhb_loop+0x40/0x90 [ 1182.190592][T21601] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1182.190617][T21601] RIP: 0033:0x7f366c39c629 [ 1182.190637][T21601] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1182.190660][T21601] RSP: 002b:00007f366d3230e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1182.190684][T21601] RAX: ffffffffffffffda RBX: 00007f366c615fa8 RCX: 00007f366c39c629 [ 1182.190700][T21601] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f366c615fac [ 1182.190716][T21601] RBP: 00007f366c615fa0 R08: 0000000000000000 R09: 0000000000000000 [ 1182.190730][T21601] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 1182.190746][T21601] R13: 00007f366c616038 R14: 00007ffc9633a010 R15: 00007ffc9633a0f8 [ 1182.190776][T21601] [ 1183.221366][T21612] Invalid ELF header magic: != ELF [ 1184.250070][T21603] Invalid ELF header magic: != ELF [ 1184.402233][T21624] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.3.3194: iget: checksum invalid [ 1184.483897][T21624] faux_driver regulatory: loading /lib/firmware/updates/syzkaller/regulatory.db failed with error -74 [ 1184.615948][T21624] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.3.3194: iget: checksum invalid [ 1184.706354][T21624] faux_driver regulatory: loading /lib/firmware/updates/regulatory.db failed with error -74 [ 1184.760446][T21624] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.3.3194: iget: checksum invalid [ 1184.872918][T21624] faux_driver regulatory: loading /lib/firmware/syzkaller/regulatory.db failed with error -74 [ 1184.927875][T21624] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.3.3194: iget: checksum invalid [ 1185.004194][T21624] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -74 [ 1185.068253][T21624] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -74 [ 1185.139564][T21624] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 1185.950239][T21636] FAULT_INJECTION: forcing a failure. [ 1185.950239][T21636] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1186.032096][T21636] CPU: 0 UID: 0 PID: 21636 Comm: syz.4.3198 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 1186.032139][T21636] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 1186.032151][T21636] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1186.032165][T21636] Call Trace: [ 1186.032173][T21636] [ 1186.032182][T21636] dump_stack_lvl+0x100/0x190 [ 1186.032221][T21636] should_fail_ex.cold+0x5/0xa [ 1186.032248][T21636] get_futex_key+0x1d2/0x1620 [ 1186.032278][T21636] ? __pfx_get_futex_key+0x10/0x10 [ 1186.032306][T21636] ? find_held_lock+0x2b/0x80 [ 1186.032342][T21636] ? debug_objects_fill_pool+0x562/0x670 [ 1186.032372][T21636] ? debug_objects_fill_pool+0x562/0x670 [ 1186.032407][T21636] futex_wait_setup+0x81/0x500 [ 1186.032465][T21636] __futex_wait+0x19f/0x300 [ 1186.032501][T21636] ? __pfx___futex_wait+0x10/0x10 [ 1186.032539][T21636] ? __pfx_futex_wake_mark+0x10/0x10 [ 1186.032583][T21636] ? __hrtimer_setup+0x178/0x280 [ 1186.032615][T21636] ? ktime_add_safe+0x60/0x70 [ 1186.032646][T21636] futex_wait+0xed/0x380 [ 1186.032679][T21636] ? __pfx_futex_wait+0x10/0x10 [ 1186.032710][T21636] ? __lock_acquire+0x4a5/0x2630 [ 1186.032739][T21636] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 1186.032778][T21636] do_futex+0x1ef/0x350 [ 1186.032807][T21636] ? __pfx_do_futex+0x10/0x10 [ 1186.032834][T21636] ? ktime_get+0x200/0x300 [ 1186.032854][T21636] ? lockdep_hardirqs_on+0x78/0x100 [ 1186.032879][T21636] ? read_tsc+0x9/0x20 [ 1186.032906][T21636] __x64_sys_futex+0x34f/0x4d0 [ 1186.032938][T21636] ? __pfx___x64_sys_futex+0x10/0x10 [ 1186.032977][T21636] do_syscall_64+0x106/0xf80 [ 1186.033001][T21636] ? clear_bhb_loop+0x40/0x90 [ 1186.033028][T21636] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1186.033051][T21636] RIP: 0033:0x7f366c39c629 [ 1186.033070][T21636] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1186.033098][T21636] RSP: 002b:00007ffc9633a258 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1186.033120][T21636] RAX: ffffffffffffffda RBX: 00000000001216f2 RCX: 00007f366c39c629 [ 1186.033155][T21636] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f366c615fac [ 1186.033169][T21636] RBP: 0000000000000032 R08: 0000000000000000 R09: 0000000000000000 [ 1186.033183][T21636] R10: 00007ffc9633a360 R11: 0000000000000246 R12: 00007ffc9633a380 [ 1186.033198][T21636] R13: 00007f366c615fac R14: 0000000000121724 R15: 00007ffc9633a360 [ 1186.033228][T21636] [ 1187.118239][T21644] zswap: compressor not available [ 1190.200903][T21683] usb usb36: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1190.278817][T21683] vhci_hcd vhci_hcd.1: default hub control req: 0000 v0000 i0000 l0 [ 1191.173605][T21682] FAULT_INJECTION: forcing a failure. [ 1191.173605][T21682] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1191.366887][T21682] CPU: 0 UID: 0 PID: 21682 Comm: syz.2.3206 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 1191.366931][T21682] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 1191.366942][T21682] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1191.366957][T21682] Call Trace: [ 1191.366965][T21682] [ 1191.366975][T21682] dump_stack_lvl+0x100/0x190 [ 1191.367015][T21682] should_fail_ex.cold+0x5/0xa [ 1191.367042][T21682] get_futex_key+0x1d2/0x1620 [ 1191.367074][T21682] ? __pfx_get_futex_key+0x10/0x10 [ 1191.367107][T21682] ? wakeup_preempt_fair+0xab7/0xd40 [ 1191.367154][T21682] futex_wait_setup+0x81/0x500 [ 1191.367197][T21682] __futex_wait+0x19f/0x300 [ 1191.367235][T21682] ? __pfx___futex_wait+0x10/0x10 [ 1191.367270][T21682] ? find_held_lock+0x2b/0x80 [ 1191.367311][T21682] ? __pfx_futex_wake_mark+0x10/0x10 [ 1191.367350][T21682] ? futex_hash+0x2c5/0x380 [ 1191.367385][T21682] futex_wait+0xed/0x380 [ 1191.367420][T21682] ? __pfx_futex_wait+0x10/0x10 [ 1191.367453][T21682] ? madvise_unlock+0x172/0x220 [ 1191.367484][T21682] ? madvise_unlock+0xa9/0x220 [ 1191.367512][T21682] do_futex+0x1ef/0x350 [ 1191.367542][T21682] ? __pfx_do_futex+0x10/0x10 [ 1191.367579][T21682] __x64_sys_futex+0x34f/0x4d0 [ 1191.367613][T21682] ? __pfx___x64_sys_futex+0x10/0x10 [ 1191.367645][T21682] ? arch_syscall_is_vdso_sigreturn+0xb6/0x200 [ 1191.367680][T21682] ? syscall_user_dispatch+0x76/0x130 [ 1191.367716][T21682] do_syscall_64+0x106/0xf80 [ 1191.367741][T21682] ? clear_bhb_loop+0x40/0x90 [ 1191.367771][T21682] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1191.367795][T21682] RIP: 0033:0x7fb64a19c629 [ 1191.367815][T21682] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1191.367839][T21682] RSP: 002b:00007fb647ff40e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1191.367861][T21682] RAX: ffffffffffffffda RBX: 00007fb64a416278 RCX: 00007fb64a19c629 [ 1191.367877][T21682] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fb64a416278 [ 1191.367892][T21682] RBP: 00007fb64a416270 R08: 0000000000000000 R09: 0000000000000000 [ 1191.367907][T21682] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1191.367921][T21682] R13: 00007fb64a416308 R14: 00007ffe687d31c0 R15: 00007ffe687d32a8 [ 1191.367951][T21682] [ 1193.693366][T21718] FAULT_INJECTION: forcing a failure. [ 1193.693366][T21718] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1193.783439][T21718] CPU: 0 UID: 0 PID: 21718 Comm: syz.4.3214 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 1193.783482][T21718] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 1193.783494][T21718] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1193.783509][T21718] Call Trace: [ 1193.783517][T21718] [ 1193.783526][T21718] dump_stack_lvl+0x100/0x190 [ 1193.783566][T21718] should_fail_ex.cold+0x5/0xa [ 1193.783589][T21718] ? prepare_alloc_pages+0x16d/0x5f0 [ 1193.783615][T21718] should_fail_alloc_page+0xeb/0x140 [ 1193.783656][T21718] prepare_alloc_pages+0x1f0/0x5f0 [ 1193.783685][T21718] __alloc_frozen_pages_noprof+0x19a/0x2ba0 [ 1193.783726][T21718] ? __lock_acquire+0x4a5/0x2630 [ 1193.783758][T21718] ? __alloc_frozen_pages_noprof+0x2b1/0x2ba0 [ 1193.783794][T21718] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1193.783843][T21718] ? page_table_check_set+0x4a9/0xa10 [ 1193.783883][T21718] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1193.783924][T21718] ? policy_nodemask+0xed/0x4f0 [ 1193.783972][T21718] alloc_pages_mpol+0x1fb/0x550 [ 1193.784013][T21718] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1193.784050][T21718] ? find_held_lock+0x2b/0x80 [ 1193.784089][T21718] ? filemap_map_pages+0xdf2/0x2020 [ 1193.784128][T21718] folio_alloc_mpol_noprof+0x36/0x340 [ 1193.784156][T21718] vma_alloc_folio_noprof+0xed/0x1d0 [ 1193.784183][T21718] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 1193.784209][T21718] ? rcu_read_unlock+0x2d/0xb0 [ 1193.784239][T21718] ? rcu_read_unlock+0x2d/0xb0 [ 1193.784289][T21718] ? __lock_acquire+0x4a5/0x2630 [ 1193.784322][T21718] do_wp_page+0x1eef/0x4f00 [ 1193.784356][T21718] ? __pfx_do_wp_page+0x10/0x10 [ 1193.784383][T21718] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1193.784431][T21718] __handle_mm_fault+0x1ac8/0x2b60 [ 1193.784467][T21718] ? reacquire_held_locks+0xce/0x1e0 [ 1193.784498][T21718] ? __pfx___handle_mm_fault+0x10/0x10 [ 1193.784534][T21718] ? lock_vma_under_rcu+0x17c/0x590 [ 1193.784581][T21718] handle_mm_fault+0x36d/0xa20 [ 1193.784617][T21718] do_user_addr_fault+0x5a3/0x12f0 [ 1193.784677][T21718] exc_page_fault+0x6f/0xd0 [ 1193.784703][T21718] asm_exc_page_fault+0x26/0x30 [ 1193.784727][T21718] RIP: 0033:0x7f366c35c485 [ 1193.784746][T21718] Code: 00 00 00 66 90 8b 57 18 64 8b 04 25 d0 02 00 00 39 c2 0f 84 1d 01 00 00 41 54 55 53 83 7f 30 02 48 89 fb 74 28 b8 08 00 00 00 0f c1 03 83 c0 08 85 c0 0f 88 0c 01 00 00 a8 01 0f 85 84 00 00 [ 1193.784771][T21718] RSP: 002b:00007f366d321de0 EFLAGS: 00010293 [ 1193.784790][T21718] RAX: 0000000000000008 RBX: 00007f366d147e20 RCX: 0000000000000000 [ 1193.784805][T21718] RDX: 0000000000000000 RSI: 00007f366c44f931 RDI: 00007f366d147e20 [ 1193.784820][T21718] RBP: ffffffffffffffff R08: 0000000000000000 R09: 0000000000000005 [ 1193.784835][T21718] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f366c44f649 [ 1193.784849][T21718] R13: ffffffffffffffe8 R14: 0000000000000016 R15: 00007f366c44f931 [ 1193.784880][T21718] [ 1194.367687][T21718] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 1195.678226][T21726] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1195.725688][T21726] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1195.793760][T21726] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1195.853383][T21726] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1195.916986][T21726] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1195.976094][T21726] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1197.317215][T15815] Bluetooth: hci4: command 0x0c1a tx timeout [ 1197.782153][T15815] Bluetooth: hci0: command 0x0c1a tx timeout [ 1197.864688][T15815] Bluetooth: hci3: command 0x0c1a tx timeout [ 1197.870756][T15815] Bluetooth: hci1: command 0x0c1a tx timeout [ 1197.942131][T15815] Bluetooth: hci2: command 0x0419 tx timeout [ 1198.005216][T21750] futex_wake_op: syz.4.3220 tries to shift op by -2048; fix this program [ 1199.514796][T21778] zero sized request [ 1200.023181][T15815] Bluetooth: hci2: command 0x0419 tx timeout [ 1200.448839][T19498] EXT4-fs (sda1): Delayed block allocation failed for inode 2027 at logical offset 1382 with max blocks 2 with error 117 [ 1200.593494][T19498] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1200.593494][T19498] [ 1201.193958][T21804] vhci_hcd vhci_hcd.1: invalid port number 37 [ 1201.282401][T21804] vhci_hcd vhci_hcd.1: default hub control req: 600d v002b i0025 l1 [ 1202.569530][T21818] netlink: 326 bytes leftover after parsing attributes in process `syz.4.3235'. [ 1203.140721][T21818] zswap: compressor not available [ 1203.899169][T21825] netlink: 4128 bytes leftover after parsing attributes in process `syz.2.3236'. [ 1207.872467][T21890] FAULT_INJECTION: forcing a failure. [ 1207.872467][T21890] name failslab, interval 1, probability 0, space 0, times 0 [ 1208.088596][T21890] CPU: 0 UID: 0 PID: 21890 Comm: syz.3.3252 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 1208.088638][T21890] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 1208.088650][T21890] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1208.088664][T21890] Call Trace: [ 1208.088672][T21890] [ 1208.088682][T21890] dump_stack_lvl+0x100/0x190 [ 1208.088738][T21890] should_fail_ex.cold+0x5/0xa [ 1208.088766][T21890] should_failslab+0xc2/0x120 [ 1208.088805][T21890] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1208.088837][T21890] ? alloc_empty_file+0x55/0x1c0 [ 1208.088864][T21890] ? __pfx_stack_trace_save+0x10/0x10 [ 1208.088906][T21890] alloc_empty_file+0x55/0x1c0 [ 1208.088933][T21890] path_openat+0xe8/0x31a0 [ 1208.088969][T21890] ? kasan_save_stack+0x3f/0x50 [ 1208.089002][T21890] ? kasan_save_stack+0x30/0x50 [ 1208.089034][T21890] ? kasan_save_track+0x14/0x30 [ 1208.089066][T21890] ? __kasan_slab_alloc+0x89/0x90 [ 1208.089100][T21890] ? kmem_cache_alloc_noprof+0x241/0x6e0 [ 1208.089131][T21890] ? do_getname+0x35/0x390 [ 1208.089154][T21890] ? do_sys_openat2+0xc5/0x1e0 [ 1208.089182][T21890] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1208.089210][T21890] ? __pfx_path_openat+0x10/0x10 [ 1208.089258][T21890] do_file_open+0x20e/0x430 [ 1208.089297][T21890] ? __pfx_do_file_open+0x10/0x10 [ 1208.089354][T21890] ? alloc_fd+0x476/0x790 [ 1208.089392][T21890] ? do_getname+0x191/0x390 [ 1208.089421][T21890] do_sys_openat2+0x10d/0x1e0 [ 1208.089449][T21890] ? __pfx_do_sys_openat2+0x10/0x10 [ 1208.089487][T21890] __x64_sys_openat+0x12d/0x210 [ 1208.089516][T21890] ? __pfx___x64_sys_openat+0x10/0x10 [ 1208.089554][T21890] do_syscall_64+0x106/0xf80 [ 1208.089579][T21890] ? clear_bhb_loop+0x40/0x90 [ 1208.089608][T21890] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1208.089632][T21890] RIP: 0033:0x7f38d459c629 [ 1208.089651][T21890] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1208.089678][T21890] RSP: 002b:00007f38d5543028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1208.089700][T21890] RAX: ffffffffffffffda RBX: 00007f38d4815fa0 RCX: 00007f38d459c629 [ 1208.089716][T21890] RDX: 0000000000000000 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 1208.089737][T21890] RBP: 00007f38d4632b39 R08: 0000000000000000 R09: 0000000000000000 [ 1208.089751][T21890] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1208.089765][T21890] R13: 00007f38d4816038 R14: 00007f38d4815fa0 R15: 00007ffd359d4f38 [ 1208.089795][T21890] [ 1209.008783][T17167] EXT4-fs (sda1): Delayed block allocation failed for inode 2027 at logical offset 1366 with max blocks 18 with error 117 [ 1209.049442][T17167] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1209.049442][T17167] [ 1210.780182][T21930] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3254'. [ 1211.368186][T21934] sd 0:0:1:0: PR command failed: 1026 [ 1211.409226][T21934] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 1211.416004][T21934] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 1211.880440][T21939] FAULT_INJECTION: forcing a failure. [ 1211.880440][T21939] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1212.029492][T21939] CPU: 0 UID: 0 PID: 21939 Comm: syz.4.3258 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 1212.029536][T21939] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 1212.029548][T21939] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1212.029563][T21939] Call Trace: [ 1212.029571][T21939] [ 1212.029581][T21939] dump_stack_lvl+0x100/0x190 [ 1212.029622][T21939] should_fail_ex.cold+0x5/0xa [ 1212.029649][T21939] _copy_from_user+0x2e/0xd0 [ 1212.029688][T21939] do_sys_poll+0x345/0xeb0 [ 1212.029735][T21939] ? finish_task_switch.isra.0+0x200/0xb80 [ 1212.029762][T21939] ? rcu_is_watching+0x12/0xc0 [ 1212.029798][T21939] ? lockdep_hardirqs_on+0x78/0x100 [ 1212.029824][T21939] ? finish_task_switch.isra.0+0x205/0xb80 [ 1212.029849][T21939] ? __pfx_do_sys_poll+0x10/0x10 [ 1212.029882][T21939] ? trace_sched_exit_tp+0x13a/0x180 [ 1212.029908][T21939] ? __schedule+0x1000/0x60e0 [ 1212.029953][T21939] ? preempt_schedule_thunk+0x16/0x30 [ 1212.030029][T21939] ? find_held_lock+0x2b/0x80 [ 1212.030065][T21939] ? timespec64_add_safe+0x192/0x220 [ 1212.030092][T21939] ? __pfx_timespec64_add_safe+0x10/0x10 [ 1212.030117][T21939] ? set_user_sigmask+0x1e1/0x270 [ 1212.030154][T21939] ? __pfx_set_user_sigmask+0x10/0x10 [ 1212.030191][T21939] ? read_tsc+0x9/0x20 [ 1212.030215][T21939] ? ktime_get_ts64+0x256/0x3f0 [ 1212.030243][T21939] __x64_sys_ppoll+0x2b5/0x350 [ 1212.030282][T21939] ? __pfx___x64_sys_ppoll+0x10/0x10 [ 1212.030336][T21939] do_syscall_64+0x106/0xf80 [ 1212.030361][T21939] ? clear_bhb_loop+0x40/0x90 [ 1212.030390][T21939] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1212.030414][T21939] RIP: 0033:0x7f366c39c629 [ 1212.030434][T21939] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1212.030458][T21939] RSP: 002b:00007f366d323028 EFLAGS: 00000246 ORIG_RAX: 000000000000010f [ 1212.030481][T21939] RAX: ffffffffffffffda RBX: 00007f366c615fa0 RCX: 00007f366c39c629 [ 1212.030499][T21939] RDX: 0000200000003640 RSI: 00000000000000d6 RDI: 0000200000003600 [ 1212.030515][T21939] RBP: 00007f366c432b39 R08: 0000000000000008 R09: 0000000000000000 [ 1212.030529][T21939] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1212.030563][T21939] R13: 00007f366c616038 R14: 00007f366c615fa0 R15: 00007ffc9633a0f8 [ 1212.030593][T21939] [ 1213.948994][T15815] Bluetooth: hci2: unexpected event 0x1c length: 725 > 5 [ 1214.038775][T21964] openvswitch: netlink: Multiple metadata blocks provided [ 1216.561158][T22001] FAULT_INJECTION: forcing a failure. [ 1216.561158][T22001] name failslab, interval 1, probability 0, space 0, times 0 [ 1216.724772][T22001] CPU: 0 UID: 0 PID: 22001 Comm: syz.3.3271 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 1216.724815][T22001] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 1216.724827][T22001] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1216.724842][T22001] Call Trace: [ 1216.724850][T22001] [ 1216.724865][T22001] dump_stack_lvl+0x100/0x190 [ 1216.724904][T22001] should_fail_ex.cold+0x5/0xa [ 1216.724931][T22001] ? lsm_blob_alloc+0x68/0x90 [ 1216.724955][T22001] should_failslab+0xc2/0x120 [ 1216.724994][T22001] __kmalloc_noprof+0xe0/0x850 [ 1216.725027][T22001] ? trace_kmem_cache_alloc+0xf3/0x120 [ 1216.725054][T22001] lsm_blob_alloc+0x68/0x90 [ 1216.725080][T22001] security_sk_alloc+0x2d/0x290 [ 1216.725112][T22001] sk_prot_alloc+0x1d1/0x2a0 [ 1216.725145][T22001] sk_alloc+0x36/0xe80 [ 1216.725174][T22001] unix_create1+0xa6/0x700 [ 1216.725224][T22001] unix_create+0x145/0x270 [ 1216.725255][T22001] __sock_create+0x339/0x860 [ 1216.725295][T22001] __sys_socketpair+0x261/0x5b0 [ 1216.725334][T22001] ? __pfx___sys_socketpair+0x10/0x10 [ 1216.725372][T22001] ? xfd_validate_state+0x129/0x190 [ 1216.725413][T22001] __x64_sys_socketpair+0x96/0x100 [ 1216.725449][T22001] ? lockdep_hardirqs_on+0x78/0x100 [ 1216.725476][T22001] do_syscall_64+0x106/0xf80 [ 1216.725501][T22001] ? clear_bhb_loop+0x40/0x90 [ 1216.725531][T22001] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1216.725556][T22001] RIP: 0033:0x7f38d459c629 [ 1216.725576][T22001] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1216.725599][T22001] RSP: 002b:00007f38d5522028 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 1216.725623][T22001] RAX: ffffffffffffffda RBX: 00007f38d4816090 RCX: 00007f38d459c629 [ 1216.725639][T22001] RDX: 8000000000000000 RSI: 0000000000000002 RDI: 0000000000000001 [ 1216.725654][T22001] RBP: 00007f38d4632b39 R08: 0000000000000000 R09: 0000000000000000 [ 1216.725670][T22001] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1216.725684][T22001] R13: 00007f38d4816128 R14: 00007f38d4816090 R15: 00007ffd359d4f38 [ 1216.725715][T22001] [ 1217.379593][T16942] Process accounting resumed [ 1217.681853][T22006] FAULT_INJECTION: forcing a failure. [ 1217.681853][T22006] name failslab, interval 1, probability 0, space 0, times 0 [ 1217.759623][T22006] CPU: 0 UID: 0 PID: 22006 Comm: syz.3.3273 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 1217.759666][T22006] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 1217.759678][T22006] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1217.759692][T22006] Call Trace: [ 1217.759700][T22006] [ 1217.759709][T22006] dump_stack_lvl+0x100/0x190 [ 1217.759748][T22006] should_fail_ex.cold+0x5/0xa [ 1217.759775][T22006] should_failslab+0xc2/0x120 [ 1217.759824][T22006] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1217.759856][T22006] ? sp_alloc+0x27/0x160 [ 1217.759887][T22006] sp_alloc+0x27/0x160 [ 1217.759913][T22006] mpol_set_shared_policy+0xa5/0x8a0 [ 1217.759945][T22006] ? __pfx_shmem_set_policy+0x10/0x10 [ 1217.759985][T22006] mbind_range+0x339/0x550 [ 1217.760014][T22006] do_mbind+0x7de/0xfd0 [ 1217.760046][T22006] ? __might_fault+0xc5/0x140 [ 1217.760077][T22006] ? __pfx_do_mbind+0x10/0x10 [ 1217.760109][T22006] ? _copy_from_user+0x59/0xd0 [ 1217.760152][T22006] ? __pfx_get_nodes+0x10/0x10 [ 1217.760194][T22006] kernel_mbind+0x1b7/0x200 [ 1217.760223][T22006] ? __pfx_kernel_mbind+0x10/0x10 [ 1217.760257][T22006] do_syscall_64+0x106/0xf80 [ 1217.760281][T22006] ? clear_bhb_loop+0x40/0x90 [ 1217.760310][T22006] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1217.760334][T22006] RIP: 0033:0x7f38d459c629 [ 1217.760353][T22006] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1217.760382][T22006] RSP: 002b:00007f38d5543028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed [ 1217.760405][T22006] RAX: ffffffffffffffda RBX: 00007f38d4815fa0 RCX: 00007f38d459c629 [ 1217.760421][T22006] RDX: 0000000000008003 RSI: 0000000000800605 RDI: 0000000000000000 [ 1217.760435][T22006] RBP: 00007f38d4632b39 R08: 0000000000000003 R09: 0000000000000003 [ 1217.760450][T22006] R10: 0000200000000100 R11: 0000000000000246 R12: 0000000000000000 [ 1217.760464][T22006] R13: 00007f38d4816038 R14: 00007f38d4815fa0 R15: 00007ffd359d4f38 [ 1217.760495][T22006] [ 1218.374426][T20474] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1218.385282][T20474] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1218.492555][T16060] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1218.641463][T16060] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1218.694016][T16060] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1220.442361][T22012] chnl_net:caif_netlink_parms(): no params data found [ 1220.840940][T15815] Bluetooth: hci5: command tx timeout [ 1221.532758][T20467] EXT4-fs (sda1): Delayed block allocation failed for inode 2027 at logical offset 1366 with max blocks 1 with error 117 [ 1221.607878][T20467] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1221.607878][T20467] [ 1221.814854][T22012] bridge0: port 1(bridge_slave_0) entered blocking state [ 1221.875322][T22012] bridge0: port 1(bridge_slave_0) entered disabled state [ 1221.882695][T22012] bridge_slave_0: entered allmulticast mode [ 1221.962905][T22012] bridge_slave_0: entered promiscuous mode [ 1222.165974][T22012] bridge0: port 2(bridge_slave_1) entered blocking state [ 1222.173125][T22012] bridge0: port 2(bridge_slave_1) entered disabled state [ 1222.243237][T22012] bridge_slave_1: entered allmulticast mode [ 1222.290155][T22012] bridge_slave_1: entered promiscuous mode [ 1222.666395][T22057] Invalid ELF header magic: != ELF [ 1222.826835][T22012] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1222.855795][T22012] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1222.914715][T15815] Bluetooth: hci5: command tx timeout [ 1223.338860][T22012] team0: Port device team_slave_0 added [ 1223.416939][T22012] team0: Port device team_slave_1 added [ 1223.731927][T22012] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1223.793734][T22012] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1223.932566][T22012] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1223.963349][T19448] NFSD: Failed to start, no listeners configured. [ 1224.024750][T22012] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1224.060580][T22012] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1224.176094][T22012] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1224.655046][T22012] hsr_slave_0: entered promiscuous mode [ 1224.711596][T22012] hsr_slave_1: entered promiscuous mode [ 1224.760031][T22012] debugfs: 'hsr0' already exists in 'hsr' [ 1224.795551][T22012] Cannot create hsr debugfs directory [ 1224.957260][T22085] forcing mempool usage for bio_alloc_bioset+0x392/0x850 [ 1224.996569][T15815] Bluetooth: hci5: command tx timeout [ 1226.039235][T22098] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3287'. [ 1226.579659][T22012] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1226.761273][T22012] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1226.840756][T22012] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1227.078561][T15815] Bluetooth: hci5: command tx timeout [ 1227.160260][T22012] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1228.208769][T22012] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1228.354093][T22012] 8021q: adding VLAN 0 to HW filter on device team0 [ 1228.454105][T20467] bridge0: port 1(bridge_slave_0) entered blocking state [ 1228.461311][T20467] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1228.566849][T20467] bridge0: port 2(bridge_slave_1) entered blocking state [ 1228.574070][T20467] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1228.787057][T22012] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1228.896780][T22012] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1229.927237][T22012] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1230.362154][T15815] Bluetooth: hci6: Opcode 0x0c03 failed: -110 [ 1231.669055][T22012] veth0_vlan: entered promiscuous mode [ 1231.751054][T22012] veth1_vlan: entered promiscuous mode [ 1231.904859][T22012] veth0_macvtap: entered promiscuous mode [ 1232.012126][T22012] veth1_macvtap: entered promiscuous mode [ 1232.160398][T22012] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1232.227682][T22158] snd_aloop snd_aloop.0: control 772:1:8:1՘:0 is already present [ 1232.271880][T22012] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1232.471432][T17171] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1232.517448][T17171] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1232.606488][T17171] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1232.762141][T17171] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1233.134006][T19499] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1233.199822][T19499] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1233.388462][T20467] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1233.424758][T20467] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1234.541240][T22179] random: crng reseeded on system resumption [ 1234.569867][T22181] netlink: 346 bytes leftover after parsing attributes in process `syz.5.3300'. [ 1235.631294][T15815] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 1235.638814][T15815] Bluetooth: hci1: Invalid handle: 0x3a4a > 0x0eff [ 1237.605698][T22228] program syz.4.3308 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1239.166280][T22244] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3313'. [ 1239.331216][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 1239.338515][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1240.187841][T22263] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1242.066230][T22290] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3321'. [ 1242.147178][T22290] bridge0: port 2(bridge_slave_1) entered disabled state [ 1242.277426][T22290] bridge_slave_1 (unregistering): left allmulticast mode [ 1242.304420][T22290] bridge_slave_1 (unregistering): left promiscuous mode [ 1242.342670][T22290] bridge0: port 2(bridge_slave_1) entered disabled state [ 1249.120246][T22372] vhci_hcd vhci_hcd.1: invalid port number 37 [ 1249.126472][T22372] vhci_hcd vhci_hcd.1: default hub control req: 600d v002b i0025 l1 [ 1249.823758][T22378] FAULT_INJECTION: forcing a failure. [ 1249.823758][T22378] name failslab, interval 1, probability 0, space 0, times 0 [ 1249.892735][T22378] CPU: 0 UID: 0 PID: 22378 Comm: syz.4.3341 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 1249.892778][T22378] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 1249.892789][T22378] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1249.892803][T22378] Call Trace: [ 1249.892811][T22378] [ 1249.892821][T22378] dump_stack_lvl+0x100/0x190 [ 1249.892861][T22378] should_fail_ex.cold+0x5/0xa [ 1249.892887][T22378] should_failslab+0xc2/0x120 [ 1249.892926][T22378] __kmalloc_cache_noprof+0x7a/0x6f0 [ 1249.892954][T22378] ? acpi_ds_create_walk_state+0x95/0x300 [ 1249.892997][T22378] acpi_ds_create_walk_state+0x95/0x300 [ 1249.893044][T22378] acpi_ps_execute_method+0x2c1/0xe90 [ 1249.893089][T22378] acpi_ns_evaluate+0x640/0x1670 [ 1249.893120][T22378] acpi_evaluate_object+0x420/0xe00 [ 1249.893151][T22378] ? kasan_save_stack+0x30/0x50 [ 1249.893184][T22378] ? kasan_save_track+0x14/0x30 [ 1249.893222][T22378] ? __pfx_acpi_evaluate_object+0x10/0x10 [ 1249.893263][T22378] acpi_evaluate_integer+0xdf/0x220 [ 1249.893291][T22378] ? __pfx_acpi_evaluate_integer+0x10/0x10 [ 1249.893331][T22378] ? __pfx_status_show+0x10/0x10 [ 1249.893362][T22378] status_show+0xa0/0x120 [ 1249.893393][T22378] ? __pfx_status_show+0x10/0x10 [ 1249.893432][T22378] dev_attr_show+0x52/0xa0 [ 1249.893469][T22378] ? __pfx_dev_attr_show+0x10/0x10 [ 1249.893504][T22378] sysfs_kf_seq_show+0x217/0x3a0 [ 1249.893537][T22378] seq_read_iter+0x32f/0x1270 [ 1249.893584][T22378] kernfs_fop_read_iter+0x46c/0x610 [ 1249.893608][T22378] ? rw_verify_area+0xce/0x6d0 [ 1249.893639][T22378] ? __pfx_kernfs_fop_read_iter+0x10/0x10 [ 1249.893665][T22378] vfs_read+0x825/0xb30 [ 1249.893707][T22378] ? __pfx_vfs_read+0x10/0x10 [ 1249.893772][T22378] ksys_read+0x12a/0x250 [ 1249.893803][T22378] ? __pfx_ksys_read+0x10/0x10 [ 1249.893844][T22378] do_syscall_64+0x106/0xf80 [ 1249.893868][T22378] ? clear_bhb_loop+0x40/0x90 [ 1249.893895][T22378] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1249.893918][T22378] RIP: 0033:0x7f366c39c629 [ 1249.893936][T22378] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1249.893959][T22378] RSP: 002b:00007f366d323028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1249.893980][T22378] RAX: ffffffffffffffda RBX: 00007f366c615fa0 RCX: 00007f366c39c629 [ 1249.893995][T22378] RDX: 000000000000007f RSI: 0000200000000240 RDI: 0000000000000005 [ 1249.894010][T22378] RBP: 00007f366c432b39 R08: 0000000000000000 R09: 0000000000000000 [ 1249.894029][T22378] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1249.894043][T22378] R13: 00007f366c616038 R14: 00007f366c615fa0 R15: 00007ffc9633a0f8 [ 1249.894072][T22378] [ 1254.725716][T22419] nfs: Unknown parameter 'nl802154' [ 1255.832737][T22422] vhci_hcd vhci_hcd.1: invalid port number 37 [ 1255.838902][T22422] vhci_hcd vhci_hcd.1: default hub control req: 600d v002b i0025 l1 [ 1256.053568][T22430] FAULT_INJECTION: forcing a failure. [ 1256.053568][T22430] name failslab, interval 1, probability 0, space 0, times 0 [ 1256.141348][T22430] CPU: 0 UID: 0 PID: 22430 Comm: syz.4.3355 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 1256.141393][T22430] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 1256.141404][T22430] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1256.141419][T22430] Call Trace: [ 1256.141428][T22430] [ 1256.141438][T22430] dump_stack_lvl+0x100/0x190 [ 1256.141479][T22430] should_fail_ex.cold+0x5/0xa [ 1256.141507][T22430] should_failslab+0xc2/0x120 [ 1256.141548][T22430] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 1256.141583][T22430] ? __d_alloc+0x34/0xa80 [ 1256.141613][T22430] __d_alloc+0x34/0xa80 [ 1256.141640][T22430] d_alloc_pseudo+0x1c/0xc0 [ 1256.141672][T22430] alloc_file_pseudo+0xcf/0x230 [ 1256.141705][T22430] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 1256.141742][T22430] __shmem_file_setup+0x221/0x490 [ 1256.141774][T22430] ? __pfx___shmem_file_setup+0x10/0x10 [ 1256.141839][T22430] ? vm_area_alloc+0x1f/0x160 [ 1256.141889][T22430] shmem_zero_setup+0x96/0x1b0 [ 1256.141928][T22430] __mmap_region+0x2198/0x29e0 [ 1256.141966][T22430] ? __pfx___mmap_region+0x10/0x10 [ 1256.142030][T22430] ? sched_clock+0x38/0x60 [ 1256.142074][T22430] ? lockdep_hardirqs_on+0x78/0x100 [ 1256.142101][T22430] ? finish_task_switch.isra.0+0x205/0xb80 [ 1256.142127][T22430] ? rcu_is_watching+0x12/0xc0 [ 1256.142200][T22430] ? rcu_is_watching+0x12/0xc0 [ 1256.142235][T22430] ? cap_capable+0x107/0x460 [ 1256.142283][T22430] mmap_region+0x180/0x3e0 [ 1256.142321][T22430] do_mmap+0xc63/0x12f0 [ 1256.142350][T22430] ? __pfx_do_mmap+0x10/0x10 [ 1256.142373][T22430] ? __pfx_down_write_killable+0x10/0x10 [ 1256.142409][T22430] vm_mmap_pgoff+0x29e/0x470 [ 1256.142438][T22430] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 1256.142464][T22430] ? do_futex+0x192/0x350 [ 1256.142493][T22430] ? __pfx_do_futex+0x10/0x10 [ 1256.142527][T22430] ksys_mmap_pgoff+0xe1/0x650 [ 1256.142566][T22430] ? __x64_sys_futex+0x34f/0x4d0 [ 1256.142593][T22430] ? __x64_sys_futex+0x358/0x4d0 [ 1256.142624][T22430] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 1256.142662][T22430] ? xfd_validate_state+0x129/0x190 [ 1256.142700][T22430] __x64_sys_mmap+0x125/0x190 [ 1256.142737][T22430] do_syscall_64+0x106/0xf80 [ 1256.142761][T22430] ? clear_bhb_loop+0x40/0x90 [ 1256.142796][T22430] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1256.142820][T22430] RIP: 0033:0x7f366c39c629 [ 1256.142840][T22430] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1256.142863][T22430] RSP: 002b:00007f366d323028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1256.142885][T22430] RAX: ffffffffffffffda RBX: 00007f366c615fa0 RCX: 00007f366c39c629 [ 1256.142901][T22430] RDX: 00000000000000db RSI: 0000000004020009 RDI: 0000000000000000 [ 1256.142915][T22430] RBP: 00007f366c432b39 R08: 0000000000000401 R09: 0000000000008000 [ 1256.142930][T22430] R10: 0000000000000eb1 R11: 0000000000000246 R12: 0000000000000000 [ 1256.142945][T22430] R13: 00007f366c616038 R14: 00007f366c615fa0 R15: 00007ffc9633a0f8 [ 1256.142975][T22430] [ 1262.066028][T22488] kAFS: Invalid Command on /proc/fs/afs/cells file [ 1264.596119][T22509] netlink: 326 bytes leftover after parsing attributes in process `syz.3.3370'. [ 1265.194656][T16060] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1265.205252][T16060] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1265.214375][T16060] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1265.223252][T16060] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1265.234764][T16060] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1266.095935][T22526] chnl_net:caif_netlink_parms(): no params data found [ 1266.529254][T22526] bridge0: port 1(bridge_slave_0) entered blocking state [ 1266.593283][T22526] bridge0: port 1(bridge_slave_0) entered disabled state [ 1266.620748][T22526] bridge_slave_0: entered allmulticast mode [ 1266.658501][T22526] bridge_slave_0: entered promiscuous mode [ 1266.688237][T22526] bridge0: port 2(bridge_slave_1) entered blocking state [ 1266.702635][T22526] bridge0: port 2(bridge_slave_1) entered disabled state [ 1266.736801][T22526] bridge_slave_1: entered allmulticast mode [ 1266.770838][T22526] bridge_slave_1: entered promiscuous mode [ 1266.914105][T22526] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1267.022891][T22526] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1267.199276][T22526] team0: Port device team_slave_0 added [ 1267.240135][T22526] team0: Port device team_slave_1 added [ 1267.257000][T15815] Bluetooth: hci6: command tx timeout [ 1267.391219][T22526] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1267.412822][T22526] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1267.509400][T22526] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1267.570869][T22526] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1267.593308][T22526] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1267.681312][T22526] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1268.076839][T22526] hsr_slave_0: entered promiscuous mode [ 1268.098845][T22526] hsr_slave_1: entered promiscuous mode [ 1268.123323][T22526] debugfs: 'hsr0' already exists in 'hsr' [ 1268.147420][T22526] Cannot create hsr debugfs directory [ 1268.929569][T22526] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1269.010946][T22526] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1269.061389][T22586] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3384'. [ 1269.086789][T22526] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1269.149147][T22526] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1269.339066][T15815] Bluetooth: hci6: command tx timeout [ 1269.514730][T22526] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1269.629807][T22526] 8021q: adding VLAN 0 to HW filter on device team0 [ 1269.720702][T19500] bridge0: port 1(bridge_slave_0) entered blocking state [ 1269.727879][T19500] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1269.782337][T19500] bridge0: port 2(bridge_slave_1) entered blocking state [ 1269.789542][T19500] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1269.963321][T22603] page: refcount:22 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7fe00 [ 1269.995375][T22526] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1270.048310][T22603] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1270.113726][T22603] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 1270.161924][T22603] raw: 00fff00000000040 0000000000000000 dead000000000122 0000000000000000 [ 1270.248331][T22603] raw: 0000000000000000 0000000000000000 00000016ffffffff 0000000000000000 [ 1270.329254][T22603] head: 00fff00000000040 0000000000000000 dead000000000122 0000000000000000 [ 1270.411472][T22603] head: 0000000000000000 0000000000000000 00000016ffffffff 0000000000000000 [ 1270.518767][T22603] head: 00fff00000000003 ffffea0001ff8001 00000000ffffffff 00000000ffffffff [ 1270.564761][T22603] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 1270.628296][T22603] page dumped because: unmovable page [ 1270.684601][T22603] page_owner tracks the page as allocated [ 1270.727585][T22603] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x528c0(GFP_NOWAIT|__GFP_IO|__GFP_FS|__GFP_NORETRY|__GFP_COMP), pid 5487, tgid 5487 (dhcpcd), ts 62870407065, free_ts 31636449394 [ 1270.813501][T22526] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1270.838917][T22603] post_alloc_hook+0x153/0x170 [ 1270.846064][T22603] get_page_from_freelist+0x111d/0x3140 [ 1270.873842][T22603] __alloc_frozen_pages_noprof+0x27c/0x2ba0 [ 1270.904308][T22603] alloc_pages_mpol+0x1fb/0x550 [ 1270.928208][T22603] alloc_pages_noprof+0x131/0x390 [ 1270.956785][T22603] skb_page_frag_refill+0x365/0x5b0 [ 1270.975716][T22603] try_fill_recv+0x7f1/0x2950 [ 1271.034316][T22603] virtnet_open+0x5f2/0x960 [ 1271.046220][T22603] __dev_open+0x3ad/0x960 [ 1271.081867][T22603] __dev_change_flags+0x558/0x6f0 [ 1271.086971][T22603] netif_change_flags+0x8d/0x160 [ 1271.153336][T22603] dev_change_flags+0xba/0x250 [ 1271.158148][T22603] devinet_ioctl+0x110b/0x1f10 [ 1271.195606][T22603] inet_ioctl+0x3aa/0x3f0 [ 1271.228002][T22603] sock_do_ioctl+0x118/0x280 [ 1271.252658][T22603] sock_ioctl+0x599/0x6b0 [ 1271.282703][T22603] page last free pid 1 tgid 1 stack trace: [ 1271.288555][T22603] __free_frozen_pages+0x7e1/0x10d0 [ 1271.349397][T22603] free_contig_range+0xde/0x1d0 [ 1271.372189][T22603] destroy_args+0xa8/0x7a0 [ 1271.376688][T22603] debug_vm_pgtable+0x1b66/0x34c0 [ 1271.419637][T15815] Bluetooth: hci6: command tx timeout [ 1271.442542][T22603] do_one_initcall+0x11d/0x760 [ 1271.483444][T22603] kernel_init_freeable+0x6e5/0x7a0 [ 1271.488704][T22603] kernel_init+0x1f/0x1e0 [ 1271.533130][T22603] ret_from_fork+0x754/0xd80 [ 1271.560326][T22603] ret_from_fork_asm+0x1a/0x30 [ 1272.322454][T22526] veth0_vlan: entered promiscuous mode [ 1272.378615][T22526] veth1_vlan: entered promiscuous mode [ 1272.486926][T22526] veth0_macvtap: entered promiscuous mode [ 1272.543445][T22526] veth1_macvtap: entered promiscuous mode [ 1272.636175][T22526] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1272.692978][T22526] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1272.778380][T19500] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1272.818399][T19500] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1272.899282][T19500] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1272.937555][T19500] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1273.224914][T19500] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1273.258320][T19500] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1273.430630][T19500] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1273.469674][T19500] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1273.502413][T15815] Bluetooth: hci6: command tx timeout [ 1273.644090][T22654] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 1275.201447][T22677] Invalid ELF header magic: != ELF [ 1275.709631][T22685] random: crng reseeded on system resumption [ 1279.607509][T22728] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3410'. [ 1279.739922][T22728] veth1_vlan: entered allmulticast mode [ 1282.416385][T22754] FAULT_INJECTION: forcing a failure. [ 1282.416385][T22754] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1282.468507][T22754] CPU: 0 UID: 0 PID: 22754 Comm: syz.6.3415 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 1282.468551][T22754] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 1282.468562][T22754] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1282.468577][T22754] Call Trace: [ 1282.468585][T22754] [ 1282.468594][T22754] dump_stack_lvl+0x100/0x190 [ 1282.468651][T22754] should_fail_ex.cold+0x5/0xa [ 1282.468678][T22754] get_futex_key+0x1d2/0x1620 [ 1282.468708][T22754] ? __pfx_get_futex_key+0x10/0x10 [ 1282.468733][T22754] ? path_lookupat+0x774/0xc40 [ 1282.468774][T22754] futex_wait_setup+0x81/0x500 [ 1282.468816][T22754] __futex_wait+0x19f/0x300 [ 1282.468865][T22754] ? __pfx___futex_wait+0x10/0x10 [ 1282.468903][T22754] ? __pfx_futex_wake_mark+0x10/0x10 [ 1282.468940][T22754] ? futex_hash+0x2c5/0x380 [ 1282.468973][T22754] futex_wait+0xed/0x380 [ 1282.469006][T22754] ? __pfx_futex_wait+0x10/0x10 [ 1282.469046][T22754] ? __pfx_path_getxattrat+0x10/0x10 [ 1282.469075][T22754] do_futex+0x1ef/0x350 [ 1282.469104][T22754] ? __pfx_do_futex+0x10/0x10 [ 1282.469139][T22754] __x64_sys_futex+0x34f/0x4d0 [ 1282.469177][T22754] ? __pfx___x64_sys_futex+0x10/0x10 [ 1282.469216][T22754] do_syscall_64+0x106/0xf80 [ 1282.469240][T22754] ? clear_bhb_loop+0x40/0x90 [ 1282.469269][T22754] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1282.469292][T22754] RIP: 0033:0x7f5888d9c629 [ 1282.469310][T22754] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1282.469333][T22754] RSP: 002b:00007f5889ca20e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1282.469355][T22754] RAX: ffffffffffffffda RBX: 00007f5889016098 RCX: 00007f5888d9c629 [ 1282.469370][T22754] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f5889016098 [ 1282.469384][T22754] RBP: 00007f5889016090 R08: 0000000000000000 R09: 0000000000000000 [ 1282.469398][T22754] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1282.469412][T22754] R13: 00007f5889016128 R14: 00007ffd16bce3c0 R15: 00007ffd16bce4a8 [ 1282.469440][T22754] [ 1284.178113][T22774] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3419'. [ 1284.520442][T22782] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1288.288350][T22843] netlink: 342 bytes leftover after parsing attributes in process `syz.4.3432'. [ 1289.073373][T22859] vhci_hcd vhci_hcd.1: invalid port number 37 [ 1289.168424][T22859] vhci_hcd vhci_hcd.1: default hub control req: 600d v002b i0025 l1 [ 1289.765485][T16060] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1289.777175][T16060] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1289.792468][T16060] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1289.802774][T16060] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1289.818397][T16060] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1290.275017][T22867] FAULT_INJECTION: forcing a failure. [ 1290.275017][T22867] name failslab, interval 1, probability 0, space 0, times 0 [ 1290.379286][T22867] CPU: 0 UID: 0 PID: 22867 Comm: syz.6.3438 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 1290.379330][T22867] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 1290.379342][T22867] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1290.379357][T22867] Call Trace: [ 1290.379366][T22867] [ 1290.379376][T22867] dump_stack_lvl+0x100/0x190 [ 1290.379416][T22867] should_fail_ex.cold+0x5/0xa [ 1290.379444][T22867] should_failslab+0xc2/0x120 [ 1290.379492][T22867] __kmalloc_cache_noprof+0x7a/0x6f0 [ 1290.379523][T22867] ? call_usermodehelper_setup+0xaf/0x360 [ 1290.379565][T22867] ? __pfx_free_modprobe_argv+0x10/0x10 [ 1290.379599][T22867] call_usermodehelper_setup+0xaf/0x360 [ 1290.379641][T22867] __request_module+0x3c7/0x6c0 [ 1290.379674][T22867] ? __pfx___request_module+0x10/0x10 [ 1290.379719][T22867] ? find_held_lock+0x2b/0x80 [ 1290.379757][T22867] ? inet6_create+0xba3/0x12b0 [ 1290.379789][T22867] inet6_create+0xd69/0x12b0 [ 1290.379817][T22867] ? inet6_create+0x7f/0x12b0 [ 1290.379845][T22867] __sock_create+0x339/0x860 [ 1290.379886][T22867] __sys_socket+0x14d/0x260 [ 1290.379922][T22867] ? __pfx___sys_socket+0x10/0x10 [ 1290.379965][T22867] __x64_sys_socket+0x72/0xb0 [ 1290.380000][T22867] ? lockdep_hardirqs_on+0x78/0x100 [ 1290.380027][T22867] do_syscall_64+0x106/0xf80 [ 1290.380052][T22867] ? clear_bhb_loop+0x40/0x90 [ 1290.380082][T22867] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1290.380108][T22867] RIP: 0033:0x7f5888d9c629 [ 1290.380127][T22867] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1290.380151][T22867] RSP: 002b:00007f5889cc3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1290.380174][T22867] RAX: ffffffffffffffda RBX: 00007f5889015fa0 RCX: 00007f5888d9c629 [ 1290.380190][T22867] RDX: 0000000000000011 RSI: 0000000000000001 RDI: 000000000000000a [ 1290.380205][T22867] RBP: 00007f5888e32b39 R08: 0000000000000000 R09: 0000000000000000 [ 1290.380220][T22867] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1290.380234][T22867] R13: 00007f5889016038 R14: 00007f5889015fa0 R15: 00007ffd16bce4a8 [ 1290.380264][T22867] [ 1291.261453][T22863] chnl_net:caif_netlink_parms(): no params data found [ 1291.425101][T22877] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.3.3440: iget: checksum invalid [ 1291.481270][T22877] faux_driver regulatory: loading /lib/firmware/updates/syzkaller/regulatory.db failed with error -74 [ 1291.574576][T22879] zswap: compressor not available [ 1291.621589][T22877] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.3.3440: iget: checksum invalid [ 1291.646044][T22863] bridge0: port 1(bridge_slave_0) entered blocking state [ 1291.679859][T22863] bridge0: port 1(bridge_slave_0) entered disabled state [ 1291.689976][T22877] faux_driver regulatory: loading /lib/firmware/updates/regulatory.db failed with error -74 [ 1291.714769][T22863] bridge_slave_0: entered allmulticast mode [ 1291.726047][T22877] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.3.3440: iget: checksum invalid [ 1291.753409][T22863] bridge_slave_0: entered promiscuous mode [ 1291.780247][T22877] faux_driver regulatory: loading /lib/firmware/syzkaller/regulatory.db failed with error -74 [ 1291.792105][T22863] bridge0: port 2(bridge_slave_1) entered blocking state [ 1291.809768][T22863] bridge0: port 2(bridge_slave_1) entered disabled state [ 1291.817018][T22863] bridge_slave_1: entered allmulticast mode [ 1291.831005][T22877] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.3.3440: iget: checksum invalid [ 1291.879300][T22877] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -74 [ 1291.889622][T22863] bridge_slave_1: entered promiscuous mode [ 1291.909548][T16060] Bluetooth: hci7: command tx timeout [ 1291.934262][T22877] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -74 [ 1291.969439][T22877] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 1292.014684][T22863] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1292.075734][T22863] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1292.309124][T22863] team0: Port device team_slave_0 added [ 1292.363366][T22863] team0: Port device team_slave_1 added [ 1292.394522][T22893] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3442'. [ 1292.540665][T22863] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1292.561152][T22863] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1292.650465][T22863] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1292.699760][T22863] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1292.719582][T22863] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1292.818195][T22863] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1293.131119][T22863] hsr_slave_0: entered promiscuous mode [ 1293.150880][T22863] hsr_slave_1: entered promiscuous mode [ 1293.166625][T22863] debugfs: 'hsr0' already exists in 'hsr' [ 1293.180599][T22863] Cannot create hsr debugfs directory [ 1293.746135][T22913] kAFS: unparsable volume name [ 1293.926047][T22863] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1293.991095][T16060] Bluetooth: hci7: command tx timeout [ 1294.004040][T22863] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1294.063667][T22863] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1294.150064][T22863] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1294.623801][T22863] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1295.008231][T22863] 8021q: adding VLAN 0 to HW filter on device team0 [ 1295.135543][T20467] bridge0: port 1(bridge_slave_0) entered blocking state [ 1295.142753][T20467] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1295.193503][T20467] bridge0: port 2(bridge_slave_1) entered blocking state [ 1295.200726][T20467] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1296.071526][T16060] Bluetooth: hci7: command tx timeout [ 1296.565562][T22863] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1297.903154][T22863] veth0_vlan: entered promiscuous mode [ 1297.964332][T22863] veth1_vlan: entered promiscuous mode [ 1298.142069][T22863] veth0_macvtap: entered promiscuous mode [ 1298.155536][T16060] Bluetooth: hci7: command tx timeout [ 1298.227084][T22863] veth1_macvtap: entered promiscuous mode [ 1298.578521][T22863] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1298.656330][T22863] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1298.921185][T20467] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1298.963897][T20467] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1299.117398][T20467] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1299.156958][T20467] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1299.718761][T19500] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1299.767947][T19500] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1299.870913][T20467] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1299.911934][T20467] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1300.856358][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.862691][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1301.512866][T23032] FAULT_INJECTION: forcing a failure. [ 1301.512866][T23032] name failslab, interval 1, probability 0, space 0, times 0 [ 1301.610803][T23032] CPU: 0 UID: 0 PID: 23032 Comm: syz.6.3461 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 1301.610847][T23032] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 1301.610859][T23032] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1301.610874][T23032] Call Trace: [ 1301.610882][T23032] [ 1301.610892][T23032] dump_stack_lvl+0x100/0x190 [ 1301.610934][T23032] should_fail_ex.cold+0x5/0xa [ 1301.610962][T23032] should_failslab+0xc2/0x120 [ 1301.611005][T23032] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1301.611040][T23032] ? ptlock_alloc+0x1f/0x70 [ 1301.611074][T23032] ptlock_alloc+0x1f/0x70 [ 1301.611103][T23032] pte_alloc_one+0x84/0x3e0 [ 1301.611130][T23032] do_fault+0x8cc/0x1950 [ 1301.611154][T23032] ? __pmd_alloc+0x6aa/0x9c0 [ 1301.611181][T23032] __handle_mm_fault+0x180f/0x2b60 [ 1301.611217][T23032] ? mt_find+0x45e/0x8e0 [ 1301.611246][T23032] ? __pfx___handle_mm_fault+0x10/0x10 [ 1301.611275][T23032] ? __pfx_mt_find+0x10/0x10 [ 1301.611319][T23032] ? find_vma+0xbf/0x140 [ 1301.611355][T23032] ? __pfx_find_vma+0x10/0x10 [ 1301.611396][T23032] handle_mm_fault+0x36d/0xa20 [ 1301.611432][T23032] do_user_addr_fault+0x74c/0x12f0 [ 1301.611479][T23032] exc_page_fault+0x6f/0xd0 [ 1301.611505][T23032] asm_exc_page_fault+0x26/0x30 [ 1301.611537][T23032] RIP: 0010:rep_movs_alternative+0x30/0x90 [ 1301.611574][T23032] Code: 83 f9 08 73 25 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 e9 bd 93 04 00 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 <48> 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 [ 1301.611598][T23032] RSP: 0018:ffffc90004d37b78 EFLAGS: 00050212 [ 1301.611618][T23032] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 0000000000000022 [ 1301.611634][T23032] RDX: 0000000000000001 RSI: 0000000000000000 RDI: ffffc90004d37bd8 [ 1301.611649][T23032] RBP: 0000000000000022 R08: 0000000000000001 R09: fffff520009a6f7f [ 1301.611664][T23032] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000000 [ 1301.611679][T23032] R13: ffffc90004d37bd8 R14: ffffc90004d37ca0 R15: ffffc90004d37bd8 [ 1301.611711][T23032] _copy_from_user+0x98/0xd0 [ 1301.611762][T23032] kstrtouint_from_user+0xd6/0x1d0 [ 1301.611790][T23032] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 1301.611818][T23032] ? __lock_acquire+0x4a5/0x2630 [ 1301.611850][T23032] ? lock_acquire+0x1cf/0x380 [ 1301.611885][T23032] proc_fail_nth_write+0x83/0x220 [ 1301.611912][T23032] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1301.611946][T23032] vfs_write+0x2aa/0x1070 [ 1301.611982][T23032] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1301.612012][T23032] ? __pfx_vfs_write+0x10/0x10 [ 1301.612046][T23032] ? __fget_files+0x215/0x3d0 [ 1301.612088][T23032] ? __fget_files+0x21f/0x3d0 [ 1301.612132][T23032] ksys_write+0x12a/0x250 [ 1301.612167][T23032] ? __pfx_ksys_write+0x10/0x10 [ 1301.612210][T23032] do_syscall_64+0x106/0xf80 [ 1301.612235][T23032] ? clear_bhb_loop+0x40/0x90 [ 1301.612264][T23032] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1301.612288][T23032] RIP: 0033:0x7f5888d9c629 [ 1301.612307][T23032] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1301.612330][T23032] RSP: 002b:00007f5889ca2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1301.612351][T23032] RAX: ffffffffffffffda RBX: 00007f5889016090 RCX: 00007f5888d9c629 [ 1301.612366][T23032] RDX: 0000000000100082 RSI: 0000000000000000 RDI: 0000000000000003 [ 1301.612381][T23032] RBP: 00007f5888e32b39 R08: 0000000000000000 R09: 0000000000000000 [ 1301.612395][T23032] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1301.612410][T23032] R13: 00007f5889016128 R14: 00007f5889016090 R15: 00007ffd16bce4a8 [ 1301.612441][T23032] [ 1306.084304][T23067] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1306.108014][T23067] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1306.129043][T23067] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1306.158809][T23067] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1306.167646][T23067] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1306.187190][T23067] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1306.214821][T23067] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 1306.234994][T23067] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 1306.271262][T23067] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 1306.300393][T23067] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 1306.322713][T23067] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 1306.354623][T23067] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 1306.373869][T23067] Bluetooth: hci7: Opcode 0x0406 failed: -4 [ 1306.413848][T23067] Bluetooth: hci7: Opcode 0x0406 failed: -4 [ 1306.636447][T16060] Bluetooth: hci4: command 0x0c1a tx timeout [ 1307.770921][T16060] Bluetooth: hci7: unexpected event 0x20 length: 123 > 7 [ 1308.157775][T16060] Bluetooth: hci1: command 0x0c1a tx timeout [ 1308.172175][T15815] Bluetooth: hci0: command 0x0c1a tx timeout [ 1308.237415][T16060] Bluetooth: hci5: command 0x0c1a tx timeout [ 1308.243461][T16060] Bluetooth: hci2: command 0x0419 tx timeout [ 1308.249598][T15815] Bluetooth: hci3: command 0x0c1a tx timeout [ 1308.300755][T23109] FAULT_INJECTION: forcing a failure. [ 1308.300755][T23109] name failslab, interval 1, probability 0, space 0, times 0 [ 1308.318421][T23108] Bluetooth: hci6: command 0x0c1a tx timeout [ 1308.356265][T23109] CPU: 0 UID: 0 PID: 23109 Comm: syz.7.3479 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 1308.356310][T23109] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 1308.356322][T23109] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1308.356337][T23109] Call Trace: [ 1308.356345][T23109] [ 1308.356355][T23109] dump_stack_lvl+0x100/0x190 [ 1308.356397][T23109] should_fail_ex.cold+0x5/0xa [ 1308.356425][T23109] should_failslab+0xc2/0x120 [ 1308.356465][T23109] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1308.356500][T23109] ? vm_area_dup+0x27/0x8e0 [ 1308.356534][T23109] vm_area_dup+0x27/0x8e0 [ 1308.356566][T23109] __split_vma+0x18c/0xd90 [ 1308.356601][T23109] ? __pfx___split_vma+0x10/0x10 [ 1308.356631][T23109] ? finish_task_switch.isra.0+0x200/0xb80 [ 1308.356662][T23109] ? lockdep_hardirqs_on+0x78/0x100 [ 1308.356697][T23109] vma_modify+0x1121/0x2250 [ 1308.356736][T23109] ? __pfx_vma_modify+0x10/0x10 [ 1308.356774][T23109] vma_modify_flags+0x257/0x3d0 [ 1308.356808][T23109] ? __pfx_vma_modify_flags+0x10/0x10 [ 1308.356854][T23109] ? mtree_range_walk+0x6ce/0xcd0 [ 1308.356902][T23109] mlock_fixup+0x302/0xf00 [ 1308.356954][T23109] ? __pfx_mlock_fixup+0x10/0x10 [ 1308.356994][T23109] apply_vma_lock_flags+0x256/0x370 [ 1308.357030][T23109] ? __pfx_apply_vma_lock_flags+0x10/0x10 [ 1308.357065][T23109] ? __pfx___might_resched+0x10/0x10 [ 1308.357107][T23109] ? __pfx_down_write_killable+0x10/0x10 [ 1308.357141][T23109] ? do_futex+0x192/0x350 [ 1308.357173][T23109] do_mlock+0x261/0x7f0 [ 1308.357212][T23109] ? __pfx_do_mlock+0x10/0x10 [ 1308.357243][T23109] ? __x64_sys_futex+0x34f/0x4d0 [ 1308.357272][T23109] ? __x64_sys_futex+0x358/0x4d0 [ 1308.357302][T23109] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 1308.357343][T23109] ? xfd_validate_state+0x129/0x190 [ 1308.357386][T23109] __x64_sys_mlock+0x59/0x80 [ 1308.357419][T23109] do_syscall_64+0x106/0xf80 [ 1308.357445][T23109] ? clear_bhb_loop+0x40/0x90 [ 1308.357476][T23109] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1308.357501][T23109] RIP: 0033:0x7f1b69d9c629 [ 1308.357522][T23109] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1308.357546][T23109] RSP: 002b:00007f1b67ff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 1308.357570][T23109] RAX: ffffffffffffffda RBX: 00007f1b6a015fa0 RCX: 00007f1b69d9c629 [ 1308.357588][T23109] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 000000000000fbe8 [ 1308.357603][T23109] RBP: 00007f1b69e32b39 R08: 0000000000000000 R09: 0000000000000000 [ 1308.357618][T23109] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1308.357633][T23109] R13: 00007f1b6a016038 R14: 00007f1b6a015fa0 R15: 00007ffee92b2248 [ 1308.357665][T23109] [ 1309.068456][T23108] Bluetooth: hci7: command 0x0c1a tx timeout [ 1309.775731][T23125] QAT: Stopping all acceleration devices. [ 1310.318568][T20474] Bluetooth: hci5: command 0x0c1a tx timeout [ 1310.400103][T20474] Bluetooth: hci6: command 0x0c1a tx timeout [ 1310.826673][T23134] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1311.122204][T20474] Bluetooth: hci7: command 0x0c1a tx timeout [ 1311.700511][T23108] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1311.711766][T23108] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1311.720586][T23108] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1311.728351][T23108] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1311.748009][T23108] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1312.399558][T23108] Bluetooth: hci5: command 0x0c1a tx timeout [ 1312.479507][T23108] Bluetooth: hci6: command 0x0c1a tx timeout [ 1312.698123][T23151] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.3.3489: iget: checksum invalid [ 1312.716141][T23140] chnl_net:caif_netlink_parms(): no params data found [ 1312.767900][T23151] faux_driver regulatory: loading /lib/firmware/updates/syzkaller/regulatory.db failed with error -74 [ 1312.818405][T23151] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.3.3489: iget: checksum invalid [ 1312.855510][T23151] faux_driver regulatory: loading /lib/firmware/updates/regulatory.db failed with error -74 [ 1312.985356][T23151] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.3.3489: iget: checksum invalid [ 1313.069168][T23151] faux_driver regulatory: loading /lib/firmware/syzkaller/regulatory.db failed with error -74 [ 1313.117060][T23151] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.3.3489: iget: checksum invalid [ 1313.153240][T23151] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -74 [ 1313.205646][T23108] Bluetooth: hci7: command 0x0c1a tx timeout [ 1313.238337][T23151] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -74 [ 1313.352130][T23151] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 1313.648188][T23140] bridge0: port 1(bridge_slave_0) entered blocking state [ 1313.685273][T23140] bridge0: port 1(bridge_slave_0) entered disabled state [ 1313.715913][T23140] bridge_slave_0: entered allmulticast mode [ 1313.758160][T23140] bridge_slave_0: entered promiscuous mode [ 1313.840404][T23108] Bluetooth: hci8: command tx timeout [ 1313.847706][T23140] bridge0: port 2(bridge_slave_1) entered blocking state [ 1313.882366][T23140] bridge0: port 2(bridge_slave_1) entered disabled state [ 1313.918143][T23140] bridge_slave_1: entered allmulticast mode [ 1313.950099][T23140] bridge_slave_1: entered promiscuous mode [ 1314.068758][T23140] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1314.113715][T23140] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1314.257262][T23140] team0: Port device team_slave_0 added [ 1314.290900][T23140] team0: Port device team_slave_1 added [ 1314.498319][T23140] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1314.522868][T23140] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1314.617951][T23140] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1314.667238][T23140] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1314.697087][T23140] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1314.840705][T23140] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1315.382005][T23140] hsr_slave_0: entered promiscuous mode [ 1315.408705][T23140] hsr_slave_1: entered promiscuous mode [ 1315.492136][T23140] debugfs: 'hsr0' already exists in 'hsr' [ 1315.511912][ T30] audit: type=1800 audit(4294986910.493:23): pid=23175 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.3493" name="dbroot" dev="configfs" ino=155459 res=0 errno=0 [ 1315.544931][T23175] db_root: not a directory: /dev/audio1 [ 1315.551423][T23140] Cannot create hsr debugfs directory [ 1315.921380][T23108] Bluetooth: hci8: command tx timeout [ 1316.611285][T23180] netlink: 'syz.7.3494': attribute type 11 has an invalid length. [ 1316.642299][T23180] netlink: 'syz.7.3494': attribute type 11 has an invalid length. [ 1316.681665][T23180] netlink: 'syz.7.3494': attribute type 11 has an invalid length. [ 1316.712355][T23180] netlink: 'syz.7.3494': attribute type 11 has an invalid length. [ 1316.747979][T23180] netlink: 'syz.7.3494': attribute type 11 has an invalid length. [ 1316.828721][T23180] netlink: 'syz.7.3494': attribute type 11 has an invalid length. [ 1316.873052][T23180] netlink: 'syz.7.3494': attribute type 11 has an invalid length. [ 1316.924968][T23180] netlink: 'syz.7.3494': attribute type 11 has an invalid length. [ 1316.972476][T23180] netlink: 'syz.7.3494': attribute type 11 has an invalid length. [ 1317.015844][T23180] netlink: 'syz.7.3494': attribute type 11 has an invalid length. [ 1317.801075][T23140] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1318.002202][T23108] Bluetooth: hci8: command tx timeout [ 1318.151276][T23140] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1318.227928][T23140] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1318.341775][T23140] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1319.157035][T23140] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1319.244878][T23140] 8021q: adding VLAN 0 to HW filter on device team0 [ 1319.305279][T19499] bridge0: port 1(bridge_slave_0) entered blocking state [ 1319.312435][T19499] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1319.368639][T19499] bridge0: port 2(bridge_slave_1) entered blocking state [ 1319.375826][T19499] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1320.083293][T23108] Bluetooth: hci8: command tx timeout [ 1320.267886][T23140] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1321.624462][T23140] veth0_vlan: entered promiscuous mode [ 1321.696887][T23140] veth1_vlan: entered promiscuous mode [ 1321.844454][T19500] EXT4-fs (sda1): Delayed block allocation failed for inode 2027 at logical offset 1346 with max blocks 38 with error 117 [ 1321.912368][T23140] veth0_macvtap: entered promiscuous mode [ 1322.000978][T19500] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1322.000978][T19500] [ 1322.111649][T23140] veth1_macvtap: entered promiscuous mode [ 1322.240247][T23140] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1322.325536][T19500] EXT4-fs (sda1): Delayed block allocation failed for inode 2026 at logical offset 7 with max blocks 3 with error 117 [ 1322.352235][T23140] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1322.413899][T19500] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1322.413899][T19500] [ 1322.474393][T19499] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1322.499623][T19500] EXT4-fs (sda1): Delayed block allocation failed for inode 2027 at logical offset 1346 with max blocks 1 with error 117 [ 1322.527294][T19499] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1322.585664][T23239] netlink: 330 bytes leftover after parsing attributes in process `syz.7.3504'. [ 1322.604752][T19500] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1322.604752][T19500] [ 1322.747311][T19499] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1322.792277][T19499] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1323.540669][T23233] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1323.565955][T23233] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1323.583915][T23233] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1323.603073][T23233] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1323.636041][T23233] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1323.655854][T23233] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1323.686428][T23233] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 1323.707388][T23233] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 1323.732109][T23233] Bluetooth: hci8: Opcode 0x0c1a failed: -4 [ 1323.767398][T23233] Bluetooth: hci8: Opcode 0x0406 failed: -4 [ 1323.829742][T23233] Bluetooth: hci8: Opcode 0x0406 failed: -4 [ 1324.012063][T19499] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1324.058284][T19499] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1324.195281][T19504] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1324.223754][T19504] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1324.588531][ T30] audit: type=1807 audit(4294987942.559:24): UNKNOWN=0"]$|1j0B|dӉO+/xWӦ^gq%ḦrO res=0 [ 1324.641718][ T30] audit: type=1802 audit(4294987942.559:25): pid=23255 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.6.3509" res=0 errno=0 [ 1324.728567][T23108] Bluetooth: hci4: command 0x0c1a tx timeout [ 1325.305131][T23274] sp0: Synchronizing with TNC [ 1325.606979][T23108] Bluetooth: hci3: command 0x0c1a tx timeout [ 1325.614198][T20474] Bluetooth: hci1: command 0x0c1a tx timeout [ 1325.620303][T16060] Bluetooth: hci0: command 0x0c1a tx timeout [ 1325.690584][T23108] Bluetooth: hci5: command 0x0c1a tx timeout [ 1325.696715][T20474] Bluetooth: hci2: command 0x0419 tx timeout [ 1325.768491][T23108] Bluetooth: hci8: command 0x0c1a tx timeout [ 1325.776899][T20474] Bluetooth: hci7: command 0x0c1a tx timeout [ 1325.783089][T20474] Bluetooth: hci6: command 0x0c1a tx timeout [ 1325.863580][T23281] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1325.951577][T23281] FAULT_INJECTION: forcing a failure. [ 1325.951577][T23281] name failslab, interval 1, probability 0, space 0, times 0 [ 1326.021489][T23281] CPU: 0 UID: 0 PID: 23281 Comm: syz.8.3513 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 1326.021535][T23281] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 1326.021546][T23281] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1326.021561][T23281] Call Trace: [ 1326.021569][T23281] [ 1326.021579][T23281] dump_stack_lvl+0x100/0x190 [ 1326.021619][T23281] should_fail_ex.cold+0x5/0xa [ 1326.021647][T23281] should_failslab+0xc2/0x120 [ 1326.021687][T23281] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1326.021721][T23281] ? alloc_uid+0x13d/0x4c0 [ 1326.021747][T23281] ? rcu_is_watching+0x12/0xc0 [ 1326.021800][T23281] alloc_uid+0x13d/0x4c0 [ 1326.021826][T23281] ? __pfx_alloc_uid+0x10/0x10 [ 1326.021854][T23281] ? bpf_lsm_capable+0x9/0x10 [ 1326.021875][T23281] ? security_capable+0x80/0x260 [ 1326.021907][T23281] __sys_setuid+0x1be/0x440 [ 1326.021947][T23281] do_syscall_64+0x106/0xf80 [ 1326.021972][T23281] ? clear_bhb_loop+0x40/0x90 [ 1326.022002][T23281] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1326.022026][T23281] RIP: 0033:0x7f1fa0d9c629 [ 1326.022045][T23281] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1326.022069][T23281] RSP: 002b:00007f1fa1cc8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000069 [ 1326.022091][T23281] RAX: ffffffffffffffda RBX: 00007f1fa1016090 RCX: 00007f1fa0d9c629 [ 1326.022107][T23281] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000000e [ 1326.022121][T23281] RBP: 00007f1fa0e32b39 R08: 0000000000000000 R09: 0000000000000000 [ 1326.022135][T23281] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1326.022150][T23281] R13: 00007f1fa1016128 R14: 00007f1fa1016090 R15: 00007ffd8d31c8c8 [ 1326.022179][T23281] [ 1327.266044][ C0] sd 0:0:1:0: [sda] tag#2952 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 1327.276689][ C0] sd 0:0:1:0: [sda] tag#2952 CDB: Read(6) 08 00 00 00 09 00 00 00 00 00 00 00 [ 1327.544141][T23254] ima: policy update failed [ 1327.641048][ T30] audit: type=1802 audit(4294987945.617:26): pid=23254 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.6.3509" res=0 errno=0 [ 1327.847312][T20474] Bluetooth: hci8: command 0x0c1a tx timeout [ 1329.928492][T20474] Bluetooth: hci8: command 0x0c1a tx timeout [ 1335.447867][T23387] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3534'. [ 1335.782153][T23389] FAULT_INJECTION: forcing a failure. [ 1335.782153][T23389] name failslab, interval 1, probability 0, space 0, times 0 [ 1335.881585][T23389] CPU: 0 UID: 0 PID: 23389 Comm: syz.3.3536 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 1335.881630][T23389] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 1335.881642][T23389] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1335.881657][T23389] Call Trace: [ 1335.881665][T23389] [ 1335.881675][T23389] dump_stack_lvl+0x100/0x190 [ 1335.881716][T23389] should_fail_ex.cold+0x5/0xa [ 1335.881743][T23389] should_failslab+0xc2/0x120 [ 1335.881784][T23389] kmem_cache_alloc_node_noprof+0x81/0x6f0 [ 1335.881820][T23389] ? __alloc_skb+0x140/0x710 [ 1335.881849][T23389] __alloc_skb+0x140/0x710 [ 1335.881871][T23389] ? __alloc_skb+0x5b7/0x710 [ 1335.881893][T23389] ? __pfx___alloc_skb+0x10/0x10 [ 1335.881925][T23389] vhci_write+0xc1/0x490 [ 1335.881966][T23389] vfs_write+0x6ac/0x1070 [ 1335.882003][T23389] ? __pfx_vhci_write+0x10/0x10 [ 1335.882044][T23389] ? __pfx_vfs_write+0x10/0x10 [ 1335.882079][T23389] ? find_held_lock+0x2b/0x80 [ 1335.882135][T23389] ksys_write+0x12a/0x250 [ 1335.882171][T23389] ? __pfx_ksys_write+0x10/0x10 [ 1335.882215][T23389] do_syscall_64+0x106/0xf80 [ 1335.882241][T23389] ? clear_bhb_loop+0x40/0x90 [ 1335.882270][T23389] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1335.882296][T23389] RIP: 0033:0x7f38d459c629 [ 1335.882316][T23389] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1335.882341][T23389] RSP: 002b:00007f38d5543028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1335.882364][T23389] RAX: ffffffffffffffda RBX: 00007f38d4815fa0 RCX: 00007f38d459c629 [ 1335.882381][T23389] RDX: 000000000000000d RSI: 0000000000000000 RDI: 00000000000000ca [ 1335.882396][T23389] RBP: 00007f38d4632b39 R08: 0000000000000000 R09: 0000000000000000 [ 1335.882411][T23389] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1335.882426][T23389] R13: 00007f38d4816038 R14: 00007f38d4815fa0 R15: 00007ffd359d4f38 [ 1335.882456][T23389] [ 1338.657822][T23414] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(12) [ 1338.943889][T23421] futex_wake_op: syz.3.3543 tries to shift op by -2048; fix this program [ 1339.094932][T23427] netlink: 186 bytes leftover after parsing attributes in process `syz.3.3543'. [ 1341.409928][T23445] random: crng reseeded on system resumption [ 1344.676040][T23485] vhci_hcd vhci_hcd.1: invalid port number 37 [ 1344.820392][T23485] vhci_hcd vhci_hcd.1: default hub control req: 600d v002b i0025 l1 [ 1344.836605][T23492] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3558'. [ 1345.344030][T23492] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1345.481348][T23492] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1345.770903][T23492] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1345.870454][T23492] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1349.666611][T23559] netlink: 334 bytes leftover after parsing attributes in process `syz.7.3574'. [ 1349.764430][T23562] FAULT_INJECTION: forcing a failure. [ 1349.764430][T23562] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1349.880587][T23562] CPU: 0 UID: 0 PID: 23562 Comm: syz.7.3574 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 1349.880634][T23562] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 1349.880646][T23562] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1349.880665][T23562] Call Trace: [ 1349.880675][T23562] [ 1349.880685][T23562] dump_stack_lvl+0x100/0x190 [ 1349.880730][T23562] should_fail_ex.cold+0x5/0xa [ 1349.880758][T23562] get_futex_key+0x1d2/0x1620 [ 1349.880790][T23562] ? __pfx_get_futex_key+0x10/0x10 [ 1349.880817][T23562] ? futex_hash+0x2c5/0x380 [ 1349.880843][T23562] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 1349.880890][T23562] futex_wake+0xea/0x530 [ 1349.880926][T23562] ? __pfx_futex_wait+0x10/0x10 [ 1349.880962][T23562] ? __pfx_futex_wake+0x10/0x10 [ 1349.881004][T23562] ? __pfx___might_resched+0x10/0x10 [ 1349.881043][T23562] do_futex+0x32b/0x350 [ 1349.881073][T23562] ? __pfx_do_futex+0x10/0x10 [ 1349.881106][T23562] ? __pfx_aa_sk_perm+0x10/0x10 [ 1349.881145][T23562] __x64_sys_futex+0x34f/0x4d0 [ 1349.881179][T23562] ? __pfx___x64_sys_futex+0x10/0x10 [ 1349.881211][T23562] ? bpf_lsm_socket_listen+0x9/0x10 [ 1349.881242][T23562] ? security_socket_listen+0x76/0x210 [ 1349.881291][T23562] do_syscall_64+0x106/0xf80 [ 1349.881317][T23562] ? clear_bhb_loop+0x40/0x90 [ 1349.881348][T23562] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1349.881374][T23562] RIP: 0033:0x7f1b69d9c629 [ 1349.881398][T23562] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1349.881426][T23562] RSP: 002b:00007f1b67fd50e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1349.881451][T23562] RAX: ffffffffffffffda RBX: 00007f1b6a016098 RCX: 00007f1b69d9c629 [ 1349.881468][T23562] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f1b6a01609c [ 1349.881484][T23562] RBP: 00007f1b6a016090 R08: 0000000000000000 R09: 0000000000000000 [ 1349.881499][T23562] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 1349.881515][T23562] R13: 00007f1b6a016128 R14: 00007ffee92b2160 R15: 00007ffee92b2248 [ 1349.881545][T23562] [ 1351.900032][T23587] input: jJǸ-9%vJ86 as /devices/virtual/input/input42 [ 1355.144872][T19495] EXT4-fs (sda1): Delayed block allocation failed for inode 2027 at logical offset 1371 with max blocks 13 with error 117 [ 1355.207794][T19495] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1355.207794][T19495] [ 1356.227790][T23642] Invalid ELF header magic: != ELF [ 1359.014686][T23660] kexec: Could not allocate control_code_buffer [ 1359.959056][T23669] Page cache invalidation failure on direct I/O. Possible data corruption due to collision with buffered I/O! [ 1359.972672][T23678] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3597'. [ 1360.210342][T23669] File: /dev/nullb0 PID: 23669 Comm: syz.7.3596 [ 1360.324738][T23671] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.8.3597: iget: checksum invalid [ 1360.344051][ T31] INFO: task syz.0.3234:21815 blocked for more than 143 seconds. [ 1360.352090][ T31] Tainted: G U I L syzkaller #0 [ 1360.379144][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1360.396485][T23671] faux_driver regulatory: loading /lib/firmware/updates/syzkaller/regulatory.db failed with error -74 [ 1360.421552][ T31] task:syz.0.3234 state:D stack:27464 pid:21815 tgid:21809 ppid:16942 task_flags:0x400140 flags:0x00080002 [ 1360.449416][T23671] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.8.3597: iget: checksum invalid [ 1360.476689][ T31] Call Trace: [ 1360.486334][ T31] [ 1360.493093][T23671] faux_driver regulatory: loading /lib/firmware/updates/regulatory.db failed with error -74 [ 1360.516847][ T31] __schedule+0xfee/0x60e0 [ 1360.527737][ T31] ? __lock_acquire+0x4a5/0x2630 [ 1360.550805][ T31] ? __pfx___schedule+0x10/0x10 [ 1360.565666][ T31] ? find_held_lock+0x2b/0x80 [ 1360.573049][T23671] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.8.3597: iget: checksum invalid [ 1360.599474][ T31] ? schedule+0x2bf/0x390 [ 1360.617573][ T31] schedule+0xdd/0x390 [ 1360.632982][ T31] schedule_preempt_disabled+0x13/0x30 [ 1360.646536][T23671] faux_driver regulatory: loading /lib/firmware/syzkaller/regulatory.db failed with error -74 [ 1360.665670][ T31] __mutex_lock+0xc9a/0x1b90 [ 1360.681710][ T31] ? nfsd_nl_threads_set_doit+0x718/0xc60 [ 1360.699265][T23671] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.8.3597: iget: checksum invalid [ 1360.733455][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1360.738613][ T31] ? net_generic+0xea/0x2a0 [ 1360.753819][T23671] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -74 [ 1360.763464][ T31] ? net_generic+0xea/0x2a0 [ 1360.778286][ T31] ? nfsd_nl_threads_set_doit+0x718/0xc60 [ 1360.797538][T23671] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -74 [ 1360.809330][ T31] nfsd_nl_threads_set_doit+0x718/0xc60 [ 1360.836851][ T31] genl_family_rcv_msg_doit+0x214/0x300 [ 1360.855210][T23671] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 1360.871477][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1360.886461][ T31] ? genl_get_cmd+0x3ef/0x720 [ 1360.920159][ T31] ? bpf_lsm_capable+0x9/0x10 [ 1360.952200][ T31] ? security_capable+0x80/0x260 [ 1360.982496][ T31] genl_rcv_msg+0x560/0x800 [ 1361.007048][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1361.032334][ T31] ? __pfx_nfsd_nl_threads_set_doit+0x10/0x10 [ 1361.068059][ T31] netlink_rcv_skb+0x159/0x420 [ 1361.093979][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1361.117611][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1361.137931][ T31] ? netlink_deliver_tap+0x1ae/0xcc0 [ 1361.159014][ T31] genl_rcv+0x28/0x40 [ 1361.176036][ T31] netlink_unicast+0x5aa/0x870 [ 1361.195902][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 1361.209187][ T31] netlink_sendmsg+0x8b0/0xda0 [ 1361.225394][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1361.255596][ T31] ? __import_iovec+0x1d2/0x640 [ 1361.260571][ T31] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 1361.286105][ T31] ____sys_sendmsg+0xa54/0xc30 [ 1361.313795][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1361.321411][ T31] ? __pfx_futex_wake_mark+0x10/0x10 [ 1361.337224][ T31] ___sys_sendmsg+0x190/0x1e0 [ 1361.352958][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 1361.376202][ T31] __sys_sendmsg+0x170/0x220 [ 1361.393592][ T31] ? __pfx___sys_sendmsg+0x10/0x10 [ 1361.412662][ T31] ? __x64_sys_futex+0x34f/0x4d0 [ 1361.428929][ T31] do_syscall_64+0x106/0xf80 [ 1361.442408][ T31] ? clear_bhb_loop+0x40/0x90 [ 1361.457145][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1361.482001][ T31] RIP: 0033:0x7f55fb79c629 [ 1361.501846][ T31] RSP: 002b:00007f55fc57f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1361.530240][ T31] RAX: ffffffffffffffda RBX: 00007f55fba16270 RCX: 00007f55fb79c629 [ 1361.557196][ T31] RDX: 0000000000004000 RSI: 0000200000000480 RDI: 0000000000000005 [ 1361.582396][ T31] RBP: 00007f55fb832b39 R08: 0000000000000000 R09: 0000000000000000 [ 1361.616159][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1361.653987][ T31] R13: 00007f55fba16308 R14: 00007f55fba16270 R15: 00007ffc779105e8 [ 1361.668726][ T31] [ 1361.679683][ T31] [ 1361.679683][ T31] Showing all locks held in the system: [ 1361.733212][ T31] 1 lock held by khungtaskd/31: [ 1361.749857][ T31] #0: ffffffff8e7e9220 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 1361.785089][ T31] 1 lock held by syz-executor/18188: [ 1361.803215][ T31] 2 locks held by syz.1.2743/19448: [ 1361.834033][ T31] #0: ffffffff906bda30 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1361.848544][ T31] #1: ffffffff8ec58488 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x718/0xc60 [ 1361.869743][ T31] 2 locks held by syz.0.3234/21815: [ 1361.882468][ T31] #0: ffffffff906bda30 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1361.901432][ T31] #1: ffffffff8ec58488 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x718/0xc60 [ 1361.925138][ T31] 2 locks held by syz-executor/22012: [ 1361.941438][ T31] #0: ffff88807ec980e0 (&type->s_umount_key#54){++++}-{4:4}, at: deactivate_super+0xdf/0x110 [ 1361.968932][ T31] #1: ffffffff8ec58488 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 1361.990597][ T31] 2 locks held by syz.2.3340/22374: [ 1362.002648][ T31] #0: ffffffff906bda30 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1362.024813][ T31] #1: ffffffff8ec58488 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x718/0xc60 [ 1362.043895][ T31] 2 locks held by syz-executor/22526: [ 1362.059919][ T31] #0: ffff8880368ac0e0 (&type->s_umount_key#54){++++}-{4:4}, at: deactivate_super+0xdf/0x110 [ 1362.083875][ T31] #1: ffffffff8ec58488 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 1362.102455][ T31] 2 locks held by syz.4.3451/22948: [ 1362.115502][ T31] #0: ffffffff906bda30 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1362.136275][ T31] #1: ffffffff8ec58488 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x718/0xc60 [ 1362.159836][ T31] 2 locks held by getty/23034: [ 1362.171372][ T31] #0: ffff8880343460a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 1362.194255][ T31] #1: ffffc9000406c2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x1500 [ 1362.214213][ T31] [ 1362.220343][ T31] ============================================= [ 1362.220343][ T31] [ 1362.246772][ T31] NMI backtrace for cpu 0 [ 1362.246793][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G U I L syzkaller #0 PREEMPT(full) [ 1362.246842][ T31] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 1362.246853][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1362.246866][ T31] Call Trace: [ 1362.246873][ T31] [ 1362.246882][ T31] dump_stack_lvl+0x100/0x190 [ 1362.246918][ T31] nmi_cpu_backtrace.cold+0x12d/0x151 [ 1362.246955][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1362.246987][ T31] nmi_trigger_cpumask_backtrace+0x1d7/0x230 [ 1362.247024][ T31] sys_info+0x141/0x190 [ 1362.247051][ T31] watchdog+0xd25/0x1050 [ 1362.247079][ T31] ? __pfx_watchdog+0x10/0x10 [ 1362.247115][ T31] ? __kthread_parkme+0x18c/0x230 [ 1362.247142][ T31] ? kthread+0x13a/0x450 [ 1362.247168][ T31] ? __pfx_watchdog+0x10/0x10 [ 1362.247201][ T31] kthread+0x370/0x450 [ 1362.247233][ T31] ? __pfx_kthread+0x10/0x10 [ 1362.247263][ T31] ret_from_fork+0x754/0xd80 [ 1362.247296][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1362.247331][ T31] ? __switch_to+0x7b4/0x1120 [ 1362.247354][ T31] ? __pfx_kthread+0x10/0x10 [ 1362.247384][ T31] ret_from_fork_asm+0x1a/0x30 [ 1362.247421][ T31] [ 1362.404678][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 1362.417089][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1362.566069][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 1362.572967][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G U I L syzkaller #0 PREEMPT(full) [ 1362.583667][ T31] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 1362.591041][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1362.601103][ T31] Call Trace: [ 1362.604390][ T31] [ 1362.607326][ T31] dump_stack_lvl+0x100/0x190 [ 1362.612038][ T31] vpanic+0x552/0x970 [ 1362.616037][ T31] ? __pfx_vpanic+0x10/0x10 [ 1362.620595][ T31] ? nmi_trigger_cpumask_backtrace+0x182/0x230 [ 1362.626823][ T31] panic+0xd1/0xe0 [ 1362.630603][ T31] ? __pfx_panic+0x10/0x10 [ 1362.635056][ T31] ? nmi_trigger_cpumask_backtrace+0x1b5/0x230 [ 1362.641242][ T31] ? nmi_trigger_cpumask_backtrace+0x1f6/0x230 [ 1362.647456][ T31] ? nmi_trigger_cpumask_backtrace+0x200/0x230 [ 1362.653635][ T31] ? watchdog.cold+0x198/0x1ca [ 1362.658438][ T31] ? watchdog+0xd35/0x1050 [ 1362.662871][ T31] watchdog.cold+0x1a9/0x1ca [ 1362.667488][ T31] ? __pfx_watchdog+0x10/0x10 [ 1362.672198][ T31] ? __kthread_parkme+0x18c/0x230 [ 1362.677259][ T31] ? kthread+0x13a/0x450 [ 1362.681530][ T31] ? __pfx_watchdog+0x10/0x10 [ 1362.686252][ T31] kthread+0x370/0x450 [ 1362.690362][ T31] ? __pfx_kthread+0x10/0x10 [ 1362.694968][ T31] ret_from_fork+0x754/0xd80 [ 1362.699585][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1362.704720][ T31] ? __switch_to+0x7b4/0x1120 [ 1362.709407][ T31] ? __pfx_kthread+0x10/0x10 [ 1362.714015][ T31] ret_from_fork_asm+0x1a/0x30 [ 1362.718802][ T31] [ 1362.721905][ T31] Kernel Offset: disabled [ 1362.726260][ T31] Rebooting in 86400 seconds..